Annotation of www/plus.html, Revision 1.926
1.863 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.14 deraadt 2: <html>
3: <head>
1.424 deraadt 4: <title>OpenBSD-current changes</title>
1.728 horacio 5: <link rev="made" href="mailto:www@openbsd.org">
1.14 deraadt 6: <meta name="resource-type" content="document">
1.716 deraadt 7: <meta name="description" content="OpenBSD-current changes">
8: <meta name="keywords" content="openbsd,current,changes">
1.14 deraadt 9: <meta name="distribution" content="global">
1.903 miod 10: <meta name="copyright" content="This document copyright 1996-2004 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.728 horacio 13: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.14 deraadt 14:
1.828 jsyn 15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.64 downsj 16: <p>
1.915 deraadt 17: <h2><font color="#e00000">Changes made between OpenBSD 3.5 and OpenBSD-current</font></h2>
1.863 naddy 18: <hr>
1.14 deraadt 19:
20: <p>
1.823 jsyn 21: This is a partial list of the major machine-independent changes
1.602 aaron 22: (i.e., these are the changes people ask about most often). Port
1.29 deraadt 23: specific changes have also been made, and are sometimes mentioned
1.728 horacio 24: in the pages for the specific <a href="plat.html">platforms</a>.
1.14 deraadt 25:
1.17 deraadt 26: <p>
1.725 naddy 27: Changes to the <a href="ports.html">ports</a> collection are documented
1.747 naddy 28: <a href="portsplus/index.html">here</a>.
1.725 naddy 29:
30: <p>
1.863 naddy 31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.185 deraadt 32:
33: <p>
1.186 deraadt 34: <h3>
1.846 deraadt 35: For changes in other releases, click below:<br>
36: <a href="plus20.html">2.0</a>,
37: <a href="plus21.html">2.1</a>,
38: <a href="plus22.html">2.2</a>,
39: <a href="plus23.html">2.3</a>,
40: <a href="plus24.html">2.4</a>,
41: <a href="plus25.html">2.5</a>,
42: <a href="plus26.html">2.6</a>,
43: <a href="plus27.html">2.7</a>,
44: <a href="plus28.html">2.8</a>,
45: <a href="plus29.html">2.9</a>,
46: <a href="plus30.html">3.0</a>,
47: <a href="plus31.html">3.1</a>,
1.868 deraadt 48: <a href="plus32.html">3.2</a>,
1.889 david 49: <a href="plus33.html">3.3</a>,
1.916 david 50: <a href="plus34.html">3.4</a>,
1.915 deraadt 51: <a href="plus35.html">3.5</a>.
1.422 deraadt 52: <br>
1.186 deraadt 53: </h3>
54:
55: <p>
1.863 naddy 56: <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
1.925 deraadt 57: The following list sums up (almost) all the changes made up to May 29.
1.847 deraadt 58: <p>
59:
1.422 deraadt 60: <ul>
1.925 deraadt 61: <!-- ^ 20040530 -->
62: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a> multicast reception.
63: <li>Add a description field for network interfaces, accessible via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> command 'description' and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ioctl&sektion=2">ioctl(2)</a>s SIOC[GS]IFDESCR.
64: <li>Use library CRC32 routines instead of a local implementation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a>.
65: <li>Fix a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ccdconfig&sektion=8">ccdconfig(8)</a>.
66: <li>Remove multicast addresses and disable promiscuous mode when destroying a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> interface.
67: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> up and down commands work as expected for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> devices.
68: <li>Create a few more USB devices by default in MAKEDEV(8).
69: <!--- ^ 20040529 -->
70: <li>Clean up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> sense error logic and display. Based on NetBSD.
71: <li>Allow machine-dependent filesystem options to be passed for the root filesystem in src/distrib/miniroot.
72: <li>Remove the old package tools (src/usr.sbin/pkg_install) from the tree.
73: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> detect the absence of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> and tcpmd5 capabilities at runtime.
74: <li>More helpful boot-time display for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aac&sektion=4">aac(4)</a>.
75: <li>Fix a typo in umapfs' <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a> implementation.
76: <li>Backwards compatibility fixes in the hash functions, unbreaking <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skey&sektion=1">skey(1)</a> with sha1.
77: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> devices clonable.
78: <li>Make AFS <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=flock&sektion=2">flock(2)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fcntl&sektion=2">fcntl(2)</a> locks work on the local system.
79: <!-- ^ 20040528 -->
80: <li>Make accounting optional, with the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option (wait for it) ACCOUNTING.
81: <li>Allow login names longer than eight characters in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uucpd&sektion=8">uucpd(8)</a>.
82: <li>Fix a memory leak in a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> error path.
83: <li>When shutting the system down, finalise accounting before the VFS to avoid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=panic&sektion=9">panic(9)</a>s.
84: <li>Fix TCP corruption on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rl&sektion=4">rl(4)</a> cards.
85: <li>Much better rulefile parsing for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a>.
86: <li>Pool efficiency improvements:
87: <ul>
88: <li>Lower the default high watermark from UINT_MAX to 8 pages.
89: <li>Modify uvm_km_getpage() to take a waitok flag and use it instead of uvm_km_alloc_poolpage1() for both the default and nointr pool allocators.
90: <li>Use the default allocator for the mbuf and mbuf cluster pools.
91: </ul>
92: <!-- ^ 20040527 -->
93: <li>Correct a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=freeaddrinfo&sektion=3">freeaddrinfo(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
94: <li>Fix a NetBSD merge error in the TCP syncache, allowing IPv6 to use it.
95: <li>Fix fd leaks in a few <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> error paths.
96: <li>Call <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> contructors after setting up the debugger, similar to recent destructor changes.
97: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cu&sektion=1">cu(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&sektion=1">tip(1)</a>, if one process dies then kill the other ourselves.
98: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdate&sektion=8">rdate(8)</a> NTP mode, send a 64-bit random number as the 'current time' field, which the server copies back in its response. This avoids sending out the current system time, and makes it slightly harder for an attacker to send spoof replies on behalf of the real server.
99: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=_exit&sektion=2">_exit(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=3">exit(3)</a> in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> child process.
100: <!-- ^ 20040526 -->
101: <li>Include the hostname in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> memory-buffered entries.
102: <li>Since the per-arch _dl_bcopy() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> is in all cases a simple for loop and painstakingly optimised assembler, just use a single machine-independent version.
103: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> _dl_find_symbol() to return a pointer to the container object.
104: <li>Handle interface removals gracefully in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>, now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> wakes it up on interface detach.
105: <li>Wake up any <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>ing process when a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptor is closed.
106: <li>If a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>-monitored interface is detached, send any buffered packets up to userland.
107: <li>Scale the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a> timeout value correctly.
108: <li>Since ULLONG_MAX+1 == 0 mod ULLONG_MAX+1, let the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> sc_counter wrap around all by itself.
109: <!-- ^ 20040525 -->
110: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bktr&sektion=4">bktr(4)</a> fixes from NetBSD and FreeBSD.
111: <li>Move the addition of atexit destructors right to the end of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> setup (after the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> helper code) so they can be debugged.
112: <li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> is running under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1">ldd(1)</a>, exit earlier before a whole bunch of unnecessary setup gets done.
113: <li>Check ifp is valid before using it in carp_setroute(), avoiding a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=panic&sektion=9">panic(9)</a>.
114: <li>Helpfully, use the right function names in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> error messages.
115: <li>Fix multicast problems with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a>.
116: <li>Don't leak a socket in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a>.
117: <li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork1&sektion=9">fork1(9)</a> change due to compatibility problems.
118: <!-- ^ 20040524 -->
119: <li>New MaxAuthTries option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>.
120: <li>Allow the retval parameter to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork1&sektion=9">fork1(9)</a> to be NULL (as the manpage says) without causing a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=panic&sektion=9">panic(9)</a>.
121: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a>ify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>.
122: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gscsio&sektion=4">gscsio(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lmtemp&sektion=4">lmtemp(4)</a> I2C drivers.
123: <li>Add I2C framework (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iic&sektion=4">iic(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iic&sektion=9">iic(9)</a>) based on that in NetBSD and enable on i386.
124: <li>Fix a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stat&sektion=2">stat(2)</a>-then-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=open&sektion=2">open(2)</a> race in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> when checking the policy file for root-only permissions.
125: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecadm&sektion=8">ipsecadm(8)</a> delete tcpmd5 SAs.
126: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecadm&sektion=8">ipsecadm(8)</a> so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> can be used.
127: <li><font color="#e00000"><strong>SECURITY FIX: With the introduction of IPv6 code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a>, one test on the 'requestPort' resource was deleted by accident.</strong></font> This makes xdm create the chooser socket even if XDMCP is disabled in xdm-config, by setting requestPort to 0. See <a href="http://bugs.xfree86.org/show_bug.cgi?id=1376">XFree86 bugzilla</a> for details.<br>
128: <a href="errata.html#xdm">A source code patch is available</a>.<br>
129: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
130: <li>Fix a boot-time crasher in ahd(4).
131: <li>Add (to i386 and amd64) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ehci&sektion=4">ehci(4)</a>, a USB Enhanced Host Controller Interface driver, for USB 2.0 support.
132: <li>Finally implement StackGhost buffer overflow exploit protection on sparc.
133: <li>Correct a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splx&sektion=9">splx(9)</a> in an igmp_joingroup() error path.
134: <li>Fix VFS corruption (due to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>) on i386 by out-of-lining the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spl&sektion=9">spl(9)</a> functions.
135: <!-- ^ 20040523 -->
136: <li>Fix size_t != off_t truncation in ahd(4).
137: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>'s disk columns wide enough to show transfer numbers for modern disks without writing into the next column.
138: <!-- ^ 20040522 -->
139: <li>Change the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> anchor path component separator from ':' to '/'. <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> now requires any anchor spec containing the separator to be in quotes.
140: <li>Make /root/.klogin optional in /etc/mtree/special.
141: <li>Import and merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> version 6.1.
142: <li>Support RFC2796 Route Reflection in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, removing the need for an IBGP mesh.
143: <li>Add support for dynamic network announcements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>.
144: <li>Don't rely on ifp's validity when setting a floor on the TCP MSS in ip_input.c.
145: <li>Allow an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> user to cancel a port forward (OpenSSH bugzilla #756).
146: <li>Do a better job of copying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> relative anchor paths out to userland.
147: <li>Use the new DLT_PPP_ETHER datalink type to print <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a> frames in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
148: <!-- ^ 20040521 -->
149: <li>Use the right buffer size for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> in libreadline.
150: <li>Zero the ifreq structure before use when fetching interface info in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
151: <li>Fix a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
152: <li>Start work on adding the ahd(4) Adaptec PCI/PCI-X Ultra320 SCSI driver from FreeBSD.
153: <!-- ^ 20040520 -->
154: <li>Enable the fancy new i386 pagezero code by not resetting it to its old value after setting it up.
155: <li>Allow anchors within anchors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>. More work to come.
156: <li>Don't recursively call nd6_output() when route allocation fails, just return a host unreachable error.
157: <li><font color="#e00000"><strong>SECURITY FIX: A heap overflow in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server has been discovered that can be exploted by clients sending malformed requests.</strong></font> These clients can then run arbitrary code with the same privileges as the CVS server program.<br>
158: <a href="errata.html#cvs2">A source code patch is available</a>.<br>
159: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
160: <li>Allow symbolic service- and protocol names in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, so e.g. "Protocol=tcp" now works.
1.926 ! deraadt 161: <li><font color="#e00000"><strong>SECURITY FIX: A flaw in the Kerberos V <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&sektion=8">kdc(8)</a> server could result in the administrator of a Kerberos realm having the ability to impersonate any principal in any other realm which has established a cross-realm trust with their realm.</strong></font> The flaw is due to inadequate checking of the "transited" field in a Kerberos request. For more details see <a href="http://www.pdc.kth.se/heimdal/advisory/2004-04-01/">Heimdal's announcement</a>.<br>
! 162: <a href="errata.html#kerberos">A source code patch is available</a>.<br>
1.925 deraadt 163: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
164: <li>Add word boundary tests to the regexes that find @-commands in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc. packing lists.
165: <li>Fix SIGINT handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>.
166: <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> to version 4.09.
167: <li>Updates to aic79xx code from FreeBSD in preparation for the upcoming ahd(4) driver.
168: <!-- ^ 20040519 -->
169: <li>Stop some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> devices creating PCI errors in 10Mbps mode by disabling 'dynamic standby mode' in the EEPROM. From NetBSD.
170: <li>Handle CRC errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>.
171: <li>Fix a ssize_t != int overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdate&sektion=8">rdate(8)</a>'s NTP code.
172: <li>Generate /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ttys&sektion=5">ttys(5)</a> entries for all available <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices, now that more are available.
173: <li>Fix a missing initialisation in ISA <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ie&sektion=4&arch=i386">ie(4)</a>.
174: <li>Remove trailer encapsulation support from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>.
175: <li>Fix a reference counting bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> DIOCCHANGERULE.
176: <li>Fix a buffer overrun in ip_output() (FreeBSD PR#66386).
177: <li>Don't leak a mount structure when handling mount errors in nullfs.
178: <li>ANSIfy src/libc/gen/*.
179: <!-- ^ 20040518 -->
180: <li>Merge new binutils, fix local differences, and enable on arm.
181: <li>Import GNU binutils 2.14, minus testsuites, infodocs and I18N files.
182: <li>Bump the default data size to 75MB from 64MB, so that XF4 can be built on amd64 with the imminent binutils upgrade without changing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a>.
183: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> about the b.out (i960) binary format. From NetBSD.
184: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>, make sure the return code gets initialised (pfsync_request_update()).
185: <li>Add basic COMMUNITIES attribute support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s filter language.
186: <li>Update libiberty's floatformat.[ch] to those from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> 6.1.
187: <!-- ^ 20040517 -->
188: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> mod_rewrite and mod_ssl, cleaning up surrounding code in the latter on the way.
189: <li>Remove the now-unused <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> pidfile stuff from /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>.
190: <li>Add a separate link type, DLT_PPP_ETHER, for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a> frames. From NetBSD.
191: <li>Don't skip the graceful shutdown of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> just because the system is being powered down.
1.923 deraadt 192: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> backs off because of physical interface problems, advertise this fact immediately instead of waiting for the next scheduled announcement.
193: <!-- ^ 20050416 -->
194: <li>Add a workaround in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> for the recent multipath routing changes.
195: <li>Fix a two-byte buffer overflow when printing sockaddr structs of unknown type in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>.
196: <li>Correct error output for bad limit modifiers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>.
197: <!-- ^ 20050415 -->
1.925 deraadt 198: <li>Fix a reference-counting bug in fifofs that could cause certain non-blocking FIFO users (e.g. qmail) to consume 100% cpu.<br>
199: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.923 deraadt 200: <li>Interpret <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecadm&sektion=8">ipsecadm(8)</a> cpi and spi parameters as hex even if not preceded by '0x'.
201: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a> server mode by not doing the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=8">chroot(8)</a>.
202: <li>Use a nointr <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a> instead of generic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> for pathname storage when doing name-to-inode lookups.
203: <!-- ^ 20040514 -->
204: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> dump status information to stderr on receipt of SIGINFO if running in quiet (-q) mode.
1.924 deraadt 205: <li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> shell to be overloaded by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a> like the manpage says.
1.923 deraadt 206: <li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> socket close-on-exec.
207: <li>Arrange for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> to check both cron and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> databases for jobs if the newly-non-blocking cron socket returns EAGAIN.
208: <li>Display the right fields in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> parser.
209: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> backoff work properly by heeding the raised advskew on received as well as sent packets.
210: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>'s lease file handling work under the chroot.
211: <li>Add some new configuration functionality to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s FIFO interface.
212: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> interfaces to be destroyed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>.
213: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> examples in /etc/systrace (PR#3748).
214: <li>Better <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> sense display.
215: <!-- ^ 20040513 -->
216: <li>Replace the hand-crafted expr() parser in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> with a standard <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lex&sektion=1">lex(1)</a>-and-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=yacc&sektion=1">yacc(1)</a> combo. Easier to work on, and more standards compliant too.
217: <li>Fix msdosfs on 64-bit systems.
218: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> breakage caused by the new multipath routing code.
219: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_passwd&sektion=8">login_passwd(8)</a> setuid root again, it's needed for 'secure' YP maps.
220: <li>Call <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tzset&sektion=3">tzset(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
221: <!-- ^ 20040512 -->
222: <li>Don't print the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> version if the helpfile is missing.
223: <li>Build <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> with -D_FFR_QUEUERETURN_DSN, allowing faster expiration of spam bounces.
224: <li>Unbreak checksum generation when using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> scrub random-id.
225: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> routing loop detection so that visiting a packet more than four times is an error, instead of more than once.
226: <li>Don't abort <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lint&sektion=1">lint(1)</a> because a child process fails, just move onto the next file.
227: <!-- ^ 20040511 -->
228: <li>When doing user mounts, inherit the MNT_NOEXEC flag from the mount point. This stops users bypassing noexec by null-mounting the filesystem on top of itself.
229: <li>Filter and lock <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rbootd&sektion=8">rbootd(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptor before dropping privileges.
230: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chsh&sektion=1">chsh(1)</a> after the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pw_copy&sektion=3">pw_copy(3)</a> changes.
231: <li>Import and merge GNU readline 4.3p5.
232: <li>Double <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>'s command line buffer size to 2K.
233: <li>Allow the banner page to be turned off by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a>.
234: <li>Add /usr/local/sbin to root's .cshrc, and move /usr/X11R6/bin before /usr/local/{bin,sbin} for both <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>.
235: <li>Remove a bunch of #ifdef ISO and #ifdef notyet crud from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfsd&sektion=8">nfsd(8)</a>.
236: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lint&sektion=1">lint(1)</a> understand the 'long long' type.
237: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>'s accept socket non-blocking.
238: <li>Clobber the 'clobber' command in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mail&sektion=1">mail(1)</a>.
239: <li>When <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> adds a new group, place it before the first '+' entry if one exists (part of a fix for PR#3727).
240: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a>-ify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecadm&sektion=8">ipsecadm(8)</a> and add some more integer value checks.
241: <!-- ^ 20040510 -->
1.925 deraadt 242: <li>Properly initialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> advskew for values greater than 240.<br>
243: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.923 deraadt 244: <li>Remove unused variables in several programs on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lint&sektion=1">lint(1)</a>'s say-so.
245: <li>Use the freshly-generated MD5 digest for the SSH1 session ID instead of random stack garbage.
246: <li>Fix a null deref panic in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> TCP normaliser.
247: <!-- ^ 20040509 -->
248: <li>Swap <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awk&sektion=1">awk(1)</a> unless the user sets the seed, in which case swap <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=random&sektion=3">random(3)</a> for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a>.
249: <li>Add a reference count for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptors, and don't free resources until processes sleeping on a descriptor have been woken up.
250: <li>Use a locked, filtered <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptor in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
251: <li>Replace <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a> with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>, unless the user sets the random seed manually in which case rand() is still used.
252: <li>Allow manually-keyed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> AH in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
253: <li>Initialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ed&sektion=1">ed(1)</a>'s crypto using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a>.
254: <li>Fix a few memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=regex&sektion=3">regex(3)</a>.
255: <li>Resolve hostnames in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd.conf&sektion=5">dhcpd.conf(5)</a> at parse time (PR#3771).
256: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> back off on other interfaces on IP output errors until reliable delivery is restored.
257: <li>Use the right packet length in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> parser.
258: <!-- ^ 20040508 -->
259: <li>Enable 802.1q long packets for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vlan&sektion=4">vlan(4)</a> support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> on cardbus.
260: <li>Don't allow command substitution characters in the environment variables passed through to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>.
261: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a> drop privileges and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to the cache directory.
262: <li>Make the -w option work the same for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s regex and fast paths.
263: <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysconf&sektion=3">sysconf(3)</a> values _SC_SEM_NSEMS_MAX and _SC_SEM_VALUE_MAX.
264: <li>Fix sizeof(pointer) bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amd&sektion=8">amd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>.
265: <li>Add a fast path for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fgrep&sektion=1">fgrep(1)</a> and fix the -w option.
266: <li>Replace the kernel's RSA-derived MD5 implementation with code derived from Colin Plumb's PD version.
267: <li>Add a filter option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> to dump prefixes learned via UPDATEs into a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table.
268: <li>Big FFS softdep merge with FreeBSD, fixing a number of bugs.
269: <!-- ^ 20040507 -->
270: <li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> cleaning in the X server.
271: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> doing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fseek&sektion=3">fseek(3)</a> on stdin if it's a terminal.
272: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> treat a '^H' character as non-binary.
273: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> work with half-bridge ADSL routers that don't provide a real default gateway (PR#3747).
274: <li>Apply The Process to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>: Create a filtered and locked <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptor, drop privileges and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty.
275: <li>New _afs and _ppp users for privilege separation.
276: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> capability negotiation bugs and speed it up when working with picky peers.
277: <li>Increase <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s socket buffer size to 64KB iff <!-- iff is not a typo --> IPsec or md5sig is in use.
278: <li>Fix a race condition in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> when a session is closed but there are updates in the buffer.
279: <li>Add strchr() and strrchr() to libkern.
280: <!-- ^ 20040506 -->
281: <li><font color="#e00000"><strong>SECURITY FIX: Check for integer overflow in procfs.</strong></font> Use of procfs is not recommended.<br>
282: <a href="errata.html#procfs">A source code patch is available</a>.<br>
283: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
284: <li>When a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> scrub rule with the 'reassemble tcp' option is in effect, use RFC1913 PAWS as a means of extending the TCP sequence space by 10 to 18 bits. This makes blind insertion attacks much more difficult, because the timestamp needs to be guessed as well as the TCP sequence number.
285: <li>Sprinkle <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a> liberally all over <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>.
286: <li>Match the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sha2&sektion=3">sha2(3)</a> functions up with the other hash types.
287: <li>Add a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> write filter to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> and lock the descriptor.
288: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tzset&sektion=3">tzset(3)</a> before chrooting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>.
289: <li>Create the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> privsep child before opening <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>, creating the routing socket and opening the lease file.
290: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>, keep statistics for suffix transformations.
291: <!-- ^ 20040505 -->
292: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bootpd&sektion=8">bootpd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bootpef&sektion=8">bootpef(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bootpgw&sektion=8">bootpgw(8)</a> from the tree, their functionality is present in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> and friends nowadays.
293: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&sektion=1">nm(1)</a> about ELF .plt*, .got*, .init and .fini sections.
294: <li>The TCP-specific route metrics are rarely used, so use a trimmed down version in the kernel (struct rt_kmetrics) and fake up a full-fat struct rt_metrics on demand for userland compatility.
295: <li>Apply bridge filter rules to frames destined for the local machine, so a single-interface bridge can do filtering and tagging.
296: <li>Add privilege separation to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>.
297: <li>Create /var/empty on the installer miniroot so some futuristic pie-in-the-sky privilege-separated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> can work.
298: <!-- ^ 20040504 -->
299: <li>Convert <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> to use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a>.
300: <li>Add COMPAT_35 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option for kernel binary compatibility with OpenBSD 3.5
301: <li>Add *Pad (do padding like *Final without finishing) and *FileChunk (digest a portion of a file) functions for each of the hash types in libc.
302: <li>Tweak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndbm&sektion=3">ndbm(3)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=semop&sektion=2">semop(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=shmget&sektion=2">shmget(2)</a> to match POSIX. Since this is an API change, crank libc's and libpthread's major version.
303: <li>Define bsd_signal(3) as required by XPG. Of course, it's just an alias for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signal&sektion=3">signal(3)</a> here.
304: <li>New stdlib function <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a>, a safe replacement for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atoi&sektion=3">atoi(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtol&sektion=3">strtol(3)</a> etc.
305: <li>Clean up properly if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> PCMCIA attachment fails.
306: <li>Remove OpenBSD/pegasos. See the mailing list archives for some very good reasons why.
307: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>'s crontab socket non-blocking.
308: <li>When setting PROT_NONE with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mprotect&sektion=2">mprotect(2)</a> on a wired entry, decrement the wired count and stop ntpd causing a panic (PR#3758).<br>
309: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
310: <li>Some more fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strerror&sektion=3">strerror(3)</a>. Everything now goes via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strerror_r&sektion=3">strerror_r(3)</a>.
311: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cksum&sektion=1">cksum(1)</a> a link (in /bin) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a> and remove the old program.
312: <li>Add support for cksum (three flavours), md4, sha256, sha384 and sha512 to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a>.
313: <!-- ^ 20040502 -->
314: <li>Fix a call to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=disk_unbusy&sektion=9">disk_unbusy(9)</a> that lacked the third argument.
315: <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthread_suspend_all_np&sektion=3">pthread_suspend_all_np(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthread_resume_all_np&sektion=3">pthread_resume_all_np(3)</a>, needed by the Java HotSpot compiler. From FreeBSD.
316: <li>Fix the fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strerror&sektion=3">strerror(3)</a>.
317: <li>Do privilege revocation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rbootd&sektion=8">rbootd(8)</a>.
318: <li>Fix a bug that could cause <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> to lock up for 15 seconds under heavy load.<br>
319: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
320: <!-- ^ 20040501 -->
321: <li>Add _rbootd privilege separation/revocation user for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rbootd&sektion=8">rbootd(8)</a>.
322: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to be built in a kernel without <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>.
323: <li>Start the 3.5-stable branch.
324: <li>Fix non-reentrancy and other bad stuff in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strerror&sektion=3">strerror(3)</a>.
325: <!-- ^ 20040530 -->
326: <li>Check <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> payload lengths more carefully.
327: <li>Speedups and cleanups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md4&sektion=3">md4(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=3">md5(3)</a>.
328: <li>Fix alignment problems when copying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sha2&sektion=3">sha2(3)</a>'s data pointer around.
329: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&sektion=1">nm(1)</a> report empty a.out objects as having "no name list" instead of accusing them of having "bad format".
330: <!-- ^ 20040529 -->
331: <li>Replace the old RSA Data Security Inc. implementations of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md4&sektion=3">md4(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=3">md5(3)</a> with code derived from Colin Plumb's public domain MD5 implementation.
332: <li>Wire <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdrop&sektion=8">tcpdrop(8)</a> into the build.
333: <li>Fix a null-dereference crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
334: <li>Fix file descriptor leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.rusersd&sektion=8">rpc.rusersd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftpd&sektion=8">tftpd(8)</a>.
335: <li>Remove the old ISC DHCP code from the tree, much to Henning's delight.
336: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a>, allow the PAGER environment variable to contain spaces.
337: <li>Update libevent to 0.8 + local changes.
338: <!-- XXX wtf Wed Apr 28 06:50:21 UTC 2004 usr.sbin/pkg_add/OpenBSD PackingList.pm -->
339: <li>Add some Zebra bug compatibility into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s capabilities announcements.
340: <li>Put the IP addresses of users authenticated by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> into the <authpf-users> table.
341: <li>Support AH as well as ESP flows for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> IPsec.
342: <li>Fix a bogus return statement in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables code when dealing with non-IP packets.
343: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> peers to request route refreshes.
344: <li>Keep track of SAs inserted by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, making it easier to remove them later.
345: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> return-rst work on pure bridges.
346: <li>Remove the assumption, found in a number of places in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, that af !=INET6 implies af==AF_INET.
347: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> print <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> packets as carp, and not VRRP.
348: <li>Some fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> statistics counters.
349: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> sensitive to its physical interface: If the physical interface drops, so does the carp interface; and have all other carp interfaces back off (i.e. don't preempt, and set high advskew) so this host is unlikely to stay as master.
350: <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>.
351: <!-- ^ 20040428 -->
352: <li>Generate an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> host key in /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>, just like the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> host keys.
353: <li>Add IKE to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s IPsec support.
354: <li>Exit gracefully from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> with the -vvsq option if no queues are in use.
355: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> pass a valid pointer as the fourth argument to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
356: <li>Add back a couple of missing break statements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, unbreaking tcpmd5.
357: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s normaliser check that a TCP RST has exactly the right sequence number. The check only works when we're doing full fragment reassembly.
358: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecadm&sektion=8">ipsecadm(8)</a> looping forever when displaying zero-sized extensions.
359: <li>Allow only BGP traffic over the IPsec flows set up by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
360: <li>A number of quad fixes in libc.
361: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> to pass specified environment variables from client to server (OpenSSH bugzilla #815).
362: <li>Support RFC2918 "Route Refresh Capability for BGP-4" in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
363: <li>Fix incomplete removal of altq when loading a new rulebase that doesn't contain altq rules.
364: <!-- ^ 20040427 -->
365: <li>New program <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdrop&sektion=8">tcpdrop(8)</a> that uses the sysctl interface to drop TCP connections. Not built by default yet.
366: <li>Add a -n (no name lookup) flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=1">systat(1)</a>.
367: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a>'s readability detection for NFS filehandles (PR#3757). Broken in the change to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> backends, fix from UFS code.
368: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, clear the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> hints structure before use.
369: <li>Break an infinite recursion between tcp_output() and tcp_mtudisc() when the TCP MSS gets to be larger then the interface MTU. Connections will still stall, however.
370: <li>Allow TCP MSS below the failsafe 216 iff <!-- 'iff' is not a typo --> the interface MTU is less than 256.
371: <li>Back out (for now) the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> buffer allocation increase (though not the deferred allocation) as it breaks older cards.
372: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> to send mail to logins containing an underscore character.
373: <li>Add direct support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> between peers. Manual keying only for now.
374: <li>Much stricter checking of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> code, preventing arbitrary reads and writes of kernel memory.<br>
375: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
376: <li>Allocate more buffers for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> cards, but defer that allocation until <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> up and remove it on interface shutdown.
377: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>'s display of the gateway when set using an explicit -gateway modifier.
378: <li>When IF_INPUT_ENQUEUE() queues an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> with a cluster, check to see if the data in the cluster will fit into the mbuf and if so, copy the data and deallocate the cluster.
379: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a>, permanently allocate only the minimum number of buffers. Allocate and deallocate receive buffers when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> brings the interface up and down respectively.
380: <li>Bandwidth checking fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altq&sektion=9">altq(9)</a>. Now a bandwidth of zero is allowed, producing a blackhole queue for CBQ and a realtime-only queue for HFSC.
381: <li>Add some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=htonl&sektion=3">htonl(3)</a> paranoia around <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=9">arc4random(9)</a> calls in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, so that biases in the PRNG won't leak the firewall's byte order.
382: <li>Fix corruption of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s address pools when using more than 256 rules.<br>
383: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
384: <li>In /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>, check that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> interfaces really exist before attempting to bring them down at shutdown time.
385: <li>Start work on peer-to-peer IPsec support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
386: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> announce RFC2858 multiprotocol capabilities. Only IPv4 multicast is supported for now.
387: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> prefer older (more stable) routes before resorting to comparison of BGP IDs and peer IP addresses.
388: <li>Add a reference count for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> anchor rules.
1.921 deraadt 389: <!-- ^ 20040426 -->
390: <li>Since <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isprint&sektion=3">isprint(3)</a> doesn't consider all whitespace printable, also use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isspace&sektion=3">isspace(3)</a> for the binary file test in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>.
391: <li>Fix float -> quad conversion in libc.
1.922 henning 392: <li>Prettier output from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>.
1.921 deraadt 393: <li>Permit multiple default routes.
394: <li>A few more unionfs fixes.
395: <li>Respect access rights on a union filesystem (PR#745).
396: <li>Add a few pieces missed in the merge of OpenSSL 0.9.7d.
397: <li>Add input queue congestion flag support to a few interfaces that can't use the new IF_INPUT_ENQUEUE macro.
1.923 deraadt 398: <li>Prevent an endless loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> with 'route-to lo0' rules (PR#3736).<br>
399: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.921 deraadt 400: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> run <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> to change the rulebase instead of sucking in code from pfctl and doing it itself.
401: <li>Set MINCLSIZE back to its smaller pre-KAME IPv6 value, so now clusters will be used more often.
402: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>, purge only a specific expired state instead of doing an expensive purge all expired states while running at a high <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spl&sektion=9">spl(9)</a>.
403: <li>Make sure the local address and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> neighbor address are of the same address family.
404: <li>Use '|' instead of ':' as the field separator for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> database keys, in preparation for future IPv6 support.
405: <li>Fix a potential null dereference in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> application utility code.
406: <!-- sbreserve() sb_mbmax -->
407: <li>Give <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a> a local copy of the radix tree code, so it doesn't get (re)broken by net/radix.c changes.
408: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> S/MIME work again.
409: <li>Add 'neighbor cloning' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, allowing a configuration to be specified for a network/prefixlength pair as well as the peer IP address. The configuration is cloned for each new peer in the given address range.
1.923 deraadt 410: <li>Add tcpdrop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>, allowing a userland program terminate a TCP connection.
1.921 deraadt 411: <li>Some string cleaning in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a>.
412: <li>Fix a missing return statement in in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s control connection error path.
413: <li>Add multipath support to the radix tree, allowing multiple routes to a single destination (though it won't actually get you anywhere just yet). From KAME.
414: <li>Send <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> packets for IPv6 protocols other than TCP, UDP and ICMP.
415: <li>Sync kernel radix tree code with 4.4BSD-Lite2 via NetBSD.
416: <li>Don't add a PF_GENERATED tag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> synproxy generated packets for the second handshake, so they can match rules (and create state) on another interface.
417: <!-- ^ 20040425 -->
418: <li>Add a 'probability' modifier for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rules, setting the likelihood with which a rule will trigger.
419: <li>Greatly simplify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>'s hostname/address lookup code.
420: <li>Since OpenBSD has <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openpty&sektion=3">openpty(3)</a>, we may as well have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a> use it.
421: <li>Initial support for IPv6 transport in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
422: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> config files to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=changelist&sektion=5">changelist(5)</a> and /etc/mtree/special.
423: <li>Some additional TCP option length paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s normaliser.
424: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> display the new tcps.rcvacktooold statistic counter.
425: <li>Sync <tree.h> with Niels Provos' version to get rid of a compiler warning for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=RB_NEXT&sektion=3">RB_NEXT(3)</a>.
426: <!-- ^ 20040424 -->
427: <li>Port the gcc2 bounds checking support to gcc3, enabled with -Wbounded (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>).
428: <li>Add some CMSG_ macros to get proper alignment in portalfs. From NetBSD.
429: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, make sure the KEY_LENGTH attribute is present when checking AES proposals as this is required when acting as responder to SafeNet peers.
430: <li>Silence <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> errors in the privileged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> process.
431: <li>Don't display rubbish on the first output line from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>, wait for the stats to stabilise.
432: <!-- ^ 20040423 -->
433: <li>Fix the calculation of a raw IPv6 UDP packet's checksum.
434: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>'s ping probes, just use the pid for the ICMP id like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> does, instead of some architecture-dependent wierdness.
435: <!-- ^ 20040422 -->
436: <li>Merge in new Omron LUNA port (luna88k), based on OpenBSD/mvme88k, NetBSD/luna68k and CMU Mach.
437: <li>As with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>, set a write filter and lock the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptor before privilege drop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>.
438: <!-- ^ 20040421 -->
439: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pw_copy&sektion=3">pw_copy(3)</a> to take the old entry as an additional parameter, allowing both a change of username and a check that the file hasn't changed since it was last read (fixes PR#3698). Adapted from FreeBSD.
440: <li>Set a write filter and lock <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> file descriptor before dropping privileges.
441: <li>Drop the port-changing options in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a> too, always use standard ports.
442: <li>New TCP stat counter tcps.rcvacktooold, counts the number of times we drop very old ACK packets when the sequence number isn't exactly right.
443: <li>Set the km_page allocator's low watermark to a value that allows the system to boot.
444: <li>Switch the build over to the new, improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>.
445: <li>Remove the -p (listen port) option of new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>.
446: <!-- ^ 20040420 -->
447: <li>Bump the default kern.maxclusters to a value high enough to deter all but the most determined tweakers.
448: <li>Remove the GATEWAY <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option now that both IP forwarding and mbuf cluster allocation are configurable using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>.
449: <li>Introduce a new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> kern.maxclusters controlling (oddly enough) the maximum number of mbuf clusters. This deprecates the much-abused NMBCLUSTERS <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option.
450: <li>Use the km_page allocator as the backend for the mbuf and mbuf cluster pools.
451: <li>New km_page <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a> allocator running in an interrupt-safe kernel thread (kmthread).
452: <li>Resource starvation checks for sockets:
453: <ul>
454: <li>Check the level of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> cluster utilisation when doing an accepting a listen socket, and fail if usage is greater than 95% of the hard limit.
455: <li>New API sbcheckreserve() returns ENOBUFS if more than 50% of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> clusters are in use
456: <li>Use sbcheckreserve() when accepting a connection, and on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setsockopt&sektion=2">setsockopt(2)</a> for SO_SNDBUF and SND_RCVBUF, and allocate minimal buffers in in low-memory situations.
457: </ul>
458: <li>Stop propolice tripping an assert in gcc3.
459: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> display an error if it can't open the /var/db/spamd database for writing, and return a proper error code.
460: <li>Cure the angst in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> caused by the non-existence of the /nonexistent directory.
461: <li>Correct new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>'s handling of very long lease times (PR#2888).
462: <li>Fix a propolice bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> and unbreak MySQL (mysql bug id 1442).
463: <!-- ^ 20040419 -->
464: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> perform strict permission checks on ~/.ssh/config files and abort unless they're correct.
465: <li>If kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> and/or <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> processing is disabled by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>, pass any packets through as raw IP to give userland a chance to handle them.
466: <li>Sync the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> driver with FreeBSD.
467: <li>Tidy up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a> kernel configs in line with recent i386 changes.
1.923 deraadt 468: <li><font color="#e00000"><strong>RELIABILITY FIX: Restore the ability to negotiate tags/wide/sync with some SCSI controllers</strong></font> (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trm&sektion=4">trm(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iha&sektion=4">iha(4)</a>).<br>
469: <a href="errata.html#scsi">A source code patch is available</a>.<br>
470: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.921 deraadt 471: <li>Since <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> can now be invoked legitimately without an interface, don't abort when the user doesn't give any options.
472: <!-- ^ 20040418 -->
473: <li>New _tftpd user and group.
474: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_pullup2&sektion=9">m_pullup2(9)</a> copies the M_CLUSTER flag when it creates a new mbuf (PR#3740).
1.920 deraadt 475: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> block unconditionally when the input queue congestion flag is set, instead of doing CPU-intensive rule tests.
476: <li>If an interface input queue becomes full, set a new congestion flag in the queue structure. Since a full queue usually indicates processing overload, this flag can be used to allow other subsystems to cooperate in easing the situation.
477: <!-- ^ 20040417 -->
478: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> show the number of mbuf clusters in use rather than the number of pages.
1.923 deraadt 479: <li>Fix a ufs directory-related panic (PR#3672). Fix from FreeBSD.<br>
480: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.920 deraadt 481: <li>Have the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server check for attempts by a client to walk up the directory tree illegally.
1.923 deraadt 482: <li>Undo a non-fix in shared memory <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> kern.shminfo.shmmni.<br>
483: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
484: <font color="#e00000"><strong>SECURITY FIX: Pathname validation problems have been found in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a></strong></font>, allowing malicious clients to create files outside the repository, allowing malicious servers to overwrite files outside the local CVS tree on the client and allowing clients to check out files outside the CVS repository.<br>
485: <a href="errata.html#cvs">A source code patch is available</a>.<br>
486: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.920 deraadt 487: <li>Some address family agnosticism in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
488: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a> show IPv6 peer addresses in neighbour view.
489: <!-- ^ 20040416 -->
490: <li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> doesn't need to continuously reopen the leases file for writing, have it <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop privileges after starting up.
491: <li>Only open the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> leases file once instead of every time it needs to be written.
492: <li>Set up new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> listen filter for the right port.
493: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a> do a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop its privileges.
494: <li>Massive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9">style(9)</a> application to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
495: <li>Stop another instance of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> from unlinking a socket that's in use.
496: <li>TCP packets are now allowed to have IPv4 options.
497: <li>Begin work of separating binary emulation type from the executable file format.
498: <!-- ^ 20040415 -->
499: <li>New user and group _mopd, for some obscure reason related to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
500: <li>Enable all supported USB devices in the i386 GENERIC config.
501: <li>Pass the jobname to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a>'s input filter via the -j option, some filters need it.
502: <li>When the syncache aborts a connection, don't set an ACK in the RST packet.
503: <li>Add entries for all supported USB devices to the GENERIC config on sparc64.
504: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a>, add cases for sha2 algorithms in swcr_authcompute().
505: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=1">systat(1)</a> screen updates after resuming from a ^Z.
506: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> antispoof rules work with dynamic interfaces.
1.923 deraadt 507: <li>Match on all characters of the interface name in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> parser.<br>
508: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.920 deraadt 509: <li>Make sure privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> transitions into STATE_RUN even when writing to stdout with '-w -'.
510: <li>Implement AI_NUMERICSERV (from RFC3493) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
511: <li>Since the UDP checksum in mandatory in IPv6, drop any input packets where it's absent and make sure it's set even for error output.
512: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> cleanup:
513: <ul>
514: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>.
515: <li>Remove pidfile code.
516: <li>Steal some already-sanitised code from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>.
517: <li>Remove code to handle network access methods we don't care about, only <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> is necessary here.
518: </ul>
519: <!-- ^ 20040414 -->
520: <li>Break out <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> into usr.sbin/dhcpd and begin The Process.
521: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> treat 'o' format files (PostScript) from MacOS 10.1 the same as 'l', not 'f', since PostScript can contain binary data. From FreeBSD.
522: <li>Parse and handle RFC 2858 Multiprotocol Extensions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
523: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> to recover files larger than 4GB by using size_t instead of long.
524: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> retry up to ten times after a second's delay for interfaces showing no link.
525: <li>More careful IKE payload parsing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
526: <li>New _PATH_DEVFD and _PATH_VAREMPTY constants in <paths.h>.
527: <li>Fix a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
528: <li>Have new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a> do a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop privileges.
1.923 deraadt 529: <li>In libpthread, update curthread immediately after a thread switch.<br>
530: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.920 deraadt 531: <li>New _dhcp user and group for, funnily enough, the DHCP programs.
532: <!-- ^ 20040413 -->
533: <li>Refactor the installer's network initialisation code into IPv4-specific sections in preparation for IPv6.
534: <li>Start surgery on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>:
535: <ul>
536: <li>Move to /usr/src/usr.sbin/dhcrelay.
537: <li>Kill pidfile code.
538: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=daemon&sektion=3">daemon(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> instead of DIY.
539: </ul>
540: <li>Huge cleanup of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
1.925 deraadt 541: <li>Drop very old TCP ACK packets.<br>
542: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.920 deraadt 543: <li>Implement a rate limit for TCP ACKs of 100pps, and use this more general mechanism for in-window SYN handling too.
544: <li>Safely handle aborts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> etc. without tripping the recursive call handler by mistake.
1.923 deraadt 545: <li><font color="#e00000"><strong>RELIABILITY FIX: Under load "recent model" gdt(4) controllers will lock up.</strong></font><br>
546: <a href="errata.html#gdt">A source code patch is available</a>.<br>
547: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.920 deraadt 548: <!-- ^ 20040412 -->
1.919 deraadt 549: <li>Fix an accidental busy-wait in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>.
550: <li>Increase the maximum number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices to 992. See the <a href="http://www.openbsd.org/faq/upgrade-minifaq.html">Upgrading Mini-FAQ</a> item 3.5.1 for upgrade instructions.
551: <li>Fix a typo in kern/tty_pty.c when generating <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> device filenames, soon to be exposed by changes to pty.
552: <li>Compatiblity fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a>.
553: <!-- ^ 20040411 -->
554: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a>'s handling with size==0, in line with a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vsnprintf&sektion=3">vsnprintf(3)</a> change (rev. 1.5) from years ago.
555: <li>Fix a segmentation fault in Xlib when a .Xauthority file contains IPv6 XDM-AUTHORIZATION-1 data (NetBSD PR xsrc/25098).
556: <li>Rearrange the GENERIC config file so clonable interfaces are together, and without the now-unnecessary device count.
1.918 deraadt 557: <!-- ^ 20040410 -->
558: <li>When libpthread is <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>ing for read- or writability of an fd on behalf of a thread, check the ERR, HUP and NVAL flags as well as the read or write flags.
559: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uudecode&sektion=1">uudecode(1)</a> with FreeBSD, including base64 support.
560: <li>Stop a number of network interfaces moaning about a failed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> allocations, the complaint uses mbufs and just makes things worse.
561: <li>Pass SIGINT and SIGQUIT through to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>'s privsep child.
562: <li>Move the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> altq, OS fingerprint and table <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a>s from the default (interrupt context) kmem allocator to the much-larger nointr allocator.
1.919 deraadt 563: <li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog.conf&sektion=5">newsyslog.conf(5)</a> doesn't list a user or group, create new files with the uid or gid from the existing file.
1.918 deraadt 564: <li>Force <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> to use the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> implementation instead of its own.
565: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> check that the file it's trying to open isn't really a directory.
566: <!-- ^ 20040409 -->
567: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> optimiser fixes for mvme88k
568: <li>Swap the last two parameters to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=TAILQ_FOREACH_REVERSE&sektion=3">TAILQ_FOREACH_REVERSE(3)</a> in line with FreeBSD and NetBSD.
569: <li>Use a more efficient <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> size when displaying long lines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>. Speeds things up when, for example, your system crashes in the middle of a build leaving a pile of linefeedless binary crap in the typescript file.
570: <li>After going to the trouble of saving errno before it gets overwritten, use the saved value in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>'s error output.
571: <li>Don't try to close invalid file descriptors in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> privsep code.
572: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> set the timezone before privsep so the child has the right zone settings.
573: <li>Within <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>'s new lease file naming scheme, allow for the -l filename override.
574: <li>On sparc and sparc64, don't compare a RAMDISK kernel's root filesystem time with the system time, they're unlikely to have much in common.
575: <!-- ^ 20040408 -->
576: <li>Zero out the key data pointer for unknown <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> key types.
577: <li>Merge in Perl 5.8.3 and <!-- 20040408 --> OpenSSL 0.9.7d. No lame new licenses for a change.
578: <li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> needs an instance per interface, having a single lease file won't do so use /var/db/dhclient.leases.<ifname>.
579: <li>Make sure the list dereference when deleting all SAs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> comes before the delete operation that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=3">free(3)</a>s the list node.
580: <li>Fix /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.local&sektion=8">rc.local(8)</a>'s handling of ntpd_flags.
581: <li>Unbreak pxeboot(<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=i386">8/i386</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=amd64">8/amd64</a>) build under gcc3.
582: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> to work on more than the first physical interface found.
583: <li>In several programs, fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> calls containing option letters for which there's no corresponding case handler.
584: <li>ISO C function declarations for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
585: <li>Fix a sizeof(pointer) bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s IPv6 options parser.
586: <li>Fix some misplaced braces in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>, making 'route add' a bit more -q.
587: <li>Enable /dev/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=4">crypto(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a> on cats machines.
588: <!-- ^ 20040407 -->
589: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>'s file renaming and copying operations set the same permissions in all cases.
590: <li>Fix double call of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&sektion=2">ktrace(2)</a> signal trap handler. <!-- XXX -->
591: <li>Add missing prototypes (in <pwd.h>) for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcrypt&sektion=3">bcrypt(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5crypt&sektion=3">md5crypt(3)</a>.
592: <li>Fix some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> optimisation bugs on mvme88k.
593: <li>Fix a sizeof(wrongthing) bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a> that was breaking 64-bit machines.
594: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> print IKE DELETE payload contents.
595: <li>Remove the installer's special-case upgrade of the OpenSSL /usr/include symlinks.
596: <li>Fix a double-free in libpthread (PR#3730).
597: <li>Reenable libm compiler optimisation on sparc64, since it works properly with gcc3.
598: <!-- ^ 20040406 -->
599: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtol&sektion=3">strtol(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.
600: <li>Don't initialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncurses&sektion=3">ncurses(3)</a> until after options processing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=backgammon&sektion=6">backgammon(6)</a>.
601: <li>Plug the new-and-improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> into the standard build.
602: <li>Fix a sizeof(pointer) bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sup&sektion=1">sup(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=visudo&sektion=8">visudo(8)</a>.
603: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s cache of m_tag_get() <!-- NOMAN --> results actually work.
604: <li>Check for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdopen&sektion=3">fdopen(3)</a> failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vacation&sektion=1">vacation(1)</a>.
605: <li>3.5 -> 3.5-current.
606: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wskbd&sektion=4">wskbd(4)</a>'s AltGr key handling so shift-altgr-other has the same effect as altgr-shift-other.
607: <li>Never allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> states propogated via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to overwrite newer states held locally. If an overwrite is attempted, broadcast the newer version to the network to speed resynchronisation.
608: <li>Under Linux emulation, pass <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=madvise&sektion=2">madvise(2)</a> straight through to the native syscall.
609: <!-- ^ 20040405 -->
1.923 deraadt 610: <li><font color="#e00000"><strong>RELIABILITY FIX: Reply to in-window SYN with a rate-limited ACK.</strong></font><br>
611: <a href="errata.html#tcp">A source code patch is available</a>.<br>
612: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.918 deraadt 613: <li>Don't try to recreate the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xfs&sektion=1">xfs(1)</a> logfile after dropping privileges.
614: <li>Don't abort <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xfs&sektion=1">xfs(1)</a> gracelessly when handling an unimplemented protocol request.
1.917 deraadt 615: <!-- ^ 20040404 -->
616: <li>Many manual page fixes.
617: <li>In a number of programs, don't close files that are known to be not open.
618: <li>Fix a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s privsep code.
619: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s -v logging option do something useful.
620: <!-- ^ 20040403 -->
621: <li>Fix line breaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s log output.
622: <li>Allow non-GNU ANSI compilers (e.g. TenDRA) to build again by changing 'static inline' to 'static __inline'.
623: <li>Don't close descriptors we know aren't open in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
624: <li>Drop arc4random_8() api from the kernel.
625: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rfork&sektion=2">rfork(2)</a> so the RFMEM flag gives complete vmspace sharing including the stack, in line with other implementations.
626: <li>Add --line-buffered option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> etc.
627: <li>Remove some unbounded recursions in the libc regex engine, found with certain expressions containing backreferences.
628: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ls&sektion=1">ls(1)</a>' column alignment when using the -h option.
629: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=axe&sektion=4">axe(4)</a> USB Ethernet driver.
630: <!-- ^ 20040402 -->
631: <li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>.
632: <li>Better bounds checking in the ramdisk's strategy() routine.
633: <li>Limit the trust between local and remote instances of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcp&sektion=1">rcp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> programs.
634: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>'s -p option so that, when used without -s, it shows a list of sockets for the given protocol.
635: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcmdsh&sektion=3">rcmdsh(3)</a> work on hosts without an IPv4 address.
636: <li>Initialise the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> subsystem in kernel main() instead of on first use.
637: <!-- ^ 20040401 -->
638: <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&sektion=1">openssl(1)</a>'s s_client command, complete with the usual '-4' and '-6' switches.
639: <li>Reorder checks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> so that the IP options check isn't skipped just because UseDNS=no.
640: <li>Make /usr/src/Makefile's cross-tools target work again.
641: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> properly use the exec'd program's basename as argv[0] if no arguments are specified.
642: <li>Fix includes search order in GNU <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a> to help cross-ld builds.
643: <li>Don't byte-swap a variable we'll need later in its original order in GNU <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a>.
644: <li>On an msdos filesystem with long filenames support enabled, fix some false-positive name matches when an integer multiple of 13 characters match. From NetBSD.
645: <li>Some portability fixups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
646: <li>tcpmd5 changes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>:
647: <ul>
648: <li>Allow either the source or destination to be a wildcard in SA lookups (netinet/ip_ipsp.c:gettdbbysrcdst()).
649: <li>Add support for the wildcard to pfkeyv2.
650: <li>Use the new pfkeyv2 wildcard support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> and remove the local address requirement for md5sig.
651: </ul>
652: <!-- ^ 20040331 -->
653: <li>Unbreak libc's regex engine compilation with -DREDEBUG.
654: <li>Change /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a> so that a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> banner (configured via $spamd_flags) may contain spaces (PR#3720).
655: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> how to expand GNU tar long links. From NetBSD.
656: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>'s handling of filename-too-long errors so it just fails the syscall instead of stopping the process. Fixes PR#3140.
657: <li>Some ELF name translation fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&sektion=1">nm(1)</a>.
658: <li>Add /etc/rc.conf.local to /etc/mtree/special.
659: <li>Lots more activity on the SMP branch.
660: <li>Wrap <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> installation operations in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&sektion=1">perl(1)</a> eval{} blocks so it's possible to at least register what did work.
661: <li>Unknown entry types in a packing list now result in an error.
662: <!-- ^ 20040330 -->
1.422 deraadt 663: </ul>
664: <p>
1.203 deraadt 665:
1.95 deraadt 666: This list mentions mostly platform-independent changes. For a list of changes
667: made in a particular platform, please check the page for that platform. If you
668: find them not listed there, the changes are either (1) not being documented or
669: (2) are documented here.<br><br>
1.14 deraadt 670:
671: <hr>
1.424 deraadt 672: <p>
673: <h3>
1.846 deraadt 674: For changes in other releases, click below:<br>
675: <a href="plus20.html">2.0</a>,
676: <a href="plus21.html">2.1</a>,
677: <a href="plus22.html">2.2</a>,
678: <a href="plus23.html">2.3</a>,
679: <a href="plus24.html">2.4</a>,
680: <a href="plus25.html">2.5</a>,
681: <a href="plus26.html">2.6</a>,
682: <a href="plus27.html">2.7</a>,
683: <a href="plus28.html">2.8</a>,
684: <a href="plus29.html">2.9</a>,
685: <a href="plus30.html">3.0</a>,
686: <a href="plus31.html">3.1</a>,
1.868 deraadt 687: <a href="plus32.html">3.2</a>,
1.889 david 688: <a href="plus33.html">3.3</a>,
1.916 david 689: <a href="plus34.html">3.4</a>,
1.915 deraadt 690: <a href="plus35.html">3.5</a>.
1.424 deraadt 691: <br>
692: </h3>
693:
694: <hr>
1.729 horacio 695: <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
696: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.926 ! deraadt 697: <br><small>$OpenBSD: plus.html,v 1.925 2004/05/30 16:23:12 deraadt Exp $</small>
1.14 deraadt 698:
699: </body>
700: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www