<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>OpenBSD-current changes</title>
<link rev="made" href="mailto:www@openbsd.org">
<meta name="resource-type" content="document">
<meta name="description" content="OpenBSD-current changes">
<meta name="keywords" content="openbsd,current,changes">
<meta name="distribution" content="global">
<meta name="copyright" content="This document copyright 1996-2002 by OpenBSD.">
</head>
<body bgcolor="#ffffff" text="#000000" link="#23238e">
<a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
<p>
<h2><font color="#e00000">Changes made between OpenBSD 3.3 and OpenBSD-current</font></h2>
<hr>
<p>
This is a partial list of the major machine-independent changes
(i.e., these are the changes people ask about most often). Port
specific changes have also been made, and are sometimes mentioned
in the pages for the specific <a href="plat.html">platforms</a>.
<p>
Changes to the <a href="ports.html">ports</a> collection are documented
<a href="portsplus/index.html">here</a>.
<p>
Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
<p>
<h3>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>.
<br>
</h3>
<p>
<h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
The following list sums up (almost) all the changes made up to June 30.
<p>
<ul>
<!-- ^ 20030701 -->
<li>Under-the-hood improvements to speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>.
<li>Add some buffer management functions for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unifdef&sektion=1">unifdef(1)</a> fixes from FreeBSD.
<li>Reset <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> interface statistics when the loginterface is changed (PR#3332.)
<li>Properly purge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags when flushing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> filter rules.
<li>Don't generate an icmp6 redirect if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rewrote the destination address.
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>'s gzip compatibility with silly configure scripts that expect 'gzip -h' to return success.
<!-- ^ 20030630 -->
<li>First pass at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> normalisation of IPv6 packets. No fragment reassembly yet.
<li>Improvements to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lm&sektion=4">lm(4)</a> hardware sensor driver.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> respond more usefully to gzip CRC errors.
<li>Many manual page fixes and cleanups.
<!-- ^ 20030629 -->
<li>Fix some target probe problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>.
<li>Unbreak string printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=locate&sektion=1">locate(1)</a>.
<li>Fix mdoc bug that put random blank lines into manpages. From NetBSD.
<li>Better type checking for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> atomic I/O.
<li>Don't give <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> interfaces an IPv6 link-local address.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> now logs pidfile creation errors.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> to log output via syslog. Controlled via sysctl ddb.log.
<!-- ^ 20030628 -->
<li>Handle IPv6 neighbor discovery timers more quickly and with greater accuracy.
<li>Make the installer mount all possible swap before creating devices, in an attempt to stop MAKEDEV bombing through lack of memory.
<li>Make sure getanswer() (called by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gethostbyname&sektion=3">gethostbyname(3)</a> etc.) doesn't stray past the end of its reply packet.
<li>Remove a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&sektion=8">arp(8)</a>.
<li>Fix string cleanup breakage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>.
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> gzip code on big-endian architectures.
<li>Some more agressive string fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>' -t option.
<li>Add kqueue support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ugen&sektion=4">ugen(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhid&sektion=4">uhid(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uscanner&sektion=4">uscanner(4)</a>. From NetBSD.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tag lookup for DIOCCHANGERULE.
<li>Fix a subtle tag reference count bug in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
<li>Add alaw <-> ulaw conversion to the kernel ( alaw_to_mulaw(), mulaw_to_alaw() )
<!-- ^ 20030627 -->
<li>Check that the argument to "-o ProxyCommand" exists on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> command line, instead of dumping core.
<!-- XXX held back <li>Mark up many common libc and other functions for the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> bounds checker. -->
<li>Add a simple static bounds checker to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>. (See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>.)
<li>Switch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff3&sektion=1">diff3(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sdiff&sektion=1">sdiff(1)</a> to use libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt_long&sektion=3">getopt_long(3)</a>.
<li>Add USD Beginners Guide document, and some historical papers.
<li>Add USD docs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awk&sektion=1">awk(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ed&sektion=1">ed(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a>, and PSD docs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lint&sektion=1">lint(1)</a> (as xlint) and the ms macros.
<li>Fix temp file handling and an off-by-one in BSD diff.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a>'s PCI probe.
<li>Pad the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a> script data scructure to 256 bytes to avoid cache problems.
<!-- ^ 20030626 -->
<li>Fix an endianness bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
<li>Add unified diff support to the BSD diff.
<li>Have asn1_compile use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a>.
<li>Function prototype cleanup all over the tree.
<li>New extensible bufq mechanism for manipulating buf queues, only in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wd&sektion=4">wd(4)</a> for now.
<li>Add -C option support (number of lines of context) to the BSD diff.
<li>Fix some suspect type conversions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to tag packets for later use in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rules. Oh yes.
<li>Fix backwards arguments when seeking within gzipped files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
<li>Major cleanup (safe string functions, signal race avoidance) in the recently imported BSD diff.
<li>Fix division-by-zeros in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atapiscsi&sektion=4">atapiscsi(4)</a> that could occur when the system is unable to determine even the unit's blocksize.
<li>Add diff program from 4.3BSD Reno. Much work to be done.
<!-- ^ 20030625 -->
<li>Add i386 a.out emulation for dynamic binaries.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -w option.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -E, -F and -G options override the program name, and mutually exclusive.
<li>Make fgrep functionality of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> work.
<li>Unbreak POSIX:: functions under Perl 5.8.0.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s route-to option work for IPv6 link-local addresses.
<li>Reintroduce some routing socket code (lost in a previous update) that could cause less-specific routes to be updated by mistake.
<li>Lots of int -> u_int in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>IPv6 neighbour discovery updates from KAME.
<!-- ^ 20030624 -->
<li>Avoid using regexes completely for simple string searches in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
<li>Improve the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>-based <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&sektion=1">zmore(1)</a> script and install instead of the GNU gzip version.
<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&sektion=1">kdump(1)</a> about many more dev/, net*/ and crypto/ ioctls.
<li>Remove the unnecessary (and broken) printf builtin from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>.
<li>Don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=1">printf(1)</a> since this causes formats beginning with a hyphen to be interpreted as flags.
<li>Add a simple <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&sektion=1">zmore(1)</a> script using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>.
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> support for sparc.
<li>Install a host route for a point-to-point interface even if a connected net route via a broadcast interface exists (NetBSD PR 21903.)
<li>Check for nfds<0 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>. <!-- Uh-oh. -->
<li>Better temp file handling in XFree's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gccmakedep&sektion=1">gccmakedep(1)</a>.
<li>Temporarily work around a tables-related use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s detection of binary files, and add/fix a number of compatibility options.
<li>Improvements to the installer's handling of network settings when upgrading.
<!-- ^ 20030623 -->
<li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&sektion=8">ypserv(8)</a> files without copyright information.
<li>Install freegrep as {e,f,z,ze,zf}grep as well as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
<li>Upgrade (non-GNU) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> to freegrep 0.16.
<li>Remove GNU grep and (most of) GNU gzip from the tree. BSD-licensed alternatives do the same jobs.
<li>Reenable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> library load order randomiser, with fixes.
<!-- ^ 20030622 -->
<li>Make user filename selection in the installer more robust.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fflush&sektion=3">fflush(3)</a> stdout when doing continuous queue monitoring with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
<li>Add fine-grained counters for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> state entries, allowing for traffic reporting via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>.
<li>Add per-process exec/fork/exit hooks, use them the fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brk&sektion=2">brk(2)</a> under Linux emulation, and so fix Java.
<!-- ^ 20030621 -->
<li>Add MSS support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s synproxy.
<li>Initialise properly before calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getusershell&sektion=3">getusershell(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=su&sektion=1">su(1)</a>.
<li>More helpful <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> BAD ICMP debug message.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> print some log messages when giving up on a response to the last message.
<!-- XXX frame pointer canonicalisation fix for propolice gnu/egcs/gcc/combine.c r1.3-1.4 -->
<!-- ^ 20030620 -->
<li>Use _PW_NAME_LEN instead of a hard-coded 8 char username limit in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
<li>Remove roll-your-own string functions from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=comsat&sektion=8">comsat(8)</a> use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fseeko&sektion=3">fseeko(3)</a> instead of fseek().
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a> now generates much prettier ANSI C code.
<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> '-nolisten tcp' change.
<li>Plug some memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
<li>Strip the newline from user input when requesting a continuation filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> (PR#3324.)
<!-- ^ 20030619 -->
<li>Fix a bug that condemned <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&sektion=6">fortune(6)</a> to be always inoffensive.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> return ENOBUFS on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> failure instead of causing a panic (PR#2235,PR#2236,PR#2640.)
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>'s handling of builtin and user macros more consistent, and allow pushdef to work for builtins.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> now passes '-nolisten tcp' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xserver&sektion=1">Xserver(1)</a> by default for local display :0.
<li>Re-enable UDMA mode 5 for HPT370A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> devices, now that timing and interrupt problems are fixed.
<li>Fix a sizeof oops that broke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s -N option.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&sektion=4">hme(4)</a> now advertises its VLAN capability.
<li>Properly display no-route addresses when expanding label macros in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> smartcard key fix, it violates PKCS#1.
<li>When the expansion of the $srcaddr or $dstaddr label macro is a table, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> print the table name instead of garbage.
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> on diskless machines (PR#3322.)
<li>Relax <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd.conf&sektion=5">rtadvd.conf(5)</a> syntax, removing the need for the addrs option.
<!-- ^ 20030618 -->
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amd&sektion=8">amd(8)</a>, fixing the 'wire' location selector.
<li>Return the correct error message if the user tries to kill a non-existent process from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
<!-- ^ 20030617 -->
<li>Add a few missing dead-key composition entries (PR#3295, with an entry for cedilla as well as for double-quote.)
<li>Avoid a null deref in cnkqfilter() (/dev/console <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> crash, PR#3317.)
<li>Fix a logic bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtree&sektion=8">mtree(8)</a> that was making -U return an error just like -u.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&sektion=1">ssh-add(1)</a> redisplay the key comment when prompting after a bad passphrase.
<li>Fix "bad decrypted len" errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when using smartcard-stored public keys (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=592">592</a>.)
<li>Updates for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>, support freeing of old policies and escaping of special characters.
<li>Better byte-swapping behaviour in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>, fixing mac address reads on big-endian architectures.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5">resolv.conf(5)</a>'s permissions.
<!-- ^ 20030616 -->
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> losing ID information when rekeying.
<!-- ^ 20030615 -->
<li>Add new '-c class' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=encrypt&sektion=1">encrypt(1)</a>, which will use the login class to select the password cipher.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> on ptys (PR#3209.)
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>, only check login class validity when the login class is set.
<li>Fix some sizeof oopses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
<li>Allocate cleared memory for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> payload buffers.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> TCP state checks when using a combination of asymmetric window scaling and SACK.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
<!-- ^ 20030614 -->
<li>Add __LP64__ and _LP64 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpp&sektion=1">cpp(1)</a> predefined macros for alpha and sparc.
<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> with FreeBSD updates and enable on sparc64.
<li>Add -0 (zero) flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> allowing the filename separator to be a NUL instead of a newline (PR#3310.)
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>, don't close the descriptor we just created with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&sektion=2">dup2(2)</a>.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> allows dots in usernames consistent with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s show anchor command now respects the 'quiet' flag.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> respect symlinks.
<li>Remove obsolete Rijndael code from libcrypto.
<li>Support more Intel Fast Ethernet and Gigabit Ethernet cards.
<li>Use real varargs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a> instead of hacking it.
<!-- ^ 20030613 -->
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> now use the key label from a PKCS#12 cert if one is available, instead of just showing 'smartcard key.'
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> complaining about usernames ending in '$'.
<li>Speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> traced macros, helps with recent GNU autoconf.
<li>Make queues work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> interfaces. Not recommended (should assign to tun, then queue on physical interface) but sometimes necessary, e.g. for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> don't apply a netmask to an interface name.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
<li>Allow the kernel to compile with NFS but without FIFO.
<li>POSIXify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>, mostly from FreeBSD.
<!-- ^ 20030612 -->
<li>Much ansification and de-registering.
<li>Add NAT-T dump support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> lifetime and confirmation features work with smartcard keys.
<li>Build <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bs&sektion=6">bs(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hunt&sektion=6">hunt(6)</a> again now that they have good licenses.
<li>Add option MFS to the kernel on several architectures, to fix upgrade breakage.
<li>Some RFC3542 Advanced Sockets API for IPv6 updates.
<li>Add an ARM target for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>.
<!-- ^ 20030611 -->
<li>De-uglify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a>, and (mostly) fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5">resolv.conf(5)</a> update problems.
<li>Allow zero intervals in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> config files.
<li>Fix a missing initialisation in pf_test() and avoid random state table additions.
<li>Add login class support (-class option) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> now tells sendmail to deliver in the foreground.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> pass the -G flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> as expected.
<li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs2log&sektion=1">rcs2log(1)</a> properly (PR#3298.)
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> check that a login class exists before using it (PR#2699.)
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes from NetBSD:<br>
<ul>
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=useradd&sektion=8">useradd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usermod&sektion=8">usermod(8)</a> now check that the encrypted password length is correct.
<li>Log user and group modifications via syslog.
<li>Pickier command line option checks.
<li>When deleting a user including the profile, remove all references to that user from /etc/group.
<li>Checks that a group is in the local files (not from YP) before attempting to modify it.
</ul>
<li>Don't allow /dev/crypto to be opened at all if the kernel is compiled without the CRYPTO option.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=2">mount(2)</a> return EROFS instead of EPERM when trying to mount a dirty filesystem.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> more robust when faced with unknown ID types.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
<li>Change the timer pthread uses, allowing threaded apps to be profiled.
<!-- ^ 20030610 -->
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> to detect negative numbers in pid files.
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> busy-waiting when waiting for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to do its work.
<li>Better CDDB input checking for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdio&sektion=1">cdio(1)</a>.
<li>Make the byte order more uniform in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat code.
<li>Back out tcp_trace IPv6 changes and fix PR#3283.
<li>Stability fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> when under heavy load.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
<!-- ^ 20030609 -->
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>'s -e and -f to accept both month-day-year and seconds-since-epoch times. From NetBSD.
<li>Detect oversized usernames in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>.
<li>Check for oversize group names to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> and fail the command.
<li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>'s patsubst command now accepts null patterns. This appears to fix GNU Autoconf 2.57.
<li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table on an anchor rule creates a real anchor, so <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> works the way one expects.
<!-- ^ 20030608 -->
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> (with the -ss option) printing IPv4 address/netmask pairs as a.b.c.d/128.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a> run by default as user _identd if possible, and fall back to user nobody if that fails.
<li>Replace setjmp/longjmp in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> with interruptible system calls.
<!-- ^ 20030607 -->
<li>Avoid a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fontconfig&sektion=3">fontconfig(3)</a> when $HOME is not set.
<li>Fix the addition of /usr/local/lib/X11/fonts to /etc/fonts.conf.
<li>Don't use M_WAIT in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atalk&sektion=4">atalk(4)</a>.
<li>Don't forward IPv6 multicasts to an interface that's no longer around to receive them.
<!-- ^ 20030606 -->
<li>Add large file support to distrib/special/more.
<!-- ^ 20030605 -->
<li>Teach distrib/special/more how to handle arbitrarily long lines and \r\n line endings.
<li>Set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rusers&sektion=1">rusers(1)</a>' column width to 80 if stdout isn't a tty.
<!-- ^ 20030604 -->
<li>Add generic '-fno-builtin-<function>' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>.)
<li>Kill the parent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> process when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> or <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> receive a signal (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=241">241</a>.)
<li>Only drop setgid privileges the once in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
<li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> challenge/response and keyboard-interactive authentication methods if there's a host key mismatch, to reduce the likelihood of MiTM attacks catching out ignorant users (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=580">580</a>.)
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s --More-- prompt more --less--, less More, and more POSIX.
<li>Fix distrib/special/more on machines with unsigned chars.
<li>Simply and fix tty handing in /distrib/special/more.
<!-- ^ 20030603 -->
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">event(3)</a> honouring EVENT_NOKQUEUE when running set[ug]id.
<li>Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> library load order randomiser, it seems to be exposing bugs elsewhere.
<li>Provide a fast path for userland <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> requests, bypassing the kernel queues where possible.
<li>Add some tag-related utility functions in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
<!-- ^ 20030602 -->
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> process 'show' options before options that change the rulebase.
<li>Huge license cleanup all over the tree.
<li>Fix random lockups of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a> devices.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
<li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default.)
<li>Install OpenSSL include files in /usr/include/openssl instead of ../ssl.
<li>Remove the advertising clause from many license statements.
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt_long&sektion=3">getopt_long(3)</a> for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>, instead of the old implementation.
<li>Remove a potential double-free from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
<!-- ^ 20030602 -->
<li>Fix a bad string bounds check in libedit.
<li>String cleaning bootblocks for all architectures. Now only bind and src/gnu use unsafe string functions.
<li>Fix a few long-missing initialisations, so we don't end up using random stack noise as a hint to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm_map&sektion=9">uvm_map(9)</a> via uvm_km_suballoc().
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a>'s symbol table lookup algorithm.
<!-- ^ 20030601 -->
<li>Properly mask off all but the last 8 bits of status in WSTOPSIG and WEXITSTATUS.
<li>Add preliminary LBA support to the i386 bootloader.
<!-- ^ 20030531 -->
<li>Build a dynamic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com_err&sektion=3">com_err(3)</a> library.
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pmdb&sektion=1">pmdb(1)</a> to the default build.
<li>Fix timeout signedness bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>.
<li>Some deeper string cleaning in bind9.
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pmdb&sektion=1">pmdb(1)</a> dumping core when the program to be run doesn't exist.
<li>Add LD_NORANDOM to the list of environment variables that get zapped when running setuid/setgid.
<li>Load dynamic libraries in random order, to reduce the probability of an attacker guessing the address of the loaded code. Define LD_NORANDOM to disable.
<!-- ^ 20030530 -->
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> more robust by accept non-DHCPNAK messages with yiaddr=0.0.0.0, as sent by some common DHCP servers that ignore the RFC.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
<li>Reorder the sections in many manpages.
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seteuid&sektion=2">sete[ug]id(2)</a> as well as set[ug]id() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when doing privsep and when permanently setting the [ug]id.
<li>When setting the tcp6 mss, fetch the link mtu using IN6_LINKMTU() (which takes neighbour discovery mtu settings into account) instead of always using the interface mtu.
<li>Allow numeric uid and gid in systrace, and '<' and '>' operators for ids.
<li>Add support for IPv6 jumbograms.
<li>Fix some bugs IPv6-related bugs in tcp_trace().
<!-- ^ 20030529 -->
<li>Incorporate distrib/special/more's helpfile into the program itself.
<li>Fix the endianness of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>'s statistics for netstat -i.
<li>Fix tab expansion, handle EDITOR not being a full pathname, and much cleanup in distrib/special/more,
<!-- ^ 20030528 -->
<li>Add pthread support for vax.
<li>Don't risk an M_WAIT deadlock when processing raw IP output.
<li>Make libwrap check for <a href="http://www.kame.net/newsletter/20030527/">bogus PTR records</a> containing numeric IP address in string form.
<!-- ^ 20030527 -->
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=df&sektion=1">df(1)</a> use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fmt_scaled&sektion=3">fmt_scaled(3)</a> stuff in libutil.
<!-- XXX query src/sys/arch/i386/include/pmap.h#rev1.33 -->
<li>Fix a few bad *printf format strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Install the mod_ssl headers under /usr/lib/apache/include/
<li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trpt&sektion=8">trpt(8)</a>.
<!-- ^ 20030526 -->
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a>'s XDMCP queries (XFree86 bug <a href="http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=277">#277</a>.)
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binat rules after recent netmask check changes.
<!-- ^ 20030525 -->
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s netmask validity check.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> properly free buffers and initialise pointers when working on tables.
<li>Push <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> syslog output through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&sektion=3">strnvis(3)</a> first.
<!-- ^ 20030524 -->
<li>Fix an fdset leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<!-- ^ 20030523 -->
<li>Remove unsafe <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sprintf&sektion=9&manpath=OpenBSD+3.3">sprintf(9)</a> and vsprintf() functions from the kernel.
<!-- ^ 20030522 -->
<li>Ignore media changes for the first command issued to an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sd&sektion=4">sd(4)</a> device. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/scsi/sd.c#rev1.61">checkin comment</a> for details.
<li>Match kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vprintf&sektion=9">vprintf(9)</a> prototype to that of userland.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getconf&sektion=1">getconf(1)</a> return _POSIX_PATH_MAX instead of _POSIX_PIPE_MAX when asked for the former.
<!-- ^ 20030521 -->
<li>Now that kernels are built with propolice, build modules with it too.
<li>New hardware monitoring sensors driver <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=it&sektion=4">it(4)</a>.
<li>Fix endianness problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a> that caused multicast reception to fail when using Centaur chips.
<li>Add a missing initialisation in altq HFSC.
<li>Add read-only NTFS support, ported from NetBSD. Not enabled in GENERIC.
<li>Add a flag to reverse the stereo on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a>.
<!-- ^ 20030520 -->
<li>Limit the return value of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nice&sektion=3">nice(3)</a> to -NZERO ≤ nice ≤ NZERO, where NZERO=20.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> fail hard when fed invalid hostnames and netmasks.
<li>Many games fixes from NetBSD.
<li>Allow the i386 and hppa bootloaders to skip the interactive portion altogether.
<li>Fix a badly broken switch statement affecting SO_DEBUG in tcp_input.c.
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a> from checking if the printed file is an executable. Leave this to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> filters.
<li>Use a decay filter to get better altq throughput statistics out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
<!-- ^ 20030519 -->
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s do_log(), use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog_r&sektion=3">syslog_r(3)</a> in code that can be called from a signal handler.
<li>Severely restrict the paths that privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> can read from and write to.
<li>Use sockaddr_storage instead of sockaddr in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> to fix interface rescanning.
<li>Keep X.509 private keys only in the privileged part of privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<li>When using the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> SYN proxy, make sure ACKs are sent with the correct window size.
<li>Wait longer for slow USB devices to be ready for attachment.
<!-- ^ 20030518 -->
<li>Don't build libperl in the libraries pass of 'make build', as we want Perl's configure to pick up details of the libraries that the build may be changing. Another leapfrog-in-waiting.
<li>Add regen target in libkrb5 to remove (again) the dependency on an up-to-date asn1_compile.
<li>Complain more consistently about a missing 80-wire IDE cable (for UDMA mode > 2.)
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> when printing strings out of struct utmp, since those strings aren't null terminated.
<li>Don't ARP for our IP address aliases, treat them as local.
<li>Merge in a number of USB SCSI device updates from NetBSD.
<li>Add experimental support for aes-ctr <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> ciphers.
<li>Apply some of the USB SCSI improvements to the FireWire code as well.
<li>Add string length bounds to an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s rhosts auth code.
<li>Pull in a fix for directory creation under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rdr rules with address pools using bitmask and source-hash address selection.
<li>Allow inverse matching of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags.
<li>Fix media handling for Intel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a> devices.
<!-- ^ 20030517 -->
<li>Use the right buffer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s connection handler.
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vfprintf&sektion=3">vfprintf(3)</a> when more memory is needed to store arguments. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdio/vfprintf.c#rev1.19">checkin comment</a> for why.
<li>New Renegotiate-on-HUP option for the [general] section of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd.conf&sektion=5">isakmpd.conf(5)</a> will cause all Phase 2 SAs to be renegotiated.
<li>Fix a couple of signedness nits in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>.
<li>Improvements to USB SCSI support.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>'s up and down cursor movement.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> use the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&sektion=2">dup2(2)</a> instead of its own.
<li>Fare thee well, Kerberos IV.
<li>Another big-bucks firewall feature performed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>: TCP SYN proxy, enabled with 'synproxy state' (this implies modulate state.)
<li>New AddressFamily option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> that works like the -4 and -6 command line options (portable OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=534">bug 534</a>.)
<li>Allow address comparison in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> to work on sparc64.
<li>Prevent a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a> crash with a config file consisting of only invalid input.
<!-- ^ 20030516 -->
<li>Don't assume that rt->rt_ifp is valid in IPv6 neighbour discovery.
<li>Add new ConnectTimeout option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Disable Kerberos options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> programs if Kerberos isn't compiled in, and warn if they're used.
<li>Have 'ssh -V' print the OpenSSL version properly, instead of trying to %s on a long.
<li>Repair IPsec forwarding for IPv6, fixing PR#3231.
<li>Fix a hang in libwrap when the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hosts_access&sektion=5">hosts_access(5)</a> file has a line containing > 2048 characters. (NetBSD pr#15025.)
<li>Add multi-column output to the ls command of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>.
<li>Wash untrusted input to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mail&sektion=1">mail(1)</a> through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a> before display.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, don't store the private key in data structures we pass around a lot.
<li>Fix a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=freerrset&sektion=3">freerrset(3)</a> in new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> dnsfp code.
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fmt_scaled&sektion=3">fmt_scaled(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scan_scaled&sektion=3">scan_scaled(3)</a> functions in libutil, for writing and reading numbers with human-readable scales.
<li>Like for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a>, add a -q option to shut <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mixerctl&sektion=1">mixerctl(1)</a>'s -w option up.
<li>Preliminary privilege separation support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, not enabled by default for now.
<li>Fix deregistration of per-authentication method handlers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a> specify IPPROTO_TCP explicitly in anticipation of a day when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> supports sctp.
<!-- ^ 20030515 -->
<li>Prepare to move all KerberosV libraries to /usr/lib.
<li>More TCP scrubbing: Modulate TCP timestamps to frustrate NAT detection and prevent remote uptime guesses. New scrub option 'reassemble tcp'.
<li>Kill more unwanted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le(4)</a> 'lost carrier' moans.
<li>Remove the rather short-lived kernel option LONGRUN, it's now standard except SMALL_KERNEL is defined.
<li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tagging support for rdr and binat rules.
<li>Add _isakmpd user and group for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> privsep.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> clients to send a BREAK to the remote server if it supports it (SSHv2 only.)
<li>Add _kdc and _kadmin users and groups for the respective KerberosV <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&sektion=8">kdc(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmind&sektion=8">kadmind(8)</a> daemons.
<li>On i386, support Transmeta LongRun power management (kernel option LONGRUN, enabled by default.)
<li>Add a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tag for each rule that matches, not just the last one.
<li>Remove gated stuff from /etc/rc and /etc/rc.conf.
<li>Add experimental support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> host key fingerprint verification using DNS records (dnsfp.) Not built by default. See src/usr.bin/ssh/README.dns for details and build instructions.
<li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> map_pages() failure test on 64-bit architectures.
<li>Back out many recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> changes until they're working right.
<li>Disable KerberosIV support in XFree.
<li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> privsep children die when the monitor parent goes away (OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=560">bug 560</a>.)
<li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a> to use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> link type too.
<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> and libpcap about the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> link type in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>.
<li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> support for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> link type to the 'official' and more extensible version from the <a href="http://www.tcpdump.org/">libpcap</a> people.
<li>Start stripping out KerberosIV support from programs.
<li>When handling a numeric nodename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, set the canonical hostname to the numeric address as per <a href="http://www.ietf.org/rfc/rfc3493.txt">RFC3493</a>.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a>'s VIS_SAFE behaviour match the manpage w.r.t <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isgraph&sektion=3">isgraph(3)</a>.
<li>Allow tags to be specified for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> block rules (which aren't allowed to keep state.)
<li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> scrub keyword to take a protocol specifier again.
<li>Remove KerberosIV support from KerberosV code.
<li>Add packet tag support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat rules.
<li>Correct a string length problem and a missing null init in libreadline.
<li>Add kerberos-over-ssh2 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
<li>Reapply the move of Ethernet definitions to <net/ethertypes.h>, but this time have <netinet/if_ether.h> read them in for compatibility reasons.
<li>New -q flag for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a> to suppress output from the -w option.
<li>Fix a circular dependency by removing libtelnet, instead compile the code directly into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a> from files in libexec/telnetd.
<li>Move contents of libkafs into libkrb5, leave libkafs as an empty dummy library.
<li>Fix a use-after-free in the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tagging code in the kernel.
<li>Enable the increasingly popular <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> driver by default on i386 RAMDISK* kernels.
<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&sektion=1">rdist(1)</a> with freerdist version 0.92, minus the compress option.
<li>Don't build KerberosIV programs. Libraries still built for the moment.
<li>Move blktochr() and chrtoblk() into kernel MI code.
<li>Add [bc]devsw_lookup() kernel convenience functions.
<!-- ^ 20030514 -->
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> make sure packet tagging is only used on stateful filter rules.
<li>Add NO_PROPOLICE kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option to build the kernel without the stack protector. Handy for install media.
<li>Fix a string length off-by-one in libreadline.
<li>Add userland portion of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> packet tagging support.
<li>Disable afs until it can be made to work sans KerberosIV.
<li>Force global 'time' structure to be quad_t aligned, unbreaking sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=microtime&sektion=9">microtime(9)</a> and possibly other things too.
<li>Add support in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> for tagging packets, and filtering based on those tags.
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> tag PACKET_TAG_PF_TAG.
<li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lndir&sektion=1">lndir(1)</a> doesn't try to use -1 as an array index when reading a directory.
<li>On ELF architectures, support the blocking of thread switches during non-thread-safe dynamic loader operations.
<li>Sync ELF identification indexes with the <a href="http://www.caldera.com/developers/gabi/2000-07-17/ch4.eheader.html">System V ABI</a> specs.
<li>Stop AM7990 (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le(4)</a>) devices emitting 'lost carrier' messages.
<li>Back out <netinet/if_ether.h> changes after they caused userland meltdown.
<li>Add propolice stack-smash protector support to the kernel, and build the kernel using it on architectures that support propolice.
<li>Re-enable NULLFS, UMAPFS and UNION in the GENERIC kernel.
<li>Move Ethernet definitions from <netinet/if_ether.h> to new <net/ethertypes.h>, like NetBSD.
<li>Disable Kerberos V-to-IV conversion in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb5&sektion=8">login_krb5(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb5-or-pwd&sektion=8">login_krb5-or-pwd(8)</a>
<li>Stop building <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb4&sektion=8">login_krb4(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb4-or-pwd&sektion=8">login_krb4-or-pwd(8)</a>.
<li>Remove references to krb4 from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a>.
<li>Changes to the way protection fault traps are handled on i386, see the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/machdep.c#rev1.229">checkin comment</a> for details and Intel abuse.
<li>Merge in <a href="http://www.pdc.kth.se/heimdal/">Heimdal</a> KerberosV 0.6.
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> from accepting usernames beginning with a slash.
<li>Don't report unsupported <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> devices as offline.
<!-- ^ 20030513 -->
<li>When testing TCP window sizes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, don't apply the window scaling factor for SYN packets. Do, however, apply the scaling factor when testing ACKs.
<li>Fix a bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> that was causing recursive dependency searches to fail.
<li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> definitions for NAT-T, IKEv2 and EAP.
<li>Locking and other fixes to unionfs.
<li>Add BLOCK_SIZE attribute to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, and rename AES ESP transform to AES_128_CBC.
<li>Add UDP encapsulation type definitions (not code) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> with an eye to future NAT-T support.
<li>Adapt nullfs and umapfs to use common code from genfs.
<li>New genfs code for layered filesystem support.
<li>Wash print queue names through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a> before output.
<li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ctags&sektion=1">ctags(1)</a> to understand '//' comments, ignore declarations of function types, and accept __attribute__. From NetBSD.
<li>Correctly check for empty output from an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> command (PR#3252.)
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> command 'show proc' which, er, shows process information.
<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> to version 0.6.2.
<li>Improvements and bugfixes to the installer's handing of ftp and http downloads.
<li>Reorder <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> IPv6 address comparison to check the least-significant bits first, since these are more likely to differ.
<li>Make sure the state search trees are properly in initialised when attaching <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
<li>Remove a number of KerberosV files that are not used by OpenBSD.
<li>When doing pubkey authentication in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, prefer agent-stored keys that are referred to in the config file. This can reduce the likelihood of the server disconnecting before it gets to a valid key when the agent is storing many keys.
<li>Start preparations to remove KerberosIV.
<li>Remove a number of redundant declarations in games/. From NetBSD.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> now recognises Ogg Vorbis audio files.
<li>Use the asn1_compile in src/usr.bin instead of that in src/kerberosV.
<li>More string fixes to libreadline, this time with no ABI changes.
<li>Fix a sign overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>.
<li>Merge in OpenSSL 0.9.7b (without IDEA, MDC2 and RC5.)
<li>Implement adaptive state table timeouts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, reducing the state timeout value inversely with the number of states present.
<!-- ^ 20030512 -->
<li>Break asn1_compile out from KerberosV into src/usr.bin.
<li>First phase of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> stateful TCP scrubbing: Frustrate TTL-based NIDS evasion by determining on the fly the highest TTL, and enforcing it as the minimim TTL for all subsequent packets.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, Do the xstrdup() of the remote_name inside channel_new() instead of making the caller do it.
<li>Start to fix the annoying asn1_compile leapfrog problem when upgrading KerberosV by putting the generated files into the tree.
<li>Make sure a hole at the end of a sparse file created by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=install&sektion=1">install(1)</a> actually gets written on all filesystems.
<li>The installer now accepts absolutely absolute paths (relative to the installer's root directory, not the virtual mountpoint) for local sets.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>'s -e option fail gracefully if the user specifies an SSH1 key. (NetBSD pr#20550.)
<li>Avoid offence to Klingons by spelling 'Kang' correctly. <!-- No, really. -->
<li>Merge in <a href="http://www.pdc.kth.se/heimdal/">Heimdal</a> KerberosV 0.6rc1.
<li>Since mfs doesn't try to force an unmount on receipt of a signal, there's no need to try to fix up processes' working dirs - the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a> will fail.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s handling of the IPV6_ADDR ID-type.
<li>Remove an unnecessary <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntohs&sektion=3">ntohs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, unbreaking 'nat ... -> $if port n' rules.
<!-- ^ 20030511 -->
<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> return keyword now generates an ICMP unreachable message for all protocols other than TCP (rather than just UDP and ICMP.)
<li>Have the compiler generate warnings if unsafe string functions are used in the kernel.
<li>Back out libreadline string fixes until static build works.
<li>Consign <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=swapon&sektion=2&manpath=OpenBSD+2.5">swapon(2)</a> to COMPAT_25 in favour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=swapctl&sektion=2">swapctl(2)</a>.
<li>Clear unused and/or invalid globals in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> to prevent confusion.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> to spot (and reject) the new 'load...from' syntax.
<li>Support loading of anchors from the main <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> ruleset with new syntax 'load anchorname:rulesetname from filename'.
<!-- ^ 20030510 -->
<li>Allow for the null-terminator when calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcvt&sektion=3">gcvt(3)</a>.
<li>Remove a number of unnecessary executable mappings in the kernel, e.g. framebuffers and page tables don't really need to be x.
<!-- ^ 20030509 -->
<li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sha2&sektion=3">sha2(3)</a> digest support to libc.
<li>Clear libc digest buffers allocated on the stack with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memset&sektion=3">memset(3)</a> before returning.
<li>Move <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setrgid&sektion=3">setrgid(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setruid&sektion=3">setruid(3)</a> from libc to libcompat.
<li>Move <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=insque&sektion=3">insque(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lsearch&sektion=3">lsearch(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=remque&sektion=3">remque(3)</a> from libcompat to libc, since they are now POSIX functions.
<li>Don't leak socket fds in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> queue code, otherwise we can hit the file limit if many queues are defined.
<li>Fix a number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readlink&sektion=2">readlink(2)</a> calls that forgot to leave space for the null-terminator that needs to be added manually.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p5.
<li>Add support for the userland portions of XFree86 <a href="http://dri.sourceforge.net/">DRI</a>. Not yet enabled by default.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>, null-terminate the string returned by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readlink&sektion=2">readlink(2)</a> before passing it on.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>'ing of the dynamic linker hints file when the file size exceeds one page.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> from inlining <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strcpy&sektion=3">strcpy(3)</a> so it can be more easily spotted in object files.
<!-- ^ 20030508 -->
<li>Add missing device name parameter when printing a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nofn&sektion=4">nofn(4)</a> RNG underflow error.
<li>Fix a bad sizeof() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xedit&sektion=1">xedit(1)</a>.
<li>Fix some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makepsres&sektion=1">makepsres(1)</a>.
<li>Remove a string memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a>.
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xclock&sektion=1">xclock(1)</a>'s default behaviour back to -norender.
<li>Fix a few instances of sizeof(pointer instead of object) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=expand&sektion=1">expand(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lbxproxy&sektion=1">lbxproxy(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyinit&sektion=1">skeyinit(1)</a> and in the Kerberos IV and BIND libraries.
<li>Plug a memory leak in the kernel ELF loader.
<li>In the installer, give the -h option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&sektion=1">tar(1)</a> so symlinks on the existing system are honoured.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> try active FTP if passive mode fails. This was missed out in the recent upgrade.
<!-- ^ 20030507 -->
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&sektion=1">rdist(1)</a> use POSIX <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=regex&sektion=3">regex(3)</a>.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&sektion=1">rdist(1)</a> to cope with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcmdsh&sektion=3">rcmdsh(3)</a>'s new ability to handle command line options.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rdr and binat rules work again on protocols other than TCP, UDP and ICMP.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
<li>After a forced unmount, try to change process back into real directories now that namei() won't do lookups under the old mountpoint.
<li>Stop namei() doing lookups on unmounted volumes, prevents crashes with forced unmounts. From NetBSD.
<li>Don't use M_WAITOK to sleep on failures when allocating hashtables for IP protocols (in_pcbinit()). Fail and panic.
<li>Pretty up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a> display units for hw.sensors.
<li>Only do <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setusercontext&sektion=3">setusercontext(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyaudit&sektion=1">skeyaudit(1)</a> when running as root.
<li>Don't use string functions on non-strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sd&sektion=4">sd(4)</a>.
<li>Kill a small <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyinfo&sektion=1">skeyinfo(1)</a>, convert the username to seven-bit before doing the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeylookup&sektion=3">skeylookup(3)</a>.
<li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsirand&sektion=8">fsirand(8)</a> functionality built into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> non-optional.
<!-- ^ 20030506 -->
<li>Allow command-line arguments in rshprog passed to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcmdsh&sektion=3">rcmdsh(3)</a>.
<li>Add backquote to the list of characters escaped in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>'s vi-{esc,tab}complete mode.
<li>Fix a couple of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> off-by-ones in afs and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makeinfo&sektion=1">makeinfo(1)</a>.
<li>Write the correct amount of data when disconnecting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&sektion=1">tip(1)</a> on biz22.
<li>Another memory layout change on i386 to allow a larger MAXDSIZ (see the tech@ <a href="http://marc.theaimsgroup.com/?l=openbsd-tech&m=105216246825100&w=2">archive</a> for details.)
<li>Add a mail mode to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> that does proper line wrapping, and add the '-f' command line option to set the mode.
<li>Properly restore the syncer vnode if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a> fails.
<!-- ^ 20030505 -->
<li>Use the right buffer size for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&sektion=3">getcwd(3)</a> to avoid unnecessary truncation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a>.
<li>Replace local (and wrong) basename logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ln&sektion=1">ln(1)</a> with a call to the real <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=basename&sektion=3">basename(3)</a>.
<li>Don't leak an mbuf when dropping non-ARPHRD_ETHER arp packets.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
<!-- ^ 20030504 -->
<li>Compatibility improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ossaudio&sektion=3">ossaudio(3)</a>, mostly from NetBSD.
<li>Ditch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_mfs&sektion=8">mount_mfs(8)</a>'s homespun malloc() in favour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>.
<li>Prevent a couple of use-after-frees in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
<li>Defensively zero the m_flags field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> structures allocated on the stack.
<!-- ^ 20030503 -->
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=what&sektion=1">what(1)</a> more POSIX-compliant.
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyaudit&sektion=1">skeyaudit(1)</a> leaking file descriptors in -a mode, and be more paranoid about stdin, stdout and stderr.
<li>Add Doug Gwyn's portable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=alloca&sektion=3">alloca(3)</a> on platforms for which no assembler version yet exists, and use instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>'s alloca().
<li>Greatly improved SIS chipset support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>.
<!-- ^ 20030502 -->
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eso&sektion=4">eso(4)</a> work on sparc64 and (probably) macppc.
<li>A number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnode&sektion=9">vnode(9)</a> fixes and additions. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c#rev1.90">checkin comment</a> for details.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> to 2.8.4release, patchset 1d, including IPv6 support.
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> antispoof rules to have labels.
<!-- ^ 20030501 -->
<li>Keep trying to unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apachectl&sektion=8">apachectl(8)</a> restarts for shared modules when running under the chroot.
<li>Improve forward compatiblity of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a> by comparing only what we understand instead of trying to ignore what we don't.
<li>Make the newly deprecated omsync() work under NetBSD emulation.
<li>Several <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strvis&sektion=3">strvis(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&sektion=3">strnvis(3)</a> changes, all part of the continuing Battle for Safe String Functions.
<li>Fix some pthreads signal bugs that were causing MySQL to crash (PR#3179, PR#3238.)<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables to be loaded into anchors. <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> table options except show and flush now honour -a.
<!-- ^ 20030430 -->
<li>Have the dynamic linker stub functions in libc return -1 if called from a statically linked program.
<li>Only build shared libXv if the target arch supports shared libraries.
<li>Consign the omsync() system call to COMPAT_25 obscurity.
<li>Fix parsing of the noac option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a>.
<li>In netinet/tcp_input.c, correct a long-standing typo made when applying a deadlock-avoidance bug fix (TCP/IP Illustrated volume 2 fig. 28.30.)
<li>Fix a crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lkm&sektion=4">lkm(4)</a>, tripped when loading a module twice.
<!-- ^ 20030429 -->
<li>Make ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlfcn&sektion=3">dlfcn(3)</a> calls thread-safe.
<li>Add /usr/local/lib/X11/fonts to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fontconfig&sektion=3">fontconfig(3)</a>'s search list, to help ports.
<li>Add some missing X server key definitions.
<li>Re-introduce the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>-has-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>'s-signature change, once again renaming the old syscall to omquery().
<li>Only close the keyfile once in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyaudit&sektion=1">skeyaudit(1)</a> -a mode.
<li>Do a return from main() instead of an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=3">exit(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a>,
<li>Fix some more unbounded <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> calls in KerberosIV, still more to come.
<li>Lock earlier when doing vnode ops in procfs to avoid a possible race condition.
<!-- ^ 20030428 -->
<li>Remove a potential double-free in the XFree wsfb driver.
<li>Prepare <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table structures for anchor support.
<li>Much string cleanup in sys/dev.
<li>Fix the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> fifo 'C set' command (PR#3148.)
<!-- ^ 20030427 -->
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> to eliminate some string length guesswork in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a>.
<li>Allocate enough space for a *printf() %u in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.yppasswdd&sektion=8">rpc.yppasswdd(8)</a>.
<li>Correct libXp's shared library dependencies
<li>Fix fat32 filesystem corruption when renaming directories.
<!-- ^ 20030426 -->
<li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lm&sektion=4">lm(4)</a> (National Semiconductor LM78, LM79 and compatible) and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=viaenv&sektion=4">viaenv(4)</a> (VT82C686A South Bridge) hardware monitor drivers, adapted from NetBSD to use the new sysctl hw.sensor interface.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=funopen&sektion=3">funopen(3)</a>'s declaration match its prototype (PR#3236.)
<li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>-uses-mmap() API change.
<li>Add new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> node hw.sensors for, er, hardware monitoring sensors.
<li>Don't assume that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> failures won't clobber the tempfile name in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mktemp&sektion=1">mktemp(1)</a>.
<li>In the IPv4 case of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_net_pton&sektion=3">inet_net_pton(3)</a>, infer the netmask the same way for all address classes (i.e. don't assume multicast networks are always */4.)
<li>Be more portable and check the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> return value against -1 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
<li>Add size bounds to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=edquota&sektion=8">edquota(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a>.
<li>Match <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>'s function signature to that of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat proxy port allocation for manually specified ranges.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
<li>If one is given, properly copy the second port of a nat proxy spec in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
<!-- ^ 20030425 -->
<li>Fix a bad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> bound in the AFS library (PR#3228.)
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> to fix some buffer length problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pdisk&sektion=8&arch=mac68k">pdisk(8/MAC68K)</a>
<li>When handling the packet size option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&sektion=8">traceroute(8)</a>, bounds check the right variable.
<li>Properly detect EOF when generating policy interactively.
<!-- ^ 20030424 -->
<li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a> generating syslog messages on startup.
<li>Swap a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strchr&sektion=3">strchr(3)</a> for a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strrchr&sektion=3">strrchr(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a>.
<li>When upgrading, treat the /altroot filesystem like a 'noauto' filesystem and omit it from the upgrade fstab.
<!-- ^ 20030423 -->
<li>Do a proper bounds check when reading in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> news server name from a file.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s glob now does tilde and brace expansion as well.
<!-- ^ 20030422 -->
<li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gre&sektion=4">gre(4)</a> IP input, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_pullup&sektion=9">m_pullup(9)</a> instead of assuming the header is in the first mbuf's data region.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> stop parsing command line arguments after a '--'.
<li>Better bounds checks when expanding curly braces in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>, don't set the object load_size field to a negative value because this is likely to be wrong.
<!-- ^ 20030421 -->
<li>Copy the null at the end of the name when adding a realm in Kerberos V.
<!-- ^ 20030420 -->
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> die the way it should when authpf.conf is missing (PR#3217.)
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> output statistics.
<li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> with its CVS and bump the version to 1.6.7p4.
<li>Some typedef perfectionism in libwrap.
<li>String cleanup and extra paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rd&sektion=4">rd(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a>.
<li>The string cleanup drive continues.
<li>Add support for the Davicom DM9009 chip to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>.
<!-- ^ 20030419 -->
<li>Help <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> further by making <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> return EINVAL (instead of ENOMEM) if MAP_FIXED was requested but is unavailable.
<li>New -x option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_msdos&sektion=8">mount_msdos(8)</a> to automagically make directories executable if they're readable.
<li>Unbreak Emacs 21 by fixing a problem with the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> part of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>.
<!-- ^ 20030418 -->
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> work when only IPv6 endpoints are specified.
<li>Add 4.3BSD's more command for use on some floppies instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>. More is less.
<li>Change some return values in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> from char to int.
<!-- ^ 20030417 -->
<li>Changes to support the new <a href="http://marc.theaimsgroup.com/?l=openbsd-misc&m=105056000801065&w=2">i386 W^X</a> scheme.
<li><a href="http://marc.theaimsgroup.com/?l=openbsd-misc&m=105055555830978&w=2">Move</a> i386 to ELF, a binary upgrade is required for now.
<li>Use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> syscall in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>, i386 only for now.
<li>Avoid teeth-gnashing delays by making the installer use 'route -n show' instead of 'route show'.
<li>In the kernel ELF loader, use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&sektion=9">uvm(9)</a> to make sure that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> doesn't overwrite an area that's already in use.
<li>Fix a buffer overflow that was causing a crash in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> (PR#3090.)
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apachectl&sektion=8">apachectl(8)</a> now honours $httpd_flags from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>.
<li>Remove a race condition in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_mfs&sektion=8">mount_mfs(8)</a>.
<!-- ^ 20030416 -->
<li>Fix some allocation bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
<li>In the kernel's standalone ISO9660 driver, collapse extra slashes in the pathname. This allows files to be loaded from the root of a cd.
<li>Uncomment the line that unloads <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> shared modules on a server shutdown or restart.
<li>Many string fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>, more to come.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> can now display basic HFSC stats.
<li>Much cleanup in elf2ecoff(1) (not installed by default.)
<li>Allocate the right <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> buffer size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rip6query&sektion=8">rip6query(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=audioctl&sektion=1">audioctl(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size&sektion=1">size(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a>'s return value for pointer arithmetic.
<!-- ^ 20030415 -->
<li>Back out the 'long ATAPI detection delay' fix due to problems with some devices.
<li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=globfree&sektion=3">globfree(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>.
<li>Correct a number of short space allocations for *printf() integer-to-string conversions.
<li>Fix some problems with the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> OpenBSD logo, caused by the XFree86 4.3.0 merge.
<li>Don't increment the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> sequence number until we know the packet has been successfully queued for sending.
<li>Include the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> job number in the process title.
<li>Put <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s help text back into a separate file, and allow a reduced-size build for the boot floppies.
<li>Stop using hardcoded SOCK_* types when creating sockets in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, to facilitate ssh-over-<a href="http://www.sctp.de/sctp.html">sctp</a>.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> unlink its fifo and pid file on a clean shutdown (PR#3199.)
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> to send zero-length packets with the -s0 option.
<li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a> buffer length fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
<!-- ^ 20030414 -->
<li>Add new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> system call, to provide hints (especially to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>) on where to put memory mappings.
<li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> leaves space for the trailing null when displaying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=open&sektion=2">open(2)</a> flags.
<li>Fix bad format strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=extattrctl&sektion=8">extattrctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
<li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout_add&sektion=9">timeout_add(9)</a> from wrapping around on machines with a long uptime.
<li>Fix some bogus size_t values in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grops&sektion=1">grops(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> to version 381.
<!-- ^ 20030413 -->
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> set file descriptor limits with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setrlimit&sektion=2">setrlimit(2)</a>.
<li>Relax the license on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&sektion=3">strlcat(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> to encourage their bundling with other programs.
<li>Initial support for HFSC queueing, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>-style.
<li>Back out recent 'X looks like a package' stuff.
<li>Merge in expat-1.95.4 from XFree86-current.
<li>Fix long delays when detecting ATAPI devices.
<!-- ^ 20030412 -->
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>'s Makefile now honours the LDSTATIC flag.
<li>Move queue ID assignment into the kernel and away from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, solving a bunch of problems.
<!-- ^ 20030411 -->
<li>Back out the earlier fix for PR#2230, which is a no-op since zombies aren't on the allproc list being scanned.
<li>De-allocate bus space on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> device failures.
<li>Only print the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> -d prompt if there's enough space left on the status line (PR#3189.)
<!-- ^ 20030410 -->
<li>When fixing up process root and working directories after a filesystem mount, leave zombies well alone. (PR#2230.) <!-- Yes, #2230, not #2030 as the committer said. Grr. -->
<li>Fix an off-by-one in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> diagnostic code.
<li>Correctly initialise xkb memory in the X server.
<li>Plug some file descriptor leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xman&sektion=1">xman(1)</a> (PR#3186.)
<li>Fix a broken sizeof() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> when allocating a new sentinel_info.
<li>Demote the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> 'missing CRL dir' moan to a debug message. <!-- Someone must really hate that warning. -->
<li>The kernel pf_state structure now points to both a rule and an anchor, so states created on anchors can use rule options properly.
<li>Create the /etc/isakmpd/crls directory from 4.4BSD.dist to stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> complaining about its absence.
<li>Strip trailing whitespace before parsing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> options (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=528">528</a>.)
<li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s Kerberos IV support.
<!-- ^ 20030409 -->
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> error handling.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> now remembers the previous 'M-x compile' command.
<li>Add a missing free() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>'s dbm processing.
<li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>.
<!-- ^ 20030408 -->
<li>Change some old-style <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a>s (user.group) to POSIX user:group style.
<li>Fix a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>.
<li>Add some missing NetBSD copyright information to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktutil&sektion=8">ktutil(8)</a> work properly over the network.
<li>Improvements to string handling (not str[ln]* for once) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adventure&sektion=6">adventure(6)</a>.
<li>Add fake package information so ports can check for XF4 installation.
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> for XFree distrib scripts.
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> reject invalid ICMP types (>40) and codes (>255.)
<li>Fix a typo in the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> rekeying code that was causing the wrong packet state counter to be fetched.
<!-- ^ 20030407 -->
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p3.
<li>Handle buffer length for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> properly in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_mkdb&sektion=8">kvm_mkdb(8)</a>.
<li>Many fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>.
<li>Improve (as part of string function fixes) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a>'s handling of old-style + and - format specifiers.
<!-- ^ 20030406 -->
<li>Don't treat disklabel fields d_packname and d_typename as null-terminated fields when they're not.
<li>Fix a bounds-check off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lam&sektion=1">lam(1)</a>.
<li>Simplify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s parsing of CIDR masks.
<li>Add 'queue foo on $i_bar' syntax to allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> queue specs to apply only to specified interfaces.
<li>Add 230400 to the list of speeds supported by termios under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux&sektion=8">compat_linux(8)</a>.
<li>Use the default rule when a packet passes due to the implicit 'pass all' at the top of the rulebase, eliminating many NULL tests.
<li>Add a `default' <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rule and use it to store the default timeouts.
<li>Add some shared library version updates missed in the XFree86 4.3.0 merge.
<!-- ^ 20030405 -->
<li>Many string function fixes all over the tree.
<li>Fix a bad bounds check in OpenSSL's ASN.1 parser.
<!-- ^ 20030404 -->
<li>Back out the earlier realloc() change to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sectok_fmt_fid&sektion=3">sectok_fmt_fid(3)</a> to take a string length parameter, and crank libsectok's major version for the new API.
<li>With the XFree86 4.3.0 merge, add an additional definition so that ports libs end up in /usr/local/lib/X11.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p2.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>'s empty group test (PR#3178.)
<li>Improve PRIQ queue id assignment, so same-priority queues on different interfaces work properly.
<!-- ^ 20030403 -->
<li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> instead of leaking memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
<li>Some cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
<li>Add a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=526">#526</a>.)
<li>When an interface doesn't support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altq&sektion=9">altq(9)</a>, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> print the interface name in the error message.
<li>Add automatic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> rekeying in accordance with the current secsh newmodes draft, and fix some rekeying bugs.
<!-- ^ 20030402 -->
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> notification of immediate-mode <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> events (PR#3175.)
<li>Merge in XFree86 4.3.0.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to version 1.6.7p1, to fix some overzealous paranoia.
<li>Bump OpenSSH version to 3.6.1.<br>
<a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
<!-- ^ 20030401 -->
<li>Fix an mbuf leak in icmp6.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> treat empty environment variables as if they were unset.
<li>Fix some use-after-FREE when handling crypto errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
<li>Add a missing splx() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a>.
<li>Clean up and additional paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setusercontext&sektion=3">setusercontext(3)</a>.
<li>Only remove a kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rule structure when no states refer to it.
<!-- ^ 20030331 -->
<li>Helpfully, allow netinet/tcp_debug.c to compile when TCP_DEBUG is defined.
<li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>'s probe of dual-channel 7899 cards.
<li>Use snprintf to construct device names in the kernel, instead of hand-rolling.
<li>Give a more consistent message when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a> is aborted one way or another by the user.
<li>Begin the process of <a href="http://marc.theaimsgroup.com/?l=openbsd-misc&m=104958817430379&w=2">eradicating</a> the remaining strcpy, sprintf, and strcat calls from the tree.
<!-- ^ 20030330 -->
<li>Fix logging bustage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>.
<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to 8.12.9 to fix a buffer overflow in address parsing. Note that this fix went onto the OpenBSD 3.3 CDs and so is not a 3.3 erratum.
<li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iha&sektion=4">iha(4)</a>.
<!-- ^ 20030329 -->
<li>Stop pmdb dumping core on stripped executables.
<li>Show in log output the list against which <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> matched.
<li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> report exactly how much of the filthy spammer's time was wasted.
<li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>.
<li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_passwd&sektion=8">login_passwd(8)</a> from setuid(root) to setuid(_shadow).
<li>Remove OCHIO* binary compatability hacks from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ch&sektion=4">ch(4)</a>. <!-- Warned about in the checkin on 17 Oct 2002 -->
<!-- ^ 20030328 -->
<li>When retrieving the size of a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ccd&sektion=4">ccd(4)</a> device, check the device is initialised before attempting to open it.
<li>Add USER_LDT to the list of kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=options&sektion=4">options(4)</a> controllable via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>.
<li>Sync the SMP branch to 3.3.
<li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iha&sektion=4">iha(4)</a>'s REQUEST_SENSE handling based on hard-won experience with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>.
<li>Actually look for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a> -q option when calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>.
<li>Fix handling of -f and -h options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a>.
<li>Improve error handling for invalid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> cbq and priq flags.
<li>3.3 -> 3.3-current.
<!-- ^ 20030327 -->
</ul>
<p>
This list mentions mostly platform-independent changes. For a list of changes
made in a particular platform, please check the page for that platform. If you
find them not listed there, the changes are either (1) not being documented or
(2) are documented here.<br><br>
<hr>
<p>
<h3>
For changes in other releases, click below:<br>
<a href="plus20.html">2.0</a>,
<a href="plus21.html">2.1</a>,
<a href="plus22.html">2.2</a>,
<a href="plus23.html">2.3</a>,
<a href="plus24.html">2.4</a>,
<a href="plus25.html">2.5</a>,
<a href="plus26.html">2.6</a>,
<a href="plus27.html">2.7</a>,
<a href="plus28.html">2.8</a>,
<a href="plus29.html">2.9</a>,
<a href="plus30.html">3.0</a>,
<a href="plus31.html">3.1</a>,
<a href="plus32.html">3.2</a>,
<a href="plus33.html">3.3</a>.
<br>
</h3>
<hr>
<a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
<a href="mailto:www@openbsd.org">www@openbsd.org</a>
<br><small>$OpenBSD: plus.html,v 1.882 2003/08/03 18:55:07 deraadt Exp $</small>
</body>
</html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www