===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus33.html,v
retrieving revision 1.6
retrieving revision 1.7
diff -c -r1.6 -r1.7
*** www/plus33.html 2003/05/05 16:45:38 1.6
--- www/plus33.html 2003/09/23 21:49:10 1.7
***************
*** 100,106 ****
Longword-align struct sockaddrs passed to the kernel by arp(8).
An RFC 2553 compliance tweak to getaddrinfo(3).
Change perl(1)'s config hints file to reflect the promotion of setre[ug]id(2) to real system calls.
! Some (v)sprintf -> (v)snprintf in libcurses and libcurses++.
Bump ssh(1) version to 3.6.
[Applied to stable]
--- 100,106 ----
Longword-align struct sockaddrs passed to the kernel by arp(8).
An RFC 2553 compliance tweak to getaddrinfo(3).
Change perl(1)'s config hints file to reflect the promotion of setre[ug]id(2) to real system calls.
! Some (v)sprintf -> (v)snprintf in libcurses and libcurses++.
Bump ssh(1) version to 3.6.
[Applied to stable]
***************
*** 117,123 ****
Add a missing chroot path correction when creating the SSL mutex file in httpd(8).
Another fix in the gcc(1) stack protector.
! More strcpy -> strlcpy, in cron(8) this time.
After all the hard work making the X server run as a non-root user, stop the scheduler lowering non-root processes' priority if they've had more than ten minutes of CPU time.
Check the length of all fixed-length IPv6 neighbor discovery options.
Enable RSA blinding in keynote(3).
--- 117,123 ----
Add a missing chroot path correction when creating the SSL mutex file in httpd(8).
Another fix in the gcc(1) stack protector.
! More strcpy -> strlcpy, in cron(8) this time.
After all the hard work making the X server run as a non-root user, stop the scheduler lowering non-root processes' priority if they've had more than ten minutes of CPU time.
Check the length of all fixed-length IPv6 neighbor discovery options.
Enable RSA blinding in keynote(3).
***************
*** 132,143 ****
Scale the altq(9) RED thresholds to 10% (min) and 30% (max) of the queue limit.
Fix a one-byte underflow in raidctl(8).
Switch RSA blinding on for isakmpd(8), ssh-agent(1) and ssh-keysign(8).
! Still more sprintf -> snprintf and strcpy -> strlcpy in many, many places.
! More strcpy -> strlcpy, this time in badsect(8), restore(8) and scsi(8).
Fix a missing initialisation in pckbc(4) when the ps/2 keyboard is not the system console. Avoids a panic on alpha.
Remove sbin/photurisd from the tree.
! (v)sprintf -> (v)snprintf in mrouted(8).
Add -c option to md5(1), for compatibility with GNU md5sum.
Set IFCAP_VLAN_MTU for sk(4).
--- 132,143 ----
Scale the altq(9) RED thresholds to 10% (min) and 30% (max) of the queue limit.
Fix a one-byte underflow in raidctl(8).
Switch RSA blinding on for isakmpd(8), ssh-agent(1) and ssh-keysign(8).
! Still more sprintf -> snprintf and strcpy -> strlcpy in many, many places.
! More strcpy -> strlcpy, this time in badsect(8), restore(8) and scsi(8).
Fix a missing initialisation in pckbc(4) when the ps/2 keyboard is not the system console. Avoids a panic on alpha.
Remove sbin/photurisd from the tree.
! (v)sprintf -> (v)snprintf in mrouted(8).
Add -c option to md5(1), for compatibility with GNU md5sum.
Set IFCAP_VLAN_MTU for sk(4).
***************
*** 209,215 ****
Turn off the stack protector when building lkm(4)s.
Don't install mrinfo(8) and mtrace(8) setuid root.
Recreate the rndc(8) key if /etc/rndc.key and /var/named/etc/rndc.key are not identical, or if either is absent.
! 3.3-beta -> 3.3
Fix user and group keywords with IPv6 pf(4) rules.
Create a baby ISO for i386, with just the CD boot image on it.
--- 209,215 ----
Turn off the stack protector when building lkm(4)s.
Don't install mrinfo(8) and mtrace(8) setuid root.
Recreate the rndc(8) key if /etc/rndc.key and /var/named/etc/rndc.key are not identical, or if either is absent.
! 3.3-beta -> 3.3
Fix user and group keywords with IPv6 pf(4) rules.
Create a baby ISO for i386, with just the CD boot image on it.
***************
*** 341,347 ****
Clean up pf(4) macro parsing.
Fix format string bugs in grep(1) and nohup(1).
! strcpy -> strlcpy in rpc.pcnfsd(8).
Add support framework for LZS compression to crypto(9) and ipsec(4).
More write protection paranoia in ld.so(1).
Make bsd.rd an install/upgrade target.
--- 341,347 ----
Clean up pf(4) macro parsing.
Fix format string bugs in grep(1) and nohup(1).
! strcpy -> strlcpy in rpc.pcnfsd(8).
Add support framework for LZS compression to crypto(9) and ipsec(4).
More write protection paranoia in ld.so(1).
Make bsd.rd an install/upgrade target.
***************
*** 372,378 ****
Fix busted ypxfr(8), the key and values are no longer swapped around. Which is nice.
Add libedit line editing support to cdio(1).
Teach disklabel(8) to use units other than sectors on the command line.
! 3.2-current -> 3.3-beta.
Replace ssh(1)'s and wi(4)'s crc32 code with BSD-licensed versions.
Change pf(4) scrub option 'no-df' to better handle fragments with DF set, such as those sent by Linux NFS.
When in async mode, signal the process group instead of the process from WSEVENT_WAKEUP in wscons(4).
--- 372,378 ----
Fix busted ypxfr(8), the key and values are no longer swapped around. Which is nice.
Add libedit line editing support to cdio(1).
Teach disklabel(8) to use units other than sectors on the command line.
! 3.2-current -> 3.3-beta.
Replace ssh(1)'s and wi(4)'s crc32 code with BSD-licensed versions.
Change pf(4) scrub option 'no-df' to better handle fragments with DF set, such as those sent by Linux NFS.
When in async mode, signal the process group instead of the process from WSEVENT_WAKEUP in wscons(4).
***************
*** 492,498 ****
More updates to unifdef(1).
! strcpy -> strlcpy in ftp(1) macro expansion.
pf(4) tables automatically spring into existence when referred to by pfctl(8) add or replace commands.
Add RFC 1323 TCP window scaling support to pf(4).
Improvements to wi(4) hostap timeouts.
--- 492,498 ----
More updates to unifdef(1).
! strcpy -> strlcpy in ftp(1) macro expansion.
pf(4) tables automatically spring into existence when referred to by pfctl(8) add or replace commands.
Add RFC 1323 TCP window scaling support to pf(4).
Improvements to wi(4) hostap timeouts.
***************
*** 523,529 ****
A source code patch is available.
[Applied to stable]
Add an invalid ioctl sanity check to gif(4).
! Bring perl(1)'s build into line with the libc_r -> pthread move.
Big improvements to a.out library dependency handling.
Make select(2) a thread cancellation point as per the standard.
Fix some locking-related raidctl(8) panics.
--- 523,529 ----
A source code patch is available.
[Applied to stable]
Add an invalid ioctl sanity check to gif(4).
! Bring perl(1)'s build into line with the libc_r -> pthread move.
Big improvements to a.out library dependency handling.
Make select(2) a thread cancellation point as per the standard.
Fix some locking-related raidctl(8) panics.
***************
*** 579,585 ****
Remove fetch(9) and store(9) from the kernel, and replace calls to them with their copy(9) descendants.
Various strl* return value checks in pfctl(8).
Initial support for queue statistics display for pfctl(8) (-vsq option.)
! 'Default-Phase-1-Configuration' -> 'Default-phase-1-configuration', 'Default-Phase-2-Suites' -> 'Default-phase-2-suites' in isakmpd(8).
New table manipulation syntax for pf.conf(5), and a corresponding new -Tl option for pfctl(8).
Add support for active/inactive pf(4) tablesets in the kernel
--- 579,585 ----
Remove fetch(9) and store(9) from the kernel, and replace calls to them with their copy(9) descendants.
Various strl* return value checks in pfctl(8).
Initial support for queue statistics display for pfctl(8) (-vsq option.)
! 'Default-Phase-1-Configuration' -> 'Default-phase-1-configuration', 'Default-Phase-2-Suites' -> 'Default-phase-2-suites' in isakmpd(8).
New table manipulation syntax for pf.conf(5), and a corresponding new -Tl option for pfctl(8).
Add support for active/inactive pf(4) tablesets in the kernel
***************
*** 787,793 ****
Now that options to pf(4) rules can mostly be in any order, check for and disallow repeated options.
Handle '-' as stdin or stdout appropriately in uniq(1).
! strncpy -> strlcpy in pfctl(8).
Make compress(1) accept most of gzip(1)'s long options. Some cleanup also.
Continuing compatibility tweaks to getopt_long(3).
--- 787,793 ----
Now that options to pf(4) rules can mostly be in any order, check for and disallow repeated options.
Handle '-' as stdin or stdout appropriately in uniq(1).
! strncpy -> strlcpy in pfctl(8).
Make compress(1) accept most of gzip(1)'s long options. Some cleanup also.
Continuing compatibility tweaks to getopt_long(3).
***************
*** 871,877 ****
Pass in the right structure to DIOCCHANGEADDR.
Fix 'pfctl -Fq' so altq(9) gets flushed and reset properly.
! setuid() -> seteuid() in ftpd(8).
Tweak pf(4)'s handling of address families in rules.
Make pfctl(8) fetch the address properly for lo(4) with LINK1 set.
Use 1KB = 1000B instead of 1024B when dealing with bandwidth in pf(4).
--- 871,877 ----
Pass in the right structure to DIOCCHANGEADDR.
Fix 'pfctl -Fq' so altq(9) gets flushed and reset properly.
! setuid() -> seteuid() in ftpd(8).
Tweak pf(4)'s handling of address families in rules.
Make pfctl(8) fetch the address properly for lo(4) with LINK1 set.
Use 1KB = 1000B instead of 1024B when dealing with bandwidth in pf(4).
***************
*** 906,912 ****
Add _shadow group and change group and mode of /etc/spwd.db to match
Add atoll(3) and strerror_r(3) to libc.
Add simple multiple-card load balancing to crypto(9) and add a simplified driver registration API.
! Some int -> unsigned int in isakmpd(8).
New -n option for syslogd(8) to disable DNS lookups.
Correct a format string bug in routed(8)'s, er, Makefile.
--- 906,912 ----
Add _shadow group and change group and mode of /etc/spwd.db to match
Add atoll(3) and strerror_r(3) to libc.
Add simple multiple-card load balancing to crypto(9) and add a simplified driver registration API.
! Some int -> unsigned int in isakmpd(8).
New -n option for syslogd(8) to disable DNS lookups.
Correct a format string bug in routed(8)'s, er, Makefile.
***************
*** 1030,1036 ****
More picky argument parsing in traceroute6(8) and ping6(8).
A couple of tmpnam(3)s become mkstemp(3) in httpd(8).
! Lots of int -> u_long in traceroute6(8).
Correct an off-by-one in wi(4).
Fix a printf format string typo in pfctl(8).
--- 1030,1036 ----
More picky argument parsing in traceroute6(8) and ping6(8).
A couple of tmpnam(3)s become mkstemp(3) in httpd(8).
! Lots of int -> u_long in traceroute6(8).
Correct an off-by-one in wi(4).
Fix a printf format string typo in pfctl(8).
***************
*** 1047,1053 ****
Add partial support for the 21145 chip to dc(4).
Have xconsole(1) get a pseudoterminal using openpty(3) instead of going all #ifdef.
! More NULL -> (void *)NULL, this time in XFree, to make sure varargs sentinel is pointer-width.
pax(1) now honours @LongLink, and has a new option to stop the next volume prompt.
--- 1047,1053 ----
Add partial support for the 21145 chip to dc(4).
Have xconsole(1) get a pseudoterminal using openpty(3) instead of going all #ifdef.
! More NULL -> (void *)NULL, this time in XFree, to make sure varargs sentinel is pointer-width.
pax(1) now honours @LongLink, and has a new option to stop the next volume prompt.
***************
*** 1141,1147 ****
In kernel IP processing, block interrupts with splsoftnet(9) around interface address routing table manipulations.
Make sure wi(4) doesn't accept out-of-range TX keys.
Stop ami(4) matching I2O-configured devices.
! 3.2 -> 3.2-current.
--- 1141,1147 ----
In kernel IP processing, block interrupts with splsoftnet(9) around interface address routing table manipulations.
Make sure wi(4) doesn't accept out-of-range TX keys.
Stop ami(4) matching I2O-configured devices.
! 3.2 -> 3.2-current.
***************
*** 1175,1181 ****
www@openbsd.org
!
$OpenBSD: plus33.html,v 1.6 2003/05/05 16:45:38 deraadt Exp $