Annotation of www/plus36.html, Revision 1.45
1.1 miod 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
1.42 tj 4: <title>OpenBSD 3.6 Changelog</title>
1.1 miod 5: <meta name="description" content="OpenBSD 3.6 changes">
6: <meta name="copyright" content="This document copyright 1996-2004 by OpenBSD.">
1.40 deraadt 7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.44 tb 9: <link rel="canonical" href="https://www.openbsd.org/plus36.html">
1.1 miod 10: </head>
11:
12: <body bgcolor="#ffffff" text="#000000" link="#23238e">
13:
1.40 deraadt 14: <h2>
15: <a href="index.html">
16: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
1.42 tj 17: <font color="#e00000">3.6 Changelog</font>
18: </h2>
1.1 miod 19: <hr>
20:
21: <p>
22: This is a partial list of the major machine-independent changes
1.16 sobrado 23: (i.e., these are the changes people ask about most often). Machine
1.1 miod 24: specific changes have also been made, and are sometimes mentioned
25: in the pages for the specific <a href="plat.html">platforms</a>.
26:
27: <p>
28: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
29:
30: <p>
31: For changes in other releases, click below:<br>
32: <a href="plus20.html">2.0</a>,
33: <a href="plus21.html">2.1</a>,
34: <a href="plus22.html">2.2</a>,
35: <a href="plus23.html">2.3</a>,
36: <a href="plus24.html">2.4</a>,
37: <a href="plus25.html">2.5</a>,
38: <a href="plus26.html">2.6</a>,
39: <a href="plus27.html">2.7</a>,
40: <a href="plus28.html">2.8</a>,
41: <a href="plus29.html">2.9</a>,
42: <a href="plus30.html">3.0</a>,
43: <a href="plus31.html">3.1</a>,
44: <a href="plus32.html">3.2</a>,
45: <a href="plus33.html">3.3</a>,
46: <a href="plus34.html">3.4</a>,
47: <a href="plus35.html">3.5</a>,
1.3 deraadt 48: <a href="plus37.html">3.7</a>,
1.15 deraadt 49: <br>
1.6 deraadt 50: <a href="plus38.html">3.8</a>,
1.7 deraadt 51: <a href="plus39.html">3.9</a>,
1.8 deraadt 52: <a href="plus40.html">4.0</a>,
1.9 deraadt 53: <a href="plus41.html">4.1</a>,
1.12 deraadt 54: <a href="plus42.html">4.2</a>,
1.14 deraadt 55: <a href="plus43.html">4.3</a>,
1.15 deraadt 56: <a href="plus44.html">4.4</a>,
1.17 deraadt 57: <a href="plus45.html">4.5</a>,
1.18 deraadt 58: <a href="plus46.html">4.6</a>,
1.19 deraadt 59: <a href="plus47.html">4.7</a>,
1.20 deraadt 60: <a href="plus48.html">4.8</a>,
1.22 deraadt 61: <a href="plus49.html">4.9</a>,
1.23 nick 62: <a href="plus50.html">5.0</a>,
1.24 schwarze 63: <a href="plus51.html">5.1</a>,
1.25 nick 64: <a href="plus52.html">5.2</a>,
1.26 deraadt 65: <a href="plus53.html">5.3</a>,
1.27 deraadt 66: <a href="plus54.html">5.4</a>,
1.28 deraadt 67: <br>
1.30 deraadt 68: <a href="plus55.html">5.5</a>,
1.32 brett 69: <a href="plus56.html">5.6</a>,
1.33 deraadt 70: <a href="plus57.html">5.7</a>,
1.36 deraadt 71: <a href="plus58.html">5.8</a>,
1.37 deraadt 72: <a href="plus59.html">5.9</a>,
1.43 deraadt 73: <a href="plus60.html">6.0</a>,
1.45 ! deraadt 74: <a href="plus61.html">6.1</a>,
1.1 miod 75: <a href="plus.html">current</a>.
76: <br>
77:
78: <p>
1.31 deraadt 79: <h3><font color="#0000e0">Changes made between OpenBSD 3.5 and 3.6</font></h3>
1.1 miod 80: <p>
81:
82: <ul>
1.39 sthen 83: <li>Fix <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> attachment on <a href="http://man.openbsd.org/?query=atw&sektion=4">atw(4)</a> devices.
1.1 miod 84: <!-- ^ 20040912 -->
85: <li><font color="#e00000"><strong>SECURITY FIX: Eilko Bos reported that radius authentication, as implemented by login_radius(8), was not checking the shared secret used for replies sent by the radius server.</strong></font> This could allow an attacker to spoof a reply granting access to the attacker. Note that OpenBSD does not ship with radius authentication enabled.<br>
1.4 deraadt 86: <a href="errata36.html#radius">A source code patch is available</a>.<br>
1.1 miod 87: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
88: <!-- ^ 20040911 -->
1.39 sthen 89: <li>Bail out of <a href="http://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a> on errors when making very small filesystems.
1.1 miod 90: <!-- ^ 20040910 -->
91: <li>Move MIPS to 64-bit.
1.39 sthen 92: <li>Fix <a href="http://man.openbsd.org/?query=copyout&sektion=9">copyout(9)</a> of <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> anchors with relative paths and wildcards.
93: <li>Track the peer count correctly in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> and <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>, fixing memory corruption in both.
94: <li>Fix a null dereference in <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>.
95: <li>Just print the raw IP protocol number in <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a> instead of fetching the protocol name.
1.1 miod 96: <!-- ^ 20040909 -->
1.39 sthen 97: <li>Stop <a href="http://man.openbsd.org/?query=routed&sektion=8">routed(8)</a> fiddling with routes controlled by <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
98: <li><font color="#e00000"><strong>SECURITY FIX: <a href="http://man.openbsd.org/?query=httpd&sektion=8">httpd(8)</a>'s mod_rewrite module can be made to write one zero byte in an arbitrary memory position outside of a char array,</strong></font> causing a DoS or possibly buffer overflows. This would require enabling dbm for mod_rewrite and making use of a malicious dbm file.<br>
1.4 deraadt 99: <a href="errata36.html#httpd2">A source code patch is available</a>.<br>
1.1 miod 100: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 101: <li>Stop <a href="http://man.openbsd.org/?query=telnetd&sektion=8">telnetd(8)</a> closing the slave fd from <a href="http://man.openbsd.org/?query=openpty&sektion=3">openpty(3)</a> and then reopening it.
1.1 miod 102: <!-- ^ 20040908 -->
1.39 sthen 103: <li>Set a cleanup handler for HUP as well as INT, TERM and WINCH on the <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> multiplex control socket.
104: <li>Stop <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> dying on <a href="http://man.openbsd.org/?query=sendmsg&sektion=2">sendmsg(2)</a> failures.
105: <li>Unbreak <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>'s -netmask option.
106: <li>Fix a bad cast from mode_t to short in <a href="http://man.openbsd.org/?query=ar&sektion=1">ar(1)</a>.
1.1 miod 107: <!-- ^ 20040907 -->
1.39 sthen 108: <li>Check for interrupted waits in <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a>, fixing late reaping of zombie processes and other ignored signals.
1.1 miod 109: <!-- ^ 20040906 -->
110: <!-- ^ 20040905 -->
111: <!-- ^ 20040904 -->
1.39 sthen 112: <li>Don't busy-wait on ENOBUFS in <a href="http://man.openbsd.org/?query=pppoe&sektion=8">pppoe(8)</a>.
1.1 miod 113: <!-- ^ 20040903 -->
1.39 sthen 114: <li>Stop the mixer resetting <a href="http://man.openbsd.org/?query=emu&sektion=4">emu(4)</a>'s volume to very very loud.
1.1 miod 115: <!-- ^ 20040902 -->
116: <li>Make sure kernfs_xread() isn't called with a negative offset.
117: <li><font color="#e00000"><strong>SECURITY FIX: Chris Evans reported several flaws (stack and integer overflows) in the Xpm library code that parses image files (CAN-2004-0687, CAN-2004-0688).</strong></font> Some of these would be exploitable when parsing malicious image files in an application that handles XPM images, if they could escape ProPolice.<br>
1.4 deraadt 118: <a href="errata36.html#xpm">A source code patch is available</a>.<br>
1.1 miod 119: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
120: <!-- ^ 20040901 -->
1.39 sthen 121: <li>Stop non-MASTER <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> hosts replying to ARP requests, as this upsets some layer 3 switches.
1.1 miod 122: <!-- ^ 20040831 -->
1.39 sthen 123: <li>Stop <a href="http://man.openbsd.org/?query=login&sektion=1">login(1)</a> treating the 'bar' in username foo.bar as a Kerberos instance, that's a krb4 syntax we no longer use.
1.1 miod 124: <li>Fix fd passing problems with S/Key on sparc*.
1.39 sthen 125: <li>Don't do DNS lookups when reading <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>'s config, save them for later.
126: <li>In <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>, don't log transient network errors from <a href="http://man.openbsd.org/?query=sendto&sektion=2">sendto(2)</a>.
127: <li>Fix <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a>'s handling of adaptive timeouts.
128: <li>Enforce minimum lease time of 60 seconds in <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>, to stop bogus 0s leases from the server causing the client to spin.
129: <li>Fix oversized copies that were causing memory faults in <a href="http://man.openbsd.org/?query=usb&sektion=4">usb(4)</a>.
1.1 miod 130: <!-- ^ 20040830 -->
131: <!-- ^ 20040829 -->
1.39 sthen 132: <li>Don't close stdin in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> unless we're reexec'ing.
1.1 miod 133: <!-- ^ 20040828 -->
1.39 sthen 134: <li>Make sure <a href="http://man.openbsd.org/?query=pkg_create&sektion=1">pkg_create(1)</a> keeps track of the current working directory.
1.1 miod 135: <!-- ^ 20040827 -->
136: <li><font color="#e00000"><strong>RELIABILITY FIX: Due to incorrect error handling in zlib an attacker could potentially cause a denial of service attack (CAN-2004-0797).</strong></font><br>
1.4 deraadt 137: <a href="errata36.html#libz">A source code patch is available</a>.<br>
1.1 miod 138: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
139: <!-- ^ 20040826 -->
1.39 sthen 140: <li>Have /etc/<a href="http://man.openbsd.org/?query=security&sektion=8">security(8)</a> store a copy of the disklabel and report any changes.
1.1 miod 141: <!-- ^ 20040825 -->
142: <li>Only allow SIOCGET{VIF,SG}CNT from the multicast router socket (PR#3825).
143: <li>Document the fact that collisions have been found for MD4, MD5 and ripemd.
1.39 sthen 144: <li>Don't make <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> explode when <a href="http://man.openbsd.org/?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> returns EAI_NONAME.
1.1 miod 145: <li>Base the value of uvm_km_pages_lowat on the amount of physical memory.
146: <li>Back out the IPv6 prefix len 'fix', the old code was right.
147: <!-- ^ 20040824 -->
1.39 sthen 148: <li>Make <a href="http://man.openbsd.org/?query=xargs&sektion=1">xargs(1)</a>' behaviour match the manpage when the utility can't be executed.
149: <li>Fix <a href="http://man.openbsd.org/?query=fgetln&sektion=3">fgetln(3)</a> and <a href="http://man.openbsd.org/?query=realloc&sektion=3">realloc(3)</a> handling in libedit.
150: <li>Do the '%s' replacement for <a href="http://man.openbsd.org/?query=less&sektion=1">less(1)</a>'s LESSOPEN and LESSCLOSE environment variables ourselves instead of using <a href="http://man.openbsd.org/?query=snprintf&sektion=3">snprintf(3)</a>.
1.1 miod 151: <li>Don't send a SIGINT or SIGTERM to the entire process group when received by the shell unless the shell is the process group leader (PR#3820).
1.39 sthen 152: <li>In <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, fix the test for whether a newly-created SA replaces an old one.
153: <li>Enable Dead Peer Detection in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> by default.
1.1 miod 154: <li>Don't overwrite the raw IPv6 checksum field in a shared mbuf.
155: <!-- ^ 20040823 -->
1.39 sthen 156: <li>Fix high interrupt load in <a href="http://man.openbsd.org/?query=ste&sektion=4">ste(4)</a>.
1.1 miod 157: <!-- ^ 20040822 -->
1.39 sthen 158: <li>Remove the need for <a href="http://man.openbsd.org/?query=isakmpd.policy&sektion=5">isakmpd.policy(5)</a> file when starting <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> from <a href="http://man.openbsd.org/?query=rc&sektion=8">rc(8)</a>.
1.1 miod 159: <li>Fix the IPv6 prefix length sanity checks in in6_are_prefix_equal().
160: <!-- ^ 20040821 -->
161: <li>3.6-beta -> 3.6.
1.39 sthen 162: <li>Add a new control message to <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> that allows a session to be downed and restarted, accessible with the <a href="http://man.openbsd.org/?query=bgpctl&sektion=8">bgpctl(8)</a> command 'clear'.
163: <li>Unbreak parsing of multiple -o options to <a href="http://man.openbsd.org/?query=mount_nfs&sektion=8">mount_nfs(8)</a>.
1.1 miod 164: <!-- ^ 20040820 -->
1.39 sthen 165: <li>Stop <a href="http://man.openbsd.org/?query=bge&sektion=4">bge(4)</a>, <a href="http://man.openbsd.org/?query=sk&sektion=4">sk(4)</a> and <a href="http://man.openbsd.org/?query=ti&sektion=4">ti(4)</a> complaining about a lack of jumbo frame buffers for inbound frames, unless debugging is on.
166: <li>On nexthop reachability status changes always notify the <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> RDE, not just when the nexthop was previously unavailable.
1.1 miod 167: <!-- ^ 20040819 -->
1.39 sthen 168: <li>Don't send bad IP packets via <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> when monitoring a <a href="http://man.openbsd.org/?query=gre&sektion=4">gre(4)</a> interface (PR#3852).
1.1 miod 169: <!-- ^ 20040818 -->
1.39 sthen 170: <li>Fix descriptor passing in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
171: <li>Stop networks disappearing on <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> reload by always updating the prefix timestamp.
172: <li>Remove a null deref in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
173: <li>Implement the SMTP 'QUIT' command in <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a>.
174: <li>Fix an out-of-bounds read in <a href="http://man.openbsd.org/?query=makeinfo&sektion=1">makeinfo(1)</a>.
1.1 miod 175: <!-- ^ 20040817 -->
1.39 sthen 176: <li>Remove ip6.int from the <a href="http://man.openbsd.org/?query=named&sektion=8">named(8)</a> example config files.
1.1 miod 177: <li>Bump OpenSSH to version 3.9.
1.39 sthen 178: <li>Put in a temporary fix for <a href="http://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> cards with station firmware < 1.8. Real fix after the 3.6 release.
1.1 miod 179: <!-- ^ 20040816 -->
1.39 sthen 180: <li>Remove <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a> greylist entries the second they expire.
181: <li>Back out the recent <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>-skips-downed-interfaces change, it breaks IPv6.
1.1 miod 182: <!-- ^ 20040815 -->
1.39 sthen 183: <li>Add an example <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a> /etc/mail/genericstable.
184: <li>When <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>'s -K switch is active, check the peer's proposal against <a href="http://man.openbsd.org/?query=isakmpd.conf&sektion=5">isakmpd.conf(5)</a>.
185: <li>Map the whole ld.so hints file for a.out in one <a href="http://man.openbsd.org/?query=mmap&sektion=2">mmap(2)</a>, as was done for ELF.
1.1 miod 186: <!-- ^ 20040814 -->
1.39 sthen 187: <li>Fix auto request sense handling in <a href="http://man.openbsd.org/?query=ahc&sektion=4">ahc(4)</a> and <a href="http://man.openbsd.org/?query=ahd&sektion=4">ahd(4)</a>.
188: <li>Stop a coredump in lib<a href="http://man.openbsd.org/?query=regex&sektion=3">regex(3)</a>.
189: <li>Fix a busy-wait on transmit failure in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
190: <li>Add an extra check for a NULL message in the privsep code for <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, <a href="http://man.openbsd.org/?query=named&sektion=8">named(8)</a>, <a href="http://man.openbsd.org/?query=pflogd&sektion=8">pflogd(8)</a>, <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>, <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>, <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> and the X server.
1.1 miod 191: <!-- ^ 20040813 -->
1.39 sthen 192: <li>Finally fix <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> problems with DNS non-availability at startup.
193: <li>Fix a bad dereference in <a href="http://man.openbsd.org/?query=gcc&sektion=1">gcc(1)</a>.
194: <li>In <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, ignore RFC2545 and don't allow IPv6 link-local addresses to be a next hop.
195: <li>Stop a core dump in <a href="http://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a> by checking the block size against MAXBSIZE.
1.1 miod 196: <li>Validate the superblock size recorded in the superblock, to prevent a panic.
197: <!-- ^ 20040812 -->
1.39 sthen 198: <li>Use atomicio instead of a few pieces of homegrown code in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
199: <li>Some signedness cleanups in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
200: <li>Add <a href="http://man.openbsd.org/?query=dladdr&sektion=3">dladdr(3)</a> support to the dynamic loader, and extend <a href="http://man.openbsd.org/?query=dlsym&sektion=3">dlsym(3)</a> to match 'standards'.
201: <li>Plug a memory leak in <a href="http://man.openbsd.org/?query=kvm_close&sektion=3">kvm_close(3)</a>.
202: <li>Fix <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> MRT dumps from cloned sessions.
203: <li>With -q in effect, stop <a href="http://man.openbsd.org/?query=grep&sektion=1">grep(1)</a> searching as soon as a match is found.
204: <li>Skip over non-UP interfaces in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>, fixing some problems with <a href="http://man.openbsd.org/?query=pppd&sektion=8">pppd(8)</a>.
205: <li>Fix a missing <a href="http://man.openbsd.org/?query=lseek&sektion=2">lseek(2)</a> error check in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
206: <li>Only close a pipe if it's open in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
207: <li>Fix a minor memory leak in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
208: <li>Surround <a href="http://man.openbsd.org/?query=pkg_delete&sektion=1">pkg_delete(1)</a>'s main loop with an eval{} block, so that <a href="http://man.openbsd.org/?query=ldconfig&sektion=8">ldconfig(8)</a>, directory removal, manpage and font directory processing always occur.
209: <li>Back out the <a href="http://man.openbsd.org/?query=mmap&sektion=2">mmap(2)</a>-based <a href="http://man.openbsd.org/?query=malloc&sektion=3">malloc(3)</a> for now, some architectures aren't working right yet.
210: <li>A stack of <a href="http://man.openbsd.org/?query=ohci&sektion=4">ohci(4)</a> fixes from NetBSD.
1.1 miod 211: <!-- ^ 20040811 -->
212: <li><font color="#e00000"><strong>RELIABILITY FIX: Improved verification of ICMP errors in order to minimize the impact of ICMP attacks against TCP.</strong></font><br>
1.4 deraadt 213: <a href="errata36.html#icmp">A source code patch is available</a>.<br>
1.1 miod 214: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 215: <li>Show the difference between the expected and received IP checksum in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
216: <li>Now that <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> decodes the IP fragment returned in an ICMP error message, allow the TCP parser to print the source and destination ports from incomplete TCP headers.
217: <li>When <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> receives an ICMP error and -vv is in effect, also dump the IP packet embedded in the error message. Based on tcpdump.org.
218: <li>Fix a bad sizeof in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
219: <li>Implement better RFC 3706 Dead Peer Detection in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
220: <li>Fix the MED setting in outgoing <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> updates.
221: <li>In <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>, handle DNS lookup failures properly in the case of server pools.
222: <li>Have <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a>'s @mandir and @fontdir keywords do the right thing on package delete, and have @fontdir do the necessary font processing.
223: <li>Fix a dynamic group-related panic in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>.
1.1 miod 224: <!-- ^ 20040810 -->
1.39 sthen 225: <li>Support the setenv capability in <a href="http://man.openbsd.org/?query=login.conf&sektion=5">login.conf(5)</a> like in NetBSD, including '~' and '$' macro expansion for the homedir and username respectively.
1.1 miod 226: <li>Import and merge Perl 5.8.5 from CPAN. Crank libperl's major number.
227: <li>3.5-current -> 3.6-beta.
1.39 sthen 228: <li>Stability and performance fixes to <a href="http://man.openbsd.org/?query=ste&sektion=4">ste(4)</a> from FreeBSD.
229: <li>Fix an out-of-bounds write in libafs, caught by the <a href="http://man.openbsd.org/?query=mmap&sektion=2">mmap(2)</a>-based <a href="http://man.openbsd.org/?query=malloc&sektion=3">malloc(3)</a>.
1.1 miod 230: <!-- ^ 20040809 -->
231: <li>Fix a missing initialisation of the route info structure in the kernel and stop a panic.
1.39 sthen 232: <li>Stop doing unnecessary PHY resets on <a href="http://man.openbsd.org/?query=hme&sektion=4">hme(4)</a>.
233: <li>Remove the need for -w when setting values in <a href="http://man.openbsd.org/?query=radioctl&sektion=1">radioctl(1)</a>.
234: <li>Fix <a href="http://man.openbsd.org/?query=iostat&sektion=8">iostat(8)</a>'s average KB per transfer calculation.
1.1 miod 235: <!-- ^ 20040808 -->
1.39 sthen 236: <li>Do a <a href="http://man.openbsd.org/?query=chroot&sektion=2">chroot(2)</a> before running <a href="http://man.openbsd.org/?query=ldconfig&sektion=8">ldconfig(8)</a> when DESTDIR is set in <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a>.
237: <li>Add IPv6 router solicitation and router advertisement ICMP messages to the default <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> filter loaded in <a href="http://man.openbsd.org/?query=rc&sektion=8">rc(8)</a>.
1.1 miod 238: <!-- ^ 20040807 -->
239: <li>Initial work on SGI MIPS64 support.
1.39 sthen 240: <li>Only close the stream passed to <a href="http://man.openbsd.org/?query=pclose&sektion=3">pclose(3)</a> if it was opened by <a href="http://man.openbsd.org/?query=popen&sektion=3">popen(3)</a>.
241: <li>In <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a>, invoke the OpenBSD::Makewhatis module directly insteading of forking <a href="http://man.openbsd.org/?query=makewhatis&sektion=8">makewhatis(8)</a>.
242: <li>Reorganise <a href="http://man.openbsd.org/?query=makewhatis&sektion=8">makewhatis(8)</a> to avoid using unnecessary code, and allow invocation as a <a href="http://man.openbsd.org/?query=perl&sektion=1">perl(1)</a> module.
243: <li>Big update to <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, moving towards IPv6 support.
244: <li>New @lib marker in <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> packing lists, that lets the tools know when to run <a href="http://man.openbsd.org/?query=ldconfig&sektion=8">ldconfig(8)</a>.
245: <li>Many more <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> fixes and improvements.
1.1 miod 246: <!-- ^ 20040806 -->
1.39 sthen 247: <li>Refactor <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> etc. packing list code.
248: <li>Now that <a href="http://man.openbsd.org/?query=malloc&sektion=3">malloc(3)</a> uses <a href="http://man.openbsd.org/?query=mmap&sektion=2">mmap(2)</a> instead of <a href="http://man.openbsd.org/?query=sbrk&sektion=2">sbrk(2)</a>, remove the rlimit check from the userland code and let the kernel do it.
249: <li>Use the new fd-passing functionality in <a href="http://man.openbsd.org/?query=auth_subr&sektion=3">BSD_AUTH(3)</a> to implement record locking for S/Key logins.
1.1 miod 250: <li>Stop trying to change the cwd of processes after a forced unmount.
251: <!-- ^ 20050805 -->
252: <li>Don't send signals from hardclock to prevent SMP problems in the near future.
1.39 sthen 253: <li>Add interrupt coalescing support to <a href="http://man.openbsd.org/?query=fxp&sektion=4">fxp(4)</a>
254: <li>Fix jumbo frames support in <a href="http://man.openbsd.org/?query=sk&sektion=4">sk(4)</a>.
255: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, return DH group 14 when /etc/moduli is empty, fixing a hang.
1.1 miod 256: <!-- ^ 20040804 -->
1.39 sthen 257: <li>Allow a file descriptor to be passed on the <a href="http://man.openbsd.org/?query=auth_subr&sektion=3">BSD_AUTH(3)</a> back channel, to be used for stateful login scripts.
258: <li>Do a check for minval>maxval in <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>
259: <li>Change the minval and maxval parameters to <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a> from unsigned to signed long long, simplifying the code.
260: <li>Allow an autonegotiation to be forced at <a href="http://man.openbsd.org/?query=mii&sektion=4">mii(4)</a> attach time.
1.1 miod 261: <li>Don't crash the kernel in autoconf when matching an indirect device with verbose mode switched on.
262: <li>Allow NFS commits to be coalesced instead of always sending a commit for each block.
1.39 sthen 263: <li>MRT dump compatibility fixes for <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
264: <li>Add route label support to <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a> via the -label keyword.
1.1 miod 265: <li>Introduce 'route labels', allowing up to 32 bytes of information to be attached to a route.
1.39 sthen 266: <li>Fix reference counting bugs in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, avoiding leaks.
267: <li>Make disk geometry parameters in <a href="http://man.openbsd.org/?query=fdisk&sektion=8&arch=i386">fdisk(8/i386)</a> unsigned values to avoid some signedness problems.
1.1 miod 268: <li>Don't trim device major and minor numbers to 8 bits when accessing device nodes over NFS.
1.39 sthen 269: <li>Allow <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a> to use a unicast sync peer, via the new 'syncpeer' keyword to <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>. This lets pfsync operate over IPsec.
270: <li>Show if locking is present in <a href="http://man.openbsd.org/?query=pstat&sektion=8">pstat(8)</a> -f output.
271: <li>Add <a href="http://man.openbsd.org/?query=fxp&sektion=4">fxp(4)</a> microcode for interrupt coalescing. From Intel via FreeBSD.
272: <li>Have <a href="http://man.openbsd.org/?query=lint&sektion=1">lint(1)</a> allow more integer types in bitfields.
1.1 miod 273: <!-- ^ 20040803 -->
1.39 sthen 274: <li>Set initial latency and cacheline size for <a href="http://man.openbsd.org/?query=cardbus&sektion=4">cardbus(4)</a> devices.
275: <li>Out-of-line some functions in <a href="http://man.openbsd.org/?query=isp&sektion=4">isp(4)</a> to shrink the kernel a bit.
276: <li>In <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> don't expire phase 2 SAs that are not yet established on receipt of a SIGHUP.
277: <li>Fix <a href="http://man.openbsd.org/?query=pcmcia&sektion=4">pcmcia(4)</a> crashes (PR#3732, PR#3881). More work required.
1.1 miod 278: <li>New @man element for packing lists.
1.39 sthen 279: <li>If LK_NOWAIT is passed to <a href="http://man.openbsd.org/?query=vget&sektion=9">vget(9)</a>, return EBUSY if the vnode is <a href="http://man.openbsd.org/?query=lock&sektion=9">lock(9)</a>ed.
1.1 miod 280: <!-- ^ 20040802 -->
1.39 sthen 281: <li>Rewind the tape less often when repositioning an <a href="http://man.openbsd.org/?query=st&sektion=4">st(4)</a> device.
282: <li>New <a href="http://man.openbsd.org/?query=malloc&sektion=3">malloc(3)</a> implementation using <a href="http://man.openbsd.org/?query=mmap&sektion=2">mmap(2)</a> instead of <a href="http://man.openbsd.org/?query=sbrk&sektion=2">sbrk(2)</a>. This means that malloc now gets all the benefits of mmap's randomisation feature.
1.1 miod 283: <li>Deal with upward-growing stacks when checking for the end of the stackgap in sys/compat/common.
1.39 sthen 284: <li>Major updates to <a href="http://man.openbsd.org/?query=ahc&sektion=4">ahc(4)</a>. From FreeBSD.
1.1 miod 285: <!-- ^ 20040801 -->
1.39 sthen 286: <li>Kill GATEWAY and IPFORWARDING <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> options, since their functionality has long been available from <a href="http://man.openbsd.org/?query=sysctl&sektion=8">sysctl(8)</a>.
287: <li>Have <a href="http://man.openbsd.org/?query=httpd&sektion=8">httpd(8)</a> correctly use port information supplied by the client (if available) when UseCanonicalName is off.
1.1 miod 288: <!-- ^ 20040731 -->
1.39 sthen 289: <li>New <a href="http://man.openbsd.org/?query=bgpd.conf&sektion=5">bgpd.conf(5)</a> announce type "default-route", which will only announce the default route to a specified neighbour.
290: <li>Drain <a href="http://man.openbsd.org/?query=hotplug&sektion=4">hotplug(4)</a>'s event queue on close, fixing a hang on shutdown (PR#3874).
291: <li>Fix <a href="http://man.openbsd.org/?query=siop&sektion=4">siop(4)</a> probe problems on hppa.
292: <li>Call /bin/ksh instead of /bin/sh in the installer scripts, since the <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a> mannerisms will be disabled when invoked as <a href="http://man.openbsd.org/?query=sh&sektion=1">sh(1)</a> soon.
1.1 miod 293: <!-- ^ 20040730 -->
1.39 sthen 294: <li>Fix a missing initialisation when processing an RDE update in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
295: <li>Helpfully, don't truncate the lease file to zero length on <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> startup.
296: <li>Keep a unique ID for each server <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> talks to.
297: <li>Display IKE Dead Peer Detection notifications in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
298: <li>Fix the conditions under which <a href="http://man.openbsd.org/?query=pool_put&sektion=9">pool_put(9)</a> frees a page.
1.1 miod 299: <li>Fix NAT-T Aggressive Mode by putting NAT-D checks in the right place.
1.39 sthen 300: <li>Don't set the output filename in <a href="http://man.openbsd.org/?query=compress&sektion=1">compress(1)</a> when in -t mode, avoiding an error which the input filename doesn't end in '.gz'.
301: <li>Drop ip6.int query support for IPv6 reverse lookups with <a href="http://man.openbsd.org/?query=gethostbyaddr&sektion=3">gethostbyaddr(3)</a>.
1.1 miod 302: <!-- ^ 20040729 -->
1.39 sthen 303: <li>Use <a href="http://man.openbsd.org/?query=SHA1Pad&sektion=3">SHA1Pad(3)</a> in libskey, instead of relying on undocumented behaviour from <a href="http://man.openbsd.org/?query=SHA1Final&sektion=3">SHA1Final(3)</a>.
1.1 miod 304: <li>Add new timekeeping code, MI-only for now and not yet enabled anywhere.
1.39 sthen 305: <li>In <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, prefer the path with the lowest MED value, not the highest.
306: <li>Have <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> retry failed DNS lookups from the config file every sixty seconds.
307: <li>Set the default localpreference in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> to 100 instead of 0.
1.1 miod 308: <li>Fix a leak when passing a file descriptor between processes.
1.39 sthen 309: <li>Support lists-within-lists for the AS and prefix in <a href="http://man.openbsd.org/?query=bgpd.conf&sektion=5">bgpd.conf(5)</a>.
310: <li>Support list expansion for the AS in <a href="http://man.openbsd.org/?query=bgpd.conf&sektion=5">bgpd.conf(5)</a>.
311: <li>In <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>, only print TCP sequence numbers for SYN, FIN or RST packets if -vv is in effect.
312: <li>Use <a href="http://man.openbsd.org/?query=pool&sektion=9">pool(9)</a>s instead of R_Malloc() for rtentry and rttimer structs. Adapted from NetBSD.
313: <li>Have <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a> set the user and group on UNIX domain sockets.
314: <li>Add -ttttt option (timestamp difference since the first packet) to <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
315: <li>In <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, call <a href="http://man.openbsd.org/?query=setsid&sektion=2">setsid(2)</a> before doing re-exec.
1.1 miod 316: <!-- ^ 20040728 -->
1.39 sthen 317: <li>Support pf-style macro expansion for the peer spec and prefix in <a href="http://man.openbsd.org/?query=bgpd.conf&sektion=5">bgpd.conf(5)</a>.
1.1 miod 318: <!-- ^ 20040727 -->
1.39 sthen 319: <li>Backport from Apache 2.0 a fix for a mod_usertrack coredump in <a href="http://man.openbsd.org/?query=httpd&sektion=8">httpd(8)</a>.
1.1 miod 320: <!-- ^ 20040726 -->
1.39 sthen 321: <li>Some <a href="http://man.openbsd.org/?query=atw&sektion=4">atw(4)</a> fixes from NetBSD.
1.1 miod 322: <!-- ^ 20040725 -->
1.39 sthen 323: <li>Fix IP header alignment in <a href="http://man.openbsd.org/?query=an&sektion=4">an(4)</a>.
1.1 miod 324: <!-- ^ 20040724 -->
1.39 sthen 325: <li>Fix a use-after-<a href="http://man.openbsd.org/?query=free&sektion=3">free(3)</a> in <a href="http://man.openbsd.org/?query=gprof&sektion=1">gprof(1)</a>.
1.1 miod 326: <!-- ^ 20040723 -->
327: <li>Add in a missing NULL check in DIOCCHANGERULE, preventing a rare crash.<br>
328: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
329: <li>Use 'directory/' instead of '@dir directory' in packing lists.
1.39 sthen 330: <li>Ignore <a href="http://man.openbsd.org/?query=utime&sektion=3">utime(3)</a> failure in <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a> poke_daemon(), it doesn't matter any more since tickling the socket is enough.
1.1 miod 331: <li>Use mutex instead of SIMPLELOCK around the kernel's deadproc list.
332: <li>Don't allow m_dup1() to return an mbuf chain when it should return a single mbuf.
1.39 sthen 333: <li>Start work on removing the size limit from the <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a> minibuffer.
1.1 miod 334: <!-- ^ 20040722 -->
1.39 sthen 335: <li>Fix a problem with X on 64-bit architectures that was causing some <a href="http://man.openbsd.org/?query=wsmouse&sektion=4">wsmouse(4)</a> input events to be lost.
1.1 miod 336: <li>Don't clobber an existing /etc/fonts/local.conf in XF4 make install.
1.39 sthen 337: <li><a href="http://man.openbsd.org/?query=kqueue&sektion=2">kqueue(2)</a> support for NFS, adapted from NetBSD.
338: <li>Use <a href="http://man.openbsd.org/?query=fseek&sektion=3">fseek(3)</a> instead of <a href="http://man.openbsd.org/?query=fseeko&sektion=3">fseeko(3)</a> in <a href="http://man.openbsd.org/?query=hexdump&sektion=1">hexdump(1)</a>, since the argument being used is an off_t.
339: <li>Don't mess up the internal state of a <a href="http://man.openbsd.org/?query=pipe&sektion=2">pipe(2)</a> when pipelock() fails, just return with an error.
340: <li>Fix an unnecessary fatal() in <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> when the remote dies quickly.
341: <li>Don't display invalid usernames using <a href="http://man.openbsd.org/?query=setproctitle&sektion=3">setproctitle(3)</a> in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> (OpenSSH bugzilla #899).
342: <li>Fix a multiple-free in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
343: <li>More <a href="http://man.openbsd.org/?query=umass&sektion=4">umass(4)</a> fixes from NetBSD.
344: <li>Fix CPU speed-related sound slowdown in <a href="http://man.openbsd.org/?query=auich&sektion=4">auich(4)</a> (PR#3814).
1.1 miod 345: <li>More pointless inline removal in the kernel.
1.39 sthen 346: <li>Implement outgoing interrupt pipes (part of the USB 1.1 spec) in <a href="http://man.openbsd.org/?query=usb&sektion=4">usb(4)</a>. From FreeBSD.
1.1 miod 347: <!-- ^ 20040721 -->
348: <li>Disable the XFree86 module loader on powerpc, ahead of upcoming malloc() changes.
349: <li>Strip the strcpy() and strcat() builtins from GCC 3 (as was done for GCC 2) to make them easier to spot and eradicate.
1.39 sthen 350: <li>New <a href="http://man.openbsd.org/?query=cdce&sektion=4">cdce(4)</a> driver supporting USB CDC Ethernet devices.
1.1 miod 351: <li>Use mutexes in a few places where SIMPLELOCK was used before.
352: <li>Add i386 and AMD machine-dependent mutex implementations.
353: <li>Introduce mutex support to the kernel. Not optimally efficient, and not MP-safe.
1.39 sthen 354: <li>New @info keywork to <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> etc., supporting GNU info documents.
355: <li>Reintroduce standalone <a href="http://man.openbsd.org/?query=popa3d&sektion=8">popa3d(8)</a> after fixes and more testing.
356: <li>Stop <a href="http://man.openbsd.org/?query=wicontrol&sektion=8">wicontrol(8)</a> displaying garbage when run against a nonexistent interface.
357: <li>Make <a href="http://man.openbsd.org/?query=gprof&sektion=1">gprof(1)</a> work properly on 64-bit architectures where the text is above 4GB.
1.1 miod 358: <!-- ^ 20040720 -->
1.39 sthen 359: <li>Display correct labels in the output from <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> -st.
360: <li>Fix an <a href="http://man.openbsd.org/?query=atw&sektion=4">atw(4)</a> panic on detach.
361: <li>Correct <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a>'s error checks for <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>.
362: <li>Start work on a tutorial for the <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a> we have, not PMake.
363: <li><a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>ify <a href="http://man.openbsd.org/?query=id&sektion=1">id(1)</a>.
364: <li>Fix a signal race in <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a>.
1.1 miod 365: <!-- ^ 20040719 -->
1.39 sthen 366: <li>Fix a leak in <a href="http://man.openbsd.org/?query=getrrsetbyname&sektion=3">getrrsetbyname(3)</a>.
367: <li>Don't let <a href="http://man.openbsd.org/?query=xterm&sektion=1">xterm(1)</a> crash when selecting text.
368: <li>React more rationally in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> to (possibly) transient network errors from <a href="http://man.openbsd.org/?query=recvfrom&sektion=2">recvfrom(2)</a>.
369: <li>More improvements to <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>'s query interval scaling.
370: <li>Return EINVAL if a negative offset is passed to <a href="http://man.openbsd.org/?query=ftruncate&sektion=2">ftruncate(2)</a>.
371: <li>Don't check for the non-existent md5 of an '@link' in <a href="http://man.openbsd.org/?query=pkg_delete&sektion=1">pkg_delete(1)</a>.
1.1 miod 372: <li>Add bsd.rd to the list of filesets installed by default.
373: <li>For NFS and URL installs, assume the network is already set up the way the user wants it.
374: <!-- ^ 20040718 -->
1.39 sthen 375: <li>Back out standalone support from <a href="http://man.openbsd.org/?query=popa3d&sektion=8">popa3d(8)</a>.
1.1 miod 376: <li>Remove K&R support from libc/sys/makelintstub.sh.
1.39 sthen 377: <li>Fix a use-after-<a href="http://man.openbsd.org/?query=free&sektion=3">free(3)</a> in <a href="http://man.openbsd.org/?query=amd&sektion=8">amd(8)</a>'s AFS code.
378: <li>Fix missing <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> lastlog messages under certain circumstances (OpenSSH bugzilla #463).
379: <li>Add an stty command to the <a href="http://man.openbsd.org/?query=boot.conf&sektion=8&arch=i386">boot.conf(8/i386)</a> to set the serial console speed.
1.1 miod 380: <li>Deal gracefully with a null sub-timezone in the installer.
1.39 sthen 381: <li>Unbreak the <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> normaliser's use of the timestamp as an extension to the sequence number.
1.1 miod 382: <!-- ^ 20040717 -->
1.39 sthen 383: <li>Add a ruleset optimiser to <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> (new -o and -oo options).
384: <li>In <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>, add a test of the lower bound when the upper bound is greater than LLONG_MAX.
385: <li>Updates to the <a href="http://man.openbsd.org/?query=san&sektion=4">san(4)</a> driver.
386: <li>Kill <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a> history functions on non-interactive shells. Based on NetBSD.
1.1 miod 387: <li>Back out a TCP change that left the ends of a newly-ESTABLISHED connection with asymmetric congestion windows.
388: <!-- ^ 20040716 -->
1.39 sthen 389: <li>Unbreak antenna diversity setting in <a href="http://man.openbsd.org/?query=ancontrol&sektion=8">ancontrol(8)</a>.
390: <li>Stop <a href="http://man.openbsd.org/?query=pkill&sektion=1">pkill(1)</a> whining when a process that it expects to be running has died, e.g. a privsep child that got reaped right away by the parent.
391: <li>Fix core dumps from <a href="http://man.openbsd.org/?query=wicontrol&sektion=8">wicontrol(8)</a> when fetching values a card doesn't support.
392: <li>New -D option to <a href="http://man.openbsd.org/?query=nc&sektion=1">nc(1)</a> switching on SO_DEBUG.
393: <li>In <a href="http://man.openbsd.org/?query=pkill&sektion=1">pkill(1)</a>, skip the pkill process itself and any processes marked P_SYSTEM every time.
1.1 miod 394: <li>The netiso code was removed from the tree. Noone cared.
1.39 sthen 395: <li>Many fixes and improvements to <a href="http://man.openbsd.org/?query=atw&sektion=4">atw(4)</a> from NetBSD and the reference driver via NetBSD.
1.1 miod 396: <!-- ^ 20040715 -->
1.39 sthen 397: <li>Add compat versions of <a href="http://man.openbsd.org/?query=msgctl&sektion=2">msgctl(2)</a>, <a href="http://man.openbsd.org/?query=semctl&sektion=2">semctl(2)</a> and <a href="http://man.openbsd.org/?query=shmctl&sektion=2">shmctl(2)</a> with 16-bit mode_t.
398: <li>Add new versions of the <a href="http://man.openbsd.org/?query=msgctl&sektion=2">msgctl(2)</a>, <a href="http://man.openbsd.org/?query=semctl&sektion=2">semctl(2)</a> and <a href="http://man.openbsd.org/?query=shmctl&sektion=2">shmctl(2)</a> functions to deal with the changes to mode_t (included in struct ipc_perm).
1.1 miod 399: <li>Refactor SysV shared memory functions, allowing them to automagically handle conversions between new and old structures in compatibility mode.
1.39 sthen 400: <li>Back out last vestiges of IPv6 fragment reassembly using <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> scrub.
401: <li>Drop the stratum calculation from <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
402: <li>Ignore clock synchronisation status returned to <a href="http://man.openbsd.org/?query=rdate&sektion=8">rdate(8)</a> -n clients.
1.1 miod 403: <li>Zero out the NFS generation number in struct stat in OpenBSD 3.5 and 4.3BSD compatibility modes.
404: <li>Only retransmit relevant NFS requests on nfs_reconnect().
1.39 sthen 405: <li>Rework <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a>/<a href="http://man.openbsd.org/?query=pkg_create&sektion=1">pkg_create(1)</a>'s @dirrm directive, and add @dir.
1.1 miod 406: <!-- ^ 20040714 -->
1.39 sthen 407: <li>Fix a double-free and some backwards logic in <a href="http://man.openbsd.org/?query=passwd&sektion=1">passwd(1)</a>.
1.1 miod 408: <li>Finally remove the deprecated passwd.conf functionality and files.
409: <li>Change mode_t and nlink_t from u_int16_t to u_int32_t.
410: <li>Add weak-aliased __errno(3) function to libc and bump all library major versions.
1.39 sthen 411: <li>Have <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> return decent server statistics to the client, including the stratum, reference time and synchronisation status.
412: <li>Ignore obviously malformed queries in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
413: <li>Use <a href="http://man.openbsd.org/?query=socketpair&sektion=2">socketpair(2)</a> instead of <a href="http://man.openbsd.org/?query=pipe&sektion=2">pipe(2)</a> in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
414: <li>In <a href="http://man.openbsd.org/?query=pkg_create&sektion=1">pkg_create(1)</a>, mark links as what they are instead of computing a size and checksum for them.
1.1 miod 415: <!-- ^ 20040713 -->
416: <!-- ^ 20040712 -->
1.39 sthen 417: <li>When <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> detects a file conflict, helpfully list the clashing file's originating package.
418: <li><a href="http://man.openbsd.org/?query=strtoul&sektion=3">strtoul(3)</a> -> <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a> in <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a>.
419: <li>Deal with count==0 correctly in <a href="http://man.openbsd.org/?query=newsyslog&sektion=8">newsyslog(8)</a>.
420: <li>Save process context in <a href="http://man.openbsd.org/?query=namei&sektion=9">namei(9)</a> avoiding a crash (PR#3842).
421: <li>Back out IPv6 fragment reassembly under the <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> scrub directive, it's not ready yet.
422: <li>Have <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> create a group when adding a dynamic interface that's not yet plumbed in.
423: <li>More <a href="http://man.openbsd.org/?query=usb&sektion=4">usb(4)</a> fixes from NetBSD.
424: <li>An endianness fix in <a href="http://man.openbsd.org/?query=nm&sektion=1">nm(1)</a>.
1.1 miod 425: <li>Fix lockup when unmounting a union filesystem.
426: <!-- ^ 20040711 -->
427: <li>Fix TCP NFS mount hangs after a server reset.
1.39 sthen 428: <li>Scale <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>'s query interval based on the local clock offset. More work to come.
429: <li>Endianness fixes to <a href="http://man.openbsd.org/?query=ehci&sektion=4">ehci(4)</a> from NetBSD.
430: <li>Remove descriptions of partition types from <a href="http://man.openbsd.org/?query=fdisk&sektion=8&arch=i386">fdisk(8/i386)</a>, shrinking the executable.
1.1 miod 431: <!-- ^ 20040710 -->
432: <li>HP-UX compatibility stuff for hppa.
1.39 sthen 433: <li>Fix <a href="http://man.openbsd.org/?query=sed&sektion=1">sed(1)</a> failure when the last character of the line buffer was a backslash. From FreeBSD and NetBSD.
434: <li><a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>ify <a href="http://man.openbsd.org/?query=procmap&sektion=1">procmap(1)</a>.
1.1 miod 435: <li>Fix cd9660 buffer writing code.
1.39 sthen 436: <li>Improve <a href="http://man.openbsd.org/?query=patch&sektion=1">patch(1)</a>'s detection of whether or not a patch has already been applied.
437: <li>Miscellaneous cleanup in <a href="http://man.openbsd.org/?query=reboot&sektion=8">reboot(8)</a>.
438: <li>Don't use <a href="http://man.openbsd.org/?query=strlcpy&sektion=3">strlcpy(3)</a> on a string that's not null-terminated in <a href="http://man.openbsd.org/?query=ftp&sektion=1">ftp(1)</a>.
1.1 miod 439: <li>Some ANSI prototypes in games, sbin and usr.sbin.
1.39 sthen 440: <li>Don't update the clock in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> without data.
441: <li>When saving a file, have <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a> check if it's null terminated and prompt the user to add it if desired.
442: <li>Rework <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>'s DNS handling to better deal with responses containing multiple addresses. Two keywords, 'server' and 'servers', with different semantics.
443: <li>Set the correct <a href="http://man.openbsd.org/?query=poll&sektion=2">poll(2)</a> timeout in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
1.1 miod 444: <!-- ^ 20040709 -->
1.39 sthen 445: <li>A couple of network mask issues with <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> tables.
446: <li>Fix a few missing <a href="http://man.openbsd.org/?query=close&sektion=2">close(2)</a> and <a href="http://man.openbsd.org/?query=free&sektion=3">free(3)</a> calls in an <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> error path.
447: <li>Fix overwriting of virtual MAC address by <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> on FDDI interfaces.
448: <li>Don't mistakenly skip a file in <a href="http://man.openbsd.org/?query=rcp&sektion=1">rcp(1)</a> and <a href="http://man.openbsd.org/?query=scp&sektion=1">scp(1)</a> by mistake when <a href="http://man.openbsd.org/?query=fchmod&sektion=2">fchmod(2)</a> fails twice.
449: <li>Sync <a href="http://man.openbsd.org/?query=gdb&sektion=1">gdb(1)</a>'s kvm interface with FSF, adding 'kvm proc' and 'kvm pcb' commands.
1.1 miod 450: <!-- ^ 20040708 -->
1.39 sthen 451: <li>Check for <a href="http://man.openbsd.org/?query=stat&sektion=2">stat(2)</a> failure in <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a>'s virtual filesystem.
452: <li>Fix a couple of MRT bugs in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
453: <li>Open the <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> script execution window from 1 to 3 seconds.
454: <li>Return -1 from <a href="http://man.openbsd.org/?query=ftw&sektion=3">ftw(3)</a> and <a href="http://man.openbsd.org/?query=nftw&sektion=3">nftw(3)</a> if <a href="http://man.openbsd.org/?query=fts_close&sektion=3">fts_close(3)</a> fails without returning an error.
455: <li>Fix a memory leak in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
456: <li>Better client responses from <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
457: <li>Better time handling code for <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
458: <li>Fix a <a href="http://man.openbsd.org/?query=systrace&sektion=1">systrace(1)</a> problem where argv[0] would be normalised and so break scripts that depend on the original path.
459: <li>Stop logging <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> responses with bad cookies, so attackers can't spam the log files. Back off logging in general.
460: <li>Don't listen by default in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>. New 'listen on' directive must be used instead.
461: <li>Allow for multiple IP addresses associated with hostnames listed in <a href="http://man.openbsd.org/?query=ntpd.conf&sektion=5">ntpd.conf(5)</a>.
462: <li>Add a 'trustlevel' for <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> peers, using the peer's timely network responses to judge its worthiness to affect the clock offset, and to set how often queries are sent.
1.1 miod 463: <!-- ^ 20040707 -->
1.39 sthen 464: <li>Implement filtering on peer replies in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
465: <li>Fix a couple of sizeof(wrongthing) in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
466: <li>New -R option fro <a href="http://man.openbsd.org/?query=ftp-proxy&sektion=8">ftp-proxy(8)</a> allowing <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> to safely accept client PASV-mode connections to a protected FTP server.
467: <li>Have <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> log the IP address NTP replies and incorrect cookies are received from.
468: <li>Allow and resolve hostnames in <a href="http://man.openbsd.org/?query=ntpd.conf&sektion=5">ntpd.conf(5)</a>.
469: <li>Add a couple of missing initialisations in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
470: <li>Set FTS_LOGICAL in <a href="http://man.openbsd.org/?query=ftw&sektion=3">ftw(3)</a> and <a href="http://man.openbsd.org/?query=nftw&sektion=3">nftw(3)</a> (unless FTS_PHYSICAL is explicitly passed in to the latter) as required by <a href="http://man.openbsd.org/?query=fts&sektion=3">fts(3)</a>.
471: <li>Some string cleaning and other fixes to <a href="http://man.openbsd.org/?query=ul&sektion=1">ul(1)</a>.
1.1 miod 472: <li>Back out the bogus fix for the TCP simultaneous close bug from TCP/IP Illustrated vol. 2, exercise 29.5.
1.39 sthen 473: <li>Some <a href="http://man.openbsd.org/?query=ehci&sektion=4">ehci(4)</a> fixes from NetBSD. Multiple devices can now be simultaneously active.
474: <li>Don't require -w for writes with <a href="http://man.openbsd.org/?query=audioctl&sektion=1">audioctl(1)</a>.
1.1 miod 475: <!-- ^ 20040706 -->
1.39 sthen 476: <li>Keep track of historical offset and delay values in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>, for later use in filtering.
1.1 miod 477: <li><font color="#e00000"><strong>RELIABILITY FIX: Under certain network load the kernel can run out of stack space.</strong></font> This was encountered in an environment using CARP on a VLAN interface. this issue initially manifested itself as an FPU-related crash on bootup.<br>
1.4 deraadt 478: <a href="errata36.html#rnd">A source code patch is available</a>.<br>
1.1 miod 479: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 480: <li>Fix a segfault in <a href="http://man.openbsd.org/?query=routed&sektion=8">routed(8)</a> with <a href="http://man.openbsd.org/?query=rtquery&sektion=8">rtquery(8)</a> messages from a non-local host (PR#3841).
481: <li>Fix <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>'s conversion from seconds to microseconds.
482: <li>Don't queue <a href="http://man.openbsd.org/?query=hotplug&sektion=4">hotplug(4)</a> events if there's no <a href="http://man.openbsd.org/?query=hotplugd&sektion=8">hotplugd(8)</a> running. When the last listening daemon exits, flush pending events.
483: <li><a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>ify <a href="http://man.openbsd.org/?query=chpass&sektion=1">chpass(1)</a>.
484: <li>Allow the argument to <a href="http://man.openbsd.org/?query=fstab&sektion=5">fstab(5)</a> options groupquota and userquota to be optional
485: <li>Implement 'set nexthop blackhole' and 'set nexthop reject' in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
486: <li>Give a helpful error message when <a href="http://man.openbsd.org/?query=pkg_create&sektion=1">pkg_create(1)</a> fails due to a missing @name.
487: <li>Remote the single-server limitation in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>.
488: <li>Use <a href="http://man.openbsd.org/?query=adjtime&sektion=2">adjtime(2)</a> to sync the local clock in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>, based on the median offset from the configured servers for now.
489: <li>Some <a href="http://man.openbsd.org/?query=ehci&sektion=4">ehci(4)</a> updates from NetBSD.
490: <li>Keep track of the device and inode of objects loaded by <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a>, so that it's no longer possible to have the same object loaded from two different locations.
1.1 miod 491: <!-- ^ 20040705 -->
1.39 sthen 492: <li>Die nicely if <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> can't read its config file.
493: <li>Fix a few missing <a href="http://man.openbsd.org/?query=freeaddrinfo&sektion=3">freeaddrinfo(3)</a>s in <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a>
1.1 miod 494: <li>Drop the requirement in the installer for a 'b' partition. If one exists use it as swap, and don't allow a mount point to be created there.
1.39 sthen 495: <li>SCHED_LOCK() before proc_stop() in issignal(), avoiding a panic from <a href="http://man.openbsd.org/?query=splassert&sektion=9">splassert(9)</a> #ifdef MULTIPROCESSOR.
496: <li>In <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> compute the local clock offset as per RFC 2030 section 5.
497: <li>Make the backspace and delete keys do the right thing by default in <a href="http://man.openbsd.org/?query=xterm&sektion=1">xterm(1)</a>.
1.1 miod 498: <!-- ^ 20040704 -->
1.39 sthen 499: <li><a href="http://man.openbsd.org/?query=calloc&sektion=3">calloc(3)</a> the right structure in <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> client_peer_init().
500: <li>Some cleanup in <a href="http://man.openbsd.org/?query=lam&sektion=1">lam(1)</a>.
501: <li>Fix a vnode leak in <a href="http://man.openbsd.org/?query=mount&sektion=2">mount(2)</a>.
502: <li>Change <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s MRT dump code to use fd passing.
503: <li>Put <a href="http://man.openbsd.org/?query=skey&sektion=1">skey(1)</a> code inside #ifdef SKEY in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>. From FreeBSD.
504: <li>Bypass the <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> normaliser for now when forwarding ip6 packets.
505: <li>Support '@host:port' syntax in <a href="http://man.openbsd.org/?query=syslog.conf&sektion=5">syslog.conf(5)</a>, allowing specification of the remote port.
1.1 miod 506: <!-- ^ 20040703 -->
1.39 sthen 507: <li>Respect TMPDIR when creating a temporary mountpoint for the new <a href="http://man.openbsd.org/?query=mount_mfs&sektion=8">mount_mfs(8)</a> -P option.
508: <li>Use <a href="http://man.openbsd.org/?query=strtoul&sektion=3">strtoul(3)</a> instead of <a href="http://man.openbsd.org/?query=strtol&sektion=3">strtol(3)</a> in <a href="http://man.openbsd.org/?query=setmode&sektion=3">setmode(3)</a>, and return ERANGE consistently for invalid octal modes.
509: <li>Update <a href="http://man.openbsd.org/?query=savecore&sektion=8">savecore(8)</a> to new-style kernel time handling.
1.1 miod 510: <li>Allow (but ignore) the -E and -X options in src/distrib/special/more.
1.39 sthen 511: <li>Fix a few division-by-zeros in <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a>.
1.1 miod 512: <!-- ^ 20040702 -->
1.39 sthen 513: <li>Fix rare cases of bogus permissions from <a href="http://man.openbsd.org/?query=mtree&sektion=8">mtree(8)</a>, caused by a missing initialisation.
514: <li>Add a few md use-before-init sanity checks in <a href="http://man.openbsd.org/?query=kvm&sektion=3">kvm(3)</a>.
515: <li>Check for a nonexistent name in <a href="http://man.openbsd.org/?query=kvm&sektion=3">kvm(3)</a> and print a useful error message.
1.1 miod 516: <!-- ^ 20040701 -->
517: <li>Use the evcount API for interrupts counting on hppa.
1.39 sthen 518: <li>Test for a tty break in the right place in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
519: <li>Fix <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a>'s handling of UNIX domain sockets.
520: <li>In <a href="http://man.openbsd.org/?query=mpt&sektion=4">mpt(4)</a> use SCSI_POLL during the probe since MP kernels don't enable interrupts until after the probe has completed.
521: <li><a href="http://man.openbsd.org/?query=strlcpy&sektion=9">strlcpy(9)</a> -> <a href="http://man.openbsd.org/?query=copyoutstr&sektion=9">copyoutstr(9)</a> when copying from kernel to userland in <a href="http://man.openbsd.org/?query=vnd&sektion=4">vnd(4)</a>.
1.1 miod 522: <!-- ^ 20040630 -->
523: <li>Allow shared library revision numbers to be overridden for libOSMesa, libXRes, libxkbfile and libkbui.
1.39 sthen 524: <li>Remove interface name verification code from <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a>, so that once again a rule referring to a non-existent interface simply never fires. This has the handy side-effect of allowing pfctl to be run as non-root again.
525: <li>Unbreak MSCHAP in <a href="http://man.openbsd.org/?query=pppd&sektion=8">pppd(8)</a> due to local <a href="http://man.openbsd.org/?query=MD4Update&sektion=3">MD4Update(3)</a> differences.
526: <li>Don't allow bogus routes with a nexthop inside 127/8 in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
527: <li>If no listener address is given to <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a>, listen on every IP address.
528: <li>Change a few <a href="http://man.openbsd.org/?query=memcpy&sektion=3">memcpy(3)</a> into <a href="http://man.openbsd.org/?query=strlcpy&sektion=3">strlcpy(3)</a> in <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> when copying the interface name.
529: <li>Install <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a>'s libmilter by default.
1.1 miod 530: <!-- ^ 20040629 -->
531: <li>In net80211, allow WEP keys to have lengths other than 40 or 108 bits.
1.39 sthen 532: <li>Don't try to <a href="http://man.openbsd.org/?query=strlcpy&sektion=9">strlcpy(9)</a> from userland into the kernel in <a href="http://man.openbsd.org/?query=vnd&sektion=4">vnd(4)</a>.
533: <li>Update zoneinfo files and <a href="http://man.openbsd.org/?query=ctime&sektion=3">ctime(3)</a> to tzdata2004a. Respect Georgia's wish to have the right timezone again.
534: <li>Remove '#if 0' around the real code for net80211 ioctl WI_RID_PRISM2. This allows <a href="http://man.openbsd.org/?query=atw&sektion=4">atw(4)</a> to do AP scanning via <a href="http://man.openbsd.org/?query=wicontrol&sektion=8">wicontrol(8)</a>.
535: <li>New -z option for <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a> to show devices even if they haven't generated an interrupt.
1.1 miod 536: <li>Use the new event counter API for interrupt counting on alpha, amd64, i386, macppc and sparc64.
1.39 sthen 537: <li>Add generic interrupt counter retrieval via <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a>, removing the need for i386-specific code in <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a> and <a href="http://man.openbsd.org/?query=systat&sektion=1">systat(1)</a>.
1.1 miod 538: <li>Add generic 'evcount' event counter API to the kernel.
539: <!-- ^ 20040628 -->
540: <li>Hack around a panic in 802.11 crypto startup due to the rnd device not being initialised.
541: <li>Add missing 802.11g and 802.11 'turbo' media types for the 802.11 framework to <net/if_media.h>.
542: <!-- ^ 20040627 -->
1.39 sthen 543: <li>Use congestion-sensitive IF_INPUT_ENQUEUE() in <a href="http://man.openbsd.org/?query=gre&sektion=4">gre(4)</a>.
544: <li>Alignment fixes in <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a> lcp and ipcp handling.
1.1 miod 545: <li>Allow the default console to be changed to a serial device from the installer. Only i386 uses this for now.
1.39 sthen 546: <li>In <a href="http://man.openbsd.org/?query=fvwm&sektion=1">fvwm(1)</a>, use two va_list and <a href="http://man.openbsd.org/?query=va_copy&sektion=3">va_copy(3)</a> instead of reusing a single va_list.
547: <li>New -P option to <a href="http://man.openbsd.org/?query=mount_mfs&sektion=8">mount_mfs(8)</a>, used to populate the mfs volume immediately after creation.
1.1 miod 548: <li>Make the root of an mfs partition inherit modes, owner and group from the mountpoint.
1.39 sthen 549: <li>Only add the <a href="http://man.openbsd.org/?query=ipcomp&sektion=4">ipcomp(4)</a> header if compression is actually used, i.e. if the packet got smaller after compression.
550: <li>New timeslot keyword for <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>, used by telco cards.
551: <li>Add SIOC[GS]IFTIMESLOT ioctls for telco cards (currently just <a href="http://man.openbsd.org/?query=san&sektion=4">san(4)</a>).
552: <li>New <a href="http://man.openbsd.org/?query=san&sektion=4">san(4)</a> driver for Sangoma T1/E1 cards.
553: <li>More narrowing down of <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>'s privsep interface.
1.1 miod 554: <li>After switching most of the device drivers to use generic ether_crc32_be(), add a table-driven implementation of this function. From FreeBSD PR#49957.
1.39 sthen 555: <li>Don't allow <a href="http://man.openbsd.org/?query=nanosleep&sektion=2">nanosleep(2)</a> called with a zero timeout to sleep indefinitely, sleep for at least 1/<a href="http://man.openbsd.org/?query=hz&sektion=9">hz</a> seconds.
556: <li>Enable <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> UDP encapsulation by default.
1.1 miod 557: <!-- ^ 20040626 -->
1.39 sthen 558: <li>Allow <a href="http://man.openbsd.org/?query=keynote&sektion=1">keynote(1)</a> policy checking to be disabled in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
559: <li>Remove netiso code from <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a>.
560: <li>Use the extended protocol in <a href="http://man.openbsd.org/?query=syslogc&sektion=8">syslogc(8)</a> to detect overflows (-o option).
561: <li>Extend the <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a> memory buffer protocol to include flags, starting with one to indicate that the buffers have overflowed.
562: <li>Fix <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> re-exec file descriptor handling.
563: <li>Introduce interface groups, accessible via new <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> keyword 'group'.
564: <li>String cleaning in <a href="http://man.openbsd.org/?query=twm&sektion=1">twm(1)</a>.
565: <li>More work on IPv6 normalisation in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>.
1.1 miod 566: <li>Add SMP support for amd64.
1.39 sthen 567: <li>Fix <a href="http://man.openbsd.org/?query=re&sektion=4">re(4)</a> MAC address setup on big-endian machines.
568: <li>When renaming files in the <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a> server, fall back to <a href="http://man.openbsd.org/?query=stat&sektion=2">stat(2)</a>-then-<a href="http://man.openbsd.org/?query=rename&sektion=2">rename(2)</a> if the underlying filesystem doesn't support <a href="http://man.openbsd.org/?query=link&sektion=2">link(2)</a>.
1.1 miod 569: <li>Some more string cleaning in the X server.
570: <li>Fix a misplaced closing brace that was breaking xtrans unix socket creation (freedesktop.org bugzill #363).
1.39 sthen 571: <li>Add layer 2 tunnelling (tap) support to <a href="http://man.openbsd.org/?query=tun&sektion=4">tun(4)</a>.
572: <li>Don't allow IPsec udpencap (4500/udp) to be a dynamic <a href="http://man.openbsd.org/?query=bind&sektion=2">bind(2)</a> port.
1.1 miod 573: <li>Enable propolice on XFree86 modules.
1.39 sthen 574: <li>In <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>, only do TCP wrappers checks when the incoming connection is on a socket.
575: <li>Narrow down <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>'s privsep interface a bit.
1.1 miod 576: <li>Ditch autoconf stuff in libkeynote, it's not used here.
577: <li>Set stricter modes on shared memory segments used by the X server.
1.39 sthen 578: <li>Do IPv6 fragment reassembly with the <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> scrub directive. Work in progress.
579: <li>String cleaning in the X server, <a href="http://man.openbsd.org/?query=fvwm&sektion=1">fvwm(1)</a> and xtrans.
1.1 miod 580: <li>Convert libXt to ANSI C. From XFree86 HEAD.
581: <!-- ^ 20040625 -->
1.39 sthen 582: <li>Some work on <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> multiprotocol support.
583: <li>Reprint the <a href="http://man.openbsd.org/?query=boot&sektion=8&arch=i386">boot(8)</a> identity string after changing the console line.
584: <li>Disable the <a href="http://man.openbsd.org/?query=boot&sektion=8&arch=i386">boot(8)</a> timeout once the user hits a key.
1.1 miod 585: <li>Big tidyup of sys/net/rtsock.c.
1.39 sthen 586: <li>Some alignment fixups in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
587: <li>In <a href="http://man.openbsd.org/?query=systrace&sektion=4">systrace(4)</a>, quit early if detached after an <a href="http://man.openbsd.org/?query=exec&sektion=3">exec*(3)</a>, and avoid a double-free.
588: <li>Remove the 8-page size limit on the <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a>-returned argv array.
589: <li>Strip netiso code from <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> and <!-- 20040625 --><a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>.
1.1 miod 590: <li>Make all kernel time access via functions so that locking is possible.
1.39 sthen 591: <li>Re-<a href="http://man.openbsd.org/?query=exec&sektion=3">exec(3)</a> <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> after <a href="http://man.openbsd.org/?query=accept&sektion=2">accept(2)</a>. Can be turned off with the -r command line option.
1.1 miod 592: <li>Add C++ inclusion guards into <pcap.h> and <keynote.h>.
1.39 sthen 593: <li>Add genericstable to the list of <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a> databases that /etc/mail/Makefile can create automatically.
594: <li>Don't <a href="http://man.openbsd.org/?query=realloc&sektion=3">realloc(3)</a> so often when fetching process args in libkvm. Will be needed soon.
595: <li>If one of <a href="http://man.openbsd.org/?query=pkill&sektion=1">pkill(1)</a>'s targets can't be killed, carry on and kill the rest instead of stopping.
596: <li>Fix SIGCHLD handling in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> so SIGSTOP and SIGCONT now work as expected.
1.1 miod 597: <li>Gracefully handle line buffer overruns when reading boot.conf.
1.39 sthen 598: <li>Do <a href="http://man.openbsd.org/?query=ehci&sektion=4">ehci(4)</a> on macppc as well.
599: <li>Crank libc and libpthread majors again after <a href="http://man.openbsd.org/?query=hsearch&sektion=3">hsearch(3)</a> addition.
600: <li>Allow <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> to handle keys from X.509 certs embededed in keynote credentials.
601: <li>Implement <a href="http://man.openbsd.org/?query=hsearch&sektion=3">hsearch(3)</a> and friends, for XPG4.2 reasons. From NetBSD.
602: <li>Update <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a> to 8.13.0.
1.1 miod 603: <!-- ^ 20040624 -->
1.39 sthen 604: <li>Correct a missing dereference and unbreak logging of IPV4_ADDR_SUBNET IDs in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
605: <li>Fix the for loop that counts passed environment variables in multiplex <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
606: <li>As with <a href="http://man.openbsd.org/?query=sysctl&sektion=8">sysctl(8)</a>, make the -w option for writes with <a href="http://man.openbsd.org/?query=wsconsctl&sektion=8">wsconsctl(8)</a> optional.
607: <li>Have <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> show the time between packets when prodded with -tttt.
608: <li>Some <a href="http://man.openbsd.org/?query=setuid&sektion=2">setuid(2)</a>/<a href="http://man.openbsd.org/?query=setgid&sektion=2">setgid(2)</a> fixes for <a href="http://man.openbsd.org/?query=systrace&sektion=1">systrace(1)</a>.
609: <li>Shrink the <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> die-on-RTM_DELADDR window to one second.
1.1 miod 610: <!-- ^ SLIST_FOREACH()... -->
1.39 sthen 611: <li>Remove another <a href="http://man.openbsd.org/?query=stat&sektion=2">stat(2)</a>-then-<a href="http://man.openbsd.org/?query=open&sektion=2">open(2)</a> from <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
612: <li>Enable <a href="http://man.openbsd.org/?query=ahd&sektion=4">ahd(4)</a> by default for i386.
613: <li>Unbreak phase 1 IPV[46]_ADDR_SUBNET IDs in <a href="http://man.openbsd.org/?query=isakmpd.conf&sektion=5">isakmpd.conf(5)</a>
614: <li>New config option 'Acquire-Only' (-a on the command line) for <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, to stop the daemon playing with existing flows.
615: <li>Add <a href="http://man.openbsd.org/?query=cdboot&sektion=8&arch=i386">cdboot(8)</a>, a CD-specific second-stage bootstrap for i386.
616: <li>In <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, support the NOPEER community from RFC 3706.
1.1 miod 617: <!-- ^ 20040623 -->
1.39 sthen 618: <li>Import <a href="http://man.openbsd.org/?query=atw&sektion=4">atw(4)</a> ADMtek ADM8211 wireless driver from NetBSD.
619: <li>Some <a href="http://man.openbsd.org/?query=strncpy&sektion=3">strncpy(3)</a> -> <a href="http://man.openbsd.org/?query=strlcpy&sektion=3">strlcpy(3)</a> in sys/compat/*.
1.1 miod 620: <li>Add a no-emulation CD boot sector, based on a FreeBSD implementation.
1.39 sthen 621: <li>Only ignore <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>-generated RTM_DELADDR messages for a five-second window after process startup, so that new instances of dhclient (started outside this window) cause the older instance to die like before.
622: <li>Teach <a href="http://man.openbsd.org/?query=mkhybrid&sektion=8">mkhybrid(8)</a> how to create an El Torito no-emulation boot CD (for i386), with a 2048-byte boot sector. <!-- When the commit logs are good I /do/ just quote them Tom :-) -->
1.1 miod 623: <li>Import the generic IEEE 802.11 framework from FreeBSD and NetBSD.
1.39 sthen 624: <li>Fix probe hangs on some <a href="http://man.openbsd.org/?query=ahd&sektion=4">ahd(4)</a> cards.
1.1 miod 625: <li>In the X server, fix malloc corruption when sending multiple glyphs to RenderAddGlyphs() (XFree86 bugzilla #1276, freedesktop.org bugzilla #349).
1.39 sthen 626: <li>Rewrite <a href="http://man.openbsd.org/?query=mount&sektion=8">mount(8)</a>'s mount options parser, making it more robust and removing the need for duplicate code in <a href="http://man.openbsd.org/?query=mount_nfs&sektion=8">mount_nfs(8)</a> (PR#3642).
627: <li>Fix some logic errors introduced in recent string changes to <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a>.
628: <li>Don't exit <a href="http://man.openbsd.org/?query=wicontrol&sektion=8">wicontrol(8)</a> if SIOCGWAVELAN fails, just print a warning and get whatever information is available without it.
629: <li>Change <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s internal prefix lookup from a hash table to a per-address family red-black <a href="http://man.openbsd.org/?query=tree&sektion=3">tree(3)</a>.
630: <li>Don't assume in <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a> that '.' and '..' are the first two entries in a directory.
631: <li>Handle division-by-zero in <a href="http://man.openbsd.org/?query=m4&sektion=1">m4(1)</a> with an error message instead of a core dump.
632: <li>Fix a segfault in <a href="http://man.openbsd.org/?query=xdm&sektion=1">xdm(1)</a> if a LISTEN keyword without hosts is found in the Xaccess file.
633: <li>When decoding fragmented IPv6 packets in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>, only try to interpret the contents of the first fragment.
1.1 miod 634: <li>Back out source-based routing code while some problems are fixed.
1.39 sthen 635: <li>Start work on support for IPv6 routes (not just IPv6 sockets) in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
636: <li>Wire <a href="http://man.openbsd.org/?query=ntpd&sektion=8">ntpd(8)</a> into the build.
637: <li>Fix libXi <a href="http://man.openbsd.org/?query=XSelectExtensionEvent&sektion=3">XSelectExtensionEvent(3)</a> on 64-bit machines (freedesktop.org bugzilla #285).
638: <li>Remove pointless 5-second <a href="http://man.openbsd.org/?query=sleep&sektion=3">sleep(3)</a>s in xtrans (freedesktop.org bugzilla #297).
639: <li>Sync <a href="http://man.openbsd.org/?query=lynx&sektion=1">lynx(1)</a> to 2.8.5.rel2.
1.1 miod 640: <li>Fix some endianness problems in X-Resource (freedesktop.org bugzilla #267).
1.39 sthen 641: <li>Add a new 'filter drop' flag to <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a>, so that an interface may be notified that a packet matches a filter and should be dropped.
642: <li>Update to <a href="http://man.openbsd.org/?query=lynx&sektion=1">lynx</a> 2.8.5rel1.
643: <li>Have <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> drop IKE messages arriving on port 500 after the NAT-T exchange has switched to port 4500.
644: <li>Allow a <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> template peer with unknown AS to be an IBGP peer, instead of always being an EBGP peer.
645: <li>Allow the IKE parser in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> to recognise a NAT-T payload.
646: <li>Teach <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s IKE parser about NAT-T keepalive packets.
647: <li>In <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, don't reallocate the pollfd array every time the size changes because there's a risk that <a href="http://man.openbsd.org/?query=realloc&sektion=3">realloc(3)</a> can fail. Reallocate only when there's a large potential saving.
648: <li>String cleaning in <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a>.
649: <li>time -> arc4random(9) in <a href="http://man.openbsd.org/?query=sppp&sektion=4">sppp(4)</a>.
650: <li>Fix bogus 'panic: cylinder group too big' message from <a href="http://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a>.
651: <li>Don't exit <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> on receipt of an RTM_DELADDR routing message, as this sometimes be generated by the dhclient itself. Instead, exit on RTM_NEWADDR iff an IP address is set that doesn't correspond to our lease. Not a perfect solution.
652: <li>More <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a> <a href="http://man.openbsd.org/?query=ls&sektion=1">ls(1)</a> emulation: Don't show .dotfiles unless -a is specified.
653: <li>Handle interface resets gracefully in <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>.
654: <li>Do more retries on <a href="http://man.openbsd.org/?query=st&sektion=4">st(4)</a> devices to allow the tape drive to recover after a reset.
1.1 miod 655: <li>New xetc installation fileset, for all X configuration files installed under /etc.
656: <!-- ^ 20040622 -->
657: <li>Keep separate, 1-second resolution counters for walltime and uptime, and have code that only needs 1-second resolution use those instead of the microsecond counters.
658: <li>Clean up properly on in_ifinit() failure.
1.39 sthen 659: <li>Turn <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> NAT-T support on. The crowd goes wild.
660: <li>Implement NAT-T keepalive messages in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
661: <li>Check that UDP encapsulation is enabled (<a href="http://man.openbsd.org/?query=sysctl&sektion=8">sysctl(8)</a> net.inet.esp.udpencap) before allowing encapsulated SAs to be created in the kernel.
662: <li>Add bounds-check <a href="http://man.openbsd.org/?query=gcc&sektion=1">gcc(1)</a> attributes to libkern strl*() functions, and to strncpy().
663: <li>Implement <a href="http://man.openbsd.org/?query=ls&sektion=1">ls(1)</a>-compatible sorting for <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>'s ls command.
664: <li>Allow <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> on IPv6 link-local addresses.
665: <li>Have <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> save the destination port if it is NATed, as one might reasonably expect it to be when using NAT-Traversal.
1.1 miod 666: <li>Don't leak a cloned PMTU route in netinet/ip_output.c.
1.39 sthen 667: <li>arc4random(9)ise a previously time-based ID in <a href="http://man.openbsd.org/?query=atalk&sektion=4">atalk(4)</a>.
668: <li>Fix an fd leak in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> when multiple subsystems are present.
1.1 miod 669: <li>Use arc4random(9) instead of the time for the ARCnet sequence ID.
1.39 sthen 670: <li>Use <a href="http://man.openbsd.org/?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> and <a href="http://man.openbsd.org/?query=getnameinfo&sektion=3">getnameinfo(3)</a> instead of old-style conversion functions in <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a>, but restrict resolution to AF_INET for now.
671: <li>Allow - with a warning - the old package keyword @src, in <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> etc.
672: <li>Import and merge <a href="http://man.openbsd.org/?query=fontconfig&sektion=3">fontconfig</a> 2.2.2.
673: <li>Set the ESP marker on <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> captured packets for NAT-T SAs.
674: <li>If the <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> 'don't run scripts' (-I) option is present, don't run scripts.
675: <li>Have <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> turn on kernel ESP-in-UDP encapsulation for NAT-T SAs.
676: <li>Switch to port 4500 when required for <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> NAT-T exchanges.
677: <li>Use a red-black <a href="http://man.openbsd.org/?query=tree&sektion=3">tree(3)</a> instead of a hash table to track multiply-linked inodes in <a href="http://man.openbsd.org/?query=du&sektion=1">du(1)</a>.
1.1 miod 678: <!-- ^ 20040621 -->
679: <li>Time is as dumb a 'random' value for IPX and ISO CLNP as it is for IP, so use arc4random(9) instead.
1.39 sthen 680: <li>Add IPv6 support for standalone <a href="http://man.openbsd.org/?query=popa3d&sektion=8">popa3d(8)</a> as well as when run from <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a>.
681: <li>In <a href="http://man.openbsd.org/?query=crypto&sektion=9">crypto(9)</a>, always store the value returned by <a href="http://man.openbsd.org/?query=splimp&sektion=9">splimp(9)</a> so we have something meaningful to give to <a href="http://man.openbsd.org/?query=splx&sektion=9">splx(9)</a>.
1.1 miod 682: <li>Fix broken process runtimes in i386 MP.
1.39 sthen 683: <li>Use the RTF_MPATH routing flag to skip over multipath routes in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, since mpath make no sense for BGP.
684: <li>For <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>'s 'ls' command, make -l show user and group names, and -n show uid and gid just like real <a href="http://man.openbsd.org/?query=ls&sektion=1">ls(1)</a>.
685: <li>New -I option for <a href="http://man.openbsd.org/?query=diff&sektion=1">diff(1)</a>, which ignores changes matching the supplied regex.
686: <li>Have <a href="http://man.openbsd.org/?query=vnconfig&sektion=8">vnconfig(8)</a> (with the -l option) use the new VNDIOCGET ioctl to fetch <a href="http://man.openbsd.org/?query=vnd&sektion=4">vnd(4)</a> device status.
687: <li>New VNDIOCGET ioctl for <a href="http://man.openbsd.org/?query=vnd&sektion=4">vnd(4)</a> devices.
688: <li>Fix a bad format string in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s IKE parser.
689: <li>In <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, use descriptor passing to allow the creation of new listen sockets on privileged ports.
690: <li>For multiplexed <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> connections, filter passed environment variables in the slave.
691: <li>Add bounds-check compiler attributes for <a href="http://man.openbsd.org/?query=memcpy&sektion=3">memcpy(3)</a> etc.
1.1 miod 692: <li>Remove support for TUBA (TCP/UDP over CLNP-Addresses Networks, as if you didn't know).
1.39 sthen 693: <li>Change <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> payload handling to deal with pre-RFC NAT-T messages.
694: <li>Don't try to carry on in <a href="http://man.openbsd.org/?query=pax&sektion=1">pax(1)</a> if the <a href="http://man.openbsd.org/?query=chdir&sektion=2">chdir(2)</a> needed by the <!-- undocumented --> -C option fails.
695: <li>Start work on both RFC 3706 Dead Peer Detection, and full-on NAT-Traversal support for <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
696: <li>Have <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> accept an unencrypted final IKE message (Aggressive Mode only) for compatibility reasons.
697: <li>New -dd switch for <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> to make debugging the privsep child easier.
698: <li>Let <a href="http://man.openbsd.org/?query=popa3d&sektion=8">popa3d(8)</a> work with IPv6 sockets, no daemon mode support yet.
1.1 miod 699: <li>Fix a rather serious SMP merge error affecting scheduler timeouts.
700: <li>Correct some logic errors in kernel malloc_debug().
1.39 sthen 701: <li>Fix congestion-sensitive IF_INPUT_ENQUEUE() so that freed <a href="http://man.openbsd.org/?query=mbuf&sektion=9">mbuf(9)</a>s no longer show up on interface input queues under certain circumstances.
1.1 miod 702: <!-- ^ 20040620 -->
1.39 sthen 703: <li>Require the setting of new route flag RTF_MPATH (corresponding switch -mpath for <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>) to add a multipath route.
1.1 miod 704: <li>Add defines in <net/if_media.h> for various telecoms carrier circuit types, i.e. E1, T1 etc.
1.39 sthen 705: <li>Save curproc in <a href="http://man.openbsd.org/?query=svnd&sektion=4">svnd(4)</a> so that <a href="http://man.openbsd.org/?query=lockmgr&sektion=9">lockmgr(9)</a> doesn't get passed a null process. Stops <a href="http://man.openbsd.org/?query=svnd&sektion=4">svnd(4)</a> blocking indefinitely (PR#3214).
706: <li>Fix a null deref in <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a> if the .DEFAULT target has no commands.
1.1 miod 707: <!-- ^ 20040619 -->
1.39 sthen 708: <li>Fix sending of jumbo frames on <a href="http://man.openbsd.org/?query=em&sektion=4">em(4)</a> and <a href="http://man.openbsd.org/?query=ti&sektion=4">ti(4)</a>.
709: <li>Unbreak <a href="http://man.openbsd.org/?query=patch&sektion=1">patch(1)</a> when using standard diffs (i.e. no context).
710: <li>Allow the user to interrupt the setup of a multiplexed <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> connection (if, for example, the master gets wedged) by deferring signal setup until the connection is established.
711: <li>Merge adjacent hunks in <a href="http://man.openbsd.org/?query=diff&sektion=1">diff(1)</a>, making the output more like that from GNU diff.
712: <li>Use <a href="http://man.openbsd.org/?query=execvp&sektion=3">execvp(3)</a> instead of <a href="http://man.openbsd.org/?query=execv&sektion=3">execv(3)</a> in <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a> so -S ssh will work.
1.1 miod 713: <li>Use dynamically allocated pollfd struct for ntpd(8), just like bgpd.
714: <!-- ^ 20040618 -->
1.39 sthen 715: <li>Fix a bunch more memory leaks in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
716: <li>Be more careful in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> when evaluating the return code from X509_verify_cert(3).
1.1 miod 717: <li>Add much of the NTP client functionality to ntpd(8).
1.39 sthen 718: <li>Abort <a href="http://man.openbsd.org/?query=rdate&sektion=8">rdate(8)</a> on <a href="http://man.openbsd.org/?query=calloc&sektion=3">calloc(3)</a> failure, <a href="http://man.openbsd.org/?query=warnx&sektion=3">warnx(3)</a>ing and carrying on is just postponing the inevitable.
719: <li>Add an option (ControlMaster=ask) to require confimation via <a href="http://man.openbsd.org/?query=ssh-askpass&sektion=1">ssh-askpass(1)</a> before allowing a multiplexed <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> connection.
720: <li>Support environment variable passing over multiplexed <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> connections.
1.1 miod 721: <li>Back out the recent IPv6 multicast change so that mandatory groups get joined, but achieve the same result by testing for a new host address before adding the multicast entries.
722: <!-- ^ 20040617 -->
1.39 sthen 723: <li>Add '-n' option to <a href="http://man.openbsd.org/?query=last&sektion=1">last(1)</a> to do the same job as -<em>number</em> in a less ugly way.
1.1 miod 724: <li>Make <netinet/if_ether.h> safe for inclusion in C++ code.
1.39 sthen 725: <li>Fix a bad dereference leading to a memory leak in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
726: <li>Fix a pasto in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>'s message decoder when printing IPv6 address/mask pairs.
1.1 miod 727: <li>Unbreak the IN6_LOOKUP_MULTI() macro definition.
728: <!-- ^ 20040616 -->
729: <li>Add support for new crypto functions on upcoming VIA C3 processors.
730: <li>Build X on cats systems.
1.39 sthen 731: <li>Fix a null deref crash in <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>'s show command.
1.1 miod 732: <li>Don't add multiple multicast filter entries for a single IPv6 multicast address.
733: <!-- ^ 20040615 -->
1.39 sthen 734: <li>Remove the old <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> BEGIN*, COMMIT* and ROLLBACK* ioctls.
735: <li>Use the newer <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> BEGIN and COMMIT ioctls in <a href="http://man.openbsd.org/?query=authpf&sektion=8">authpf(8)</a>.
736: <li>Set the relay session id properly for outgoing <a href="http://man.openbsd.org/?query=pppoe&sektion=8">pppoe(8)</a> packets.
737: <li>Teach <a href="http://man.openbsd.org/?query=patch&sektion=1">patch(1)</a> to detect already-applied diffs when the diff creates a file, or adds to an empty file.
738: <li>In <a href="http://man.openbsd.org/?query=du&sektion=1">du(1)</a>, use a hash table instead of a linear list to keep track of multiply-linked files.
739: <li>Use <a href="http://man.openbsd.org/?query=fmt_scaled&sektion=3">fmt_scaled(3)</a> instead of do-it-yourself in <a href="http://man.openbsd.org/?query=du&sektion=1">du(1)</a>.
740: <li>In <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a>, allow _dl_malloc() to allocate more than 4KB.
741: <li>Fix a few <a href="http://man.openbsd.org/?query=stat&sektion=2">stat(2)</a>-then-<a href="http://man.openbsd.org/?query=open&sektion=2">open(2)</a> races in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
1.1 miod 742: <li>After going to the trouble of pulling the tcp6 options into a contiguous region with IP6_EXTHDR_GET, use the returned pointer instead of doing mtod() again.
1.39 sthen 743: <li>Unbreak <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a> on older kernels.
1.1 miod 744: <!-- ^ 20040614 -->
1.39 sthen 745: <li>Build an SMP kernel (bsd.mp) in make <a href="http://man.openbsd.org/?query=release&sektion=8">release(8)</a> for i386, and allow the user to install it.
1.1 miod 746: <li>Merge the SMP branch onto the trunk. Let the party begin.
1.39 sthen 747: <li>Just quit rather than panic in <a href="http://man.openbsd.org/?query=cy&sektion=4">cy(4)</a> if interrupts can't be established for PCI.
748: <li>Fix an off-by-one buffer size in <a href="http://man.openbsd.org/?query=sed&sektion=1">sed(1)</a>.
749: <li>Implement client-side session multiplexing (see <a href="http://man.openbsd.org/?query=ssh_config&sektion=5">ssh_config(5)</a> options ControlMaster and ControlPath) for <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>, <a href="http://man.openbsd.org/?query=scp&sektion=1">scp(1)</a> and <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>. The server has supported this for some time.
750: <li>Add diffie-hellman-group14-sha1 KEX method support to <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
1.1 miod 751: <!-- ^ 20040613 -->
1.39 sthen 752: <li>Fix <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> table add/replace commands at <a href="http://man.openbsd.org/?query=securelevel&sektion=7">securelevel</a> 2.
753: <li>Have <a href="http://man.openbsd.org/?query=mg&sektion=1">mg(1)</a>'s M-x gid command use the current word to try and guess which symbol to look up.
754: <li>Make <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a> 'show' command output more like netstat -r.
1.1 miod 755: <li>Support the IPV6_USE_MIN_MTU option, mainly because BIND 9 wants it.
756: <!-- ^ 20040612 -->
1.39 sthen 757: <li>Disable <a href="http://man.openbsd.org/?query=apm&sektion=4">apm(4)</a> on i386 MP machines.
758: <li>Show <a href="http://man.openbsd.org/?query=systat&sektion=1">systat(1)</a> and <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a> where to find interrupt stats on MP i386 machines.
759: <li>Only print 'status/cpu#' in <a href="http://man.openbsd.org/?query=top&sektion=1">top(1)</a> if there's more than one CPU.
760: <li>Fix a dereference-after-free (actually after <a href="http://man.openbsd.org/?query=pool_put&sektion=9">pool_put(9)</a>) in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> tables.
761: <li>In <a href="http://man.openbsd.org/?query=pax&sektion=1">pax(1)</a>, fix backreference substitution in -s mode and unbreak bad regex detection.
762: <li>Add a cpuid field to struct kproc2, and teach <a href="http://man.openbsd.org/?query=ps&sektion=1">ps(1)</a> and <a href="http://man.openbsd.org/?query=top&sektion=1">top(1)</a> how to make use of it.
1.1 miod 763: <!-- ^ 20040611 -->
764: <li>Only install the Intel F00F bug workaround once on MP machines, avoiding a panic.
1.39 sthen 765: <li>Zero the restart counter before use, to fix a problem with <a href="http://man.openbsd.org/?query=uhub&sektion=4">uhub(4)</a> port restarts giving up before starting. From FreeBSD.
766: <li>Fix a sizeof(pointer) bug in <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a>.
767: <li>Don't leak a softc when detaching a <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> cloned interface.
768: <li><font color="#e00000"><strong>SECURITY FIX: Multiple vulnerabilities have been found in <a href="http://man.openbsd.org/?query=httpd&sektion=8">httpd(8)</a> / mod_ssl.</strong></font> This is the second of two sets of fixes.<br>
1.1 miod 769: <ul>
770: <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488">CAN-2004-0488</a>: Stack-based buffer overflow ... in mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow attackers to execute arbitrary code via a client certificate with a long subject DN.
771: <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492">CAN-2004-0492</a>: [mod_proxy] Reject responses from a remote server if sent an invalid (negative) Content-Length: header.
772: </ul>
1.4 deraadt 773: <a href="errata36.html#httpd">A source code patch is available</a>.<br>
1.1 miod 774: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 775: <li><font color="#e00000"><strong>SECURITY FIX: As <a href="http://seclists.org/lists/fulldisclosure/2004/Jun/0191.html">disclosed</a> by Thomas Walpuski, <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> is still vulnerable to unauthorized SA deletion.</strong></font> An attacker can delete IPsec tunnels at will.<br>
1.4 deraadt 776: <a href="errata36.html#isakmpd">A source code patch is available</a>.<br>
1.1 miod 777: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
778: <li>Add src/lib/libintl and libc i18n directories to the repository.
779: <!-- ^ 20040610 -->
780: <li>First merge of SMP code into the trunk, mainly structures to allow gradual introduction of the new APIs.
781: <li>Fix IPv4 name-to-address translation, so invalid octet values won't be accepted and CIDR address/mask pairs finally work the way one expects.
1.39 sthen 782: <li>In <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s privsep <a href="http://man.openbsd.org/?query=localtime&sektion=3">localtime(3)</a> replacement, deal better with timezones with granularity of less than one hour.
783: <li><font color="#e00000"><strong>SECURITY FIX: Multiple remote vulnerabilities have been found in the <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a> server</strong></font> that will allow an attacker to crash the server or possibly execute arbitrary code with the same privileges as the CVS server program.<br>
1.4 deraadt 784: <a href="errata36.html#cvs3">A source code patch is available</a>.
1.1 miod 785: <li>On i386 (ppro and above), use the calibrated value for the CPU speed over the value returned by the CPU itself, fixing PR#3814.
1.39 sthen 786: <li>Use a dynamically allocated array of pollfds in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
787: <li>Try to prevent <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> deleting SAs on receipt of malicious IKE messages.
788: <li><a href="http://man.openbsd.org/?query=rdate&sektion=8">rdate(8)</a> improvements:
1.1 miod 789: <ul>
790: <li>RFC 2030 compliance for NTP mode.
791: <li>Much more robust error handling, with better messages.
792: <li>Better detection of stale or spoofed NTP responses.
793: <li>Support for multiple addresses if returned by the DNS, trying each listed server until one works.
794: </ul>
795: <!-- ^ 20040609 -->
1.39 sthen 796: <li>Remove NMBCLUSTERS settings from <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a>.
1.1 miod 797: <li>Factor out TCP md5sig code into tcp_subr.c:tcp_signature().
1.39 sthen 798: <li>Fix buffer usage in <a href="http://man.openbsd.org/?query=umass&sektion=4">umass(4)</a> CBI transfers (NetBSD PR#25676).
1.1 miod 799: <!-- ^ 20040608 -->
1.39 sthen 800: <li>Allow <a href="http://man.openbsd.org/?query=arc4random&sektion=3">arc4random(3)</a> code in <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a> to actually work.
1.1 miod 801: <li>Break the dependency of libc on <pthread.h>. Bump the major version of libc and libpthread.
1.39 sthen 802: <li>Teach <a href="http://man.openbsd.org/?query=kdump&sektion=1">kdump(1)</a> about <a href="http://man.openbsd.org/?query=gpio&sektion=4">gpio(4)</a> ioctls.
803: <li>Allow an authtype (-a option) in <a href="http://man.openbsd.org/?query=skeyinit&sektion=1">skeyinit(1)</a> even when secure mode (-s) is in effect.
804: <li>Add an alternative algorithm to make <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> table deletions faster for a small number of deleted items.
805: <li><font color="#e00000"><strong>SECURITY FIX: Multiple vulnerabilities have been found in <a href="http://man.openbsd.org/?query=httpd&sektion=8">httpd(8)</a> / mod_ssl.</strong></font> This is the first of two sets of fixes.<br>
1.1 miod 806: <ul>
807: <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020">CAN-2003-0020</a>: Apache does not filter terminal escape sequences from its error logs.
808: <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0987">CAN-2003-0987</a>: Apache mod_digest does not properly verify the nonce of a client response by using an AuthNonce secret.
809: </ul>
1.4 deraadt 810: <a href="errata36.html#httpd">A source code patch is available</a>.<br>
1.1 miod 811: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
812: <!-- ^ 20040607 -->
1.39 sthen 813: <li>Out-of-line <a href="http://man.openbsd.org/?query=spl&sektion=9">spl(9)</a> functions in SMP on i386, mirroring the UP change to fix VFS corruption.
1.1 miod 814: <li>Add SMP-related devices for i386 on the SMP branch.
815: <li>Many fixups on the SMP branch for non-MP kernels.
1.39 sthen 816: <li>Rework <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s listen socket handling to better support multiple listen addresses.
817: <li>New -src and -srcmask options for <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a> supporting the new source-address routing functionality.
818: <li>New -S flag for <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a> and <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>, to show the new source selector part of a route entry.
1.1 miod 819: <li>Extend the routing table to allow routing based on source as well as destination. IPv4 only for now, more to come.
1.39 sthen 820: <li>Set the <a href="http://man.openbsd.org/?query=skey&sektion=1">skey(1)</a> first sequence number to 100 as promised by the manpage.
821: <li><a href="http://man.openbsd.org/?query=spl&sektion=9">spl(9)</a> and alignment fixes in portalfs.
1.1 miod 822: <!-- ^ 20040606 -->
823: <li>Much merging and fixup as SMP is readied for prime-time.
1.39 sthen 824: <li>Resurrect the '<a href="http://man.openbsd.org/?query=fork1&sektion=9">fork1(9)</a>-can-take-null-retval' change, this time leaving the setup of struct proc setup well alone.
825: <li>Fix a bug with X and <a href="http://man.openbsd.org/?query=wsmouse&sektion=4">wsmouse(4)</a> where an event of unknown type could cause a whole batch of other events to be discarded.
1.1 miod 826: <li>Set the length field in the TCP packet header earlier in tcp_output().
1.39 sthen 827: <li>New <a href="http://man.openbsd.org/?query=re&sektion=4">re(4)</a> driver supporting RealTek Gigabit Ethernet devices.
1.1 miod 828: <!-- ^ 20040605 -->
1.39 sthen 829: <li>Clean up multicast addresses when unconfiguring <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> interfaces.
830: <li>Clarify <a href="http://man.openbsd.org/?query=user&sektion=8">user(8)</a> docs and error messages (PR#3792).
831: <li>Add startup code for <a href="http://man.openbsd.org/?query=hotplugd&sektion=8&arch=i386">hotplugd(8)</a> to <a href="http://man.openbsd.org/?query=rc&sektion=8">rc(8)</a> and <a href="http://man.openbsd.org/?query=rc.conf&sektion=8">rc.conf(8)</a>.
832: <li>New <a href="http://man.openbsd.org/?query=usbhid&sektion=3">usbhid(3)</a> API <a href="http://man.openbsd.org/?query=hid_start&sektion=3">hid_start(3)</a>, a non-noisy version of <a href="http://man.openbsd.org/?query=hid_init&sektion=3">hid_init(3)</a>.
1.1 miod 833: <!-- ^ 20040604 -->
1.39 sthen 834: <li>Don't send mail at all from <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a> if MAILTO is set but empty.
835: <li>Cleanup in <a href="http://man.openbsd.org/?query=at&sektion=1">at(1)</a>/<a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a>:
1.1 miod 836: <ul>
1.39 sthen 837: <li>Check argc before using argv[0] in <a href="http://man.openbsd.org/?query=at&sektion=1">at(1)</a>.
1.1 miod 838: <li>Print the right filename for a job in the email.
1.39 sthen 839: <li>Reset the sockaddr length value every time before <a href="http://man.openbsd.org/?query=accept&sektion=2">accept(2)</a>.
1.1 miod 840: </ul>
1.39 sthen 841: <li>New <a href="http://man.openbsd.org/?query=gpioctl&sektion=8&arch=i386">gpioctl(8)</a> program to go with new <a href="http://man.openbsd.org/?query=gpio&sektion=4">gpio(4)</a>.
842: <li>Have <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> fall back to user nobody if user _dhcp doesn't exist. Helps with upgrades.
843: <li>In <a href="http://man.openbsd.org/?query=getopt&sektion=3">getopt(3)</a>/<a href="http://man.openbsd.org/?query=getopt_long&sektion=3">getopt_long(3)</a>, don't allow an optional argument if it begins with a '-'.
844: <li>Allow <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a> to accept crontabs with more strict permissions than is the default.
845: <li>New General Purpose I/O device <a href="http://man.openbsd.org/?query=gpio&sektion=4">gpio(4)</a>. Only enabled on i386 for now.
846: <li>New '!!<prog>' syntax for <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>, used to force messages from the named program to only go to certain files regardless of the rest of syslog.conf.
847: <li>Update <a href="http://man.openbsd.org/?query=file&sektion=1">file(1)</a>'s magic to that from file version 4.09, with a few local changes and additions.
1.1 miod 848: <!-- ^ 20040603 -->
1.39 sthen 849: <li>Use the old _nointr <a href="http://man.openbsd.org/?query=pool&sektion=9">pool(9)</a> allocator for <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> tables.
850: <li>Rearrange the <a href="http://man.openbsd.org/?query=pool&sektion=9">pool(9)</a> allocator code so the old allocation method can be used again.
851: <li>Use the quirks mechanism to fix <a href="http://man.openbsd.org/?query=wdc&sektion=4">wdc(4)</a> hangs on Geode SC1100 devices (PR#3729).
852: <li>Implement SCSI-style quirks for <a href="http://man.openbsd.org/?query=wdc&sektion=4">wdc(4)</a>.
853: <li>Use <a href="http://man.openbsd.org/?query=errx&sektion=3">errx(3)</a> instead of <a href="http://man.openbsd.org/?query=err&sektion=3">err(3)</a> in <a href="http://man.openbsd.org/?query=find&sektion=1">find(1)</a> when errno isn't set by the error.
854: <li>When calling <a href="http://man.openbsd.org/?query=err&sektion=3">err(3)</a> after a <a href="http://man.openbsd.org/?query=malloc&sektion=3">malloc(3)</a> failure, don't specify a message.
855: <li>Cleanup in <a href="http://man.openbsd.org/?query=rm&sektion=1">rm(1)</a>.
856: <li>Support multicast on <a href="http://man.openbsd.org/?query=kue&sektion=4">kue(4)</a>.
857: <li>Add IPv6 support to <a href="http://man.openbsd.org/?query=uucpd&sektion=8">uucpd(8)</a>.
858: <li>Trivial changes (sockaddr_in -> sockaddr_storage) to add IPv6 support to <a href="http://man.openbsd.org/?query=rpc.rquotad&sektion=8">rpc.rquotad(8)</a>, <a href="http://man.openbsd.org/?query=rpc.rstatd&sektion=8">rpc.rstatd(8)</a>, <a href="http://man.openbsd.org/?query=rpc.rusersd&sektion=8">rpc.rusersd(8)</a>, <a href="http://man.openbsd.org/?query=rpc.rwalld&sektion=8">rpc.rwalld(8)</a> and <a href="http://man.openbsd.org/?query=rpc.sprayd&sektion=8">rpc.sprayd(8)</a>.
1.1 miod 859: <!-- ^ 20040602 -->
860: <li>Mark nullfs memory as M_MISCFSMNT instead of M_UFSMNT.
861: <li>Swing hppa to gcc3, and enable shared library support.
1.39 sthen 862: <li>Unbreak <a href="http://man.openbsd.org/?query=xterm&sektion=1">xterm(1)</a> jump-scrolling on big-endian 64-bit systems.
1.1 miod 863: <li>Remove a somewhat useless current-process privilege check in the IPv6 input path. Based on KAME.
1.39 sthen 864: <li>Compatibility fixes for some <a href="http://man.openbsd.org/?query=sk&sektion=4">sk(4)</a> devices (PR#3061). Workaround from FreeBSD.
1.1 miod 865: <!-- ^ 20040601 -->
1.39 sthen 866: <li>Initialise the <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> interface structure before use.
1.1 miod 867: <li>Don't advertise an absurd TCP receive window on 64-bit architectures. From NetBSD.
868: <li>Some Single UNIX Specification updates in <limits.h>.
1.39 sthen 869: <li>Better error handling for <a href="http://man.openbsd.org/?query=rm&sektion=1">rm(1)</a>'s -P option. From FreeBSD.
1.1 miod 870: <li>First cut at a home-grown NTP daemon. Not built by default yet.
1.39 sthen 871: <li>Remove ugly string code in <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a>, used when no unit number was given to BIOCSETIF.
1.1 miod 872: <li>Fix a long-standing KAME pasto that was breaking SIOC[DG]LIFADDR.
873: <li>Remove a bunch of redundant errno declarations.
874: <li>Use generic crc32 code instead of local efforts in many Ethernet devices.
875: <!-- ^ 20040531 -->
1.39 sthen 876: <li>Sync <a href="http://man.openbsd.org/?query=xl&sektion=4">xl(4)</a> with FreeBSD, bringing in a lot of bug fixes and improvements.
877: <li>Check the NTP server clock status returned to <a href="http://man.openbsd.org/?query=rdate&sektion=8">rdate(8)</a> and don't use the response if the server thinks its clock is unsynchronised.
878: <li>In uvm_map_clean() (called by <a href="http://man.openbsd.org/?query=msync&sektion=2">msync(2)</a> and <a href="http://man.openbsd.org/?query=madvise&sektion=2">madvise(2)</a>), only free writable pages, and don't free copy-on-write pages because the permissions aren't known.<br>
1.1 miod 879: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 880: <li>Only call <a href="http://man.openbsd.org/?query=getprotobynumber&sektion=3">getprotobynumber(3)</a> from <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a> when the logging level is high enough to need the result. From FreeBSD.
881: <li>Some Emacs compatibility tweaks to binutils. Use the classic executable start addresses if <a href="http://man.openbsd.org/?query=ld&sektion=1">ld(1)</a> option -Z (disable W^X) is active.
1.1 miod 882: <li>New privsep user and group _ntp.
1.39 sthen 883: <li>New monitoring daemon <a href="http://man.openbsd.org/?query=hotplugd&sektion=8&arch=i386">hotplugd(8)</a> to go with <a href="http://man.openbsd.org/?query=hotplug&sektion=4">hotplug(4)</a>.
884: <li>New <a href="http://man.openbsd.org/?query=hotplug&sektion=4">hotplug(4)</a> device to pass device attach and detach events up to userland. Available for alpha, amd64, i386, macppc and sparc64, only enabled on i386 for now.
885: <li>Use generic CRC code, remove bogus LLADDR use and handle multicast ranges better in <a href="http://man.openbsd.org/?query=nge&sektion=4">nge(4)</a> and <a href="http://man.openbsd.org/?query=sf&sektion=4">sf(4)</a>.
1.1 miod 886: <!-- ^ 20040530 -->
1.39 sthen 887: <li>Fix <a href="http://man.openbsd.org/?query=bge&sektion=4">bge(4)</a> multicast reception.
888: <li>Add a description field for network interfaces, accessible via <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> command 'description' and <a href="http://man.openbsd.org/?query=ioctl&sektion=2">ioctl(2)</a>s SIOC[GS]IFDESCR.
889: <li>Use library CRC32 routines instead of a local implementation in <a href="http://man.openbsd.org/?query=sk&sektion=4">sk(4)</a>.
890: <li>Fix a memory leak in <a href="http://man.openbsd.org/?query=ccdconfig&sektion=8">ccdconfig(8)</a>.
891: <li>Remove multicast addresses and disable promiscuous mode when destroying a <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> interface.
892: <li>Make <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> up and down commands work as expected for <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> devices.
1.1 miod 893: <li>Create a few more USB devices by default in MAKEDEV(8).
894: <!--- ^ 20040529 -->
1.39 sthen 895: <li>Clean up <a href="http://man.openbsd.org/?query=scsi&sektion=4">scsi(4)</a> sense error logic and display. Based on NetBSD.
1.1 miod 896: <li>Allow machine-dependent filesystem options to be passed for the root filesystem in src/distrib/miniroot.
897: <li>Remove the old package tools (src/usr.sbin/pkg_install) from the tree.
1.39 sthen 898: <li>Have <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> detect the absence of <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> and tcpmd5 capabilities at runtime.
899: <li>More helpful boot-time display for <a href="http://man.openbsd.org/?query=aac&sektion=4">aac(4)</a>.
900: <li>Fix a typo in umapfs' <a href="http://man.openbsd.org/?query=unmount&sektion=2">unmount(2)</a> implementation.
901: <li>Backwards compatibility fixes in the hash functions, unbreaking <a href="http://man.openbsd.org/?query=skey&sektion=1">skey(1)</a> with sha1.
902: <li>Make <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> devices clonable.
903: <li>Make AFS <a href="http://man.openbsd.org/?query=flock&sektion=2">flock(2)</a>/<a href="http://man.openbsd.org/?query=fcntl&sektion=2">fcntl(2)</a> locks work on the local system.
1.1 miod 904: <!-- ^ 20040528 -->
1.39 sthen 905: <li>Make accounting optional, with the new <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> option (wait for it) ACCOUNTING.
906: <li>Allow login names longer than eight characters in <a href="http://man.openbsd.org/?query=uucpd&sektion=8">uucpd(8)</a>.
907: <li>Fix a memory leak in a <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> error path.
1.1 miod 908: <li>When shutting the system down, finalise accounting before the VFS to avoid panics.
1.39 sthen 909: <li>Fix TCP corruption on <a href="http://man.openbsd.org/?query=rl&sektion=4">rl(4)</a> cards.
910: <li>Much better rulefile parsing for <a href="http://man.openbsd.org/?query=brconfig&sektion=8">brconfig(8)</a>.
1.1 miod 911: <li>Pool efficiency improvements:
912: <ul>
913: <li>Lower the default high watermark from UINT_MAX to 8 pages.
914: <li>Modify uvm_km_getpage() to take a waitok flag and use it instead of uvm_km_alloc_poolpage1() for both the default and nointr pool allocators.
915: <li>Use the default allocator for the mbuf and mbuf cluster pools.
916: </ul>
917: <!-- ^ 20040527 -->
1.39 sthen 918: <li>Correct a missing <a href="http://man.openbsd.org/?query=freeaddrinfo&sektion=3">freeaddrinfo(3)</a> in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>.
1.1 miod 919: <li>Fix a NetBSD merge error in the TCP syncache, allowing IPv6 to use it.
1.39 sthen 920: <li>Fix fd leaks in a few <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> error paths.
921: <li>Call <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a> contructors after setting up the debugger, similar to recent destructor changes.
922: <li>In <a href="http://man.openbsd.org/?query=cu&sektion=1">cu(1)</a>/<a href="http://man.openbsd.org/?query=tip&sektion=1">tip(1)</a>, if one process dies then kill the other ourselves.
923: <li>In <a href="http://man.openbsd.org/?query=rdate&sektion=8">rdate(8)</a> NTP mode, send a 64-bit random number as the 'current time' field, which the server copies back in its response. This avoids sending out the current system time, and makes it slightly harder for an attacker to send spoof replies on behalf of the real server.
924: <li>Use <a href="http://man.openbsd.org/?query=_exit&sektion=2">_exit(2)</a> instead of <a href="http://man.openbsd.org/?query=exit&sektion=3">exit(3)</a> in the <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a> child process.
1.1 miod 925: <!-- ^ 20040526 -->
1.39 sthen 926: <li>Include the hostname in <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a> memory-buffered entries.
927: <li>Since the per-arch _dl_bcopy() in <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a> is in all cases a simple for loop and not painstakingly optimised assembler, just use a single machine-independent version.
928: <li>Allow <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a> _dl_find_symbol() to return a pointer to the container object.
929: <li>Handle interface removals gracefully in <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>, now that <a href="http://man.openbsd.org/?query=poll&sektion=2">poll(2)</a> wakes it up on interface detach.
930: <li>Wake up any <a href="http://man.openbsd.org/?query=poll&sektion=2">poll(2)</a>ing process when a <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> descriptor is closed.
931: <li>If a <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a>-monitored interface is detached, send any buffered packets up to userland.
932: <li>Scale the <a href="http://man.openbsd.org/?query=bge&sektion=4">bge(4)</a> timeout value correctly.
933: <li>Since ULLONG_MAX+1 == 0 mod ULLONG_MAX+1, let the <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> sc_counter wrap around all by itself.
1.1 miod 934: <!-- ^ 20040525 -->
1.39 sthen 935: <li><a href="http://man.openbsd.org/?query=bktr&sektion=4">bktr(4)</a> fixes from NetBSD and FreeBSD.
936: <li>Move the addition of atexit destructors right to the end of <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a> setup (after the <a href="http://man.openbsd.org/?query=gdb&sektion=1">gdb(1)</a> helper code) so they can be debugged.
937: <li>If <a href="http://man.openbsd.org/?query=ld.so&sektion=1">ld.so(1)</a> is running under <a href="http://man.openbsd.org/?query=ldd&sektion=1">ldd(1)</a>, exit earlier before a whole bunch of unnecessary setup gets done.
1.1 miod 938: <li>Check ifp is valid before using it in carp_setroute(), avoiding a panic.
1.39 sthen 939: <li>Helpfully, use the right function names in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> error messages.
940: <li>Fix multicast problems with <a href="http://man.openbsd.org/?query=sk&sektion=4">sk(4)</a>.
941: <li>Don't leak a socket in <a href="http://man.openbsd.org/?query=ndp&sektion=8">ndp(8)</a>.
942: <li>Back out the recent <a href="http://man.openbsd.org/?query=fork1&sektion=9">fork1(9)</a> change due to compatibility problems.
1.1 miod 943: <!-- ^ 20040524 -->
1.39 sthen 944: <li>New MaxAuthTries option for <a href="http://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>.
945: <li>Allow the retval parameter to <a href="http://man.openbsd.org/?query=fork1&sektion=9">fork1(9)</a> to be NULL (as the manpage says) without causing a panic.
946: <li><a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>ify <a href="http://man.openbsd.org/?query=pflogd&sektion=8">pflogd(8)</a>.
947: <li>Add <a href="http://man.openbsd.org/?query=gscsio&sektion=4">gscsio(4)</a> and <a href="http://man.openbsd.org/?query=lmtemp&sektion=4">lmtemp(4)</a> I2C drivers.
948: <li>Add I2C framework (<a href="http://man.openbsd.org/?query=iic&sektion=4">iic(4)</a>, <a href="http://man.openbsd.org/?query=iic&sektion=9">iic(9)</a>) based on that in NetBSD and enable on i386.
949: <li>Fix a <a href="http://man.openbsd.org/?query=stat&sektion=2">stat(2)</a>-then-<a href="http://man.openbsd.org/?query=open&sektion=2">open(2)</a> race in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> when checking the policy file for root-only permissions.
950: <li>Let <a href="http://man.openbsd.org/?query=ipsecadm&sektion=8">ipsecadm(8)</a> delete tcpmd5 SAs.
951: <li>Fix <a href="http://man.openbsd.org/?query=ipsecadm&sektion=8">ipsecadm(8)</a> so that <a href="http://man.openbsd.org/?query=ipcomp&sektion=4">ipcomp(4)</a> can be used.
952: <li><font color="#e00000"><strong>SECURITY FIX: With the introduction of IPv6 code in <a href="http://man.openbsd.org/?query=xdm&sektion=1">xdm(1)</a>, one test on the 'requestPort' resource was deleted by accident.</strong></font> This makes xdm create the chooser socket even if XDMCP is disabled in xdm-config, by setting requestPort to 0. See <a href="http://bugs.xfree86.org/show_bug.cgi?id=1376">XFree86 bugzilla</a> for details.<br>
1.4 deraadt 953: <a href="errata36.html#xdm">A source code patch is available</a>.<br>
1.1 miod 954: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 955: <li>Fix a boot-time crasher in <a href="http://man.openbsd.org/?query=ahd&sektion=4">ahd(4)</a>.
956: <li>Add (to i386 and amd64) <a href="http://man.openbsd.org/?query=ehci&sektion=4">ehci(4)</a>, a USB Enhanced Host Controller Interface driver, for USB 2.0 support.
1.1 miod 957: <li>Finally implement StackGhost buffer overflow exploit protection on sparc.
1.39 sthen 958: <li>Correct a missing <a href="http://man.openbsd.org/?query=splx&sektion=9">splx(9)</a> in an igmp_joingroup() error path.
959: <li>Fix VFS corruption (due to <a href="http://man.openbsd.org/?query=gcc&sektion=1">gcc(1)</a>) on i386 by out-of-lining the <a href="http://man.openbsd.org/?query=spl&sektion=9">spl(9)</a> functions.
1.1 miod 960: <!-- ^ 20040523 -->
1.39 sthen 961: <li>Fix size_t != off_t truncation in <a href="http://man.openbsd.org/?query=ahd&sektion=4">ahd(4)</a>.
962: <li>Make <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a>'s disk columns wide enough to show transfer numbers for modern disks without writing into the next column.
1.1 miod 963: <!-- ^ 20040522 -->
1.39 sthen 964: <li>Change the <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> anchor path component separator from ':' to '/'. <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> now requires any anchor spec containing the separator to be in quotes.
1.1 miod 965: <li>Make /root/.klogin optional in /etc/mtree/special.
1.39 sthen 966: <li>Import and merge <a href="http://man.openbsd.org/?query=gdb&sektion=1">gdb(1)</a> version 6.1.
967: <li>Support RFC2796 Route Reflection in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, removing the need for an IBGP mesh.
968: <li>Add support for dynamic network announcements in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> and <a href="http://man.openbsd.org/?query=bgpctl&sektion=8">bgpctl(8)</a>.
1.1 miod 969: <li>Don't rely on ifp's validity when setting a floor on the TCP MSS in ip_input.c.
1.39 sthen 970: <li>Allow an <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> user to cancel a port forward (OpenSSH bugzilla #756).
971: <li>Do a better job of copying <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> relative anchor paths out to userland.
972: <li>Use the new DLT_PPP_ETHER datalink type to print <a href="http://man.openbsd.org/?query=pppoe&sektion=8">pppoe(8)</a> frames in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
1.1 miod 973: <!-- ^ 20040521 -->
1.39 sthen 974: <li>Use the right buffer size for <a href="http://man.openbsd.org/?query=strlcpy&sektion=3">strlcpy(3)</a> in libreadline.
975: <li>Zero the ifreq structure before use when fetching interface info in <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a>.
976: <li>Fix a missing <a href="http://man.openbsd.org/?query=strdup&sektion=3">strdup(3)</a> error check in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
977: <li>Start work on adding the <a href="http://man.openbsd.org/?query=ahd&sektion=4">ahd(4)</a> Adaptec PCI/PCI-X Ultra320 SCSI driver from FreeBSD.
1.1 miod 978: <!-- ^ 20040520 -->
979: <li>Enable the fancy new i386 pagezero code by not resetting it to its old value after setting it up.
1.39 sthen 980: <li>Allow anchors within anchors in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>. More work to come.
1.1 miod 981: <li>Don't recursively call nd6_output() when route allocation fails, just return a host unreachable error.
1.39 sthen 982: <li><font color="#e00000"><strong>SECURITY FIX: A heap overflow in the <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a> server has been discovered that can be exploited by clients sending malformed requests.</strong></font> These clients can then run arbitrary code with the same privileges as the CVS server program.<br>
1.4 deraadt 983: <a href="errata36.html#cvs2">A source code patch is available</a>.<br>
1.1 miod 984: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 985: <li>Allow symbolic service- and protocol names in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, so e.g. "Protocol=tcp" now works.
986: <li><font color="#e00000"><strong>SECURITY FIX: A flaw in the Kerberos V <a href="http://man.openbsd.org/?query=kdc&sektion=8">kdc(8)</a> server could result in the administrator of a Kerberos realm having the ability to impersonate any principal in any other realm which has established a cross-realm trust with their realm.</strong></font> The flaw is due to inadequate checking of the "transited" field in a Kerberos request. For more details see <a href="http://www.pdc.kth.se/heimdal/advisory/2004-04-01/">Heimdal's announcement</a>.<br>
1.4 deraadt 987: <a href="errata36.html#kerberos">A source code patch is available</a>.<br>
1.1 miod 988: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 989: <li>Add word boundary tests to the regexes that find @-commands in <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> etc. packing lists.
990: <li>Fix SIGINT handling in <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>.
991: <li>Upgrade <a href="http://man.openbsd.org/?query=file&sektion=1">file(1)</a> to version 4.09.
992: <li>Updates to aic79xx code from FreeBSD in preparation for the upcoming <a href="http://man.openbsd.org/?query=ahd&sektion=4">ahd(4)</a> driver.
1.1 miod 993: <!-- ^ 20040519 -->
1.39 sthen 994: <li>Stop some <a href="http://man.openbsd.org/?query=fxp&sektion=4">fxp(4)</a> devices creating PCI errors in 10Mbps mode by disabling 'dynamic standby mode' in the EEPROM. From NetBSD.
995: <li>Handle CRC errors in <a href="http://man.openbsd.org/?query=fxp&sektion=4">fxp(4)</a>.
996: <li>Fix a ssize_t != int overflow in <a href="http://man.openbsd.org/?query=rdate&sektion=8">rdate(8)</a>'s NTP code.
997: <li>Generate /etc/<a href="http://man.openbsd.org/?query=ttys&sektion=5">ttys(5)</a> entries for all available <a href="http://man.openbsd.org/?query=pty&sektion=4">pty(4)</a> devices, now that more are available.
998: <li>Fix a missing initialisation in ISA <a href="http://man.openbsd.org/?query=ie&sektion=4&arch=i386">ie(4)</a>.
999: <li>Remove trailer encapsulation support from <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>.
1000: <li>Fix a reference counting bug in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> DIOCCHANGERULE.
1.1 miod 1001: <li>Fix a buffer overrun in ip_output() (FreeBSD PR#66386).
1002: <li>Don't leak a mount structure when handling mount errors in nullfs.
1003: <li>ANSIfy src/libc/gen/*.
1004: <!-- ^ 20040518 -->
1005: <li>Merge new binutils, fix local differences, and enable on arm.
1006: <li>Import GNU binutils 2.14, minus testsuites, infodocs and I18N files.
1.39 sthen 1007: <li>Bump the default data size to 75MB from 64MB, so that XF4 can be built on amd64 with the imminent binutils upgrade without changing <a href="http://man.openbsd.org/?query=login.conf&sektion=5">login.conf(5)</a>.
1008: <li>Teach <a href="http://man.openbsd.org/?query=file&sektion=1">file(1)</a> about the b.out (i960) binary format. From NetBSD.
1009: <li>In <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a>, make sure the return code gets initialised (pfsync_request_update()).
1010: <li>Add basic COMMUNITIES attribute support in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s filter language.
1011: <li>Update libiberty's floatformat.[ch] to those from <a href="http://man.openbsd.org/?query=gdb&sektion=1">gdb(1)</a> 6.1.
1.1 miod 1012: <!-- ^ 20040517 -->
1.39 sthen 1013: <li>Use <a href="http://man.openbsd.org/?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://man.openbsd.org/?query=rand&sektion=3">rand(3)</a> in <a href="http://man.openbsd.org/?query=httpd&sektion=8">httpd(8)</a> mod_rewrite and mod_ssl, cleaning up surrounding code in the latter on the way.<br>
1.1 miod 1014: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1015: <li>Remove the now-unused <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> pidfile stuff from /etc/<a href="http://man.openbsd.org/?query=rc&sektion=8">rc(8)</a>.
1016: <li>Add a separate link type, DLT_PPP_ETHER, for <a href="http://man.openbsd.org/?query=pppoe&sektion=8">pppoe(8)</a> frames. From NetBSD.
1017: <li>Don't skip the graceful shutdown of <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> just because the system is being powered down.
1018: <li>When <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> backs off because of physical interface problems, advertise this fact immediately instead of waiting for the next scheduled announcement.
1.1 miod 1019: <!-- ^ 20050416 -->
1.39 sthen 1020: <li>Add a workaround in <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a> for the recent multipath routing changes.
1021: <li>Fix a two-byte buffer overflow when printing sockaddr structs of unknown type in <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>.
1022: <li>Correct error output for bad limit modifiers in <a href="http://man.openbsd.org/?query=csh&sektion=1">csh(1)</a>.
1.1 miod 1023: <!-- ^ 20050415 -->
1.5 david 1024: <li>Fix a reference-counting bug in fifofs that could cause certain non-blocking FIFO users (e.g. qmail) to consume 100% CPU.<br>
1.1 miod 1025: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1026: <li>Interpret <a href="http://man.openbsd.org/?query=ipsecadm&sektion=8">ipsecadm(8)</a> cpi and spi parameters as hex even if not preceded by '0x'.
1027: <li>Unbreak <a href="http://man.openbsd.org/?query=pppoe&sektion=8">pppoe(8)</a> server mode by not doing the <a href="http://man.openbsd.org/?query=chroot&sektion=8">chroot(8)</a>.
1028: <li>Use a nointr <a href="http://man.openbsd.org/?query=pool&sektion=9">pool(9)</a> instead of generic <a href="http://man.openbsd.org/?query=malloc&sektion=9">malloc(9)</a> for pathname storage when doing name-to-inode lookups.
1.1 miod 1029: <!-- ^ 20040514 -->
1.39 sthen 1030: <li>Have <a href="http://man.openbsd.org/?query=newfs&sektion=8">newfs(8)</a> dump status information to stderr on receipt of SIGINFO if running in quiet (-q) mode.
1031: <li>Allow the <a href="http://man.openbsd.org/?query=authpf&sektion=8">authpf(8)</a> shell to be overloaded by <a href="http://man.openbsd.org/?query=login.conf&sektion=5">login.conf(5)</a> like the manpage says.
1032: <li>Make the <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a> socket close-on-exec.
1033: <li>Arrange for <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a> to check both cron and <a href="http://man.openbsd.org/?query=at&sektion=1">at(1)</a> databases for jobs if the newly-non-blocking cron socket returns EAGAIN.
1034: <li>Display the right fields in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> parser.
1035: <li>Make <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> backoff work properly by heeding the raised advskew on received as well as sent packets.
1036: <li>Make <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>'s lease file handling work under the chroot.
1037: <li>Add some new configuration functionality to <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>'s FIFO interface.
1038: <li>Allow <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> interfaces to be destroyed by <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>.
1039: <li>Fix <a href="http://man.openbsd.org/?query=systrace&sektion=1">systrace(1)</a> examples in /etc/systrace (PR#3748).
1040: <li>Better <a href="http://man.openbsd.org/?query=scsi&sektion=4">scsi(4)</a> sense display.
1.1 miod 1041: <!-- ^ 20040513 -->
1.39 sthen 1042: <li>Replace the hand-crafted expr() parser in <a href="http://man.openbsd.org/?query=m4&sektion=1">m4(1)</a> with a standard <a href="http://man.openbsd.org/?query=lex&sektion=1">lex(1)</a>-and-<a href="http://man.openbsd.org/?query=yacc&sektion=1">yacc(1)</a> combo. Easier to work on, and more standards compliant too.
1.1 miod 1043: <li>Fix msdosfs on 64-bit systems.
1.39 sthen 1044: <li>Fix <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> and <a href="http://man.openbsd.org/?query=ppp&sektion=8">ppp(8)</a> breakage caused by the new multipath routing code.
1045: <li>Make <a href="http://man.openbsd.org/?query=login_passwd&sektion=8">login_passwd(8)</a> setuid root again, it's needed for 'secure' YP maps.
1046: <li>Call <a href="http://man.openbsd.org/?query=tzset&sektion=3">tzset(3)</a> in <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>, <a href="http://man.openbsd.org/?query=dhcrelay&sektion=8">dhcrelay(8)</a> and <a href="http://man.openbsd.org/?query=mopd&sektion=8">mopd(8)</a>.
1.1 miod 1047: <!-- ^ 20040512 -->
1.39 sthen 1048: <li>Don't print the <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a> version if the helpfile is missing.
1049: <li>Build <a href="http://man.openbsd.org/?query=sendmail&sektion=8">sendmail(8)</a> with -D_FFR_QUEUERETURN_DSN, allowing faster expiration of spam bounces.
1050: <li>Unbreak checksum generation when using <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> scrub random-id.
1051: <li>Change <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> routing loop detection so that visiting a packet more than four times is an error, instead of more than once.<br>
1.1 miod 1052: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1053: <li>Don't abort <a href="http://man.openbsd.org/?query=lint&sektion=1">lint(1)</a> because a child process fails, just move onto the next file.
1.1 miod 1054: <!-- ^ 20040511 -->
1055: <li>When doing user mounts, inherit the MNT_NOEXEC flag from the mount point. This stops users bypassing noexec by null-mounting the filesystem on top of itself.
1.39 sthen 1056: <li>Filter and lock <a href="http://man.openbsd.org/?query=rbootd&sektion=8">rbootd(8)</a>'s <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> descriptor before dropping privileges.
1057: <li>Unbreak <a href="http://man.openbsd.org/?query=chsh&sektion=1">chsh(1)</a> after the recent <a href="http://man.openbsd.org/?query=pw_copy&sektion=3">pw_copy(3)</a> changes.
1.1 miod 1058: <li>Import and merge GNU readline 4.3p5.
1.39 sthen 1059: <li>Double <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a>'s command line buffer size to 2K.
1060: <li>Allow the banner page to be turned off by <a href="http://man.openbsd.org/?query=lpr&sektion=1">lpr(1)</a>.
1061: <li>Add /usr/local/sbin to root's .cshrc, and move /usr/X11R6/bin before /usr/local/{bin,sbin} for both <a href="http://man.openbsd.org/?query=csh&sektion=1">csh(1)</a> and <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a>.
1062: <li>Remove a bunch of #ifdef ISO and #ifdef notyet crud from <a href="http://man.openbsd.org/?query=nfsd&sektion=8">nfsd(8)</a>.
1063: <li>Make <a href="http://man.openbsd.org/?query=lint&sektion=1">lint(1)</a> understand the 'long long' type.
1064: <li>Make <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a>'s accept socket non-blocking.
1065: <li>Clobber the 'clobber' command in <a href="http://man.openbsd.org/?query=mail&sektion=1">mail(1)</a>.
1066: <li>When <a href="http://man.openbsd.org/?query=user&sektion=8">user(8)</a> adds a new group, place it before the first '+' entry if one exists (part of a fix for PR#3727).
1067: <li><a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>-ify <a href="http://man.openbsd.org/?query=ipsecadm&sektion=8">ipsecadm(8)</a> and add some more integer value checks.
1.1 miod 1068: <!-- ^ 20040510 -->
1.39 sthen 1069: <li>Properly initialise <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> advskew for values greater than 240.<br>
1.1 miod 1070: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1071: <li>Remove unused variables in several programs on <a href="http://man.openbsd.org/?query=lint&sektion=1">lint(1)</a>'s say-so.
1.1 miod 1072: <li>Use the freshly-generated MD5 digest for the SSH1 session ID instead of random stack garbage.
1.39 sthen 1073: <li>Fix a null deref panic in the <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> TCP normaliser.
1.1 miod 1074: <!-- ^ 20040509 -->
1.39 sthen 1075: <li>Swap <a href="http://man.openbsd.org/?query=arc4random&sektion=3">arc4random(3)</a> for <a href="http://man.openbsd.org/?query=rand&sektion=3">rand(3)</a> in <a href="http://man.openbsd.org/?query=awk&sektion=1">awk(1)</a> unless the user sets the seed, in which case swap <a href="http://man.openbsd.org/?query=random&sektion=3">random(3)</a> for <a href="http://man.openbsd.org/?query=rand&sektion=3">rand(3)</a>.
1076: <li>Add a reference count for <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> descriptors, and don't free resources until processes sleeping on a descriptor have been woken up.
1077: <li>Use a locked, filtered <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> descriptor in <a href="http://man.openbsd.org/?query=mopd&sektion=8">mopd(8)</a>.
1078: <li>Replace <a href="http://man.openbsd.org/?query=rand&sektion=3">rand(3)</a> with <a href="http://man.openbsd.org/?query=arc4random&sektion=3">arc4random(3)</a> in <a href="http://man.openbsd.org/?query=ksh&sektion=1">ksh(1)</a>, unless the user sets the random seed manually in which case rand() is still used.
1079: <li>Allow manually-keyed <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> AH in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1080: <li>Initialise <a href="http://man.openbsd.org/?query=ed&sektion=1">ed(1)</a>'s crypto using <a href="http://man.openbsd.org/?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://man.openbsd.org/?query=rand&sektion=3">rand(3)</a>.
1081: <li>Fix a few memory leaks in <a href="http://man.openbsd.org/?query=regex&sektion=3">regex(3)</a>.
1082: <li>Resolve hostnames in <a href="http://man.openbsd.org/?query=dhcpd.conf&sektion=5">dhcpd.conf(5)</a> at parse time (PR#3771).
1083: <li>Make <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> back off on other interfaces on IP output errors until reliable delivery is restored.
1084: <li>Use the right packet length in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a> parser.
1.1 miod 1085: <!-- ^ 20040508 -->
1.39 sthen 1086: <li>Enable 802.1q long packets for <a href="http://man.openbsd.org/?query=vlan&sektion=4">vlan(4)</a> support in <a href="http://man.openbsd.org/?query=fxp&sektion=4">fxp(4)</a> on cardbus.
1087: <li>Don't allow command substitution characters in the environment variables passed through to <a href="http://man.openbsd.org/?query=dhclient-script&sektion=8">dhclient-script(8)</a> by <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>.
1088: <li>Have <a href="http://man.openbsd.org/?query=afsd&sektion=8">afsd(8)</a> drop privileges and <a href="http://man.openbsd.org/?query=chroot&sektion=2">chroot(2)</a> to the cache directory.
1089: <li>Make the -w option work the same for <a href="http://man.openbsd.org/?query=grep&sektion=1">grep(1)</a>'s regex and fast paths.
1090: <li>Implement <a href="http://man.openbsd.org/?query=sysconf&sektion=3">sysconf(3)</a> values _SC_SEM_NSEMS_MAX and _SC_SEM_VALUE_MAX.
1091: <li>Fix sizeof(pointer) bugs in <a href="http://man.openbsd.org/?query=amd&sektion=8">amd(8)</a> and <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a>.
1092: <li>Add a fast path for <a href="http://man.openbsd.org/?query=fgrep&sektion=1">fgrep(1)</a> and fix the -w option.
1.1 miod 1093: <li>Replace the kernel's RSA-derived MD5 implementation with code derived from Colin Plumb's PD version.
1.39 sthen 1094: <li>Add a filter option to <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> to dump prefixes learned via UPDATEs into a <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> table.
1.1 miod 1095: <li>Big FFS softdep merge with FreeBSD, fixing a number of bugs.
1096: <!-- ^ 20040507 -->
1.39 sthen 1097: <li>Some <a href="http://man.openbsd.org/?query=snprintf&sektion=3">snprintf(3)</a> and <a href="http://man.openbsd.org/?query=strlcpy&sektion=3">strlcpy(3)</a> cleaning in the X server.
1098: <li>Stop <a href="http://man.openbsd.org/?query=grep&sektion=1">grep(1)</a> doing <a href="http://man.openbsd.org/?query=fseek&sektion=3">fseek(3)</a> on stdin if it's a terminal.
1099: <li>Have <a href="http://man.openbsd.org/?query=grep&sektion=1">grep(1)</a> treat a '^H' character as non-binary.
1100: <li>Make <a href="http://man.openbsd.org/?query=dhclient-script&sektion=8">dhclient-script(8)</a> work with half-bridge ADSL routers that don't provide a real default gateway (PR#3747).
1101: <li>Apply The Process to <a href="http://man.openbsd.org/?query=pppoe&sektion=8">pppoe(8)</a>: Create a filtered and locked <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> descriptor, drop privileges and <a href="http://man.openbsd.org/?query=chroot&sektion=2">chroot(2)</a> to /var/empty.
1.1 miod 1102: <li>New _afs and _ppp users for privilege separation.
1.39 sthen 1103: <li>Fix <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> capability negotiation bugs and speed it up when working with picky peers.
1104: <li>Increase <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s socket buffer size to 64KB iff <!-- iff is not a typo --> IPsec or md5sig is in use.
1105: <li>Fix a race condition in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> when a session is closed but there are updates in the buffer.
1.1 miod 1106: <li>Add strchr() and strrchr() to libkern.
1107: <!-- ^ 20040506 -->
1108: <li><font color="#e00000"><strong>SECURITY FIX: Check for integer overflow in procfs.</strong></font> Use of procfs is not recommended.<br>
1.4 deraadt 1109: <a href="errata36.html#procfs">A source code patch is available</a>.<br>
1.1 miod 1110: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1111: <li>When a <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> scrub rule with the 'reassemble tcp' option is in effect, use RFC1913 PAWS as a means of extending the TCP sequence space by 10 to 18 bits. This makes blind insertion attacks much more difficult, because the timestamp needs to be guessed as well as the TCP sequence number.
1112: <li>Sprinkle <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a> liberally all over <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>.
1113: <li>Match the <a href="http://man.openbsd.org/?query=sha2&sektion=3">sha2(3)</a> functions up with the other hash types.
1114: <li>Add a <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> write filter to <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> and lock the descriptor.
1115: <li>Use <a href="http://man.openbsd.org/?query=tzset&sektion=3">tzset(3)</a> before chrooting <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>.
1116: <li>Create the <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> privsep child before opening <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a>, creating the routing socket and opening the lease file.
1117: <li>In <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a>, keep statistics for suffix transformations.
1.1 miod 1118: <!-- ^ 20040505 -->
1.39 sthen 1119: <li>Remove <a href="http://man.openbsd.org/?query=bootpd&sektion=8">bootpd(8)</a>, <a href="http://man.openbsd.org/?query=bootpef&sektion=8">bootpef(8)</a> and <a href="http://man.openbsd.org/?query=bootpgw&sektion=8">bootpgw(8)</a> from the tree, their functionality is present in <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> and friends nowadays.
1120: <li>Teach <a href="http://man.openbsd.org/?query=nm&sektion=1">nm(1)</a> about ELF .plt*, .got*, .init and .fini sections.
1.1 miod 1121: <li>The TCP-specific route metrics are rarely used, so use a trimmed down version in the kernel (struct rt_kmetrics) and fake up a full-fat struct rt_metrics on demand for userland compatility.
1122: <li>Apply bridge filter rules to frames destined for the local machine, so a single-interface bridge can do filtering and tagging.
1.39 sthen 1123: <li>Add privilege separation to <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>.
1124: <li>Create /var/empty on the installer miniroot so some futuristic pie-in-the-sky privilege-separated <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> can work.
1.1 miod 1125: <!-- ^ 20040504 -->
1.39 sthen 1126: <li>Convert <a href="http://man.openbsd.org/?query=ping&sektion=8">ping(8)</a> to use <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>.
1127: <li>Add COMPAT_35 <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> option for kernel binary compatibility with OpenBSD 3.5
1.1 miod 1128: <li>Add *Pad (do padding like *Final without finishing) and *FileChunk (digest a portion of a file) functions for each of the hash types in libc.
1.39 sthen 1129: <li>Tweak <a href="http://man.openbsd.org/?query=ndbm&sektion=3">ndbm(3)</a>, <a href="http://man.openbsd.org/?query=semop&sektion=2">semop(2)</a> and <a href="http://man.openbsd.org/?query=shmget&sektion=2">shmget(2)</a> to match POSIX. Since this is an API change, crank libc's and libpthread's major version.
1130: <li>Define bsd_signal(3) as required by XPG. Of course, it's just an alias for <a href="http://man.openbsd.org/?query=signal&sektion=3">signal(3)</a> here.
1131: <li>New stdlib function <a href="http://man.openbsd.org/?query=strtonum&sektion=3">strtonum(3)</a>, a safe replacement for <a href="http://man.openbsd.org/?query=atoi&sektion=3">atoi(3)</a> and <a href="http://man.openbsd.org/?query=strtol&sektion=3">strtol(3)</a> etc.
1132: <li>Clean up properly if <a href="http://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> PCMCIA attachment fails.
1.1 miod 1133: <li>Remove OpenBSD/pegasos. See the mailing list archives for some very good reasons why.
1.39 sthen 1134: <li>Make <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a>'s crontab socket non-blocking.
1135: <li>When setting PROT_NONE with <a href="http://man.openbsd.org/?query=mprotect&sektion=2">mprotect(2)</a> on a wired entry, decrement the wired count and stop ntpd causing a panic (PR#3758).<br>
1.1 miod 1136: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1137: <li>Some more fixes to <a href="http://man.openbsd.org/?query=strerror&sektion=3">strerror(3)</a>. Everything now goes via <a href="http://man.openbsd.org/?query=strerror_r&sektion=3">strerror_r(3)</a>.
1138: <li>Make <a href="http://man.openbsd.org/?query=cksum&sektion=1">cksum(1)</a> a link (in /bin) to <a href="http://man.openbsd.org/?query=md5&sektion=1">md5(1)</a> and remove the old program.
1139: <li>Add support for cksum (three flavours), md4, sha256, sha384 and sha512 to <a href="http://man.openbsd.org/?query=md5&sektion=1">md5(1)</a>.
1.1 miod 1140: <!-- ^ 20040502 -->
1.39 sthen 1141: <li>Fix a call to <a href="http://man.openbsd.org/?query=disk_unbusy&sektion=9">disk_unbusy(9)</a> that lacked the third argument.
1142: <li>Implement <a href="http://man.openbsd.org/?query=pthread_suspend_all_np&sektion=3">pthread_suspend_all_np(3)</a> and <a href="http://man.openbsd.org/?query=pthread_resume_all_np&sektion=3">pthread_resume_all_np(3)</a>, needed by the Java HotSpot compiler. From FreeBSD.
1143: <li>Fix the fixes to <a href="http://man.openbsd.org/?query=strerror&sektion=3">strerror(3)</a>.
1144: <li>Do privilege revocation in <a href="http://man.openbsd.org/?query=rbootd&sektion=8">rbootd(8)</a>.
1145: <li>Fix a bug that could cause <a href="http://man.openbsd.org/?query=fxp&sektion=4">fxp(4)</a> to lock up for 15 seconds under heavy load.<br>
1.1 miod 1146: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1147: <!-- ^ 20040501 -->
1.39 sthen 1148: <li>Add _rbootd privilege separation/revocation user for <a href="http://man.openbsd.org/?query=rbootd&sektion=8">rbootd(8)</a>.
1149: <li>Allow <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a> to be built in a kernel without <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a>.
1.1 miod 1150: <li>Start the 3.5-stable branch.
1.39 sthen 1151: <li>Fix non-reentrancy and other bad stuff in <a href="http://man.openbsd.org/?query=strerror&sektion=3">strerror(3)</a>.
1.1 miod 1152: <!-- ^ 20040530 -->
1.39 sthen 1153: <li>Check <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> payload lengths more carefully.
1154: <li>Speedups and cleanups in <a href="http://man.openbsd.org/?query=md4&sektion=3">md4(3)</a> and <a href="http://man.openbsd.org/?query=md5&sektion=3">md5(3)</a>.
1155: <li>Fix alignment problems when copying <a href="http://man.openbsd.org/?query=sha2&sektion=3">sha2(3)</a>'s data pointer around.
1156: <li>Have <a href="http://man.openbsd.org/?query=nm&sektion=1">nm(1)</a> report empty a.out objects as having "no name list" instead of accusing them of having "bad format".
1.1 miod 1157: <!-- ^ 20040529 -->
1.39 sthen 1158: <li>Replace the old RSA Data Security Inc. implementations of <a href="http://man.openbsd.org/?query=md4&sektion=3">md4(3)</a> and <a href="http://man.openbsd.org/?query=md5&sektion=3">md5(3)</a> with code derived from Colin Plumb's public domain MD5 implementation.
1159: <li>Wire <a href="http://man.openbsd.org/?query=tcpdrop&sektion=8">tcpdrop(8)</a> into the build.
1160: <li>Fix a null-dereference crasher in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1161: <li>Fix file descriptor leaks in <a href="http://man.openbsd.org/?query=pflogd&sektion=8">pflogd(8)</a>, <a href="http://man.openbsd.org/?query=rpc.rusersd&sektion=8">rpc.rusersd(8)</a>, <a href="http://man.openbsd.org/?query=spamd-setup&sektion=8">spamd-setup(8)</a>, <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> and <a href="http://man.openbsd.org/?query=tftpd&sektion=8">tftpd(8)</a>.
1.1 miod 1162: <li>Remove the old ISC DHCP code from the tree, much to Henning's delight.
1.39 sthen 1163: <li>In <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a>, allow the PAGER environment variable to contain spaces.
1.1 miod 1164: <li>Update libevent to 0.8 + local changes.
1165: <!-- XXX wtf Wed Apr 28 06:50:21 UTC 2004 usr.sbin/pkg_add/OpenBSD PackingList.pm -->
1.39 sthen 1166: <li>Add some Zebra bug compatibility into <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s capabilities announcements.
1167: <li>Put the IP addresses of users authenticated by <a href="http://man.openbsd.org/?query=authpf&sektion=8">authpf(8)</a> into the <authpf-users> table.
1168: <li>Support AH as well as ESP flows for <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> IPsec.
1169: <li>Fix a bogus return statement in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> tables code when dealing with non-IP packets.
1170: <li>Allow <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> peers to request route refreshes.
1171: <li>Keep track of SAs inserted by <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, making it easier to remove them later.
1172: <li>Make <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> return-rst work on pure bridges.
1173: <li>Remove the assumption, found in a number of places in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>, that af !=INET6 implies af==AF_INET.
1174: <li>Have <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> print <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> packets as carp, and not VRRP.
1175: <li>Some fixes to <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> and <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a> statistics counters.
1176: <li>Make <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> sensitive to its physical interface: If the physical interface drops, so does the carp interface; and have all other carp interfaces back off (i.e. don't preempt, and set high advskew) so this host is unlikely to stay as master.
1177: <li>Add IPv6 support to <a href="http://man.openbsd.org/?query=authpf&sektion=8">authpf(8)</a>.
1.1 miod 1178: <!-- ^ 20040428 -->
1.39 sthen 1179: <li>Generate an <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> host key in /etc/<a href="http://man.openbsd.org/?query=rc&sektion=8">rc(8)</a>, just like the <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> host keys.
1180: <li>Add IKE to <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s IPsec support.
1181: <li>Exit gracefully from <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> with the -vvsq option if no queues are in use.
1182: <li>Make <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a> pass a valid pointer as the fourth argument to <a href="http://man.openbsd.org/?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
1183: <li>Add back a couple of missing break statements in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, unbreaking tcpmd5.
1184: <li>Have <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>'s normaliser check that a TCP RST has exactly the right sequence number. The check only works when we're doing full fragment reassembly.
1185: <li>Stop <a href="http://man.openbsd.org/?query=ipsecadm&sektion=8">ipsecadm(8)</a> looping forever when displaying zero-sized extensions.
1186: <li>Allow only BGP traffic over the IPsec flows set up by <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1.1 miod 1187: <li>A number of quad fixes in libc.
1.39 sthen 1188: <li>Allow <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> to pass specified environment variables from client to server (OpenSSH bugzilla #815).
1189: <li>Support RFC2918 "Route Refresh Capability for BGP-4" in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1.1 miod 1190: <li>Fix incomplete removal of altq when loading a new rulebase that doesn't contain altq rules.
1191: <!-- ^ 20040427 -->
1.39 sthen 1192: <li>New program <a href="http://man.openbsd.org/?query=tcpdrop&sektion=8">tcpdrop(8)</a> that uses the sysctl interface to drop TCP connections. Not built by default yet.
1193: <li>Add a -n (no name lookup) flag to <a href="http://man.openbsd.org/?query=systat&sektion=1">systat(1)</a>.
1194: <li>Fix <a href="http://man.openbsd.org/?query=select&sektion=2">select(2)</a>'s readability detection for NFS filehandles (PR#3757). Broken in the change to <a href="http://man.openbsd.org/?query=poll&sektion=2">poll(2)</a> backends, fix from UFS code.
1195: <li>In <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a>, clear the <a href="http://man.openbsd.org/?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> hints structure before use.
1.1 miod 1196: <li>Break an infinite recursion between tcp_output() and tcp_mtudisc() when the TCP MSS gets to be larger then the interface MTU. Connections will still stall, however.
1197: <li>Allow TCP MSS below the failsafe 216 iff <!-- 'iff' is not a typo --> the interface MTU is less than 256.
1.39 sthen 1198: <li>Back out (for now) the <a href="http://man.openbsd.org/?query=em&sektion=4">em(4)</a> buffer allocation increase (though not the deferred allocation) as it breaks older cards.
1199: <li>Allow <a href="http://man.openbsd.org/?query=cron&sektion=8">cron(8)</a> to send mail to logins containing an underscore character.
1200: <li>Add direct support in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> for <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> between peers. Manual keying only for now.
1201: <li>Much stricter checking of <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> code, preventing arbitrary reads and writes of kernel memory.<br>
1202: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1203: <li>Allocate more buffers for <a href="http://man.openbsd.org/?query=em&sektion=4">em(4)</a> cards, but defer that allocation until <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> up and remove it on interface shutdown.
1204: <li>Fix <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>'s display of the gateway when set using an explicit -gateway modifier.
1205: <li>When IF_INPUT_ENQUEUE() queues an <a href="http://man.openbsd.org/?query=mbuf&sektion=9">mbuf(9)</a> with a cluster, check to see if the data in the cluster will fit into the mbuf and if so, copy the data and deallocate the cluster.
1206: <li>For <a href="http://man.openbsd.org/?query=fxp&sektion=4">fxp(4)</a> and <a href="http://man.openbsd.org/?query=sis&sektion=4">sis(4)</a>, permanently allocate only the minimum number of buffers. Allocate and deallocate receive buffers when <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> brings the interface up and down respectively.
1207: <li>Bandwidth checking fixes in <a href="http://man.openbsd.org/?query=altq&sektion=9">altq(9)</a>. Now a bandwidth of zero is allowed, producing a blackhole queue for CBQ and a realtime-only queue for HFSC.
1208: <li>Add some <a href="http://man.openbsd.org/?query=htonl&sektion=3">htonl(3)</a> paranoia around <a href="http://man.openbsd.org/?query=arc4random&sektion=9">arc4random(9)</a> calls in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>, so that biases in the PRNG won't leak the firewall's byte order.
1209: <li>Fix corruption of <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>'s address pools when using more than 256 rules.<br>
1210: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1211: <li>In /etc/<a href="http://man.openbsd.org/?query=rc&sektion=8">rc(8)</a>, check that <a href="http://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> interfaces really exist before attempting to bring them down at shutdown time.
1212: <li>Start work on peer-to-peer IPsec support for <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1213: <li>Have <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> announce RFC2858 multiprotocol capabilities. Only IPv4 multicast is supported for now.
1214: <li>Make <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> prefer older (more stable) routes before resorting to comparison of BGP IDs and peer IP addresses.
1215: <li>Add a reference count for <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> anchor rules.
1.1 miod 1216: <!-- ^ 20040426 -->
1.39 sthen 1217: <li>Since <a href="http://man.openbsd.org/?query=isprint&sektion=3">isprint(3)</a> doesn't consider all whitespace printable, also use <a href="http://man.openbsd.org/?query=isspace&sektion=3">isspace(3)</a> for the binary file test in <a href="http://man.openbsd.org/?query=less&sektion=1">less(1)</a>.
1.1 miod 1218: <li>Fix float -> quad conversion in libc.
1.39 sthen 1219: <li>Prettier output from <a href="http://man.openbsd.org/?query=bgpctl&sektion=8">bgpctl(8)</a>.
1.1 miod 1220: <li>Permit multiple default routes.
1221: <li>A few more unionfs fixes.
1222: <li>Respect access rights on a union filesystem (PR#745).
1223: <li>Add a few pieces missed in the merge of OpenSSL 0.9.7d.
1224: <li>Add input queue congestion flag support to a few interfaces that can't use the new IF_INPUT_ENQUEUE macro.
1.39 sthen 1225: <li>Prevent an endless loop in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> with 'route-to lo0' rules (PR#3736).<br>
1.1 miod 1226: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1227: <li>Have <a href="http://man.openbsd.org/?query=authpf&sektion=8">authpf(8)</a> run <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> to change the rulebase instead of sucking in code from pfctl and doing it itself.
1.1 miod 1228: <li>Set MINCLSIZE back to its smaller pre-KAME IPv6 value, so now clusters will be used more often.
1.39 sthen 1229: <li>In <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a>, purge only a specific expired state instead of doing an expensive purge all expired states while running at a high <a href="http://man.openbsd.org/?query=spl&sektion=9">spl(9)</a>.
1230: <li>Make sure the local address and <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> neighbor address are of the same address family.
1231: <li>Use '|' instead of ':' as the field separator for <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a> database keys, in preparation for future IPv6 support.
1232: <li>Fix a potential null dereference in the <a href="http://man.openbsd.org/?query=ssl&sektion=3">ssl(3)</a> application utility code.
1.1 miod 1233: <!-- sbreserve() sb_mbmax -->
1.39 sthen 1234: <li>Give <a href="http://man.openbsd.org/?query=routed&sektion=8">routed(8)</a> a local copy of the radix tree code, so it doesn't get (re)broken by net/radix.c changes.
1235: <li>Make <a href="http://man.openbsd.org/?query=ssl&sektion=3">ssl(3)</a> S/MIME work again.
1236: <li>Add 'neighbor cloning' to <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, allowing a configuration to be specified for a network/prefixlength pair as well as the peer IP address. The configuration is cloned for each new peer in the given address range.
1237: <li>Add tcpdrop <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a>, allowing a userland program terminate a TCP connection.
1238: <li>Some string cleaning in <a href="http://man.openbsd.org/?query=ddb&sektion=4">ddb(4)</a>.
1239: <li>Fix a missing return statement in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>'s control connection error path.
1.1 miod 1240: <li>Add multipath support to the radix tree, allowing multiple routes to a single destination (though it won't actually get you anywhere just yet). From KAME.
1.39 sthen 1241: <li>Send <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a> packets for IPv6 protocols other than TCP, UDP and ICMP.
1.1 miod 1242: <li>Sync kernel radix tree code with 4.4BSD-Lite2 via NetBSD.
1.39 sthen 1243: <li>Don't add a PF_GENERATED tag to <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> synproxy generated packets for the second handshake, so they can match rules (and create state) on another interface.
1.1 miod 1244: <!-- ^ 20040425 -->
1.39 sthen 1245: <li>Add a 'probability' modifier for <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> rules, setting the likelihood with which a rule will trigger.
1246: <li>Greatly simplify <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a>'s hostname/address lookup code.
1247: <li>Since OpenBSD has <a href="http://man.openbsd.org/?query=openpty&sektion=3">openpty(3)</a>, we may as well have <a href="http://man.openbsd.org/?query=telnetd&sektion=8">telnetd(8)</a> use it.
1248: <li>Initial support for IPv6 transport in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1249: <li>Add <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a> config files to <a href="http://man.openbsd.org/?query=changelist&sektion=5">changelist(5)</a> and /etc/mtree/special.
1250: <li>Some additional TCP option length paranoia in <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>'s normaliser.
1251: <li>Have <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a> display the new tcps.rcvacktooold statistic counter.
1252: <li>Sync <tree.h> with Niels Provos' version to get rid of a compiler warning for <a href="http://man.openbsd.org/?query=RB_NEXT&sektion=3">RB_NEXT(3)</a>.
1.1 miod 1253: <!-- ^ 20040424 -->
1.39 sthen 1254: <li>Port the gcc2 bounds checking support to gcc3, enabled with -Wbounded (see <a href="http://man.openbsd.org/?query=gcc-local&sektion=1">gcc-local(1)</a>).
1.1 miod 1255: <li>Add some CMSG_ macros to get proper alignment in portalfs. From NetBSD.
1.39 sthen 1256: <li>In <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>, make sure the KEY_LENGTH attribute is present when checking AES proposals as this is required when acting as responder to SafeNet peers.
1257: <li>Silence <a href="http://man.openbsd.org/?query=getopt&sektion=3">getopt(3)</a> errors in the privileged <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> process.
1258: <li>Don't display rubbish on the first output line from <a href="http://man.openbsd.org/?query=vmstat&sektion=8">vmstat(8)</a>, wait for the stats to stabilise.
1.1 miod 1259: <!-- ^ 20040423 -->
1260: <li>Fix the calculation of a raw IPv6 UDP packet's checksum.
1.39 sthen 1261: <li>For <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>'s ping probes, just use the pid for the ICMP id like <a href="http://man.openbsd.org/?query=ping&sektion=8">ping(8)</a> does, instead of some architecture-dependent wierdness.
1.1 miod 1262: <!-- ^ 20040422 -->
1263: <li>Merge in new Omron LUNA port (luna88k), based on OpenBSD/mvme88k, NetBSD/luna68k and CMU Mach.
1.39 sthen 1264: <li>As with <a href="http://man.openbsd.org/?query=dhcrelay&sektion=8">dhcrelay(8)</a>, set a write filter and lock the <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> descriptor before privilege drop in <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>.
1.1 miod 1265: <!-- ^ 20040421 -->
1.39 sthen 1266: <li>Change <a href="http://man.openbsd.org/?query=pw_copy&sektion=3">pw_copy(3)</a> to take the old entry as an additional parameter, allowing both a change of username and a check that the file hasn't changed since it was last read (fixes PR#3698). Adapted from FreeBSD.
1267: <li>Set a write filter and lock <a href="http://man.openbsd.org/?query=dhcrelay&sektion=8">dhcrelay(8)</a>'s <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> file descriptor before dropping privileges.
1268: <li>Drop the port-changing options in <a href="http://man.openbsd.org/?query=dhcrelay&sektion=8">dhcrelay(8)</a> too, always use standard ports.
1.1 miod 1269: <li>New TCP stat counter tcps.rcvacktooold, counts the number of times we drop very old ACK packets when the sequence number isn't exactly right.
1270: <li>Set the km_page allocator's low watermark to a value that allows the system to boot.
1.39 sthen 1271: <li>Switch the build over to the new, improved <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> and <a href="http://man.openbsd.org/?query=dhcrelay&sektion=8">dhcrelay(8)</a>.
1272: <li>Remove the -p (listen port) option of new <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>.
1.1 miod 1273: <!-- ^ 20040420 -->
1274: <li>Bump the default kern.maxclusters to a value high enough to deter all but the most determined tweakers.
1.39 sthen 1275: <li>Remove the GATEWAY <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> option now that both IP forwarding and mbuf cluster allocation are configurable using <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a>.
1276: <li>Introduce a new <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a> kern.maxclusters controlling (oddly enough) the maximum number of mbuf clusters. This deprecates the much-abused NMBCLUSTERS <a href="http://man.openbsd.org/?query=config&sektion=8">config(8)</a> option.
1.1 miod 1277: <li>Use the km_page allocator as the backend for the mbuf and mbuf cluster pools.
1.39 sthen 1278: <li>New km_page <a href="http://man.openbsd.org/?query=pool&sektion=9">pool(9)</a> allocator running in an interrupt-safe kernel thread (kmthread).
1.1 miod 1279: <li>Resource starvation checks for sockets:
1280: <ul>
1.39 sthen 1281: <li>Check the level of <a href="http://man.openbsd.org/?query=mbuf&sektion=9">mbuf(9)</a> cluster utilisation when doing an accepting a listen socket, and fail if usage is greater than 95% of the hard limit.
1282: <li>New API sbcheckreserve() returns ENOBUFS if more than 50% of <a href="http://man.openbsd.org/?query=mbuf&sektion=9">mbuf(9)</a> clusters are in use
1283: <li>Use sbcheckreserve() when accepting a connection, and on <a href="http://man.openbsd.org/?query=setsockopt&sektion=2">setsockopt(2)</a> for SO_SNDBUF and SND_RCVBUF, and allocate minimal buffers in low-memory situations.
1.1 miod 1284: </ul>
1285: <li>Stop propolice tripping an assert in gcc3.
1.39 sthen 1286: <li>Make <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a> display an error if it can't open the /var/db/spamd database for writing, and return a proper error code.
1287: <li>Cure the angst in <a href="http://man.openbsd.org/?query=user&sektion=8">user(8)</a> caused by the non-existence of the /nonexistent directory.
1288: <li>Correct new <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>'s handling of very long lease times (PR#2888).
1289: <li>Fix a propolice bug in <a href="http://man.openbsd.org/?query=gcc&sektion=1">gcc(1)</a> and unbreak MySQL (mysql bug id 1442).
1.1 miod 1290: <!-- ^ 20040419 -->
1.39 sthen 1291: <li>Have <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> perform strict permission checks on ~/.ssh/config files and abort unless they're correct.
1292: <li>If kernel <a href="http://man.openbsd.org/?query=ipsec&sektion=4">ipsec(4)</a> and/or <a href="http://man.openbsd.org/?query=ipcomp&sektion=4">ipcomp(4)</a> processing is disabled by <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a>, pass any packets through as raw IP to give userland a chance to handle them.
1293: <li>Sync the <a href="http://man.openbsd.org/?query=em&sektion=4">em(4)</a> driver with FreeBSD.
1294: <li>Tidy up <a href="http://man.openbsd.org/?query=usb&sektion=4">usb(4)</a> kernel configs in line with recent i386 changes.
1295: <li><font color="#e00000"><strong>RELIABILITY FIX: Restore the ability to negotiate tags/wide/sync with some SCSI controllers</strong></font> (<a href="http://man.openbsd.org/?query=siop&sektion=4">siop(4)</a>, <a href="http://man.openbsd.org/?query=trm&sektion=4">trm(4)</a> and <a href="http://man.openbsd.org/?query=iha&sektion=4">iha(4)</a>).<br>
1.4 deraadt 1296: <a href="errata36.html#scsi">A source code patch is available</a>.<br>
1.1 miod 1297: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1298: <li>Since <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> can now be invoked legitimately without an interface, don't abort when the user doesn't give any options.
1.1 miod 1299: <!-- ^ 20040418 -->
1300: <li>New _tftpd user and group.
1.39 sthen 1301: <li>Make sure <a href="http://man.openbsd.org/?query=m_pullup2&sektion=9">m_pullup2(9)</a> copies the M_CLUSTER flag when it creates a new mbuf (PR#3740).
1302: <li>Have <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> block unconditionally when the input queue congestion flag is set, instead of doing CPU-intensive rule tests.
1.1 miod 1303: <li>If an interface input queue becomes full, set a new congestion flag in the queue structure. Since a full queue usually indicates processing overload, this flag can be used to allow other subsystems to cooperate in easing the situation.
1304: <!-- ^ 20040417 -->
1.39 sthen 1305: <li>Make <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a> show the number of mbuf clusters in use rather than the number of pages.
1.1 miod 1306: <li>Fix a ufs directory-related panic (PR#3672). Fix from FreeBSD.<br>
1307: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1308: <li>Have the <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a> server check for attempts by a client to walk up the directory tree illegally.
1309: <li>Undo a non-fix in shared memory <a href="http://man.openbsd.org/?query=sysctl&sektion=3">sysctl(3)</a> kern.shminfo.shmmni.<br>
1.1 miod 1310: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1311: <font color="#e00000"><strong>SECURITY FIX: Pathname validation problems have been found in <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a></strong></font>, allowing malicious clients to create files outside the repository, allowing malicious servers to overwrite files outside the local CVS tree on the client and allowing clients to check out files outside the CVS repository.<br>
1.4 deraadt 1312: <a href="errata36.html#cvs">A source code patch is available</a>.<br>
1.1 miod 1313: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1314: <li>Some address family agnosticism in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1315: <li>Let <a href="http://man.openbsd.org/?query=bgpctl&sektion=8">bgpctl(8)</a> show IPv6 peer addresses in neighbour view.
1.1 miod 1316: <!-- ^ 20040416 -->
1.39 sthen 1317: <li>Now that <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> doesn't need to continuously reopen the leases file for writing, have it <a href="http://man.openbsd.org/?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop privileges after starting up.
1318: <li>Only open the <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> leases file once instead of every time it needs to be written.
1319: <li>Set up new <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a>'s <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> listen filter for the right port.
1320: <li>Have <a href="http://man.openbsd.org/?query=mopd&sektion=8">mopd(8)</a> do a <a href="http://man.openbsd.org/?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop its privileges.
1321: <li>Massive <a href="http://man.openbsd.org/?query=style&sektion=9">style(9)</a> application to <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
1322: <li>Stop another instance of <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a> from unlinking a socket that's in use.
1.1 miod 1323: <li>TCP packets are now allowed to have IPv4 options.
1324: <li>Begin work of separating binary emulation type from the executable file format.
1325: <!-- ^ 20040415 -->
1.39 sthen 1326: <li>New user and group _mopd, for some obscure reason related to <a href="http://man.openbsd.org/?query=mopd&sektion=8">mopd(8)</a>.
1.1 miod 1327: <li>Enable all supported USB devices in the i386 GENERIC config.
1.39 sthen 1328: <li>Pass the jobname to <a href="http://man.openbsd.org/?query=lpd&sektion=8">lpd(8)</a>'s input filter via the -j option, some filters need it.
1.1 miod 1329: <li>When the syncache aborts a connection, don't set an ACK in the RST packet.
1330: <li>Add entries for all supported USB devices to the GENERIC config on sparc64.
1.39 sthen 1331: <li>In <a href="http://man.openbsd.org/?query=crypto&sektion=9">crypto(9)</a>, add cases for sha2 algorithms in swcr_authcompute().
1332: <li>Fix <a href="http://man.openbsd.org/?query=systat&sektion=1">systat(1)</a> screen updates after resuming from a ^Z.
1333: <li>Make <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> antispoof rules work with dynamic interfaces.
1334: <li>Match on all characters of the interface name in the <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> parser.<br>
1.1 miod 1335: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1336: <li>Make sure privsep <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> transitions into STATE_RUN even when writing to stdout with '-w -'.
1337: <li>Implement AI_NUMERICSERV (from RFC3493) in <a href="http://man.openbsd.org/?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
1.1 miod 1338: <li>Since the UDP checksum in mandatory in IPv6, drop any input packets where it's absent and make sure it's set even for error output.
1.39 sthen 1339: <li><a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> cleanup:
1.1 miod 1340: <ul>
1.39 sthen 1341: <li>Use <a href="http://man.openbsd.org/?query=getopt&sektion=3">getopt(3)</a>.
1.1 miod 1342: <li>Remove pidfile code.
1.39 sthen 1343: <li>Steal some already-sanitised code from <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>.
1344: <li>Remove code to handle network access methods we don't care about, only <a href="http://man.openbsd.org/?query=bpf&sektion=4">bpf(4)</a> is necessary here.
1.1 miod 1345: </ul>
1346: <!-- ^ 20040414 -->
1.39 sthen 1347: <li>Break out <a href="http://man.openbsd.org/?query=dhcpd&sektion=8">dhcpd(8)</a> into usr.sbin/dhcpd and begin The Process.
1348: <li>Have <a href="http://man.openbsd.org/?query=lpd&sektion=8">lpd(8)</a> treat 'o' format files (PostScript) from MacOS 10.1 the same as 'l', not 'f', since PostScript can contain binary data. From FreeBSD.
1349: <li>Parse and handle RFC 2858 Multiprotocol Extensions in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.
1350: <li>Allow <a href="http://man.openbsd.org/?query=restore&sektion=8">restore(8)</a> to recover files larger than 4GB by using size_t instead of long.
1351: <li>Have <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> retry up to ten times after a second's delay for interfaces showing no link.
1352: <li>More careful IKE payload parsing in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>.
1.1 miod 1353: <li>New _PATH_DEVFD and _PATH_VAREMPTY constants in <paths.h>.
1.39 sthen 1354: <li>Fix a null deref in <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>.
1355: <li>Have new <a href="http://man.openbsd.org/?query=dhcrelay&sektion=8">dhcrelay(8)</a> do a <a href="http://man.openbsd.org/?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop privileges.
1.1 miod 1356: <li>In libpthread, update curthread immediately after a thread switch.<br>
1357: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1358: <li>New _dhcp user and group for, funnily enough, the DHCP programs.
1359: <!-- ^ 20040413 -->
1360: <li>Refactor the installer's network initialisation code into IPv4-specific sections in preparation for IPv6.
1.39 sthen 1361: <li>Start surgery on <a href="http://man.openbsd.org/?query=dhcrelay&sektion=8">dhcrelay(8)</a>:
1.1 miod 1362: <ul>
1363: <li>Move to /usr/src/usr.sbin/dhcrelay.
1364: <li>Kill pidfile code.
1.39 sthen 1365: <li>Use <a href="http://man.openbsd.org/?query=daemon&sektion=3">daemon(3)</a> and <a href="http://man.openbsd.org/?query=getopt&sektion=3">getopt(3)</a> instead of DIY.
1.1 miod 1366: </ul>
1.39 sthen 1367: <li>Huge cleanup of <a href="http://man.openbsd.org/?query=mopd&sektion=8">mopd(8)</a>.
1.1 miod 1368: <li>Drop very old TCP ACK packets.<br>
1369: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1370: <li>Implement a rate limit for TCP ACKs of 100pps, and use this more general mechanism for in-window SYN handling too.
1.39 sthen 1371: <li>Safely handle aborts in <a href="http://man.openbsd.org/?query=malloc&sektion=3">malloc(3)</a> etc. without tripping the recursive call handler by mistake.
1.1 miod 1372: <li><font color="#e00000"><strong>RELIABILITY FIX: Under load "recent model" gdt(4) controllers will lock up.</strong></font><br>
1.4 deraadt 1373: <a href="errata36.html#gdt">A source code patch is available</a>.<br>
1.1 miod 1374: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1375: <!-- ^ 20040412 -->
1.39 sthen 1376: <li>Fix an accidental busy-wait in <a href="http://man.openbsd.org/?query=sensorsd&sektion=8">sensorsd(8)</a>.
1.44 tb 1377: <li>Increase the maximum number of <a href="http://man.openbsd.org/?query=pty&sektion=4">pty(4)</a> devices to 992. See the <a href="faq/upgrade-old.html">Upgrading Mini-FAQ</a> item 3.5.1 for upgrade instructions.
1.39 sthen 1378: <li>Fix a typo in kern/tty_pty.c when generating <a href="http://man.openbsd.org/?query=pty&sektion=4">pty(4)</a> device filenames, soon to be exposed by changes to pty.
1379: <li>Compatiblity fixes to <a href="http://man.openbsd.org/?query=mpt&sektion=4">mpt(4)</a>.
1.1 miod 1380: <!-- ^ 20040411 -->
1.39 sthen 1381: <li>Change <a href="http://man.openbsd.org/?query=snprintf&sektion=3">snprintf(3)</a>'s handling with size==0, in line with a <a href="http://man.openbsd.org/?query=vsnprintf&sektion=3">vsnprintf(3)</a> change (rev. 1.5) from years ago.
1.1 miod 1382: <li>Fix a segmentation fault in Xlib when a .Xauthority file contains IPv6 XDM-AUTHORIZATION-1 data (NetBSD PR xsrc/25098).
1383: <li>Rearrange the GENERIC config file so clonable interfaces are together, and without the now-unnecessary device count.
1384: <!-- ^ 20040410 -->
1.39 sthen 1385: <li>When libpthread is <a href="http://man.openbsd.org/?query=poll&sektion=2">poll(2)</a>ing for read- or writability of an fd on behalf of a thread, check the ERR, HUP and NVAL flags as well as the read or write flags.
1386: <li>Sync <a href="http://man.openbsd.org/?query=uudecode&sektion=1">uudecode(1)</a> with FreeBSD, including base64 support.
1387: <li>Stop a number of network interfaces moaning about a failed <a href="http://man.openbsd.org/?query=mbuf&sektion=9">mbuf(9)</a> allocations, the complaint uses mbufs and just makes things worse.
1388: <li>Pass SIGINT and SIGQUIT through to <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>'s privsep child.
1389: <li>Move the <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> altq, OS fingerprint and table <a href="http://man.openbsd.org/?query=pool&sektion=9">pool(9)</a>s from the default (interrupt context) kmem allocator to the much-larger nointr allocator.
1390: <li>If <a href="http://man.openbsd.org/?query=newsyslog.conf&sektion=5">newsyslog.conf(5)</a> doesn't list a user or group, create new files with the uid or gid from the existing file.
1391: <li>Force <a href="http://man.openbsd.org/?query=cvs&sektion=1">cvs(1)</a> to use the libc <a href="http://man.openbsd.org/?query=getopt&sektion=3">getopt(3)</a> implementation instead of its own.
1392: <li>Have <a href="http://man.openbsd.org/?query=pfctl&sektion=8">pfctl(8)</a> check that the file it's trying to open isn't really a directory.
1.1 miod 1393: <!-- ^ 20040409 -->
1.39 sthen 1394: <li>More <a href="http://man.openbsd.org/?query=gcc&sektion=1">gcc(1)</a> optimiser fixes for mvme88k
1395: <li>Swap the last two parameters to <a href="http://man.openbsd.org/?query=TAILQ_FOREACH_REVERSE&sektion=3">TAILQ_FOREACH_REVERSE(3)</a> in line with FreeBSD and NetBSD.
1396: <li>Use a more efficient <a href="http://man.openbsd.org/?query=realloc&sektion=3">realloc(3)</a> size when displaying long lines in <a href="http://man.openbsd.org/?query=less&sektion=1">less(1)</a>. Speeds things up when, for example, your system crashes in the middle of a build leaving a pile of linefeedless binary crap in the typescript file.
1397: <li>After going to the trouble of saving errno before it gets overwritten, use the saved value in <a href="http://man.openbsd.org/?query=pflogd&sektion=8">pflogd(8)</a>'s error output.
1398: <li>Don't try to close invalid file descriptors in the <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> privsep code.
1399: <li>Have <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> set the timezone before privsep so the child has the right zone settings.
1400: <li>Within <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a>'s new lease file naming scheme, allow for the -l filename override.
1.1 miod 1401: <li>On sparc and sparc64, don't compare a RAMDISK kernel's root filesystem time with the system time, they're unlikely to have much in common.
1402: <!-- ^ 20040408 -->
1.39 sthen 1403: <li>Zero out the key data pointer for unknown <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> key types.
1.1 miod 1404: <li>Merge in Perl 5.8.3 and <!-- 20040408 --> OpenSSL 0.9.7d. No lame new licenses for a change.
1.39 sthen 1405: <li>Now that <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> needs an instance per interface, having a single lease file won't do so use /var/db/dhclient.leases.<ifname>.
1406: <li>Make sure the list dereference when deleting all SAs in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> comes before the delete operation that <a href="http://man.openbsd.org/?query=free&sektion=3">free(3)</a>s the list node.
1407: <li>Fix /etc/<a href="http://man.openbsd.org/?query=rc.local&sektion=8">rc.local(8)</a>'s handling of ntpd_flags.
1408: <li>Unbreak pxeboot(<a href="http://man.openbsd.org/?query=pxeboot&sektion=8&arch=i386">8/i386</a>, <a href="http://man.openbsd.org/?query=pxeboot&sektion=8&arch=amd64">8/amd64</a>) build under gcc3.
1409: <li>Allow <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> to work on more than the first physical interface found.
1410: <li>In several programs, fix <a href="http://man.openbsd.org/?query=getopt&sektion=3">getopt(3)</a> calls containing option letters for which there's no corresponding case handler.
1411: <li>ISO C function declarations for <a href="http://man.openbsd.org/?query=make&sektion=1">make(1)</a>.
1412: <li>Fix a sizeof(pointer) bug in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s IPv6 options parser.
1413: <li>Fix some misplaced braces in <a href="http://man.openbsd.org/?query=route&sektion=8">route(8)</a>, making 'route add' a bit more -q.
1414: <li>Enable /dev/<a href="http://man.openbsd.org/?query=crypto&sektion=4">crypto(4)</a> and <a href="http://man.openbsd.org/?query=hifn&sektion=4">hifn(4)</a> on cats machines.
1.1 miod 1415: <!-- ^ 20040407 -->
1.39 sthen 1416: <li>Make <a href="http://man.openbsd.org/?query=newsyslog&sektion=8">newsyslog(8)</a>'s file renaming and copying operations set the same permissions in all cases.
1417: <li>Fix double call of the <a href="http://man.openbsd.org/?query=ktrace&sektion=2">ktrace(2)</a> signal trap handler. <!-- XXX -->
1418: <li>Add missing prototypes (in <pwd.h>) for <a href="http://man.openbsd.org/?query=bcrypt&sektion=3">bcrypt(3)</a> and <a href="http://man.openbsd.org/?query=md5crypt&sektion=3">md5crypt(3)</a>.
1419: <li>Fix some <a href="http://man.openbsd.org/?query=gcc&sektion=1">gcc(1)</a> optimization bugs on mvme88k.
1420: <li>Fix a sizeof(wrongthing) bug in <a href="http://man.openbsd.org/?query=afsd&sektion=8">afsd(8)</a> that was breaking 64-bit machines.
1421: <li>Have <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> print IKE DELETE payload contents.
1.1 miod 1422: <li>Remove the installer's special-case upgrade of the OpenSSL /usr/include symlinks.
1423: <li>Fix a double-free in libpthread (PR#3730).
1.10 ajacouto 1424: <li>Reenable libm compiler optimization on sparc64, since it works properly with gcc3.
1.1 miod 1425: <!-- ^ 20040406 -->
1.39 sthen 1426: <li><a href="http://man.openbsd.org/?query=sscanf&sektion=3">sscanf(3)</a> -> <a href="http://man.openbsd.org/?query=strtol&sektion=3">strtol(3)</a> in <a href="http://man.openbsd.org/?query=newsyslog&sektion=8">newsyslog(8)</a>.
1427: <li>Don't initialise <a href="http://man.openbsd.org/?query=ncurses&sektion=3">ncurses(3)</a> until after options processing in <a href="http://man.openbsd.org/?query=backgammon&sektion=6">backgammon(6)</a>.
1428: <li>Plug the new-and-improved <a href="http://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> into the standard build.
1429: <li>Fix a sizeof(pointer) bugs in <a href="http://man.openbsd.org/?query=afsd&sektion=8">afsd(8)</a>, <a href="http://man.openbsd.org/?query=sup&sektion=1">sup(1)</a> and <a href="http://man.openbsd.org/?query=visudo&sektion=8">visudo(8)</a>.
1430: <li>Make <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>'s cache of m_tag_get() <!-- NOMAN --> results actually work.
1431: <li>Check for <a href="http://man.openbsd.org/?query=fdopen&sektion=3">fdopen(3)</a> failure in <a href="http://man.openbsd.org/?query=vacation&sektion=1">vacation(1)</a>.
1.1 miod 1432: <li>3.5 -> 3.5-current.
1.39 sthen 1433: <li>Change <a href="http://man.openbsd.org/?query=wskbd&sektion=4">wskbd(4)</a>'s AltGr key handling so shift-altgr-other has the same effect as altgr-shift-other.
1434: <li>Never allow <a href="http://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> states propogated via <a href="http://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a> to overwrite newer states held locally. If an overwrite is attempted, broadcast the newer version to the network to speed resynchronisation.
1435: <li>Under Linux emulation, pass <a href="http://man.openbsd.org/?query=madvise&sektion=2">madvise(2)</a> straight through to the native syscall.
1.1 miod 1436: <!-- ^ 20040405 -->
1437: <li><font color="#e00000"><strong>RELIABILITY FIX: Reply to in-window SYN with a rate-limited ACK.</strong></font><br>
1.4 deraadt 1438: <a href="errata36.html#tcp">A source code patch is available</a>.<br>
1.1 miod 1439: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.39 sthen 1440: <li>Don't try to recreate the <a href="http://man.openbsd.org/?query=xfs&sektion=1">xfs(1)</a> logfile after dropping privileges.
1441: <li>Don't abort <a href="http://man.openbsd.org/?query=xfs&sektion=1">xfs(1)</a> gracelessly when handling an unimplemented protocol request.
1.1 miod 1442: <!-- ^ 20040404 -->
1443: <li>Many manual page fixes.
1444: <li>In a number of programs, don't close files that are known to be not open.
1.39 sthen 1445: <li>Fix a missing initialisation in <a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>'s privsep code.
1446: <li>Make <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a>'s -v logging option do something useful.
1.1 miod 1447: <!-- ^ 20040403 -->
1.39 sthen 1448: <li>Fix line breaks in <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a>'s log output.
1.1 miod 1449: <li>Allow non-GNU ANSI compilers (e.g. TenDRA) to build again by changing 'static inline' to 'static __inline'.
1.39 sthen 1450: <li>Don't close descriptors we know aren't open in <a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>.
1.1 miod 1451: <li>Drop arc4random_8() api from the kernel.
1.39 sthen 1452: <li>Change <a href="http://man.openbsd.org/?query=rfork&sektion=2">rfork(2)</a> so the RFMEM flag gives complete vmspace sharing including the stack, in line with other implementations.
1453: <li>Add --line-buffered option to <a href="http://man.openbsd.org/?query=grep&sektion=1">grep(1)</a> etc.
1.1 miod 1454: <li>Remove some unbounded recursions in the libc regex engine, found with certain expressions containing backreferences.
1.39 sthen 1455: <li>Fix <a href="http://man.openbsd.org/?query=ls&sektion=1">ls(1)</a>' column alignment when using the -h option.
1456: <li>New <a href="http://man.openbsd.org/?query=axe&sektion=4">axe(4)</a> USB Ethernet driver.
1.1 miod 1457: <!-- ^ 20040402 -->
1.39 sthen 1458: <li>Fix an off-by-one in <a href="http://man.openbsd.org/?query=procmap&sektion=1">procmap(1)</a>.
1.1 miod 1459: <li>Better bounds checking in the ramdisk's strategy() routine.
1.39 sthen 1460: <li>Limit the trust between local and remote instances of the <a href="http://man.openbsd.org/?query=rcp&sektion=1">rcp(1)</a> and <a href="http://man.openbsd.org/?query=scp&sektion=1">scp(1)</a> programs.
1461: <li>Change <a href="http://man.openbsd.org/?query=netstat&sektion=1">netstat(1)</a>'s -p option so that, when used without -s, it shows a list of sockets for the given protocol.
1462: <li>Let <a href="http://man.openbsd.org/?query=rcmdsh&sektion=3">rcmdsh(3)</a> work on hosts without an IPv4 address.
1463: <li>Initialise the <a href="http://man.openbsd.org/?query=kqueue&sektion=2">kqueue(2)</a> subsystem in kernel main() instead of on first use.
1.1 miod 1464: <!-- ^ 20040401 -->
1.39 sthen 1465: <li>Add IPv6 support to <a href="http://man.openbsd.org/?query=openssl&sektion=1">openssl(1)</a>'s s_client command, complete with the usual '-4' and '-6' switches.
1466: <li>Reorder checks in <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> so that the IP options check isn't skipped just because UseDNS=no.
1.1 miod 1467: <li>Make /usr/src/Makefile's cross-tools target work again.
1.39 sthen 1468: <li>Have <a href="http://man.openbsd.org/?query=inetd&sektion=8">inetd(8)</a> properly use the exec'd program's basename as argv[0] if no arguments are specified.
1469: <li>Fix includes search order in GNU <a href="http://man.openbsd.org/?query=ld&sektion=1">ld(1)</a> to help cross-ld builds.
1470: <li>Don't byte-swap a variable we'll need later in its original order in GNU <a href="http://man.openbsd.org/?query=ld&sektion=1">ld(1)</a>.
1.1 miod 1471: <li>On an msdos filesystem with long filenames support enabled, fix some false-positive name matches when an integer multiple of 13 characters match. From NetBSD.
1.39 sthen 1472: <li>Some portability fixups in <a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>.
1473: <li>tcpmd5 changes for <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>:
1.1 miod 1474: <ul>
1475: <li>Allow either the source or destination to be a wildcard in SA lookups (netinet/ip_ipsp.c:gettdbbysrcdst()).
1476: <li>Add support for the wildcard to pfkeyv2.
1.39 sthen 1477: <li>Use the new pfkeyv2 wildcard support in <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> and remove the local address requirement for md5sig.
1.1 miod 1478: </ul>
1479: <!-- ^ 20040331 -->
1480: <li>Unbreak libc's regex engine compilation with -DREDEBUG.
1.39 sthen 1481: <li>Change /etc/<a href="http://man.openbsd.org/?query=rc&sektion=8">rc(8)</a> so that a <a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a> banner (configured via $spamd_flags) may contain spaces (PR#3720).
1482: <li>Teach <a href="http://man.openbsd.org/?query=pax&sektion=1">pax(1)</a> how to expand GNU tar long links. From NetBSD.
1483: <li>Change <a href="http://man.openbsd.org/?query=systrace&sektion=1">systrace(1)</a>'s handling of filename-too-long errors so it just fails the syscall instead of stopping the process. Fixes PR#3140.
1484: <li>Some ELF name translation fixes in <a href="http://man.openbsd.org/?query=nm&sektion=1">nm(1)</a>.
1.1 miod 1485: <li>Add /etc/rc.conf.local to /etc/mtree/special.
1486: <li>Lots more activity on the SMP branch.
1.39 sthen 1487: <li>Wrap <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">pkg_add(1)</a> installation operations in <a href="http://man.openbsd.org/?query=perl&sektion=1">perl(1)</a> eval{} blocks so it's possible to at least register what did work.
1.1 miod 1488: <li>Unknown entry types in a packing list now result in an error.
1489: <!-- ^ 20040330 -->
1490: </ul>
1491: <p>
1492:
1493: </body>
1494: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus36.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www