***************
*** 25,31 ****
in the pages for the specific platforms.
! Note: Problems for which patches exist are marked in red.
For changes in other releases, click below:
--- 38,44 ----
in the pages for the specific platforms.
! Note: Problems for which patches exist are marked in red.
For changes in other releases, click below:
***************
*** 80,1055 ****
!
Changes made between OpenBSD 4.8 and 4.9
!
Introduced a dummy function in ifconfig(8) if SMALL is defined to digest arguments like "rdomain", "description", etc. so that the ifconfig(8) on RAMDISK is able to parse hostname.if(5) files on updates.
Make Xorg properly restore xf86-video-r128 video mode upon exit on macppc.
Prevent a possible 5 seconds delay in socket splicing.
Fixed a buffer overflow in the pppoe receive packet handling.
!
If relayd(8) "check script" doesn't exit(), treat the service as "down" rather than "unknown". Fixes a problem where the script is killed due to expiry of the interval timer.
!
Force the disklabel(8) UID cache used to generate hw.disknames to be updated after every disklabel read or write. Prevent the DUID cache from de-syncing.
!
Make mpii(4) look up the device attached to a raid volume by its address on the bus, not which bioctl volume id it is.
!
Removed daemon_shell and force the use of /bin/sh for the su(1) call in rc.d(8).
Prevent PIPEX from using address and control field on PPPoE, they must not be used as the protocol.
In IPv6, prevent the nd6_addr_add() work queue task from adding multiple addresses for the same prefix.
!
Fixed pf(4) source address rewriting for the icmp errors with rdr-to setup (PR6564).
Fixed PR6557 with RT2560 and RT2661.
Mark descriptors as invalid before unmapping the associated mbuf. Might prevent the unrecoverable DMA error mentioned in PR 6557.
!
Disabled PCIe Active State Power Management (ASPM) to avoid bge(4) randomly detaching from the bus on some machines.
!
Prevent fdisk(8) from parsing blocks it did not successfully read.
!
Implemented the DIOCGCACHE and DIOCSCACHE ioctls in mpii(4) for raid volumes. Allows sd(4) to enable the write cache on such a volume on attach, like it is done in mpi(4).
!
Make radeonfb(4/SPARC64) re-initialize acceleration engine after leaving X.
!
Make pgs(4/MACPPC) only attach if the "device_type" properly is "programmer-button".
!
Improved disklabel(8) cleaning of badly formed partition.
Disable Xorg on alpha because Xrender is broken.
!
Added workaround for BCM5906 A0/1/2 controller silicon bug in bge(4).
!
Reduced i386 RAMDISK size by not compiling statistics counters code in em(4) if SMALL_KERNEL is defined.
!
RELIABILITY FIX: the sis(4) driver may hand over stale ring descriptors to the hardware if the compiler decides to re-order stores or if the hardware does store-reordering.
! A source code patch is available.
! [Applied to stable]
!
Make routing socket free mbuf in failure case. Fixes PR6562.
!
SECURITY FIX: PF rules specifying address ranges (e.g. "10.1.1.1 - 10.1.1.5") were not correctly handled on little-endian systems (alpha, amd64, arm, i386, mips64el, vax). Other address types (bare addresses "10.1.1.1" and prefixes "10.1.1.1/30") are not affected. A source code patch is available.
! [Applied to stable]
!
Fixed a bug with the pointer location in cwm(1).
!
Avoid dereferencing a NULL pointer during VT switches when composite is active in xf86-video-intel. Fixes a crash.
!
Fixes the heavy rendering errors and crashes that could make inteldrm(4) unusable on a 865G since 4.8. Fixes PR6517.
!
Make crontab -l not crash on crontab(5) files that don't have the expected three lines of comments.
!
SECURITY FIX: An incorrectly formatted ClientHello handshake message could cause OpenSSL to parse past the end of the message. An attacker could use this flaw to trigger an invalid memory access, causing a crash of an application linked to OpenSSL. As well, certain applications may expose the contents of parsed OCSP extensions, specifically the OCSP nonce extension.
! Applications are only affected if they act as a server and call SSL_CTX_set_tlsext_status_cb on the server's SSL_CTX. It is believed that nothing in the base OS uses this. Apache httpd started using this in v2.3.3; this is newer than the version in ports. A source code patch is available.
! [Applied to stable]
!
Put a limit on fnmatch(3) recursion during matching, and reject input of size greater or equal PATH_MAX.
!
Make sgi platforms correctly pick the MP kernel on install if applicable.
!
In nm(1), fixed omission of symbol list for first object file in an archive with nm -s. Fixed PR6385.
!
Fixed NULL dereference with sudo -g group when the sudoers(5) rule has no runas, user or group listed.
!
Prevent a useless check already done in pf(4) pf_test_rule(): pf_test() and pf_test6() already drop IPv4-ICMP6 and IPv6-ICMP packets.
!
Multiple improvements in otus(4), rsu(4), run(4), urtwn(4): use usb_ref_{incr,decr,wait}() to avoid detaching the driver while a process is still using the hardware; don't add timeout(9)s if the device is detached; added checks to see if the device has been detached before running ioctls, timeouts, and tasks; use usb_wait_task() to wait for tasks to complete.
!
Make pf(4) reinitialize header length of unusual protocol number getting rewritten. Prevent a panic in m_clget().
!
Multiple improvements in usb(4): merged 'onqueue' and 'running' members of struct usb_task into a new member, 'state'; added new function usb_wait_task() which waits for queued or running usb_tasks to complete; in the USB_DEVICEINFO ioctl, fill struct usb_device_info in a usb_task, thereby avoiding races against driver attach/detach.
OpenSSH 5.8 released.
!
Fixed uninitialized nonce variable in ssh(1) key_certify().
Clear struct scsi_inquiry_data in atascsi_pmp_inq() from SCSI to ATA translation layer.
!
Prevent tmux(1) from requiring -d with -x or -y since it could be in the config file.
!
Make isakmpd(8) ignore any IP address not in the current routing domain when binding to addresses.
Merged in Xenocara fix for EXA bug #32803.
In the kernel semaphore handling, for SETVAL and SETALL operations make sure the specified value(s) are within the system limits. Fixes PR6547.
!
Merged in Xenocara fix for EXA bug #24703. Prevent crash.
!
Make tmux(1) redraw pane borders when switching to last pane.
!
Make crontab -e honour TMPDIR.
!
In the OpenBSD upgrade process, don't run fsck(8) for fstab(5) entries with zero or empty fs_passno and make it ask for permission to continue upgrade if one or more mounts failed.
!
Prevent mandoc -Thtml from printing out the <BR> before lines that have leading white space.
!
Make mandoc(1) .Bx accept no more than two arguments.
!
Make mandoc(1) quote .%T if .%B is specified, as in groff.
!
Make wscons(4) report the compose key on sun keyboards in raw mode as a different keycode from right alt.
!
Disambiguated return values of m_tag_copy_chain() in mbuf_tags(9).
!
Fixed tmux(1) problems with fatal() if the terminal disappear while locked.
!
Fixed an mbuf leak in mpe(4) by replacing m_free() with m_freem() in mpe_input().
!
Fixed a memory leak by replacing m_free() with m_freem() in trunk(4) broadcast mode.
!
In generic Ethernet functions, changed an m_free() to m_freem() to free the whole mbuf chain and to prevent a possible memory leak with bpf(4) BIOCSFILDROP option which is currently used by dhcpd(8) and dhclient(8).
!
Prevent midi(4) from sleeping with the PCATCH flag while closing itself, otherwise a signal may cause the output buffer to not be drained and cause stale notes.
!
Gave pf(4) pf_normalize_ip() the same 3 way semantics as pf_test(): PF_DROP, the packet is bad, the mbuf still exists and must be freed; PF_PASS and *m0 is NULL, the packet has been processed, not an error; PF_PASS and *m0 is not NULL, continue with packet processing. Fixes a potential mbuf use after free.
!
When ospfd(8) is fixing conflicts make sure the right vertex is passed to lsa_merge() so that the correct sequence number is used for the LSA.
!
Fixed a kernel crash due to ifmedia(4) broadcast address changes.
!
Merged a change from ncurses(3) upstream to correctly recalculate a form field size on set.
!
Sync tbl(7) handling with upstream version 1.10.9: .T} can be followed by a delimiter, then more data; do not limit table column widths (improves terminfo(5)); let numerical cells respect explicitly specified minimum cell widths; let terminal output survive missing data cells; parse and ignore arguments in parentheses on layout cell specifications; move tbl_calc() into out.c such that it can be used by all frontends; give tables an HTML class; some cleanup in tbl -Thtml code.
!
Make sure coding errors cannot make mandoc(1) miss fatal parsing errors by assert(3)ing valid parser state in the main parsing functions.
!
Make i386 and amd64 only use memory mapped extended PCIe config space access for the bus advertised in the MCFG table, and fall back on the traditional method for other busses.
!
Minor improvements to random(4): only support pool words equal to 2048, define the amount of used key, define the amount of skipped rc4, use arc4random_buf instead of reimplementing in line, bzero some more "secrets".
Added socket option SO_SPLICE to splice together two TCP sockets. Allows to write relay daemons with zero data copy.
Updated Test::Simple(3p) to version 0.96.
!
Substantially rewrite random(4): put a very thin mutex at the entropy-collection side, place a 2nd very thin mutex at the call-down path as well, move the pool->MD5->RC4init sequence into a workq driven from a timeout.
!
Added a yield() in random(4) randomwrite() to prevent problems when root accidentally cat /dev/random.
Increased i386 MAXDSIZ to 2GB.
!
Permit to get all luns on a target probed in iscsid(8) with a single ioctl(2).
!
Make vdsp(4/sparc64) detect whether a disk image is an ISO image and set the media type to VD_MEDIA_TYPE_CD to vDisk 1.1 clients. Makes installing from a Solaris 11 Express bootable install CD work.
!
Added support for the vDisk1.1 protocol in vdsp(4/sparc64). Improved Solaris vtoc/disklabel support and implement VD_OP_SET_VTOC. Makes Solaris actually run on top of an OpenBSD control domain.
!
Reset ssh(1) SIGCHLD handler to SIG_DFL when executing LocalCommand.
!
For very large operations in random(4) randomread(), use a local rc4 instance much like arc4random_buf_large does, but without re-initializing it every 8K.
!
RELIABILITY FIX: sp_protocol in RTM_DELETE messages could contain garbage values leading to routing socket users that restrict the AF (such as ospfd) not seeing any of the RTM_DELETE messages. A source code patch is available.
! [Applied to stable]
!
Put htons(3) around ip_randomid() for pf(4) scrub random-id to make it consistent with the network stack.
!
Added support for Memory Mapped Configuration space access. Gives access to PCIe extended configuration space access on modern i386 and amd64 machines.
Use pmap_uncache_page() to alter cacheability of pages in bus_dmamem_map(). Makes the zaurus text mode console memory cached again after exiting from X.
!
Introduced pmap_uncache_page() in arm pmap(9) to make a page uncached and maintain this both at the pte and pv list level.
!
Prevent vcons(4/sparc64) from assuming it is always the console since it's possible to run CoolThreads servers with a graphics console.
Updated xproto to version 7.0.20.
!
Make random(4) arc4_stir() only grab 64 bytes from the MD5 output.
!
Make rc.subr(8) check for a login class that matches the rc script name and use it if it is found, otherwise use daemon.
!
In bpf(4) bpf_movein(), range-check mbuf size against MCLBYTES before size_t to int truncation.
!
Implemented NOP-IN -> NOP-OUT handling in iscsid(8).
!
Make iscsid(8) cleanup tasks with a NULL callback after queuing the PDU to be sent out. Allows immediate responses to be issued with a task instead of very special code.
!
Make iscsid(8) truncate the scsi sense data to 18 bytes if more data was supplied. Improves connection.
!
Fixes parsing of login responses with additional padding in iscsid(8).
!
Make iscsid(8) log the PDU which failed because no task was found.
!
Fixes multiple man(7) .IP and .TP bugs for -Tascii and -Thtml.
!
Cleaned up and simplified tmux(1) command argument parsing.
!
Cleaned up argument count validation in mdoc(7): prevent segfault on empty .Db, .Rs, .Sm, and .St; let check_count() really throw the requested level, not always ERROR and downgrade most bad argument counts from ERROR to WARNING.
!
Added support for UTF-8 mouse input (\033[1005h) in tmux(1).
!
Make unprovided mandoc(1) macro arguments defaults to empty string and not NULL.
Removed the old COMPAT_23 SysV IPC structures from the kernel.
!
Fixed bugs in mandoc(1) macro argument parser with blank, backslashes and quotes escaping.
!
Make mandoc(1) use one common macro argument parser for roff and man macros.
!
Added to pkg_info(1) a -r <pkgspec> option to to check for a pkgspec by name, without looking at installed packages.
Make ac97(4) use host_flags directly as they're initialized during attach time.
!
Allow to change vlan options of existing vlan(4)/svlan(4) devices at runtime instead of forcing the user to-recreate the interface with the changed options.
!
Make ac97(4) check the optional flags method is not NULL before using it.
Adjusted krb5 directories in OpenSSL pkg-config generator.
Reworked m88k systems backtrace code.
!
Reduced use of cd in the install script by using sub-shells or absolute paths when possible.
!
Improved vdsp(4/sparc64) with OpenSolaris virtual disk client.
Make hppa need_resched() call cpu_unidle() such that a process running on another CPU is woken up.
!
Make pkg_create(1) create formatted man pages as temporary files.
In mandoc(1) libmdoc, replace the union of pointers to structs of macro-specific data by a pointer to a union of structs, which makes the code simpler and more robust at the expense of a small memory overhead.
!
Corrected x86_atomic_*_ul() to operate on 64bit integers, removed x86_atomic_*_l(), and updated the callers of all of those to use the underlying x86_atomic_*_u32() functions they were expecting.
Removed unused and broken x86_multicast_ipi() from i386 and amd64.
Prevent issuing a m88k cache maintenance operation until the last one is completed.
!
Make rc.subr call rc_conf itself right after reading in rc.conf(8).
Properly initialize i386 MXCSR and XMM registers when writing only in the x87 FPU state and the process has not used the FPU yet.
!
Added cfattach activate functions and call usbd_deactivate() in the DVACT_DEACTIVATE case for cdcef(4), otus(4), rsu(4), urtwn(4), uberry(4), udfu(4), udl(4), uow(4), uyap(4). Make those which don't have dying flag call usbd_deactivate() in the DVACT_DEACTIVATE case.
!
Added some groff behaviour to mandoc(1): Specifying both .%T and .%J in an .Rs block causes the title to be quoted instead of underlined, such that journal title and article title appear visually different.
!
Removed pmap_phys_address(), and force every driver's mmap() routine to return a physical address in all platforms. Allows machine-independent drivers to implement mmap(2) routines without having to know about the pmap_phys_address() implementation.
!
Polished mandoc(1) HTML output: use <SMALL> for .SM and <CODE> for .Dl, <B> for bold and <I> for italic.
Added a param to uvm_map_hint to not skip over the heap, and use it as a last resort if mmap otherwise fails to enable more complete address space utilization.
Prevent linker failure with sparc crtbeginS.o.
!
Prevent pms(4) from crashing when doing an ioctl(2) (eg wsconsctl -a) before first activation (wsmoused or X).
!
Prevent rc.subr from overwriting local_rcconf by flags from the rc(8) script.
!
Prevent g++(1) from warning about undefined __throw_exception_again().
!
Make pkg_add(1) handle failures from ports tree with more care.
!
Have sd(4) devices check for and respect read-only information the way st(4) does. Have both decline to open read-only devices for anything but read-only access.
!
Fixed a tmux(1) crash due to side effects of server_kill_window with RB_FOREACH.
Prevent m88k systems from sharing their exception page with the one used by the firmware at address 0. Make it possible to catch NULL pointer dereference.
!
Add a common interface for various devices in pms(4).
Make m88k systems check for pcb_onfault being set for genuine kernel data faults.
Make the pte created by pmap_map() wired, and count them in pmap_kernel() statistics on m88k systems.
!
Make tmux(1) use pointer rather than index for the client's last session.
!
Unified the way tmux(1) sessions are used by callbacks.
!
Added a -xxx option to pcidump(8) to print PCIe extended configuration space.
!
Prevent tmux(1) from destroying the index counter when a session comes up.
!
Make ucycom(4), utrh(4) and utwitch(4) the last drivers using their own macros instead of usb_lookup().
!
Fixed an alignment trap triggered by vnconfig(8) on sparc for kernels compiled with gcc4 in the kernel generic ioctl(2).
!
Added other-pane-height and other-pane-width options to tmux(1). Allows the width or height of the smaller panes in the main-horizontal and main-vertical layouts to be set.
Updated freetype to version 2.4.4.
!
Make mandoc(1) handle .Bk with HTML output format the same way it is for ASCII.
!
Make mandoc(1) handle .Bk the same way as groff 1.20.1: .Bk without arguments defaults to -words, .Bk with invalid arguments (including -lines) has no effect.
!
Fixed regression in smtpd(8): if MX look up fails, fallback to using the host itself.
!
Improved mandoc(1) HTML output: use less <DIV> and more <H1>, <H2>, <P>, <BR>, <PRE>, <UL>, <OL>, <DL> etc.
!
Removed `i' and `r' macro handlers in mandoc(1).
!
SECURITY FIX: Insufficient initialization of the pf rule structure in the ioctl handler may allow userland to modify kernel memory. By default root privileges are needed to add or modify pf rules. A source code patch is available.
! [Applied to stable]
!
Make tmux(1) read ${X} environment variables in strings and $HOME from the global environment rather than getenv, this allows them to be updated during the configuration file parsing.
!
Prevent smtpd(8) resolver from reading past the end of a buffer.
!
Make sure GCC configuration file for sparc OpenBSD is consistent with <sys/types.h>.
!
Fixed segmentation faults with GCC4 by allocating a full C compiler-style stack frame that includes space for 6 extended word arguments slots required by the sparc ABI in sparc ld.so(1).
!
Make usb(4) call config_deactivate() before config_detach() when detaching devices.
!
Make usb(4) use usbd_is_dying() instead of directly checking the device's bus dying flag.
!
Make usb(4) check that the root hub has been configured before trying to free it's resources.
!
Added dying flag to usb(4) struct usbd_device. Added usbd_deactivate() to set it. Added usbd_is_dying() to check if the flag has been set and use it before issuing transfers or requests.
Improved xf86-video-glint for sparc64. Make mplayer play video without weird colors.
Upgraded xorg-xserver to version 1.9.2, xf86-video-savage to 2.3.2.
!
Make pci(4) check the register offset against the device's configuration space size in PCIOCREAD and PCIOCWRITE ioctls.
Introduced a new pci routine, pci_conf_size(), in all platforms machine-dependent code. It returns the size of a given pcitag_t configuration address space.
Added a simple bus_space_barrier implementation in octeon.
!
Added a -a flag to tmux(1) unbind-key to flush all key bindings.
!
Make tcasic(4/alpha) and esp(4/mac68k) compute synchronous transfer periods (involving the bus clock) with a better accuracy.
In Xenocara, updated libXdmcp to version 1.1.0, libXext to 1.4.0, libXft to 2.2.0, xtrans to 1.2.6, libXi 1.4.0, bh-ttf to 1.0.3, mkfontdir 1.0.6, xdriinfo 1.0.4, xgamma to 1.0.4, xinput to 1.5.3, xkill to 1.0.3, xrdb to 1.0.7, xrefresh 1.0.7, xset 1.2.1, xwd 1.0.4, xwud 1.0.3.
!
Prevent acpibat(4) from recursing infinitely on the notify function.
!
Updated athn(4) AR9380: added the different ROM templates for the different chips, fixed AR_PHY_65NM_CH0_TOP_XPABIASLVL definition, applied attenuation settings from the ROM.
Pass aesni_ctr_enc an initial counter block instead of an initialization vector in amd64 aesni.
!
Enable low latency interrupt modulation on ix(4) and set the LL interval to the maximum value to reduce the number of low latency interrupts hitting the card when the ring is getting full.
!
Fixed an issue in bgpd(8) where the RDE would start up as route-collector because uninitialized memory made the RDE switch to that mode.
!
Make ldapd(8) -dvv flags produce debug traces of decoded BER messages on stderr. Also shows a hexdump of the input buffer if BER decoding fails.
!
Make ldapd(8) prefix debug logging on stderr with time and pid, like syslog.
!
Use only libcrypto APIs that are retained with OPENSSL_NO_DEPRECATED in ssh(1).
!
Set rdomain maximum route-id to RT_TABLEID_MAX in ifconfig(8), as it is for the kernel.
!
Added urtwn(4), a driver for Realtek RTL8188CU/RTL8192CU 802.11n USB devices.
Added experimental support for full dynamic range of 24-bit hardware use for i386, amd64 and sparc64 only. It is disabled by default since most hardware and audio programs use 16-bit precision.
!
Fixed a possible use of uninitialized variable in mrouted(8) IGMP.
!
Make systat(1) print relative number of mbuf(9) livelock that happened between two systat updates instead of showing absolute figures.
!
Make ldapd(8) return earlier when the base DN in a search request doesn't exist.
!
Make ldapd(8) truncate additional incomplete requests when the input buffer already received two complete requests. Fixes the number of bytes consumed from the input buffer.
!
Make bridge(4) filter out reserved destination MAC addresses (01:80:C2:00:00:0x) as per the 802.1D-2004 spec.
!
Make ldapd(8) recognize all matching rules from RFC4517 except the optional wordMatch and keywordMatch.
!
Use caseExactMatch instead of caseExactIA5Match in ldapd(8) core.schema.
!
Make ldapd(8) evaluate filters according to the three-valued logic of X.511, as required by RFC4511.
!
Make vmt(4) attach only if mainbus(4) is specifically asking for it after vmt_probe succeeds. Prevents mainbus(4) from hanging.
!
Make trm(4) reduce useless retry of commands getting sense errors.
!
Make make -q exit with 1 and not -1. Fixes PR6494.
!
Make <sys/ressource.h> usable on its own by including <sys/time.h> as required by POSIX.
!
Make the network livelock counter available from sysctl(8) and systat(1).
!
Make sysctl(3) export the network livelock counter.
Replaced a boot(RB_HALT) to a panic in amd64 machine-dependent trap.c to make it in line with the other architectures.
In Xenocara updated xf86dga to version 1.0.3, xinit to 1.3.0,
!
Added support for hex keys in the ifconfig(8) wpakey code (full length only).
Fixed OpenCVS init command.
In Xenocara, updated bigreqsproto to version 1.1.1, compositeproto to 0.4.2, damageproto to 1.2.1, fixesproto to 4.1.2, fontsproto to 2.1.1, randrproto to 1.3.2, recordproto to 1.14.1, scrnsaverproto to 1.2.1, xcmiscproto to 1.2.1, libFS to 1.0.3, libXres to 1.0.5, libXScrnSaver to 1.2.1, libXaw to 1.0.8, libXcomposite to 0.4.3, libXcursor to 1.1.11, libXfont 1.4.3, libXinerama to 1.1.1, libXmu to 1.1.0, libXpm to 3.5.9, libXrandr to 1.3.1, libXt to 1.0.9, libXtst to 1.2.0, libXv to 1.0.6, libXxf86dga to 1.1.2, libXxf86vm to 1.1.1, libdmx to 1.1.1, libfontenc to 1.1.0, libxkbfile to 1.0.7, imake to 1.0.4, makedepend to 1.0.3, xorg-macros to 1.11.0, bdftopcf to 1.0.3, beforelight to 1.0.4, bitmap to 1.0.5, editres to 1.0.5, fslsfonts to 1.0.3, fstobdf to 1.0.4, iceauth to 1.0.4, ico to 1.0.3, mkfontscale to 1.0.8, rgb to 1.0.4, showfont to 1.0.3, smproxy to 1.0.4, twm to 1.0.5, viewres to 1.0.3, xconsole to 1.0.4, appres to 1.0.3, xdpyinfo to 1.2.0, xedit to 1.2.0, xev to 1.1.0, xfd to 1.1.0, xfs to 1.1.1, xfsinfo to 1.0.3, xgc to 1.0.3, xhost to 1.0.4, xkbevd to 1.1.1, xkbutils to 1.0.3, xlogo to 1.0.3, xmag to 1.0.4, xman to 1.1.1, xmodmap to 1.0.5, xprop to 1.2.0, xrandr to 1.3.4, xsertroot to 1.1.0, xsm to 1.0.2, font-util to 1.2.0, encodings to 1.0.4 and all fonts packages to latest X.Org versions.
!
Make the return of rfork(2) consistent with gethrid(). Fixes an rthread breakage.
!
Make netstat(1) print socket structure internals when netstat -P pcbaddr is called with -v.
Make the installer create a matching group for the user upon user creation.
!
Fixed high frequencies being removed on envy(4).
!
Fixed a 10 year old bug in the ld.so(1) memory allocator, which affected only sparc.
!
Removed "secrets" map from smtpd(8) and allow creation of user defined maps holding credentials.
!
Make stat(1) include the octet of the mode that contains the setuid/setgid/sticky bits in the output format used for the -x option.
!
Set bpf(4) alignment to 32 bits instead of sizeof(long).
Added preliminary support for PCI and SATA to octeon.
!
Allow some rules to have longer expiry delay than the default in smtpd(8).
!
Fixed a 'bstp still active' panic that happens if a stp enabled interface is destroyed while in the bridge(4).
!
Prevent route(4) from sending route messages to userland processes if those messages are rejected by the kernel because of bad encoding.
Make sure the mbuf data is properly aligned when function is reinjecting packets from low level output functions into high level output functions in Ethernet-inside-IP processing.
!
Added m_print() a function to print mbuf(9) headers. Can be called from ddb(4) with an mbuf pointer as argument to see the contents of it.
Removed libdes, src/ports users have been switched to libcrypto.
Replaced getdirentries by a new one, renaming the first to ogetdirentries().
Fixed memory leak in OpenCVS.
!
Fixed a possible NULL deref on loading a corrupt ECDH key in ssh(1).
!
Prevent mandoc(1) font alternating blocks like .RB from breaking the line between children in literate mode.
Make alpha trap report proper pc address in siginfo.
Fixed a few logic errors in misp64 comparison instruction emulation: make sure the less than relation is correctly computed, and check for both operands being signaled NaNs, instead of only the first NaN found, to decide whether to raise an invalid exception or not.
!
Fixed an off-by-one in a mandoc(1) assertion, crashing the renderer on ".Os \&".
Prevent various usb network devices from freeing network related resources if they were not allocated.
!
Added preliminary support for rc scripts in pkg_add(1).
!
Prevent mandoc(1) from throwing errors when .HP .IP .RS .TP have no arguments, as they are optional.
Merged -k and expand @@ parsing code between OpenCVS and OpenRCS, resulting in a performance gain in OpenCVS in some "cvs update" scenarios.
!
Downgraded nearly 20 mandoc(1) ERRORS to WARNINGS.
Added support for so (low-level roff "switch source file"), needed for Xenocara and various ports.
!
Added a simple 'rc' system to base (/etc/rc.subr) in order to start/stop/restart/reload services installed by the ports system.
Moved the MSIZE, MCLSHIFT, MCLBYTES and the MCLOFSET mbuf constants from hppa machine-dependent param.h to machine-independent param.h.
!
Added optional "match" keyword in relayd.conf(5) to allow simpler rdr-to filter rules.
!
Implemented the optional label request message ID TLV in ldpd(8).
!
As required by the RFC, make sure that a wildcard FEC is the one and only FEC of that message for label release and withdraw messages in ldpd(8).
!
Make ldpd(8) lde_check_request(), lde_check_mapping(), lde_send_labelmapping(), lde_send_labelrequest() and lde_nbr_do_mappings() follow the algorithms defined in appendix A of RFC 5036.
!
Allow the ldapd(8) userPassword attribute to specify a login class when using simple binds with BSD Authentication, using '#' as the delimiter.
!
Enabled vmt(4) in amd64 and i386 GENERIC kernels.
!
Big update to vmt(4), vmware tools functionality: initiate shutdown by signalling init with SIGUSR2 when requested by the host; initiate a reboot by signalling init with SIGINT when requested by the host; report the guests hostname, first non-loopback IP address and uptime to the host; update the guests timedelta sensor using the 64bit rpc.
Prevent mandoc(1) from throwing FATAL when there is no need to (nested displays: .Bd containing .Bd, .D1, .D1 or a forgotten block end macro or an unstarted ending block or a failed uname(3)).
Make OpenBSD::PackingElement(3p) redirection more efficient.
Improved OpenBSD::State(3p).
!
Let .Bsx print just "BSD/OS" in mandoc(1) like in modern groff.
Make TCP follow SUSv4 namespace rules in includes by hiding everything but the TCP_* options unless __BSD_VISIBLE is defined. Fixes PR 6192.
!
Make sftp(1) escape '[' in filename tab-completion.
Updated xterm to version 264, freetype to 2.4.3.
Prevent a file descriptor leak in libedit.
!
Make OpenCVS use CVSROOT for cvs import and ignore CVS/Root files. Fixes PR6497.
!
Make usb(4) check that a timeout(9) has been initialized before deleting it.
!
With mandoc(1) .Sm no longer produces a line break when used in .Bd and also avoid an extra space after the opening bracket in .Op in -Thtml
!
Fixed boot hangs that are showing up because the kernel use usb tasks to attach/detach usb(4) devices.
!
Make dhclient(8) verify that the interface is registered before using it.
!
Fixed the bugs that prevented the RT30XX ral(4) devices from working.
!
Prevent tmux(1) from changing the active pane when removing a pane unless the active pane is actually the one being removed.
!
Fixed a crash when mixing fold(1) legacy width option (e.g. fold -70) with getopt()-style options, such as "fold -b70". Mixing the legacy width with another option is no longer permitted.
!
In uvideo(4): added a structure that represents USB descriptor with variable sized member as in uaudio(4) and reenabled control support for devices where bControlSize is different from 2 in the processing unit descriptor.
!
Replaced old acpi(4) suspend/resume gpewalk function by separate functions for enabling wake and runtime GPEs.
!
Allow ikectl(8) to specify the export password on the command line.
!
Prevent ldpd(8) from adding MPL routes with a incoming MPLS_LABEL_IMPLNULL label.
Handle IMPLNULL labels directly in the kernel.
!
In ikectl(8): added a -q (quiet) command line option that will be used by ike CA to set openssl batch mode, allow to specify the initial CA password on the command line, allow to create certificate for clientAuth or serverAuth only.
!
Set saner permissions on ikectl(8) CA directory export, so there is no need to change perms of /etc/iked when extracting.
!
Make ikectl(8) create an empty but valid CRL list when a new CA is created.
!
Added OpenSSL fixes: updated local engines for the EVP API change, use hw_cryptodev.c instead of eng_cryptodev.c, make x86_64-xlate.pl always write to the output file and not stdout.
!
Added support for midi(4) to envy(4) in i386 and amd64.
!
Make os fingerprinting work on little endian systems. Updating pf.os(5) is mandatory if using os fingerprinting options, otherwise, the system will be blocked.
!
Updated pf.os(5) to match against OpenBSD -current systems. The automatic send and recv buffer scaling changed the OS fingerprint.
!
Make macppc install scripts try update the boot blocks.
Updated OpenSSL to 1.0.0a.
!
Added nsd(8) startup logic to the rc(8) scripts.
!
Implemented a combus to support the com(4) devices on Octeon without modifying dev/ic/com.
!
Added -R option to pfctl(8) to show only a specified rule by numeric ID in combination with "-s rules" or "-s labels".
!
Make sure iked(8) gets transforms in the proposal before trying to parse it.
!
Prevent bad free() in ssh(1) when overriding AuthorizedKeys in a Match block.
!
In iked(8), fix padding issues and warnings from openssl.
!
Added ehci(4) DMA sync operations, fixes issues with macppc.
Added support in OpenCVS for update -C.
Make sure the TCP will not recalculate the rscale factor after the initial SYN is sent.
Make sure OpenRCS and OpenCVS parse all deltas before expecting "desc" keyword.
--- 93,1068 ----
!
Changes made between OpenBSD 4.8 and 4.9
!
Introduced a dummy function in ifconfig(8) if SMALL is defined to digest arguments like "rdomain", "description", etc. so that the ifconfig(8) on RAMDISK is able to parse hostname.if(5) files on updates.
Make Xorg properly restore xf86-video-r128 video mode upon exit on macppc.
Prevent a possible 5 seconds delay in socket splicing.
Fixed a buffer overflow in the pppoe receive packet handling.
!
If relayd(8) "check script" doesn't exit(), treat the service as "down" rather than "unknown". Fixes a problem where the script is killed due to expiry of the interval timer.
!
Force the disklabel(8) UID cache used to generate hw.disknames to be updated after every disklabel read or write. Prevent the DUID cache from de-syncing.
!
Make mpii(4) look up the device attached to a raid volume by its address on the bus, not which bioctl volume id it is.
!
Removed daemon_shell and force the use of /bin/sh for the su(1) call in rc.d(8).
Prevent PIPEX from using address and control field on PPPoE, they must not be used as the protocol.
In IPv6, prevent the nd6_addr_add() work queue task from adding multiple addresses for the same prefix.
!
Fixed pf(4) source address rewriting for the icmp errors with rdr-to setup (PR6564).
Fixed PR6557 with RT2560 and RT2661.
Mark descriptors as invalid before unmapping the associated mbuf. Might prevent the unrecoverable DMA error mentioned in PR 6557.
!
Disabled PCIe Active State Power Management (ASPM) to avoid bge(4) randomly detaching from the bus on some machines.
!
Prevent fdisk(8) from parsing blocks it did not successfully read.
!
Implemented the DIOCGCACHE and DIOCSCACHE ioctls in mpii(4) for raid volumes. Allows sd(4) to enable the write cache on such a volume on attach, like it is done in mpi(4).
!
Make radeonfb(4/SPARC64) re-initialize acceleration engine after leaving X.
!
Make pgs(4/MACPPC) only attach if the "device_type" properly is "programmer-button".
!
Improved disklabel(8) cleaning of badly formed partition.
Disable Xorg on alpha because Xrender is broken.
!
Added workaround for BCM5906 A0/1/2 controller silicon bug in bge(4).
!
Reduced i386 RAMDISK size by not compiling statistics counters code in em(4) if SMALL_KERNEL is defined.
!
RELIABILITY FIX: the sis(4) driver may hand over stale ring descriptors to the hardware if the compiler decides to re-order stores or if the hardware does store-reordering.
! A source code patch is available.
! [Applied to stable]
!
Make routing socket free mbuf in failure case. Fixes PR6562.
!
SECURITY FIX: PF rules specifying address ranges (e.g. "10.1.1.1 - 10.1.1.5") were not correctly handled on little-endian systems (alpha, amd64, arm, i386, mips64el, vax). Other address types (bare addresses "10.1.1.1" and prefixes "10.1.1.1/30") are not affected. A source code patch is available.
! [Applied to stable]
!
Fixed a bug with the pointer location in cwm(1).
!
Avoid dereferencing a NULL pointer during VT switches when composite is active in xf86-video-intel. Fixes a crash.
!
Fixes the heavy rendering errors and crashes that could make inteldrm(4) unusable on a 865G since 4.8. Fixes PR6517.
!
Make crontab -l not crash on crontab(5) files that don't have the expected three lines of comments.
!
SECURITY FIX: An incorrectly formatted ClientHello handshake message could cause OpenSSL to parse past the end of the message. An attacker could use this flaw to trigger an invalid memory access, causing a crash of an application linked to OpenSSL. As well, certain applications may expose the contents of parsed OCSP extensions, specifically the OCSP nonce extension.
! Applications are only affected if they act as a server and call SSL_CTX_set_tlsext_status_cb on the server's SSL_CTX. It is believed that nothing in the base OS uses this. Apache httpd started using this in v2.3.3; this is newer than the version in ports. A source code patch is available.
! [Applied to stable]
!
Put a limit on fnmatch(3) recursion during matching, and reject input of size greater or equal PATH_MAX.
!
Make sgi platforms correctly pick the MP kernel on install if applicable.
!
In nm(1), fixed omission of symbol list for first object file in an archive with nm -s. Fixed PR6385.
!
Fixed NULL dereference with sudo -g group when the sudoers(5) rule has no runas, user or group listed.
!
Prevent a useless check already done in pf(4) pf_test_rule(): pf_test() and pf_test6() already drop IPv4-ICMP6 and IPv6-ICMP packets.
!
Multiple improvements in otus(4), rsu(4), run(4), urtwn(4): use usb_ref_{incr,decr,wait}() to avoid detaching the driver while a process is still using the hardware; don't add timeout(9)s if the device is detached; added checks to see if the device has been detached before running ioctls, timeouts, and tasks; use usb_wait_task() to wait for tasks to complete.
!
Make pf(4) reinitialize header length of unusual protocol number getting rewritten. Prevent a panic in m_clget().
!
Multiple improvements in usb(4): merged 'onqueue' and 'running' members of struct usb_task into a new member, 'state'; added new function usb_wait_task() which waits for queued or running usb_tasks to complete; in the USB_DEVICEINFO ioctl, fill struct usb_device_info in a usb_task, thereby avoiding races against driver attach/detach.
OpenSSH 5.8 released.
!
Fixed uninitialized nonce variable in ssh(1) key_certify().
Clear struct scsi_inquiry_data in atascsi_pmp_inq() from SCSI to ATA translation layer.
!
Prevent tmux(1) from requiring -d with -x or -y since it could be in the config file.
!
Make isakmpd(8) ignore any IP address not in the current routing domain when binding to addresses.
Merged in Xenocara fix for EXA bug #32803.
In the kernel semaphore handling, for SETVAL and SETALL operations make sure the specified value(s) are within the system limits. Fixes PR6547.
!
Merged in Xenocara fix for EXA bug #24703. Prevent crash.
!
Make tmux(1) redraw pane borders when switching to last pane.
!
Make crontab -e honour TMPDIR.
!
In the OpenBSD upgrade process, don't run fsck(8) for fstab(5) entries with zero or empty fs_passno and make it ask for permission to continue upgrade if one or more mounts failed.
!
Prevent mandoc -Thtml from printing out the <BR> before lines that have leading white space.
!
Make mandoc(1) .Bx accept no more than two arguments.
!
Make mandoc(1) quote .%T if .%B is specified, as in groff.
!
Make wscons(4) report the compose key on sun keyboards in raw mode as a different keycode from right alt.
!
Disambiguated return values of m_tag_copy_chain() in mbuf_tags(9).
!
Fixed tmux(1) problems with fatal() if the terminal disappear while locked.
!
Fixed an mbuf leak in mpe(4) by replacing m_free() with m_freem() in mpe_input().
!
Fixed a memory leak by replacing m_free() with m_freem() in trunk(4) broadcast mode.
!
In generic Ethernet functions, changed an m_free() to m_freem() to free the whole mbuf chain and to prevent a possible memory leak with bpf(4) BIOCSFILDROP option which is currently used by dhcpd(8) and dhclient(8).
!
Prevent midi(4) from sleeping with the PCATCH flag while closing itself, otherwise a signal may cause the output buffer to not be drained and cause stale notes.
!
Gave pf(4) pf_normalize_ip() the same 3 way semantics as pf_test(): PF_DROP, the packet is bad, the mbuf still exists and must be freed; PF_PASS and *m0 is NULL, the packet has been processed, not an error; PF_PASS and *m0 is not NULL, continue with packet processing. Fixes a potential mbuf use after free.
!
When ospfd(8) is fixing conflicts make sure the right vertex is passed to lsa_merge() so that the correct sequence number is used for the LSA.
!
Fixed a kernel crash due to ifmedia(4) broadcast address changes.
!
Merged a change from ncurses(3) upstream to correctly recalculate a form field size on set.
!
Sync tbl(7) handling with upstream version 1.10.9: .T} can be followed by a delimiter, then more data; do not limit table column widths (improves terminfo(5)); let numerical cells respect explicitly specified minimum cell widths; let terminal output survive missing data cells; parse and ignore arguments in parentheses on layout cell specifications; move tbl_calc() into out.c such that it can be used by all frontends; give tables an HTML class; some cleanup in tbl -Thtml code.
!
Make sure coding errors cannot make mandoc(1) miss fatal parsing errors by assert(3)ing valid parser state in the main parsing functions.
!
Make i386 and amd64 only use memory mapped extended PCIe config space access for the bus advertised in the MCFG table, and fall back on the traditional method for other busses.
!
Minor improvements to random(4): only support pool words equal to 2048, define the amount of used key, define the amount of skipped rc4, use arc4random_buf instead of reimplementing in line, bzero some more "secrets".
Added socket option SO_SPLICE to splice together two TCP sockets. Allows to write relay daemons with zero data copy.
Updated Test::Simple(3p) to version 0.96.
!
Substantially rewrite random(4): put a very thin mutex at the entropy-collection side, place a 2nd very thin mutex at the call-down path as well, move the pool->MD5->RC4init sequence into a workq driven from a timeout.
!
Added a yield() in random(4) randomwrite() to prevent problems when root accidentally cat /dev/random.
Increased i386 MAXDSIZ to 2GB.
!
Permit to get all luns on a target probed in iscsid(8) with a single ioctl(2).
!
Make vdsp(4/sparc64) detect whether a disk image is an ISO image and set the media type to VD_MEDIA_TYPE_CD to vDisk 1.1 clients. Makes installing from a Solaris 11 Express bootable install CD work.
!
Added support for the vDisk1.1 protocol in vdsp(4/sparc64). Improved Solaris vtoc/disklabel support and implement VD_OP_SET_VTOC. Makes Solaris actually run on top of an OpenBSD control domain.
!
Reset ssh(1) SIGCHLD handler to SIG_DFL when executing LocalCommand.
!
For very large operations in random(4) randomread(), use a local rc4 instance much like arc4random_buf_large does, but without re-initializing it every 8K.
!
RELIABILITY FIX: sp_protocol in RTM_DELETE messages could contain garbage values leading to routing socket users that restrict the AF (such as ospfd) not seeing any of the RTM_DELETE messages. A source code patch is available.
! [Applied to stable]
!
Put htons(3) around ip_randomid() for pf(4) scrub random-id to make it consistent with the network stack.
!
Added support for Memory Mapped Configuration space access. Gives access to PCIe extended configuration space access on modern i386 and amd64 machines.
Use pmap_uncache_page() to alter cacheability of pages in bus_dmamem_map(). Makes the zaurus text mode console memory cached again after exiting from X.
!
Introduced pmap_uncache_page() in arm pmap(9) to make a page uncached and maintain this both at the pte and pv list level.
!
Prevent vcons(4/sparc64) from assuming it is always the console since it's possible to run CoolThreads servers with a graphics console.
Updated xproto to version 7.0.20.
!
Make random(4) arc4_stir() only grab 64 bytes from the MD5 output.
!
Make rc.subr(8) check for a login class that matches the rc script name and use it if it is found, otherwise use daemon.
!
In bpf(4) bpf_movein(), range-check mbuf size against MCLBYTES before size_t to int truncation.
!
Implemented NOP-IN -> NOP-OUT handling in iscsid(8).
!
Make iscsid(8) cleanup tasks with a NULL callback after queuing the PDU to be sent out. Allows immediate responses to be issued with a task instead of very special code.
!
Make iscsid(8) truncate the scsi sense data to 18 bytes if more data was supplied. Improves connection.
!
Fixes parsing of login responses with additional padding in iscsid(8).
!
Make iscsid(8) log the PDU which failed because no task was found.
!
Fixes multiple man(7) .IP and .TP bugs for -Tascii and -Thtml.
!
Cleaned up and simplified tmux(1) command argument parsing.
!
Cleaned up argument count validation in mdoc(7): prevent segfault on empty .Db, .Rs, .Sm, and .St; let check_count() really throw the requested level, not always ERROR and downgrade most bad argument counts from ERROR to WARNING.
!
Added support for UTF-8 mouse input (\033[1005h) in tmux(1).
!
Make unprovided mandoc(1) macro arguments defaults to empty string and not NULL.
Removed the old COMPAT_23 SysV IPC structures from the kernel.
!
Fixed bugs in mandoc(1) macro argument parser with blank, backslashes and quotes escaping.
!
Make mandoc(1) use one common macro argument parser for roff and man macros.
!
Added to pkg_info(1) a -r <pkgspec> option to to check for a pkgspec by name, without looking at installed packages.
Make ac97(4) use host_flags directly as they're initialized during attach time.
!
Allow to change vlan options of existing vlan(4)/svlan(4) devices at runtime instead of forcing the user to-recreate the interface with the changed options.
!
Make ac97(4) check the optional flags method is not NULL before using it.
Adjusted krb5 directories in OpenSSL pkg-config generator.
Reworked m88k systems backtrace code.
!
Reduced use of cd in the install script by using sub-shells or absolute paths when possible.
!
Improved vdsp(4/sparc64) with OpenSolaris virtual disk client.
Make hppa need_resched() call cpu_unidle() such that a process running on another CPU is woken up.
!
Make pkg_create(1) create formatted man pages as temporary files.
In mandoc(1) libmdoc, replace the union of pointers to structs of macro-specific data by a pointer to a union of structs, which makes the code simpler and more robust at the expense of a small memory overhead.
!
Corrected x86_atomic_*_ul() to operate on 64bit integers, removed x86_atomic_*_l(), and updated the callers of all of those to use the underlying x86_atomic_*_u32() functions they were expecting.
Removed unused and broken x86_multicast_ipi() from i386 and amd64.
Prevent issuing a m88k cache maintenance operation until the last one is completed.
!
Make rc.subr call rc_conf itself right after reading in rc.conf(8).
Properly initialize i386 MXCSR and XMM registers when writing only in the x87 FPU state and the process has not used the FPU yet.
!
Added cfattach activate functions and call usbd_deactivate() in the DVACT_DEACTIVATE case for cdcef(4), otus(4), rsu(4), urtwn(4), uberry(4), udfu(4), udl(4), uow(4), uyap(4). Make those which don't have dying flag call usbd_deactivate() in the DVACT_DEACTIVATE case.
!
Added some groff behaviour to mandoc(1): Specifying both .%T and .%J in an .Rs block causes the title to be quoted instead of underlined, such that journal title and article title appear visually different.
!
Removed pmap_phys_address(), and force every driver's mmap() routine to return a physical address in all platforms. Allows machine-independent drivers to implement mmap(2) routines without having to know about the pmap_phys_address() implementation.
!
Polished mandoc(1) HTML output: use <SMALL> for .SM and <CODE> for .Dl, <B> for bold and <I> for italic.
Added a param to uvm_map_hint to not skip over the heap, and use it as a last resort if mmap otherwise fails to enable more complete address space utilization.
Prevent linker failure with sparc crtbeginS.o.
!
Prevent pms(4) from crashing when doing an ioctl(2) (eg wsconsctl -a) before first activation (wsmoused or X).
!
Prevent rc.subr from overwriting local_rcconf by flags from the rc(8) script.
!
Prevent g++(1) from warning about undefined __throw_exception_again().
!
Make pkg_add(1) handle failures from ports tree with more care.
!
Have sd(4) devices check for and respect read-only information the way st(4) does. Have both decline to open read-only devices for anything but read-only access.
!
Fixed a tmux(1) crash due to side effects of server_kill_window with RB_FOREACH.
Prevent m88k systems from sharing their exception page with the one used by the firmware at address 0. Make it possible to catch NULL pointer dereference.
!
Add a common interface for various devices in pms(4).
Make m88k systems check for pcb_onfault being set for genuine kernel data faults.
Make the pte created by pmap_map() wired, and count them in pmap_kernel() statistics on m88k systems.
!
Make tmux(1) use pointer rather than index for the client's last session.
!
Unified the way tmux(1) sessions are used by callbacks.
!
Added a -xxx option to pcidump(8) to print PCIe extended configuration space.
!
Prevent tmux(1) from destroying the index counter when a session comes up.
!
Make ucycom(4), utrh(4) and utwitch(4) the last drivers using their own macros instead of usb_lookup().
!
Fixed an alignment trap triggered by vnconfig(8) on sparc for kernels compiled with gcc4 in the kernel generic ioctl(2).
!
Added other-pane-height and other-pane-width options to tmux(1). Allows the width or height of the smaller panes in the main-horizontal and main-vertical layouts to be set.
Updated freetype to version 2.4.4.
!
Make mandoc(1) handle .Bk with HTML output format the same way it is for ASCII.
!
Make mandoc(1) handle .Bk the same way as groff 1.20.1: .Bk without arguments defaults to -words, .Bk with invalid arguments (including -lines) has no effect.
!
Fixed regression in smtpd(8): if MX look up fails, fallback to using the host itself.
!
Improved mandoc(1) HTML output: use less <DIV> and more <H1>, <H2>, <P>, <BR>, <PRE>, <UL>, <OL>, <DL> etc.
!
Removed 'i' and 'r' macro handlers in mandoc(1).
!
SECURITY FIX: Insufficient initialization of the pf rule structure in the ioctl handler may allow userland to modify kernel memory. By default root privileges are needed to add or modify pf rules. A source code patch is available.
! [Applied to stable]
!
Make tmux(1) read ${X} environment variables in strings and $HOME from the global environment rather than getenv, this allows them to be updated during the configuration file parsing.
!
Prevent smtpd(8) resolver from reading past the end of a buffer.
!
Make sure GCC configuration file for sparc OpenBSD is consistent with <sys/types.h>.
!
Fixed segmentation faults with GCC4 by allocating a full C compiler-style stack frame that includes space for 6 extended word arguments slots required by the sparc ABI in sparc ld.so(1).
!
Make usb(4) call config_deactivate() before config_detach() when detaching devices.
!
Make usb(4) use usbd_is_dying() instead of directly checking the device's bus dying flag.
!
Make usb(4) check that the root hub has been configured before trying to free it's resources.
!
Added dying flag to usb(4) struct usbd_device. Added usbd_deactivate() to set it. Added usbd_is_dying() to check if the flag has been set and use it before issuing transfers or requests.
Improved xf86-video-glint for sparc64. Make mplayer play video without weird colors.
Upgraded xorg-xserver to version 1.9.2, xf86-video-savage to 2.3.2.
!
Make pci(4) check the register offset against the device's configuration space size in PCIOCREAD and PCIOCWRITE ioctls.
Introduced a new pci routine, pci_conf_size(), in all platforms machine-dependent code. It returns the size of a given pcitag_t configuration address space.
Added a simple bus_space_barrier implementation in octeon.
!
Disabled uscanner(4) by default on all kernels which configure it.
!
Fixed ldapd(8) re-indexing by checking if an index entry already exists.
!
Make rc.shutdown(8) print the daemon name before rc_stop.
Remove sunmouse protocol decoder from Xenocara.
!
Make scp(1) pass through ssh command-line flags and options when doing remote-remote transfers.
!
Make mandoc(1) support quoting of arguments passed to user-defined macros and make .del a synonym for .de.
!
Implement the .de (define macro) roff instruction in mandoc(1).
Updated xcalc to 1.0.4, xeyes to 1.1.1, xf86-video-ast to 0.91.10.
Updated xlsatoms to 1.1.0, xlsclients to 1.1.0, xwininfo to 1.1.1, all rewritten to use XCB.
Added floating-point emulation code for systems mips64 systems lacking proper FPU like octeon.
!
Allow machine-dependent code to setup machine-dependent specific mappings in sys_execve(), if machine-dependent <machine/_types.h> defines __HAVE_EXEC_MD_MAP.
!
Added a -a flag to tmux(1) unbind-key to flush all key bindings.
!
Make tcasic(4/alpha) and esp(4/mac68k) compute synchronous transfer periods (involving the bus clock) with a better accuracy.
In Xenocara, updated libXdmcp to version 1.1.0, libXext to 1.4.0, libXft to 2.2.0, xtrans to 1.2.6, libXi 1.4.0, bh-ttf to 1.0.3, mkfontdir 1.0.6, xdriinfo 1.0.4, xgamma to 1.0.4, xinput to 1.5.3, xkill to 1.0.3, xrdb to 1.0.7, xrefresh 1.0.7, xset 1.2.1, xwd 1.0.4, xwud 1.0.3.
!
Prevent acpibat(4) from recursing infinitely on the notify function.
!
Updated athn(4) AR9380: added the different ROM templates for the different chips, fixed AR_PHY_65NM_CH0_TOP_XPABIASLVL definition, applied attenuation settings from the ROM.
Pass aesni_ctr_enc an initial counter block instead of an initialization vector in amd64 aesni.
!
Enable low latency interrupt modulation on ix(4) and set the LL interval to the maximum value to reduce the number of low latency interrupts hitting the card when the ring is getting full.
!
Fixed an issue in bgpd(8) where the RDE would start up as route-collector because uninitialized memory made the RDE switch to that mode.
!
Make ldapd(8) -dvv flags produce debug traces of decoded BER messages on stderr. Also shows a hexdump of the input buffer if BER decoding fails.
!
Make ldapd(8) prefix debug logging on stderr with time and pid, like syslog.
!
Use only libcrypto APIs that are retained with OPENSSL_NO_DEPRECATED in ssh(1).
!
Set rdomain maximum route-id to RT_TABLEID_MAX in ifconfig(8), as it is for the kernel.
!
Added urtwn(4), a driver for Realtek RTL8188CU/RTL8192CU 802.11n USB devices.
Added experimental support for full dynamic range of 24-bit hardware use for i386, amd64 and sparc64 only. It is disabled by default since most hardware and audio programs use 16-bit precision.
!
Fixed a possible use of uninitialized variable in mrouted(8) IGMP.
!
Make systat(1) print relative number of mbuf(9) livelock that happened between two systat updates instead of showing absolute figures.
!
Make ldapd(8) return earlier when the base DN in a search request doesn't exist.
!
Make ldapd(8) truncate additional incomplete requests when the input buffer already received two complete requests. Fixes the number of bytes consumed from the input buffer.
!
Make bridge(4) filter out reserved destination MAC addresses (01:80:C2:00:00:0x) as per the 802.1D-2004 spec.
!
Make ldapd(8) recognize all matching rules from RFC4517 except the optional wordMatch and keywordMatch.
!
Use caseExactMatch instead of caseExactIA5Match in ldapd(8) core.schema.
!
Make ldapd(8) evaluate filters according to the three-valued logic of X.511, as required by RFC4511.
!
Make vmt(4) attach only if mainbus(4) is specifically asking for it after vmt_probe succeeds. Prevents mainbus(4) from hanging.
!
Make trm(4) reduce useless retry of commands getting sense errors.
!
Make make -q exit with 1 and not -1. Fixes PR6494.
!
Make <sys/ressource.h> usable on its own by including <sys/time.h> as required by POSIX.
!
Make the network livelock counter available from sysctl(8) and systat(1).
!
Make sysctl(3) export the network livelock counter.
Replaced a boot(RB_HALT) to a panic in amd64 machine-dependent trap.c to make it in line with the other architectures.
In Xenocara updated xf86dga to version 1.0.3, xinit to 1.3.0,
!
Added support for hex keys in the ifconfig(8) wpakey code (full length only).
Fixed OpenCVS init command.
In Xenocara, updated bigreqsproto to version 1.1.1, compositeproto to 0.4.2, damageproto to 1.2.1, fixesproto to 4.1.2, fontsproto to 2.1.1, randrproto to 1.3.2, recordproto to 1.14.1, scrnsaverproto to 1.2.1, xcmiscproto to 1.2.1, libFS to 1.0.3, libXres to 1.0.5, libXScrnSaver to 1.2.1, libXaw to 1.0.8, libXcomposite to 0.4.3, libXcursor to 1.1.11, libXfont 1.4.3, libXinerama to 1.1.1, libXmu to 1.1.0, libXpm to 3.5.9, libXrandr to 1.3.1, libXt to 1.0.9, libXtst to 1.2.0, libXv to 1.0.6, libXxf86dga to 1.1.2, libXxf86vm to 1.1.1, libdmx to 1.1.1, libfontenc to 1.1.0, libxkbfile to 1.0.7, imake to 1.0.4, makedepend to 1.0.3, xorg-macros to 1.11.0, bdftopcf to 1.0.3, beforelight to 1.0.4, bitmap to 1.0.5, editres to 1.0.5, fslsfonts to 1.0.3, fstobdf to 1.0.4, iceauth to 1.0.4, ico to 1.0.3, mkfontscale to 1.0.8, rgb to 1.0.4, showfont to 1.0.3, smproxy to 1.0.4, twm to 1.0.5, viewres to 1.0.3, xconsole to 1.0.4, appres to 1.0.3, xdpyinfo to 1.2.0, xedit to 1.2.0, xev to 1.1.0, xfd to 1.1.0, xfs to 1.1.1, xfsinfo to 1.0.3, xgc to 1.0.3, xhost to 1.0.4, xkbevd to 1.1.1, xkbutils to 1.0.3, xlogo to 1.0.3, xmag to 1.0.4, xman to 1.1.1, xmodmap to 1.0.5, xprop to 1.2.0, xrandr to 1.3.4, xsertroot to 1.1.0, xsm to 1.0.2, font-util to 1.2.0, encodings to 1.0.4 and all fonts packages to latest X.Org versions.
!
Make the return of rfork(2) consistent with gethrid(). Fixes an rthread breakage.
!
Make netstat(1) print socket structure internals when netstat -P pcbaddr is called with -v.
Make the installer create a matching group for the user upon user creation.
!
Fixed high frequencies being removed on envy(4).
!
Fixed a 10 year old bug in the ld.so(1) memory allocator, which affected only sparc.
!
Removed "secrets" map from smtpd(8) and allow creation of user defined maps holding credentials.
!
Make stat(1) include the octet of the mode that contains the setuid/setgid/sticky bits in the output format used for the -x option.
!
Set bpf(4) alignment to 32 bits instead of sizeof(long).
Added preliminary support for PCI and SATA to octeon.
!
Allow some rules to have longer expiry delay than the default in smtpd(8).
!
Fixed a 'bstp still active' panic that happens if a stp enabled interface is destroyed while in the bridge(4).
!
Prevent route(4) from sending route messages to userland processes if those messages are rejected by the kernel because of bad encoding.
Make sure the mbuf data is properly aligned when function is reinjecting packets from low level output functions into high level output functions in Ethernet-inside-IP processing.
!
Added m_print() a function to print mbuf(9) headers. Can be called from ddb(4) with an mbuf pointer as argument to see the contents of it.
Removed libdes, src/ports users have been switched to libcrypto.
Replaced getdirentries by a new one, renaming the first to ogetdirentries().
Fixed memory leak in OpenCVS.
!
Fixed a possible NULL deref on loading a corrupt ECDH key in ssh(1).
!
Prevent mandoc(1) font alternating blocks like .RB from breaking the line between children in literate mode.
Make alpha trap report proper pc address in siginfo.
Fixed a few logic errors in misp64 comparison instruction emulation: make sure the less than relation is correctly computed, and check for both operands being signaled NaNs, instead of only the first NaN found, to decide whether to raise an invalid exception or not.
!
Fixed an off-by-one in a mandoc(1) assertion, crashing the renderer on ".Os \&".
Prevent various usb network devices from freeing network related resources if they were not allocated.
!
Added preliminary support for rc scripts in pkg_add(1).
!
Prevent mandoc(1) from throwing errors when .HP .IP .RS .TP have no arguments, as they are optional.
Merged -k and expand @@ parsing code between OpenCVS and OpenRCS, resulting in a performance gain in OpenCVS in some "cvs update" scenarios.
!
Downgraded nearly 20 mandoc(1) ERRORS to WARNINGS.
Added support for so (low-level roff "switch source file"), needed for Xenocara and various ports.
!
Added a simple 'rc' system to base (/etc/rc.subr) in order to start/stop/restart/reload services installed by the ports system.
Moved the MSIZE, MCLSHIFT, MCLBYTES and the MCLOFSET mbuf constants from hppa machine-dependent param.h to machine-independent param.h.
!
Added optional "match" keyword in relayd.conf(5) to allow simpler rdr-to filter rules.
!
Implemented the optional label request message ID TLV in ldpd(8).
!
As required by the RFC, make sure that a wildcard FEC is the one and only FEC of that message for label release and withdraw messages in ldpd(8).
!
Make ldpd(8) lde_check_request(), lde_check_mapping(), lde_send_labelmapping(), lde_send_labelrequest() and lde_nbr_do_mappings() follow the algorithms defined in appendix A of RFC 5036.
!
Allow the ldapd(8) userPassword attribute to specify a login class when using simple binds with BSD Authentication, using '#' as the delimiter.
!
Enabled vmt(4) in amd64 and i386 GENERIC kernels.
!
Big update to vmt(4), vmware tools functionality: initiate shutdown by signalling init with SIGUSR2 when requested by the host; initiate a reboot by signalling init with SIGINT when requested by the host; report the guests hostname, first non-loopback IP address and uptime to the host; update the guests timedelta sensor using the 64bit rpc.
Prevent mandoc(1) from throwing FATAL when there is no need to (nested displays: .Bd containing .Bd, .D1, .D1 or a forgotten block end macro or an unstarted ending block or a failed uname(3)).
Make OpenBSD::PackingElement(3p) redirection more efficient.
Improved OpenBSD::State(3p).
!
Let .Bsx print just "BSD/OS" in mandoc(1) like in modern groff.
Make TCP follow SUSv4 namespace rules in includes by hiding everything but the TCP_* options unless __BSD_VISIBLE is defined. Fixes PR 6192.
!
Make sftp(1) escape '[' in filename tab-completion.
Updated xterm to version 264, freetype to 2.4.3.
Prevent a file descriptor leak in libedit.
!
Make OpenCVS use CVSROOT for cvs import and ignore CVS/Root files. Fixes PR6497.
!
Make usb(4) check that a timeout(9) has been initialized before deleting it.
!
With mandoc(1) .Sm no longer produces a line break when used in .Bd and also avoid an extra space after the opening bracket in .Op in -Thtml
!
Fixed boot hangs that are showing up because the kernel use usb tasks to attach/detach usb(4) devices.
!
Make dhclient(8) verify that the interface is registered before using it.
!
Fixed the bugs that prevented the RT30XX ral(4) devices from working.
!
Prevent tmux(1) from changing the active pane when removing a pane unless the active pane is actually the one being removed.
!
Fixed a crash when mixing fold(1) legacy width option (e.g. fold -70) with getopt()-style options, such as "fold -b70". Mixing the legacy width with another option is no longer permitted.
!
In uvideo(4): added a structure that represents USB descriptor with variable sized member as in uaudio(4) and reenabled control support for devices where bControlSize is different from 2 in the processing unit descriptor.
!
Replaced old acpi(4) suspend/resume gpewalk function by separate functions for enabling wake and runtime GPEs.
!
Allow ikectl(8) to specify the export password on the command line.
!
Prevent ldpd(8) from adding MPL routes with a incoming MPLS_LABEL_IMPLNULL label.
Handle IMPLNULL labels directly in the kernel.
!
In ikectl(8): added a -q (quiet) command line option that will be used by ike CA to set openssl batch mode, allow to specify the initial CA password on the command line, allow to create certificate for clientAuth or serverAuth only.
!
Set saner permissions on ikectl(8) CA directory export, so there is no need to change perms of /etc/iked when extracting.
!
Make ikectl(8) create an empty but valid CRL list when a new CA is created.
!
Added OpenSSL fixes: updated local engines for the EVP API change, use hw_cryptodev.c instead of eng_cryptodev.c, make x86_64-xlate.pl always write to the output file and not stdout.
!
Added support for midi(4) to envy(4) in i386 and amd64.
!
Make os fingerprinting work on little endian systems. Updating pf.os(5) is mandatory if using os fingerprinting options, otherwise, the system will be blocked.
!
Updated pf.os(5) to match against OpenBSD -current systems. The automatic send and recv buffer scaling changed the OS fingerprint.
!
Added two new options to tmux(1) : server option "exit-unattached", makes the server exit when no clients are attached, even if sessions are present; session option "destroy-unattached" that destroys a session once no clients are attached to it. These are useful for preventing tmux remaining in the background where it is undesirable and when using tmux as a login shell to keep a limit on new sessions.
!
Make mandoc(1) report an ERROR if an explicit scope is still open at the end of an input file: it can still render the page by just closing the open scope, but it is likely that information will be missing or document structure mangled.
!
Modified tmux(1) server permissions on the socket when adding or removing +x to show attached sessions, rather than replacing them.
!
In mandoc(1), make no punctuation after .%* outside .Rs in .Rs, mark full stops after .%* as end of a sentence.
!
Make uvm(9) page daemon and uvm(9) swap configuration and io manager appear in ddb(4).
!
Allow mod_headers to handle RequestHeader directives known from apache2 in httpd(8).
Fixed L2TP length field in PIPEX.
!
Prevent cwm(1) from warping to clients marked 'ignore'.
!
Make ppb(4) respect pci_dopm, like pci(4) does and make it not try to poweroff the bridge if pci_dopm=0. Fixes Gateway LT3103u and Lenovo Thinkpad 100e netbooks, allowing them to suspend again.
Added gcc4 cross compilation support under OpenBSD.
!
Added L2TP support to PIPEX in TCP/IP stack and npppd.
Updated Perl to version 5.12.2 with local patches and fix for CVE-2010-0405.
Prevent IPv6 from trying to add new addresses by making use of sleeping pools.
Switched mips-based ports to gcc4.
Bumped libc major version to 57.
!
In fts(3), bumped fts_level from short to int and added a spare short.
!
Provide IRIX-compatible get_fpc_csr(3/MIPS64) and set_fpc_csr(3/MIPS64) for mips. This will allow userland to flip the ``flush denormalized to zero'' setting, which is being relied upon by tcl.
!
Make it possible to use "dhclient egress" to refresh a lease without remembering which interface dhclient(8) was actually active on.
!
Added to glob(3) a GLOB_KEEPSTAT option that retains a copy of the struct stat information that is looked up while matching globs.
Implemented if_freenameindex() in TCP/IP stack as a real function as required by POSIX.
Added stricter asserts to DIAGNOSTIC kernels to help catch mutex and rwlock issues: i386 and amd64 now count the number of active mutexes so that assertwaitok() can detect attempts to sleep while holding a mutex, i386 and amd64 check that we actually hold mutexes when passed to mtx_leave(), calls to rw_exit*() now call rw_assert_{rd,wr}lock() as appropriate.
!
Added iscsid(8), an iSCSI Initiator daemon using vscsi(4). Currently implements the absolute minimum of the protocol to make it work against targets.
!
In pfctl(8) , removed the check that enforced rdr-to only inbound and nat-to only outbound.
!
Remove dying flags in various usb(4) devices. The flag will be set in activate()/deactivate().
!
Fixed before-boot umass hangs on units without media in disk(9) subroutines.
Added TCP send and recv buffer scaling. It increases download speed.
Fixed npppd to setup a PIPEX if MPPE is not required by config and CCP failed to be opened because peer doesn't support MPPE.
!
Renamed uyurex(4) to utwitch(4) and enabled it by default in all GENERIC kernels.
!
Make pf(4) rule counter update consistent between IPv4 and IPv6.
!
Make loongson mainbus(4) attach mfokclock(4/loongson) later for cpu scaling.
!
Correctly identify mount points when they are specified in fstab(5) using a disklabel UID. Fixes PR6471.
Included the disklabel UID in sysctl hw.disknames.
!
Make disk(9) subroutines provide the kernel with the disklabel which include the disklabel UID.
!
Introduced a DKF_NOLABELREAD flag in disk(9), which is used by a device to prevent automatic reading of disklabel on attach. Applied it in fd(4) and cd(4).
!
Improved MCLGETI algorithm under load in TCP/IP stack.
!
Prevent the usb task thread from going to sleep forever in ehci(4).
!
Added usb_rem_wait_task() to usb(4), a wrapper for usb_rem_task() that waits for the task to complete if the task is already running.
!
Added two members to usb(4) struct usb_task: ``usbd_device_handle dev'', the device responsible for the task (use this to not run the task if the device's hub is dying) and ``int running'', a flag to be set when the task is running.
!
Save a little time on boot thanks to a usb(4) improvement.
!
Reduced race during normal usb(4) device detach by making detach happen in the same process.
Added a new IP level socket option IP_PIPEX. This option is used for L2TP support by pipex.
!
Added an option per-read/write callback to atomicio, and added a bandwidth limit option to sftp(1).
!
In clct(4), use audio(4) quiesce/resume for data i/o, and ac97_resume() for mixer suspend/resume support.
!
Added autoconf activate, suspend/resume support in eap(4).
!
Added AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC (as aes-gmac) encryption transformations support in ipsec.conf(5).
Added Support for AES-GCM-16 and ENCR_NULL_AUTH_AES_GMAC in IPSec ESP as per RFC4106 and 4543.
!
Added a new interface: pppx(4), the ppp multiplexer to be used with npppd and pipex. pppx(4) creates an interface whenever a session is created so that altq and pf can work on these.
!
Replace the mips64 old floating point completion code with a C interface to the machine-independent softfloat code, implementing all MIPS IV specified floating point operations.
!
Changed audio(4) quiescing to make it not call the audio_hw_if halt method in interrupt context, because drivers like eso(4) or envy(4) might want to sleep with their own halt method.
!
Avoid USBD_IOERROR in uhub(4) by determining the size of the buffer for USB hub interrupt pipe with bNbrPorts in hub descriptor.
!
Added a real DIOCGPDINFO to cd(4) and sd(4), allowing access to the physical information about the device rather than the contents of whichever disklabel was read.
!
Added '-label' option to route(8) to specify you only want to see routes having the given label.
!
Make tcpdump(8) show the original addresses/port too when a packet had his addresses and/or ports rewritten.
!
Make pflog(4) put the original (before rewriting) addresses into the already existing address fields in the pflog header, same for ports, and add a "rewritten" indicator.
!
Make pf(4) apply actions from the last matching pass or block rule and not the last matching rule after ruleset eval is done. Fixed PR6401.
!
Make ldapd(8) print a warning if schema file can't be opened.
!
In auglx(4), use audio(4) DVACT_{QUIESCE,RESUME} to handle I/O stopping/restarting for suspend/resume, and ac97(4) ac97_resume() to reset and restore the codec at resume.
!
Added support for newer asus boards that use a different method to poll and enumerate the sensors in aibs(4).
!
Added assertwaitok() to declare code paths that assume they can sleep. Updated malloc(9) and pool(9) to use it as appropriate.
!
Make machine-dependent splassert(IPL_NONE) work on amd64 the same as it does on i386.
!
Make ix(4) recompute the list_offset and data_offset when attaching a unknown SFP+ module on the 82598 controller.
Make mips64 md_printins() get the printf-like function as an extra parameter, and make it visible so that machine-dependents parts of the kernel can use it for debug messages.
!
Make mandoc(1) format multiple authors (.%A) in the same way as groff: two authors with "and", but without a comma; three or more with commas, and an "and" before the last one.
!
Prevent mandoc(1) from doing fatal errors when .Pp and .br have arguments.
!
Fixed length of an eap identity message payload in iked(8).
!
Implemented support for ldapd(8) bsdauth authentication via simple binds, not only SASL.
Added cache operations for the octeon platform.
!
Make smtpd(8) use the same buffer for local deliveries to files and commands.
!
Make snmpd(8) return error on GET requests without an instance identifier, both for tables and scalar values. Fixes PR6468 by not calling table get functions with an unexpectedly short OID. Also fixes PR6071. Scalar variables without an instance specified now returns a noSuchInstance error. GetNext requests correctly returns the .0 instance but it must be specified explicitly: $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr.0
Allow output of null values with a context class. This is used in SNMPv2 to return an error exception value for a varbind result ("noSuchObject[0] IMPLICIT NULL" in RFC1905).
!
Fixed a variety of structure packing and byte order bugs in ixgb(4) to try to get BE support working.
!
Allow the ssh(1) session multiplexing to determine that the server socket is either ready or stale without races. Stale server sockets are now automatically removed.
!
Moved getpeereid(2) function declaration in kernel COMPAT_47. In 4.8 and onwards getpeereid(3) is library code using socket options.
!
Simplified evcount(9) by removing counters in a tree hierarchy.
Added octeon platform.
!
Fixed security problem in the disabled and unfinished ssh(1) handling of J-PAKE protocol.
!
Added a SIGHLD handler to reap ssh(1) expired child process.
!
Added some missing firmware to install media: ral(4) RT2860 for i386, amd64 and sparc64; run(4) RT2870 and RT3071 for landisk, macppc, socppc and sparc64.
!
Make tmux(1) use UTF-8 line drawing characters on UTF-8 terminals.
!
Make tmux(1) ignore terminal overrides settings without a value.
!
Fix lazy binding issue on mips64 run-time link-editor. Fixes an nm(1) crash that happens when passed multiple object files on the command line.
Provided a bus_dmamap_sync() implementation for the amd64 IOMMU. It fixes bigmem.
Added infrastructure to build gcc4 on mips64.
!
Prevent azalia(4) from unmuting the speaker muted by plugged headphones when the master volume control is unmuted.
Allowed hotplug of Fiber Channel devices.
!
Prevent sd(4) io handler from being run on a gone device.
Make gcc4 build on landisk.
!
Many improvements in iked(8): allowed ESP proposals without integrity and AH proposals without encryption; added additional nonce length field, use that for the ciphers that require additional keying material; setup right flow direction depending on the mode: fixes up iked(8) working as an initiator against charon.
!
In tmux(1), added -n and -p flags to switch-client to move to the next and previous session.
!
Prevent tmux(1) from crashing if the screen size is too small for the indicator in copy mode.
Activated NTFS in i386 and amd64 GENERIC kernels.
!
In disk(9), introduced a disk_lookup() function which calls device_lookup(), before verifying that the resulting device is present on the disklist. This avoids a race whereby the disk driver can be accessed as soon as the softc has been allocated, but before the disk has completed initialization and has called disk_attach().
!
Enabled aesni for amd64. While running ipsec on amd64 with 'aes' cpu flag, it provides aes accelerated encryption in cbc and ctr modes for all three key sizes: 128, 192 and 256.
Removed the powerhook code and use the ca_activate tree traversal code everywhere to suspend/resume devices.
!
Fixed a potential race between cd(4) resume and detach.
Replaced all PWR_{SUSPEND,RESUME} by DVACT_{SUSPEND,RESUME}.
Prevent compiler unwanted optimization in i386 and amd64 machine-dependent bus_dmamap_sync().
Make the PCI-CardBus bridges driver save and restore pci config space registers on suspend/resume.
Fixed freezes occurring by removing CardBus cards with Ralink Technology RT2560, RT2561, RT2561S and RT2661 chipset.
!
Added an ioctl to figure out the non-sticky bits in pci(4) BARs used for determining the size of those BARs. Make pcidump(8) use this new ioctl to print the size of PCI BARs.
Make the sparc tree more GCC4 friendly.
Make the v3 demangler support code compile in libiberty.
!
Added support to pcmcia(4) indirect Card Information Structure data. Improved and fixed a bug in pcmcia(4) CIS parts.
!
Added support for SiS191 in se(4), fixed bugs, and improved it too.
!
In ssh(1), implemented Elliptic Curve Cryptography modes for key exchange (ECDH) and host/user keys (ECDSA) as specified by RFC5656.
Started work to add suspend/resume for Loongson Lemote.
!
In ssh(1), added buffer_get_cstring() and related functions that verify that the string extracted from the buffer contains no embedded \0 characters*. It prevents random (possibly malicious) crap from being appended to strings.
!
Makes X autoconfiguration more intuitive on machines with multiple SBus or UPA framebuffers, where wsdisplay0 isn't the console.
!
Make atw(4) and rtw(4) powerhook code call an activate function.
!
Make sure local arrays of chars are word-aligned on strict alignment architectures with gcc(1), as is done for global ones. Though not explicitly allowed by the C standard it has been historically handled correctly by most C compilers.
Fixed kernel compiling with disabled IPSEC and enabled GIF/MPLS.
Make 2nd resume work on arm and zaurus.
Correctly compute loongson memory size if less than 256MB.
Fixed an uninitialized value leading to bogus KASSERT in uvm_pmr_use_inc().
!
Started implementation of activate function in acpiasus(4) to replace powerhooks functions.
!
Fixed autoconfiguration for accelerated drivers on sparc/sparc64, currently limited to sunffb(4).
!
Provided a way to get < and > symbols on pckbc(4) pc101-key slovenian layouts.
!
Make PCI Power Management optional, and only enable it when acpi(4) attaches.
!
Make apm(4) runs powerhook with interrupts blocked.
!
Worked around a rare race condition that can happen if daily(8) zaps old files from /var/tmp while pkg_add(1) is installing or updating a package and hasn't yet moved or even read some of the files in /var/tmp/pkginfo.* (typically +DESCR).
Fixed two problems in the kernel work queues.
!
Added support for the LSISAS2004 chips in mpii(4).
!
In Xenocara, updated libXvMC to version 1.0.6, xf86-input-vmmouse to 12.6.10, xf86-video-vmware to 11.0.2, xf86-video-mga to 1.4.13, xf86-video-nv to 2.1.18, xterm to 261.
!
Implemented user interface for error handling in mandoc(1): -Wlevel selects warning you care about (error or fatal); -Wstop stops after parsing a file with the selected warning level; provide consistent exit status code for the selected warning level; always finish parsing each file unless fatal errors prevent it; removed the -f option and -Werror.
!
Prevent wsconsctl(8) from ignoring errors silently if the device could not be opened.
!
Prevent gcc(1) from optimizing i386/amd64 lidt() function that provide access to i386/amd64 LIDT instruction. It fixes instant reboots with bsd.rd on Pentiums with F00F bug.
!
Introduced a machine-independent kern.consdev sysctl(8) that will replace the machine-dependent machdep.console_device.
!
Make the number of vnode(9)s correspond to the number of buffers in buffer cache.
!
Fixed a logic problem which could in theory cause pfctl(8) to recursively print anchors with wildcards when not requested via the command line but in practice only applied to automatically generated inline anchors (which don't have wildcards) or when recursion was requested.
!
Forbade duplicate tmux(1) session names from being created.
!
Added support for terabytes units with disklabel(8) editor 'T' command.
!
Make tmux(1) list panes command show which pane is active.
!
Fixed two problems in gdt(4), introduced in 4.7: eliminate a use-after-free of xs for xs->flags, avoid calling scsi_done() twice when synchronizing disks during shut down.
!
Added two new options to tmux(1) : server option "exit-unattached", makes the server exit when no clients are attached, even if sessions are present; session option "destroy-unattached" that destroys a session once no clients are attached to it. These are useful for preventing tmux remaining in the background where it is undesirable and when using tmux as a login shell to keep a limit on new sessions.
!
Make mandoc(1) report an ERROR if an explicit scope is still open at the end of an input file: it can still render the page by just closing the open scope, but it is likely that information will be missing or document structure mangled.
!
Modified tmux(1) server permissions on the socket when adding or removing +x to show attached sessions, rather than replacing them.
!
In mandoc(1), make no punctuation after .%* outside .Rs in .Rs, mark full stops after .%* as end of a sentence.
!
Make uvm(9) page daemon and uvm(9) swap configuration and io manager appear in ddb(4).
!
Allow mod_headers to handle RequestHeader directives known from apache2 in httpd(8).
Fixed L2TP length field in PIPEX.
!
Prevent cwm(1) from warping to clients marked 'ignore'.
!
Make ppb(4) respect pci_dopm, like pci(4) does and make it not try to poweroff the bridge if pci_dopm=0. Fixes Gateway LT3103u and Lenovo Thinkpad 100e netbooks, allowing them to suspend again.
Added gcc4 cross compilation support under OpenBSD.
!
Added L2TP support to PIPEX in TCP/IP stack and npppd.
Updated Perl to version 5.12.2 with local patches and fix for CVE-2010-0405.
Prevent IPv6 from trying to add new addresses by making use of sleeping pools.
Switched mips-based ports to gcc4.
Bumped libc major version to 57.
!
In fts(3), bumped fts_level from short to int and added a spare short.
!
Provide IRIX-compatible get_fpc_csr(3/MIPS64) and set_fpc_csr(3/MIPS64) for mips. This will allow userland to flip the "flush denormalized to zero" setting, which is being relied upon by tcl.
!
Make it possible to use "dhclient egress" to refresh a lease without remembering which interface dhclient(8) was actually active on.
!
Added to glob(3) a GLOB_KEEPSTAT option that retains a copy of the struct stat information that is looked up while matching globs.
Implemented if_freenameindex() in TCP/IP stack as a real function as required by POSIX.
Added stricter asserts to DIAGNOSTIC kernels to help catch mutex and rwlock issues: i386 and amd64 now count the number of active mutexes so that assertwaitok() can detect attempts to sleep while holding a mutex, i386 and amd64 check that we actually hold mutexes when passed to mtx_leave(), calls to rw_exit*() now call rw_assert_{rd,wr}lock() as appropriate.
!
Added iscsid(8), an iSCSI Initiator daemon using vscsi(4). Currently implements the absolute minimum of the protocol to make it work against targets.
!
In pfctl(8) , removed the check that enforced rdr-to only inbound and nat-to only outbound.
!
Remove dying flags in various usb(4) devices. The flag will be set in activate()/deactivate().
!
Fixed before-boot umass hangs on units without media in disk(9) subroutines.
Added TCP send and recv buffer scaling. It increases download speed.
Fixed npppd to setup a PIPEX if MPPE is not required by config and CCP failed to be opened because peer doesn't support MPPE.
!
Renamed uyurex(4) to utwitch(4) and enabled it by default in all GENERIC kernels.
!
Make pf(4) rule counter update consistent between IPv4 and IPv6.
!
Make loongson mainbus(4) attach mfokclock(4/loongson) later for cpu scaling.
!
Correctly identify mount points when they are specified in fstab(5) using a disklabel UID. Fixes PR6471.
Included the disklabel UID in sysctl hw.disknames.
!
Make disk(9) subroutines provide the kernel with the disklabel which include the disklabel UID.
!
Introduced a DKF_NOLABELREAD flag in disk(9), which is used by a device to prevent automatic reading of disklabel on attach. Applied it in fd(4) and cd(4).
!
Improved MCLGETI algorithm under load in TCP/IP stack.
!
Prevent the usb task thread from going to sleep forever in ehci(4).
!
Added usb_rem_wait_task() to usb(4), a wrapper for usb_rem_task() that waits for the task to complete if the task is already running.
!
Added two members to usb(4) struct usb_task: "usbd_device_handle dev", the device responsible for the task (use this to not run the task if the device's hub is dying) and "int running", a flag to be set when the task is running.
!
Save a little time on boot thanks to a usb(4) improvement.
!
Reduced race during normal usb(4) device detach by making detach happen in the same process.
Added a new IP level socket option IP_PIPEX. This option is used for L2TP support by pipex.
!
Added an option per-read/write callback to atomicio, and added a bandwidth limit option to sftp(1).
!
In clct(4), use audio(4) quiesce/resume for data i/o, and ac97_resume() for mixer suspend/resume support.
!
Added autoconf activate, suspend/resume support in eap(4).
!
Added AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMAC (as aes-gmac) encryption transformations support in ipsec.conf(5).
Added Support for AES-GCM-16 and ENCR_NULL_AUTH_AES_GMAC in IPSec ESP as per RFC4106 and 4543.
!
Added a new interface: pppx(4), the ppp multiplexer to be used with npppd and pipex. pppx(4) creates an interface whenever a session is created so that altq and pf can work on these.
!
Replace the mips64 old floating point completion code with a C interface to the machine-independent softfloat code, implementing all MIPS IV specified floating point operations.
!
Changed audio(4) quiescing to make it not call the audio_hw_if halt method in interrupt context, because drivers like eso(4) or envy(4) might want to sleep with their own halt method.
!
Avoid USBD_IOERROR in uhub(4) by determining the size of the buffer for USB hub interrupt pipe with bNbrPorts in hub descriptor.
!
Added a real DIOCGPDINFO to cd(4) and sd(4), allowing access to the physical information about the device rather than the contents of whichever disklabel was read.
!
Added '-label' option to route(8) to specify you only want to see routes having the given label.
!
Make tcpdump(8) show the original addresses/port too when a packet had his addresses and/or ports rewritten.
!
Make pflog(4) put the original (before rewriting) addresses into the already existing address fields in the pflog header, same for ports, and add a "rewritten" indicator.
!
Make pf(4) apply actions from the last matching pass or block rule and not the last matching rule after ruleset eval is done. Fixed PR6401.
!
Make ldapd(8) print a warning if schema file can't be opened.
!
In auglx(4), use audio(4) DVACT_{QUIESCE,RESUME} to handle I/O stopping/restarting for suspend/resume, and ac97(4) ac97_resume() to reset and restore the codec at resume.
!
Added support for newer asus boards that use a different method to poll and enumerate the sensors in aibs(4).
!
Added assertwaitok() to declare code paths that assume they can sleep. Updated malloc(9) and pool(9) to use it as appropriate.
!
Make machine-dependent splassert(IPL_NONE) work on amd64 the same as it does on i386.
!
Make ix(4) recompute the list_offset and data_offset when attaching a unknown SFP+ module on the 82598 controller.
Make mips64 md_printins() get the printf-like function as an extra parameter, and make it visible so that machine-dependents parts of the kernel can use it for debug messages.
!
Make mandoc(1) format multiple authors (.%A) in the same way as groff: two authors with "and", but without a comma; three or more with commas, and an "and" before the last one.
!
Prevent mandoc(1) from doing fatal errors when .Pp and .br have arguments.
!
Fixed length of an eap identity message payload in iked(8).
!
Implemented support for ldapd(8) bsdauth authentication via simple binds, not only SASL.
Added cache operations for the octeon platform.
!
Make smtpd(8) use the same buffer for local deliveries to files and commands.
!
Make snmpd(8) return error on GET requests without an instance identifier, both for tables and scalar values. Fixes PR6468 by not calling table get functions with an unexpectedly short OID. Also fixes PR6071. Scalar variables without an instance specified now returns a noSuchInstance error. GetNext requests correctly returns the .0 instance but it must be specified explicitly: $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr.0
Allow output of null values with a context class. This is used in SNMPv2 to return an error exception value for a varbind result ("noSuchObject[0] IMPLICIT NULL" in RFC1905).
!
Fixed a variety of structure packing and byte order bugs in ixgb(4) to try to get BE support working.
!
Allow the ssh(1) session multiplexing to determine that the server socket is either ready or stale without races. Stale server sockets are now automatically removed.
!
Moved getpeereid(2) function declaration in kernel COMPAT_47. In 4.8 and onwards getpeereid(3) is library code using socket options.
!
Simplified evcount(9) by removing counters in a tree hierarchy.
Added octeon platform.
!
Fixed security problem in the disabled and unfinished ssh(1) handling of J-PAKE protocol.
!
Added a SIGHLD handler to reap ssh(1) expired child process.
!
Added some missing firmware to install media: ral(4) RT2860 for i386, amd64 and sparc64; run(4) RT2870 and RT3071 for landisk, macppc, socppc and sparc64.
!
Make tmux(1) use UTF-8 line drawing characters on UTF-8 terminals.
!
Make tmux(1) ignore terminal overrides settings without a value.
!
Fix lazy binding issue on mips64 run-time link-editor. Fixes an nm(1) crash that happens when passed multiple object files on the command line.
Provided a bus_dmamap_sync() implementation for the amd64 IOMMU. It fixes bigmem.
Added infrastructure to build gcc4 on mips64.
!
Prevent azalia(4) from unmuting the speaker muted by plugged headphones when the master volume control is unmuted.
Allowed hotplug of Fiber Channel devices.
!
Prevent sd(4) io handler from being run on a gone device.
Make gcc4 build on landisk.
!
Many improvements in iked(8): allowed ESP proposals without integrity and AH proposals without encryption; added additional nonce length field, use that for the ciphers that require additional keying material; setup right flow direction depending on the mode: fixes up iked(8) working as an initiator against charon.
!
In tmux(1), added -n and -p flags to switch-client to move to the next and previous session.
!
Prevent tmux(1) from crashing if the screen size is too small for the indicator in copy mode.
Activated NTFS in i386 and amd64 GENERIC kernels.
!
In disk(9), introduced a disk_lookup() function which calls device_lookup(), before verifying that the resulting device is present on the disklist. This avoids a race whereby the disk driver can be accessed as soon as the softc has been allocated, but before the disk has completed initialization and has called disk_attach().
!
Make tcpdump(8) of pflog(4) interfaces work with 'net <net>' expression.
Enabled aesni for amd64. While running ipsec on amd64 with 'aes' cpu flag, it provides aes accelerated encryption in cbc and ctr modes for all three key sizes: 128, 192 and 256.
Removed the powerhook code and use the ca_activate tree traversal code everywhere to suspend/resume devices.
!
Fixed a potential race between cd(4) resume and detach.
Replaced all PWR_{SUSPEND,RESUME} by DVACT_{SUSPEND,RESUME}.
Prevent compiler unwanted optimization in i386 and amd64 machine-dependent bus_dmamap_sync().
Make the PCI-CardBus bridges driver save and restore pci config space registers on suspend/resume.
Fixed freezes occurring by removing CardBus cards with Ralink Technology RT2560, RT2561, RT2561S and RT2661 chipset.
!
Added an ioctl to figure out the non-sticky bits in pci(4) BARs used for determining the size of those BARs. Make pcidump(8) use this new ioctl to print the size of PCI BARs.
Make the sparc tree more GCC4 friendly.
Make the v3 demangler support code compile in libiberty.
!
Added support to pcmcia(4) indirect Card Information Structure data. Improved and fixed a bug in pcmcia(4) CIS parts.
!
Added support for SiS191 in se(4), fixed bugs, and improved it too.
!
In ssh(1), implemented Elliptic Curve Cryptography modes for key exchange (ECDH) and host/user keys (ECDSA) as specified by RFC5656.
Started work to add suspend/resume for Loongson Lemote.
!
In ssh(1), added buffer_get_cstring() and related functions that verify that the string extracted from the buffer contains no embedded \0 characters*. It prevents random (possibly malicious) crap from being appended to strings.
!
Makes X autoconfiguration more intuitive on machines with multiple SBus or UPA framebuffers, where wsdisplay0 isn't the console.
!
Make atw(4) and rtw(4) powerhook code call an activate function.
!
Make sure local arrays of chars are word-aligned on strict alignment architectures with gcc(1), as is done for global ones. Though not explicitly allowed by the C standard it has been historically handled correctly by most C compilers.
Fixed kernel compiling with disabled IPSEC and enabled GIF/MPLS.
Make 2nd resume work on arm and zaurus.
Correctly compute loongson memory size if less than 256MB.
Fixed an uninitialized value leading to bogus KASSERT in uvm_pmr_use_inc().
!
Started implementation of activate function in acpiasus(4) to replace powerhooks functions.
!
Fixed autoconfiguration for accelerated drivers on sparc/sparc64, currently limited to sunffb(4).
!
Provided a way to get < and > symbols on pckbc(4) pc101-key slovenian layouts.
!
Make PCI Power Management optional, and only enable it when acpi(4) attaches.
!
Make apm(4) runs powerhook with interrupts blocked.
!
Worked around a rare race condition that can happen if daily(8) zaps old files from /var/tmp while pkg_add(1) is installing or updating a package and hasn't yet moved or even read some of the files in /var/tmp/pkginfo.* (typically +DESCR).
Fixed two problems in the kernel work queues.
!
Added support for the LSISAS2004 chips in mpii(4).
!
In Xenocara, updated libXvMC to version 1.0.6, xf86-input-vmmouse to 12.6.10, xf86-video-vmware to 11.0.2, xf86-video-mga to 1.4.13, xf86-video-nv to 2.1.18, xterm to 261.
!
Implemented user interface for error handling in mandoc(1): -Wlevel selects warning you care about (error or fatal); -Wstop stops after parsing a file with the selected warning level; provide consistent exit status code for the selected warning level; always finish parsing each file unless fatal errors prevent it; removed the -f option and -Werror.
!
Prevent wsconsctl(8) from ignoring errors silently if the device could not be opened.
!
Prevent gcc(1) from optimizing i386/amd64 lidt() function that provide access to i386/amd64 LIDT instruction. It fixes instant reboots with bsd.rd on Pentiums with F00F bug.
!
Introduced a machine-independent kern.consdev sysctl(8) that will replace the machine-dependent machdep.console_device.
!
Make the number of vnode(9)s correspond to the number of buffers in buffer cache.
!
Fixed a logic problem which could in theory cause pfctl(8) to recursively print anchors with wildcards when not requested via the command line but in practice only applied to automatically generated inline anchors (which don't have wildcards) or when recursion was requested.
!
Forbade duplicate tmux(1) session names from being created.
!
Added support for terabytes units with disklabel(8) editor 'T' command.
!
Make tmux(1) list panes command show which pane is active.
!
Fixed two problems in gdt(4), introduced in 4.7: eliminate a use-after-free of xs for xs->flags, avoid calling scsi_done() twice when synchronizing disks during shut down.
!