OpenBSD/src ItxGheIdistrib/alpha Makefile

   skip floppyB until more space is found
VersionDeltaFile
1.12+2-2distrib/alpha/Makefile
+2-21 files

OpenBSD/src SpOfYWvshare/man/man4 acpi.4

   Xr acpisbs
VersionDeltaFile
1.53+4-2share/man/man4/acpi.4
+4-21 files

OpenBSD/src bdqALLTdistrib/sets/lists/man mi

   sync
VersionDeltaFile
1.1408+1-0distrib/sets/lists/man/mi
+1-01 files

OpenBSD/src TiuT74Rshare/man/man4 acpisbs.4 acpibat.4

   add a manpage for acpisbs, remove caveat from acpibat

OpenBSD/src t3qdbcdsbin/iked ikev2.c

   Only close the SA if an error happens before ikev2_msg_init() was called
   to make sure we do not run ikev2_msg_cleanup() on an unitialized stack
   variable.

   ok deraadt@ reyk@
VersionDeltaFile
1.152+6-5sbin/iked/ikev2.c
+6-51 files

OpenBSD/src EOIJMPIusr.sbin/smtpd ssl.c

   Disable client-initiated renegotiation.

   ok gilles@ eric@ deraadt@
VersionDeltaFile
1.88+2-1usr.sbin/smtpd/ssl.c
+2-11 files

OpenBSD/src 6rvXFHssys/kern kern_pledge.c

   correct NBPFILTER #ifdef's
   from sthen and others
VersionDeltaFile
1.201+3-3sys/kern/kern_pledge.c
+3-31 files

OpenBSD/src uah39Pedistrib/sets/lists/base mi

   sync
VersionDeltaFile
1.829+2-0distrib/sets/lists/base/mi
+2-01 files

OpenBSD/src KUKKknQsys/dev/usb ehci.c

   these free() size choices appear to be wrong.  joel has a diff that fixes
   them, but for release let's be conservative and use 0.
VersionDeltaFile
1.198+3-3sys/dev/usb/ehci.c
+3-31 files

OpenBSD/src raIhnuEetc/signify openbsd-62-syspatch.pub openbsd-61-syspatch.pub

   add signify public keys for syspatch for the current and next release

OpenBSD/src ao3iii3sys/dev/usb if_ure.c

   Use m_devget(9) to replace code that does more or less the same but assumes
   the received packet fits in a single mbuf cluster, which isn't necessarily
   the case.  This might fix the pool corruption seen by jcs@.

   ok jcs@, jmatthew@, deraadt@
VersionDeltaFile
1.5+2-25sys/dev/usb/if_ure.c
+2-251 files

OpenBSD/src DA1Rx1ausr.sbin/vmctl vmctl.c

   Set interface flag to VMIFF_UP when using -i option. This way vmd will make
   sure the interfaces are up on startup.
   OK deraadt@, reky@
VersionDeltaFile
1.28+4-2usr.sbin/vmctl/vmctl.c
+4-21 files

OpenBSD/src 8nVhaW9share/man/man9 mbuf.9

   m_devget() lost its ipf pointer argument, update man page.
VersionDeltaFile
1.106+4-4share/man/man9/mbuf.9
+4-41 files

OpenBSD/src GoDKHQtbin/kill kill.c

   Use strtonum(3) instead of strtol(3).  OK deraadt@
VersionDeltaFile
1.14+16-15bin/kill/kill.c
+16-151 files

OpenBSD/src jSxHCYwetc/root root.mail

   sync the version of the example package; ok deraadt@
VersionDeltaFile
1.122+1-1etc/root/root.mail
+1-11 files

OpenBSD/src PpRotC3usr.sbin/radiusd log.c

   Bring radiusd log.c copyright in line with other program's log.c
   and other radiusd source files.  Remove the LOSS OF MIND clause.
   OK henning@ yasuoka@ deraadt@
VersionDeltaFile
1.2+4-4usr.sbin/radiusd/log.c
+4-41 files

OpenBSD/src D1jsYSHlib/libc/stdlib malloc.3

   rephrase more enumerations of functions
VersionDeltaFile
1.108+10-13lib/libc/stdlib/malloc.3
+10-131 files

OpenBSD/src i3pzSQjusr.sbin/acme-client acme-client.conf.5

   account key needs to be in quotes.

   ok benno deraadt

OpenBSD/src o6oFOFAsys/dev/pci if_iwi.c

   Fix iwi(4) regressions. WPA was broken since 6.0 errata 018.
   Also, the firmware was rejecting RTS frames so iwi(4) didn't work against
   an OpenBSD athn(4) hostap anymore; fix the config sent to firmware.
   Prompted by report from bg2200 at jamesjerkinscomputer on misc@
   ok deraadt@
VersionDeltaFile
1.136+5-1sys/dev/pci/if_iwi.c
+5-11 files

OpenBSD/src rhWpHtIlib/libc/sys Makefile.inc

   The hppa version of as(1) requires whitespace before a .file directive,
   it may not be in column 0.  This kind of thing is very common in GNU
   and Linux software because the software was written from the start to
   be 'compatible replacements' of vendor software.
   ok jsing guenther
VersionDeltaFile
1.148+2-2lib/libc/sys/Makefile.inc
+2-21 files

OpenBSD/src gideWVausr.sbin/ikectl ikeca.c

   set REQ_EXT to x509v3_CA, fixing "ikectl ca XX create" inadvertently broken
   in r1.41.  ok reyk deraadt
VersionDeltaFile
1.42+2-1usr.sbin/ikectl/ikeca.c
+2-11 files

OpenBSD/src vhKfsdQsys/conf GENERIC

   POOL_DEBUG off for release
VersionDeltaFile
1.241+2-2sys/conf/GENERIC
+2-21 files

OpenBSD/src PSTsc6Ysys/conf newvers.sh

   move to 6.1 release, drop -beta tag
VersionDeltaFile
1.152+3-3sys/conf/newvers.sh
+3-31 files

OpenBSD/src lz8Mspksys/dev/usb umodem.c

   Remove quirks for two devices that are known to be CDC ACM protocol 0
   that are now covered by the generic class matching.
VersionDeltaFile
1.62+1-10sys/dev/usb/umodem.c
+1-101 files

OpenBSD/src qvaoUf7lib/libssl/man SSL_renegotiate.3

   tweak previous;
VersionDeltaFile
1.4+5-3lib/libssl/man/SSL_renegotiate.3
+5-31 files

OpenBSD/src 2wnbo81sys/dev/usb umodem.c usb.h

   Match on class communications subclass abstract control model protocol
   0 "No class specific protocol required" in addition to the existing
   protocol 1 "AT Commands: V.250 etc" match.

   This lets umodem(4) attach to the serial console on the overdrive 1000
   which is a usb type-b socket on the back of the box not a db9 like the
   overdrive 3000.
VersionDeltaFile
1.61+3-2sys/dev/usb/umodem.c
1.58+2-1sys/dev/usb/usb.h
+5-32 files

OpenBSD/src ymKbTq4sys/arch/arm64/arm64 vfp.c

   Add an instruction synchronisation barrier instruction after changing
   the vfp state via cpacr_el1.  This matches the advice given in the
   "Synchronization requirements for system registers" section of the ARMv8
   ARM.

   Without this an overdrive 1000 with A1120 (Cortex A57 r1p2) reliably
   triggers "panic: VFP exception in the kernel" when init(8) is run.

   ok drahn@ kettenis@
VersionDeltaFile
1.2+2-1sys/arch/arm64/arm64/vfp.c
+2-11 files

OpenBSD/src HpE70rusys/arch/amd64/amd64 vmm.c

   Properly handle VMX entry controls governing guest processor mode.

   Before seabios, this didn't matter much but now it does since various
   bootloaders/kernels need such treatment.

   ok deraadt
VersionDeltaFile
1.131+105-38sys/arch/amd64/amd64/vmm.c
+105-381 files

OpenBSD/src 3Fbu1w0sys/arch/amd64/amd64 identcpu.c, sys/arch/amd64/include specialreg.h

   add RDTSCP flags to identcpu.c

   ok guenther, deraadt

OpenBSD/src 1iWLWVzsbin/iked ca.c

   Add helpful debug messages to tell us why public key authentication failed.

   This is currently only visible in debug mode (eg. iked -dvv), some
   debug messages will be turned into regular warnings later.

   OK claudio@ deraadt@
VersionDeltaFile
1.44+12-4sbin/iked/ca.c
+12-41 files

OpenBSD/src aqmIFBpsys/arch/arm64/arm64 pmap.c

   Previous W^X diff only changed the access permissions in the bootstrap page
   tables.  We need to set them in the final kernel page tables as well.

   ok visa@
VersionDeltaFile
1.29+26-55sys/arch/arm64/arm64/pmap.c
+26-551 files

OpenBSD/src NJheWv1lib/libssl/man SSL_get_peer_cert_chain.3

   Fix typo in function name;
   from Markus Triska <triska at metalevel dot at>
   via OpenSSL commit 1f164c6f.

OpenBSD/src C3UM4NTlib/libssl/man SSL_renegotiate.3

   After i wrote SSL_renegotiate(3) from scratch, OpenSSL also
   documented the function.  Merge the more detailed descriptions
   and the additional documentation of SSL_renegotiate_abbreviated(3)
   and SSL_renegotiate_pending(3).
   From Matt Caswell, OpenSSL commit 39820637.
VersionDeltaFile
1.3+109-12lib/libssl/man/SSL_renegotiate.3
+109-121 files

OpenBSD/src KtQivMSregress/sys/kern/pledge/sockopt Makefile

   Make the test also work with obj directory.
   from semarie@

OpenBSD/src dlppAvWsys/arch/i386/i386 cpu.c

   Reset ci_curmap to kernel_pmap() in cpu_hatch().  Otherwise the lazy pmap
   switching code might think the old pmap is still active after a resume
   which could lead to a page fault in the kernel.

   ok stsp@, mlarkin@, deraadt@
VersionDeltaFile
1.81+2-1sys/arch/i386/i386/cpu.c
+2-11 files

OpenBSD/src hsmTeumsbin/iked parse.y

   Remove RSA from the list of keywords, lookup is now done in a table.

   This lets us configure explicit old-style RSA again.

   OK mikeb@
VersionDeltaFile
1.64+2-3sbin/iked/parse.y
+2-31 files

OpenBSD/src SECqkPklib/libc/stdlib malloc.c

   small cleanup & optimization; ok deraadt@ millert@
VersionDeltaFile
1.218+5-2lib/libc/stdlib/malloc.c
+5-21 files

OpenBSD/src 0xl3lsRsbin/iked ikev2.c

   Don't send informational responses before we're having the key material.

   iked starts sending keepalive messages after authentication and after
   successfully completing the handshake.  Other implementations, like
   we've seen on Microsoft Azure, start sending keepalive messages right
   after receiving the first SA_INIT message when they set up the key
   material, even before we received the SA_INIT response to complete the
   DH exchange.  The solution is to ignore early keepalive messages
   before we're ready to encrypt our response, in the transition between
   SA_INIT and AUTH.  The peer should still accept one or more missed
   keepalives.

   OK mikeb@
VersionDeltaFile
1.151+3-2sbin/iked/ikev2.c
+3-21 files

OpenBSD/src dqW71ZKregress/sys/kern/pledge Makefile

   Link pledge sockopt regression tests to build.
VersionDeltaFile
1.6+2-1regress/sys/kern/pledge/Makefile
+2-11 files

OpenBSD/src jIX1Ikfsbin/iked ikev2.c

   Returning -1 in an imsg handler like ikev2_dispatch_cert aborts iked.

   -1 means "I didn't handle or know this imsg", it should not be used to
   indicate an application error in this context.

   OK mikeb@
VersionDeltaFile
1.150+2-2sbin/iked/ikev2.c
+2-21 files

OpenBSD/src oGGFVmAregress/sys/kern/pledge/sockopt sockopt.c Makefile

   Initial revision

OpenBSD/src FZW9fz5lib/libc/sys pledge.2

   Document the mcast pledge(2) as an addition to inet.
   OK deraadt@
VersionDeltaFile
1.41+8-2lib/libc/sys/pledge.2
+8-21 files

OpenBSD/src lW4ywU8sys/kern kern_pledge.c

   Allow the multicast ttl/hops and loop options with the mcast pledge.
   from Matthias Pitzl; OK deraadt@
VersionDeltaFile
1.200+5-1sys/kern/kern_pledge.c
+5-11 files

OpenBSD/src xbBJhg6usr.bin/mail edit.c

   Prevent edit'ing a message from corrupting the mailbox. In an mbox file
   every message is terminated by an empty line, so we have to make sure it
   is preserved. Otherwise the message is combined with the next one.

   joint effort with deraadt and millert
VersionDeltaFile
1.20+11-3usr.bin/mail/edit.c
+11-31 files

OpenBSD/src 75EBnrlsys/dev/pci envy.c

   Make set_params() return the rate the device is using. Fixes
   a wrong rate being reported when a unsupported rate was requested.
VersionDeltaFile
1.70+3-1sys/dev/pci/envy.c
+3-11 files

OpenBSD/src rKMbZydsys/dev audio.c

   Simplify rate/channels/bits bounds checking code. From
   Michael W. Bombardieri <mb at ii.net>. Thanks.
VersionDeltaFile
1.162+8-8sys/dev/audio.c
+8-81 files

OpenBSD/src MPIv0Tvusr.sbin/bgpd kroute.c

   For IPv6 pass prefix not nexthop as network for connected nexthops back to
   the RDE so that the code actually works.
   Problem found and reported by Pier Carlo Chiodi (pierky at pierky com)
   OK deraadt@
VersionDeltaFile
1.212+5-4usr.sbin/bgpd/kroute.c
+5-41 files

OpenBSD/src 5t0wpUgsys/dev/pci azalia_codec.c

   Add quirk for MacBook Pro 5,5. From Manav Rathi <mnvrth at gmail.com>.
   Thanks!
VersionDeltaFile
1.172+3-2sys/dev/pci/azalia_codec.c
+3-21 files

OpenBSD/src EyfZJeUusr.sbin/makefs/msdos mkfs_msdos.c

   add missing braces around a multi line if statement
   ok patrick@ deraadt@

OpenBSD/src Q6N0HNyusr.sbin/syslogd syslogd.c

   fix semicolon after if statement in currently uncalled code
   ok bluhm@ deraadt@
VersionDeltaFile
1.233+2-2usr.sbin/syslogd/syslogd.c
+2-21 files