OpenBSD 4.4 released (Nov 1, 2008)

This is a partial list of the major machine-independent changes (i.e., these are the changes people ask about most often). Machine specific changes have also been made, and are sometimes mentioned in the pages for the specific platforms.

There is a separate list of Changes to the ports collection.

Note: Problems for which patches exist are marked in red.

For changes in other releases, click below:
2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6,
3.7, 3.8, 3.9, 4.0, 4.1, 4.2, 4.3, 4.5, 4.6, 4.7, 4.8, 4.9, 5.0, 5.1, 5.2, 5.3, 5.4,
5.5, current.

Changes made between OpenBSD 4.3 and 4.4

• In gcc(1), unconditionally disable -fcse-skip-blocks at -O2 for m68k, causes bad code generation in some cases.
• Fix for trunk(4) panics and unbreak failover/loadbalance/broadcast status handling.
• Back out acpi(4) setpdc code and the code to allow EST to use acpicpu on amd64 machines.
• In re(4), add support for reading the MAC address for newer chipsets.
• Since newfs(8) is meant to be run on raw devices, it now refuses to run on block devices.
• Updated BIND to 9.4.2-P2.
• Added support in amd64 and i386 for using extended partitions by handling chained EBRs correctly.
• Fixed bsd.rd for the hppa and armish platforms.
• Compile inteldrm and radeondrm in i386 and amd64 GENERIC, but disabled.
• Prevent crash in the Mesa code if Delete is not defined for the given renderbuffer.
• Disabled pf(4) state key linking for now.
• Make sure the 802.11 layer drops unencrypted frames when WEP is on, or when WPA is on and RX protection for TA is enabled.
• Unconditionally force route priority to RTP_DEFAULT, effectively disabling route prio. Not all parts of the system deal with them correctly yet.
• Make iwn(4) wait much longer for clock stabilization.
• Updated sudo(8) to 1.6.9p17.
• Fix uvideo(4) crashes seen in MS LifeCam NX-6000 and internal laptop Sonix chipsets.
• Make sure systat(1) does not accept negative or zero delay values on the command line.
• Added ath(4) on sparc64 GENERIC kernels.
• Added wi(4) on PCI on sgi GENERIC kernels.
• Added Sierra Wireless MC5725 to the list of supported umsm(4) devices.
• Enabled ix(4) to the amd64 GENERIC kernels.
• Fix potential division by zero in the trunk(4) driver.
• Stability fixes for the radeon(4) driver, mostly related to VBLANK interrupt handling.
• Prevent memory leak for IPv6 output descriptors in the pcb code when detaching.
• Prevent sparc64 Tadpole SPARCLE machines from using DMA in the pciide code and fall back to PIO instead.
• Updated xf86-video-mga to 1.4.9, xf86-video-nv to 2.1.10, xf86-video-neomagic to 1.2.1 and xf86-video-vmware to 10.16.4.
• Added stricter checking for values controlling loops and memory allocations in the i915 and Radeon DRM code.
• Allow port distfiles to be stored as by_digest/sha1/di/digest to prevent distfiles directories exceeding the maximum number of links.
• Fix for record ring pointers when audio pauses or overruns.
• Try harder on sparc64 to find the aux port in pckbd(4). Tadpole SPARCLE needs it.
• Add rebuild mark to softraid(4) to restart a rebuild upon clean shutdowns.
• Fix FIFO overruns in ath(4) for PCI-E chipsets.
• Make sure route message length is properly aligned to the next natural boundary.
• Update the timezone data to tzdata2008e and code to tzcode2008e.
• On m88k-based machines, disable delay slots in the locore 88110-specific parts.
• In the network route code, fix tracking of RTF_MPATH.
• Added Option GlobeSurfer ICON7.2 and Option GlobeTrotter HDSPA ICON 225 to the list of supported umsm(4) devices.
• New implementation of malloc(3) from otto@.
• Increase the size of the TSB on large memory sparc64 machines.
• Extend the malo(4) device firmware load timeout from 50000us to 500000us.
• Make sure uvideo(4) fails properly if the image resolution changes on the fly and exceeds the buffer size.
• New target for ports makefiles "update-or-install".
• Add -b switch to locate(1) for matching on the last part of the path only.
• Fix for alpha PIE executables that sometimes could end up mapped on, or above, the stack.
• Make RAMDISK kernels work on sparc64 T2 systems by switching early to a temporary stack.
• Make sure libstdc++ does not undefine C99 math macros if !_GLIBCPP_USE_C99.
• Add code for alpha to decode machine checks on Avanti, providing a description of the problem.
• Make sure we clear the pf(4) state key pointer in the mbuf header to prevent ipsec encapsulated state to be linked to the decapsulated one.
• Implemented various C99 functions like isnormal(3) and isnan(3) in libc.
• Fix for occasional double free in getpwent(3).
• Fix ps(1) output problem on hppa triggered by faulty cache aliasing boundary sizes.
• Fix stack abuse in the ksh(1) "time" command.
• Make relayd(8) validate packet length in debug dns packet logging before printing the header.
• Prevent sshd(8) from printing options that have been compile-time disabled when running in config test mode.
• Added dynamic IPv6-to-IPv4 and IPv4-to-IPv6 translation in relayd(8).
• Added proper interrupt handling for alpha PCI devices behind bridges.
• Added some more C99 definitions to math.h.
• Implemented a method to fetch scsi device "devid".
• Implemented the cpu_yield hypervisor call for sparc64, used in the idle loop of SUN4V-based machines. Huge performance boost when most of the CPUs are idle.
• Fix timekeeping anomalies on Sparc64 T1000 machines by moving smp_signotify() from IPL_NONE to IPL_SOFTINT.
• Move Huawei E618 and E620 from ubsa(4) to umsm(4).
• Bug fix for pow() and powf().
• More accurate algorithm for tan() in libm.
• Provide a timecounter for sparc64 based on the UltraSPARC IIe STICK logic.
• Better metadata handling in softraid(4).
• Make alpha read SRM hints for the bottom 4 PCI slots of an AlphaServer 1000A.
• Added acx(4) at cardbus(4) for sparc64 GENERIC kernels.
• Introduced a new 'parent' keyword in relayd(8) to inherit the state from another host with the specified Id.
• Added ohci(4) and ehci(4) at cardbus(4) for sparc64 GENERIC kernels.
• Add support in the kernel to recognize, load and execute position independent executables and randomize the load address. Not for all arches yet.
• Fix for isp(4) firmware loading, now works again on sparc64.
• In relayd(8), use getaddrinfo/getnameinfo instead of inet_pton/inet_ntop to allow specifying and printing the IPv6 scope identifier.
• Add -E flag and 'skipempty' option to mail(1) to skip sending messages with empty bodies.
• Add prototype for infnan in math.h so it returns correct values.
• Fix relayd(8) NAT lookup for IPv6.
• Link UDP PCBs to pf(4) states, same as for TCP.
• On bge(4), enable the read DMA engine's PCI read request long burst mode for PCIe chips. Resolves poor TX performance.
• Add a timecounter on sparc64, based on the $sys_tick register, and use it on machines that have it.
• Fix re(4) so newer PCIe devices work (8168C*/8102*).
• Updated xenocara ati driver to 6.9.0.
• Make sparc64 IV processors only attach the first thread of every core for now.
• Imported the openchrome video driver 0.2.902 into xenocara.
• Add support for the Marvell 88E8016 PHY in eephy(4).
• Provide sparc64 Fujitsu based SPARC-IV machines with a core(4) device for each core and thread and attach cpu(4) to them.
• Make libc handle sign of negative zero in the printf code.
• Add support in the sparc64 platform code for Fujitsu SPARC-IV CPUs.
• Make pf(4) NAT code also check source port allocation against net.inet.(tcp|udp).baddynamic lists.
• Fix leak in pf(4) in the NAT case where the second state key needs to be freed manually in case of failure.
• Make disklabel(8) read the vendor flag from ASCII disklabel.
• Make the rc(8) boot script populate the baddynamic list of ports with the contents of /etc/services to avoid well-known ports.
• Make the sysctls net.inet.(tcp|udp).baddynamic source port cover the entire 65536 port space.
• Updated BIND to 9.4.2-P1.
• Make relayd(8) use the non-repeating shuffle instead of arc4random() when binding sockets for DNS requests.
• Update relayd(8) dns code to open new UDP socket to send the forwarded dns requests instead of sending from the server socket. Fixes some limitations and allows for randomizations.
• Add support in ftp(1) for recursive mget transfers.
• Fixed really old bug in yacc(1) when reducing a rule which has an empty right hand side.
• Fix crash in bgpd(8) when trying to print an int as a string under certain circumstances.
• Initial version of vmt(4), a kernel level implementation of the vmware tools. Only provides the hosts clock as a timedelta sensor so far.
• Updated isp(4) microcode to 3.03.19, prepares for major isp(4) code upgrade.
• Extended sbbc(4) for sparc64 to provide a console for the v1280 machines.
• Update time zone data files to tzdata2008d.
• Add AGP and pchb(4) hostbridge support for Intel 82945GME chipsets.
• Fix pthreads(3) when using application-specified thread stacks.
• During installation, make 'dhcp' the initial default answer during network configuration.
• Added sbbc(4), a driver for the BootBus controller for sparc64 and ssm(4), a driver for the scalable shared memory device.
• Brought in various fixes to make V1280 a supported sparc64 model.
• In udcf(4), add support for the new Expert mouseCLOCK USB II.
• Make ksh(1) accept \$ PS1 when started as root, and refuse to import a PS1 unless it contains a '#' character.
• Teach sysmerge(8) how to retrieve etc*/xetc*.tgz files from FTP/HTTP paths using ftp(1).
• Fix httpd(8) proxy module in SSL mode.
• Clean up parser in pkg_add(1), also dropping the restriction that URLs need to end in a slash.
• Make ssh(1) support negation of groups in a "Match group" block.
• Fix panics seen in pf_state_key_attach for pf(4).
• Updated the xenocara radeondrm and inteldrm driver.
• Add rum(4) to macppc RAMDISK kernels.
• Link pf(4) states with TCP pcbs, and vice versa. Speeds up lookups.
• Added softraid to amd64 and i386 RAMDISK_CD kernels.
• Updated the page daemon to modern limits and rework the logic in it.
• Added bio and bioctl to sparc RAMDISK kernels.
• Added initial version of acpivideo for acpi(4).
• Enable FFS2 on hppa RAMDISK kernel also.
• Increased the ephemeral key size in ssh(1) protocol 1 from 768 to 1024 bits.
• Moved OpenBSD to 4.4-beta.
• In ipsec.conf(5), if rules contain a hostname instead of an address, use the list of all possible addresses from DNS and not only the first one.
• Added bio and bioctl(8) to macppc and hppa RAMDISK kernels.
• Enable FFS2 on most larger RAMDISK media.
• Even stricter probing for AMD Geode CPUs in the amdmsr(4) code.
• Allow cdio(1) in TAO mode to set the write speed.
• Fixed three-state boolean logic in sendmail(8).
• Added re(4) at cardbus? to amd64 GENERIC kernels.
• Updated xf86-video-intel to version 2.3.2.
• Added a usb2.0 to usb1.1 handover method for devices which only work in 1.1 mode but where usb2.0 would attach it.
• Reenabled branch prediction on swift CPUs for sparc.
• For opencvs, make sure we only check out files again if a sticky tag was in fact set when the user supplies -A.
• Make sure we clear the swap encryption keys before dumping a kernel image.
• Hook up arc(4) blinkenleds to bioctl(8).
• Added uvideo(4) to alpha, macppc and sparc64 GENERIC kernels.
• Plugged memory leak in rcs(1) in the rcs_rev_getlines() function.
• Added bio and bioctl(8) to amd64 and i386 RAMDISK_CD, to zaurus and sgi RAMDISK and to alpha RAMDISKBIG kernels.
• Initial import of ypldap(8), a drop-in replacement for ypserv to glue in an LDAP directory for get{pw,gr}ent family of functions.
• Moved ssh(1) Fingerprint Visualization from CheckHostIP to an own config option named VisualHostKey.
• Make ssh(1) test the primes in /etc/moduli better.
• Allow sftp(1) chmod(2) operations to set set[ug]id and sticky bits. Does not apply to transfers, only chmod commands.
• Fix sticky-address on pf(4) rdr.
• Added support for Intel G35 graphics.
• In disklabel(8) interactive mode, always suggest offsets and sizes inside the OpenBSD area. Added an 'l' command to print headers only.
• Various improvements in ftp(1), including better handling of resumes.
• Fix in bootloader to skip CHS checks if LBA is found and OK.
• Added auglx(4), an audio(4) driver for the AC'97 audio codec found on some AMD Geode LX systems with CS5536 companion chips.
• Allow i386 and amd64 to boot from extended DOS partitions.
• Teach ldd(1) how to handle PIE executables.
• Implemented time-based rekeying for idgen32.
• RX chain corruption fix for bnx(4) in low memory situations.
• Disallow processes from mapping their own page 0.
• Implemented reentrant functions getpwnam_r() and getpwuid_r() in libc.
• Make cdio(1) automatically distinguish between CD-DA tracks and WAVE audio files when writing them in TAO mode.
• Updated freetype to 2.3.6. Fixes CVS-2008-1806,1807 and 1808.
• Added Marvell Yukon devices based on 88E8040T chips to the list of supported msk(4) network cards.
• Reenabled amdmsr, now it properly checks for AMD Geode LX CPUs with a graphics processor.
• Prevent wc(1) from printing spurious whitespace when reading from stdin.
• Make printf(1) ignore double dash even though it does not take any options itself.
• Added ix(4) to amd64 and i386 GENERIC kernels, enabled on i386 only.
• Fixes for vblank in the DRM code.
• Updated xf86-video-apm to 1.2.0.
• Updated xinit(1) to 1.1.0.
• Removed lbxproxy, xphelloworld, xplsprinters and xpreharshprinterlist.
• Fix segmentation fault in mg(1) when writing to an alternate name.
• Updated the Xext code for MIT-SHM, fixes CVE-2008-1379.
• Unbreak OpenCVS diff for newly added files.
• Fix cwm(1) crash when compiled with -g.
• Fix ftp(1) transfer interrupting when confirmrest mode is used.
• Prevent ssh(1) from calling isatty() on a pty master, prevents hang on exit on some non-openbsd platforms.
• Make MaxAuthTries available inside Match blocks in sshd_config(5).
• Disabled amdmsr(4) until a way to only make it work on Geode CPUs is found.
• Reenabled ipmi(4) again on amd64 and i386 GENERIC kernels.
• Allow bgpd(8) to delete more than one community per filter rule.
• Make powerbooks and ibooks default to adb keyboards for console.
• Added 802.3ad LACP support in trunk(4).
• Make the amd64 platform capable of getting EST CPU operating points from ACPI when running on Intel CPUs.
• Initial version of rpc.statd(8).
• Make ftp(1) accept empty passwords in URLs.
• Make OpenCVS handle addition of new files in branches.
• Make rpc.lockd(8) handle filehandle comparisons between NFSv2 and v3.
• Make uvideo(4) notify the user that attaching to echi(4) wont work.
• Better bounds checks on RAW_PART devices so we never access past the end of the device.
• Updated xserver to 1.4.2 in the xenocara tree.
• Added xf86-video-geode driver to the xserver.
• Add support in carp(4) to specify carppeer, the unicast address of the remote carp peer.
• Initial version of amdmsr(4), a driver to access model specific registers on AMD Geode CPUs.
• Make sure each nfs iod can enqueue more than one asynchio, and limit the amount of buffer cache it is allowed to a sensible amount. Improves write performance due to less syncing.
• Improved the mg(1) undo code.
• Make OpenCVS handle RCS files without a head revision set.
• Added support in OpenCVS for sticky date set in CVS/Tag and CVS/Entries per directory.
• Two performance improvements in OpenCVS, one by reusing the last opened CVS/Entries until we switch directory, and switching writes to fwrite(3) instead of line-by-line.
• Allow ath(4) to detach cleanly when attaching via PCI.
• Add cmp(4) to sparc64 RAMDISK kernels too.
• Updated bioctl(8) and softraid(4) to enable softraid crypto. Still experimental!
• Fix ldscripts for i386 when using -pie.
• Make carp(4) not log state transitions to or from INIT by default.
• Add support in bge(4) and bnx(4) for fiber PHY using BCM5714/5780 and BCM5706/5708 adapters.
• Implemented NFS file locking in rpc.lockd(8).
• Implemented xdr_int64_t and xdr_u_int64_t to the rpc xdr(3) suite.
• Added strtof(3) to libc.
• Update xenocara xfs(1) to 1.0.8.
• Rework bridge(4) mac address selection when using Spanning Tree Protocol.
• Added D-Link DWA-111 to the list of supported rum(4) devices.
• Updated xenocara showfont to 1.0.2.
• Make ssh(1) refuse to read ~/.shosts or ~/.ssh/authorized_keys that are not regular files.
• Added support in sysmerge(8) for ignoring files and directories using optional /etc/sysmerge.ignore file.
• Make ssh(1) fall back to creating a new TCP session for most multiplexing errors.
• Make amd64 and i386 detect Intel's SMX, Safer Mode Extensions.
• New display mode for systat(1), "pftop".
• Added support for malo(4) and ep(4) at pcmcia(4) and also re(4), ral(4) and xl(4) at cardbus(4) for sparc64 GENERIC kernels.
• Enabled uvideo(4) on i386 GENERIC kernels.
• Added support in tcpbench(1) for opening more than one concurrent tcp session.
• Some preparations in ld.so(1) for PIE executable support.
• Enabled uvideo(4) on amd64 GENERIC kernels.
• Added statistics in nfsstat(1) to show how many async to sync changes are done.
• Better dsdt AML parsing for acpi(4).
• Improved privsep support for X11/DRI.
• Fix synproxy in pf(4).
• Make systat in "iostat" mode show buffer cache statistics too.
• Make OpenCVS handle symbol names that are also RCS tokens.
• Prevent NULL dereference in ELF loader.
• Fix libm compiles on gcc2 architectures.
• Added com(4) and wdc(4) at pcmcia(4) for sparc64 GENERIC kernels.
• Fix egress group matching for IPv4.
• Added dc(4) on cardbus(4) for sparc64 GENERIC kernels.
• Plug small memory leak in ssh(1) multiplex escape char handling.
• In OpenCVS, completely remove the need for TMP_DIR when running checkout.
• Make sure asynchronous I/O in NFS fail correctly if all nfs iods are busy and downgrade them to synchronous ones.
• Make ssh(1) display the key type as a caption in the frame of the random-art screen.
• Do not look for foreign ELF binaries unless emulation is enabled.
• Remove race in ssh(1) by maintaining a queue of outstanding global requests we expect replies to, and use it to verify success for remote forward.
• In ssh(1), enable ~ escapes for multiplex slave sessions.
• Introduced a basic c-mode in mg(1).
• Add "delete volume" functionality to bioctl(8).
• Make ldattach(8) flush stdout after printing the pty name.
• Update isp(4) QLogic 2200 firmware to 2.02.06.
• Added ssh(1) fingerprint ASCII visualization.
• Updated libX11 to 1.1.4 in the xenocara source tree.
• Updated the math(3) libraries in regard of gamma/lgamma and tgamma() functions.
• Added a bunch of new ciss(4) devices.
• Added support in relayd(8) for transparent L7 forwarding in relays.
• Fix in the xserver DBE extension.
• Fixes in xenocara for various overflows, CVE-2008-1377,1379 and 2360-2362.
• Added vlan support to pcap(3).
• Updated the DRM code in xenocara.
• Enabled memconfig(8) on the amd64 platform.
• Synchronized the amd64 MTRR API with i386, and enabled it on GENERIC kernels.
• Make bgpd(8) independent from system time changes by using monotime.
• For sparc64, use the prom address to map clock(4) at ebus(4) if available.
• Improved pf(4) forwarding performance by removing need for a state lookup on outbound packets.
• Added "tar -j" option to launch bzip2 for compress/uncompress operations.
• Initial version of softraid(4) crypto support. Disabled for now.
• Fixed panic in bwi(4).
• Added clear-mark function to mg(1).
• Reduce memory usage in fsck_ffs(8) by about 20% by packing state and type of an inode in a single byte.
• Make ssh(1) support CIDR address matching in .ssh/authorized_keys from="..." stanzas.
• Added NFS cache improvements.
• Added AMD Geode LX support in xenocara.
• Add no-more-sessions extension to ssh(1) to indicate it will never request another session.
• Increased isakmpd(8) fifo command buffer size to accommodate IPv6 addresses.
• Make relayd(8) use sloppy pf(4) state keeping for routed sessions (Direct Server Return).
• Make pf(4) counters on table addresses optional, and disabled by default. Saves about 40% memory if counters are not being used.
• Fixed buffer cache pending read statistics.
• Fixed memory leak in usbf(4) code.
• Made signal permission checks POSIX compliant.
• In OpenCVS, make sure we properly inherit file permissions.
• Revamped the buffer cache.
• Shrink pf(4) state structure by collapsing two 8 bit ints into one.
• Make ldattach(8) sleep if the slave device of the pty(4) is not connected.
• Fix isakmpd(8) so it has the same behaviour for IPv6 and IPv4.
• Do not ask "override?" in rm(1) if the access fails for other reasons than EACCESS.
• Allow emulated linux binaries to call setsockopt(,TCPNODELAY,) on a AF_LOCAL socket.
• Fix IPv4 in IPv6 IPSec encapsulation issue.
• Added /dev/video* on the amd64 platform.
• Added extended test mode (-T) to ssh(1).
• Added -O option to rtsold(8) to run an external script when the "other configuration" flag is found in the RA message.
• Fix interrupt handling in sd(4) for Iomega Jazz drives on ahc(4) and others.
• In pf(4), implement a sloppy tcpstate tracker which does not look at sequence numbers at all.
• In sshd_config, support full CIDR address matching in Match blocks, with support for negation and fallback to classic wildcard matching.
• In ntpd(8), when using IPv6 addresses, return the first 32 bits of the MD5 hash of the address as ref ID.
• Update ntpd(8) to respect RFC4330 when run as a secondary server.
• Make amd64 machines be able to use more than 4G ram, and crank the MAXDSIZ to allow allocations/mmap() up to 8G.
• New trigger framework in OpenCVS.
• Added cmp(4) to sparc64, a dummy driver to make attaching CMT CPUs easier.
• Update access(2) semantics regarding X_OK and the superuser.
• Make gcc on alpha use -mieee by default. Fixes many FPE problems.
• Drop root privileges in rtadvd(8).
• Introduced an idgen32(9) facility to generate unpredictable 32 bit numbers and use them for IPv6 IDs and NFS server/client XIDs.
• Make netstart(8) ensure the hostname.if(5) files have the correct permissions on each boot.
• Better merge conflict handling in OpenCVS.
• Deprecated slattach(8) and nmeaattach(8) in favor of ldattach(8).
• Improved superblock location code in fsck_ffs(8) since newfs(8) creates alternate superblocks in different locations.
• Better wireless support in rtsold(8).
• Add -p option to ldattach(8) to pass data received from the device to the master device of a pty(4) pair.
• Prevent ntpd(8) from leaking memory on refid production failure.
• Fix Sun Fire V490 boot delay.
• In ntpd(8), allow outgoing replies from sensor-driven servers to have a user-configurable reference ID, eg. "GPS" or "DCF".
• Fix segmentation fault in OpenCVS annotate code.
• Implemented an AES XTS mode in the crypto(9) framework.
• Fix 64-bit issue in ndp(8).
• For sendmail(8), disable ident queries, crank max queue children in bulk config and use the C flag in the bulk config file.
• Make cdio(1) figure out if media supports TAO or blanking.
• When rtadvd(8) receives SIGUSR1, send debug output to syslog instead of a file.
• Add ability in cdio(1) to determine media capabilities.
• Added IODATA WN-G54/US and MELCO WLI-U2-KAMG54 to the list of supported uath(4) devices.
• Make sftp(1) client store statvfs replies in wire format.
• Adapt uvideo(4) mmap frame buffer to a ring buffer.
• Initial import of ix(4), a driver for the Intel 82598 PCI-Express 10 Gig Ethernet Adapter.
• Fix suspend/hibernate issues in rt2860-based devices.
• In ntpd(8), do not ignore a slightly unresponsive server for an hour, 5 minutes is enough.
• When adding PMTU related routes to the table, inherit the priority from the parent.
• Fixed NULL pointer dereference in pf(4), affected IPv6 only.
• For ixgb(4), sync the TX ring and post new packets to the chip once per call to the start routine instead of once per packet.
• Fix fault in OpenCVS when running status -v on non-existing files.
• Prevent segmentation fault in ed(1) when receiving a signal while being in getpass().
• Allocate ipq's for fragment reassembly in the ip_input code from a pool instead of using malloc().
• For i386 and amd64, make serial console on non-primary ports work.
• Make OpenCVS properly check passed tags for validity before attempting the import and allow multiple release tags.
• Make et(4) devices detachable.
• Removed support for dhcpd.interfaces in /etc/rc and deprecated the file /etc/dhcpd.interfaces.
• Fix memory leaks in OpenCVS in the directory tag handling code.
• In dumpfs(8), fix generated size for -m.
• Fix ld.so(1) prebind to not leak file descriptors.
• Add code to make UltraSPARC-IV work.
• Add disabled com4 device in i386 GENERIC for Fujitsu Stylistic Touchscreen devices.
• In sftp(1), increase statvfs member fsid to 64 bits.
• Add acphy/mtdphy/luphy and sqphy which are used by dc(4), hme(4) and ne(4) to hppa GENERIC and RAMDISK kernels.
• Add baudrate handling for bge(4) fiber boards using the TBI interface.
• Add link state/baudrate handling to ti(4).
• Stop spurious "got link" message from dhclient(8).
• Moved the Apache manual from /var/www/htdocs/manual/ in the etcXX file set to /usr/share/doc/html/httpd/ in the miscXX file set.
• Remove hardcoded route priority in arplookup.
• For acpi(4), add _?RS methods evaluation to obtain additional heuristics and setting interrupt routing.
• For rthreads, make fork(2)/vfork(2) wrapper functions to reset state in the child process. Also protect libc/ld.so(1) critical areas during those calls and add pthread_atfork(3) implementation.
• Added first bits for supporting mmap(2) in uvideo(4).
• For i386 and amd64, allow pchb(4) to find additional non-coherent HyperTransport links.
• Prevent cwm(1) from trying to exec a null char.
• Make cwm(1) honor termpath and lockpath if given in the cwmrc(5) file.
• Beginning to remove OLF support.
• If acpidump(8) is given -o, do not disassemble the AML so you can get the dump if the disassembler crashes.
• Extend awk(1) with bitwise operations.
• Fix bias for upper_bounds in really large ranges for the random number generators. Nothing in the source tree yet requests such ranges.
• Make DRM code for X.org use D_CLONE so per-open data works. Preparation for privilege separation.
• In the pthreads(3) library, do not grab the file descriptor read lock for getsockopt(2), setsockopt(2), getpeername(2) or getsockname(2). Prevents deadlocks if another thread already holds that lock.
• Allow aucat(1) to play/record from input-only or output-only devices.
• Reduced ixgb(4) and em(4) code size by moving periodic debug output inside #ifdefs.
• Revert xenocara inputproto to 1.4.2.1 again.
• Prevent aucat(1) from being suspended from the tty.
• Make aucat(1) over- and underrun behaviour user selectable per stream.
• Make aucat(1) handle over- and underruns without disturbing other streams.
• Shrink scsi_mode_sense to 254 bytes to please ahci. Makes some SATA tapes drives work.
• Fix uvm swapencrypt for the last 128 page area.
• Make acpithinkpad(4) ignore the brightness changed event.
• In uftdi(4), add some ELV Elektronik based devices.
• Move amd64 interrupt setup before ddb setup on the amd64 platform to allow boot -d from UKC.
• Fix synproxy breakage in pf(4) introduced with the new state tables.
• Fix kernel freeze from umsm(4) when unplugging an active device.
• Fix double free in tail(1) which can happen if the last line has no newline.
• Added PRIMEPOWER 650/850 to the list of supported sparc64 machines.
• New ACPI parser for i386/amd64.
• Make sure sparc/sparc64 isp(4) use the same SCSI initiator ID as the prom.
• In sysmerge(8), make it possible to merge files from xetcXX.tgz only.
• Fix acx(4) TX performance issue in HostAP mode by using 1MBit/s as beacon sending rate.
• Updated Mesa to 7.0.3 in the xenocara tree.
• Removed ext2fs from i386 RAMDISK B.
• Make sure cdio(1) will not try to blank a CD twice.
• Fix NULL dereference in OpenCVS logging code and segfault in keyword expansion code if no RCS file is available.
• Added support of diff -D in OpenCVS.
• Make sure we don't overflow the static buffer in the uvideo(4).
• Add support for PCA9552 LED dimmer in the pcaled(4) driver.
• Rewrote pf(4) state logic.
• Enabled hme(4) in hppa GENERIC and RAMDISK kernels.
• For ln(1), do not print a warning if source and target already point to the same inode when given -f.
• Removed limit in OpenCVS on arguments on command line or sent by client.
• Add support in umsm(4) for Option GlobeTrotter 3G+ cards.
• Fix aucat(1) resume after suspend.
• For mpi(4), only look up initiator ID on Sparc64.
• Added DRM support to amd64 platform also.
• Make netbt code compile again.
• Updated libiberty to 2.17.1.
• Do not allocate fixed frame size in uvideo(4), and skip too large frames.
• Updated time zone data to tzdata2008c.
• Fix in pf(4) for flushing of count of states.
• Added ZyXEL G-202 to the list of supported zyd(4) devices.
• Fix bringing down a socppc tsec(4) interface.
• Make the scsi subsystem print out the initiator ID.
• In pkg_add(1), remove nlist optimization, since some ftp servers have issues with NLIST *.tgz.
• Added tsec(4) to socppc RAMDISK kernels.
• Reorganized some fields in fsck_ffs(8) inodesc and inoinfo structs to reduce size on some archs.
• Added -q for quiet to aucat(1).
• Enable cmpci(4) and eso(4) on macppc GENERIC kernels.
• Make et(4) count output packets.
• In dhclient(8), if an interface has no link at startup, try to force it up.
• Make sure dhcpd(8) does not error out if dhcpd-sync does not exist in the services(5) file, and no sync options were specified.
• Fix rdistd(8) with regard to rdisting symbolic links.
• Fix TSEC2 RX interrupts on socppc.
• Updated xenocara inputproto to 1.4.3.
• Move cmpci(4)and eso(4) out of the alpha GENERIC untested section.
• Enabled emu(4) on sparc64 GENERIC kernel.
• Enable userland to read(2) video streams from /dev/video.
• Updated libpciaccess to 0.10.2, xkbfile to 1.0.5, libtrans to 1.2 and printproto to 1.0.4.
• Updated Xfont to 1.3.2, Xinerama to 1.0.3 and Xv to 1.0.4.
• For the socppc tsec(4) devices, configure the media when bringing up an interface and use the mac address passed by the firmware.
• Added IPv6 support to identd(8) when run in standalone mode.
• Added Schneider & Koch SK-9821/SK-9843 to the list of supported sk(4) devices.
• Added some Fujitsu ethernet cards (PW008GE5 and GE4) that actually are bge(4).
• Update sem_otime on semop(2).
• Prevent alpha ramdisks from adding swap space automatically.
• Fixed Ctrl-T status report on some ttys without carrier.
• Fixed situation in NFS when TCP mounts timeout and processes get hung in the reconnect code since they do not have enough privileges.
• Removed USER_LDT code from the amd64 platform.
• Removed old awi(4) driver.
• Make GENERIC.MP work on sun4u CPUs too.
• Make OpenCVS properly pass the directory tag of parent directories into new subdirectories.
• In aucat(1), add support for recording full-duplex, format conversions and resampling on the fly, mixing multiple inputs of different formats, upto 16 channels and more linear encodings.
• Bumped spamd sync protocol, fixes sending ip addresses being sent in host byte order, and sub-headers in the frame were not natively aligned for 64-bit arches.
• Remove ises(4) from alpha and amd64 GENERIC kernels.
• Make OpenRCS/CVS correctly deal with non-zero depths specified in rcsnum_cmp().
• Added MCP77,79 and 7B SMBus controllers to nviic(4).
• Add Fujitsu PRIMEPOWER250/450 ethernet to the list of supported bge(4) devices.
• Updated the xf86-video-intel driver to 2.3.1 in the xenocara tree.
• Speedup for SH-based machines in the cache handing code.
• Initial code for supporting Sun4u machines with Fujitsus SPARC64-V CPU.
• Switched the i386 platform from pccom(4) to com(4).
• Make cwm(1) menu_filter handle mouse movement too, enables keyboard search dialogues to be manipulated with the mouse.
• Implemented a -U option for httpd(8), to set the default address family to PF_UNSPEC for ambiguous directives.
• Added multicast support to lii(4).
• Fix ksh(1) cast pointer arithmetic to correctly handle underflows.
• Added tsec(4), a driver for the socppc Three Speed Ethernet Controller.
• Removed libc recalloc(3) call.
• Fix httpd(8) compiles on gcc 2.x architectures.
• Fix usb memory leak when there is no power source.
• Add support in ssh-keygen(1) for -l in combination with -F to search for a known host and display its fingerprint.
• Fix ssh(1) sending tty modes when stdin is not a tty.
• Fix in cwm(1) for alt-tabbing when programs steal key events.
• Added the SO_BINDANY socket option for IPv6 also.
• In the usb subsystem, try a few times before giving up while getting the device descriptor.
• Implemented keyboard binding in cwm(1) for group toggling.
• Removed en(4) from alpha RAMDISKBIG kernels.
• Fix for ssh(1) protocol keepalive timeouts.
• Fixed small memory leaks in cwm(1).
• In umass(4), avoid leaking pipes in error cases.
• Fix glass console on the sgi platform.
• Added full branch support in OpenCVS.
• Make spamdb(8) check for an @ sign when given -t or -T.
• In sppp(4), initialize timeouts only once, not everytime they are started.
• In relayd(8), clear source nodes on table changes in sticky mode.
• In uvideo(4), fix kernel crash when device gets detached, and make sure we free the sample buffer on detach.
• Allow ntpd(8) to step the time at startup, regardless of how large the offset is.
• Added support in pf(4) for diverting IPv6 traffic also.
• In ehci(4), avoid clearing the port enable bit when bringing it out of reset.
• Added cmpci(4) and eap(4) to Sparc64 GENERIC kernels.
• Added a non-interactive mode to sysmerge(8).
• Allow thinkpad ACPI button events to change the volume.
• In the NFS code, make sure we do not grab the receive lock if the reply has already been received while we slept.
• Prevented a race condition in rdistd(8).
• In st(4), fix device reference counting.
• In the umsm(4) driver, if we find a E220 device in umass mode, send the magic command to enable the serial portions of the device.
• Fixed a crash in the libc hash code when iterating over a hash and removing its elements.
• Added a few more macros to the tree(3) suite.
• Fix segfault in the "cvs admin" command for both GNU cvs and OpenCVS.
• Plugged a memory leak in rcs(1) and (open)cvs for rcs_delta_stats.
• Added Buffalo LUA-U2-GT to the list of supported axe(4) devices.
• More protection against mbuf pool corruption in the IPv6 input code.
• Remove limit of 128 arguments on the command line for OpenRCS.
• Initial import of the socppc, a port of OpenBSD for the Thecus N1200, and potentially other PowerPC SoC platforms.
• Various file descriptor and pipe fixes in ssh(1).
• Added support in pfctl(8) to kill states by rule label or state id.
• Added support for NTT DoCoMo A2502 to the umsm(4) driver.
• For umsm(4), increase buffer size to 4k and make use of interrupt endpoint to increase responsiveness.
• Added support for IPv6 in httpd(8) while keeping the default at IPv4.
• Fix for bge(4) link status change handling.
• Make the sd(4) code lock in removable media while determining the disk parameters.
• Make dhclient(8) not give up when the link is not available on startup, also renew the lease whenever the link was lost and becomes active again.
• Make ssh(1) port forwarding code try additional addresses when connecting to a destination whose DNS name resolves to more than one address.
• Added the SO_BINDANY socket option from BSD/OS.
• Import of tcpbench(1), a small TCP benchmarking tool.
• Fix when detaching tape drives.
• Added support for Microsoft Wireless Intellimouse and Notebook Optical Mouse 3000 Model 1049 in the ums(4) driver.
• Make the maximum number of ssh(1) sessions run-time controllable via MaxSessions in sshd_config(5).
• Implemented a channel success/failure status confirmation callback in ssh(1).
• Reorder elements in the pf_state_peer struct to avoid wasting memory. Saves 8 bytes per entry on 64-bit machines.
• Make ssh(1) avoid extra malloc/copy/free when receiving data over the net. Gives up to 10% speedup for localhost scp.
• Updated file(1) to 4.21.
• Correct the duration in cdio(1) by taking the pre-gap into account.
• Enable TX mitigation when putting packets on the wire.
• Add synchronization support to dhcpd(8).
• Removed routed(8), ripd(8) will replace it.
• In spamd(8), check if the received buffer of a sync element is big enough to hold the header with length field.
• Make pf(4) scrub packets based on tags.
• Allow pf(4) to set TOS with scrub.
• Allow virtual interfaces to add to the random pool.
• In ssh(1), enable the AllowAgentForwarding in sshd_config(5) by default.
• Implemented routing priorities, to be used to resolve conflicts from various routing daemons.
• Removed the ises(4) driver.
• Added an alternative "route-to" mode to relayd(8). A first step towards support for "DSR", direct server return.
• Map i810 on the same PCI BAR as inteldrm.
• Initial version of an mpe(4) interface, the "MPLS Provider Edge".
• Add support for the Apple USB A1277 Ethernet adapter in the axe(4) driver.
• Make pf(4) kill an existing state if we get a SYN for a state that has been closed from both sides.
• Make msts(4) return clock status as a signal sensor.
• Change pax(1) behaviour when running in -u mode and no files are being updated due to them not changing, to exit with a success return code.
• Allow nc(1) to set TCP send and receive buffer sizes.
• In pfctl(8), add a counter to record how many states have been created by a rule.
• Endian fix route(8) sockaddr labels.
• Prevent possible int overflow in the pf(4) ioctl code.
• Make nmea(4) provide a signal sensor that reflects the status of the receiver like other sensors.
• Prevent ndp(8) from installing a /128 net route for proxy NDP entries.
• For relayd(8), put relay sockets in non blocking mode too.
• Added Huawei E220 to the list of supported umsm(4) devices.
• Convert some wscons keyboard layouts to correct X names.
• Updated sendmail(8) to 8.14.3.
• Fix SGI memory detection if memory sticks are not populated in decreasing sizes.
• Make PowerPC SMP machines not grab biglock for syscalls marked SY_NOLOCK.
• For M88k SMP, make sure we grab the biglock unconditionally when system calls go through systrace(4).
• Fixes in bgpd(8) for the RIB eligibility logic and correctly mask looping paths.
• Plugged potential mbuf leaks in the NFS syscall code.
• Fix the socket option SO_TIMESTAMP.
• Update libevent to 1.3e, retaining local changes.
• Make libc readdir/telldir code more careful about entries deleted after a seekdir().
• Make hp300 recognize different built-in frame buffers 362 and 382.
• Updated sysmerge(8) to handle xetcXX.tgz support and cleanups.
• More amd64 serial console fixes.
• Make ssh-scan(1) default to RSA protocol 2 key, instead of RSA1.
• Make sure we drop all MPLS packets when MPLS is not enabled.
• Enabled building of DRI modules and Mesa drivers by default on amd64 and i386 for X.org.
• Improved SIS 96x chip detection in pciide(4), and added some 964/965 devices to the list of supported chipsets.
• Enabled km(4) on amd64 and i386 GENERIC kernels.
• New driver km(4) for sensors on the AMD Phenom and Opteron Barcelona CPUs.
• Spin up secondary cpu on more ppc systems.
• In the vesa(4) framebuffer code, do not alter mode parameter.
• It is now possible to enter static MPLS routes into the kernel with route(8).
• Plug three memory leaks in dc(1).
• Added PCI ids for the AMD64 Phenom/Opteron 8300 series and Griffin.
• Various cddb fixes to cdio(1).
• Added an acpithinkpad(4) driver for IBM/Lenovo laptops.
• For hppa, add a gecko(4) driver for the GeckoBOA BC GSC+ port.
• Bring macppc/powerpc closer to SMP.
• Adjust the output voltage for the bge(4) BCM5906 PHY, otherwise it might not get a link.
• Enable hardware TKIP+CCMP in RT2860-based ral(4) devices.
• Small optimization for TKIP phase 2 for little-endian architectures.
• In rcs(1), duplicate envstr and free it on error, instead of allocating for each argument and freeing each on error.
• Fix in gcc(1) for mips code generation to prevent user asm statements from being put in delay slots.
• Fixes for SH in gcc(1) when compiling PIC code and other optimizations.
• For i386, make ipending per-cpu.
• When allocating amd64 interrupt 'slots', always check all slots to see if we already allocated a slot for a particular pin.
• Plug potential mbuf leak in the NFS vfsops code.
• Boot loader argument parsing for amd64 was configuring serial console even when using a glass console. Fixed.
• Added another HSDPA MSM to the list of supported umsm(4) devices.
• Added support for more NM9845 variants in puc(4).
• Corrected the brk(2) prototype to match POSIX.
• Prevent overflow in rcs(1) if RCS_INIT and command line arguments exceed buffer size.
• Initial acpiasus(4) driver for ACPI based hotkeys.
• Fixed sgi IP30 serial console.
• Allow amd64 to use serial ports other than com0 for console.
• Make rthreads also return the proper values for failures in pthread_sigmask(3) and sigprocmask(2).
• spl(9) fixes for softnet interrupt handlers when dealing with the ifqueues.
• Fix for some ciss(4) firmwares that use different physical drive addressing.
• Make pthreads(3) code return the proper values upon failure for pthread_sigmask(3) and sigprocmask(2) in threaded programs.
• Added support for the Netmos 6 port version to puc(4).
• Removed the pre-802.11 rln(4) driver, was never finished.
• Imported basic LSR MPLS support.
• Remove kludge in NFS that map EEXIST to a success return code on the assumption it is a duplicate reply.
• Added sysmerge(8), a mergemaster-like utility to help you update /etc and configuration files after upgrading to a new release or snapshot.
• Close potential mbuf leak in the NFS code.
• Make ftp-proxy(8) flush output buffers before closing the TCP session, fixes case where the proxy would eat the 221 response.
• Make syslogd(8) drop messages when writing to a pipe that is too slow to process input.
• Clean up logging in rtadvd(8) by introducing same logging API as other daemons.
• Fix for WPA/WPA2 when receiving an RSN IE in message 3 together with the WPA. Ignore it instead of deauthenticating.
• Prevent truncation in the fdopen/fopen/freopen libc calls if the file descriptor number is larger than SHRT_MAX.
• Fixes in ed(1) for SIGHUP handling.
• Initial version of an adt(4) driver for the adt7462 sensor devices.
• Allow low level audio(4) drivers to specify a default sample format, instead of 8-bit mono mulaw @8kHz.
• On hppa64, use the firmware for reset when rebooting.
• When starting Xorg without an xorg.conf, and the wskbd is "user", don't try to set such an xkb layout.
• Replaced the hppa64 pluto(4) driver with astro(4) from hppa.
• Added a proper bus_space_vaddr(9) implementation for hppa64.
• Updated xinit(1) to 1.0.8, xkbcomp(1), xprop(1) and xset to 1.0.4 and xrdb(1) to 1.0.5.
• Sync hppa64 console handling to the hppa code base.
• Moved amd64 and i386 serial boot handling to talk directly to the hardware and not relying on the BIOS to do it for us.
• Check bge(4) for BCM5704-based devices and only for them, set special register settings used in TBI mode for fiber adapters.
• Add workaround for bge(4) CRC bug errata with BCM5701 A0 and B0 chipset-based devices.
• For rl(4), make sure we don't call rl_rxeof() twice if both RX Ok and Err bits are set.
• Changed the ELF loader to use the LMA as the load address for the various segments.
• Updated twm(1) to 1.0.4.
• Updated xenocara xf86-video-radeonhd to 1.2.1, xf86-video-sis to 0.10 and xrandr to 1.2.3.
• Fix for Mesa in xenocara when using SSE where newly allocated memory would not be marked as executable, causing faults on various hardware setups.
• Add a driver flag to ahci(4) to force negotiation of SATA 1 transfers.
• Add filtering on direction for tcpdump(8).
• Proper checks in the client code of opencvs(1) for memory allocations.
• In pr(1), if memory allocation fails during error message buffering, print all held back messages and exit.
• Allow cal(1) to show week numbers.
• Add a function to uvideo(4) which can identify an USB descriptor explicitly by its size.
• Added an sftp(1) extension called "statvfs@openssh.com" and "fstatvfs@openssh.com" that implement statvfs(2)-like operations. Also, add a "df" command to the sftp(1) client to produce a df(1)-like display of filesystem space and inode usage.
• Extended the if_ethersubr.c CRC functions to support updating a running CRC in addition to the oneshot mode and also a speed improvement from marking some of the functions as "pure".
• Make FTDI 2232L attach to uftdi(4).
• Fix potential segfault in the Mesa i965 code due to a bad realloc.
• Add missing monitor mode capability flag to uath(4).
• For sparc64, make sure hardclock is called for every clock tick, even if we miss one.
• Make the periodic security(8) run check for world-readable hostname.if(5).
• Make netstart(8) check that hostname.if(5) files are not world readable before using them.
• Fix the libc resolver to allow "_" in the middle of DNS name components.
• Make the xf86-input-keyboard pick up the wscons keymap name to set up XkbLayout and XkbOptions if started without an xorg.conf.
• Added a kernel implementation of the 4-way handshake and group-key handshake protocols of 802.11i, and a software implementation of TKIP and CCMP, making WPA/WPA2-PSK usable in both station and hostap modes for bwi(4), malo(4), ral(4), iwn(4), wpi(4), ural(4), rum(4), upgt(4), and zyd(4).
• Fix for ehci(4) timeout handling.
• Add workaround for UltrasparcII clock tick management where stopping the clock would sometimes fail.
• Added support for the Texas Instruments bq4802 real-time clock found on the Ultra-25 and Ultra-45 sparc64 machines.
• Added untested support for LM76 in the lmtemp(4) driver.
• Added support for 2D acceleration on some mgx(4) video boards.
• Enter wpa-psk(8), a tool to generate WPA-PSK keys from the ssid and passphrase.
• Reworked the NFS mbuf write routines.
• Clear CPUF_RUNNING when halting a CPU on amd64 and i386 MP systems, fixes power-down problems.
• Rework the help output in disklabel(8) so it again fits on one page.
• Improved the libc DNS resolver ID generation algorithm by wrapping the existing LCG in a random permutation generator based on a Luby-Rackoff block cipher.
• Protect errno in ftp(1) from being trashed by other functions.
• Make sure the swap encryption code gets the correct amount of swap pages, might not match when using a miniroot in the swap partition.
• Updated mkfontdir(1) and mkfontscale(1) to 1.0.4 in the xenocara tree.
• Fix crash in DRM code when it is enabled, but no device is attached when X tries to use it.
• Synced pcc compiler with the master repository.
• Fix bug in ld.so(1) when the error was DL_NOT_FOUND for libs which were found but could not be loaded.
• Make vgrind(1) output to groff(1) instead of troff(1), so we end up with postscript output by default.
• Added support for an "include" directive in the ipsec.conf(5) file.
• Introduced mitigation for packet sending in the interface start routine.
• Fix multicast packet and input bytes counting for ethernet devices being used by trunk(4).
• Make sure the tty subsystem code scrubs stack-based buffers.
• Rate limit FFS messages when it runs out of inodes/space to once every 2 seconds.
• Make IPI sending on sun4v based Sparc64 machines use a single hypervisor call. Improves kernel compile times by 20%.
• In azalia(4), add support for recording through the mic jack on AD1984-based devices.
• Added Microchip MCP 98242 temp sensor support in sdtemp(4).
• Added a -m flag to cal(4) to show weeks starting on mondays.
• For ami(4), prevent phantom devices from appearing on the passthrough buses.
• Added untested support for Microchip MCP9805 JC-42.2 sensor to sdtemp(4).
• Added support for NPX SE97 devices in the sdtemp(4) driver.
• Improved support in ld.so(1) for shared libs at non-zero addresses.
• For com(4), increase the buffer size sent to the fifo.
• Initial import of uvideo(4) and video(4). uvideo(4) is a driver for USB video devices and video(4) is a device-independent layer implementing the V4L2 API.
• Various ehci(4) fixes for hangs at boot and shutdown.
• Make i386 MP kernels not grab biglock for syscalls marked SY_NOLOCK.
• For em(4), sync the TX ring and post new packets to the chip once per call to the start routine instead of once per packet.
• Fix for sparc64 memory accesses, makes puc(4) work on T1000-based machines.
• Make rshd(8) not call setpwent().
• Make ahci(4) detachable.
• Initial implementation of SGI XBow bus support.
• For amd64 and sparc64, do not grab kernel biglock for syscalls marked SY_NOLOCK.
• Added sdtemp(4) to alpha, amd64, armish and i386 GENERIC kernels.
• New sdtemp(4) sensor driver for JDEC-JC-42.4 DIMM temperature sensors.
• Fix disklabel(8) -w -d <disk> as used in the install scripts.
• Do not call pthread_atfork(3) handlers when a multithreaded program calls vfork(2).
• Reduce maximum number of state change interrupts tht(4) can generate to 100 per second.
• Switch it(4) back to PnP config mode on amd64 and i386.
• Fix for lii(4) TXD buffer wrap.
• Add nsgphy(4) to the sparc64 GENERIC and RAMDISK kernels.
• Add support for the National Semiconductor Saturn in the cas(4) driver.
• Add support for the DP83865 PHY in the nsgphy(4) driver.
• SECURITY FIX: Avoid possible hijacking of X11-forwarded connections with sshd(8).
  A source code patch is available.
  [Applied to stable]
• Make xdm(1) zero out the password as early as possible when using bsd_auth(3).
• Make the bcrypt(3) code zero the state buffers on return.
• Fix code which blocks passing file descriptors into a chroot jail.
• Add support for ZTE CMDMA MSM modem from qualcomm to the ubsa(4) driver.
• 64-bit fix in ld.so(1).
• Added Corege CG-WLUSB2GPX to the list of supported rum(4) devices.
• Refine the "netboot" interface group semantics to the interface we booted from, or if that is not known, the root device.
• Make MP kernels work on sun4v-based sparc64 machines.
• Updated zoneinfo code to tzcode2008a.
• Updated the zoneinfo datasets to tzdata2008b.
• Re-enabled lii(4) on amd64 and i386 GENERIC and RAMDISK kernels.
• OpenSSH 4.9 released.
• Enabled ELF loading on vax boot blocks.
• Pad the lii(4) RXD buffer so packets are aligned on a 128-byte boundary. Prevents some hard locks.
• Updated the xenocara xf86-video-intel driver to 2.2.1.
• More sun4v work for sparc64 machines. GENERIC and RAMDISK kernels will now boot, MP kernels does work yet.
• Fix for amd64 and i386 serial console handling for non-default speeds.
• Enabled kate(4) on amd64 and i386 GENERIC kernels.
• Enabled shared libraries on the landisk platform.
• Make sgi machines drop user into ARCS interactive mode instead of rebooting if we fail to load the kernel.
• Added kate(4), a new driver for AMD K8 temperature sensors.
• OpenSSH bumped to 4.9.
• Prevent boggle(6) from spinning if the tty goes away.
• Plug a memory leak in the atascsi layer.
• For xenocara, replace autotools based build by native BSD Makefiles.
• Prevent crashes on macppc in pci_intr_map(9).
• Have ssh(1) ignore ~/.ssh/rc if sshd_config ForceCommand is specified.
• Make it possible to enable and disable pseudo devices in the UKC, config file and at config(8) -e.
• Add it(4) at port 0x228 for amd64 and i386 GENERIC kernels.
• Initial version of ifb(4), a Sun Expert 3D card driver. Not working yet.
• Fix libMesa build on amd64 with XENOCARA_BUILD_DRI set.
• In config(8), don't make a disable of a disabled device as a change, same for enable.
• Make sftp(1) prefer POSIX style renaming over filexfer if the server supports it.
• Add command in ddb(4) to show all mounts.
• Make sure eeprom(8) does not abort walking the OpenFirmware tree if a node's content is too large.
• Added AGP support for the Intel G33 chipset.
• andl(4) enabled in amd64 and i386 GENERIC kernels.
• Added the andl(4) driver to support the Andigilog aSC7611 sensor.
• Added support for DIOCRLDINFO, DIOCGPDINFO and DIOCGPART to the fd(4) drivers.
• Add ability to audio(4) to have different block sizes for play and record.
• Raised the MAXUSERS constant for alpha,amd64,hppa and macppc.
• Make ksh(1) ulimit able to get and set multiple limits in a single invocation.
• Fix VLAN tag info for re(4) devices.
• Fixed race condition in mips64 exception handling.
• In relayd(8), handle the case when Content-Length HTTP header is 0.
• Make xenocara run fc-cache at the end of a "make build" to save time later.
• Adapt maximum permitted MTU on pppoe(4) to the MTU of the connected Ethernet/VLAN interface.
• Added NxN grid capability to boggle(6).
• Enabled fins(4) on i386 GENERIC kernels.
• Updated xterm(1) to rev 234.
• Added a driver for the Fintek F71805F LPC sensors to fins(4).
• Add all interfaces we netboot from to the "netboot" interface group.
• Make sure the libc bcmp(3) returns 1 on a difference, instead of a casted number.
• Better spl(9) locking for pppoe(4).
• Fix for netstat(1) when given -I.
• Fix segfault in libX11 when using XDM-AUTHORIZATION-1 keys for remote X11 clients over IPv6.
• Fix bug in snmpd(8) when encoding powers of 128.
• Added support for the IRZ MC35pu GSM Terminal to the uslcom(4) driver.
• Removed KGDB code from sparc64 platform.
• Fix df(1) so it can show larger values.
• Add _SC_SYS_PAGES and _SC_AVPHYS_PAGES to sysconf(3).
• New APIs for arc4random, one to fill a buffer with random numbers and the other to return a uniformly distributed random number without bias.
• Widen statfs struct to support large file systems and to support statvfs(3).
• Make agp(4) attach at vga(4) instead of pchb(4).
• Have syslogd(8) do waitpid(2) in a loop until all children are gone.
• Timing fixes for sensorsd(8) so time always goes forward and so reports don't get duplicated or lost.
• For snmpd(8), implement the hrSWRun portion of HOST-RESOURCES mib.
• Make GENERIC.MP work on the E10000 sparc64 machines.
• Support the old-prom XVideo board on the sparc platform by rewriting the sbus range registers.
• Various CMSG related fixes in the network applications.
• Improved the IP ID and named(8) shuffle code initialization to a single forward pass.
• Better lladdr generation from tv_usec in cdce(4).
• Only allow pppoe(4) interfaces to be attached to Ethernet or Vlan interfaces.
• Make sure acx(4), atw(4) and pgt(4) do not increase the input packet counter erroneously.
• Attach prtc(4) on sparc64 if no real-time clock was found.
• For sensorsd(8), allow a program invoked on state change to receive sensor status.
• Added a __data_start symbol to all ELF architectures to consistently mark the beginning of the writeable sections.
• When running nfsd(8) without arguments, make sure 4 servers on UDP are started.
• When attaching a cdce(4) that lacks a proper mac address, use tv_usec from getmicrotime(9) to create one.
• For audio(4), correctly set high water mark to the buffer size.
• For PPPoE, return the relay-sid in the response, if one was received.
• Fix infinite loop in snmpd(8).
• Prevent mvme68k boot media from using instructions the 68060 does not support.
• Turn on keep-alive by default in ftp(1).
• Implemented a partial HOST-RESOURCES-MIB for snmpd(8).
• Fix NULL dereference in ifstated(8) when config files refer to undeclared states.
• Enabled ehci(4) on hppa RAMDISK kernels.
• Added sun4v IOMMU hypervisor and virtual PCI host bridge code to sparc64.
• Added proper repository locking in opencvs.
• Prevent opencvs from sending "Directory" messages for arguments in remote setup if the specified files or dirs do not exist.
• Add support for checkout/update -j on opencvs.
• Sparc64 drivers for the virtual bus vbus(4), virtual real-time clock vrtc(4) and virtual console vcons(4) on sun4v.
• Added UltraSPARC Hypervisor interface for sun4v to the sparc64 platform.
• Make the firmware loader look in /mnt/etc/firmware as well, for the ramdisk installations.
• Avoid infinite recursion in vi(1) on certain error conditions.
• Make sparc64 check the status of OFW nodes, so devices which are disabled in the OpenFirmware gets avoided by OpenBSD.
• Segfault fix in vi(1) for the "set nu" case when very long lines contain tabs.
• Allow response to icmp6 node information when local hostname starts with a digit.
• In the config(8) UKC> prompt, avoid request for input if 'lines' are set to zero.
• Moved to 4.3-current.