CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/09/24 08:32:59 Modified files: www/mozilla-firefox: Makefile Log message: Disable btcfi and exec-only in Firefox on aarch64 for now. The bundled copy of libdav1d doesn't have the asm fixes from the (older) version in ports - while many hunks of the patches apply directly to the newer code here, it needs more aarch64 asm knowledge than I have to port the rest across. landry@ has a diff (based on gentoo patches) to build against system versions of dav1d and aom - that's generally what we want longer-term, but this more- targetted change is safer for release (and avoids downgrading the version of dav1d used in firefox past some security fixes). ok tb@ CVSROOT: /cvs Module name: src Changes by: mlarkin@cvs.openbsd.org 2024/09/24 13:34:01 Modified files: usr.sbin/vmd : vmd.8 Log message: vmd(8) manpage change for shutdown behaviour Document the shutdown behaviour for vmd(8). Suggested via bugs@ via eric at mulh.net. ok jmc@, bluhm@ CVSROOT: /cvs Module name: src Changes by: jmc@cvs.openbsd.org 2024/09/24 14:02:39 Modified files: usr.sbin/vmd : vmd.8 Log message: - VM(s) -> VMs - simpler tense - fix the -width parameter - add -nosplit to AUTHORS CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/09/24 14:15:03 Modified files: www/tor-browser/browser: Makefile Log message: apply same aarch64 fix to tor-browser as firefox (USE_NOBTCFI, USE_NOEXECONLY) ok naddy CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2024/09/24 19:24:04 Modified files: usr.bin/ssh : misc.c misc.h readconf.c servconf.c Log message: fix regression introduced when I switched the "Match" criteria tokeniser to a more shell-like one. Apparently the old tokeniser (accidentally?) allowed "Match criteria=argument" as well as the "Match criteria argument" syntax that we tested for. People were using this syntax so this adds back support for "Match criteria=argument" bz3739 ok dtucker CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2024/09/24 22:19:36 Modified files: usr.sbin/vmd : sev.c Log message: document why sys/param.h is used CVSROOT: /cvs Module name: src Changes by: jmc@cvs.openbsd.org 2024/09/25 00:13:01 Modified files: bin/ksh : ksh.1 usr.bin/dig : dig.1 usr.bin/ssh : ssh_config.5 usr.bin/systat : systat.1 Log message: remove some unneeded Xo/Xc calls; from evan silberman the original diff had a couple of errors, which i've fixed CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/09/25 00:34:34 Modified files: www/chromium : Makefile www/chromium/patches: patch-base_compiler_specific_h www/iridium : Makefile www/iridium/patches: patch-base_compiler_specific_h www/ungoogled-chromium: Makefile www/ungoogled-chromium/patches: patch-base_compiler_specific_h Log message: disable the preserve_most attribute on arm64 as it breaks retguard ok sthen@, naddy@ CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/09/25 07:55:23 Modified files: usr.sbin/sysupgrade: sysupgrade.8 sysupgrade.sh Log message: sysupgrade: add -R #.# to try to use a specific release version rather than the immediate +0.1. print an https://ftp.openbsd.org/... URL where the new signify pubkey can be found if not present. no guarantees: we only test +0.1, but jumping further does work quite often (and if tight on disk, can work better than multiple steps) - this avoids editing the script if you're going to do it anyway. "Only upgrades from one version to the next are tested. Skipping versions may work. Downgrading is unlikely to work." discussed with deraadt chris florian, ok deraadt CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/09/25 08:26:46 Modified files: faq : current.html Log message: faq/current.html notes: - mention va-api in packages and show people how to disable it in vlc if they run into problems (as there seems to be some issue with amd) - let people know that sysupgrade no longer guesses, if you want snaps then use -s CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/09/25 08:42:39 Modified files: regress/usr.sbin/bgpd/integrationtests: Makefile Added files: regress/usr.sbin/bgpd/integrationtests: bgpd.maxattr.rdomain1.conf bgpd.maxattr.rdomain2_1.conf bgpd.maxattr.rdomain2_2.conf maxattr.sh maxattr.test1.ok maxattr.test2.ok Log message: Add a maxattr regress test that causes the rdomain1 bgpd instance to trip over 4096 bytes for a BGP UPDATE message. Check on the 3rd system that the affected prefixes are properly withdrawn. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/09/25 08:46:52 Modified files: usr.sbin/bgpd : rde.c rde.h rde_update.c Log message: When generating UPDATE handle the message size limit better. First of all warn that a prefix was dropped. In the generate an update code handle possible overflows of attributes and NLRI and withdraw the affected prefix. This way the peer will not have stale data. OK tb@ CVSROOT: /cvs Module name: src Changes by: jmc@cvs.openbsd.org 2024/09/25 09:08:42 Modified files: usr.sbin/sysupgrade: sysupgrade.8 Log message: correct macro for -R entry; CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/09/25 09:38:39 Modified files: regress/usr.sbin/bgpd/integrationtests: bgpd.maxattr.rdomain1.conf bgpd.maxattr.rdomain2_1.conf bgpd.maxattr.rdomain2_2.conf maxattr.sh maxattr.test1.ok maxattr.test2.ok Log message: Extend maxattr test to also include IPv6 and with that test for the up_generate_mp_reach() failure. CVSROOT: /cvs Module name: src Changes by: florian@cvs.openbsd.org 2024/09/25 10:26:37 Modified files: usr.sbin/sysupgrade: sysupgrade.8 Log message: Improve description of -f. ok sthen, florian Committing on behalf of jmc as requested. CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/09/25 12:24:13 Modified files: sys/kern : subr_witness.c Log message: Do not crash in witness code if interrupt fires early. It can happen that an interrupt handler is called immediately on a secondary CPU when it is spun up during boot. At that moment no process is schduled yet, so curproc is NULL. To prevent a crash when p->p_sleeplocks is dereferenced, skip witness check in this case. OK visa@ CVSROOT: /cvs Module name: src Changes by: bru@cvs.openbsd.org 2024/09/25 13:56:33 Modified files: sbin/wsconsctl : mousecfg.c Log message: Correct an indexing error that may leave stale data in the mousecfg buffer. ok mpi@ CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2024/09/25 16:48:49 Modified files: graphics/cairo : Makefile Added files: graphics/cairo/patches: patch-src_cairo-cff-subset_c Log message: Add upstream fix for regression when writing PDFs with fonts. ok ajacoutot@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/09/25 17:01:39 Modified files: usr.bin/ssh : readconf.h ssh.h Log message: remove some unused defines; ok djm@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/09/25 19:45:13 Modified files: usr.sbin/vmd : config.c control.c dhcp.c fw_cfg.c i8253.c loadfile_elf.c parse.y pci.c priv.c proc.c proc.h psp.c sev.c vioblk.c vionet.c vioqcow2.c vioscsi.c virtio.c vm.c vm_agentx.c vmd.c vmm.c x86_vm.c Log message: remove unneeded includes; ok dv@ mlarkin@ CVSROOT: /cvs Module name: src Changes by: jmc@cvs.openbsd.org 2024/09/26 00:10:34 Modified files: share/man/man4 : nvme.4 Log message: document that there are nvme sensors available and nudge the reader to sysctl; ok bmercer