Module name: www
Changes by: nick@cvs.openbsd.org 2014/08/06 19:51:34

Modified files:
faq : faq10.html faq14.html faq5.html faq6.html
faq8.html upgrade48.html upgrade55.html

Log message:
more -> cvsweb.openbsd.org for, well, cvsweb.

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/08/06 22:49:53

Modified files:
lib/libssl/src/ssl: s23_srvr.c

Log message:
Fix CVE-2014-3511; TLS downgrade, verbatim diff
<a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=280b1f1ad12131defcd986676a8fc9717aaa601b" rel="nofollow">https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=280b1f1ad12131defcd986676a8fc9717aaa601b</a>
ok guenther miod

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/08/07 00:56:41

Modified files:
usr.sbin/httpd : httpd.8

Log message:
shorten signal text a bit

Module name: src
Changes by: florian@cvs.openbsd.org 2014/08/07 04:52:34

Modified files:
usr.sbin/httpd : server_fcgi.c

Log message:
Opportunistically try to parse "Status: $code" in the very first
response from the fcgi daemon and use that code as HTTP response
code. If it doesn't work out fall back to code 200.
This might fix naddy@'s issue with redirects in cvsweb.
To be revisited after unlock.
Discussed with &amp; grudgingly OK reyk@

Module name: src
Changes by: florian@cvs.openbsd.org 2014/08/07 06:43:22

Modified files:
usr.sbin/httpd : server_fcgi.c

Log message:
Don't try to ouput FCGI_STDERR into error.log if there is no data.
Problem noticed by naddy@, OK reyk@

Module name: ports
Changes by: ajacoutot@cvs.openbsd.org 2014/08/07 07:16:26

Modified files:
audio/pulseaudio: Tag: OPENBSD_5_5 Makefile
Added files:
audio/pulseaudio/patches: Tag: OPENBSD_5_5
patch-src_modules_rtp_rtp_c

Log message:
SECURITY fix for CVE-2014-3970
pulseaudio: denial of service in module-rtp-recv

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/08/07 12:21:13

Modified files:
usr.sbin/httpd : httpd.8

Log message:
Fix and simplify the description of httpd(8)'s signal handling. httpd
does not re-executed itself on SIGHUP, it simply reload the
configuration and sends it to its child processes.

ok deraadt@

Module name: src
Changes by: lteo@cvs.openbsd.org 2014/08/07 13:03:38

Modified files:
usr.bin/signify: signify.1

Log message:
Bump example pubkey filenames to /etc/signify/openbsd-56-base.pub for
5.6.

ok deraadt@

Module name: src
Changes by: miod@cvs.openbsd.org 2014/08/07 13:46:31

Modified files:
lib/libssl/src/ssl: d1_both.c d1_clnt.c d1_pkt.c s23_srvr.c
s3_both.c s3_enc.c s3_lib.c t1_enc.c

Log message:
When you expect a function to return a particular value, don't put a comment
saying that you expect it to return that value and compare it against zero
because it is supposedly faster, for this leads to bugs (especially given the
high rate of sloppy cut'n'paste within ssl3 and dtls1 routines in this
library).

Instead, compare for the exact value it ought to return upon success.

ok deraadt@

Module name: src
Changes by: miod@cvs.openbsd.org 2014/08/07 14:02:23

Modified files:
lib/libssl/src/ssl: d1_both.c d1_clnt.c d1_pkt.c s3_both.c
s3_enc.c s3_lib.c t1_enc.c

Log message:
Oops, revert changes commited by mistake. The previous commit was supposed
to only apply to s23_srvr.c.

Module name: src
Changes by: guenther@cvs.openbsd.org 2014/08/07 14:24:12

Modified files:
lib/libssl/src/ssl: d1_both.c

Log message:
Fix CVE-2014-3506, DTLS handshake message size checks. From
<a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1250f12613b61758675848f6600ebd914ccd7636" rel="nofollow">https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1250f12613b61758675848f6600ebd914ccd7636</a>
with comment/whitespace style tweaks

ok bcook@ miod@

Module name: src
Changes by: guenther@cvs.openbsd.org 2014/08/07 16:27:28

Modified files:
lib/libssl/src/ssl: t1_lib.c

Log message:
Correct test reversed during merge of fix for CVE-2014-3509

pointed out by Watson Ladd (watson (at) matasano.com)
ok deraadt@

Module name: www
Changes by: lteo@cvs.openbsd.org 2014/08/07 21:05:50

Modified files:
. : 56.html

Log message:
Fix version numbers of Perl, Less, and NSD.

From Theo Buehler and Daniel Jakots, thank you!

Module name: src
Changes by: guenther@cvs.openbsd.org 2014/08/07 22:53:43

Modified files:
lib/libssl/src/crypto/asn1: a_object.c
lib/libssl/src/crypto/objects: obj_dat.c

Log message:
Fix CVE-2014-3508, pretty printing and OID validation:
- make sure the output buffer is always NUL terminated if buf_len
was initially greater than zero.
- reject OIDs that are too long, too short, or not in proper base-127

Based on
<a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87" rel="nofollow">https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87</a>

ok bcook@

Module name: src
Changes by: guenther@cvs.openbsd.org 2014/08/07 23:06:56

Modified files:
lib/libssl/src/ssl: d1_both.c

Log message:
Fix CVE-2014-3507, avoid allocating and then leaking a fresh fragment
structure when a zero-length fragment is received.

Based on
<a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d0a4b7d1a2948fce38515b8d862f43e7ba0ebf74" rel="nofollow">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d0a4b7d1a2948fce38515b8d862f43e7ba0ebf74</a>

diff by miod@, ok guenther@ bcook@ deraadt@

http://undeadly.org/cgi?action=article&sid=20140808073543

Contributed by tbert on Fri Aug 8 07:34:57 2014 (GMT)
from the delicious GUI filling dept.

On this week's [episode](http://www.bsdnow.tv/episodes/2014_08_06-the_pcbsd_tour) of [BSDNow](http://www.bsdnow.tv/), the gang takes us on a whirlwind tour of the GUI tools for PC-BSD, in addition to the usual weekly roundup of rumours and hearsay!

**[** [Video](http://www.podtrac.com/pts/redirect.mp4/201406.jb-dl.cdn.scaleengine.net/bsdnow/2014/bsd-0049-432p.mp4) **|** [HD Video](http://www.podtrac.com/pts/redirect.mp4/201406.jb-dl.cdn.scaleengine.net/bsdnow/2014/bsd-0049.mp4) **|** [MP3 Audio](http://www.podtrac.com/pts/redirect.mp3/traffic.libsyn.com/jbmirror/bsd-0049.mp3) **|** [OGG Audio](http://www.podtrac.com/pts/redirect.ogg/traffic.libsyn.com/jbmirror/bsd-0049.ogg) **|** [Torrent](http://bitlove.org/jupiterbroadcasting/bsdnowhd) **]**

http://undeadly.org/cgi?action=article&sid=20140808085943

Contributed by tbert on Fri Aug 8 08:59:37 2014 (GMT)
from the friday data dump dept.

For those looking for one handy place for all their g2k14 hackathon report reading needs, we present the following list.

* [Christian Weisgerber on Package Building without sudo](http://undeadly.org/cgi?action=article&sid=20140803122705)
* [Martin Pieuchot on routing and USB](http://undeadly.org/cgi?action=article&sid=20140714191912)
* [Andrew Fresh on Programming Perl](http://undeadly.org/cgi?action=article&sid=20140728122850)
* [Bob Beck on LibReSSL](http://undeadly.org/cgi?action=article&sid=20140713220618)
* [Ted Unangst on the Art of the Tedu](http://undeadly.org/cgi?action=article&sid=20140729070721)
* [Martin Pelikan on ext4, filesystems in general](http://undeadly.org/cgi?action=article&sid=20140715120259)
* [Henning Brauer on IPv6, bpf, vlan surgery](http://undeadly.org/cgi?action=article&sid=20140714094454)
* [Landry Breuil on Taming Mozilla](http://undeadly.org/cgi?action=article&sid=20140724161550)
* [Matthieu Herrb on Bringing X Forward](http://undeadly.org/cgi?action=article&sid=20140723142224)
* [Miod Vallat on LibreSSL](http://undeadly.org/cgi?action=article&sid=20140718072312)
* [Marc Espie on ports and packages](http://undeadly.org/cgi?action=article&sid=20140714202157)
* [Theo de Raadt on security and configurations](http://undeadly.org/cgi?action=article&sid=20140715212333)
* [Brent Cook on the portable LibreSSL](http://undeadly.org/cgi?action=article&sid=20140718090456)
* [World of KDE4, Vadim Zhukov](http://undeadly.org/cgi?action=article&sid=20140715094848)
* [Florian Obser in IPv6 land](http://undeadly.org/cgi?action=article&sid=20140721125020)
* [Ingo Schwarze on manly stuff](http://undeadly.org/cgi?action=article&sid=20140721090411)
* [Stefan Sperling on wireless drivers](http://undeadly.org/cgi?action=article&sid=20140721125235)
* [Ken Westerback on DHCP and dump(8)](http://undeadly.org/cgi?action=article&sid=20140722071413)
* [Sebastian Benoit on chasing down annoyances](http://undeadly.org/cgi?action=article&sid=20140719104939)
* [Jasper Lievisse Adriaanse on bootloader hacking](http://undeadly.org/cgi?action=article&sid=20140719134058)
* [Paul Irofti on the long road to octhci(4)](http://undeadly.org/cgi?action=article&sid=20140718134017)
* [Jonathan Gray on driver improvements for X](http://undeadly.org/cgi?action=article&sid=20140719082410)
* [phessler: emergency g2k14 hackathon](http://www.undeadly.org/cgi?action=article&sid=20140806125308)

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/08/08 06:40:26

Modified files:
libexec/tradcpp: files.c main.c output.c

Log message:
Add support for using - as shorthand for stdin/stdout in tradcpp.

When looking into switching the /usr/bin/cpp wrapper to
tradcpp I came across "| ${CPP} ${CPPFLAGS} -" in usr.bin/which.

gcc documents this behaviour for cpp here:
<a href="https://gcc.gnu.org/onlinedocs/cpp/Invocation.html" rel="nofollow">https://gcc.gnu.org/onlinedocs/cpp/Invocation.html</a>

Versions of the John F. Reiser derived cpp in 32V and CSRG SCCS
accept this usage as well, as does the cpp in PCC.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/08 08:16:43

Modified files:
sys/dev/usb : umass_scsi.c

Log message:
Fix debug printfs.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/08 08:17:53

Modified files:
sys/dev/usb : xhci.c

Log message:
Even if the endpoint it reseted before the stack gets informed that a
transfer stalled, report that a stall happen because umass(4) relies
on this behavior...

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/08 08:20:05

Modified files:
sys/dev/usb : usb.h usbdi_util.c usbdi_util.h

Log message:
Super Speed hub descriptor definition and routine, required for upcoming
external USB 3.0 hub support.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/08 08:22:45

Modified files:
sys/dev/usb : xhci.c

Log message:
Implement polling.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/08 08:28:02

Modified files:
sys/dev/usb : xhci.c xhcireg.h

Log message:
Improve the logic to determine the maximum endpoint service interface
time payload. Super speed companion descriptor are still not used but
at least we can properly initialize super speed interrupt pipes.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/08 08:34:12

Modified files:
sys/dev/usb : xhci.c

Log message:
Make sure asynchronous commands do not race with synchronous ones.

Since asynchronous commands can be submitted from interrupt context
it was possible to race with a process waiting for the completion of
a previously submitted command. So stop relying on the per-softc
TRB pointer for asynchronous commands and simply get the address of
the command TRB from the event TRB.

Module name: www
Changes by: bcallah@cvs.openbsd.org 2014/08/08 08:41:16

Modified files:
. : events.html

Log message:
Move my August 2014 nycbug talk to past events.
No recording this time, sorry.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 08:52:53

Modified files:
share/man/man8 : autoinstall.8

Log message:
* consistently use semantic mdoc(7) macros
* add HISTORY and AUTHORS
* some mdoc(7) style fixes
* some wording fixes and avoid stray future tense
feedback and ok rpe@ jmc@, ok jasper@

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:03:25

Modified files:
usr.bin/mandoc : mdoc.h mdoc_term.c mdoc_validate.c

Log message:
Partial implementation of .Bd -centered.

In groff, .Bd -centered operates in fill mode, which is relatively
hard to implement, while this implementation operates in non-fill
mode so far. As long as you pay attention that your lines do not
overflow, it works. To make sure that rendering is the same for
mandoc and groff, it is recommended to insert .br between lines
for now. This implementation will need improvement later.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:10:15

Modified files:
usr.bin/mandoc : mandoc.h mdoc_html.c mdoc_man.c mdoc_term.c
mdoc_validate.c read.c

Log message:
Various improvements related to .Ex and .Rv:
* let .Nm fall back to the empty string, not to UNKNOWN
* never let .Rv copy an argument from .Nm
* avoid spurious \fR after empty .Nm in -Tman
* correct handling of .Ex and .Rv in -Tman
* correct the wording of the output for .Rv without arguments
* use non-breaking spaces in .Ex and .Rv output where required
* split MANDOCERR_NONAME into a warning for .Ex and an error for .Nm

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:15:27

Modified files:
usr.bin/mandoc : mandoc.h mdoc_validate.c read.c roff.c

Log message:
better name and wording for the last two non-generic errors

Module name: src
Changes by: jasper@cvs.openbsd.org 2014/08/08 09:16:39

Modified files:
sys/net80211 : ieee80211.c ieee80211_node.c
ieee80211_regdomain.c

Log message:
use nitems() instead of various local constructs

ok stsp@

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:21:17

Modified files:
usr.bin/mandoc : mandoc.h mdoc_validate.c read.c

Log message:
Remove two useless FATAL errors.
When a file contains neither text nor macros, treat it as an empty document.
When the mdoc(7) document prologue is incomplete, use some default values.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:26:28

Modified files:
usr.bin/mandoc : mandoc.h mdoc_macro.c mdoc_term.c
mdoc_validate.c read.c

Log message:
Get rid of the useless FATAL error "child violates parent syntax".
When finding items outside lists, simply skip them and throw an ERROR.
Handle subsections before the first section instead of bailing out.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:32:17

Modified files:
usr.bin/mandoc : libman.h libmdoc.h man.c man_macro.c mdoc.c

Log message:
Simplify: replace one global flag by one local variable
and remove three unused global flags. No functional change.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:35:31

Modified files:
usr.bin/mandoc : man_macro.c man_validate.c

Log message:
Improve handling of next-line scope broken by end of file.
Detect the condition earlier, report in the error message
which block is broken, and delete the broken block.
Consequently, empty section headers can no longer happen.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:38:46

Modified files:
usr.bin/mandoc : mandoc.h mdoc_validate.c read.c

Log message:
Remove the useless FATAL error "argument count wrong, violates syntax".
The last remaining instance was .It in .Bl -column with more than one
excessive .Ta. However, simply downgrading from FATAL to ERROR, it just
works fine, almost the same way as in groff, without any other changes.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:42:39

Modified files:
usr.bin/mandoc : mandoc.h mdoc_validate.c read.c

Log message:
In .Bl -column, if some of the column width declarations are given
right after the -column argument and some at the very end of the
argument list, after some other arguments like -compact, concatenate
the column lists.
This gets rid of one of the last useless FATAL errors
and actually shortens the code by a few lines.

This fixes an issue introduced more than five years ago, at first
causing an assert() since bsd.lv mdoc_action.c rev. 1.14 (June 17, 2009),
then later a FATAL error since mdoc_validate rev. 1.130 (Nov. 30, 2010),
and marked as "TODO" ever since.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:45:58

Modified files:
usr.bin/mandoc : mandoc.h mdoc_validate.c read.c

Log message:
Split MANDOCERR_IGNARGV into one message for .An and one for .Bl
and report the macro name and argument.

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/08/08 09:46:01

Modified files:
usr.sbin/httpd : server_http.c

Log message:
Allow to serve emtpy (0 bytes) files.

Found by jasper@
OK florian@

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:48:43

Modified files:
usr.bin/mandoc : mandoc.h read.c roff.c

Log message:
Dynamically allocate the stack of roff(7) .ie condition values
and thus get rid of the last useless fatal error.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:54:10

Modified files:
usr.bin/mandoc : man.c man_validate.c mandoc.h mdoc.c
mdoc_macro.c mdoc_validate.c read.c roff.c

Log message:
mention requests and macros in more messages

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 09:57:05

Modified files:
usr.bin/mandoc : libman.h libmdoc.h man_validate.c
mdoc_validate.c

Log message:
demacrify: get rid of man_nmsg(), man_pmsg(), mdoc_nmsg(), mdoc_pmsg()

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 10:00:23

Modified files:
usr.bin/mandoc : man_html.c mdoc_html.c out.c term.c
term_ascii.c term_ps.c

Log message:
Clarity with respect to floating point handling:
Write double constants as double rather than integer literals.
Remove useless explicit (double) cast done at one place and nowhere else.
No functional change.

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/08/08 10:02:03

Modified files:
sys/dev/pci : pcidevs

Log message:
add bochs and microsoft emulated vga

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 10:02:55

Modified files:
usr.bin/mandoc : term.c

Log message:
Fix floating point handling: When converting double to size_t,
properly round to the nearest M (=0.001m), which is the smallest
available unit.

This avoids weirdness like (size_t)(0.6 * 10.0) == 5
by instead calculating (size_t)(0.6 * 10.0 + 0.0005) == 6,
and so it fixes the indentation of the readline(3) manual.

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/08/08 10:03:08

Modified files:
sys/dev/pci : pcidevs.h pcidevs_data.h

Log message:
regen

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 10:05:42

Modified files:
usr.bin/mandoc : libman.h man.c man_validate.c

Log message:
Simplify man(7) validation:
Drop pre-handlers, they were almost unused.
Drop the needless complexity of allowing more than one post-handler.

This saves one internal interface function, one static function, one
private struct definition, sixteen static arrays, and 45 lines of code.
No functional change.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 10:08:19

Modified files:
usr.bin/mandoc : mdoc_validate.c

Log message:
Simplify by allowing only one pre-handler.
Saves 12 static arrays and 19 lines of code.
No functional change.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 10:11:10

Modified files:
usr.bin/mandoc : mdoc_validate.c

Log message:
Simplify by allowing only one post-handler.
Saves 36 static arrays and 10 lines of code
at the expense of only five new trivial static functions.
No functional change.

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/08 10:17:09

Modified files:
usr.bin/mandoc : man_validate.c mandoc.h mandocdb.c mdoc.c
mdoc_html.c mdoc_man.c mdoc_term.c
mdoc_validate.c read.c

Log message:
Bring the handling of defective prologues even closer to groff,
in particular relaxing the distinction between prologue and body
and further improving messages.
* The last .Dd wins and the last .Os wins, even in the body.
* The last .Dt before the first body macro wins.
* Missing title in .Dt defaults to UNTITLED. Warn about it.
* Missing section in .Dt does not default to 1. But warn about it.
* Do not warn multiple times about the same mdoc(7) prologue macro.
* Warn about missing .Os.
* Incomplete .TH defaults to empty strings. Warn about it.