Build date: 1751320802 - Mon Jun 30 22:00:02 UTC 2025
Build cvs date: 1751314159 - Mon Jun 30 20:09:19 UTC 2025
Build id: 2025-07-01.1
Build tags: amd64-regress sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P bin/ps/extern.h
P regress/usr.bin/mandoc/char/space/leading-mdoc.out_ascii
P regress/usr.bin/mandoc/mdoc/Fl/parsed.out_ascii
P regress/usr.bin/mandoc/mdoc/Fl/parsed.out_markdown
P regress/usr.bin/mandoc/mdoc/Ux/eos.out_ascii
P regress/usr.bin/mandoc/mdoc/Ux/eos.out_markdown
P regress/usr.bin/mandoc/mdoc/Ux/spacing.out_ascii
P regress/usr.bin/mandoc/mdoc/Ux/spacing.out_markdown
P sys/arch/amd64/amd64/trap.c
P sys/arch/arm64/dev/aplsmc.c
P sys/arch/arm64/include/intr.h
P sys/kern/kern_pledge.c
P sys/net/if_etherip.c
P sys/net/if_gif.c
P sys/net/if_gre.c
P sys/net/if_veb.c
P sys/net/pf.c
P sys/netinet/ip_input.c
P sys/netinet/ip_ipip.c
P sys/netinet/ip_output.c
P sys/netinet/tcp_input.c
P sys/netinet/tcp_subr.c
P sys/netinet/udp_usrreq.c
P usr.bin/mandoc/mdoc_validate.c
M usr.sbin/bgpd/session.c
P usr.sbin/rpki-client/cert.c
P usr.sbin/rpki-client/extern.h
P usr.sbin/rpki-client/x509.c

commit d7Oo7eDpkzwFdyCn
Author: schwarze
Date: 2025/06/30 20:09:19

  catch up with the rendering change for .Ux in mdoc_validate.c rev. 1.309

  regress/usr.bin/mandoc/char/space/leading-mdoc.out_ascii
  regress/usr.bin/mandoc/mdoc/Fl/parsed.out_ascii
  regress/usr.bin/mandoc/mdoc/Fl/parsed.out_markdown
  regress/usr.bin/mandoc/mdoc/Ux/eos.out_ascii
  regress/usr.bin/mandoc/mdoc/Ux/eos.out_markdown
  regress/usr.bin/mandoc/mdoc/Ux/spacing.out_ascii
  regress/usr.bin/mandoc/mdoc/Ux/spacing.out_markdown

commit cvowCvmAz4x2pS7i
Author: schwarze
Date: 2025/06/30 19:52:19

  Change the rendering of the .Ux macro from "UNIX" to "Unix",
  purely for compatibility with groff 1.23.
  Not a big deal because this macro is deprecated anyway.

  The decision to change this was made in groff because two AT&T
  Bell Labs veterans, Doug McIlroy and Meg McRoberts, recalled that
  "fairly early on, we in the Unix lab began to treat Unix as a proper
  noun, but the lawyers had trademarked the uppercase name and got
  their way in many publications."

  https://lists.gnu.org/archive/html/groff/2015-01/msg00026.html
  https://lists.gnu.org/archive/html/groff/2015-01/msg00029.html

  This cange corresponds to groff commit 8dcc3aad gbranden@ Sep 7, 2022
  [mdoc]: Render `Ux` macro as "Unix", in mixed case.

  usr.bin/mandoc/mdoc_validate.c

commit RTFs8UyWmJzBBNwu
Author: tb
Date: 2025/06/30 14:20:26

  Consistently spell BGPsec with lowercase s.

  Also update one of those silly doc comments in structs to match reality.

  usr.sbin/rpki-client/cert.c
  usr.sbin/rpki-client/extern.h

commit N6Eqp5WZcLeK8AQR
Author: kettenis
Date: 2025/06/30 14:19:20

  Drop IPL_SOFT/splsoft()

  ok jsg@

  sys/arch/arm64/include/intr.h

commit yG7UP9JOQ5ykSJxO
Author: bluhm
Date: 2025/06/30 13:27:28

  AMD SEV-ES guest handles CPUID, IOIO, MSR during VC# trap.

  Fill in the handling of cpuid, in/out and rdmsr/wrmsr.  For in/out
  and rdmsr/wrmsr decode the actual instructions.  Use the GHCB to
  request emulation of these instructions from vmm(4).

  With this commit, SEV-ES enabled guest are able to run on vmm(4)/vmd(8).

  from hshoexer@; OK mlarkin@

  sys/arch/amd64/amd64/trap.c

commit 1QHbMu7V2EL0j09P
Author: jan
Date: 2025/06/30 13:01:10

  BACKOUT: vport/veb(4): Use hardware checksum offload.

  Due to some issues pointed out by bluhm, I have to backout this diff.

  sys/net/if_veb.c

commit saFQbi1yfznGKblS
Author: mvs
Date: 2025/06/30 12:43:22

  Unlock IPCTL_DEFTTL case of ip_sysctl().

  Read-only access at initialization time of interfaces, PCBs and IP
  packets.

  ok bluhm

  sys/net/if_etherip.c
  sys/net/if_gif.c
  sys/net/if_gre.c
  sys/net/pf.c
  sys/netinet/ip_input.c
  sys/netinet/ip_ipip.c
  sys/netinet/ip_output.c
  sys/netinet/tcp_input.c
  sys/netinet/tcp_subr.c
  sys/netinet/udp_usrreq.c

commit f6lYiICj4KWmvfBC
Author: jsg
Date: 2025/06/30 11:39:50

  allowpowerdown extern no longer required

  sys/arch/arm64/dev/aplsmc.c

commit x74eLC9CRn4oP9q1
Author: tb
Date: 2025/06/30 11:15:47

  rpki-client: add an AIA handler fit for all certs

  cert_aia() is similar to cert_sia(), but it is easier. It does not
  the slight inaccuracy of x509_get_sia() and allows multiple caIssuers
  access methods. Like for the SIA case, we remember the first rsync
  access method and ignore all other caIssuers. Also like in the SIA
  case, we'll dedup the code a bit laster.

  ok job

  usr.sbin/rpki-client/cert.c
  usr.sbin/rpki-client/x509.c

commit teUDbSwJT1TrOZ56
Author: tb
Date: 2025/06/30 11:06:48

  rpki-client: also parse SIA extensions for EE certs

  Parse SIA extensions for EE certificates. There should only be (perhaps
  multiple) id-ad-signed-Object access methods, but unfortunately the
  ecosystem is polluted with currently roughly 50k EE certs containing
  an rpkiNotify access method. So we need to continue to tolerate that.

  Rename sbgp_sia() (whose name doesn't make much sense) to cert_ca_sia().
  Add cert_ee_sia() which is similar to cert_ca_sia() and x509_get_sia().
  There's duplication of code and work because of the latter. I am going
  to remove x509_get_sia() further down the road, which will make use of
  the new cert->signedobj member. Since it's only for EE certs, there's
  no need to transfer it over the pipes.

  Likewise, cert_parse_ee_cert() and cert_parse_pre() will see quite a bit
  of deduplication.

  ok job

  usr.sbin/rpki-client/cert.c
  usr.sbin/rpki-client/extern.h

commit 0MeWsufVhBy3djj1
Author: jsg
Date: 2025/06/30 04:40:03

  unify style of character device tests; no functional change
  feedback and ok deraadt@

  sys/kern/kern_pledge.c

commit YP6g1qlm1bLydBBE
Author: deraadt
Date: 2025/06/30 02:53:26

  delete extern for variable that was removed

  bin/ps/extern.h


P app/bitmap/Makefile.bsd-wrapper
P lib/libXfont2/Makefile.bsd-wrapper

commit ZQAcBhlIhLPpuq52
Author: miod
Date: 2025/06/30 14:10:09

  Apply a large hammer to reduce compiler optimization level on mips64 due to
  clang 19 segfaulting otherwise. This can surely be improved upon, but the
  immediate goal is to unbreak builds.

  app/bitmap/Makefile.bsd-wrapper
  lib/libXfont2/Makefile.bsd-wrapper