Build date: 1784066402 - Tue Jul 14 22:00:02 UTC 2026
Build cvs date: 1784063649 - Tue Jul 14 21:14:09 UTC 2026
Build id: 2026-07-15.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-ptrace-revert.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P lib/libcrypto/x509/x509_constraints.c
P lib/libskey/skeysubr.c
P regress/lib/libcrypto/x509/constraints.c
P regress/usr.sbin/bgpd/integrationtests/as0.sh
P regress/usr.sbin/bgpd/integrationtests/exabgp.as0.test2.in
P sys/dev/ic/qwx.c
P sys/dev/pci/if_qwx_pci.c
M sys/dev/usb/uhidev.c
P sys/dev/usb/usb_subr.c
P sys/sys/proc.h
P usr.bin/ssh/serverloop.c
P usr.bin/ssh/ssh-mldsa-eddsa.c
P usr.bin/tmux/Makefile
P usr.bin/tmux/cfg.c
P usr.bin/tmux/cmd-choose-tree.c
P usr.bin/tmux/cmd-copy-mode.c
P usr.bin/tmux/cmd-display-menu.c
cvs server: usr.bin/tmux/cmd-display-panes.c is no longer in the repository
P usr.bin/tmux/cmd-find-window.c
P usr.bin/tmux/cmd-queue.c
P usr.bin/tmux/cmd-run-shell.c
P usr.bin/tmux/cmd-split-window.c
P usr.bin/tmux/format.c
P usr.bin/tmux/hooks.c
P usr.bin/tmux/layout.c
P usr.bin/tmux/menu.c
P usr.bin/tmux/mode-tree.c
P usr.bin/tmux/options-table.c
P usr.bin/tmux/popup.c
P usr.bin/tmux/screen-redraw.c
P usr.bin/tmux/server-client.c
P usr.bin/tmux/server-fn.c
P usr.bin/tmux/tmux.1
P usr.bin/tmux/tmux.h
P usr.bin/tmux/window-buffer.c
P usr.bin/tmux/window-client.c
P usr.bin/tmux/window-clock.c
P usr.bin/tmux/window-copy.c
P usr.bin/tmux/window-customize.c
U usr.bin/tmux/window-panes.c
P usr.bin/tmux/window-switch.c
P usr.bin/tmux/window-tree.c
P usr.bin/tmux/window.c
M usr.sbin/bgpd/session.c
P usr.sbin/bgpd/session_bgp.c
P usr.sbin/httpd/parse.y
P usr.sbin/httpd/proc.c
P usr.sbin/nsd/README.md
P usr.sbin/nsd/axfr.c
P usr.sbin/nsd/configure
P usr.sbin/nsd/configure.ac
P usr.sbin/nsd/convert-release-notes.sh
P usr.sbin/nsd/difffile.c
P usr.sbin/nsd/difffile.h
P usr.sbin/nsd/dname.c
P usr.sbin/nsd/ixfr.c
P usr.sbin/nsd/ixfr.h
P usr.sbin/nsd/metrics.c
P usr.sbin/nsd/metrics.h
P usr.sbin/nsd/namedb.c
P usr.sbin/nsd/nsd-checkconf.8.in
P usr.sbin/nsd/nsd-checkzone.8.in
P usr.sbin/nsd/nsd-control.8.in
P usr.sbin/nsd/nsd.8.in
P usr.sbin/nsd/nsd.conf.5.in
P usr.sbin/nsd/nsec3.c
P usr.sbin/nsd/nsec3.h
P usr.sbin/nsd/options.c
P usr.sbin/nsd/query.c
P usr.sbin/nsd/rdata.c
P usr.sbin/nsd/remote.c
P usr.sbin/nsd/server.c
P usr.sbin/nsd/udb.h
P usr.sbin/nsd/verify.c
P usr.sbin/nsd/xfrd-catalog-zones.c
P usr.sbin/nsd/xfrd-tcp.c
P usr.sbin/nsd/xfrd.c
P usr.sbin/nsd/xfrd.h
P usr.sbin/nsd/doc/ChangeLog
P usr.sbin/nsd/doc/README
P usr.sbin/nsd/doc/RELNOTES
P usr.sbin/nsd/simdzone/CHANGELOG.md
P usr.sbin/nsd/simdzone/README.md
P usr.sbin/nsd/simdzone/configure
P usr.sbin/nsd/simdzone/configure.ac
P usr.sbin/nsd/simdzone/src/isadetection.h
P usr.sbin/nsd/simdzone/src/generic/svcb.h
P usr.sbin/nsd/util/proxy_protocol.c
P usr.sbin/nsd/util/proxy_protocol.h
P usr.sbin/relayd/proc.c
P usr.sbin/relayd/relay_http.c
P usr.sbin/smtpd/mda.c

commit kqlbNlgtraUTPwxP
Author: kettenis
Date: 2026/07/14 21:14:09

  Fix a potential 1-byte buffer overflow in usbd_get_string_desc().  The code
  allows for a transfer of up to 255 bytes but the struct behind the
  usb_string_descriptor_t type is only 254 bytes.  This is because USB
  strings are UTF-16 and that leaves a single byte that can't be used in
  a meaningful way.  So truncating transfer to 254 bytes should not break
  devices that are already broken.  Found by Andrew Griffiths.

  ok jsg@, deraadt@

  sys/dev/usb/usb_subr.c

commit yt6XrAsw4BSFQpcJ
Author: nicm
Date: 2026/07/14 19:07:03

  Switch menus also to be attached to the window instead of an overlay and
  drawn as part of the client's scene. This means removing the popup menu.

  usr.bin/tmux/cmd-display-menu.c
  usr.bin/tmux/menu.c
  usr.bin/tmux/mode-tree.c
  usr.bin/tmux/popup.c
  usr.bin/tmux/screen-redraw.c
  usr.bin/tmux/server-client.c
  usr.bin/tmux/server-fn.c
  usr.bin/tmux/tmux.h
  usr.bin/tmux/window.c

commit 4rTTxcTAaer1ktvU
Author: nicm
Date: 2026/07/14 17:17:18

  Convert display-panes away from an overlay and into a mode. This is
  another step on the road of getting rid of overlays altogether (they are
  full of special cases; popups and menus are to go also eventually). We
  lose some of the styling of borders but gain the ability to run
  display-panes in another pane (perhaps not hugely useful but one never
  knows). The -b flag goes away as no longer useful.

  usr.bin/tmux/Makefile
  usr.bin/tmux/cfg.c
  usr.bin/tmux/cmd-choose-tree.c
  usr.bin/tmux/cmd-copy-mode.c
  usr.bin/tmux/cmd-find-window.c
  usr.bin/tmux/cmd-queue.c
  usr.bin/tmux/cmd-run-shell.c
  usr.bin/tmux/layout.c
  usr.bin/tmux/options-table.c
  usr.bin/tmux/server-client.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h
  usr.bin/tmux/window-buffer.c
  usr.bin/tmux/window-client.c
  usr.bin/tmux/window-clock.c
  usr.bin/tmux/window-copy.c
  usr.bin/tmux/window-customize.c
  usr.bin/tmux/window-panes.c
  usr.bin/tmux/window-switch.c
  usr.bin/tmux/window-tree.c
  usr.bin/tmux/window.c

commit 0zZ8u5hARVg6FpQl
Author: jsing
Date: 2026/07/14 16:31:02

  Use SHA1Final() in libskey.

  S/KEY requires hash output in little endian form, while SHA-1 produces big
  endian output. Rather than using SHA1Pad() and then reaching into the SHA-1
  state directly, use SHA1Final() and then convert to little endian using
  be32toh/htole32.

  ok claudio@ millert@ tb@

  lib/libskey/skeysubr.c

commit VjUAsoBlK2aZ06sC
Author: sthen
Date: 2026/07/14 16:20:05

  merge NSD 4.15.0

  usr.sbin/nsd/README.md
  usr.sbin/nsd/axfr.c
  usr.sbin/nsd/configure
  usr.sbin/nsd/configure.ac
  usr.sbin/nsd/difffile.c
  usr.sbin/nsd/difffile.h
  usr.sbin/nsd/dname.c
  usr.sbin/nsd/ixfr.c
  usr.sbin/nsd/ixfr.h
  usr.sbin/nsd/namedb.c
  usr.sbin/nsd/nsd-checkconf.8.in
  usr.sbin/nsd/nsd-checkzone.8.in
  usr.sbin/nsd/nsd-control.8.in
  usr.sbin/nsd/nsd.8.in
  usr.sbin/nsd/nsd.conf.5.in
  usr.sbin/nsd/nsec3.c
  usr.sbin/nsd/nsec3.h
  usr.sbin/nsd/options.c
  usr.sbin/nsd/query.c
  usr.sbin/nsd/rdata.c
  usr.sbin/nsd/remote.c
  usr.sbin/nsd/server.c
  usr.sbin/nsd/udb.h
  usr.sbin/nsd/verify.c
  usr.sbin/nsd/xfrd-catalog-zones.c
  usr.sbin/nsd/xfrd-tcp.c
  usr.sbin/nsd/xfrd.c
  usr.sbin/nsd/xfrd.h
  usr.sbin/nsd/doc/ChangeLog
  usr.sbin/nsd/doc/README
  usr.sbin/nsd/doc/RELNOTES
  usr.sbin/nsd/simdzone/configure
  usr.sbin/nsd/util/proxy_protocol.c
  usr.sbin/nsd/util/proxy_protocol.h

commit fShA4NcS5i2Sc6DZ
Author: sthen
Date: 2026/07/14 16:19:06

  import NSD 4.15.0, ok florian

  usr.sbin/nsd/README.md
  usr.sbin/nsd/axfr.c
  usr.sbin/nsd/configure
  usr.sbin/nsd/configure.ac
  usr.sbin/nsd/convert-release-notes.sh
  usr.sbin/nsd/difffile.c
  usr.sbin/nsd/difffile.h
  usr.sbin/nsd/dname.c
  usr.sbin/nsd/ixfr.c
  usr.sbin/nsd/ixfr.h
  usr.sbin/nsd/metrics.c
  usr.sbin/nsd/metrics.h
  usr.sbin/nsd/namedb.c
  usr.sbin/nsd/nsd-checkconf.8.in
  usr.sbin/nsd/nsd-checkzone.8.in
  usr.sbin/nsd/nsd-control.8.in
  usr.sbin/nsd/nsd.8.in
  usr.sbin/nsd/nsd.conf.5.in
  usr.sbin/nsd/nsec3.c
  usr.sbin/nsd/nsec3.h
  usr.sbin/nsd/options.c
  usr.sbin/nsd/query.c
  usr.sbin/nsd/rdata.c
  usr.sbin/nsd/remote.c
  usr.sbin/nsd/server.c
  usr.sbin/nsd/udb.h
  usr.sbin/nsd/verify.c
  usr.sbin/nsd/xfrd-catalog-zones.c
  usr.sbin/nsd/xfrd-tcp.c
  usr.sbin/nsd/xfrd.c
  usr.sbin/nsd/xfrd.h
  usr.sbin/nsd/doc/ChangeLog
  usr.sbin/nsd/doc/README
  usr.sbin/nsd/doc/RELNOTES
  usr.sbin/nsd/simdzone/CHANGELOG.md
  usr.sbin/nsd/simdzone/README.md
  usr.sbin/nsd/simdzone/configure
  usr.sbin/nsd/simdzone/configure.ac
  usr.sbin/nsd/simdzone/src/isadetection.h
  usr.sbin/nsd/simdzone/src/generic/svcb.h
  usr.sbin/nsd/util/proxy_protocol.c
  usr.sbin/nsd/util/proxy_protocol.h

commit 4uo3gd2lf4pvdLXq
Author: jsing
Date: 2026/07/14 15:54:14

  Improve name constraints URI host regress.

  regress/lib/libcrypto/x509/constraints.c

commit sEo4ZzcQyZeX792F
Author: jsing
Date: 2026/07/14 15:52:52

  Fix X.509 constraints URI host parsing.

  An authority in a URI is only terminated by a slash, question mark or hash,
  however the current code also included colons. This allows a specically
  crafted userinfo to bypass name constraints host checks. Additionally, IPv6
  literals may only be specified when enclosed with square brackets, which is
  not enforced.

  Rewrite parts of the host and IP parsing code to be more strict, fixing
  both of these issues in the process.

  Thanks to Jack Lloyd for reporting the userinfo bypass.

  ok tb@

  lib/libcrypto/x509/x509_constraints.c

commit xtmsHXseW3LT5WUl
Author: nicm
Date: 2026/07/14 15:06:54

  Typos and doc fixes, from Ben Boeckel.

  usr.bin/tmux/cmd-split-window.c
  usr.bin/tmux/format.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/window-copy.c

commit LjKr2Zziqt2Vdwlu
Author: deraadt
Date: 2026/07/14 15:03:31

  oops, no the bit is available

  sys/sys/proc.h

commit XVPgMbgwOWiZYJle
Author: deraadt
Date: 2026/07/14 14:54:24

  0x08000000 is P_SUSPSIG, so also defining PS_avail0 to the same position
  is misleading

  sys/sys/proc.h

commit Ao3YdNeKHhMGRqXW
Author: stsp
Date: 2026/07/14 12:35:14

  run qwx_init() code under splnet()

  sys/dev/ic/qwx.c

commit kRUU6jnLOzcfDdWN
Author: claudio
Date: 2026/07/14 12:34:26

  Run monitor exabgp session on new IP 10.12.57.5.

  10.12.57.2 is used in test1 and since exabgp retries immediatly the
  idleHoldTime of that peer goes up quickly and blocks further connects.
  Before this worked since bgpd sent the notification and the error count
  was not increased and with this immediate retries were possible.

  regress/usr.sbin/bgpd/integrationtests/as0.sh
  regress/usr.sbin/bgpd/integrationtests/exabgp.as0.test2.in

commit Yu39M5z4KIFp5EnJ
Author: stsp
Date: 2026/07/14 12:33:50

  stop MHI channels and clear MHI event rings when the qwx interface goes down

  sys/dev/pci/if_qwx_pci.c

commit 14TCGkoihiNokvPd
Author: stsp
Date: 2026/07/14 12:31:16

  reset qwx mhi transfer ring "queued" counter to zero when restarting the ring

  sys/dev/pci/if_qwx_pci.c

commit jgMXgEJgiD7iPsmB
Author: stsp
Date: 2026/07/14 12:29:22

  do not zero the entire qwx sc->hal structure during resume

  The structure contains pointers to DMA allocations which are leaked and
  replaced by new allocations during resume if we zero the entire structure.
  At attach time, the structure comes pre-zeroed so an initial memset is
  not needed either.

  sys/dev/ic/qwx.c

commit nCFCcdEQVJCbX00E
Author: stsp
Date: 2026/07/14 12:27:07

  do not attempt to clean up qwx Tx rings which are uninitialized

  sys/dev/ic/qwx.c

commit 1oGPYL9ZubTFbFhA
Author: stsp
Date: 2026/07/14 12:25:43

  properly reset driver and device state if we fail to get RUNNING in qwx_init()

  sys/dev/ic/qwx.c

commit OLhgXzxzISp5NHFZ
Author: stsp
Date: 2026/07/14 12:23:57

  remove pointless down/up dance in qwx_media_change()

  Already handled by qwx_ioctl() when ieee80211_ioctl() returns ENETRESET.

  sys/dev/ic/qwx.c
  sys/dev/pci/if_qwx_pci.c

commit wfRyFDBrrnvmR8VD
Author: stsp
Date: 2026/07/14 12:22:10

  ensure that qrtr_server state does not race with qwx device during power-on

  sys/dev/ic/qwx.c

commit JFR9WXoUzQ1uvaMq
Author: stsp
Date: 2026/07/14 12:20:11

  use the ioctl rwlock correctly in qwx_activate()

  sys/dev/ic/qwx.c

commit UBRlEWFNrW5wfnmB
Author: stsp
Date: 2026/07/14 12:18:28

  ensure that rx_ring->bufs_max and freemap are always initialized correctly

  sys/dev/ic/qwx.c

commit o3slRl3j6OkJnE1U
Author: stsp
Date: 2026/07/14 12:15:52

  the qwx init task should not wait for the ioctl lock to become available

  sys/dev/ic/qwx.c

commit 9uqBKlzcbVicpoHI
Author: stsp
Date: 2026/07/14 12:12:03

  do not silently ignore errors which occur in qwx_qmi_fw_init_done()

  sys/dev/ic/qwx.c

commit AiSZE6ipQJdkLcxc
Author: nicm
Date: 2026/07/14 11:08:36

  Handle padding and tab redraw correctly in copy mode.

  usr.bin/tmux/window-copy.c

commit BoxdEoRYRQf9jhk2
Author: nicm
Date: 2026/07/14 09:07:24

  Do not clear lines when we are just going to overwrite them in copy mode.

  usr.bin/tmux/window-copy.c

commit 7PyromzOkgllUEI5
Author: rsadowski
Date: 2026/07/14 08:56:00

  relayd: reject duplicate Content-Length headers with 400

  Only Host was marked unique, so a request with two Content-Length
  fields was framed on the last value but forwarded with both, allowing
  a backend to desync and smuggle a request past the filter rules. Mark
  Content-Length unique so the second occurrence is rejected in kv_add().

  OK kirill@

  usr.sbin/relayd/relay_http.c

commit GGqA5qFag6CplhDy
Author: rsadowski
Date: 2026/07/14 08:53:42

  httpd: make token order more easily extendable

  OK claudio@

  usr.sbin/httpd/parse.y

commit BOYSQGRB6BUVgAS0
Author: martijn
Date: 2026/07/14 08:30:09

  Synchronize styling, comments, and log messages so that httpd, and relayd's
  proc.c are mostly in sync. While here fix a conditional in httpd's
  proc_kill that never found its way over from the other proc.c
  implementations.

  OK rsadowski@

  usr.sbin/httpd/proc.c
  usr.sbin/relayd/proc.c

commit n1NyIlzovWXcXSXu
Author: claudio
Date: 2026/07/14 07:58:05

  Increase peer->errcnt when sending out notifications

  For every error (local or remote) the errcnt needs to be increased so that
  the system so that the fast reconnect logic in session_accept is properly
  skipped. Without this peers triggering constant notifications are not
  slowed down by the IdleHoldTimer.

  OK tb@

  usr.sbin/bgpd/session_bgp.c

commit KOcgup7ZoXd523Lg
Author: djm
Date: 2026/07/14 04:43:13

  use crypto_api.h #define constants for lengths; no binary change

  usr.bin/ssh/ssh-mldsa-eddsa.c

commit MSj0nRB9J6kGyCAq
Author: djm
Date: 2026/07/14 01:05:05

  make authorized_keys "restrict" keyword apply correctly to tunnel
  forwarding (which is administratively disabled by default).

  Reported by Erichen, Institute of Computing Technology,
  Chinese Academy of Sciences

  usr.bin/ssh/serverloop.c

commit CQpNsVrTPm2ye5Z0
Author: jsg
Date: 2026/07/14 00:45:06

  free dispatcher in mda_envelope_free() to avoid a leak
  found by Frank Denis, ok op@

  usr.sbin/smtpd/mda.c

commit yNbInEqgfFt73TmS
Author: nicm
Date: 2026/07/13 22:03:08

  Add e key to open editor to customize mode (like buffer mode) and a key
  to show only changed items.

  usr.bin/tmux/hooks.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h
  usr.bin/tmux/window-customize.c