Build date: 1784152803 - Wed Jul 15 22:00:03 UTC 2026
Build cvs date: 1784144794 - Wed Jul 15 19:46:34 UTC 2026
Build id: 2026-07-16.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P Makefile.cross
P distrib/Makefile
P distrib/notes/Makefile
P distrib/special/installboot/Makefile
P distrib/special/libstubs/Makefile
P etc/Makefile
P lib/libarch/mips64/Makefile
P lib/libc/hash/Makefile.inc
cvs server: lib/libc/hash/sha2.c is no longer in the repository
U lib/libc/hash/sha256.c
U lib/libc/hash/sha512.c
P lib/libc/hidden/sha2.h
P lib/libssl/ssl_clnt.c
P regress/etc/MAKEDEV/Makefile
P regress/usr.sbin/installboot/Makefile
P sbin/dhcp6leased/engine.c
P share/man/man4/Makefile
P share/man/man8/Makefile
P sys/Makefile
P sys/arch/luna88k/conf/GENERIC
P sys/arch/luna88k/conf/RAMDISK
P sys/arch/luna88k/luna88k/m8820x.c
P sys/arch/m88k/include/cpu.h
P sys/arch/m88k/include/m8820x.h
P sys/arch/m88k/m88k/m88100_fp.c
P sys/arch/m88k/m88k/m88110_fp.c
P sys/arch/m88k/m88k/m8820x_machdep.c
P sys/arch/octeon/dev/if_cnmac.c
M sys/dev/usb/uhidev.c
P sys/kern/Makefile
P sys/kern/kern_exit.c
P sys/kern/kern_proc.c
P sys/net80211/ieee80211_crypto_tkip.c
P usr.bin/tmux/cmd-break-pane.c
P usr.bin/tmux/cmd-join-pane.c
P usr.bin/tmux/cmd-split-window.c
P usr.bin/tmux/cmd-swap-pane.c
P usr.bin/tmux/cmd.c
P usr.bin/tmux/format.c
P usr.bin/tmux/key-bindings.c
P usr.bin/tmux/layout.c
P usr.bin/tmux/options-table.c
P usr.bin/tmux/server-client.c
P usr.bin/tmux/spawn.c
P usr.bin/tmux/tmux.1
P usr.bin/tmux/tmux.h
P usr.bin/tmux/window-buffer.c
P usr.bin/tmux/window-customize.c
P usr.bin/tmux/window.c
P usr.sbin/apm/Makefile
P usr.sbin/apmd/Makefile
P usr.sbin/bgpd/rde.c
P usr.sbin/bgpd/rde.h
P usr.sbin/bgpd/rde_adjout.c
P usr.sbin/bgpd/rde_attr.c
P usr.sbin/bgpd/rde_filter.c
P usr.sbin/bgpd/rde_peer.c
P usr.sbin/bgpd/rde_update.c
M usr.sbin/bgpd/session.c
P usr.sbin/hotplugd/Makefile
P usr.sbin/installboot/Makefile
P usr.sbin/mrouted/vif.c
P usr.sbin/pcidump/Makefile
P usr.sbin/rpki-client/extern.h
P usr.sbin/rpki-client/main.c
P usr.sbin/rpki-client/output.c
P usr.sbin/wsfontload/Makefile

commit d3DR9XK8o8YoNqjC
Author: kettenis
Date: 2026/07/15 19:46:34

  Stop mashing together ps_flags ans p_flag.  This fine when we did the
  initial "struct process" / "struct proc" split, but we added more flags
  and they collide now.  This is incredible confusing and needs to die.
  Instead make some readjustments to the ddb default "ps" output and print
  them both separately.

  ok claudio@, jca@

  sys/kern/kern_proc.c

commit DD4niJmyZUqgieAQ
Author: miod
Date: 2026/07/15 19:00:24

  Unhook loongson from the build.

  The last compiler update unfortunately does not work on mips64el, with clang 22
  built with clang 19 being apparently functional, but clang 22 rebuilt with
  the previous clang 22 hitting deterministic SIGSEGV on various files.

  I don't have the time and energy to try and debug this (which is likely an
  endianness problem, as octeon appears to run happily with clang 22), especially
  when it takes 10 days for clang to rebuild itself on these machines; and
  switching back to gcc 4 won't help much as modern software in ports will
  require a working C++>=11 compiler to build anyway.

  ok visa@


  Makefile.cross
  distrib/Makefile
  distrib/notes/Makefile
  distrib/special/installboot/Makefile
  etc/Makefile
  lib/libarch/mips64/Makefile
  regress/etc/MAKEDEV/Makefile
  regress/usr.sbin/installboot/Makefile
  share/man/man4/Makefile
  share/man/man8/Makefile
  sys/Makefile
  sys/kern/Makefile
  usr.sbin/apm/Makefile
  usr.sbin/apmd/Makefile
  usr.sbin/hotplugd/Makefile
  usr.sbin/installboot/Makefile
  usr.sbin/pcidump/Makefile
  usr.sbin/wsfontload/Makefile

commit QVkds4YWyDoQ8ORd
Author: miod
Date: 2026/07/15 18:49:57

  Do not make the size of the cmmu table public, and comment out some code at
  compile time if we are building on a simple CMMU configuration, such as on
  luna88k.

  Tested by and ok aoyoma@

  sys/arch/m88k/include/m8820x.h
  sys/arch/m88k/m88k/m8820x_machdep.c

commit dBQGA4xQUGudIeN7
Author: miod
Date: 2026/07/15 18:44:50

  Declare the cmmu-related variables as const, rather than
  attribute(section(.rodata)), and initialize them (while MMU is not set up)
  using explicit casts.

  This gets rid of "ignoring changed section attributes" harmless assembler
  warnings.

  Joint work with aoyama@; tested by and ok aoyama@

  sys/arch/luna88k/luna88k/m8820x.c
  sys/arch/m88k/include/m8820x.h
  sys/arch/m88k/m88k/m8820x_machdep.c

commit iU3NfVM2OvUv3SnD
Author: miod
Date: 2026/07/15 18:44:08

  With the previous fix to m8820x_initialize_cpu()
  [sys/arch/m88k/m88k/m88k_machdep.c r1.66], we no longer force
  single-processor kernels to nevertheless override MAX_CPU, and remove the
  ability to override it in <machine/cpu.h>.

  Tested by and ok aoyama@

  sys/arch/luna88k/conf/GENERIC
  sys/arch/luna88k/conf/RAMDISK
  sys/arch/m88k/include/cpu.h

commit qcFmHIOSMO42p5xj
Author: miod
Date: 2026/07/15 18:43:09

  Make sure m8820x_initialize_cpu() initializes logical cpu #0 on non-MP kernels.
  This is usually the case, but some luna88k setups could have the running cpu at
  a physical position different from zero, causing some of the actual cpu_info
  initialization to be done in the wrong array element.

  Tested by and ok aoyama@

  sys/arch/m88k/m88k/m8820x_machdep.c

commit lQhEpw9mMgAl31oz
Author: miod
Date: 2026/07/15 18:42:37

  Faster CMMU walk in m8820x_cpu_number(): we don't need to iterate on
  instruction cmmus.

  Tested by and ok aoyama@

  sys/arch/luna88k/luna88k/m8820x.c
  sys/arch/m88k/m88k/m88100_fp.c
  sys/arch/m88k/m88k/m88110_fp.c

commit c0m33feboHAokcfd
Author: florian
Date: 2026/07/15 18:24:52

  Make sure replies contain the expected server-id.

  We only speak to and expect an answer from a specific server when we
  are requesting or renewing a lease. In all other case we accept an
  answer from any server.

  Pointed out by Clouditera Security.
  OK tb

  sbin/dhcp6leased/engine.c

commit eXw6y3O7BeSMPJiw
Author: florian
Date: 2026/07/15 18:24:15

  Make sure we received a client identifier.

  Pointed out by Clouditera Security.
  OK tb

  sbin/dhcp6leased/engine.c

commit 4i24SVtmE046LRlf
Author: florian
Date: 2026/07/15 18:23:41

  Make sure the message belongs to the current transaction.

  Pointed out by Clouditera Security.
  OK tb

  sbin/dhcp6leased/engine.c

commit BJPUnTorrOwAnXhT
Author: jsing
Date: 2026/07/15 15:00:17

  Check that the server selected ciphersuite is valid for use with TLSv1.2.

  In the legacy stack, ensure that the server selected ciphersuite is valid
  for use with TLSv1.2 - this effectively means that it is not a TLSv1.3
  ciphersuite. We currently fail the handshake, but at a later stage.

  Reported by Tom Gouville from the tlspuffin team.

  ok tb@

  lib/libssl/ssl_clnt.c

commit DADnnFc85iGTnv5r
Author: bluhm
Date: 2026/07/15 14:27:46

  mrouted(8) logs errno message when ioctl(2) fails.

  from Russell Howe

  usr.sbin/mrouted/vif.c

commit uXHmwNBPll3aedn8
Author: claudio
Date: 2026/07/15 14:25:31

  When signaling untraced processes with a SIGKILL check the right process
  for PS_EXITING.

  Fix for the sys/kern/ptrace regress hangs.
  OK kettenis@

  sys/kern/kern_exit.c

commit ikhrfdLXofh2FzrA
Author: nicm
Date: 2026/07/15 14:14:50

  Small section missed from previous.

  usr.bin/tmux/server-client.c

commit KhaMdCnlREz18xgm
Author: jsing
Date: 2026/07/15 13:56:38

  Remove check for use of TLSv1.2 ciphersuites with TLSv1.1 and earlier.

  We no longer negotiate any TLS version lower than TLSv1.2, so this is now
  redundant.

  ok tb@

  lib/libssl/ssl_clnt.c

commit wUNaOB69QRpnZSxT
Author: jsing
Date: 2026/07/15 13:39:16

  Replace SHA-256 and SHA-512 implementations in libc.

  Replace the existing SHA-256 and SHA-512 implementations in libc with
  versions that leverage some of the recent code in libcrypto. The existing
  API is retained, along with reuse of the existing SHA2_CTX definitions.

  These versions use static inline functions instead of macros and spell
  out the full variable rotations to follow the specification, rather than
  trying to outsmart the compiler.

  This also gives us a basis to provide per-architecture accelerated
  implementations, based on those in libcrypto.

  ok naddy@ tb@

  distrib/special/libstubs/Makefile
  lib/libc/hash/Makefile.inc
  lib/libc/hash/sha256.c
  lib/libc/hash/sha512.c
  lib/libc/hidden/sha2.h

commit m5RK7SXj5I0zIk9L
Author: nicm
Date: 2026/07/15 13:02:33

  Add modal panes, created currently with new-pane -O. There is one modal
  pane per window and it must be a floating pane. These are intended to
  replace popups. Currently a modal pane will unzoom a zoomed window and
  rezoom it when it is closed (a bit like modes do), but this is planned
  to change when we get an always-on-top flag.

  usr.bin/tmux/cmd-break-pane.c
  usr.bin/tmux/cmd-join-pane.c
  usr.bin/tmux/cmd-split-window.c
  usr.bin/tmux/cmd-swap-pane.c
  usr.bin/tmux/cmd.c
  usr.bin/tmux/format.c
  usr.bin/tmux/layout.c
  usr.bin/tmux/options-table.c
  usr.bin/tmux/server-client.c
  usr.bin/tmux/spawn.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h
  usr.bin/tmux/window.c

commit qU14wyw4UxYM801w
Author: nicm
Date: 2026/07/15 12:45:39

  Clear the "waiting for editor" area before writing so stray characters
  aren't visible from underneath.

  usr.bin/tmux/window-buffer.c
  usr.bin/tmux/window-customize.c

commit 2giyHKzpiqmhAvaw
Author: claudio
Date: 2026/07/15 11:59:27

  rework the force_update logic in the adj-rib-out

  On initial connect the system needs to sync the adj-rib-out of a peer with
  the Loc-RIB. This happens via peer_dump() and in this case the system
  needs to push out all updates (but can drop any withdraw).

  To do this a force_update flag was introduced but actually it is better to
  use the mode argument and introduce EVAL_SYNC for this case.
  If mode == EVAL_SYNC adjout_prefix_update needs to force the update and
  adjout_prefix_withdraw can drop the withdraw.

  The other user of peer_dump() is during config reloads where the RIB of a
  peer is altered. In that case the adj-rib-out is first flushed. Because of
  this flush peer_dump can be used to push out all updates.

  This also removes the NOTYET block in peer_generate_update() and
  replaces it with inside up_generate_addpath_all() with a call
  up_generate_addpath().

  OK tb@

  usr.sbin/bgpd/rde.c
  usr.sbin/bgpd/rde.h
  usr.sbin/bgpd/rde_adjout.c
  usr.sbin/bgpd/rde_peer.c
  usr.sbin/bgpd/rde_update.c

commit OiJpL3JgidCR0Hfw
Author: visa
Date: 2026/07/15 11:48:03

  cnmac: Fix packet corruption with veb(4)

  Account for VLAN header when setting IP packet offset for TCP/UDP
  checksum offload on transmit. Otherwise cnmac(4) can corrupt packets
  that are sent through veb(4).

  Initial patch from Sergii Rudchenko.
  ether_extract_headers() usage added by me.

  OK kirill@

  sys/arch/octeon/dev/if_cnmac.c

commit GnZitsSCP27A44yv
Author: jsg
Date: 2026/07/15 11:46:41

  test pointer against NULL not 0; ok claudio@

  usr.sbin/bgpd/rde_attr.c

commit w54slFXV9JI2eM3k
Author: claudio
Date: 2026/07/15 11:12:43

  NULL not 0 for last arg to community_match() since it is a pointer.

  usr.sbin/bgpd/rde_filter.c

commit tuWavxgO0jrGWx3f
Author: nicm
Date: 2026/07/15 10:38:31

  Add a mouse binding for empty areas of the window so C-Drag works on
  them as well.

  usr.bin/tmux/key-bindings.c
  usr.bin/tmux/server-client.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h

commit VV8H6zzs69xezoU4
Author: stsp
Date: 2026/07/15 09:47:51

  Fix an inversed if-condition in ieee80211_michael_mic_failure()

  Make the check for 60 seconds since the most recent previous MIC failure
  work as intended. The code was enabling TKIP countermeasures if 60 seconds
  have passed since the previous MIC failure. The intention is to enable
  countermeasures only if less than 60 seconds have passed.

  LLMS got very excited about this, even though nobody is expected to be
  running an access point with WPA1 enabled in 2026.
  TKIP is disabled by default. We keep it around just in case we need to
  connect to the world via a forgotten 802.11g era AP out in a desert.

  sys/net80211/ieee80211_crypto_tkip.c

commit M5lCcn29KS64FQDc
Author: tb
Date: 2026/07/15 07:53:06

  rpki-client: only output config files on successful run

  While the suggested cronjob is 'rpki-client -v && bgpctl reload' and thus
  only reloads bgpd if rpki-client completes successfully, the output logic
  creates a config file that might still be loaded by an operator by hand.

  If an error occurred in one of the subprocesses, only output ometrics (if
  requested) and do not generate bgpd, bird, csv, json, and ccr.

  ok claudio job

  usr.sbin/rpki-client/extern.h
  usr.sbin/rpki-client/main.c
  usr.sbin/rpki-client/output.c