Build date: 1772492402 - Mon Mar  2 23:00:02 UTC 2026
Build cvs date: 1772488768 - Mon Mar  2 21:59:28 UTC 2026
Build id: 2026-03-03.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P gnu/lib/libcompiler_rt/Makefile
P lib/libutil/imsg.c
P regress/usr.sbin/bgpd/config/Makefile
U regress/usr.sbin/bgpd/config/bgpd.conf.18.in
U regress/usr.sbin/bgpd/config/bgpd.conf.18.ok
P sys/dev/fdt/rkpinctrl.c
P sys/dev/pci/if_iwx.c
P sys/dev/pci/if_iwxreg.h
P sys/dev/pci/if_iwxvar.h
M sys/dev/usb/uhidev.c
P sys/kern/kern_pledge.c
P usr.bin/mg/fileio.c
P usr.bin/mg/funmap.c
P usr.bin/ssh/compat.c
P usr.bin/ssh/monitor.c
P usr.bin/ssh/monitor.h
P usr.bin/ssh/monitor_wrap.c
P usr.bin/ssh/monitor_wrap.h
P usr.bin/ssh/packet.h
P usr.bin/ssh/sshd-auth.c
P usr.bin/ssh/sshd-session.c
P usr.bin/tmux/format.c
P usr.bin/tmux/menu.c
P usr.bin/tmux/tmux.1
P usr.sbin/acme-client/revokeproc.c
P usr.sbin/bgpctl/output.c
P usr.sbin/bgpctl/output_json.c
P usr.sbin/bgpctl/output_ometric.c
P usr.sbin/bgpd/bgpd.h
P usr.sbin/bgpd/control.c
P usr.sbin/bgpd/parse.y
P usr.sbin/bgpd/printconf.c
P usr.sbin/bgpd/rde.c
P usr.sbin/bgpd/rde_aspa.c
P usr.sbin/bgpd/rde_peer.c
M usr.sbin/bgpd/session.c
P usr.sbin/bgpd/session.h
P usr.sbin/httpd/config.c
P usr.sbin/httpd/control.c
P usr.sbin/httpd/httpd.c
P usr.sbin/httpd/httpd.h
P usr.sbin/httpd/log.c
U usr.sbin/httpd/log.h
P usr.sbin/httpd/logger.c
P usr.sbin/httpd/parse.y
P usr.sbin/httpd/proc.c
P usr.sbin/httpd/server.c
P usr.sbin/httpd/server_fcgi.c
P usr.sbin/httpd/server_http.c
P usr.sbin/relayd/agentx_control.c
P usr.sbin/relayd/ca.c
P usr.sbin/relayd/carp.c
P usr.sbin/relayd/check_icmp.c
P usr.sbin/relayd/check_script.c
P usr.sbin/relayd/check_tcp.c
P usr.sbin/relayd/check_tls.c
P usr.sbin/relayd/config.c
P usr.sbin/relayd/control.c
P usr.sbin/relayd/hce.c
P usr.sbin/relayd/log.c
U usr.sbin/relayd/log.h
P usr.sbin/relayd/parse.y
P usr.sbin/relayd/pfe.c
P usr.sbin/relayd/pfe_filter.c
P usr.sbin/relayd/pfe_route.c
P usr.sbin/relayd/proc.c
P usr.sbin/relayd/relay.c
P usr.sbin/relayd/relay_http.c
P usr.sbin/relayd/relay_udp.c
P usr.sbin/relayd/relayd.c
P usr.sbin/relayd/relayd.h
P usr.sbin/relayd/ssl.c
P usr.sbin/relayd/util.c

commit 5H0mdLeeQPwa6Yhm
Author: tb
Date: 2026/03/02 21:59:28

  relayd/log.h: missed cvs add

  usr.sbin/relayd/log.h

commit LaGUCmsvEbT9skIu
Author: deraadt
Date: 2026/03/02 21:52:16

  In pledge_namei, improve the scanning for ".." in zoneinfo paths
  with millert

  sys/kern/kern_pledge.c

commit 3G3xGRGU6015tOGp
Author: kettenis
Date: 2026/03/02 20:45:20

  Rework rkpinctrl(4) to delay the lookup of the regmaps until we actually
  need them.  This should fix issues with Linux device tree changes that
  make us attach rkpinctrl(4) before the syscon(4) that provides the
  regmap.

  ok patrick@

  sys/dev/fdt/rkpinctrl.c

commit 98NYNDCGzIKl8xT4
Author: kettenis
Date: 2026/03/02 20:33:49

  amd64 needs the quad-precision support functions as well (for __float128
  support).  From Brad (with a small comment tweak).

  ok rsadowski@

  gnu/lib/libcompiler_rt/Makefile

commit 9HNSU4Jy0lDVVkK9
Author: claudio
Date: 2026/03/02 20:07:58

  While in practice the ibuf_skip() call can not fail it is better to check
  it. If the ibuf header can't be skipped it is better to not forward the
  message and return an error.
  Fix for CID 492354
  OK tb@

  lib/libutil/imsg.c

commit 9rfkXIsSc2jHeHng
Author: op
Date: 2026/03/02 19:38:17

  two more strdup() failure handling

  original diff from Han Boetes (hboetes at gmail), I've just simplified
  it a tiny bit.

  usr.bin/mg/fileio.c
  usr.bin/mg/funmap.c

commit WvnXqhoJZac0XBFT
Author: rsadowski
Date: 2026/03/02 19:28:01

  Standardize logging with bgpd

  OK claudio@

  usr.sbin/relayd/agentx_control.c
  usr.sbin/relayd/ca.c
  usr.sbin/relayd/carp.c
  usr.sbin/relayd/check_icmp.c
  usr.sbin/relayd/check_script.c
  usr.sbin/relayd/check_tcp.c
  usr.sbin/relayd/check_tls.c
  usr.sbin/relayd/config.c
  usr.sbin/relayd/control.c
  usr.sbin/relayd/hce.c
  usr.sbin/relayd/log.c
  usr.sbin/relayd/parse.y
  usr.sbin/relayd/pfe.c
  usr.sbin/relayd/pfe_filter.c
  usr.sbin/relayd/pfe_route.c
  usr.sbin/relayd/proc.c
  usr.sbin/relayd/relay.c
  usr.sbin/relayd/relay_http.c
  usr.sbin/relayd/relay_udp.c
  usr.sbin/relayd/relayd.c
  usr.sbin/relayd/relayd.h
  usr.sbin/relayd/ssl.c
  usr.sbin/relayd/util.c

commit JkssGI8k79aPnnOa
Author: rsadowski
Date: 2026/03/02 19:24:58

  Standardize logging with bgpd

  Tweak and OK claudio@

  usr.sbin/httpd/config.c
  usr.sbin/httpd/control.c
  usr.sbin/httpd/httpd.c
  usr.sbin/httpd/httpd.h
  usr.sbin/httpd/log.c
  usr.sbin/httpd/log.h
  usr.sbin/httpd/logger.c
  usr.sbin/httpd/parse.y
  usr.sbin/httpd/proc.c
  usr.sbin/httpd/server.c
  usr.sbin/httpd/server_fcgi.c
  usr.sbin/httpd/server_http.c

commit VLS4sGijChxgrZPr
Author: deraadt
Date: 2026/03/02 16:15:29

  Stop the canonicalization of the path in pledge_namei() callback since
  we know is providing strictly normalized paths, and it leads to a subtle
  problem a little bit like a TOCTOU.  However, this pathcode can also be
  reached by non-libc callers, so we need one validation step: the zoneinfo
  sub-directory inspections may not attempt walks upwards through "..", we
  don't need to consider symbolic links because root does not place them there.
  From discussions with david leadbeater, ok beck

  sys/kern/kern_pledge.c

commit ewtkcaZ4zGwNRcyE
Author: claudio
Date: 2026/03/02 13:48:00

  Add mrt config check

  regress/usr.sbin/bgpd/config/Makefile
  regress/usr.sbin/bgpd/config/bgpd.conf.18.in
  regress/usr.sbin/bgpd/config/bgpd.conf.18.ok

commit fJ7bnPPH4yBSk8xF
Author: claudio
Date: 2026/03/02 12:09:10

  Print the new statistics added to the RDE.
  OK tb@

  usr.sbin/bgpctl/output.c
  usr.sbin/bgpctl/output_json.c
  usr.sbin/bgpctl/output_ometric.c

commit TAtHakO1GZ8s44ZB
Author: claudio
Date: 2026/03/02 12:08:30

  Add following statistics:

  - ASPA table size and count
  - RIB entry queue lenght (both per-peer and global)
  - ibuf queue length and size (both per-peer and global)

  OK tb@

  usr.sbin/bgpd/bgpd.h
  usr.sbin/bgpd/control.c
  usr.sbin/bgpd/rde_aspa.c
  usr.sbin/bgpd/rde_peer.c
  usr.sbin/bgpd/session.h

commit H2qEyHUZnj8edTRY
Author: claudio
Date: 2026/03/02 12:03:04

  In peer_delete ensure that the rib_pq_head TAILQ is empty by concatenating
  it onto the peerself queue.

  In general this should never happen since the peer is down for 1h before
  being removed and during that time the queue should empty but better safe
  than sorry.

  OK tb@

  usr.sbin/bgpd/rde_peer.c

commit Urw0wqxzlxmYOQ9A
Author: claudio
Date: 2026/03/02 12:00:38

  In peer_up() call peer_down() instead of inlineing the work.

  This is now possible since the split of peer_down() and peer_delete()
  changed peer_down() to no longer free the peer.
  OK tb@

  usr.sbin/bgpd/rde_peer.c

commit 0C0icqFdli7jno9o
Author: tb
Date: 2026/03/02 10:38:44

  acme-client: use accessors instead of reaching into ASN1_STRING

  ok sthen

  usr.sbin/acme-client/revokeproc.c

commit KSvTAeJobxN3c0T7
Author: stsp
Date: 2026/03/02 10:00:51

  Send the new system statistics command if supported by iwx(4) firmware.

  This will be needed for BZ devices.

  ok phessler@, kettenis@

  Tested:
  AX200: stsp
  AX201: kirill
  AX210 (MA): kettenis
  AX211: phessler
  AX211 (BZ): stsp

  sys/dev/pci/if_iwx.c
  sys/dev/pci/if_iwxreg.h
  sys/dev/pci/if_iwxvar.h

commit 39lrD06ZAX5FIMvh
Author: claudio
Date: 2026/03/02 10:00:31

  Further improve the log messages for attribute parse errors.

  Add an extra case for the case where the length of the attribute
  overflows the attribute buffer. This is a reasonably common issues
  and therefor the extra message that includes attribute, flags and length.

  OK tb@

  usr.sbin/bgpd/rde.c

commit 8306oep5QhWLK87d
Author: claudio
Date: 2026/03/02 09:56:33

  Fix in the OTC attribute parser for ROLE_PEER.

  For sessions with peer role the ASnum of the OTC attribute is compared to
  the remote ASnum of the session. At that point in the parser the data
  should not be consumed. So use an extra temporary buffer to extract the
  OTC value. This is similar to the case in ATTR_AS4_AGGREGATOR where the
  same trick is used.

  OK tb@

  usr.sbin/bgpd/rde.c

commit Mvh1cwrv6oWspFPF
Author: claudio
Date: 2026/03/02 09:51:48

  Adjust mrt config setting of the group id.

  The code in the session engine expect group id to be 0 for any case where
  only a single peer is targeted. Only set the group id for group matches.

  Adjust the logic in printconf.c to follow this behaviour. Add a comment
  to better explain why the logic is the way it is for future me.

  OK tb@

  usr.sbin/bgpd/parse.y
  usr.sbin/bgpd/printconf.c

commit chc8CUmOfwikMvB0
Author: nicm
Date: 2026/03/02 08:48:57

  Revert r1.343 for the moment since it breaks behaviour (#() in
  status-left) that we need to keep.

  usr.bin/tmux/format.c

commit uLRuvxVxiMBVBptR
Author: nicm
Date: 2026/03/02 08:41:43

  Do not leak active/all strings in format_loop_windows; from Huihui Huang
  in GitHub issue 4898.

  usr.bin/tmux/format.c

commit y6kLqN7VeUZkP2yf
Author: nicm
Date: 2026/03/02 08:39:44

  Fix incorrect placement of It Xo, from Dane Jensen.

  usr.bin/tmux/tmux.1

commit MnoVt02cccUHu0IS
Author: nicm
Date: 2026/03/02 08:38:23

  Fix memory leak, from Emmanuel Ugwu in GitHub issue 4900.

  usr.bin/tmux/menu.c

commit J4gkXq1CVjnhMjtT
Author: djm
Date: 2026/03/02 02:40:15

  Move banner exchange to sshd-auth process

  Previously, exchange of the initial SSH- banners was performed
  by the privileged sshd-session monitor. This moves it to the
  unprivileged sshd-auth subprocess, removing ~200 LoC from the
  monitor's privileged attack surface.

  The monitor gains a new "setcompat" RPC to allow sshd-auth to
  inform it of bug compat flags picked up from the client's banner.

  feedback dtucker@, ok markus@ deraadt@

  usr.bin/ssh/compat.c
  usr.bin/ssh/monitor.c
  usr.bin/ssh/monitor.h
  usr.bin/ssh/monitor_wrap.c
  usr.bin/ssh/monitor_wrap.h
  usr.bin/ssh/packet.h
  usr.bin/ssh/sshd-auth.c
  usr.bin/ssh/sshd-session.c