Build date: 1776117603 - Mon Apr 13 22:00:03 UTC 2026
Build cvs date: 1776107639 - Mon Apr 13 19:13:59 UTC 2026
Build id: 2026-04-14.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-ramdisk-diet.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P distrib/sets/lists/man/mi
P lib/libc/time/ctime.3
P lib/libcrypto/x509/x509_constraints.c
P lib/libcrypto/x509/x509_internal.h
P regress/lib/libcrypto/x509/constraints.c
P sbin/slaacd/engine.c
P share/man/man4/Makefile
P share/man/man4/acpi.4
U share/man/man4/ispi.4
P share/man/man4/man4.riscv64/Makefile
U share/man/man4/man4.riscv64/smte.4
U share/man/man4/man4.riscv64/smtpinctrl.4
P sys/arch/riscv64/conf/GENERIC
P sys/arch/riscv64/conf/RAMDISK
P sys/arch/riscv64/conf/files.riscv64
U sys/arch/riscv64/dev/if_smte.c
P sys/arch/riscv64/dev/smtclock.c
P sys/arch/sparc64/sparc64/pmap.c
P sys/conf/newvers.sh
P sys/dev/pci/drm/drm_file.c
P sys/dev/pci/drm/drm_ioc32.c
P sys/dev/pci/drm/drm_mode_config.c
P sys/dev/pci/drm/amd/amdgpu/amdgpu_drv.c
P sys/dev/pci/drm/amd/amdgpu/amdgpu_userq.c
P sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.h
P sys/dev/pci/drm/amd/amdgpu/psp_v11_0.c
P sys/dev/pci/drm/amd/amdkfd/kfd_priv.h
P sys/dev/pci/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c
P sys/dev/pci/drm/amd/display/dc/resource/dce100/dce100_resource.c
P sys/dev/pci/drm/amd/display/dc/resource/dce110/dce110_resource.c
P sys/dev/pci/drm/amd/display/dc/resource/dce112/dce112_resource.c
P sys/dev/pci/drm/amd/display/dc/resource/dce120/dce120_resource.c
P sys/dev/pci/drm/amd/display/dc/resource/dce60/dce60_resource.c
P sys/dev/pci/drm/amd/display/dc/resource/dce80/dce80_resource.c
P sys/dev/pci/drm/amd/pm/swsmu/smu11/smu_v11_0.c
P sys/dev/pci/drm/amd/pm/swsmu/smu12/smu_v12_0.c
P sys/dev/pci/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c
P sys/dev/pci/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c
P sys/dev/pci/drm/amd/pm/swsmu/smu14/smu_v14_0.c
P sys/dev/pci/drm/i915/display/g4x_dp.c
P sys/dev/pci/drm/i915/display/icl_dsi.c
M sys/dev/usb/uhidev.c
P sys/net/if_wg.c
P sys/net/pf_ioctl.c
P sys/net/pf_norm.c
P sys/net/pf_table.c
P sys/uvm/uvm_pdaemon.c
P sys/uvm/uvm_swap.c
P usr.bin/ssh/packet.c
P usr.bin/tmux/cmd-command-prompt.c
P usr.bin/tmux/control-notify.c
P usr.bin/tmux/status.c
P usr.bin/tmux/tmux.1
P usr.bin/tmux/tmux.h
M usr.sbin/bgpd/session.c
P usr.sbin/rad/engine.c
P usr.sbin/rpki-client/ccr.c
P usr.sbin/rpki-client/print.c
P usr.sbin/rpki-client/x509.c

commit lQAzqwOOhFMlQMNX
Author: deraadt
Date: 2026/04/13 19:13:59

  sync

  distrib/sets/lists/man/mi

commit DVMShbKEHijid0cu
Author: deraadt
Date: 2026/04/13 17:22:23

  move out of -beta

  sys/conf/newvers.sh

commit 2hllHbcwzM9kvNag
Author: beck
Date: 2026/04/13 17:04:23

  Prior to this we substring matched and allowed a leading .
  on a SAN DNSname constraint. This is not correct, as with
  a DNSname constraint, it may exacly match or match zero or
  more additional components on the front of the candidte to
  match.

  Spotted by Haruto Kimura <hkimura2026@gmail.com>

  ok tb@ kenjiro@

  lib/libcrypto/x509/x509_constraints.c
  lib/libcrypto/x509/x509_internal.h
  regress/lib/libcrypto/x509/constraints.c

commit VwcOZUXTctUpXjnH
Author: tb
Date: 2026/04/13 16:01:54

  Document RETURN value for timegm(3)

  APIs with in-band errors that conflate the error with a legitimate return
  value are about the worst you can get. Near and dear to my heart is the API
  aptly described as "gibbering eidritch horror" by beck: ASN1_INTEGER_get(3).
  Adapt the wording of its RETURN VALUES to timegm() and mktime(), for which
  Dec 31, 1969 at 23:59:59 will yield the error return -1 and thereby errata.

  Missing docs pointed out by claudio a while back and yesterday by deraadt

  ok deraadt millert

  lib/libc/time/ctime.3

commit W1CqX6gmGD0XZUTL
Author: bluhm
Date: 2026/04/13 16:00:49

  At the end of parsing the http response header do some sanity checks
  to ensure that the response includes all needed data.

  Right now only the presence of a Location header is checked if a HTTP
  redirect was returned (e.g. a 301 status).

  Different fix for a report from Daniel Anderson
  from claudio@; OK tb@

  rpki-client: fix incorrect error exit in x509_get_time()

  A UTCTime represents a time between Jan 1, 1950 and Dec 31, 2049. This
  includes Dec 31, 1969, 23:59:59 UTC, which translates to epoch -1 when
  converted as a time_t. timegm()'s in-band error conflates this time with
  its error return, so a hard error for this creates a DoS.

  Instead, return an error for ASN.1 times that translate to negative time_t
  and bubble up the error to reject the RPKI product as malformed. Real life
  notBefore (or equivalent) are in the ongoing millenium, although strictly
  speaking this is not guaranteed since Validity windows need not nest.

  Thanks to Yuheng Zhang, Qi Wang, Jianjun Chen from Tsinghua University,
  and Teatime Lab for reporting.

  from tb@; ok claudio job

  this is errata/7.7/036_rpki.patch.sig

  usr.sbin/rpki-client/x509.c

commit pLSyz3Doi4Sccxou
Author: bluhm
Date: 2026/04/13 16:00:19

  At the end of parsing the http response header do some sanity checks
  to ensure that the response includes all needed data.

  Right now only the presence of a Location header is checked if a HTTP
  redirect was returned (e.g. a 301 status).

  Different fix for a report from Daniel Anderson
  from claudio@; OK tb@

  rpki-client: fix incorrect error exit in x509_get_time()

  A UTCTime represents a time between Jan 1, 1950 and Dec 31, 2049. This
  includes Dec 31, 1969, 23:59:59 UTC, which translates to epoch -1 when
  converted as a time_t. timegm()'s in-band error conflates this time with
  its error return, so a hard error for this creates a DoS.

  Instead, return an error for ASN.1 times that translate to negative time_t
  and bubble up the error to reject the RPKI product as malformed. Real life
  notBefore (or equivalent) are in the ongoing millenium, although strictly
  speaking this is not guaranteed since Validity windows need not nest.

  Thanks to Yuheng Zhang, Qi Wang, Jianjun Chen from Tsinghua University,
  and Teatime Lab for reporting.

  from tb@; ok claudio job

  this is errata/7.8/030_rpki.patch.sig

  usr.sbin/rpki-client/x509.c

commit ZujAlmklvHqliH3q
Author: bluhm
Date: 2026/04/13 15:50:39

  These programs spin if they receive a RA from the local network with
  ND option with length 0.  from Daniel Wade
  from deraadt@; ok florian

  this is errata/7.7/035_v6daemons.patch.sig

  sbin/slaacd/engine.c
  usr.sbin/rad/engine.c

commit R9loaxKDgDg9Whnu
Author: bluhm
Date: 2026/04/13 15:49:37

  These programs spin if they receive a RA from the local network with
  ND option with length 0.  from Daniel Wade
  from deraadt@; ok florian

  this is errata/7.8/029_v6daemons.patch.sig

  sbin/slaacd/engine.c
  usr.sbin/rad/engine.c

commit Dvb11rhFNLSk4qdD
Author: kettenis
Date: 2026/04/13 15:23:57

  The fault handling code that deals with getting back from swap for an
  anon does not expect failures because we are short on memory.  These
  are synchronous operations so we're expected to wait on memory to
  become available.  This got broken in rev 1.178 (Back out the
  pagedaemon "oom" reserve and sleeping point).  Bring back the code to
  allocate bounce memory using uvm_pglistalloc(9) but only use it for
  the !async case (which will never be use by the pagedaemon).

  This fixes random segfaults when under memory pressure and init dying
  with SIGILL because it can't copy out a signal frame to the stack when
  it happens to trigger such a segfault.

  With deraadt@, who wrote the code to consolidate the allocation of
  bounce memory.

  ok deraadt@

  sys/uvm/uvm_swap.c

commit 3lXf6OQT88GbDm6j
Author: deraadt
Date: 2026/04/13 14:56:46

  decrease the agressiveness of inactive growth from the previous commit.
  A small increase is enough; if not enough free is created in one round,
  it will be created the next time.
  long discussions with kirill

  sys/uvm/uvm_pdaemon.c

commit 5gBpr1o4toXPpYXv
Author: kettenis
Date: 2026/04/13 12:20:13

  smte(4)

  share/man/man4/man4.riscv64/Makefile
  share/man/man4/man4.riscv64/smte.4

commit jXWz644ZghbAzoEW
Author: kettenis
Date: 2026/04/13 12:03:19

  Add smte(4), a driver for the ethernet interfaces of the SpacemiT K1 SoC.

  ok jsing@

  sys/arch/riscv64/conf/GENERIC
  sys/arch/riscv64/conf/RAMDISK
  sys/arch/riscv64/conf/files.riscv64
  sys/arch/riscv64/dev/if_smte.c

commit r5FLSRLCm9iqRj3I
Author: kettenis
Date: 2026/04/13 12:02:19

  Add clocks for pinctrl and ethernet.

  sys/arch/riscv64/dev/smtclock.c

commit FDdHpgBDuCJueQ5X
Author: nicm
Date: 2026/04/13 09:35:20

  Do not notify clients if not fully initialized, from Ben Maurer in
  GitHub issue 4980.

  usr.bin/tmux/control-notify.c

commit erZbdOxpha92lx9i
Author: nicm
Date: 2026/04/13 09:33:09

  Add -C flag to command-prompt to match display-message -C (do not freeze
  panes). From Barrett Ruth in GitHub issue 4978.

  usr.bin/tmux/cmd-command-prompt.c
  usr.bin/tmux/status.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h

commit 5DTTalxM3LlXj8TA
Author: jsg
Date: 2026/04/13 09:25:26

  add smtpinctrl(4); ok kettenis@

  share/man/man4/man4.riscv64/Makefile
  share/man/man4/man4.riscv64/smtpinctrl.4

commit 29XmpIvPTsAyRg4x
Author: job
Date: 2026/04/13 09:22:46

  Fix CCR ROAIPAddressFamily sort order

  RFC 9582 section 4.3.3 defines the canonical form of ipAddrBlocks.

  Thanks to Bart Bakker from RIPE NCC for reporting.

  OK tb@

  usr.sbin/rpki-client/ccr.c

commit TAtLkQ5EUmCjtYJi
Author: kettenis
Date: 2026/04/13 09:10:14

  When we detect stale TSB entries during a context switch, don't enter DDB
  but invalidate the stale entries and print a warning.

  ok claudio@, deraadt@

  sys/arch/sparc64/sparc64/pmap.c

commit UzZFMc5qLVAzXAZ5
Author: job
Date: 2026/04/13 08:18:33

  Also show the duration of the current session through the ~I escape

  OK dtucker@

  usr.bin/ssh/packet.c

commit lp9sZPQMoKbUmjpf
Author: tb
Date: 2026/04/13 03:36:10

  rpki-client: fix incorrect error exit in x509_get_time()

  A UTCTime represents a time between Jan 1, 1950 and Dec 31, 2049. This
  includes Dec 31, 1969, 23:59:59 UTC, which translates to epoch -1 when
  converted as a time_t. timegm()'s in-band error conflates this time with
  its error return, so a hard error for this creates a DoS.

  Instead, return an error for ASN.1 times that translate to negative time_t
  and bubble up the error to reject the RPKI product as malformed. Real life
  notBefore (or equivalent) are in the ongoing millenium, although strictly
  speaking this is not guaranteed since Validity windows need not nest.

  Thanks to Yuheng Zhang, Qi Wang, Jianjun Chen from Tsinghua University,
  and Teatime Lab for reporting.

  ok claudio job

  usr.sbin/rpki-client/x509.c

commit 10p6G3tHR20vGosf
Author: tb
Date: 2026/04/13 03:14:28

  rpki-client: ignore malformed revocationDate in CRLs

  Do not treat x509_get_time() failure as a hard error in file mode.
  Just skip the entry we can't format and emit a warning.

  ok claudio

  usr.sbin/rpki-client/print.c

commit Jogop0ZxMOcoKTV6
Author: dlg
Date: 2026/04/13 01:10:39

  check the prefix (cidr) len for an allowedip is valid.

  ie, don't allow prefixes greater than 32 or 128 bits for ipv4 and
  ipv6 respectively.

  found by Daniel Wade (danjwade95 at gmail dot com), who also suggested
  the fix.
  ok deraadt@ jmatthew@

  sys/net/if_wg.c

commit EbbRpHS3Xro27XsL
Author: jsg
Date: 2026/04/13 01:09:07

  mention inthid(4) and ispi(4)

  share/man/man4/acpi.4

commit 5HY123n2IOtpSX72
Author: jsg
Date: 2026/04/13 01:05:49

  add ispi(4)

  share/man/man4/Makefile
  share/man/man4/ispi.4

commit C4Wt50na4PyUzuo6
Author: deraadt
Date: 2026/04/12 23:57:31

  These programs spin if they receive a RA from the local network with
  ND option with length 0.  from Daniel Wade
  ok florian
  this will be errata 7.7/036_v6daemons.patch and 7.8/030_v6daemons.patch

  sbin/slaacd/engine.c
  usr.sbin/rad/engine.c

commit nyB4qTiYqothC4bx
Author: jsg
Date: 2026/04/12 23:27:43

  drm/amd/display: Fix DCE LVDS handling

  From Alex Deucher
  24ce568f7553a55404cddf8f0fca2a7c0ea9451c in linux-6.18.y/6.18.22
  90d239cc53723c1a3f89ce08eac17bf3a9e9f2d4 in mainline linux

  sys/dev/pci/drm/amd/display/dc/resource/dce100/dce100_resource.c
  sys/dev/pci/drm/amd/display/dc/resource/dce110/dce110_resource.c
  sys/dev/pci/drm/amd/display/dc/resource/dce112/dce112_resource.c
  sys/dev/pci/drm/amd/display/dc/resource/dce120/dce120_resource.c
  sys/dev/pci/drm/amd/display/dc/resource/dce60/dce60_resource.c
  sys/dev/pci/drm/amd/display/dc/resource/dce80/dce80_resource.c

commit YpEUxltICmTE7NC7
Author: jsg
Date: 2026/04/12 23:23:52

  drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13

  From Yang Wang
  ba9be472a438ea348f0fffaaebf541960ee643db in linux-6.18.y/6.18.22
  3e6dd28a11083e83e11a284d99fcc9eb748c321c in mainline linux

  sys/dev/pci/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c
  sys/dev/pci/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c

commit KTjXgCh5So63xNXo
Author: jsg
Date: 2026/04/12 23:21:02

  drm/amdgpu/pm: drop SMU driver if version not matched messages

  From Alex Deucher
  2b8ae82d85d75347984297ed60d5005622992f6b in linux-6.18.y/6.18.22
  a3ffaa5b397f4df9d6ac16b10583e9df8e6fa471 in mainline linux

  sys/dev/pci/drm/amd/pm/swsmu/smu11/smu_v11_0.c
  sys/dev/pci/drm/amd/pm/swsmu/smu12/smu_v12_0.c
  sys/dev/pci/drm/amd/pm/swsmu/smu14/smu_v14_0.c

commit uDMrzVU2EpssF2Vh
Author: jsg
Date: 2026/04/12 23:17:56

  drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB

  From Donet Tom
  77c918eaa4c916751769242567407f61c6af142a in linux-6.18.y/6.18.22
  4487571ef17a30d274600b3bd6965f497a881299 in mainline linux

  sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.h
  sys/dev/pci/drm/amd/amdkfd/kfd_priv.h

commit x2q2WK1srljtFLV2
Author: jsg
Date: 2026/04/12 23:14:28

  drm/amdgpu: validate doorbell_offset in user queue creation

  From Junrui Luo
  3543005a42d7e8e12b21897ef6798541bf7cbcd3 in linux-6.18.y/6.18.22
  a018d1819f158991b7308e4f74609c6c029b670c in mainline linux

  sys/dev/pci/drm/amd/amdgpu/amdgpu_userq.c

commit 3aBqyXPr0y3XAhb6
Author: jsg
Date: 2026/04/12 23:12:22

  drm/amdgpu: Fix wait after reset sequence in S4

  From Lijo Lazar
  1e130cf9cd172c684ff471d9cd8bccf06db64d88 in linux-6.18.y/6.18.22
  daf470b8882b6f7f53cbfe9ec2b93a1b21528cdc in mainline linux

  sys/dev/pci/drm/amd/amdgpu/amdgpu_drv.c
  sys/dev/pci/drm/amd/amdgpu/psp_v11_0.c

commit SPgtt7fIVHcvepMh
Author: jsg
Date: 2026/04/12 23:10:19

  drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP

  From Ville Syrjala
  d0fd0bea847526dbe3d862c01e98a1617538565d in linux-6.18.y/6.18.22
  9c9a57e4e337f94e23ddf69263fd0685c91155fb in mainline linux

  sys/dev/pci/drm/i915/display/g4x_dp.c

commit SPPtL76ZyvFMS9MN
Author: jsg
Date: 2026/04/12 23:08:00

  drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

  From Ville Syrjala
  86e926b108880c0109b8635e459450447156aeb7 in linux-6.18.y/6.18.22
  4dfce79e098915d8e5fc2b9e1d980bc3251dd32c in mainline linux

  sys/dev/pci/drm/i915/display/icl_dsi.c

commit jLKOruLMKayfoekh
Author: jsg
Date: 2026/04/12 23:05:35

  drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()

  From Srinivasan Shanmugam
  10c13c111d0d7f8e101c742feff264fc98e3f9f7 in linux-6.18.y/6.18.22
  e927b36ae18b66b49219eaa9f46edc7b4fdbb25e in mainline linux

  sys/dev/pci/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c

commit gAPAukZnt3dYxJsz
Author: jsg
Date: 2026/04/12 23:02:30

  drm/ioc32: stop speculation on the drm_compat_ioctl path

  From Greg Kroah-Hartman
  f0e441be08a2eab10b2d06fccfa267ee599dd6b3 in linux-6.18.y/6.18.22
  f8995c2df519f382525ca4bc90553ad2ec611067 in mainline linux

  sys/dev/pci/drm/drm_ioc32.c

commit n3xoSkmecbgL3Vtm
Author: jsg
Date: 2026/04/12 23:00:13

  Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"

  From Maarten Lankhorst
  89c3a4ba60309cc6333a8f3940a1866fc21a9000 in linux-6.18.y/6.18.22
  45ebe43ea00d6b9f5b3e0db9c35b8ca2a96b7e70 in mainline linux

  sys/dev/pci/drm/drm_file.c
  sys/dev/pci/drm/drm_mode_config.c

commit r5ot50HUcTMhkPPr
Author: sashan
Date: 2026/04/12 22:42:08

  pfr_pool_get() in call to pfr_prepare_network()must use af
  instead of hardcoded AF_INET

  Issues reported and patch submitted by:
  Renaud Allard <renaud () allard ! it>

  OK sashan@

  sys/net/pf_table.c

commit 9tkx7CErxaBRgSFu
Author: sashan
Date: 2026/04/12 22:34:19

  pf_frag_compare() should not be using subtraction to compare
  fragment IDs

  Issues reported and patch submitted by:
  Renaud Allard <renaud () allard ! it>

  OK sashan@

  sys/net/pf_norm.c

commit hSYOHjSiowMLl0cI
Author: sashan
Date: 2026/04/12 22:29:15

  Fix error handling in pf_sourcelim_add()

  There are two issues in pf_sourcelim_add() error path:
  - stale pointers are left in pf_sourcelim_id_tree_inactive when
  duplicate source limiter instance is found in pf_sourcelim_nm_tree

  - overload table may leak when insertion of new source limiter instance
  fails.

  Both issues reported and patch submitted by:
  Renaud Allard <renaud () allard ! it>

  OK sashan@

  sys/net/pf_ioctl.c