Build date: 1780524003 - Wed Jun  3 22:00:03 UTC 2026
Build cvs date: 1780517929 - Wed Jun  3 20:18:49 UTC 2026
Build id: 2026-06-04.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P regress/usr.sbin/bgpd/config/bgpd.conf.16.ok
P regress/usr.sbin/bgpd/integrationtests/bgpd.as0.conf
P sys/dev/ic/qwx.c
P sys/dev/ic/qwxvar.h
P sys/dev/pci/if_mwx.c
P sys/dev/pci/if_mwxreg.h
P sys/dev/pci/if_qwx_pci.c
M sys/dev/usb/uhidev.c
RCS file: /cvs/src/usr.bin/kdump/kdump.c,v
retrieving revision 1.166
retrieving revision 1.167
Merging differences between 1.166 and 1.167 into kdump.c
usr.bin/kdump/kdump.c already contains the differences between 1.166 and 1.167
P usr.bin/tmux/format.c
P usr.bin/tmux/tmux.1
P usr.bin/tmux/tty.c
M usr.sbin/bgpd/session.c
P usr.sbin/httpd/http.h
P usr.sbin/httpd/httpd.c
P usr.sbin/httpd/httpd.conf.5
P usr.sbin/httpd/httpd.h
P usr.sbin/httpd/server_http.c
P usr.sbin/relayd/http.h
P usr.sbin/relayd/relay_http.c
P usr.sbin/relayd/relayd.c
P usr.sbin/relayd/relayd.h

commit FVB8OY6Jlyv9sCVs
Author: nicm
Date: 2026/06/03 20:18:49

  Change run-shell expansion to just be #{1} etc not #1 which interferes
  with colours.

  usr.bin/tmux/format.c
  usr.bin/tmux/tmux.1

commit BeiEGEtQtlbYFXZ1
Author: nicm
Date: 2026/06/03 20:16:14

  Change so panes scroll when the cursor is at the top instead of halfway
  down, from Michael Grant.

  usr.bin/tmux/tty.c

commit KPsKNIXKf4Q28Kas
Author: kirill
Date: 2026/06/03 20:00:34

  relayd: strip Content-Length for chunked messages

  RFC 9112 section 6.1 requires an intermediary that forwards a message
  carrying Transfer-Encoding to remove any received Content-Length first.
  relayd already parses the body as chunked in this case, but previously
  left Content-Length in the header tree, so the backend could receive
  both framing fields and choose a different message boundary.

  When chunked framing is selected, remove Content-Length before header
  emission; this preserves relayd's chunked body handling while avoiding
  CL.TE ambiguity downstream.

  Reproted by: Stuart Thomas

  OK: rsaodwski@

  usr.sbin/relayd/http.h
  usr.sbin/relayd/relay_http.c

commit 6IOi8F3CZ8t6pamX
Author: kirill
Date: 2026/06/03 20:00:07

  httpd: reject CL.TE request framing

  RFC 9112 sections 6.1 and 6.3 identify a request containing both
  Transfer-Encoding and Content-Length as ambiguous request smuggling
  input. httpd is the origin server, not an intermediary, so it should not
  rewrite the message and continue processing it.

  Reject chunked requests that also carry Content-Length before method
  specific body handling or FastCGI parameter generation; this avoids
  exposing inconsistent framing metadata to applications.

  Reproted by: Stuart Thomas

  OK: rsaodwski@

  usr.sbin/httpd/http.h
  usr.sbin/httpd/server_http.c

commit Wr786t7S89HRhgKM
Author: rsadowski
Date: 2026/06/03 19:26:56

  relayd: reject obs-fold to prevent parser differentials (RFC 9112 5.2)

  Replace silent kv_extend normalisation with an unconditional reject.
  RFC 9112 5.2 permits rejection; it is safer than SP replacement
  for a forwarding proxy and handles both request and response direction.
  kv_extend is therefore no longer required.

  Reported by Stuart Thomas, OK kirill@

  usr.sbin/relayd/relay_http.c
  usr.sbin/relayd/relayd.c
  usr.sbin/relayd/relayd.h

commit aBkfjZCHuHqyiDsr
Author: rsadowski
Date: 2026/06/03 19:25:06

  httpd: reject obs-fold with 400 (RFC 9112 5.2)

  Replace silent kv_extend normalisation with an unconditional 400.
  RFC 9112 5.2 explicitly permits rejection; it is the safer choice
  over SP replacement, which hides parser ambiguity downstream.

  Reported by Stuart Thomas, OK kirill@

  usr.sbin/httpd/httpd.c
  usr.sbin/httpd/httpd.h
  usr.sbin/httpd/server_http.c

commit Q78DgarOS1ORFhGA
Author: claudio
Date: 2026/06/03 19:21:45

  Fixup regress after chaning the default for 'announce as-4byte' to enforce.

  Friendly reminder that I forgot to commit this by anton@

  regress/usr.sbin/bgpd/config/bgpd.conf.16.ok
  regress/usr.sbin/bgpd/integrationtests/bgpd.as0.conf

commit SLaWMuTizy0jSDjT
Author: claudio
Date: 2026/06/03 15:11:50

  Set MT_HW_EMI_CTL_SLPPROT_EN on 7925 in mwx_attach and then do a
  WF sys reset.

  From kevlo@
  VS: ----------------------------------------------------------------------

  sys/dev/pci/if_mwx.c
  sys/dev/pci/if_mwxreg.h

commit YYZxTOCWI2ZHmyXF
Author: claudio
Date: 2026/06/03 11:48:57

  In mwx_attach() do the powermanagement dance earlier and also check
  for MT7920 that come with a 7921 PCI id.

  From kevlo@

  sys/dev/pci/if_mwx.c
  sys/dev/pci/if_mwxreg.h

commit r5B9QFdTYbDnzTeE
Author: claudio
Date: 2026/06/03 11:38:02

  Cleanup prototypes.

  sys/dev/pci/if_mwx.c

commit DUIQFcO4UItpJ7TQ
Author: claudio
Date: 2026/06/03 11:22:50

  Adjust mwx_mcu_rx_event() to work on both connac2 and connac3 devices.
  Tested on 7921 and 7925

  sys/dev/pci/if_mwx.c
  sys/dev/pci/if_mwxreg.h

commit MKU6c0QZqBSylCns
Author: stsp
Date: 2026/06/03 06:59:51

  Fix roaming between APs with qwx(4).

  Implement a custom bgscan_done() handler which waits for Tx queues to
  drain and handles the AP switch properly by disassociating the device
  from our old AP while we still have the old AP's MAC address available
  in ic_bss.

  Previously, the qwx_newstate task would run a firmware disassociation
  sequence with the _new_ AP's MAC address before trying to associate.
  The firmware didn't like this and we ran into errors such as:

  qwx0: delete key 3 failed: error 58
  qwx0: failed to delete peer vdev_id 0 addr xx:xx:xx:xx:xx:xx ret 58
  qwx0: unable to delete BSS peer: 58

  tested by ajacoutot@ and myself on amd64, and by phessler@ on arm64

  ok phessler@, "it works great" ajacoutot@

  sys/dev/ic/qwx.c
  sys/dev/ic/qwxvar.h
  sys/dev/pci/if_qwx_pci.c

commit 89XgHwR8Gn3HJ9LS
Author: stsp
Date: 2026/06/03 06:57:42

  always allow data frame interrupts in qwx(4) while the interface is UP

  This helps with situations where we would fail to receive the initial
  EAPOL frame during WPA handshakes with the AP, in particular when
  roaming between APs.

  tested by ajacoutot@ and myself on amd64, and by phessler@ on arm64

  sys/dev/ic/qwx.c

commit Kb4P2FPNQ74xzwCa
Author: jsg
Date: 2026/06/03 06:10:06

  correct mdoc usage

  usr.sbin/httpd/httpd.conf.5

commit BoK7BbLiDHq9T59g
Author: jsg
Date: 2026/06/03 05:59:45

  speficfication -> specification

  usr.sbin/httpd/httpd.conf.5