Build date: 1785448803 - Thu Jul 30 22:00:03 UTC 2026
Build cvs date: 1785439717 - Thu Jul 30 19:28:37 UTC 2026
Build id: 2026-07-31.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P gnu/llvm/lld/ELF/Driver.cpp
P gnu/llvm/lld/ELF/InputFiles.cpp
P gnu/llvm/lld/ELF/InputSection.cpp
P gnu/llvm/lld/ELF/Relocations.cpp
P gnu/llvm/lld/ELF/Relocations.h
P gnu/llvm/lld/ELF/Symbols.cpp
P gnu/llvm/lld/ELF/Symbols.h
P gnu/llvm/lld/ELF/SyntheticSections.cpp
P gnu/llvm/lld/ELF/SyntheticSections.h
P gnu/llvm/lld/ELF/Target.cpp
P gnu/llvm/lld/ELF/Target.h
P gnu/llvm/lld/ELF/Writer.cpp
P gnu/llvm/lld/ELF/Arch/SPARCV9.cpp
P gnu/llvm/llvm/include/llvm/BinaryFormat/ELF.h
P gnu/llvm/llvm/lib/Target/Sparc/SparcISelLowering.cpp
P gnu/llvm/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp
P lib/libutil/imsg-buffer.c
P share/misc/zipcodes
P sys/arch/amd64/amd64/identcpu.c
P sys/arch/amd64/amd64/machdep.c
P sys/arch/amd64/include/specialreg.h
M sys/dev/usb/uhidev.c
P sys/netinet/igmp.c
P sys/netinet/in_var.h
P usr.bin/ftp/fetch.c
P usr.bin/ssh/auth2-hostbased.c
P usr.bin/ssh/auth2-pubkey.c
P usr.bin/ssh/kexgen.c
P usr.bin/ssh/kexmlkem768ecdh.c
P usr.bin/ssh/ssh-ed25519.c
P usr.bin/ssh/ssh-mldsa-eddsa.c
P usr.sbin/acme-client/base64.c
P usr.sbin/bgpd/bgpd.c
P usr.sbin/bgpd/control.c
P usr.sbin/bgpd/rde.c
M usr.sbin/bgpd/session.c
P usr.sbin/lpd/engine_lpr.c
P usr.sbin/lpd/proc.c
P usr.sbin/ospfd/neighbor.c
P usr.sbin/relayctl/relayctl.8
P usr.sbin/relayctl/relayctl.c

commit naksjXbDU5YYXz8o
Author: kirill
Date: 2026/07/30 19:28:37

  gnu/llvm: improve sparc64 support

  With huge help to test it by tb@

  OK: robert@

  gnu/llvm/lld/ELF/Driver.cpp
  gnu/llvm/lld/ELF/InputFiles.cpp
  gnu/llvm/lld/ELF/InputSection.cpp
  gnu/llvm/lld/ELF/Relocations.cpp
  gnu/llvm/lld/ELF/Relocations.h
  gnu/llvm/lld/ELF/Symbols.cpp
  gnu/llvm/lld/ELF/Symbols.h
  gnu/llvm/lld/ELF/SyntheticSections.cpp
  gnu/llvm/lld/ELF/SyntheticSections.h
  gnu/llvm/lld/ELF/Target.cpp
  gnu/llvm/lld/ELF/Target.h
  gnu/llvm/lld/ELF/Writer.cpp
  gnu/llvm/lld/ELF/Arch/SPARCV9.cpp
  gnu/llvm/llvm/include/llvm/BinaryFormat/ELF.h
  gnu/llvm/llvm/lib/Target/Sparc/SparcISelLowering.cpp
  gnu/llvm/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp

commit 1NvDOPCMZVpPWJ81
Author: claudio
Date: 2026/07/30 17:55:33

  Fix typo noticed by dv@

  lib/libutil/imsg-buffer.c

commit o74Wk1KhcTbMHkao
Author: bluhm
Date: 2026/07/30 14:57:46

  Do not use dangling pointer in igmp multicast.

  Due to different lifetime of interfaces and multicast address
  structure, the pointer to router info could get invalid.  Do not
  cache the pointer of struct router_info in struct in_multi.  Instead
  always walk the list with appropriate lock.

  Reported-by: syzbot+4a08786178b626883543@syzkaller.appspotmail.com
  OK gnezdo@ who provided a simmilar fix; OK claudio@

  sys/netinet/igmp.c
  sys/netinet/in_var.h

commit xvUgSphsoEOL7l2y
Author: hshoexer
Date: 2026/07/30 14:04:04

  SEV-SNP: sysctl to indicate virtualization mode

  The sysctl indicates wether we are a host or a guest.  In the latter
  case show which SEV mode is if any.

  ok mlarkin@

  sys/arch/amd64/amd64/machdep.c

commit QMA5kDbTpwK5mOgk
Author: hshoexer
Date: 2026/07/30 14:00:48

  SEV-SNP: Log SEV-SNP guestmode

  NB:  The definition SEV_STAT_SNP_ACTIVE is straight from the AMD
  documentation.  The use of "active" instead of "enabled" -- as with
  the other definitions -- feels inconsistent.  However, "SNP enabled"
  in the context of SNP means the host system is able to run VMs using
  SNP.  And "SNP active" means, the guest is actually using SNP.  And
  not just e.g. SEV-ES.

  ok mlarkin@

  sys/arch/amd64/amd64/identcpu.c
  sys/arch/amd64/include/specialreg.h

commit 6urYMwnCGd1c50DH
Author: claudio
Date: 2026/07/30 13:56:06

  Use int as type for the 'n' variable used with imsgbuf_read and imsgbuf_get

  OK tb@

  usr.sbin/bgpd/bgpd.c
  usr.sbin/bgpd/control.c
  usr.sbin/bgpd/rde.c

commit 5xjCgIt8vghmFkBM
Author: claudio
Date: 2026/07/30 12:48:49

  Convert imsg_get to imsgbuf_get. lpd is currently not built still lets
  fix it now.

  usr.sbin/lpd/proc.c

commit LxgjNn0jqmBw0nUY
Author: claudio
Date: 2026/07/30 12:48:01

  Fix some compiler warnings. Both times a variable is assigned to but never
  used.

  usr.sbin/lpd/engine_lpr.c

commit u1JWsgAaUBL5ZggH
Author: claudio
Date: 2026/07/30 12:01:44

  Print TLS and short read errors to stderr and not stdout

  Code paths that are not only used in interactive mode should log to
  stderr. Adjust some TLS and a short file read error to use warnx.

  Diff by Pontus Stenetorp (pontus at stenetorp dot se)
  OK deraadt@ tb@

  usr.bin/ftp/fetch.c

commit VfB4IwM77xLMHApi
Author: claudio
Date: 2026/07/30 11:51:51

  let's fix some lets
  OK tb@

  lib/libutil/imsg-buffer.c

commit 1HUiuzXznfOIZZq9
Author: claudio
Date: 2026/07/30 11:49:39

  Correct EMSGSIZE handling in msgbuf_read to retry without control message

  In msgbuf_read() the EMSGSIZE handling needs to retry without the control
  buffer so that the message is read without the fd and forcing the kernel
  to close the buffer). Else the call will fail immediatly again and the
  system will busy loop.

  OK tb@

  lib/libutil/imsg-buffer.c

commit C2Rqu8dPpJT5r3ih
Author: claudio
Date: 2026/07/30 11:46:49

  Change overflow check in ibuf_get_strbuf

  ibuf_get_strbuf is too picky about the terminating NUL byte.
  If the sender did not use ibuf_add_strbuf() then the buffer may
  not be padded with 0 at the end. This triggers the EOVERFLOW case
  even though the string is probably short enough.

  Make ibuf_get_strbuf more robust by checking the string length.
  If the string is shorter than the buffer pad the rest with 0. On
  overflow force a '\^@' byte at the end and return EOVERFLOW.

  OK tb@

  lib/libutil/imsg-buffer.c

commit FYhJqWKvxh0YWb8w
Author: claudio
Date: 2026/07/30 11:40:23

  Rewrite the XXX comment in nbr_act_delete() to be more clear on why the
  crypt_seq_num is reset here.

  usr.sbin/ospfd/neighbor.c

commit ilpQRO3K9ImX6Dwa
Author: rsadowski
Date: 2026/07/30 10:45:27

  relayctl.8: name|id is required, not optional

  OK kirill@

  usr.sbin/relayctl/relayctl.8

commit UZJBYKmGbAKEUgJ1
Author: rsadowski
Date: 2026/07/30 09:35:55

  relayctl: switch to imsg_get_* API

  Use imsg_get_data() with size validation instead of casting imsg->data
  directly and imsg_get_type/len/id/pid() instead of imsg->hdr.* acc

  Structs like rdr/table/host.... carry embedded string buffers like name, label.
  When such a struct crosses a privilege boundary the receiver cannot Structs
  that the string is actually NUL terminated, so force a '\^@' in the last byte
  after imsg_get_data(). Not strictly required here because relayd is the sender,
  but a good habit for imsg consumers.

  embedded string buffer hint by claudio@, OK claudio@

  usr.sbin/relayctl/relayctl.c

commit bX94seZUam0WB7Fn
Author: jsg
Date: 2026/07/30 09:03:34

  more zip codes for Frisco TX and Mechanicsburg PA
  from Tim Chase

  share/misc/zipcodes

commit pitkWxh64ZQZNPGy
Author: brynet
Date: 2026/07/30 07:40:48

  Use ssh_mldsa44_ed25519_cleanup consistently to avoid calling freezero with the wrong size.

  With help from tb@

  ok tb, dtucker@

  usr.bin/ssh/ssh-mldsa-eddsa.c

commit rfuH5ozICVwsWBJx
Author: dtucker
Date: 2026/07/30 07:30:41

  Fix $OpenBSD marker for easier syncing.

  usr.bin/ssh/kexmlkem768ecdh.c

commit zvT58OvFtxUxelzO
Author: dtucker
Date: 2026/07/30 07:29:09

  Make mlkem768ecdh build with OPENSSL=no.  ok djm@

  usr.bin/ssh/kexgen.c
  usr.bin/ssh/kexmlkem768ecdh.c

commit WjZgZiAeij0pJXKa
Author: jmatthew
Date: 2026/07/30 06:17:45

  Handle '=' padding in base64url encoded EAB keys.

  bentley@ found one in the wild and confirmed that this makes it work

  usr.sbin/acme-client/base64.c

commit MD65C3gNHeYOuUoA
Author: djm
Date: 2026/07/30 03:39:39

  pass back errors from ed25519 key generation, which theoretically
  can fail. From Dimitri John Ledkov via GHPR702.

  ok deraadt@ dtucker@

  usr.bin/ssh/ssh-ed25519.c

commit uDVLsWHXHPBiIAEB
Author: djm
Date: 2026/07/30 03:37:39

  Move check of public key type against allowed algorithms to before
  parsing of the key sent by the peer.

  This removes at least some key parsing and verification paths from
  the pre-auth attack surface.

  Suggested by Christopher Paul Rohlf of Anthropic, ok deraadt@

  usr.bin/ssh/auth2-hostbased.c
  usr.bin/ssh/auth2-pubkey.c

commit CPpA5vObWpV8vgBZ
Author: deraadt
Date: 2026/07/30 03:13:34

  Fix double frees (impossible to reach outside of a test harness),
  and also use freezero where possible
  from Christopher Paul Rohlf at Anthropic
  ok djm

  usr.bin/ssh/ssh-mldsa-eddsa.c