Build date: 1788040803 - Sat Aug 29 22:00:03 UTC 2026
Build cvs date: 1788029082 - Sat Aug 29 18:44:42 UTC 2026
Build id: 2026-08-30.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P etc/rc
P gnu/gcc/gcc/opts.c
P gnu/llvm/clang/lib/Driver/ToolChains/CommonArgs.cpp
P lib/libc/gen/auth_subr.c
P lib/libcrypto/man/X509_STORE_CTX_get_error.3
P lib/libssl/ssl_clnt.c
P lib/libssl/ssl_srvr.c
P lib/libssl/ssl_tlsext.c
P regress/lib/libm/msun/Makefile
P regress/lib/libssl/tlsext/tlsexttest.c
P sys/dev/usb/uaudio.c
M sys/dev/usb/uhidev.c
P usr.bin/mandoc/roff_escape.c
M usr.sbin/bgpd/session.c
P usr.sbin/relayctl/relayctl.8
P usr.sbin/relayctl/relayctl.c
P usr.sbin/vmd/i8253.c

commit 8kx3C1kAhUxAESPH
Author: dv
Date: 2026/08/29 18:44:42

  vmd: only assert IRQ0 for i8253 channel 0

  From ssnf@ssnf.xyz

  usr.sbin/vmd/i8253.c

commit TnJXluXD8EQstGV3
Author: dv
Date: 2026/08/29 18:42:06

  vmd: reset i8253 input latch on writes

  Writes should ovewrite all bits.

  From ssnf@ssnf.xyz

  usr.sbin/vmd/i8253.c

commit kDkOZW1D2W1r0Vqv
Author: daniel
Date: 2026/08/29 17:41:02

  libc: fix ability to set AUTHV_INTERACTIVE

  ok millert@

  lib/libc/gen/auth_subr.c

commit 2z8hgVmgCbzj31uZ
Author: schwarze
Date: 2026/08/29 16:57:20

  Fix a segfault that bluhm@ found on his i386 regress machine.

  Even in the "out:" code path of the escape sequence parser,
  for rval == ESCAPE_SPECIAL, some of the parsing results are
  still used for error reporting purposes, specifically to
  distinguish valid and invalid character names.

  So, when parsing fails so badly that there is no name whatsoever,
  it is not sufficient to bail out via "goto out;" but in addition,
  we must make sure that the return value does not remain ESCAPE_SPECIAL.

  However, other return values must remain intact even in case of
  extremely bad parsing errors.  For example, an \\A escape sequence
  still qualifies as an ESCAPE_EXPAND sequence and must expand
  to the string "0" even if it lacks any argument whatsoever.

  usr.bin/mandoc/roff_escape.c

commit 9aBoOZGc1RL3LWiJ
Author: afresh1
Date: 2026/08/29 16:26:33

  Move /tmp clearing earlier in /etc/rc

  Moving pruning above relinking and early daemon startup to be able
  to clear everything old without removing entries that are in use.

  The goals are:

  1) free up at least one inode, because mkstemp needs at least one
  2) free up a few more, just in case.  We settled on 50.
  3) With an inode freed up for mktemp, create a directory and move all the
  deleteable files into that directory and remove it asyncronously.

  The first two goals were very fiddly to get right.

  Much help and discussion with deraadt@ plus dlg@ and kn@

  ok for an earlier diff from kn@

  etc/rc

commit 0itpZkivrKuTb31H
Author: rsadowski
Date: 2026/08/29 09:36:49

  relayctl: rework show output and add -v flag

  - Added -v flag for more detailed output.
  - Replaced tab separators with space-padded, truncated columns (%.Ns) for
  stable alignment.
  - Added a new "Checks" column for host checks (N/N), replacing the total: N/N
  checks sub-line.
  - Shortened redirect to rdr in the Type column to stay under 80 columns.
  - Without -v: compact status (down); with -v: error inlined (down (tcp connect
  timeout)).
  - Table status shows host count (N hosts) only with -v.
  - retries sub-line only appears with show hosts -v.
  - show hosts no longer lists tables; use show summary for that.

  OK kirill@

  usr.sbin/relayctl/relayctl.8
  usr.sbin/relayctl/relayctl.c

commit 4Oau1rdkJcm4kkZT
Author: tb
Date: 2026/08/29 08:41:17

  libssl: fix API misuse in legacy finished handling

  This looks like a potential out of bounds read or allowing trailing garbage
  in peer_finished. It's harmless because CBS_len() is compared against the
  s->s3->hs.peer_finished_len a few lines up, thus it is only cosmetic.

  discussed with jsing
  ok kenjiro

  lib/libssl/ssl_clnt.c
  lib/libssl/ssl_srvr.c

commit 7XACHwvgzuYMLgPw
Author: ratchov
Date: 2026/08/29 08:40:56

  uaudio: Ignore transfer completions if audio is halted

  When audio is halted, the pipes are closed and the corresponding usb
  transfer completion functions are called immediately. For certain
  devices the status of the feedback pipe is USBD_NORMAL_COMPLETION,
  which triggers further processing of the received data.

  Fixes the harmless "uaudio0: sync play xfer, err = 6" messages on
  the console.

  sys/dev/usb/uaudio.c

commit if2m1o3xU3Lwhu0m
Author: claudio
Date: 2026/08/29 07:00:09

  Follow llvm / clang and disable -fomit-frame-pointer optimisation by
  default.

  OK kettenis@

  gnu/gcc/gcc/opts.c

commit j6280Pkg1SkX1yXz
Author: claudio
Date: 2026/08/29 06:59:00

  Disable the -fomit-frame-pointer optimisation by default.

  The frame-pointer is needed to have good backtraces from e.g ddb or
  ptrace / btrace. Many other distros did something like this as well since
  the benfit of havving easy to work with backtraces outweights the little
  overall speedup gained by having an extra register.

  Also disable -mno-omit-leaf-frame-pointer by default on llvm.

  OK kettenis@

  gnu/llvm/clang/lib/Driver/ToolChains/CommonArgs.cpp

commit 4EvNZMOQXY20LYFE
Author: tb
Date: 2026/08/29 05:53:59

  X509_STORE_CTX_get_error.3: zap extraneous if

  lib/libcrypto/man/X509_STORE_CTX_get_error.3

commit iFszi1Cyhca18frt
Author: tb
Date: 2026/08/29 05:52:03

  X509_STORE_CTX_get_error: validate chain -> validated chain (of certificates)

  lib/libcrypto/man/X509_STORE_CTX_get_error.3

commit e4wHBXp7faTKAVVV
Author: tb
Date: 2026/08/29 05:12:51

  libssl: ensure server selected ALPN was advertised

  Per RFC 7301, section 3.2, "In the event that the server supports no
  protocols that the client advertises, then the server SHALL respond
  with a fatal "no_application_protocol" alert.

  If a server does not do that and chooses a protocol that we have not
  advertised, we should abort the handshake. The RFC does not specify
  an alert for this case. BoringSSL chose illegal_parameter and OpenSSL
  decode_error. I slightly prefer illegal_parameter, so went with that.

  Reported by Acts1631 with a similar diff.

  ok jsing kenjiro

  lib/libssl/ssl_tlsext.c

commit 1tgIZyKoyaEld4dN
Author: tb
Date: 2026/08/29 05:12:47

  tlsext: check we reject unadvertised selected protocol

  This test currently fails and will be fixed in ssl_tlsect.c r1.168

  regress/lib/libssl/tlsext/tlsexttest.c

commit hbQrslpJdOA36ZRl
Author: anton
Date: 2026/08/29 05:01:30

  Purge expected failures on amd64 after recent libm changes.

  regress/lib/libm/msun/Makefile

commit qlavi74iYY8LJ0Kl
Author: tb
Date: 2026/08/29 04:54:43

  tlsext_alpn_client_process(): rename list and proto

  Use server_list and selected instead of list and proto to reduce noise
  in the next commit.

  ok jsing kenjiro

  lib/libssl/ssl_tlsext.c