screenlock: avoid continuous blanking, draw fullscreen over border
screenlock: some improvements
libauth: replace proto=p9cr with new proto=dp9ik/p9sk1 role=login for auth_userpasswd()
auth/factotum: add role=login protocol variant to dp9ik/p9sk1
auth/login: add missing quotefmtinstall(), quote dom attribute
errstr(2): add /sys/src/libc/9sys/rerrstr.c to SOURCE section
screenlock: blank screen using /dev/mousectl (thanks sl)
libsec: make includes consistent for sha2block*.c
libsec: unroll portable sha1block function
libsec: unroll portable sha2block functions
games/blit: update screen when display address changes (thanks aap)
vmx(1): fix openbsd 6.2 amd64 !entrystate bug
libsec: optimize aesCBCencrypt()/aesCBCdecrypt()
cga: capture cga console contents on boot, make sure cgapos is in range
devvga: re-render text from kmesg after resize
spin: Update to most recent version. (thanks Ori_B)
libsec: write optimized _chachablock() function for amd64 / sse2
libmach: fix format for 8db sse shift ops
6l: fix typo in optab table for APSLLQ (0x7e -> 0x73)
kernel: make isaconfig() consistent, not inplace tokenizing the conf string
inst/mounthjfs: use /dev/swap instead of #c/swap to determine memory size (thanks aap)
6in4: add -m mtu option to specify outer MTU
9pc64: handle special case in fpurestore() for procexec()/procsetup()
audio/flacdec: add eof handler avoiding endless spinning on broken files (thanks deuteron)
pc64: fix mistake fpurestore() mistake
igfx: allocate backing memory for framebuffer and hw cursor when not done by bios (from qu7uux)
libsec: AES-NI support for amd64
pc64: allow using the FPU in syscall and pagefault handlers
pc64: set ts flag before schedinit()
kernel: introduce per process FPU struct (PFPU) for more flexible machine specific fpu handling
/lib/rsc: It only works when we're in the process of preparing a release.
tinc(8): more spelling spam
tinc(8): spelling, thanks jpm
tinc: implement experimental mash peer to peer VPN from http://www.tinc-vpn.org/
aes(2): document aes_xts_encrypt() and aes_xts_decrypt() functions
kernel: pc/pc, fix comment line
swap(3): document permissions and encryption behaviour, reference to memory(8)
devcons: remove obsolete comment
kernel: track more header dependencies in port/portmkfile
kernel: introduce devswap #¶ to serve /dev/swap and handle swapfile encryption
libsec: rewrite aex_xts_encrypt()/aes_xts_decrypt()
cwfs: use /dev/swap instead of #c/swap to determine memory size
libc: improve alignment of QLp structure on amd64, cosmetics
upas/smtpd: don't call syslog() from the note handler, this can deadlock
libc: cleanup atexit and put exits() in its own compilation unit
vt: block when sending input to host (fixes truncated paste)
libsec: make sectorNumber argument for aes_xts routines uvlong
libsec: add AES CFB and AES OFB stream ciphers
aux/wpa: prevent PTK re-installation attack by replaying AP retransmits
ape/libsec: fix the build, bring ape libsec.h in sync with plan9 version
ssh: remove extern declarations for pkcs1padbuf() and asn1encodedigest() (now in libsec.h)
rsa: add auth/rsa2asn1, check write error in auth/rsa2x509 and auth/rsa2pub, document in rsa(8)
libsec: export asn1encodedigest(), asn1encodeRSApub(), asn1toRSApub(), pkcs1padbuf() and pkcs1unpadbuf()
libsec: allow \r\n terminated lines in decodePEM()
check for fs= in netaudit
hgwebfs: simplify retry loop construction
ndb/cs: icmp only supports version 4 addresses, icmpv6 only version 6 addresses
libauthsrv: preserve readcons() error message from read() error
hg: disable tag caching, allows accessing hg repo from dump
9boot: limit read size to 4K for efi simple file system protocol
pc64: add ether82598 driver to configuration
ether82598: support for T540-T1, use physical addresses for isaconf port
sdnvme: identify namespace list fails on intel ssd, just assume nsid=[1]
kernel: don't tokenize inplace in isaconfig() to make /dev/reboot work
kernel: get rid of 36 bit Paerange mask in mtrr (supporting machines with more than 64GB of memory)
upas/fs: fix putcache(), sub-part messages should never go into the lru
xhci: do bounds checking in capability walking, check if controller vanished on init (thunderbolt unplug)
sshfs: use mtime for qid.vers, fix wstat without name change, fix wstat memory leak
upas/fs: replace fixed cache table with lru linked list
winwatch: show windows with empty labels (thanks jpm)
rename pcf kernel to pc, remove pcf, pccpuf, pccpu64 kernels, update documentation
audiohda: add pci id for nvidia GM204
audiohda: add pci id for Intel 9 Series
vmx(3): document changes to devvmx interface
audiohda: add pci id for ICH10 (thanks echoline)
devvmx: call vmxshutdown from reboot() function manually
sshfs: fork ssh in its own namespace so it wont keep the mountpoint open
sshfs: start sendproc and recvproc in the sane notegroup as the fs process so theadexitsall() works on sshfs: ending.
ether82563: make the ethernet of thinkpad p50 work (thanks sam-d)
audiohda: Intel Sunrise Point-H support (thanks sam-d)
sdnvme: pass 0 instead of 0xffffffff as NSID for identify controller and create completion/submission queue commands (thanks Ori_B)
devdup: remove useless OCEXEC check, handled by namec()
devsegment: handle ORCLOSE on segment directory correctly, fix wrong qid, missing COPEN flag for segmentcreate()
devvmx, vmx: lilu dallas multivm
vmx(1): don't realloc virtio queues -- breaks pointers
sdiahci: Intel 200 Series Chipset Family PCH support (thanks aiju)
libmach: support disassembling from memory
vmx(1): VGA framebuffer should be normal memory
vmx(1): fixed code that assumed uintptr==uvlong
vmx(1): memory map improvements, x86 simulator for MMIO
devvmx: more efficient data structure for memory map; simplified (more reliable) step function
igfx: fix cdclk and dpll settings for dual channel lvds on sandybridge
vt: turn off nl -> nl+cr translation default in raw mode, don't scroll more than screen height