tpm: crb: Improve ACPI control and buffer addresses
The TPM2 ControlAddress identifies the control area, not necessarily a
PTP locality block. Hyper-V exposes a start-method-7 control area at the
beginning of its ACPI memory resource, with command and response buffers
in separate reserved memory pages. Assuming control registers are at
resource + 0x40 instead writes CANCEL as LOC_CTRL and fails attach.
Map the control area using ControlAddress and map buffers using their
reported physical addresses. Reuse the resource mapping for contained
ranges and track ownership of independent mappings for cleanup. Request
locality only when the resource contains the preceding 64-byte PTP header.
Keep the existing Pluton notification callbacks and locality behavior for
that layout. Control, locality, and buffer accesses use their respective
mappings directly, without the tpm_bus accessor class.
Bound transfers by the mapped buffer sizes and TPM_BUFSIZE. Clamp an
overstated buffer that starts within the ACPI resource to its remaining
extent, while requiring room for a complete response header. Keep strict
[20 lines not shown]
tpm: Tie exclusive-open cleanup to the file lifetime
Use a cdevpriv destructor to abort an unfinished TPM 1.2 transaction and
release exclusive-open ownership. Register it before setting TPM_OPEN so
a failed registration leaves the device available. The last reference to
the successful open triggers cleanup, including after dup() or fork().
Suggested by: kevans
MFC after: 2 weeks
Sponsored by: BBOX.io
Differential Revision: https://reviews.freebsd.org/D59812
tpm: Validate firmware interrupt routes and fall back cleanly
A host IRQ resource is not necessarily an LPC SIRQ selector. Let the
frontend configure the route: ACPI uses the allocated _CRS interrupt and
_SRS when present, preserving the firmware selector, while ISA supplies a
separate, range-checked SIRQ. Match trigger and polarity to the host route
and TPM capabilities, including opaque INTRNG resource mappings.
Pass the firmware descriptor unchanged to _SRS; apply the x86 ISA polarity
override only when computing the TPM mode. ISA chips without rising-edge
support now poll instead of substituting a level mode for the host route.
For both FIFO drivers, require a complete GetRandom transport response and
a fresh DATA_AVAIL interrupt before selecting interrupt waits. Perform
the test with polling before publishing the device, and repeat it after
resume. During cold boot, defer the test and publication to an interrupt
configuration hook so the IRQ grace wait can sleep and the handler can run.
Drain the hook before teardown; failed deferred initialization remains
unpublished and can be detached safely. Missing or failed routes release
the handler and IRQ resource;
[33 lines not shown]
tpm: Validate TIS 1.2 IRQs and quiesce delivery before teardown
The TIS 1.2 driver uses the IRQ resource value directly as the four-bit
LPC SIRQ selector in TPM_INT_VECTOR, without validating it before
narrowing. Add the missing range check on the full resource value and use
polling for routes outside 1 through 15. This restriction reflects the
driver's current routing support: parent interrupt numbers need not equal
LPC SIRQ channels.
Attach also installs a handler when the chip's quirks select polling.
Release the IRQ resource when initialization selects polling. Retain an
interrupt cookie only after successful setup and require it for interrupt
waits.
Share verified interrupt masking across initialization, resume, and
detach. Quiesce after draining cdev methods and before removing a handler,
including polling devices whose failed resume left firmware delivery on.
Preserve an owned locality until the existing abort path discards any
pending response. Report quiesce failures while completing detach cleanup.
[17 lines not shown]
jailmeta: reject empty keys in metadata lookups
Reject empty keys in metadata lookups with EINVAL to prevent an infinite
loop while holding allprison_lock and pr_mtx. Add tests for empty-key
reads and writes with empty and populated meta/env buffers, trailing
newlines, and empty final values.
Reviewed by: igoro, jamie
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D61025
devel/*-subversion, www/mod_subversion: strip .so and drop .a from stage
libtool's install does not strip shared objects, and none of these
glue/binding libraries ship a static .a anyone would plausibly link
against. Strip the installed .so files in post-install and remove the
.a from the staging tree.
Bump PORTREVISION_LATEST/PORTREVISION_LTS for each touched port.
databases/sqlite3: security update to 3.54.1
Fixes ten vulnerabilities published on 2026-10-30, among them heap
buffer overflows in FTS5, in the session extension and in the R-Tree
module. All of them need an attacker supplied database file or SQL
text.
Changes: https://sqlite.org/changes.html
Security: 84cd82e1-d49f-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit 57d3d55a29d9c7d43c87ff0d763942cbb10369a4)
databases/sqlite3: security update to 3.54.1
Fixes ten vulnerabilities published on 2026-10-30, among them heap
buffer overflows in FTS5, in the session extension and in the R-Tree
module. All of them need an attacker supplied database file or SQL
text.
Changes: https://sqlite.org/changes.html
Security: 84cd82e1-d49f-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
x11/zutty: Update 0.17 => 0.18
Changes:
- Apply origin mode to VPA (Line Position Absolute)
- Time out selection transfers whose peer does not respond
- Do not exit on selection events carrying an invalid atom
- Fix font search ignoring directory boundaries
- Do not count scrolling within margins as history
- Clamp cursor position to the scrolling region in origin mode
- Fix crash on OSC 52 selection query falling back to another target
- Prevent pasted content from terminating bracketed paste
- Accept CSI ? and CSI > sequences split across reads
- Preserve RGB foreground across separate SGR bold settings
- Fix crossed-out attribute lost on partial screen updates
PR: 300308
Approved by: osa, vvd (Mentors, implicit)
ure.4: Remove non-USB devices from HARDWARE
The RTL8168, RTL8169 and RTL8110 are PCI/PCIe Ethernet controllers
supported by re(4), and the RTL8211 is a standalone gigabit PHY. None
of these are supported by ure(4).
The list appears to come from rgephy(4), which drives the internal PHY
on some ure-supported devices.
Fixes: 76ed6f2db316 ("ure.4: add a HARDWARE section + add RTL8156BG as a compatible controller")
Reviewed by: Kenneth Raplee <kenrap at kennethraplee.com>
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D61061
security/vuxml: Document sqlite3 vulnerabilities fixed in 3.54.0
Ten issues were published on 2026-10-30, with VulnCheck as the
assigning CNA. Four of them corrupt the heap, in FTS5, in the session
extension and in the R-Tree module, and all of them need an attacker
supplied database file or SQL text.
Sponsored by: Netzkommune GmbH
