LLVM/project 63cc989clang/lib/Interpreter IncrementalExecutor.cpp, llvm/include/llvm/ExecutionEngine/Orc/Shared OrcRTBridge.h

[ORC] Move ExecutorSharedMemoryMapperService names to sps_ci (#222835)

Relocate the service's interface names and SPS signatures from rt:: in
OrcRTBridge into a new Shared/SPSCI/SharedMemoryMapperSPSCI.h, matching
the existing SPSCI descriptor convention. Name-neutral: the symbol
strings are unchanged.
DeltaFile
+60-0llvm/include/llvm/ExecutionEngine/Orc/Shared/SPSCI/SharedMemoryMapperSPSCI.h
+16-16llvm/lib/ExecutionEngine/Orc/TargetProcess/ExecutorSharedMemoryMapperService.cpp
+0-23llvm/include/llvm/ExecutionEngine/Orc/Shared/OrcRTBridge.h
+6-9llvm/tools/llvm-jitlink/llvm-jitlink.cpp
+6-9clang/lib/Interpreter/IncrementalExecutor.cpp
+6-7llvm/unittests/ExecutionEngine/Orc/SharedMemoryMapperTest.cpp
+94-642 files not shown
+99-838 files

LLVM/project 3d6ae4bmlir/lib/IR Builders.cpp, mlir/test/Transforms test-legalizer.mlir

[MLIR] Fix infinite loop in tryFold in Graph Regions (#189232)

In a graph region (e.g. the module body), an op may use its own result
as an operand, creating a circular SSA dependency. When such an op was
passed to OpBuilder::tryFold, the do-while loop could spin forever:

1. foldCommutative moved the constant operand to the RHS (in-place fold,
foldResults still empty).
2. The next fold call returned the op's own result, signalling an
in-place fold, but foldSingleResultHook re-ran trait folds, found
nothing to swap, and returned success with empty foldResults.
  3. Step 2 repeated without end.

Fix: cap the number of in-place fold iterations at 64. Legitimate chains
are very short in practice (foldCommutative swaps once, then the op folds to
a value or constant), so the cap is never reached for correct IR. For the
circular-SSA case the loop now terminates and tryFold returns failure,
letting dialect conversion fall through to a conversion pattern instead of
looping.

    [10 lines not shown]
DeltaFile
+11-1mlir/lib/IR/Builders.cpp
+11-0mlir/test/Transforms/test-legalizer.mlir
+22-12 files

FreeBSD/ports 7b659d3security/vuxml/vuln 2026.xml

security/vuxml: Document multiple vulnerabilities in FreeIPA

Sponsored by:   Netzkommune GmbH
DeltaFile
+70-0security/vuxml/vuln/2026.xml
+70-01 files

FreeBSD/ports d991e32net/freeipa-server Makefile distinfo, net/freeipa-server/files patch-install_share_ipa.conf.template

net/freeipa-server: Update to 4.13.4

Includes the 4.13.3 release. Adds a mod_reqtimeout slow-read
configuration to ipa.conf, removes the two minute delay from DNA
configuration during installation and updates the WebUI to 0.2.1.

Changes:        https://www.freeipa.org/release-notes/4-13-3.html
Changes:        https://www.freeipa.org/release-notes/4-13-4.html
Security:       9736fef3-ada6-11f1-a655-3497f65b111b
Sponsored by:   Netzkommune GmbH
DeltaFile
+12-12net/freeipa-server/files/patch-install_share_ipa.conf.template
+17-3net/freeipa-server/pkg-plist
+3-3net/freeipa-server/distinfo
+1-2net/freeipa-server/Makefile
+33-204 files

LLVM/project 5f604ffutils/bazel/llvm-project-overlay/mlir BUILD.bazel

[BUILD] Fix for 02dc8a35 (#222876)

[BUILD] Fix for 02dc8a35
DeltaFile
+1-0utils/bazel/llvm-project-overlay/mlir/BUILD.bazel
+1-01 files

LLVM/project 18b9d72llvm/lib/Support KnownFPClass.cpp, llvm/test/Transforms/Attributor nofpclass-log.ll

[KnownFPClass] Add sNaN deductions for log/log2/log10 (#219703)

`log(x)` can only produce `sNaN` if `x` is `sNaN`.

This also affects tests for `llvm.amdgcn.log.f16` and
`llvm.amdgcn.log.f32`.
DeltaFile
+58-8llvm/test/Transforms/Attributor/AMDGPU/nofpclass-amdgcn-log.ll
+12-12llvm/test/Transforms/Attributor/nofpclass-log.ll
+2-1llvm/unittests/CodeGen/GlobalISel/KnownFPClassTest.cpp
+2-0llvm/lib/Support/KnownFPClass.cpp
+74-214 files

LLVM/project 6700445llvm/lib/Target/RISCV RISCVInsertVSETVLI.cpp, llvm/test/CodeGen/RISCV/rvv vsetvli-dead-vl-vtype-liveness.mir

RISCV: Maintain VL/VTYPE liveness when clearing dead flags in InsertVSETVLI (#222862)

Drop the stale VL/VTYPE ranges when a dead flag is cleared.

RISCVInsertVSETVLI marks the VL and VTYPE defs of an explicit VSETVLI as
live by clearing their dead flags, but did not update LiveIntervals. When a def
was previously a dead def, its live range is a zero-length dead-def segment
ending at the def slot; clearing the flag extends the def past that slot
without extending the range leaving a segment that references no instruction.

Co-authored-by: Claude claude-opus-4.8 <noreply at anthropic.com>
DeltaFile
+33-0llvm/test/CodeGen/RISCV/rvv/vsetvli-dead-vl-vtype-liveness.mir
+10-0llvm/lib/Target/RISCV/RISCVInsertVSETVLI.cpp
+43-02 files

LLVM/project 12f00f9llvm/lib/Transforms/Scalar GVN.cpp, llvm/test/Transforms/GVN pre-coerced-value-not-numbered.ll

[GVN] Skip instructions without value numbers in `processNonLocalLoad` (#219851)

GVN may insert coercion instructions (MaterializeAdjustedValue) without
assigning them value numbers. If one becomes a GEP index of a PRE'd load
in the same processBlock sweep, the GEP-index scalar PRE in
processNonLocalLoad reaches it before the next re-numbering iteration
and the verifying VN.lookup() may assert. Avoid performing PRE on such
instructions.

Fixes: #216265.
DeltaFile
+43-0llvm/test/Transforms/GVN/pre-coerced-value-not-numbered.ll
+4-1llvm/lib/Transforms/Scalar/GVN.cpp
+47-12 files

OPNSense/tools f131f33build sync.sh

build/sync: allow usage in other trees

Mainly for src.git inside sys/
DeltaFile
+11-8build/sync.sh
+11-81 files

LLVM/project 7bb74b1mlir/lib/Conversion/ComplexToLLVM ComplexToLLVM.cpp, mlir/test/Conversion/ComplexToLLVM convert-to-llvm.mlir

[mlir][ComplexToLLVM] Fix abs op fmf propagation (#222621)
DeltaFile
+1-1mlir/test/Conversion/ComplexToLLVM/convert-to-llvm.mlir
+1-1mlir/lib/Conversion/ComplexToLLVM/ComplexToLLVM.cpp
+2-22 files

LLVM/project 478b91bmlir/lib/Conversion/ComplexToStandard ComplexToStandard.cpp, mlir/test/Conversion/ComplexToStandard convert-to-standard.mlir

[mlir][ComplexToStandard] Fix Conj and Neg ops fmf propagation (#222622)
DeltaFile
+29-0mlir/test/Conversion/ComplexToStandard/convert-to-standard.mlir
+6-3mlir/lib/Conversion/ComplexToStandard/ComplexToStandard.cpp
+35-32 files

LLVM/project 4f32e47llvm/lib/Target/AArch64 AArch64Processors.td AArch64ISelLowering.cpp, llvm/test/CodeGen/AArch64 fdiv-combine.ll

[AArch64]  Parameterize repeated FP divisor combine threshold by subtarget (#216930)

Changes:
This patch makes the threshold for combining repeated FP divisors
configurable per AArch64 subtarget, instead of using a single fixed
value 3 for all CPUs. Additionaly, set this value 2 for A64FX based on
observed profitability for this transform on A64FX.

Motivation:
Today, AArch64 uses a fixed threshold of 3 for reciprocal transform.
This means the transform runs when there are 3 FDIVs with the same
divisor (not 2). That is conservative for some subtargets, and it can
miss profitable opportunities on CPUs such as A64FX, where a lower
threshold appears to produce better code generation.
```
a / D; b / D; ...
=>
recip = 1.0 / D; a * recip; b * recip; ...
```

    [2 lines not shown]
DeltaFile
+31-0llvm/test/CodeGen/AArch64/fdiv-combine.ll
+3-2llvm/lib/Target/AArch64/AArch64ISelLowering.cpp
+5-0llvm/lib/Target/AArch64/AArch64Features.td
+2-1llvm/lib/Target/AArch64/AArch64Processors.td
+41-34 files

LLVM/project 9f634aautils/bazel/llvm-project-overlay/mlir BUILD.bazel

[Bazel] Fixes 7ba3ce4 (#222865)

This fixes 7ba3ce428af7f6e7f1e642dba128c2afc13dba90 (#222859).

Buildkite error link:
https://buildkite.com/llvm-project/upstream-bazel/builds?commit=7ba3ce428af7f6e7f1e642dba128c2afc13dba90

Co-authored-by: Google Bazel Bot <google-bazel-bot at google.com>
DeltaFile
+1-0utils/bazel/llvm-project-overlay/mlir/BUILD.bazel
+1-01 files

LLVM/project 2684037offload/cmake/caches AMDGPULibcBot.cmake AMDGPUBot.cmake

[AMDGPU] Update buildbot cmake cache files (#222807)

This fixes one issue where the compiler-rt entry was not propagated to
the build.

We also want to select libgcc as the default unwindlib explicitly (as
this is what we do downstream).
DeltaFile
+2-1offload/cmake/caches/AMDGPULibcBot.cmake
+2-1offload/cmake/caches/AMDGPUBot.cmake
+4-22 files

LLVM/project 19dad06lldb/include/lldb/Breakpoint StopPointSiteList.h, lldb/test/API/functionalities/breakpoint/write_over_software_breakpoint TestWriteOverSoftwareBreakpoint.py

[lldb] Fix handling of lldb managed software breakpoints (#222009)

Fixes #217910.

When the debug server can manage its own breakpoints this is called an
"external" breakpoint. When it cannot, lldb must manage the breakpoint
itself from the client side.

Part of doing that is FindInRange which is used to patch reads and
writes over software breakpoint sites. It had an issue where it would
not account for a breakpoint that started before the range, but extended
into the range. For example:
```
      Memory content: ABCDEFGHIJKL
          Read range: ----[--]----
 Breakpoint location: -BKPT-------
   Overlap with read: ----@-------
Expected read result: ----EFGH----
  Would actually get: ----TFGH----

    [17 lines not shown]
DeltaFile
+41-36lldb/test/API/functionalities/breakpoint/write_over_software_breakpoint/TestWriteOverSoftwareBreakpoint.py
+6-2lldb/include/lldb/Breakpoint/StopPointSiteList.h
+47-382 files

LLVM/project e4b9c07llvm/include/llvm/CodeGenTypes LowLevelType.h

[GlobalISel] Fast path exact LLT equality (NFC) (#222550)

Improves CTMark geomean -0.05% on aarch64-O0-g.

https://llvm-compile-time-tracker.com/compare.php?from=87d9c3c24ff5941ac08799850a6549b561c98a81&to=a5391cd5be815299b2cddcabf62a86369b247f72&stat=instructions:u

Assisted-by: codex
DeltaFile
+4-1llvm/include/llvm/CodeGenTypes/LowLevelType.h
+4-11 files

FreeBSD/ports e5ab0eemath/aribas distinfo Makefile, math/aribas/files patch-src_Makefile

math/aribas: Update 1.65b

Take maintainership.
Install aribas.el.
Switch from REINPLACE_CMD to patch file.

PR:             298354
Approved by:    fluffy (mentor)
DeltaFile
+21-12math/aribas/Makefile
+21-0math/aribas/files/patch-src_Makefile
+3-2math/aribas/distinfo
+45-143 files

FreeBSD/ports abeacc4japanese/unidic-to-mozc distinfo Makefile, japanese/unidic-to-mozc/files pkg-message.in

japanese/unidic-to-mozc: Update to 1.1.0

Update COMMENT, pkg-descr and pkg-message.

Changelog (Japanese):
https://github.com/jassdack/UniDic-to-Mozc/releases/tag/v1.1.0

PR:             298322
Approved by:    fluffy (mentor)
DeltaFile
+9-13japanese/unidic-to-mozc/pkg-descr
+8-8japanese/unidic-to-mozc/Makefile
+5-3japanese/unidic-to-mozc/distinfo
+3-3japanese/unidic-to-mozc/files/pkg-message.in
+25-274 files

LLVM/project b6865cdllvm/lib/Target/ARM ARMConstantIslandPass.cpp, llvm/test/CodeGen/ARM cbz-no-kill-flag.mir

ARM: Avoid relying on kill flags for determining CPSR liveness

When forming CBZ/CBNZ in ARMConstantIslands, check if CPSR is live-out
of the block instead of relying on the kill flag. Kill flags have been
soft deprecated for over a decade.

Co-authored-by: Claude claude-opus-4.8 <noreply at anthropic.com>
DeltaFile
+132-0llvm/test/CodeGen/ARM/cbz-no-kill-flag.mir
+8-4llvm/lib/Target/ARM/ARMConstantIslandPass.cpp
+140-42 files

LLVM/project 5e64eb8clang/lib/Parse ParseDeclCXX.cpp, clang/lib/Sema SemaTemplateVariadic.cpp

[Clang] Improve error recovery for indexed template names (#222328)

There were a few issues here:
- Names that are not templates were not diagnosed and led to a crash (in
part because clang think they can be template names that will be later
resolved by ADL)
- Names that refer to a variable template decl, etc also led to a crash.

Fixes #220502

Co-authored-by: Cursor <cursoragent at cursor.com>
DeltaFile
+14-6clang/lib/Parse/ParseDeclCXX.cpp
+18-2clang/test/SemaCXX/cxx2d-pack-indexing-template.cpp
+5-0clang/lib/Sema/SemaTemplateVariadic.cpp
+37-83 files

OpenBSD/ports N6sK1xccad/yosys distinfo Makefile, cad/yosys/patches patch-cmake_FindBISON_cmake

   update cad/yosys to 0.67

   from new MAINTAINER

   feedback by sthen@
   lightly tested and OK sebastia
VersionDeltaFile
1.8+213-82cad/yosys/pkg/PLIST
1.19+24-60cad/yosys/Makefile
1.1+21-0cad/yosys/pkg/README
1.5+14-2cad/yosys/distinfo
1.2+3-12cad/yosys/pkg/DESCR
1.1+12-0cad/yosys/patches/patch-cmake_FindBISON_cmake
+287-1564 files not shown
+299-15610 files

OPNSense/src 4b251d7sys/dev/e1000 if_em.c

igb: Reinitialize through iflib after media changes

A media change can require a complete controller reset.  Resetting the
controller directly from the admin task leaves iflib rings, filters, and
interface state programmed for the pre-reset controller.

Request an iflib reset for every media change.  This already was done
when SR-IOV was active; use the same lifecycle for the ordinary PF case.

Sponsored by:   BBOX.io

(cherry picked from commit 6248e7de9d6c0f14294afc5792170a68de6a3b53)
DeltaFile
+3-1sys/dev/e1000/if_em.c
+3-11 files

OPNSense/src 92bfb15sys/netipsec keysock.c

netipsec: Implement pr_disconnect for PF_KEY sockets

Otherwise close() fails.

PR:             297977
Reviewed by:    glebius
Fixes:          ea7be1293b48 ("keysock: do not use raw socket code")
MFC after:      1 week

(cherry picked from commit fef9077cf816a6499bd6a7f9678c179194463e43)
DeltaFile
+7-0sys/netipsec/keysock.c
+7-01 files

OPNSense/src ad58fa6sys/dev/e1000 if_em.c e1000_osdep.h

e1000: Serialize 82579 CSR writes with the Management Engine

The 82579 PCIm2PCI arbiter can acknowledge a host MAC CSR write while
the Management Engine is accessing another CSR.  The host write can be
lost; subsequent target accesses may no longer be claimed by the MAC and
can hang the system.

For 82579 controllers with valid management firmware, wait for the ME
CSR access indication before every MAC CSR write.  Keep the wait bounded
and use DELAY because writes occur in interrupt and datapath contexts.
Verify every transmit and receive tail write.  If a tail does not hold
the requested value, disable its datapath direction and request a full
iflib reset.

Keep the ordinary register-write path as a direct MMIO write behind a
predicted per-device gate.  Contain the wait and tail recovery in the
82579 slow path rather than adding tail-specific accessors and state to
the rest of the e1000 family.


    [12 lines not shown]
DeltaFile
+60-0sys/dev/e1000/e1000_osdep.c
+13-7sys/dev/e1000/e1000_osdep.h
+9-0sys/dev/e1000/if_em.c
+82-73 files

OPNSense/src 3079dd0sys/dev/e1000 if_em.h e1000_defines.h

igb: Report 82580 memory ECC errors

82580 exposes clear-on-read, saturating corrected error counters for
the receive and transmit packet buffers.  Its two PCIe command memories
expose RW1C indications for uncorrectable ECC errors.

Sample the packet buffer counters and PCIe indications from the regular
hardware statistics update.  Fatal recovery samples the PCIe indications
from the serialized admin path rather than the interrupt filter.  Thus,
either the regular statistics pass or recovery reads and clears each
indication, but they cannot both account it.  Also preserve indications
observed while initialization is completing.

Expose the exact packet buffer error total and observed PCIe command
memory indications under the memory_errors sysctl node.  Multiple PCIe
errors between samples can collapse into one indication per memory.

Validated on an Intel I340-T2 (82580, revision 1).  A clean boot and
three down/up cycles left the packet-buffer, PCIe, and region-specific

    [11 lines not shown]
DeltaFile
+56-12sys/dev/e1000/if_em.c
+1-0sys/dev/e1000/if_em.h
+1-0sys/dev/e1000/e1000_defines.h
+58-123 files

OPNSense/src 803f0ebsys/dev/e1000 if_em.h e1000_regs.h

e1000: Recover from 82580 memory errors

82580 reports fatal parity and uncorrectable ECC errors through ICR.FER
and its four region PEIND hierarchy.  Region specific status registers
identify PCIe, DMA transmit, DMA receive, DMA host, and LAN port
memories that can leave traffic stopped.

Enable the documented DMA, PCIe, packet-buffer, and host-owned LAN
parity and ECC checks only after initializing queue and filter tables.
Leave the flexible filter parity controls under management firmware
ownership.  Capture read-clear and RW1C status in the interrupt filter
and keep FER masked until the admin task resolves the event.

Reset for a host-owned region or an unknown FER source.  Leave
management-only recovery to firmware.  Use CTRL.RST before master
disable because fatal 82580 memory errors can stop PCIe traffic.  Do not
use CTRL.DEV_RST: specification update item 9 declares that bit reserved
and says it must always be written as zero.  Wait for EEPROM auto read
completion; STATUS bit 21 is reserved on 82580, not PF_RST_DONE.

    [22 lines not shown]
DeltaFile
+184-21sys/dev/e1000/if_em.c
+12-0sys/dev/e1000/e1000_defines.h
+9-0sys/dev/e1000/e1000_regs.h
+2-0sys/dev/e1000/if_em.h
+207-214 files

OPNSense/src 017a0adsys/dev/e1000 em_txrx.c

e1000: Limit the TSO sentinel to lem(4) controllers

The TSO workaround splits the final DMA segment to create a four byte
sentinel descriptor.  Intel documents the premature descriptor writeback
erratum and this workaround in the 82540EP and 82545GM specification
updates (erratum 3) and the 82546GB specification update (erratum 1).

Limit the workaround and its preceding TSO state to the legacy PCI and
PCI-X controllers so PCIe controllers retain their natural descriptor
layout using one fewer descriptor per TSO packet, no split of the final
segment, and one less four byte DMA.

Sponsored by:   BBOX.io

(cherry picked from commit 2a7af8ebcf90af83f01f9523b25bfc6e58c7b809)
DeltaFile
+6-2sys/dev/e1000/em_txrx.c
+6-21 files

OPNSense/src 822db8dusr.sbin/bsdinstall/scripts hardening

bsdinstall: add a hardening knob for unprivileged kenv access

It makes sense.

Reviewed by:    zleei

(cherry picked from commit 6e81fbf5833d43529fd8a253b592af9666b04e8e)
DeltaFile
+4-0usr.sbin/bsdinstall/scripts/hardening
+4-01 files

OPNSense/src aa8a942sys/netinet in_fib_algo.c, sys/netinet6 in6_fib_algo.c

route/fib_algo: Free leaked radix_masks in radix_lockless

radix_lockless algorithm creates its own radix tree and
allocates its own radix_masks by directly calling rnh_addaddr().
However, during destruction, it only frees the radix_tree without
freeing its allocated radix_masks.
Fix the leak by calling rn_delete() during radix_destroy().

PR:             297339
Reviewed by:    melifaro
MFC after:      2 weeks
Differential Revision: https://reviews.freebsd.org/D59112

(cherry picked from commit 790817f5a7a640c9ceb5c2ad99135f1a69aeb77d)
DeltaFile
+13-2sys/netinet6/in6_fib_algo.c
+12-1sys/netinet/in_fib_algo.c
+25-32 files

OPNSense/src 55513e5sbin/pfctl pfctl.c, tests/sys/netpfil/pf anchor.sh

pfctl: fix printing of wildcard anchors

PR:             297839
MFC after:      1 week
Obtained from:  OpenBSD, henning <henning at openbsd.org>, 5b6657d4d8
Sponsored by:   Rubicon Communications, LLC ("Netgate")

(cherry picked from commit 5de5140f06959f2724c626c7fab3e1c9187beefb)
DeltaFile
+30-0tests/sys/netpfil/pf/anchor.sh
+6-4sbin/pfctl/pfctl.c
+36-42 files