HardenedBSD/src c303c5elib/libc/gen fts.3 fts.c, lib/libc/tests/gen fts_openat_test.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+250-0lib/libc/tests/gen/fts_openat_test.c
+28-70sys/dev/ufshci/ufshci_dev.c
+57-11lib/libc/gen/fts.c
+44-0sys/dev/ice/if_ice_iflib.c
+22-20sys/dev/ufshci/ufshci_req_sdb.c
+33-1lib/libc/gen/fts.3
+434-1029 files not shown
+485-12015 files

LLVM/project d5ff5c4llvm/lib/Target/RISCV RISCVVectorPeephole.cpp

RISCV: Fix using getVRegDef on a physical register (#216749)
DeltaFile
+2-0llvm/lib/Target/RISCV/RISCVVectorPeephole.cpp
+2-01 files

HardenedBSD/src 4404675lib/libc/gen fts.3 fts.c, lib/libc/tests/gen fts_openat_test.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+250-0lib/libc/tests/gen/fts_openat_test.c
+28-70sys/dev/ufshci/ufshci_dev.c
+57-11lib/libc/gen/fts.c
+44-0sys/dev/ice/if_ice_iflib.c
+22-20sys/dev/ufshci/ufshci_req_sdb.c
+33-1lib/libc/gen/fts.3
+434-1029 files not shown
+485-12015 files

HardenedBSD/src 29dea9acontrib/less search.c command.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+245-91contrib/less/decode.c
+213-114contrib/less/less.nro
+147-59contrib/less/regexp.c
+173-29contrib/less/optfunc.c
+132-54contrib/less/command.c
+83-55contrib/less/search.c
+993-40243 files not shown
+1,926-76649 files

HardenedBSD/ports 4dfd522devel/gitaly distinfo, graphics/opencv/files patch-modules_videoio_src_cap__v4l.cpp

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+31-0security/vuxml/vuln/2026.xml
+13-13devel/gitaly/distinfo
+13-2graphics/opencv/files/patch-modules_videoio_src_cap__v4l.cpp
+6-6www/gitlab/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5www/gitlab-pages/distinfo
+73-3116 files not shown
+128-6722 files

LLVM/project ca1719fclang/include/clang/Basic Specifiers.h, clang/lib/AST TypePrinter.cpp

[clang][SPIR-V] Remove CC_SpirFunction calling convention (#216252)

CC_SpirFunction is now redundant: CC_C already lowers to spir_func on
SPIR/SPIR-V targets, after
https://github.com/llvm/llvm-project/pull/210882
DeltaFile
+32-34clang/include/clang/Basic/Specifiers.h
+1-3clang/lib/Basic/Targets/SPIR.h
+0-3clang/lib/AST/TypePrinter.cpp
+0-2clang/lib/CodeGen/CGDebugInfo.cpp
+0-2clang/lib/CodeGen/CGCall.cpp
+1-1clang/lib/CodeGen/Targets/SPIR.cpp
+34-454 files not shown
+34-5010 files

FreeBSD/ports d7ee3dbdevel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security update to 19.2.4

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/?nav=19.2.4
Security:       3a65fb7e-9ac2-11f1-bdc8-2cf05da270f3
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5www/gitlab-pages/distinfo
+5-5net/gitlab-agent/distinfo
+1-1www/gitlab/Makefile.common
+35-356 files

HardenedBSD/ports d7ee3dbdevel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security update to 19.2.4

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/?nav=19.2.4
Security:       3a65fb7e-9ac2-11f1-bdc8-2cf05da270f3
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5www/gitlab-pages/distinfo
+5-5net/gitlab-agent/distinfo
+1-1www/gitlab/Makefile.common
+35-356 files

OPNSense/core 724e778src/opnsense/mvc/app/views/OPNsense/Diagnostics health.volt

reporting: adjust capitalization on health settings buttons #10724

The old delete functionality in the reporting settings was a bit more
prominent but it's nice to see it's still here.  Not sure about the
"show collected reports" since it doesn't imply you can delete the
inidividual reports from there.
DeltaFile
+2-2src/opnsense/mvc/app/views/OPNsense/Diagnostics/health.volt
+2-21 files

OPNSense/src 98f9e01sbin/ifconfig sfp.c ifstf.c

ifconfig: Add SPDX-License-Identifier tags

Reviewed by: emaste
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55272

(cherry picked from commit d685228989020f7bceebdaf6ea79be09305d2954)
DeltaFile
+2-0sbin/ifconfig/sfp.c
+2-0sbin/ifconfig/ifstf.c
+2-0sbin/ifconfig/ifipsec.c
+6-03 files

OPNSense/src 326a32bsys/netipsec xform_ipcomp.c

netipsec/xform_ipcomp.c: fix sockaddr type set in ipcomp6_nonexp_encapcheck()

(cherry picked from commit 01d4e3c1d3ffa14041d8faa3a7a6e6509e73af84)
DeltaFile
+1-1sys/netipsec/xform_ipcomp.c
+1-11 files

OPNSense/src 2beca9asys/netipsec key.c

PF_KEY socket: limit the length of copied socket address

PR:     297264

(cherry picked from commit cba481a7bff2fcf31420ee8b2714660e2666452b)
DeltaFile
+69-59sys/netipsec/key.c
+69-591 files

OPNSense/src d2e52b3sys/netipsec key.c

netipsec/key.c::key_checksockaddrs(): constify src/dst address buffer pointers

(cherry picked from commit fbe9aa7ebfcd6d89b298cc7a23de02d119367221)
DeltaFile
+4-1sys/netipsec/key.c
+4-11 files

FreeBSD/src 68091ebsys/dev/ufshci ufshci_sim.c

ufshci: report the highest LUN number in the path inquiry

cpi->max_lun is an inclusive upper bound, but the driver reported the
LUN count (8 or 32), so CAM probed one nonexistent LUN past the end.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58820
DeltaFile
+1-1sys/dev/ufshci/ufshci_sim.c
+1-11 files

HardenedBSD/src 68091ebsys/dev/ufshci ufshci_sim.c

ufshci: report the highest LUN number in the path inquiry

cpi->max_lun is an inclusive upper bound, but the driver reported the
LUN count (8 or 32), so CAM probed one nonexistent LUN past the end.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58820
DeltaFile
+1-1sys/dev/ufshci/ufshci_sim.c
+1-11 files

FreeBSD/ports df4d3f7security/vuxml/vuln 2026.xml

security/vuxml: document Gitlab vulnerabilities
DeltaFile
+31-0security/vuxml/vuln/2026.xml
+31-01 files

HardenedBSD/ports df4d3f7security/vuxml/vuln 2026.xml

security/vuxml: document Gitlab vulnerabilities
DeltaFile
+31-0security/vuxml/vuln/2026.xml
+31-01 files

FreeBSD/src 3451829sys/dev/ufshci ufshci_reg.h

ufshci: correct the crypto/config register offsets and HCMID fields

The reserved array after CCAP must be 508, but it was 511.
This pushed the config, MCQ config, and ESI registers from 0x300 and
0x380 up to 0x900. None of these registers are used yet, so nothing
broke.

Also fix the HCMID bank index field. The spec places it at bits
[23:16], but it was defined on top of the manufacturer code at [15:0].

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58819
DeltaFile
+20-3sys/dev/ufshci/ufshci_reg.h
+20-31 files

HardenedBSD/src 3451829sys/dev/ufshci ufshci_reg.h

ufshci: correct the crypto/config register offsets and HCMID fields

The reserved array after CCAP must be 508, but it was 511.
This pushed the config, MCQ config, and ESI registers from 0x300 and
0x380 up to 0x900. None of these registers are used yet, so nothing
broke.

Also fix the HCMID bank index field. The spec places it at bits
[23:16], but it was defined on top of the manufacturer code at [15:0].

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58819
DeltaFile
+20-3sys/dev/ufshci/ufshci_reg.h
+20-31 files

LLVM/project 8915dd8llvm/include/llvm/CodeGen TargetPassConfig.h, llvm/lib/CodeGen TargetPassConfig.cpp

[𝘀𝗽𝗿] changes to main this commit is based on

Created using spr 1.3.7

[skip ci]
DeltaFile
+2-3llvm/lib/CodeGen/GlobalISel/Legalizer.cpp
+0-4llvm/lib/CodeGen/TargetPassConfig.cpp
+0-4llvm/include/llvm/CodeGen/TargetPassConfig.h
+1-1llvm/lib/CodeGen/GlobalISel/IRTranslator.cpp
+3-124 files

LLVM/project 8584442llvm/include/llvm/CodeGen TargetPassConfig.h, llvm/include/llvm/CodeGen/GlobalISel IRTranslator.h

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+265-207llvm/lib/CodeGen/GlobalISel/IRTranslator.cpp
+46-13llvm/include/llvm/CodeGen/GlobalISel/IRTranslator.h
+2-3llvm/lib/CodeGen/GlobalISel/Legalizer.cpp
+0-4llvm/lib/CodeGen/TargetPassConfig.cpp
+0-4llvm/include/llvm/CodeGen/TargetPassConfig.h
+3-0llvm/test/CodeGen/MIR/AArch64/deactivation-symbols.mir
+316-23115 files not shown
+331-24521 files

LLVM/project 4b1a5d5llvm/include/llvm/CodeGen TargetPassConfig.h, llvm/lib/CodeGen TargetPassConfig.cpp

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+2-3llvm/lib/CodeGen/GlobalISel/Legalizer.cpp
+0-4llvm/lib/CodeGen/TargetPassConfig.cpp
+0-4llvm/include/llvm/CodeGen/TargetPassConfig.h
+1-1llvm/lib/CodeGen/GlobalISel/IRTranslator.cpp
+3-124 files

LLVM/project f3bc580clang/lib/AST/ByteCode Pointer.h InterpBuiltin.cpp

[clang][bytecode] Add `Pointer::getRootExpr()` (#216706)

Similarly to `getRootVarDecl()`, returns the expression of the base of
the pointer, if there is such an expression.
DeltaFile
+5-7clang/lib/AST/ByteCode/Interp.h
+4-4clang/lib/AST/ByteCode/Interp.cpp
+6-0clang/lib/AST/ByteCode/Pointer.cpp
+2-2clang/lib/AST/ByteCode/InterpBuiltin.cpp
+1-0clang/lib/AST/ByteCode/Pointer.h
+18-135 files

FreeBSD/src e1aa173sys/dev/ufshci ufshci_dev.c

ufshci: consolidate the device query submit/poll pattern

The six query helpers duplicated the same submit, error check, poll,
and status check sequence. Move it into ufshci_dev_send_query() so
future changes to the query flow are made in one place. This also
unifies the failure log message format.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58818
DeltaFile
+28-70sys/dev/ufshci/ufshci_dev.c
+28-701 files

HardenedBSD/src e1aa173sys/dev/ufshci ufshci_dev.c

ufshci: consolidate the device query submit/poll pattern

The six query helpers duplicated the same submit, error check, poll,
and status check sequence. Move it into ufshci_dev_send_query() so
future changes to the query flow are made in one place. This also
unifies the failure log message format.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58818
DeltaFile
+28-70sys/dev/ufshci/ufshci_dev.c
+28-701 files

HardenedBSD/src f3c3db3sys/dev/ufshci ufshci_sim.c

ufshci: validate the CDB before allocating a request

The CDB pointer and length checks depend only on the CCB, so perform
them before allocating and initializing the request. This avoids a
wasted allocation for invalid CCBs on the I/O path and removes one
request-free error path.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58817
DeltaFile
+11-11sys/dev/ufshci/ufshci_sim.c
+11-111 files

FreeBSD/src f3c3db3sys/dev/ufshci ufshci_sim.c

ufshci: validate the CDB before allocating a request

The CDB pointer and length checks depend only on the CCB, so perform
them before allocating and initializing the request. This avoids a
wasted allocation for invalid CCBs on the I/O path and removes one
request-free error path.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58817
DeltaFile
+11-11sys/dev/ufshci/ufshci_sim.c
+11-111 files

HardenedBSD/src dbcebc7sys/dev/ufshci ufshci_req_sdb.c

ufshci: pass the queue being destroyed to the cmd descriptor teardown

ufshci_req_sdb_destroy() hardcoded &ctrlr->transfer_req_queue when
destroying command descriptors instead of using its req_queue argument.

No functional change: the branch only runs for the transfer queue, so
the two pointers are always the same today. Using the argument keeps
the function queue-agnostic for when more transfer queues exist (MCQ).

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58816
DeltaFile
+1-2sys/dev/ufshci/ufshci_req_sdb.c
+1-21 files

FreeBSD/src dbcebc7sys/dev/ufshci ufshci_req_sdb.c

ufshci: pass the queue being destroyed to the cmd descriptor teardown

ufshci_req_sdb_destroy() hardcoded &ctrlr->transfer_req_queue when
destroying command descriptors instead of using its req_queue argument.

No functional change: the branch only runs for the transfer queue, so
the two pointers are always the same today. Using the argument keeps
the function queue-agnostic for when more transfer queues exist (MCQ).

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58816
DeltaFile
+1-2sys/dev/ufshci/ufshci_req_sdb.c
+1-21 files

FreeBSD/src a508a9fsys/dev/ufshci ufshci_req_sdb.c

ufshci: return the real errno from SDB queue construction

ufshci_req_sdb_cmd_desc_construct() and ufshci_req_sdb_construct()
returned ENOMEM for every failure, so an EINVAL from bus_dma_tag_create()
was reported as a memory shortage. Capture and return the real errno,
and drop the cmd descriptor construct's now pointless out label.

No functional change: no caller inspects the value beyond propagating
it, so this only improves the diagnostics on an attach failure.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58815
DeltaFile
+21-18sys/dev/ufshci/ufshci_req_sdb.c
+21-181 files