mandoc: Drop -ieee754-2008 abbreviation
Improve manpage compatability by dropping an abbreviation macro that
compiler upstreams do not want, causing manuals using it to render
incorrectly on other toolchains or operating systems. It was only used
in three manuals, which are amended in this commit.
Reviewed by: fuz, markj
MFC after: no, these did not MFC
Requested by: Ingo Schwarze <schwarze at openbsd.org>
Fixes: db3884b03989 ("contrib/mandoc: add -ieee754-2008")
Fixes: 63cd0841de76 ("document .St -ieee754-2008 in mdoc")
Differential Revision: https://reviews.freebsd.org/D59880
build: seed /etc/sudoers as mode 0440 (#499)
sudo refuses a sudoers file that is not 0440 ("is mode 0644, should be
0440"), and git stores nextbsd-overlays' copy as 0644, so the image's
sudo from NextBSD-contrib could not load its policy. Same fix as
overlays' seed.sh and nextbsd-userland's assemble-image.sh.
Co-authored-by: Claude Fable 5.1 <noreply at anthropic.com>
[RISCV] Add assembler support for the Qualcomm Xqccmi vendor extension (#225119)
This patch adds support for assembling and disassembling the Qualcomm
Xqccmi 16-bit Instruction Lookup Table vendor extension. The extension
has a single `qc.cm.ilut` instruction which executes one or two
instructions from an instruction lookup table. The encoding overlaps
with `c.fld`, making `Xqccmi` and `Zcd` mutually exclusive.
The extension also adds two CSR's `qc.itba` and `qc.itdec` that contain
the lookup table base address and the leading double entries count
respectively.
Spec:
https://github.com/qualcomm/riscv-unified-db/releases#release-Xqccmi-0.2.0
Assisted by gpt-5.6-luna.
drm/ttm: Fix bo resource use-after-free
From Thadeu Lima de Souza Cascardo
73867f2536704760dc42671eb508c1fdc7fd9b0b in linux-6.18.y/6.18.53
91d7e9df42598af28ca440b95b16a4e51a408771 in mainline linux
drm/ttm: Drop tt->restore after successful restore
From Matthew Brost
329ddc5d438f991f49e4fd24c704d1c7288d5e03 in linux-6.18.y/6.18.53
941ac10529b3be5965a88d432a161ab459672ba8 in mainline linux
Disable LZ77 dictionary coder to avoid a potential side-channel leak
A chosen-plaintext attack method exists which makes use of
dictionary-based compression to recover secrets from one channel by
interacting with the SSH session's shared compression dictionary through
another channel.
Attacker-controlled input can recognizably reflect into the total length
of transmitted ciphertexts by virtue of LZ77 replacing repeated strings
with back-references into the SSH session's encoder search buffer,
which is shared across all channels. For this reason, the documentation
already recommended against enabling compression for connections that
share trusted and untrusted traffic.
As an extra precaution, use only Huffman coding when compressing
plaintexts, as this algorithm does not use a dictionary. But, this
results in a reduction of compression effectiveness.
Inspired by "Crossing the Streams: SSH Plaintext Recovery via a Common
[4 lines not shown]
drm/ttm: Tidy usage of local variables a little bit
From Tvrtko Ursulin
b21c971e4cb11c0c7ea74261f966814280c02647 in linux-6.18.y/6.18.53
c06da4b3573a2d3c906c185450d0b1059d02820e in mainline linux
drm/amd/display: Honor Broadcast RGB for BT.2020 RGB output
From Satyajit Roy
037a00dfd5838d616bc04195b182055da1b33fe6 in linux-6.18.y/6.18.53
7fca7acd60a228b62b4e9efa5f184738041e9564 in mainline linux
drm/amd/display: Propagate HDMI RGB quantization selectability
From Satyajit Roy
6194e1b536dc624e05412507fb84c6c880e1f8b5 in linux-6.18.y/6.18.53
bdcd0411d7d186225a52458fd42bb70d54ca917a in mainline linux
[ORC] Mangle MachOUnwindInfoRegistrar CI names as C (#225278)
Flip the MachOUnwindInfoRegistrar register/deregister-sections
descriptors from Verbatim to C, so their names carry the target's C
mangling. Served in-tree by UnwindInfoManager (via mangledCopy of the
same specs) and resolved by UnwindInfoRegistrationPlugin through the
same specs, so both sides stay in sync; nothing else defines them.
[ORC] Mangle SharedMemoryMapper CI names as C (#225277)
Flip the SharedMemoryMapper descriptors (instance +
reserve/initialize/deinitialize/release) from Verbatim to C, so their
names carry the target's C mangling. Served by the in-tree
ExecutorSharedMemoryMapperService; controller and executor mangle the
same specs and nothing else defines these names.
drm/amd/display: Rebuild InfoFrames on output color space changes
From Satyajit Roy
925d9aa99a69ddf461f256c397590957d35dee8a in linux-6.18.y/6.18.53
8cfd9e22eb5c04b15b82985ff913944f84673d4f in mainline linux
[ORC] Mangle GDBJITRegistrar alloc-action CI names as C (#225275)
Flip RegisterJITLoaderGDBAllocActionName and its deregister counterpart
from Verbatim to C, so their names carry the target's C mangling. The
register action is served in-tree by llvm_orc_registerJITLoaderGDBAlloc-
Action (DefaultHostBootstrapValues, via mangledCopy of the same spec)
and resolved by the debugger-support plugins through the same spec, so
both sides stay in sync.
drm/pagemap: dma-unmap pages before handling migration errors
From Matthew Brost
e4331c6644db85bc6ceb470bd84bcf371b6dbfa6 in linux-6.18.y/6.18.53
9e6372ec2a3990662ae0a67f56ac0aee19848d5b in mainline linux
www/bunkerweb: Update to 1.6.15
Fixes an unauthenticated RCE in the worker API (GHSA-xcv3-gjwr-rwxw),
a WAF filename bypass via RFC 2231 encoding (GHSA-cvfx-2ffg-cqmj) and
three API permission flaws.
1.6.15 imports Configurator in the scheduler and the web UI, so add
common/gen to their PYTHONPATH. Run the Alembic migration before the
scheduler starts, upstream does this in its systemd wrapper, without
it the scheduler dies on the new is_draft column.
Ship a sample api.yml, the API refused to start without that file, and
bind it to localhost by default. Drop the ModSecurity directives from
the reverse proxy and web UI templates too, OpenResty has no such
module.
Changelog: https://github.com/bunkerity/bunkerweb/releases/tag/v1.6.15
Sponsored by: Netzkommune GmbH
drm/amdgpu: avoid force-completing uninitialized UVD rings
From Bob Zhou
dc136795f9997adc8d3219f40e8e3afa7df7183f in linux-6.18.y/6.18.53
6760f5cb12d2366ddd58a2d8637f7583d73f596b in mainline linux
drm/amdgpu: plumb timedout fence through to force completion
From Alex Deucher
a335084eae7a103a9f34f8cf8edf1935248035a0 in linux-6.18.y/6.18.53
c184df870db1e328691ea0fbb7d0e59efd9d3f9f in mainline linux
drm/amdgpu: Make amdgpu_vm_flush() non-failing in submission path
From Srinivasan Shanmugam
f90d671463defa0a1081dae4ec2be0f67f22b141 in linux-6.18.y/6.18.53
37872d06f85f0349e7b1f0680aea77326f7c135e in mainline linux
[PAC][ELF] Support R_AARCH64_AUTH_TLSDESC_CALL relocation (#198327)
The R_AARCH64_AUTH_TLSDESC_CALL is introduced to allow linker relaxation
of AUTH TLSDESC call sequences for non-preemptible undefined weak
symbols.
The lld patch introducing the relaxation: #194636
Corresponding ARM docs PR:
https://github.com/ARM-software/abi-aa/pull/395
drm/amdgpu: reorder IB schedule sequence
From Alex Deucher
aa0136206cea800686e0ed9faa5e5c661699b1d0 in linux-6.18.y/6.18.53
d3499de3b737f3f6a2058382f7bff641c74f52a4 in mainline linux
drm/amdgpu: add a helper to calculate ring distance
From Alex Deucher
3d0162c5be362d176c5c1425d48e40a9460fa5fa in linux-6.18.y/6.18.53
08e7d6c3cee880bd3ec3eb14c478f9fa805b0bdc in mainline linux
