HardenedBSD/src 8b8d8b2lib/libc/stdlib strfrom.c, lib/libc/tests/stdlib strfrom_test.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+590-0lib/libc/tests/stdlib/strfrom_test.c
+476-0lib/libc/stdlib/strfrom.c
+243-0lib/msun/src/s_asinpi.c
+215-0lib/msun/src/s_atanpi.c
+191-0lib/msun/ld80/s_asinpil.c
+175-0lib/msun/ld80/s_atanpil.c
+1,890-022 files not shown
+3,120-6428 files

HardenedBSD/src 6f95b43lib/libc/stdlib strfrom.c, lib/libc/tests/stdlib strfrom_test.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+590-0lib/libc/tests/stdlib/strfrom_test.c
+476-0lib/libc/stdlib/strfrom.c
+243-0lib/msun/src/s_asinpi.c
+215-0lib/msun/src/s_atanpi.c
+191-0lib/msun/ld80/s_asinpil.c
+175-0lib/msun/ld80/s_atanpil.c
+1,890-022 files not shown
+3,120-6428 files

HardenedBSD/src d349cf2sys/fs/nullfs null_vnops.c, sys/net if_vxlan.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+14-5sys/fs/nullfs/null_vnops.c
+2-1sys/net/if_vxlan.c
+16-62 files

HardenedBSD/ports bbe0472cad/opencascade/files patch-src_DataExchange_TKDESTEP_STEPConstruct_STEPConstruct__AP203Context.cxx, www/waterfox/files patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn patch-bug1626236

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+18,821-20,532www/waterfox/files/patch-libwebrtc-generated
+138-0www/waterfox/files/patch-languageid-de-constexpr-ify
+62-44www/waterfox/files/patch-pipewire_init
+0-92www/waterfox/files/patch-bug1626236
+36-27www/waterfox/files/patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn
+0-58cad/opencascade/files/patch-src_DataExchange_TKDESTEP_STEPConstruct_STEPConstruct__AP203Context.cxx
+19,057-20,75340 files not shown
+19,477-21,08646 files

LLVM/project e7dd336llvm/lib/Target/M68k M68kSubtarget.h M68kInstrInfo.td, llvm/test/CodeGen/M68k/Atomics rmw.ll

[M68k] Prevent COPY instruction from killing live condition flags (#168485)
DeltaFile
+1,042-470llvm/test/CodeGen/M68k/CodeModel/Large/Atomics/rmw.ll
+521-235llvm/test/CodeGen/M68k/Atomics/rmw.ll
+112-56llvm/lib/Target/M68k/M68kInstrInfo.cpp
+4-10llvm/lib/Target/M68k/M68kInstrData.td
+3-0llvm/lib/Target/M68k/M68kInstrInfo.td
+1-0llvm/lib/Target/M68k/M68kSubtarget.h
+1,683-7716 files

NetBSD/src DiuxLadsys/dev/sun cgsix.c

   break a long line, remove an obsolete comment
   NFC
VersionDeltaFile
1.76+5-4sys/dev/sun/cgsix.c
+5-41 files

NetBSD/src y8zyhPPsys/dev/sun cgsix.c

   add cursor sprite support via wsdisplay as well
   while there, don't set PREFETCHABLE in mmap() - it's not supported on anything
   a cgsix could attach to, and fix RI_FULLCLEAR
VersionDeltaFile
1.75+154-24sys/dev/sun/cgsix.c
+154-241 files

FreeBSD/ports b3db00ceditors/emacs-devel pkg-plist Makefile

editors/emacs-devel: Update to latest git snapshot 1095d63d2
DeltaFile
+3-3editors/emacs-devel/distinfo
+2-2editors/emacs-devel/Makefile
+2-0editors/emacs-devel/pkg-plist
+7-53 files

HardenedBSD/ports b3db00ceditors/emacs-devel pkg-plist Makefile

editors/emacs-devel: Update to latest git snapshot 1095d63d2
DeltaFile
+3-3editors/emacs-devel/distinfo
+2-2editors/emacs-devel/Makefile
+2-0editors/emacs-devel/pkg-plist
+7-53 files

Linux/linux bd1dde8fs binfmt_misc.c, fs/iomap ioend.c

Merge tag 'vfs-7.2-rc6.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

Pull vfs fixes from Christian Brauner:
 "binfmt_misc:

   - Don't let an 'F' entry pin its own instance.

     An entry registered with 'F' opens its interpreter at registration
     time and holds that file until the entry is freed, so an entry
     nobody removes by hand is only closed once the binfmt_misc
     superblock is shut down.

     If the interpreter lives on a mount that keeps that superblock
     alive the two pin each other and the file is never closed. That's
     reachable by pointing the interpreter at the instance itself or by
     using the instance as an overlayfs lower layer, and once the mount
     namespace is gone there's nothing left to unregister through
     either.


    [77 lines not shown]
DeltaFile
+34-20fs/binfmt_misc.c
+17-13fs/netfs/objects.c
+13-9fs/netfs/rolling_buffer.c
+19-2fs/iomap/ioend.c
+10-5fs/netfs/write_issue.c
+6-4fs/netfs/buffered_read.c
+99-537 files not shown
+119-5913 files

LLVM/project 6be9888libcxx/include variant

Speed up std::visit() compile times by another 42% (#213203)

This avoids defining an `enum`, which appears to be expensive for Clang.
DeltaFile
+30-30libcxx/include/variant
+30-301 files

FreeBSD/ports 76efafbwww/waterfox/files patch-bug1716707 patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn

www/waterfox: Update 6.6.16.1 => 6.7.0-beta.3

First 6.7.0 beta moving Waterfox to the ESR 153 platform.

Release Notes:
https://www.waterfox.com/releases/6.7.0-beta.1/
https://www.waterfox.com/releases/6.7.0-beta.2/
https://www.waterfox.com/releases/6.7.0-beta.3/

PR:             297209
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit 66176a33aca4cf06c82d140b93720aa5cadd4c0e)
DeltaFile
+18,821-20,532www/waterfox/files/patch-libwebrtc-generated
+138-0www/waterfox/files/patch-languageid-de-constexpr-ify
+62-44www/waterfox/files/patch-pipewire_init
+0-92www/waterfox/files/patch-bug1626236
+36-27www/waterfox/files/patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn
+0-56www/waterfox/files/patch-bug1716707
+19,057-20,75126 files not shown
+19,411-20,97532 files

HardenedBSD/ports 66176a3www/waterfox/files patch-bug1716707 patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn

www/waterfox: Update 6.6.16.1 => 6.7.0-beta.3

First 6.7.0 beta moving Waterfox to the ESR 153 platform.

Release Notes:
https://www.waterfox.com/releases/6.7.0-beta.1/
https://www.waterfox.com/releases/6.7.0-beta.2/
https://www.waterfox.com/releases/6.7.0-beta.3/

PR:             297209
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+18,821-20,532www/waterfox/files/patch-libwebrtc-generated
+138-0www/waterfox/files/patch-languageid-de-constexpr-ify
+62-44www/waterfox/files/patch-pipewire_init
+0-92www/waterfox/files/patch-bug1626236
+36-27www/waterfox/files/patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn
+0-56www/waterfox/files/patch-bug1716707
+19,057-20,75126 files not shown
+19,411-20,97632 files

FreeBSD/ports 66176a3www/waterfox/files patch-bug1716707 patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn

www/waterfox: Update 6.6.16.1 => 6.7.0-beta.3

First 6.7.0 beta moving Waterfox to the ESR 153 platform.

Release Notes:
https://www.waterfox.com/releases/6.7.0-beta.1/
https://www.waterfox.com/releases/6.7.0-beta.2/
https://www.waterfox.com/releases/6.7.0-beta.3/

PR:             297209
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+18,821-20,532www/waterfox/files/patch-libwebrtc-generated
+138-0www/waterfox/files/patch-languageid-de-constexpr-ify
+62-44www/waterfox/files/patch-pipewire_init
+0-92www/waterfox/files/patch-bug1626236
+36-27www/waterfox/files/patch-third__party_libwebrtc_build_config_BUILDCONFIG.gn
+0-56www/waterfox/files/patch-bug1716707
+19,057-20,75126 files not shown
+19,411-20,97632 files

NetBSD/src hceQ8DNsys/arch/hb68k/pg68k ph1_machdep.c

   Remove the no-op platform routines now that they're documented
   elsewhere.
VersionDeltaFile
1.2+2-31sys/arch/hb68k/pg68k/ph1_machdep.c
+2-311 files

NetBSD/src RANZF9Csys/arch/m68k/include fdt_platform.h

   Document all of the m68k fdt_platform hooks.  Add fp_bootstrap(), and
   provide a prototype for fdt_bootstrap1(), a pre-pmap_bootstrap1() early
   init routine.
VersionDeltaFile
1.2+91-1sys/arch/m68k/include/fdt_platform.h
+91-11 files

LLVM/project 84046aclldb/packages/Python/lldbsuite/test lldbutil.py

[lldb][test] Recognize a Wasm trap as a crash (#213551)

is_thread_crashed maps how each platform reports the bad access the test
suite uses to simulate a crash, and had no case for Wasm, where there
are no signals and a bad access raises a trap that a runtime reports as
an exception. Without one it fell through to a description match that
never held, so a crashed thread read as running fine.
DeltaFile
+4-0lldb/packages/Python/lldbsuite/test/lldbutil.py
+4-01 files

Linux/linux a84c804Documentation/devicetree/bindings/ufs qcom,sa8255p-ufshc.yaml, drivers/scsi/hisi_sas hisi_sas_v3_hw.c

Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

Pull SCSI fixes from James Bottomley"
 "No core changes. The largest driver fix is the reversion of threaded
  interrupt handlers in UFS and the next is the resume deadlock fix in
  hisi_sas which extends into libsas"

* tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
  scsi: ufs: core: Initialize hba->rpmbs list in ufshcd
  scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit
  scsi: target: Clear cmd_cnt when initial counter enrollment fails
  scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req
  scsi: ufs: core: Revert "Delegate the interrupt service routine to a threaded IRQ handler"
  scsi: ufs: core: Cancel RTC work in active-active suspend
  scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
  scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE
  scsi: ufs: dt-bindings: Add missing mcq reg for qcom,sa8255p-ufshc
  scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race
  scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
  scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
DeltaFile
+8-38drivers/ufs/core/ufshcd.c
+18-19drivers/scsi/libsas/sas_init.c
+10-2drivers/target/target_core_transport.c
+1-9drivers/scsi/hisi_sas/hisi_sas_v3_hw.c
+7-2drivers/scsi/mpi3mr/mpi3mr_fw.c
+8-1Documentation/devicetree/bindings/ufs/qcom,sa8255p-ufshc.yaml
+52-717 files not shown
+64-8713 files

OpenBSD/ports ux8nymmx11/gnome/contacts Makefile, x11/gnome/contacts/patches patch-src_meson_build patch-src_contacts-avatar_vala

   Move to glycin.
VersionDeltaFile
1.113+5-3x11/gnome/contacts/Makefile
1.2+0-0x11/gnome/contacts/patches/patch-src_meson_build
1.2+0-0x11/gnome/contacts/patches/patch-src_contacts-avatar_vala
1.4+0-0x11/gnome/contacts/patches/patch-src_contacts-avatar-selector_vala
1.5+0-0x11/gnome/contacts/patches/patch-meson_build
+5-35 files

Linux/linux 49c9f46drivers/dma switchtec_dma.c sun6i-dma.c, drivers/dma/idxd cdev.c init.c

Merge tag 'dmaengine-fix-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine

Pull dmaengine fixes from Vinod Koul:

 - switchtec fix for register programming

 - sun6i descriptor reclaim fix

 - Intel idxd fixes for double free in error and setup failure

 - Qualcomm bam dma command element fix

* tag 'dmaengine-fix-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine:
  dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+
  dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()
  dmaengine: idxd: fix double free of wq, engine, and group structs
  dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
  dmaengine: switchtec-dma: fix FIELD_GET misuse when programming SE threshold
DeltaFile
+5-31drivers/dma/idxd/init.c
+16-5include/linux/dma/qcom_bam_dma.h
+4-7drivers/dma/sun6i-dma.c
+3-1drivers/dma/idxd/cdev.c
+1-1drivers/dma/switchtec_dma.c
+29-455 files

NetBSD/pkgsrc-wip cf5b83fmtr-graph Makefile distinfo

mtr-graph(mtr085): update to 0.85.283
DeltaFile
+3-3mtr-graph/distinfo
+2-2mtr-graph/Makefile
+5-52 files

Linux/linux 4081446drivers/phy/qualcomm phy-qcom-m31-eusb2.c, drivers/phy/rockchip phy-rockchip-naneng-combphy.c

Merge tag 'phy-fixes-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy

Pull phy fixes from Vinod Koul:

 - fixes for zynqmp clock and pm error handling and SERDES scrambler
   register handling

 - Rockchip SSC spread fix

 - Qualcomm musb return call fix

* tag 'phy-fixes-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy:
  phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
  phy: zynqmp: use read-modify-write for SERDES scrambler bypass
  phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
  phy: zynqmp: fix runtime PM leak on probe allocation failure
  phy: zynqmp: fix clock error handling in xpsgtr_phy_init()
  phy: rockchip: naneng-combphy: Always configure SSC spread direction
  phy: qcom: m31-eusb2: Fix return value of init call
DeltaFile
+45-17drivers/phy/xilinx/phy-zynqmp.c
+3-3drivers/phy/rockchip/phy-rockchip-naneng-combphy.c
+1-1drivers/phy/qualcomm/phy-qcom-m31-eusb2.c
+49-213 files

FreeNAS/freenas ba59d2asrc/middlewared/middlewared/plugins/vm vm_lifecycle.py, src/middlewared/middlewared/pytest/unit/plugins/vm test_vm_clock_xml.py

Apply the VM system clock setting to the generated domain

## Problem
`pylibvirt_vm()` builds the domain configuration by unpacking the VM dict into a plain dataclass, converting `bootloader` and `cpu_mode` into their enums but not `time`. The API model types `time` as a string literal, so the configuration held `'LOCAL'`/`'UTC'` instead of a `Time` member, and the clock offset is decided by comparing that field against `Time.LOCAL`. That comparison was always false, so every VM was defined with `<clock offset="utc">` regardless of what the user picked, and Windows guests — which expect a localtime RTC — ran off by the host's UTC offset. Containers were unaffected because their equivalent helper already does the conversion.

## Solution
Convert `time` alongside the other two enums. Every caller reaches this through the VM query, whose `Literal['LOCAL', 'UTC']` guarantees a valid value, so the conversion cannot raise. Added a unit test covering both offsets with and without Hyper-V enlightenments, which restores coverage that was dropped when XML generation moved out to truenas_pylibvirt.

Backport of 6f5c7fe52184b3d7897e39a42f1f74fe24cb71ad, applied by hand rather than cherry-picked: here `pylibvirt_vm` is still a service method on `VMService` in `vm_lifecycle.py` taking a plain dict, so both the fix and the test are adapted to that shape.
DeltaFile
+65-0src/middlewared/middlewared/pytest/unit/plugins/vm/test_vm_clock_xml.py
+2-1src/middlewared/middlewared/plugins/vm/vm_lifecycle.py
+67-12 files

LLVM/project def770dlldb/bindings/interface SBUnixSignalsExtensions.i, lldb/test/API/python_api/signals TestSignalsAPI.py

[lldb] Fix typo in SBUnixSignals.get_unix_signals_list (#213527)

Found when looking through the generated Python file. `sig` doesn't
exist in that context, it should be `idx`.
DeltaFile
+6-0lldb/test/API/python_api/signals/TestSignalsAPI.py
+1-1lldb/bindings/interface/SBUnixSignalsExtensions.i
+7-12 files

NetBSD/src Rx0XRMnsys/dev/pci if_rge.c

   Add RealTek Killer E500

   from FreeBSD via OpenBSD
VersionDeltaFile
1.54+3-2sys/dev/pci/if_rge.c
+3-21 files

NetBSD/src N6dxvSasys/dev/pci pcidevs.h pcidevs_data.h

   regen
VersionDeltaFile
1.1520+1,699-1,696sys/dev/pci/pcidevs_data.h
1.1521+2-1sys/dev/pci/pcidevs.h
+1,701-1,6972 files

OpenBSD/ports AnGjdAadevel/kdiff3 Makefile distinfo

   Update kdiff3 to 1.12.6
VersionDeltaFile
1.37+2-2devel/kdiff3/distinfo
1.58+1-1devel/kdiff3/Makefile
+3-32 files

NetBSD/src vdKZWansys/dev/pci pcidevs

   Add RealTek Killer E5000
VersionDeltaFile
1.1542+2-1sys/dev/pci/pcidevs
+2-11 files

FreeNAS/freenas 6f5c7fesrc/middlewared/middlewared/plugins/vm lifecycle.py, src/middlewared/middlewared/pytest/unit/plugins/vm test_vm_clock_xml.py

NAS-142015 / 27.0.0-BETA.1 / Apply the VM system clock setting to the generated domain (#19451)

## Problem
`pylibvirt_vm()` builds the domain configuration by unpacking
`VMEntry.model_dump()` into a plain dataclass, converting `bootloader`
and `cpu_mode` into their enums but not `time`. The API model types
`time` as a string literal, so the configuration held `'LOCAL'`/`'UTC'`
instead of a `Time` member, and the clock offset is decided by comparing
that field against `Time.LOCAL`. That comparison was always false, so
every VM was defined with `<clock offset="utc">` regardless of what the
user picked, and Windows guests — which expect a localtime RTC — ran off
by the host's UTC offset. Containers were unaffected because their
equivalent helper already does the conversion.

## Solution
Convert `time` alongside the other two enums. Every caller reaches this
through `VMEntry`, whose `Literal['LOCAL', 'UTC']` guarantees a valid
value, so the conversion cannot raise. Added a unit test covering both
offsets with and without Hyper-V enlightenments, which restores coverage
that was dropped when XML generation moved out to truenas_pylibvirt.
DeltaFile
+46-0src/middlewared/middlewared/pytest/unit/plugins/vm/test_vm_clock_xml.py
+2-1src/middlewared/middlewared/plugins/vm/lifecycle.py
+48-12 files

NetBSD/src bdEdXBOsys/arch/hb68k/hb68k machdep.c

   For machine_powerdown() and machine_halt(), invoke the default handlers
   if the platform didn't provide one.  For machine_reboot(), simply to nothing
   if the platform doesn't provide a handler, and the default action will
   take place.
VersionDeltaFile
1.4+15-5sys/arch/hb68k/hb68k/machdep.c
+15-51 files