devel/{,java-}subversion{,-lts}: misc low-risk cleanups
- java-subversion: document the real cause of MAKE_JOBS_UNSAFE (build.conf's
Java-target add-deps only thread into the phony aggregate target, not the
javac -h compile rule, so -j can run javahl-types-java before
javahl-java's NativeResources.class exists).
- subversion{,-lts}: drop GPG_AGENT_BUILD_DEPENDS; --with-gpg-agent is a
pure configure-time #define with no build-time dependency on the gpg-agent
binary, only a runtime one (already covered by GPG_AGENT_RUN_DEPENDS).
- subversion{,-lts}: remove the dead .if ${PREFIX} != "/usr" guard around two
REINPLACE_CMD calls in post-patch; PREFIX defaults to LOCALBASE and is never
literally /usr in a standard ports build, so the guard was always true.
- mod_subversion: remove the dead PLIST_SUB+= SED=${SED} token;
pkg-plist has no %%SED%% reference.
Bump PORTREVISION for subversion and subversion-lts.
Co-Authored-By: Claude Sonnet 5 <noreply at anthropic.com>
Don't proceed with undefined results in the face of memory access
errors in the FPU emulator:
- fpu_load_ea() / fpu_store_ea(): if copyin() / copyout() return non-zero,
return SIGSEGV.
Catch some callers of fpu_load_ea() and fpu_store_ea() that were ignoring
the return value:
- fpu_emul_arith() / fpu_emul_fscale(): Pay attention to the return value
of fpu_load_ea().
- fpu_emul_fstore(): Pay attention to the return value of fpu_store_ea().
Problem reported by Romain Dolbeau on port-m68k.
[docs] Register an LLVM IR lexer for Sphinx docs
The Pygments LLVM IR lexer has a fixed keyword list that lags behind the
IR. It doesn't know `ptrtoaddr`, `bitextract`, `samesign`, `captures`,
byte types and others. When it meets one, it emits error tokens and
Sphinx renders the whole block as plain text.
Add `llvm/utils/pygments/llvm_lexer.py`, which extends the stock lexer
with the keywords from `LLLexer.cpp` and the attribute names from
`Attributes.td`, read when the lexer is loaded. It also handles byte
types, comdat names, summary entries, debug records, DI constants, `|`,
sign-prefixed hex integers, hex FP literals and numbered calling
conventions. Any other word is lexed as a name, so a placeholder in an
example doesn't drop highlighting for the whole block.
Register it for every project in `common_conf()`, like the MLIR lexer.
Also change the LangRef examples that are IR but were fenced as `text`
to `llvm`, and fix two typos in them.
[CodeGen] Ignore debug instructions in the VLIW block-size heuristic (#224497)
The converging VLIW scheduler derived `CriticalPathLength` from the raw
size of
the `MachineBasicBlock`. This counted debug instructions. On Hexagon,
one
`DBG_VALUE` could cross an issue-width boundary, change candidate costs,
and
produce a different ordinary schedule.
Count the block's non-debug instructions with
`instructionsWithoutDebug`, while
passing `SkipPseudoOp=false` to preserve the existing pseudo-probe and
block-wide semantics. Add a reduced Hexagon MIR regression test at the
integer
threshold.
Fixes #224483
AI disclosure: This patch was developed with OpenAI Codex 5.6 Sol and
co-reviewed by Claude and Yongqiang Tian.
devel/subversion{,-lts}: install real bash completion instead of dead DATADIR copy
Install tools/client-side/bash_completion to
share/bash-completion/completions/svn, the real path
shells/bash-completion's framework scans, and symlink the other five
commands it defines completions for (svnadmin, svndumpfilter, svnlook,
svnsync, svnversion) to it. No dependency on shells/bash-completion is
added; an admin who wants completion installs that port themselves.
Bump PORTREVISION for both ports since this adds new plist content.
Co-Authored-By: Claude Sonnet 5 <noreply at anthropic.com>
devel/subversion{,-lts}: fix GNOME Keyring post-configure to target SVN_HAVE_LIBSECRET
security/subversion-gnome-keyring provides the library for
--with-gnome-keyring (SVN_HAVE_LIBSECRET), not the legacy
--with-old-gnome-keyring (SVN_HAVE_GNOME_KEYRING). The REINPLACE_CMD in
post-configure was patching the wrong macro (SVN_HAVE_GNOME_KEYRING /
SVN_HAVE_KWALLET), which had no effect on what the installed keyring
support package actually needs enabled.
Bump PORTREVISION for both ports since this changes build behavior.
Co-Authored-By: Claude Sonnet 5 <noreply at anthropic.com>
[SLP]Reduce loop accumulators before seeds
Store/PHI seeds of per-stream reductions transposed the loop
accumulators. Try the seed reductions first when each reduces its
own accumulators with uniform updates over consecutive loads in the
same block. Cost the selects, whose conditions are the lanes
extracted from a vectorized compare, with the predicate of this
compare.
Assisted-by: Cursor
Reviewers: bababuck, RKSimon
Pull Request: https://github.com/llvm/llvm-project/pull/234766
Revert "System: Gateways - fix protocol selection for dynamic interfaces without ipprotocol set and make sure policy based routing rules can use these for both protocols"
This reverts commit 5b6ccdb592729ddb5e001e5351125c00eb0dd43e.
It looks like there's no easy fix that satisfies exsiting and new setups, ref https://github.com/opnsense/core/issues/11117
kernel - Fix page fault in the jail unmount check
sys_unmount() printed the "does not belong to this jail" message using
uap->path, a user-space pointer. With SMAP enabled, kprintf() -> strlen()
faults on it.
Use nd.nl_path, the kernel copy that nlookup_init() already made.
Panic reproduce steps, assuming a jail is prepared at `/jail`:
```
jail# umount /dev
```
Reported-by: tuxillo
Bug: https://bugs.dragonflybsd.org/issues/3386
Regenerate callbr tests for label-must-be-emitted
Main now prints label-must-be-emitted on INLINEASM_BR indirect targets
(#234850).
Assisted-by: Claude Opus 5.5
dmarc-report-viewer: Update to version 2.7.0
## [2.7.0] - 2026-10-31
* Security: Limit maximum number of parallel DNS requests triggered by Web UI.
* Security: Check peer address for DNS responses.
* Fix: Added logging of missing DNS configuration values.
* Fix: Count on mail sources page now shows the number of instances the IP was reported.
* Fix: 500 Internal server error for some IP info requests is now gone.
* Change: Removed IP details from DMARC and SMTP TLS report details and replaced with new IP dialog.
* Feature: Greatly improved filtering options for summary charts, mails, DMARC and SMTP TLS reports.
* Feature: Allow custom time span filtering for summary charts, mails, DMARC and SMTP TLS reports (see issues #82 and #32).
* Feature: App uses now RwLocks instead of Mutex for app state and DNS cache to allow more parallel read operations.
* Feature: Show failure count sum in SMTP TLS report list.
* Feature: Show record count sum in DMARC report list.
* Feature: Added JSON bulk export of filtered DMARC and SMPT TLS reports (see issue #92).
* Feature: Added new IP dialog with all available information about an IP.
It also allows to open filtered lists of all DMARC or SMTP TLS reports for that IP (see issues #81 and #56).
* Updated Cargo dependencies.
[MLIR] Pack vector state with SmallVectorWithFlags
Store PresburgerSpace's identifier state, WalkContinuation's action, and
UseListOrderStorage's encoding flag in the capacity fields of their
vectors. Preserve inline capacities and move-based bytecode buffer
transfers; the temporaries in the bytecode reader that only shuffle the
indices stay plain SmallVectors, moved out of the flagged storage.
On x86-64, this reduces PresburgerSpace from 40 to 32 bytes,
WalkContinuation from 72 to 64, and UseListOrderStorage from 40 to 32.
Test flags across empty and heap-backed copies and moves. Cover inline
and heap-backed index pairs and full-shuffle bytecode encoding.
Assisted-by: Codex
Assisted-by: Claude Code
[ADT] Add SmallVectorWithFlags with packed user flags
Structures that hold a SmallVector followed by a bool or a couple of
flag bits pay up to eight bytes of padding for those bits, and there is
no padding inside the vector to reuse: the header is exactly a pointer
and two 32-bit fields, and the inline storage of pointer-sized elements
is a multiple of eight bytes. SmallVectorWithFlags stores one to four
user flag bits in the high bits of the capacity field, so it has the
same size and inline capacity as SmallVector.
The capacity field is the one header field not read on the hot path:
the buffer pointer's free low bits depend on the element alignment and
are read on every element access, and the size is read by size() and
end(). Only capacity() masks the flags out, which costs one extra `and`
in the growth check of push_back; begin(), end(), and size() are
untouched. The cost is a maximum capacity divided by 2^FlagBits, which
with the 32-bit size type and four flag bits is 268 million elements.
The SmallVector implementation layers take a FlagBits template
[35 lines not shown]
