[Sanitizers] Remove unused variable (#177061)
Must've remained from debugging the test case.
rdar://119958411
Co-authored-by: Mariusz Borsa <m_borsa at apple.com>
archivers/zip: apply Debian patches
These patches fix some security and other issues:
- ( 7) zipnote.c: Close in_file instead of undefined file x
- ( 8) Use format specifier %s to print strings, not the string itself
- (14) Fix buffer overflow when filename contains unicode characters
- (15) Fix buffer overflow when using '-T -TT'
- (16) Fix symlink update detection
Obtained from: https://salsa.debian.org/sanvila/zip
Reported by: diizzy
Reviewed by: diizzy
Security: CVE-2018-13410
MFH: 2026Q1
(cherry picked from commit e0e704bfeaaf5b2f0ac6c66a7a331eab62443d9a)
net-im/gurk-rs: fix build on armv7
Same fix as for shells/nushell.
Approved by: portmgr (build fix blanket)
MFH: 2026Q1
(cherry picked from commit 93bb4e4db4d0ad905374b8a8cfaca194977f13d7)
security/snortsam: broken on FreeBSD 15, deprecate
This port requires the obsolete ioctl(DIOCGETSTATUS), which is no
longer supported on FreeBSD 15. Upstream is dead, so deprecate.
It also has some questionable warnings.
See also: D41651
MFH: 2026Q1
(cherry picked from commit f41b42de2ab80efc26527aaf6aff7345d6583817)
net-mgmt/nagios-pf-plugin: broken on FreeBSD 15, deprecate
This port requires the obsolete ioctl(DIOCGETSTATUS), which is no
longer supported on FreeBSD 15. Upstream is dead, so deprecate.
It also has some questionable warnings.
See also: D41651
MFH: 2026Q1
(cherry picked from commit bd7e3e8a36c48d6a31b8560c39b8ef033e6caa99)
graphics/sdl2_gpu: rename DOCS option to DOXYGEN
This avoids having to OPTIONS_EXCLUDE the DOCS option.
Suggested by: makc
MFH: 2026Q1
(cherry picked from commit f53b9f4be99d6b1c73120e9ba2c32b67897dc1f8)
[TableGen] Prefer base class on tied RC sizes
When searching for a matching subclass tablegen behavior is non
deterministic if we have several classes with the same size.
Break the tie by chooisng a class with smaller BaseClassOrder.
multimedia/ccextractor-gui: remove port
The ccextractor GUI has been rewritten in flutter, which requires Dart.
We do not support Dart, so that means no GUI for us for now.
security/himitsu: create new port
Himitsu is a secure secret storage system for Unix-like systems. It provides an
arbitrary key/value store (where values may be secret) and a query language for
manipulating the key store.
WWW: https://himitsustore.org
PR: 292475
archivers/zip: apply Debian patches
These patches fix some security and other issues:
- ( 7) zipnote.c: Close in_file instead of undefined file x
- ( 8) Use format specifier %s to print strings, not the string itself
- (14) Fix buffer overflow when filename contains unicode characters
- (15) Fix buffer overflow when using '-T -TT'
- (16) Fix symlink update detection
Obtained from: https://salsa.debian.org/sanvila/zip
Reported by: diizzy
Reviewed by: diizzy
Security: CVE-2018-13410
MFH: 2026Q1
net-mgmt/nagios-pf-plugin: broken on FreeBSD 15, deprecate
This port requires the obsolete ioctl(DIOCGETSTATUS), which is no
longer supported on FreeBSD 15. Upstream is dead, so deprecate.
It also has some questionable warnings.
See also: D41651
MFH: 2026Q1
security/snortsam: broken on FreeBSD 15, deprecate
This port requires the obsolete ioctl(DIOCGETSTATUS), which is no
longer supported on FreeBSD 15. Upstream is dead, so deprecate.
It also has some questionable warnings.
See also: D41651
MFH: 2026Q1
editors/wordgrinder: broken on 15 too, deprecate
This port can likely be saved as upstream is still alive and a
newer version (0.8) exists.
See also: https://cowlark.com/wordgrinder/
MFH: 2026Q1
[clang][test] Specify value of `-fopenmp=libomp` for tests. (#177239)
`libomp` is the default value when unconfigured in cmake, but llvm can
be configured to have `libgomp` be the default instead. Explicitly
specify this value so the test does not fail when it assumes libomp is
always the default.
Fix for f369d23ceaa49ffa9e6ef9673851749d66b35b3f (#150580)
[LifetimeSafety] Remove "experimental-" prefix from flags and diagnostics (#176821)
Remove the "experimental-" prefix from lifetime safety diagnostic groups
and command-line options. This enables the analysis in `-Wall`.
We are now in a pretty stable state with no crashes. This change
indicates that lifetime safety analysis is no longer considered
experimental and is now a stable feature. By removing the
"experimental-" prefix, we're signaling to users that this functionality
is ready for use.
- Renamed diagnostic groups from `experimental-lifetime-safety*` to
`lifetime-safety*`
- Updated command-line options from `-fexperimental-lifetime-safety*` to
`-flifetime-safety*` and this is now ON by default.
- Added a check to only enable lifetime safety analysis when relevant
diagnostics are enabled
- Updated test files to use the new flag names
truncate: fix a minor nit + add a hole-punching test
The struct spacectl_range we use is only really used in these three
lines of code, so re-scope it down to just the dealloc branch. This is
marginally easier to reason about what might be necessary to replace in
porting our truncate(1) to other platforms.
While we're here, add a test for the -d flag to be sure it really does
punch a hole in the file. The test also tries to confirm that it does
not disturb other segments of the file in the process, just to inspire
some confidence that it's not corrupting the file somehow.
Sponsored by: Klara, Inc.
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D51207
[CIR][X86] Add support for shuff32x4/shufi32x4 builtins (#172960)
This implementation is adapted from the existing code for
`X86::BI__builtin_ia32_shuf_i*` and `X86::BI__builtin_ia32_shuf_f*` from
`/llvm-project/clang/lib/CodeGen/TargetBuiltins/X86.cpp`.
It adds support for the following X86 builtins:
- __builtin_ia32_shuf_f32x4
- __builtin_ia32_shuf_f64x2
- __builtin_ia32_shuf_i32x4
- __builtin_ia32_shuf_i64x2
- __builtin_ia32_shuf_f32x4_256
- __builtin_ia32_shuf_f64x2_256
- __builtin_ia32_shuf_i32x4_256
- __builtin_ia32_shuf_i64x2_256
Part of https://github.com/llvm/llvm-project/issues/167765
[TableGen] Prefer base class on tied RC sizes
When searching for a matching subclass tablegen behavior is non
deterministic if we have several classes with the same size.
Break the tie by chooisng a class with smaller BaseClassOrder.
