FreeBSD/ports 34eb937www/osticket distinfo pkg-plist

www/osticket: update 1.8.1 -> 1.8.4, mostly security fixes

- mostly security fixes
- short run-test with php85

PR:             296956
Changes: https://github.com/osTicket/osTicket/releases/tag/v1.18.4
        https://github.com/osTicket/osTicket/releases/tag/v1.18.3
        https://github.com/osTicket/osTicket/releases/tag/v1.18.2
Approved-by: otis (maintainer)
DeltaFile
+3-3www/osticket/distinfo
+0-5www/osticket/pkg-plist
+1-1www/osticket/Makefile
+4-93 files

LLVM/project 4f5675allvm/lib/DTLTO CMakeLists.txt

[CMake] Added missing LLVM_PTHREAD_LIB dependency. (#211041)

Required after #209423.
DeltaFile
+3-0llvm/lib/DTLTO/CMakeLists.txt
+3-01 files

LLVM/project accd1edclang/lib/StaticAnalyzer/Checkers StdVariantChecker.cpp, clang/test/Analysis std-variant-checker.cpp

[analyzer] Fix StdVariantChecker crash on std::get with a non-ptr arg (#210167)

When `std::get` is called on a dereferenced integer-to-pointer cast, the
checker `alpha.core.StdVariant` crashes. Minimal reproducer:

```
std::get<int>(*(std::variant<int, char> *)11);
```

Godbolt reproducer - https://godbolt.org/z/4EKe1PrKb

The root cause is that `StdVariantChecker::handleStdGetCall()` calls
`SVal::getType()` on any non-unknown argument, then calls
`getPointeeType()` on the result while assuming it is a pointer type. In
the case of a concrete integer cast to a pointer and then dereferenced,
it is modeled as `loc::ConcreteInt`, whose recovered type is an integer.
`getPointeeType()` on such an input returns a null QualType, on which
`getTypePtr()` crashes.

Fix the crash by using the argument's static type rather than recovering
its SVal, eliminating the need to guard and call `getPointeeType()`.
DeltaFile
+1-6clang/lib/StaticAnalyzer/Checkers/StdVariantChecker.cpp
+4-0clang/test/Analysis/std-variant-checker.cpp
+5-62 files

LLVM/project ee1eab2clang/lib/Sema SemaSPIRV.cpp, clang/test/Sema builtins-elementwise-math.c riscv-rvv-vector-trig-ops.c

[clang] Update diagnostics to include matrices as accepted types (#201237)

Several `err_builtin_invalid_arg_type` call sites still emit "scalar or
vector of ..." even though the underlying checkers already unwrap matrix
types. This extends the diagnostic with a new "scalar, vector, or matrix
of" option (index 6) and migrates the call sites whose checkers do
accept matrices:

Call sites whose checkers only unwrap VectorType are left at index 5 so
their diagnostic text continues to accurately describe what is accepted.

Tests using the old wording are updated to match.

Fixes #189147

Assisted by copilot

---------

Co-authored-by: Copilot <223556219+Copilot at users.noreply.github.com>
DeltaFile
+160-160clang/test/Sema/builtins-elementwise-math.c
+10-10clang/test/Sema/riscv-rvv-vector-trig-ops.c
+10-10clang/test/SemaHLSL/BuiltIns/lerp-errors.hlsl
+10-10clang/test/Sema/aarch64-sve-vector-trig-ops.c
+8-8clang/test/SemaHLSL/BuiltIns/f16tof32-errors.hlsl
+6-6clang/lib/Sema/SemaSPIRV.cpp
+204-20433 files not shown
+286-28639 files

FreeBSD/ports 78a4bdfcad/librepcb Makefile

cad/librepcb: Make opencascade dependency optional

Add option OPENCASCADE.

PR:             276976
Requested by:   ice at extreme.hu
DeltaFile
+8-2cad/librepcb/Makefile
+8-21 files

LLVM/project 03fc6d1llvm/docs TestingGuide.md

[llvm][docs] Update TestingGuide with LLVM PR merge advice (#207754)

Add guidance on waiting for LLVM PR merges before test-suite merges to
prevent failures.

Co-authored-by: John Otken john.otken at hpe.com
DeltaFile
+5-0llvm/docs/TestingGuide.md
+5-01 files

LLVM/project abe757bllvm/lib/Transforms/Utils SimplifyCFG.cpp, llvm/test/Transforms/SimplifyCFG switch-simplify-default.ll

[SimplifyCFG] Simplify switch default branch when branch proves operand value (#206597)

If the default branch of a switch proves that there is only one value
that can be sent to the default branch, we can transform the default
branch into an explicit case of the switch. This can assist in further
simplification of the CFG during the simplification loop.

For example, we should be able to create an explicit case for the
default block in cases like the following:

```llvm-ir
switch_bb:
    switch i8 %x, label %default_bb [...]

default_bb:
    %cmp = icmp eq i8 %x, 1
    call void llvm.assume(i1 %cmp) ; Implies %x must be 1
```

Related to #50665.
DeltaFile
+297-0llvm/test/Transforms/SimplifyCFG/switch-simplify-default.ll
+41-0llvm/lib/Transforms/Utils/SimplifyCFG.cpp
+338-02 files

LLVM/project c6e1846llvm/lib/CodeGen BranchRelaxation.cpp, llvm/test/CodeGen/AArch64 branch-relax-tbz.mir branch-relax-cross-section.mir

[AArch64][CodeGen] Fix trampoline basic block offset (#202716)

Trampoline basic blocks are initially created with an offset of zero. As
a result, `isBlockInRange()` may operate on incorrect block offset,
potentially causing unnecessary conditional branch inversions or the
insertion of redundant trampolines.
DeltaFile
+80-0llvm/test/CodeGen/AArch64/branch-relax-tbz.mir
+12-11llvm/lib/CodeGen/BranchRelaxation.cpp
+1-2llvm/test/CodeGen/AArch64/branch-relax-cross-section.mir
+93-133 files

Illumos/gate 3e04a86usr/src/cmd/hal/hald/solaris svc-hal, usr/src/cmd/ldmad ldoms-agents

15320 Add support for SMF_EXIT_TEMP_DISABLE
Reviewed by: C Fraire <cfraire at me.com>
Reviewed by: Bill Sommerfeld <sommerfeld at hamachi.org>
Reviewed by: Jason King <jason.brian.king+illumos at gmail.com>
Approved by: Dan McDonald <danmcd at edgecast.io>
DeltaFile
+487-550usr/src/man/man7/smf_method.7
+72-4usr/src/cmd/svc/startd/method.c
+44-1usr/src/cmd/svc/shell/smf_include.sh
+8-11usr/src/cmd/hal/hald/solaris/svc-hal
+6-10usr/src/cmd/rmvolmgr/svc-rmvolmgr
+5-8usr/src/cmd/ldmad/ldoms-agents
+622-5845 files not shown
+635-59811 files

FreeBSD/src c185935lib/libc/gen exterr_cat_filenames.h, sys/dev/hwpmc hwpmc_mod.c

hwpmc: Add EXTERROR diagnostics to the hwpmc syscall path

Annotate validation failures in the PMC syscall handlers (allocate,
attach, read/write) with EXTERROR(), so pmc(3) callers see which
precondition failed, not a bare errno.

Register HWPMC_MOD in exterr_cat.h and the generated filenames.h.

Signed-off-by:  Andre Silva <andasilv at amd.com>
Reviewed by:    Ali Mashtizadeh <ali at mashtizadeh.com>, mhorne
Sponsored by:   AMD
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2180
DeltaFile
+79-31sys/dev/hwpmc/hwpmc_mod.c
+1-0lib/libc/gen/exterr_cat_filenames.h
+1-0sys/sys/exterr_cat.h
+81-313 files

FreeBSD/src 8c4d570lib/libc/gen exterr_cat_filenames.h, sys/dev/hwpmc hwpmc_ibs.c hwpmc_amd.c

hwpmc: Add EXTERROR diagnostics to the AMD and IBS allocators

Replace bare EINVAL in AMD/IBS allocation and config-validation with
EXTERROR(), so a failed pmc(3) allocation names the check and value.

Register HWPMC_AMD in exterr_cat.h and the generated filenames.h.

Signed-off-by:  Andre Silva <andasilv at amd.com>
Reviewed by:    Ali Mashtizadeh <ali at mashtizadeh.com>, mhorne
Sponsored by:   AMD
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2180
DeltaFile
+28-17sys/dev/hwpmc/hwpmc_ibs.c
+17-7sys/dev/hwpmc/hwpmc_amd.c
+1-1sys/sys/exterr_cat.h
+1-0lib/libc/gen/exterr_cat_filenames.h
+47-254 files

LLVM/project fb21497llvm/test/CodeGen/PowerPC ppcf128-constrained-fp-intrinsics.ll, llvm/test/Transforms/EarlyCSE replace-calls-def-attrs.ll

Revert "[IR] Make semantics of strictfp consistent (#209465)"

This reverts commit af0c933eda31b6beb436026a22121ec637f3cb53.
DeltaFile
+32-35llvm/test/Transforms/EarlyCSE/replace-calls-def-attrs.ll
+25-25mlir/test/Target/LLVMIR/llvmir-intrinsics.mlir
+18-22llvm/test/Transforms/InstCombine/erf.ll
+14-16llvm/test/Transforms/SimplifyCFG/X86/merge-compatible-invokes-of-landingpad.ll
+0-24llvm/unittests/IR/VerifierTest.cpp
+14-2llvm/test/CodeGen/PowerPC/ppcf128-constrained-fp-intrinsics.ll
+103-12417 files not shown
+136-16923 files

NetBSD/pkgsrc Y5Wdiqldoc CHANGES-2026

   doc: Updated sysutils/xfce4-thunar to 4.20.9
VersionDeltaFile
1.4653+2-1doc/CHANGES-2026
+2-11 files

FreeBSD/ports f39a1cecad/verilator Makefile

cad/verilator: Fix run-time error when verilated program couldn't find lz4

/usr/local/share/verilator/include/verilated.mk is patched with relevant
values.

PR:             296673
Reported by:    Joel Bodenmann <jbo at FreeBSD.org>

(cherry picked from commit d9a357804e97a3ab009c2f865530226c44eb5ea7)
DeltaFile
+4-1cad/verilator/Makefile
+4-11 files

NetBSD/pkgsrc WH54OS6sysutils/xfce4-thunar distinfo Makefile

   xfce4-thunar: update to 4.20.9

   4.20.9 (2026-07-17)
   ======
   - Prevent use-after-free in list-view (#1861)
   - Fix use-after-free in tree-view-model (#1860)
   - Fix -Wdiscarded-qualifiers compiler warnings (#1859)
   - Remove G_GNUC_CONST qualifiers
   - Check/Update view-type on reload (#1799)
   - Prevent Criticals in some use-cases (#1799)
   - Prevent crash on reload when unmounted (#1799)
   - Fix crash when open unknown gvfs location (#1834)
   - Prevent use-after-free on re-login (#1831)
   - Keep a global ref. to job operation history (#1823)
   - Disconnect from 'action_mgr' on finalize (#1816)
   - Translation Updates:
     French, Georgian, Greek, Italian, Lao, Slovenian, Swedish
VersionDeltaFile
1.49+4-4sysutils/xfce4-thunar/distinfo
1.118+2-3sysutils/xfce4-thunar/Makefile
1.26+2-1sysutils/xfce4-thunar/PLIST
+8-83 files

FreeBSD/src 6eaa8edlib/libfetch common.c http.c

libfetch: Reduce copying

Reduce the amount of copying we do when performing buffered reads.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D58113

(cherry picked from commit 60382b4a04fa39e9bf65b964b1b7b4bed6eaa56a)
DeltaFile
+29-16lib/libfetch/common.c
+18-23lib/libfetch/http.c
+12-11lib/libfetch/ftp.c
+2-0lib/libfetch/common.h
+61-504 files

FreeBSD/src 2902f7alib/libfetch common.h common.c

libfetch: Make fetch_ref an inline

Make fetch_ref() an inline and provide a fetch_deref().

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57944

(cherry picked from commit d4e0e1fbc237f0765b9f32b291c087348031c921)
DeltaFile
+12-1lib/libfetch/common.h
+0-11lib/libfetch/common.c
+1-1lib/libfetch/ftp.c
+13-133 files

FreeBSD/src 29564d9usr.bin/fetch fetch.c fetch.1

fetch: Stop setting an alarm

Now that fetchTimeout works reliably, setting an alarm is not only no
longer necessary but counterproductive, as it will trigger even if the
connection is not actually stalled but merely slow.

While here, improve the wording of the manual page's description of the
various options for setting a timeout.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57911

(cherry picked from commit 3dddfe29248c47d1a80dc96a76a308ae910b2a24)
DeltaFile
+9-24usr.bin/fetch/fetch.c
+6-4usr.bin/fetch/fetch.1
+15-282 files

FreeBSD/src c83d4edlib/libfetch fetch.3

libfetch: Document fetchTimeout

Document the global fetchTimeout variable, now that it works reliably.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57910

(cherry picked from commit 27b411734c75a7a5abe641d7fbb99dfc622e9aba)
DeltaFile
+16-2lib/libfetch/fetch.3
+16-21 files

FreeBSD/src 02e82d4lib/libfetch common.c http.c

libfetch: Add read buffering

Previously, we would read FTP control connection messages and HTTP
reponse headers one character at a time.  Now, we read as much as will
fit in our buffer and look for a newline.  If there is data left over,
it will be reused by the next fetch_getln() call.  This also requires
the addition of a fetch_bufread() which takes the buffer into account,
otherwise the start of the HTTP response body will be stuck in the
buffer after we read the last line of the header.

This should noticeably improve HTTP performance, especially for small
transfers.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57907

(cherry picked from commit a1978277379cf65f1339ab062f335c6f1fa6239f)
DeltaFile
+87-22lib/libfetch/common.c
+24-41lib/libfetch/http.c
+4-7lib/libfetch/ftp.c
+3-1lib/libfetch/common.h
+118-714 files

FreeBSD/src 74a9217lib/libfetch common.c

libfetch: Apply timeout to connection attempts

Mark the socket non-blocking before connecting and poll for completion,
applying fetchTimeout if set.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57909

(cherry picked from commit 848f360c8f9ae8d1d97c61f5d63fc624926d5dcd)
DeltaFile
+42-7lib/libfetch/common.c
+42-71 files

FreeBSD/src edf0ba5lib/libfetch common.c common.h

libfetch: Overhaul socket read / write

* Make fetch_ssl_read() and fetch_ssl_write() behave more like read(2)
  and write(2), and drop fetch_socket_read() in favor of read(2).

* Don't request POLLERR, it's implied.

* Don't needlessly set errno, it's relatively costly.

* Always check for EAGAIN from writev(2), otherwise we will abort on a
  short write instead of proceeding to poll(2).

* Always check for EAGAIN from poll(2) even though it can't happen on
  FreeBSD; POSIX says it can, and it might in the future.

* Rewrite fetch_read() and fetch_writev() to be more similar to each
  other.  The main difference is that a partial read is treated as
  success while a partial write is treated as failure.


    [6 lines not shown]
DeltaFile
+131-87lib/libfetch/common.c
+2-2lib/libfetch/common.h
+133-892 files

FreeBSD/ports 015f5camath/elpa pkg-plist distinfo

math/elpa: update 2026.02.001 → 2026.02.002
DeltaFile
+15-15math/elpa/pkg-plist
+3-3math/elpa/distinfo
+1-2math/elpa/Makefile
+19-203 files

FreeBSD/ports d9a3578cad/verilator Makefile

cad/verilator: Fix run-time error when verilated program couldn't find lz4

/usr/local/share/verilator/include/verilated.mk is patched with relevant
values.

PR:             296673
Reported by:    Joel Bodenmann <jbo at FreeBSD.org>
DeltaFile
+4-1cad/verilator/Makefile
+4-11 files

FreeBSD/src 520105clib/libfetch common.c http.c

libfetch: Reduce copying

Reduce the amount of copying we do when performing buffered reads.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D58113

(cherry picked from commit 60382b4a04fa39e9bf65b964b1b7b4bed6eaa56a)
DeltaFile
+29-16lib/libfetch/common.c
+18-23lib/libfetch/http.c
+12-11lib/libfetch/ftp.c
+2-0lib/libfetch/common.h
+61-504 files

FreeBSD/src 0786814lib/libfetch common.h common.c

libfetch: Make fetch_ref an inline

Make fetch_ref() an inline and provide a fetch_deref().

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57944

(cherry picked from commit d4e0e1fbc237f0765b9f32b291c087348031c921)
DeltaFile
+12-1lib/libfetch/common.h
+0-11lib/libfetch/common.c
+1-1lib/libfetch/ftp.c
+13-133 files

FreeBSD/src 98bfed5usr.bin/fetch fetch.c fetch.1

fetch: Stop setting an alarm

Now that fetchTimeout works reliably, setting an alarm is not only no
longer necessary but counterproductive, as it will trigger even if the
connection is not actually stalled but merely slow.

While here, improve the wording of the manual page's description of the
various options for setting a timeout.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57911

(cherry picked from commit 3dddfe29248c47d1a80dc96a76a308ae910b2a24)
DeltaFile
+9-24usr.bin/fetch/fetch.c
+6-4usr.bin/fetch/fetch.1
+15-282 files

FreeBSD/src a69d286lib/libfetch fetch.3

libfetch: Document fetchTimeout

Document the global fetchTimeout variable, now that it works reliably.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57910

(cherry picked from commit 27b411734c75a7a5abe641d7fbb99dfc622e9aba)
DeltaFile
+16-2lib/libfetch/fetch.3
+16-21 files

FreeBSD/src ad7a144lib/libfetch common.c

libfetch: Apply timeout to connection attempts

Mark the socket non-blocking before connecting and poll for completion,
applying fetchTimeout if set.

MFC after:      1 week
Reviewed by:    op
Differential Revision:  https://reviews.freebsd.org/D57909

(cherry picked from commit 848f360c8f9ae8d1d97c61f5d63fc624926d5dcd)
DeltaFile
+42-7lib/libfetch/common.c
+42-71 files

FreeBSD/src b56f3ealib/libfetch common.c common.h

libfetch: Overhaul socket read / write

* Make fetch_ssl_read() and fetch_ssl_write() behave more like read(2)
  and write(2), and drop fetch_socket_read() in favor of read(2).

* Don't request POLLERR, it's implied.

* Don't needlessly set errno, it's relatively costly.

* Always check for EAGAIN from writev(2), otherwise we will abort on a
  short write instead of proceeding to poll(2).

* Always check for EAGAIN from poll(2) even though it can't happen on
  FreeBSD; POSIX says it can, and it might in the future.

* Rewrite fetch_read() and fetch_writev() to be more similar to each
  other.  The main difference is that a partial read is treated as
  success while a partial write is treated as failure.


    [6 lines not shown]
DeltaFile
+131-87lib/libfetch/common.c
+2-2lib/libfetch/common.h
+133-892 files