dbus: update to 1.16.4.
dbus 1.16.4 (2026-11-12)
========================
Security support scope:
• Add `SECURITY.md` documenting various security considerations
(dbus!597, dbus!603, dbus!606; Simon McVittie, ooonea)
Denial-of-service fixes:
• Prevent a denial-of-service vulnerability on the system bus:
if a privileged user was running a monitor such as `dbus-monitor --system`
or `busctl monitor --system`, then an unprivileged user could cause the
dbus-daemon to crash by arranging for delivery of a broadcast signal
from the dbus-daemon to be prevented, for example by filling up the
outgoing message queue towards a client that subscribed to it.
This vulnerability could be seen as an incomplete fix for CVE-2023-34969.
[85 lines not shown]
NAS-145201 / 27.0.0 / Keep scst disabled at boot after config upload on HA (by bmeagherix) (#20213)
## Problem
On HA, SCST must not start at boot; middleware starts it from
`vrrp_master` /
`vrrp_backup`. `etc_files/systemd.py` enforced this, but two other paths
could
still leave `scst` enabled at boot:
- **Sync to Peer:** the `config.on_upload` hook re-enabled `scst` on the
STANDBY
just before it rebooted. SCST then started at boot with a stale config,
failed,
and raced middleware's own start, leaving SCST unloaded and
`standby_after_start` retrying forever.
- **Upgrade:** `/data/user-services.json` recorded `scst` as enabled, so
the
installer enabled it in the new boot environment.
[31 lines not shown]
NAS-145201 / 27.1.0 / Keep scst disabled at boot after config upload on HA (by bmeagherix) (#20214)
## Problem
On HA, SCST must not start at boot; middleware starts it from
`vrrp_master` /
`vrrp_backup`. `etc_files/systemd.py` enforced this, but two other paths
could
still leave `scst` enabled at boot:
- **Sync to Peer:** the `config.on_upload` hook re-enabled `scst` on the
STANDBY
just before it rebooted. SCST then started at boot with a stale config,
failed,
and raced middleware's own start, leaving SCST unloaded and
`standby_after_start` retrying forever.
- **Upgrade:** `/data/user-services.json` recorded `scst` as enabled, so
the
installer enabled it in the new boot environment.
[31 lines not shown]
NAS-145201 / 27.1.0 / Keep scst disabled at boot after config upload on HA (#20185)
On HA, SCST must not start at boot; middleware starts it from
vrrp_master / vrrp_backup. etc_files/systemd.py enforced this, but
two other paths could still leave `scst` enabled at boot:
- Sync to Peer: the config.on_upload hook re-enabled scst on the
STANDBY just before it rebooted. SCST then started at boot with a
stale config, failed, and raced middleware's own start, leaving
SCST unloaded and standby_after_start retrying forever.
- Upgrade: /data/user-services.json recorded scst as enabled, so the
installer enabled it in the new boot environment.
LIO mode has the same issue to a lesser degree: scst should never be
enabled at boot there.
- Add systemd_enabled_units() to services, defaulting to all of a
service's units, with an iSCSI override that returns none on HA or
in LIO mode. Unit state set by etc_files/systemd.py, the
[14 lines not shown]
[NFC][Clang][CFI] Pass SourceLocation to EmitVTableTypeCheckedLoad (#241637)
Pass the call-site `SourceLocation` to `EmitVTableTypeCheckedLoad`. It
is
unused for now; #241646 uses it to report failed checked loads with
their
source location.
Assisted-by: Gemini
NAS-145201 / 27.0.0 / Keep scst disabled at boot after config upload on HA (#20185)
On HA, SCST must not start at boot; middleware starts it from
vrrp_master / vrrp_backup. etc_files/systemd.py enforced this, but
two other paths could still leave `scst` enabled at boot:
- Sync to Peer: the config.on_upload hook re-enabled scst on the
STANDBY just before it rebooted. SCST then started at boot with a
stale config, failed, and raced middleware's own start, leaving
SCST unloaded and standby_after_start retrying forever.
- Upgrade: /data/user-services.json recorded scst as enabled, so the
installer enabled it in the new boot environment.
LIO mode has the same issue to a lesser degree: scst should never be
enabled at boot there.
- Add systemd_enabled_units() to services, defaulting to all of a
service's units, with an iSCSI override that returns none on HA or
in LIO mode. Unit state set by etc_files/systemd.py, the
[14 lines not shown]
[CIR] Support ConstantExpr in CIRGenFunction::emitLValue (#237421)
### Description
This patch adds `ConstantExpr` handling to `CIRGenFunction::emitLValue`,
establishing parity with classic Clang CodeGen
(`clang/lib/CodeGen/CGExpr.cpp:1825-1830`) and completing AST visitor
coverage across CIR.
In ClangIR, `ConstantExpr` was already supported in `ScalarExprEmitter`
(`CIRGenExprScalar.cpp:147`) and `AggExprEmitter`
(`CIRGenExprAggregate.cpp:344`), but was stubbed with `errorNYI` in
`CIRGenFunction::emitLValue`:
```cpp
case Expr::ConstantExprClass:
getCIRGenModule().errorNYI(e->getSourceRange(), "emitLValue: ConstantExpr");
return LValue();
```
[5 lines not shown]
[Hexagon] Return HLX vectors in registers (#242014)
With HLX enabled, functions returning an HLX vector or vector pair
returned it indirectly through memory. Mark these returns inreg, as is
done for HVX vectors, so that they are returned in HLX registers.
Assisted by AI
[Cloning] Move undeclared scopes into cloned disjoint domains
When a scope from a disjoint-scope domain is cloned (because its
llvm.experimental.noalias.scope.decl is in the code being duplicated),
the clone is placed into a clone of the domain. Scopes of that domain
without a declaration in the duplicated code, however, were left in the
original domain. InstCombine removes declarations of scopes it considers
unused, so this happens in practice: an !alias.scope list {b, c} where
only c is still declared became {b, c'} when copying for loop unrolling, with c' in
the new domain. ScopedNoAliasAA then only compared {c'} against a
!noalias {c'} list in that domain and concluded NoAlias, while the
original {b, c} list was not noalias with {c}.
Fix this by also cloning, into the cloned domain, any scope of that
domain used by the adapted instructions. Renaming a whole disjoint
domain consistently within the duplicated code preserves the relations
inside it. I don't expect the theoretical precision loss here to be an
issue in practice.
[7 lines not shown]
[NFC][Transforms] Add tests with undeclared scopes in cloned disjoint domains
Pre-commit tests for fixing #241246. When scopes from a disjoint-scope domain
are cloned into a clone of that domain, scopes of the same domain that
have no llvm.experimental.noalias.scope.decl in the cloned region
currently stay in the original domain. An !alias.scope list that uses
both kinds of scope is then split across the two domains, which leads
ScopedNoAliasAA to report a false NoAlias.
AI disclosure: Claude wrote these (and `llvm-reduce`d them), and
mostly wrote this commit message (I tinkered with it a bit)
Co-Authored-By: Claude Opus 5.5 <noreply at anthropic.com>
gre(4): Add full support for gre key
Allow multiple gre tunnels between the same source and destination
addresses, distinguished by their incoming gre key.
Add greikey and greokey to ifconfig(8) to set the incoming and
outgoing keys separately and grekey now sets both.
Add a net.link.gre.key_fallback sysctl for backward compatibility
and set it to true by default.
Also write multikey tests for both IPv4 and IPv6 families.
Relnotes: yes
Reviewed by: adrian
Discussed with: zlei
Differential Revision: https://reviews.freebsd.org/D59849
