LLVM/project a5de0ad — orc-rt/include/orc-rt/support LockedAccess.h

[orc-rt] Default LockedAccess's LockT arg to std::scoped_lock (#230881)

In the common case where LockT = std::scoped_lock<std::mutex> is the
desired lock (and mutex) type, this allows us to write:

  LockedAccess<T> getValue() { return { Value, Mutex }; }

without having to spell out the type for LockT.
DeltaFile
+1-1orc-rt/include/orc-rt/support/LockedAccess.h
+1-11 files

FreeBSD/src b1023de — sys/fs/nfsserver nfs_nfsdstate.c

nfs_nfsdstate.c: Add an extra safety belt check for the backchannel

I do not think that xp_p2 can be NULL at this point,
but add an extra safety belt, just in case.

(cherry picked from commit a52c50b4b7c2652954ef1bd34710a4b1fc8ef391)
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdstate.c
+2-11 files

FreeBSD/src 07c057b — sys/rpc clnt_vc.c

clnt_vc.c: Fix handling of broken TCP connections

After more than, I don't know, maybe 10k operations: mount, copy,
remove, verify and unmount cycles, one cp command hung in
close() / ncl_flush and never recovered. The machine and the mount
continued to work normally through a new connection, but the writes
using the old connection stayed frozen.

I did not understand exactly what happened.  I traced what appears to
be the issue in the code. My current understanding is that
clnt_vc_soupcall() saw the EOF and woke the caller waiting for RPC
replies, but one caller remained blocked in sosend().
That thread continued holding a reference to the old client, preventing
it from being completely cleaned up.

The attached patch calls socantsendmore() when EOF is received, which
should wake the blocked sender and let the normal reconnect code replace
the connection.

(cherry picked from commit 49bec8c3dc58cf8e944f9bbbbea07e7e856ad897)
DeltaFile
+7-5sys/rpc/clnt_vc.c
+7-51 files

LLVM/project d283ad8 — llvm/lib/Target/NVPTX NVPTXISelLowering.cpp, llvm/test/CodeGen/NVPTX i1-load-chain.ll

[NVPTX] Preserve the load chain when custom-lowering i1 loads (#230497)

lowerLOADi1() rewrites an i1 load into a zext load to i16 plus a
truncate, and returns the (value, chain) pair as a MERGE_VALUES node.

LegalizeLoadOps installs that pair with

  RChain = Res.getValue(1);
  DAG.ReplaceAllUsesOfValueWith(SDValue(Node, 1), RChain);

so the second value of the MERGE_VALUES becomes the replacement for the
original load's chain result. Returning LD->getChain() therefore rewires
every memory operation that followed the original load to that load's
predecessor, and leaves the new zext load's chain result with no users.
The ordering edge between the new load and those memory operations is
dropped, so nothing in the DAG keeps them in order beyond whatever data
dependency happens to exist between them.

Return newLD.getValue(1) instead, so the edge is preserved.
DeltaFile
+20-0llvm/test/CodeGen/NVPTX/i1-load-chain.ll
+1-1llvm/lib/Target/NVPTX/NVPTXISelLowering.cpp
+21-12 files

FreeBSD/src 4d015c4 — sys/rpc clnt_vc.c

clnt_vc.c: Fix handling of backchannel xprt

When clnt_vc_destroy() is called, it might not be the
current connection.  Without this patch, if it is not
the current connection, xp_p2 is set NULL and xprt is released
when it should not be released.

This patch adds a check for "current connection" to fix
the problem.  Found during testing to the client RDMA code,
but could happen for TCP as well.

(cherry picked from commit 81a6514689cefdaa5c92b5539ae885ec8c6b3336)
DeltaFile
+8-2sys/rpc/clnt_vc.c
+8-21 files

FreeBSD/src 63e5c83 — sys/fs/nfsserver nfs_nfsdstate.c

nfs_nfsdstate.c: Add an extra safety belt check for the backchannel

I do not think that xp_p2 can be NULL at this point,
but add an extra safety belt, just in case.

(cherry picked from commit a52c50b4b7c2652954ef1bd34710a4b1fc8ef391)
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdstate.c
+2-11 files

FreeBSD/src 69dc3d9 — sys/rpc clnt_vc.c

clnt_vc.c: Fix handling of broken TCP connections

After more than, I don't know, maybe 10k operations: mount, copy,
remove, verify and unmount cycles, one cp command hung in
close() / ncl_flush and never recovered. The machine and the mount
continued to work normally through a new connection, but the writes
using the old connection stayed frozen.

I did not understand exactly what happened.  I traced what appears to
be the issue in the code. My current understanding is that
clnt_vc_soupcall() saw the EOF and woke the caller waiting for RPC
replies, but one caller remained blocked in sosend().
That thread continued holding a reference to the old client, preventing
it from being completely cleaned up.

The attached patch calls socantsendmore() when EOF is received, which
should wake the blocked sender and let the normal reconnect code replace
the connection.

(cherry picked from commit 49bec8c3dc58cf8e944f9bbbbea07e7e856ad897)
DeltaFile
+7-5sys/rpc/clnt_vc.c
+7-51 files

FreeBSD/src 28eefc7 — sys/rpc clnt_vc.c

clnt_vc.c: Fix handling of backchannel xprt

When clnt_vc_destroy() is called, it might not be the
current connection.  Without this patch, if it is not
the current connection, xp_p2 is set NULL and xprt is released
when it should not be released.

This patch adds a check for "current connection" to fix
the problem.  Found during testing to the client RDMA code,
but could happen for TCP as well.

(cherry picked from commit 81a6514689cefdaa5c92b5539ae885ec8c6b3336)
DeltaFile
+8-2sys/rpc/clnt_vc.c
+8-21 files

NetBSD/pkgsrc cXWQA2F — net/scapy distinfo Makefile, net/scapy/patches patch-scapy_arch_bpf_pfroute.py patch-scapy_arch_bpf_pfroute.py

   Pullup ticket #7267 - requested by rin
   net/scapy: Bug fix

   Revisions pulled up:
   - net/scapy/Makefile                                            1.58
   - net/scapy/distinfo                                            1.26
   - net/scapy/patches/patch-scapy_arch_bpf_pfroute.py             1.1

   ---
      Module Name:      pkgsrc
      Committed By:     rin
      Date:             Tue Oct  6 00:04:28 UTC 2026

      Modified Files:
        pkgsrc/net/scapy: Makefile distinfo
      Added Files:
        pkgsrc/net/scapy/patches: patch-scapy_arch_bpf_pfroute.py

      Log Message:

    [4 lines not shown]
VersionDeltaFile
1.1.2.1+0-17net/scapy/patches/patch-scapy_arch_bpf_pfroute.py
1.1.2.2+17-0net/scapy/patches/patch-scapy_arch_bpf_pfroute.py
1.25.6.1+2-1net/scapy/distinfo
1.57.6.1+2-1net/scapy/Makefile
+21-194 files

NetBSD/pkgsrc-wip a7821a8 — pnpm cargo-depends.mk distinfo

pnpm: update to 12.12.0

Pkgsrc changes:

* Relocate only node-semver crate.
* Download enhanced-resolve, graceful-fs and tapable from NPM repository.
  Note that pnpm uses patched version of graceful-fs, which is not used for
  now as it complicates the build steps too much.
* Use esbuild to bundle cas-loader.mjs.inc.

Upstream changes are omitted.
DeltaFile
+41-10pnpm/Makefile
+15-6pnpm/distinfo
+1-1pnpm/cargo-depends.mk
+57-173 files

LLVM/project 6d00313 — llvm/lib/CodeGen/SelectionDAG TargetLowering.cpp

perf(SelectionDAG): reduce KnownBits temporaries

Let SimplifyDemandedBits initialize the fold-check result. Build the
RHS demand in one APInt instead of copying both KnownBits masks.
DeltaFile
+10-6llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp
+10-61 files

NetBSD/pkgsrc YterDo8 — www/palemoon Makefile.common distinfo

   Pullup ticket #7269 - requested by nia
   www/palemoon: Security fix

   Revisions pulled up:
   - www/palemoon/Makefile                                         1.56
   - www/palemoon/Makefile.common                                  1.12
   - www/palemoon/distinfo                                         1.49

   ---
      Module Name:      pkgsrc
      Committed By:     nia
      Date:             Wed Oct  7 15:52:19 UTC 2026

      Modified Files:
        pkgsrc/www/palemoon: Makefile Makefile.common distinfo

      Log Message:
      palemoon: Update to 35.0.2. New minor release.


    [18 lines not shown]
VersionDeltaFile
1.47.2.2+10-10www/palemoon/distinfo
1.10.2.2+3-3www/palemoon/Makefile.common
+13-132 files

LLVM/project 92ef8fe — clang/test/Interpreter pretty-print.cpp value-print-temporaries.cpp

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+0-3clang/test/Interpreter/value-print-temporaries.cpp
+0-3clang/test/Interpreter/inline-virtual.cpp
+0-3clang/test/Interpreter/global-dtor.cpp
+0-3clang/test/Interpreter/const.cpp
+0-2clang/test/Interpreter/pretty-print.cpp
+0-145 files

FreeBSD/ports e123382 — x11/quickshell Makefile distinfo, x11/quickshell/files patch-src_wayland_hyprland_ipc_connection.cpp

x11/quickshell: Update to 0.3.2

Changelog: https://git.outfoxxed.me/quickshell/quickshell/src/tag/v0.3.2/changelog/v0.3.2.md

Reported by:    GitHub (watch releases)
DeltaFile
+3-3x11/quickshell/distinfo
+2-3x11/quickshell/Makefile
+2-2x11/quickshell/files/patch-src_wayland_hyprland_ipc_connection.cpp
+7-83 files

LLVM/project cbdad67 — llvm/lib/Target/AMDGPU SIInstrInfo.h GCNCreateVOPD.cpp, llvm/test/CodeGen/AMDGPU llvm.amdgcn.fdot2.f32.bf16.ll llvm.amdgcn.fdot2.ll

[AMDGPU] Form VOPD dot2 pairs with a literal in src1 (#230183)

This PR restores VOPD pair formation after the legality checks
relaxation introduced by #229906. Before the legality check relaxation,
MachineCSE was commuting immediate operands from src1 to src0, and then
failing to commute them back, which inadvertently results in the
immediate operands in src0, and the VOPD pairing would succeed. After
the legality relaxation, MachineCSE is now able to successfully commute
the immediates back from src0 to src1, which breaks VOPD pairing since
the pass expected the immediates to be in src0 position. This change
adds a check in GCNVOPDUtils.cpp which checks if a commute is necessary
to allow the VOPD pairing, and then records that finding so that
GCNCreateVOPD applies the commute before creating the VOPD pair.

Co-authored by: Claude Code

---------

Co-authored-by: Claude <noreply at anthropic.com>
DeltaFile
+149-0llvm/test/CodeGen/AMDGPU/vopd-dot2-commute-imm-src1.mir
+58-19llvm/lib/Target/AMDGPU/GCNVOPDUtils.cpp
+12-35llvm/test/CodeGen/AMDGPU/llvm.amdgcn.fdot2.ll
+3-6llvm/test/CodeGen/AMDGPU/llvm.amdgcn.fdot2.f32.bf16.ll
+9-0llvm/lib/Target/AMDGPU/GCNCreateVOPD.cpp
+2-2llvm/lib/Target/AMDGPU/SIInstrInfo.h
+233-621 files not shown
+236-627 files

LLVM/project 024cc93 — llvm/test/CodeGen/AMDGPU amdgcn.bitcast.896bit.ll amdgcn.bitcast.960bit.ll

[AMDGPU] Allow commuting immediates out of src0 when legal (#229906)

Fixes issue introduced by #181918 on gfx10+ where an immediate can get
commuted from src0 to src1 but then fail to get commuted back to src0
due to the legality checks in `isLegalToSwap`.

This PR relaxes the checks in `isLegalToSwap`, since gfx10+ allows the
immediate to be in locations other than src0. Relaxing these checks
causes MachineCSE to also successfully commute immediate operands out of
src0, which is the reason behind all the lit tests that required
modification. The PR also adds 2 new tests.

Co-authored by: Claude Code

Fixes: LCOMPILER-2920

---------

Co-authored-by: Claude <noreply at anthropic.com>
DeltaFile
+2,824-2,824llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.1024bit.ll
+1,412-1,412llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.512bit.ll
+706-706llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.256bit.ll
+496-496llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.320bit.ll
+480-480llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.960bit.ll
+448-448llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.896bit.ll
+6,366-6,366207 files not shown
+13,892-13,589213 files

LLVM/project 0cbb7c7 — orc-rt/include/orc-rt/support/sps SPSSymbolLookupSet.h, orc-rt/lib/bedrock/sps NativeDylibManagerSPSCI.cpp

[orc-rt] Add SPSSymbolLookupResult typedef, clean up users. (#230877)

Existing serializers of SymbolLookupResult were spelling out the SPS
type in full (SPSSequence<SPSOptional<SPSExecutorAddr>>). Define an
SPSSymbolLookupResult typedef and use in instead so that serialization
points can pick up any future changes automatically.

This is the result-side counterpart to 8ff4f386cfeb, which added a
typedef for SymbolLookupSet.
DeltaFile
+2-3orc-rt/test/unit/support/sps/SPSSymbolLookupSetTest.cpp
+2-3orc-rt/lib/bedrock/sps/NativeDylibManagerSPSCI.cpp
+2-0orc-rt/include/orc-rt/support/sps/SPSSymbolLookupSet.h
+6-63 files

FreeBSD/ports d0dcfed — x11 Makefile, x11/bhotkeys-screenshot pkg-descr distinfo

x11/bhotkeys-screenshot: New port

Screenshot hotkeys for bhotkeys.

Reviewed by:    fuz, jrm
Differential Revision:  https://reviews.freebsd.org/D60587
DeltaFile
+23-0x11/bhotkeys-screenshot/Makefile
+9-0x11/bhotkeys-screenshot/pkg-plist
+3-0x11/bhotkeys-screenshot/pkg-descr
+3-0x11/bhotkeys-screenshot/distinfo
+1-0x11/Makefile
+39-05 files

FreeBSD/ports 399e849 — mail/mutt Makefile distinfo

mail/mutt: Update 2.4.2 => 2.4.3

Changelog:
https://gitlab.com/muttmua/mutt/-/blob/mutt-2-4-3-rel/ChangeLog

Release Notes:
https://marc.info/?l=mutt-users&m=179154210212456&w=2

PR:             299267
Security:       CVE-2026-107570
Sponsored by:   UNIS Labs (vvd, commit patch)
MFH:            2026Q4

(cherry picked from commit 9df2e29aa86546b84fab62487e75b930633bc68d)
DeltaFile
+3-3mail/mutt/distinfo
+2-2mail/mutt/Makefile
+5-52 files

FreeBSD/ports 39cc573 — graphics/urho3d Makefile

graphics/urho3d: Deprecate

The build system needs updating to support recent versions of CMake, but
upstream project has been archived a few years ago.

PR:             299256
Reported by:    arrowd
DeltaFile
+2-0graphics/urho3d/Makefile
+2-01 files

LLVM/project 611eee0 — llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/lib/Transforms/Vectorize/SLPVectorizer SLPUtils.cpp SLPMemoryUtils.h

[SLP]Vectorize consecutive loads with undef lanes as a wide load

Model the lane with the absorbing constant (0 for mul/and, -1 for or) of
a copyable node as op(V, undef), so the operand column of the other
lanes gets an undef lane. Cover such undef lanes in a column of
consecutive loads with a single frozen vector load, if the whole range
is dereferenceable.

Fixes #46897

Assisted-by: Cursor

Reviewers: RKSimon

Pull Request: https://github.com/llvm/llvm-project/pull/228872
DeltaFile
+124-16llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+50-86llvm/test/Transforms/SLPVectorizer/X86/absorbing-copyable-lane.ll
+40-63llvm/test/Transforms/SLPVectorizer/X86/wide-load-absorbed-lane.ll
+54-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPMemoryUtils.cpp
+16-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPMemoryUtils.h
+15-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPUtils.cpp
+299-1652 files not shown
+310-1708 files

FreeBSD/ports 9df2e29 — mail/mutt Makefile distinfo

mail/mutt: Update 2.4.2 => 2.4.3

Changelog:
https://gitlab.com/muttmua/mutt/-/blob/mutt-2-4-3-rel/ChangeLog

PR:             299267
Security:       CVE-2026-107570
Sponsored by:   UNIS Labs (vvd, commit patch)
MFH:            2026Q4
DeltaFile
+3-3mail/mutt/distinfo
+2-2mail/mutt/Makefile
+5-52 files

LLVM/project 9048ff1 — llvm/lib/CodeGen/SelectionDAG TargetLowering.cpp

fix(SelectionDAG): validate identity fold demands

KnownBits returned for the LHS may only be valid for the demand
already reduced by the RHS. Check the full result demand before
folding AND/OR to the LHS.

Share the masked-bit check between both operations. Drop Disjoint
when the query rewrites an OR operand.
DeltaFile
+59-33llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp
+59-331 files

LLVM/project 8ff4f38 — orc-rt/include/orc-rt/support/sps SPSSymbolLookupSet.h, orc-rt/lib/bedrock/sps NativeDylibManagerSPSCI.cpp

[orc-rt] Add SPSSymbolLookupSet typedef, clean up users. (#230876)

Existing deserializers of SymbolLookupSet were spelling out the SPS type
in full (SPSSequence<SPSTuple<SPSString, bool>>). Define an
SPSSymbolLookupSet typedef and use in instead so that deserialization
points can pick up any future changes automatically.
DeltaFile
+3-3orc-rt/lib/bedrock/sps/NativeDylibManagerSPSCI.cpp
+2-3orc-rt/test/unit/support/sps/SPSSymbolLookupSetTest.cpp
+1-2orc-rt/test/unit/bedrock/sps/NativeDylibManagerSPSCITest.cpp
+2-0orc-rt/include/orc-rt/support/sps/SPSSymbolLookupSet.h
+8-84 files

NetBSD/pkgsrc kekxGz2 — mail/mutt Makefile distinfo

   Pullup ticket #7271 - requested by tron
   mail/mutt: Security fix

   Revisions pulled up:
   - mail/mutt/Makefile                                            1.302
   - mail/mutt/distinfo                                            1.130

   ---
      Module Name:      pkgsrc
      Committed By:     tron
      Date:             Fri Oct  9 17:37:08 UTC 2026

      Modified Files:
        pkgsrc/mail/mutt: Makefile distinfo

      Log Message:
      mail/mutt: Update to version 2.4.3

      This release fixes two bugs.  One of them is for CVE-2026-107570, fixing an

    [12 lines not shown]
VersionDeltaFile
1.129.2.1+4-4mail/mutt/distinfo
1.301.2.1+2-2mail/mutt/Makefile
+6-62 files

FreeBSD/src 7fdc748 — sys/amd64/conf MINIMAL GENERIC, sys/powerpc/conf QORIQ64 MPC85XX

amd64, powerpc: Enable tpm(4) in supported kernels

tpm(4) was removed from amd64 GENERIC because it broke suspend and
resume.  The preceding lifecycle, state-save, interrupt, locality, and
teardown fixes address those failures for both TPM 1.2 and TPM 2.0.

Restore the driver to amd64 GENERIC and MINIMAL, where TPM entropy
harvesting remained enabled.  Enable the driver and entropy harvesting
in the MPC85XX and QORIQ64 configurations, which already provide FDT,
spibus, and the platform SPI controller required by FDT-attached TPMs.
Leave the generic AIM and POWER configurations unchanged because they
have no TPM attachment bus.

The TPM 1.2 path completed repeated S3 cycles and command tests on
ThinkPad T430 and T440p systems.  The TPM 2.0 path completed repeated
device and full-system suspend/resume cycles on a ThinkPad P51.  The
PowerPC configuration matrix was checked to retain tpm(4) only where its
FDT SPI attachment path is present.


    [9 lines not shown]
DeltaFile
+1-1sys/amd64/conf/MINIMAL
+1-1sys/amd64/conf/GENERIC
+2-0sys/powerpc/conf/QORIQ64
+2-0sys/powerpc/conf/MPC85XX
+6-24 files

FreeBSD/src 5329e07 — usr.sbin/bhyve tpm_intf_crb.c

bhyve: tpm: allow the last dword of the CRB command buffer

The bounds check rejected any access ending exactly at the end of the
register block, so a four byte write at offset 0xffc was refused,
returning EINVAL and killing the VM.

PR:             291063
Fixes:          75909086a45d ("bhyve: allow read/write to full CRB buffer")
Sponsored by:   Defenso

Signed-off-by: Quentin Thébault <quentin.thebault at defenso.fr>
Reviewed-by: aokblast, kevans, markj
Pull-Request: https://github.com/freebsd/freebsd-src/pull/2362
(cherry picked from commit 4505445ccdb9555efc23262a971a18ca03486969)
DeltaFile
+1-1usr.sbin/bhyve/tpm_intf_crb.c
+1-11 files

FreeBSD/src 99229e5 — usr.sbin/bhyve tpm_intf_crb.c

bhyve: allow read/write to full CRB buffer

For some reason, we've incorrectly calculated the size of the CRB data buffer
register. There's no need to divide the CRB data buffer size by 4. We should
allow access to the whole buffer instead.

Reviewed by:            markj
Sponsored by:           Beckhoff Automation GmbH & Co. KG
Pull Request:           https://github.com/freebsd/freebsd-src/pull/2169

(cherry picked from commit 75909086a45da3c5aeaff8152728111cf798c6bc)
DeltaFile
+1-1usr.sbin/bhyve/tpm_intf_crb.c
+1-11 files

FreeBSD/src bf62832 — sys/dev/tpm tpm_crb.c

tpm: crb: check the error bit only after taking locality

tpmcrb_transmit() read CRB_CTRL_STS before requesting locality 0.
An AMD Pluton fTPM (like FrameWork Desktop) using the plain CRB start method
reads the control area as all-ones until locality is assigned, so bit 0 looks
like a stuck tpmSts and every command failed with EIO.

With RANDOM_ENABLE_TPM the harvester retries every 10 seconds, so this printed
"Device has Error bit set" forever.

Reviewed by:    kbowling
Approved by:    kbowling
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D59661

(cherry picked from commit 7c375af72ef3f631e89431ae32a855d806e6ec98)
DeltaFile
+13-5sys/dev/tpm/tpm_crb.c
+13-51 files

FreeBSD/src a81e324 — sys/dev/tpm tpm_crb.c

tpm: crb: make the Pluton startmethod more resilient

The original implementation assumed that the start/reply doorbells
lived within the device _CRS space, but that isn't always the case.  On
my AMD Ryzen 7640U-based frame.work laptop, device memory runs from
0xc0500000-0xc0500fff while the doorbells are up around 0xc0508000.

Stop sanity checking the addresses and just map them in to work reliably
whether they're within the device range or not.

pluton_wait_reply is cribbed from tpm_wait_for_u32, but rewritten
slightly to read in just one place and to read one last time before
giving up at the end of the timeout, just in case.

Reviewed by:    kbowling
Differential Revision:  https://reviews.freebsd.org/D59327

(cherry picked from commit 6af3031c951614f2a42dfd67ce2c3a48ee8314ae)
DeltaFile
+88-29sys/dev/tpm/tpm_crb.c
+88-291 files