pkgng/pkgng 06262b7libpkg/repo/binary query.c

rwhich: bound prefix_len in directory dictionary parsing

The front-compressed 'N suffix' lines come from untrusted repository
data; a hostile filesite could set N larger than the previous
directory, making memcpy(dir, prev, N) read out of bounds. Clamp N
to the actual previous directory length in both the exact and the
glob parsers.
DeltaFile
+26-2libpkg/repo/binary/query.c
+26-21 files

pkgng/pkgng ec8864blibpkg fetch_libfetch.c, tests/lib fetch_http.c

fetch: avoid infinite loop when FETCH_RETRY=0

retry was decremented to -1 and neither 'retry > 0' nor a
'retry <= 0' exit was taken, so the failover loop spun forever.
Clamp max_retry to >= 0 and break out of the loop when no retry
budget remains.
DeltaFile
+31-0tests/lib/fetch_http.c
+6-0libpkg/fetch_libfetch.c
+37-02 files

pkgng/pkgng 6253e40libpkg/repo/binary query.c

rwhich: free pairs when glob iterator creation fails
DeltaFile
+6-0libpkg/repo/binary/query.c
+6-01 files

pkgng/pkgng dc1d470libpkg pkg_audit.c

pkg_audit: enforce extract limit on total, not per member

The size limit check compared nread against max_size - extracted where
extracted is accumulated across all archive members, so a malicious
archive with many small members could exceed the limit by the sum of
all members while each individual chunk check passed. Check the
declared entry size against the remaining budget up front.
DeltaFile
+12-0libpkg/pkg_audit.c
+12-01 files

OPNSense/core 4724744src/opnsense/mvc/app/views/layouts default.volt, src/opnsense/www/css opnsense-favorites.css

menu: hide Favorites stars unless title area hovered/tapped (#10718)
DeltaFile
+16-0src/opnsense/www/css/opnsense-favorites.css
+1-1src/opnsense/mvc/app/views/layouts/default.volt
+17-12 files

LLVM/project 274d957clang/lib/CodeGen BackendUtil.cpp, llvm/include/llvm/Analysis RuntimeLibcallInfo.h

CodeGen: Remove TargetOptions::FloatABIType

This is now fully replaced with the "float-abi" module flag.
If the module flag is not present, the default is computed
from the triple. Consumers are updated to read the module flag.

RuntimeLibraryAnalysis now defers analysis until run() on a Module,
instead of during the pass constructor as before. This requires copying
all of the remaining relevant TargetOptions so they are available
when the module is seen.

Unfortunately, ARM still depends on TargetOptions for determining
the float-abi. -target-abi=aapcs16 still changes the default float-abi,
but an explicit module flag wins.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+45-0llvm/test/LTO/ARM/float-abi-module-flag.ll
+19-17llvm/include/llvm/Analysis/RuntimeLibcallInfo.h
+15-20llvm/lib/Target/ARM/ARMTargetMachine.cpp
+28-0llvm/test/Transforms/Util/DeclareRuntimeLibcalls/float-abi-module-flag.ll
+5-18llvm/lib/Analysis/RuntimeLibcallInfo.cpp
+3-14clang/lib/CodeGen/BackendUtil.cpp
+115-6923 files not shown
+175-12829 files

LLVM/project c24ac2fllvm/lib/CodeGen CommandFlags.cpp

Remove opt description change
DeltaFile
+1-3llvm/lib/CodeGen/CommandFlags.cpp
+1-31 files

LLVM/project 3c4a403llvm/lib/CodeGen CommandFlags.cpp, llvm/test/CodeGen/ARM float-abi-module-flag.ll float-abi-synthesize-flag.ll

Error on -float-abi conflicting with the "float-abi" module flag
DeltaFile
+17-5llvm/lib/CodeGen/CommandFlags.cpp
+5-3llvm/test/CodeGen/ARM/float-abi-module-flag.ll
+6-2llvm/test/CodeGen/ARM/float-abi-synthesize-flag.ll
+3-2llvm/test/CodeGen/CSKY/float-abi-module-flag.ll
+31-124 files

LLVM/project 43628cfllvm/lib/CodeGen CommandFlags.cpp, llvm/test/CodeGen/ARM float-abi-synthesize-flag.ll

CodeGen: Synthesize "float-abi" module flag from -float-abi

Avoid annoying test updates when the corresponding TargetOptions
field is removed. Make the -float-abi llc/opt option a lit test
convenience that records the floating-point ABI in the IR,
mirroring how -mcpu/-mattr are recorded as function attributes.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+32-0llvm/test/CodeGen/ARM/float-abi-synthesize-flag.ll
+11-1llvm/lib/CodeGen/CommandFlags.cpp
+43-12 files

LLVM/project 8a34f9dllvm/test/CodeGen/AArch64 complex-deinterleaving-crash.ll vec3-loads-ext-trunc-stores.ll

[DAGCombine][AArch64][X86] Adjust profitability check on and(anyext, c) -> zext(and) transform (#214749)

This existing fold was using a profitability check that did not work for
vector operations. It can be profitable to fold (and (anyext V), c) ->
(zext (and V, c)) if it allows the And to work on a narrower type and
possibly for the zext to be folded into other operations.

The combine is profitable or equal if the zext is the same cost as a
anyext. The old isTruncFree was removed as the value being truncated is
a constant. A basic version of isNarrowingProfitable is added for
AArch64 to allow vector types to fold providing that the result type is
legal and a isAnyExtFree method is added for the anyext cost.
DeltaFile
+49-54llvm/test/CodeGen/AArch64/zext.ll
+48-54llvm/test/CodeGen/AArch64/zext-to-tbl.ll
+24-52llvm/test/CodeGen/AArch64/neon-partial-reduce-dot-product.ll
+20-29llvm/test/CodeGen/AArch64/neon-extadd.ll
+15-29llvm/test/CodeGen/AArch64/vec3-loads-ext-trunc-stores.ll
+11-25llvm/test/CodeGen/AArch64/complex-deinterleaving-crash.ll
+167-24312 files not shown
+225-29118 files

LLVM/project bd45111llvm/lib/Target/AMDGPU AMDGPUSwLowerLDS.cpp

changes as per review feedback
DeltaFile
+33-30llvm/lib/Target/AMDGPU/AMDGPUSwLowerLDS.cpp
+33-301 files

LLVM/project 97f17a7llvm/lib/Target/AMDGPU AMDGPUSwLowerLDS.cpp

[AMDGPU] Lower LDS flat round trips without provenance analysis
DeltaFile
+42-151llvm/lib/Target/AMDGPU/AMDGPUSwLowerLDS.cpp
+42-1511 files

LLVM/project d53ff04llvm/lib/Target/AMDGPU AMDGPUSwLowerLDS.cpp, llvm/test/CodeGen/AMDGPU amdgpu-sw-lower-lds-flat-ptr-arg-asan.ll

update
DeltaFile
+231-94llvm/lib/Target/AMDGPU/AMDGPUSwLowerLDS.cpp
+213-30llvm/test/CodeGen/AMDGPU/amdgpu-sw-lower-lds-flat-ptr-arg-asan.ll
+444-1242 files

LLVM/project b8d2a47llvm/lib/Target/AMDGPU AMDGPUSwLowerLDS.cpp, llvm/test/CodeGen/AMDGPU amdgpu-sw-lower-lds-flat-ptr-arg-asan.ll

[AMDGPU] Fix LDS access via flat pointer argument in amdgpu-sw-lower-lds
DeltaFile
+82-0llvm/lib/Target/AMDGPU/AMDGPUSwLowerLDS.cpp
+73-0llvm/test/CodeGen/AMDGPU/amdgpu-sw-lower-lds-flat-ptr-arg-asan.ll
+155-02 files

HardenedBSD/src 621cb2dcontrib/sqlite3 VERSION sqlite3.h, contrib/sqlite3/autosetup sqlite-config.tcl

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+1,198-445contrib/sqlite3/sqlite3.c
+109-44contrib/sqlite3/shell.c
+21-7contrib/sqlite3/sqlite3.h
+10-8sys/dev/asmc/asmc.c
+6-2contrib/sqlite3/autosetup/sqlite-config.tcl
+1-1contrib/sqlite3/VERSION
+1,345-50710 files not shown
+1,355-51716 files

HardenedBSD/src e88d183contrib/sqlite3 VERSION sqlite3.h, contrib/sqlite3/autosetup sqlite-config.tcl

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1,198-445contrib/sqlite3/sqlite3.c
+109-44contrib/sqlite3/shell.c
+21-7contrib/sqlite3/sqlite3.h
+10-8sys/dev/asmc/asmc.c
+6-2contrib/sqlite3/autosetup/sqlite-config.tcl
+1-1contrib/sqlite3/VERSION
+1,345-50710 files not shown
+1,355-51716 files

HardenedBSD/src b87b5b8share/man/man4 igc.4, sys/dev/igc igc_mac.c igc_hw.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+150-12sys/dev/igc/if_igc.c
+3-3share/man/man4/igc.4
+3-0sys/dev/igc/if_igc.h
+1-0sys/dev/igc/igc_mac.c
+1-0sys/dev/igc/igc_hw.h
+1-0sys/dev/igc/igc_defines.h
+159-151 files not shown
+160-157 files

HardenedBSD/ports 4345db4java/netbeans pkg-plist, multimedia/libvpl pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+131-0multimedia/libvpl/files/patch-libvpl_src_mfx__dispatcher__vpl__msdk.cpp
+113-0multimedia/libvpl/pkg-plist
+73-0multimedia/libvpl/files/patch-libvpl_src_linux_device__ids.h
+56-0www/bozohttpd/files/blacklist-patches/patch-bozohttpd.8
+0-54www/bozohttpd/files/patch-bozohttpd.8
+28-26java/netbeans/pkg-plist
+401-8056 files not shown
+1,000-24562 files

FreeBSD/src 8e968c5sys/netgraph/bluetooth/l2cap ng_l2cap_llpi.c

bluetooth(4): Fix a typo in a kernel message in l2cap

- s/staring/starting/

MFC after:      5 days
DeltaFile
+1-1sys/netgraph/bluetooth/l2cap/ng_l2cap_llpi.c
+1-11 files

HardenedBSD/src 8e968c5sys/netgraph/bluetooth/l2cap ng_l2cap_llpi.c

bluetooth(4): Fix a typo in a kernel message in l2cap

- s/staring/starting/

MFC after:      5 days
DeltaFile
+1-1sys/netgraph/bluetooth/l2cap/ng_l2cap_llpi.c
+1-11 files

FreeBSD/src 251e6efsys/netpfil/ipfw dn_sched_fq_pie.c

ipfw(4): Fix a typo in a source code comment

- s/varaiables/variables/

MFC after:      3 days
DeltaFile
+1-1sys/netpfil/ipfw/dn_sched_fq_pie.c
+1-11 files

HardenedBSD/src 251e6efsys/netpfil/ipfw dn_sched_fq_pie.c

ipfw(4): Fix a typo in a source code comment

- s/varaiables/variables/

MFC after:      3 days
DeltaFile
+1-1sys/netpfil/ipfw/dn_sched_fq_pie.c
+1-11 files

FreeBSD/src 8362aecsys/dev/ichwd i6300esbwd.c

ichwd(4): Fix a typo in a source code comment

- s/modifing/modifying/

MFC after:      3 days
DeltaFile
+1-1sys/dev/ichwd/i6300esbwd.c
+1-11 files

HardenedBSD/src 8362aecsys/dev/ichwd i6300esbwd.c

ichwd(4): Fix a typo in a source code comment

- s/modifing/modifying/

MFC after:      3 days
DeltaFile
+1-1sys/dev/ichwd/i6300esbwd.c
+1-11 files

FreeBSD/src c47b430sys/dev/fxp rcvbundl.h

fxp(4): Fix a typo in a source code comment

- s/modifing/modifying/

MFC after:      3 days
DeltaFile
+1-1sys/dev/fxp/rcvbundl.h
+1-11 files

HardenedBSD/src c47b430sys/dev/fxp rcvbundl.h

fxp(4): Fix a typo in a source code comment

- s/modifing/modifying/

MFC after:      3 days
DeltaFile
+1-1sys/dev/fxp/rcvbundl.h
+1-11 files

HardenedBSD/src 709bd45sys/dev/ppbus ppb_msq.h

ppbus(4): Fix a typo in a source code comment

- s/predifined/predefined/

MFC after:      3 days
DeltaFile
+1-1sys/dev/ppbus/ppb_msq.h
+1-11 files

FreeBSD/src 709bd45sys/dev/ppbus ppb_msq.h

ppbus(4): Fix a typo in a source code comment

- s/predifined/predefined/

MFC after:      3 days
DeltaFile
+1-1sys/dev/ppbus/ppb_msq.h
+1-11 files

HardenedBSD/src 88293bdsys/vm swap_pager.c

swap_pager: Fix a typo in a source code comment

- s/errornous/erroneous/

MFC after:      3 days
DeltaFile
+1-1sys/vm/swap_pager.c
+1-11 files

FreeBSD/src 88293bdsys/vm swap_pager.c

swap_pager: Fix a typo in a source code comment

- s/errornous/erroneous/

MFC after:      3 days
DeltaFile
+1-1sys/vm/swap_pager.c
+1-11 files