ipsec: Fix fencepost error in policy parsing.
If there are no addresses appended, the input buffer length may
rightly match sizeof(*xisr) exactly.
Should fix some of the IPsec tests I just broke!
PR kern/60669: netipsec key_sp2msg buffer overrun
Pull up following revision(s) (requested by tls in ticket #483):
sys/dev/pci/if_ixl.c: revision 1.104
sys/dev/pci/if_ixl.c: revision 1.105
Be a little more conservative with DMA sync for the ATQ, though what was there already was probably OK.
Remove pointless and confusing check against NULL.
net/curl: update to 8.22.0
Includes fixes for
CVE-2026-18924: HTTP/2 server push UAF
CVE-2026-19931: Negotiate ambient user conn reuse
CVE-2026-80230: OpenSSL pinning bypass
CVE-2026-80255: secure cookie attribute bypass with tab
[analyzer] Confidently inline final methods (#224070)
When the analyzer sees a virtual method call, it usually splits two
execution paths: one where the method is inlined, and one where it is
evaluated conservatively (i.e. invalidates stuff and returns a conjured
symbol) to represent the possibility that an overriding method is called
from a more derived class.
This commit disables this logic in the case when the method
corresponding to the (static or known dynamic) type of the object is
`final` (or the type of the object is `final`), because in these cases
we can definitely know that it is the method that is actually called.
Fixes #222960.
Pull up following revision(s) (requested by tls in ticket #481):
sys/dev/pci/if_ixl.c: revision 1.102
sys/dev/pci/if_ixl.c: revision 1.103
Fix link state handling in ixl driver (PR 60736):
1. The admin queue ("ATQ") polling could skip completions if there was
more than one pending command. Force ixl_atq_poll() to go in order
and simplify by looping around the post_locked and done_locked functions.
This makes ixl_atq_poll_done() superfluous, so remove that.
2. Add missing "goto out" in ixl_get_link_status() so we return EBUSY
instead of falling through to cv_timedwait(). This is much
less likely with fix 1 above but worth fixing anyway.
3. Mostly undo 1.92 - don't block waiting on link in ixl_init(), instead,
fire off a link status check and ignore the result. Meanwhile, in
ixl_init_locked(), enable the hardware link status interrupt.
[7 lines not shown]
Pull up following revision(s) (requested by jdc in ticket #480):
sys/dev/i2c/dbcool.c: revision 1.70
sys/dev/i2c/dbcool_var.h: revision 1.19
sys/dev/i2c/dbcool.c: revision 1.69
Also match "i2c-adt7475" (Sun Fire V245).
Add fan speed dividers using properties.
bhyvectl: support querying VM pid
Extend bhyvectl(8) to support querying VM pid using the
`--get-vm-pid` flag.
This is useful in monitor mode when the VM pid differs
from the main bhyve(8) process run by the user. Knowing the VM pid
is necessary, for example, to query process resource usage or
trigger ACPI shutdown with SIGTERM.
Of course, it could be obtained by matching the monitor process
children by the process title, but it's a little more complex
and fragile than it could be.
Implement that by adding the "get_vm_pid" IPC command,
and using it to implement `bhyvectl --get-vm-pid`, which
prints the VM PID.
When the VM PID is not known, ESRCH is returned.
[4 lines not shown]
Pull up following revision(s) (requested by jdc in ticket #479):
share/man/man4/bq4802rtc.4: revision 1.1
sys/arch/sparc64/conf/files.sparc64: revision 1.171
sys/dev/ic/bq4802reg.h: revision 1.3
distrib/sets/lists/man/mi: revision 1.1836
distrib/sets/lists/manhtml/mi: revision 1.54
sys/arch/sparc64/dev/bq4802_ebus.c: revision 1.3
share/man/man4/Makefile: revision 1.753
Add a note about the validity of the battery-valid flag.
Add a sysctl to control the clock oscillator.
Only write to the chip at attach time if the configuration needs changing.
Add a manual page for bq4802rtc(4) (Texas Instruments bq4802Y/bq4802LY).
Add build glue (Makefile and set lists) for bq4802rtc.4 manual page.
[2 lines not shown]
Pull up following revision(s) (requested by jdc in ticket #478):
sys/dev/i2c/adt7462reg.h: revision 1.2
sys/dev/i2c/adt7462reg.h: revision 1.3
sys/dev/i2c/adt7462.c: revision 1.2
sys/dev/i2c/adt7462.c: revision 1.3
Correct the logic for tach/fan measurement.
Add tach pulse entries whilst here.
Use the pin configuration registers to discover monitored fans.
Don't display the fan fault sensor if there are no monitored fans.
Add some GPIO definitions. Tidy up unused definitions.
Add temperature offsets using properties.
Also check the tach. enable register when checking for connected fans.
Remove DTLS unprocessed records queue.
This queue exists to buffer records from the next epoch, which contain
either handshake messages or alerts. This largely means that we are
buffering a Finished message either due to a ChangeCipherSpec message
being dropped or delivered out of order. In the dropped case we have
to rely on the sender retransmitting the flight, which will also
retransmit the Finished message. This can also be used to handle the
out of order case. Both of these messages are small and may even be
included in the same UDP datagram.
Remove the queue since this avoids a bunch of complexity and a
potential DoS vector. BoringSSL did the same a long time ago.
ok kenjiro@ joshua@ beck@
