security/zeek: Update to 8.0.10
https://github.com/zeek/zeek/releases/tag/v8.0.10
This release fixes the following vulnerabilities:
- HIGH: SMB: Chains of AndX messages can crash Zeek
- HIGH: DNP3: Memory exhaustion via file control (g70v1) fields
- HIGH: SIP: Memory exhaustion from long request/response paths
- HIGH: DHCP: Memory exhaustion from retained options after analyzer
violation
- HIGH: SMTP: Memory exhaustion from large numbers of rcptto/to/cc/path
entries
- HIGH: SMB: DCE/RPC memory exhaustion from fragment state
[63 lines not shown]
security/vuxml: Mark security/zeek < 8.0.10 as vulnerable as per:
https://github.com/zeek/zeek/releases/tag/v8.0.10
This release fixes the following vulnerabilities:
- HIGH: SMB: Chains of AndX messages can crash Zeek
- HIGH: DNP3: Memory exhaustion via file control (g70v1) fields
- HIGH: SIP: Memory exhaustion from long request/response paths
- HIGH: DHCP: Memory exhaustion from retained options after analyzer
violation
- HIGH: SMTP: Memory exhaustion from large numbers of rcptto/to/cc/path
entries
- HIGH: SMB: DCE/RPC memory exhaustion from fragment state
[46 lines not shown]
IR: Validate and document the "target-abi" module flag (#217397)
The "target-abi" module flag is already emitted by clang for RISC-V and
consumed by the RISC-V and LoongArch backends, but it was neither
validated by the IR Verifier nor documented in LangRef. Add a Verifier
check that the flag's value operand is a non-empty string.
Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
[ADT] Clean up FoldingSet growth (NFC) (#217424)
This patch cleans up hash table growth in FoldingSetBase:
- Remove GrowHashTable, a private 3-line wrapper around GrowBucketCount,
in favor of calling GrowBucketCount(NumBuckets * 2, Info) directly in
InsertNode.
- Refactor GrowBucketCount to use the RAII copy-and-swap pattern. Rehash
nodes into a temporary FoldingSetBase and move-assign it to *this to
avoid duplicating bucket allocation and deallocation logic.
Assisted-by: Antigravity
Merge tag 'for-linus-fwctl' of git://git.kernel.org/pub/scm/linux/kernel/git/fwctl/fwctl
Pull fwctl updates from Jason Gunthorpe:
- Support more commands in bnxt, this completes what they originally
wanted to do
- Rust bindings for fwctl. The Nova GPU is expected to use them next
cycle
* tag 'for-linus-fwctl' of git://git.kernel.org/pub/scm/linux/kernel/git/fwctl/fwctl:
rust: introduce abstractions for fwctl
fwctl/bnxt: Add DMA buffer support for HWRM commands
bnxt_en: Update bnxt firmware spec
Fix stale-SID recovery test to match stable/26's call_sync-based restart
PR #19223 (call_sync2 migration) wasn't backported here, so
_recover_ad still restarts idmap via middleware.call_sync, not
call_sync2. Update the test to match, instead of pulling in the
unrelated migration.
[mlir][acc] Add pass to convert acc declare ctors and dtors to LLVM (#217415)
Adds the `acc-declare-ctor-dtor-conversion` pass which converts
`acc.global_ctor` and `acc.global_dtor` operations into LLVM functions
and registers them in `llvm.mlir.global_ctors` and
`llvm.mlir.global_dtors`.
The pass exposes a `priority` option to control when the generated
functions run relative to other module initializers.
---------
Co-authored-by: Susan Tan <zujunt at nvidia.com>
Merge tag 'for-linus-iommufd' of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd
Pull iommufd updates from Jason Gunthorpe:
"One small feature this cycle, the noiommu mode is useful in
single-purpose VMs running something like DPDK. It avoids the double
translation overhead and it seems to be commonly used with some hacks.
Summary:
- Formal API for "no iommu" mode in VFIO. iommufd now works in this
environment and provides page pinning and phyiscal address services
to userspace. This avoids nasty fragile tricks with mprotect and
pgmap
- Fix sykzaller crash racing change_process with map_pages
- Various skyzkaller/AI fixes for the selftests"
* tag 'for-linus-iommufd' of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd:
[13 lines not shown]
Merge tag 'iommu-updates-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux
Pull iommu updates from Joerg Roedel:
"ARM SMMUv2:
- Device-tree binding updates for Qualcomm Eliza, Maili, Shikra and
IPQ9650 SoCs
- Add support for Qualcomm SM8450
- Numerous fixes for lifetime and ordering issues found by Sashiko in
the Qualcomm driver
ARM SMMUv3:
- Fix interrupt type in device-tree binding example for NVIDIA CMDQV
- Numerous fixes for issues identified by Sashiko in the NVIDIA CMDQV
driver
- Work around TLB erratum T264-SMMU-3 on Tegra264 by repeating the
invalidation sequence
- Add support for HAFT (hardware access flag in table entries) when
using SVA
- Probe for 52-bit addressing with a page size smaller than 64k
[74 lines not shown]
AArch64: Use m_GPtrAdd in selectAddrModeRegisterOffset
Replace the getVRegDef + G_PTR_ADD opcode check and operand accesses with an
m_GPtrAdd match binding the base and offset registers. NFC.
Co-authored-by: Claude (Opus 4.8) <noreply at anthropic.com>
X86/GlobalISel: Use mi_match for implicit-def and constant checks
Also fix some broken tests using IMPLICIT_DEF without a set register
class. Ideally the verifier would check these. Real compiles should
have used G_IMPLICIT_DEF
Co-authored-by: Claude (Opus 4.8) <noreply at anthropic.com>
Address review: Run dlm.remote_down's peer poll as a background task
It was blocking the HA connection thread for up to 60s, delaying
reconnect attempts and other disconnect callbacks.
Tolerate transient NTB blips before calling dlm.reset_active
remote_down now polls the DLM port for up to 60 seconds before ejecting
the peer, so short NTB packet loss events don't trigger a spurious
reset_active
Also raise scan_secs from the default 5 to 30 so the kernel DLM itself
doesn't start FORCEUNLOCK recovery during ~20s NTB blips.
Merge tag 'for-7.3/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm
Pull device mapper updates from Mikulas Patocka:
- minor cleanups found by Claude Opus 4.6
- small cleanups in dm core, dm-cache, dm-switch, dm-inlinecrypt,
dm-vdo
- improve validation of metadata in dm-pcache
- fix resume-vs-remove ioctl race condition
- fix race condition when issuing table load ioctls concurrently
- fix dm-raid1 and dm-io, so that they work with unaligned bio vectors
- dm-integrity: use keyed markers as discard fillers
[31 lines not shown]
[Coverage][MC/DC] Emit MC/DC instrumentation for block bodies (#216313)
GenerateBlockFunction() emits the block body without going through
EmitFunctionBody(), so call maybeCreateMCDCCondBitmap() to allocate a
condition bitmap.
GlobalISel: Add m_GAssertZext matcher and use it in AArch64 combiner
Generalize the G_SEXT_INREG source+immediate matcher into a shared
SrcImmOp_match template and add m_GAssertZext on top of it. Use it in the
AArch64 narrow-UADDO combiner to replace the getVRegDef + G_ASSERT_ZEXT opcode
and immediate checks. NFC.
Co-authored-by: Claude (Opus 4.8) <noreply at anthropic.com>
Merge tag 'ata-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux
Pull ata updates from Damien Le Moal:
- Some code cleanups to rename the function used to identify ZAC
devices and declare some local functions static (me)
- Refactoring and improvement of the translation of the SCSI REPORT
SUPPORTED OPCODES command to allow users access to the entire list of
supported commands (me)
- Fix the translation of the WRITE SAME command with UNMAP bit set (DSM
TRIM) for devices with a sector size larger than 2K and devices that
support multiple TRIM segments (Niklas)
- Add support detecting support for and translating the SCSI commands
related to the storage elements depopulation feature (GET PHYSICAL
ELEMENT STATUS, REMOVE ELEMENT AND TRUCATE, REMOVE ELEMENT AND MODIFY
ZONES and RESTORE ELEMENTS AND REBUILD) (me)
[41 lines not shown]
RISCV/GlobalISel: Use mi_match for all-ones check
Introduce a new m_AllOnes matcher, like the IR version has
Co-authored-by: Claude (Opus 4.8) <noreply at anthropic.com>
net/rustconn: Update to 0.20.4
- Remove all patches (that were valid for the previous version of cpal
crate)
ChangeLog: https://github.com/totoshko88/RustConn/releases/tag/v0.20.4
Reported by: "github-actions[bot]" <notifications at github.com>
NAS-142191 / 26.0.0-RC.1 / Don't swallow app upgrade failures in upgrade_impl (#19523)
## Problem
`upgrade_impl()` returns from inside a `finally` block, which discards
any exception raised by `app.pull_images_internal`. The `or
app['custom_app']` condition makes that branch unconditional for custom
apps, so a failed `docker compose pull` is reported to the user as a
successful upgrade: the job ends in SUCCESS with "App successfully
upgraded and redeployed" while the real error only lands in
/var/log/app_lifecycle.log.
The wrong status also hides the two steps that get skipped when the pull
raises, both sitting after `compose_action()` in
`pull_images_internal()`: the `clear_update_flag_for_tag` loop and
`app.redeploy`. So the app isn't recreated and the update flag stays
set, which is why the badge comes back.
## Solution
Clearing a stale alert after a partial pull is still worth doing, so the
[5 lines not shown]
GlobalISel: Add m_GIntrinsic matcher
Add m_GIntrinsic mirroring the IR version. Introduce some uses
in SPIRV and AArch64, and drop trivial manual match wrappers.
Doesn't attempt to take the next stop of avoiding wip_match_opcode.
Also, it's broken that we're using G_INTRINSIC with generic intrinsics.
Co-authored-by: Claude (Opus 4.8) <noreply at anthropic.com>
[lldb] Use std::unique_lock instead of std::lock_guard in ResumeNewPlan (#217433)
When adopting the TargetAPIMutex returned by exe_ctx.AllowResume(),
using std::lock_guard with std::adopt_lock fails with
-Werror=thread-safety-analysis on newer libc++ toolchains because
lock_guard's adopt_lock constructor requires holding the capability at
the call site. Switching to std::unique_lock matches the other
TargetAPIMutex adoption call sites and provides correct RAII cleanup.
[SLP] Test for code size costing changes (#217400)
Should vectorize differently based on the costing criteria (don't
currently).
To be used by #217398.
[SimplifyCFG] Check every sinking candidate in canSinkInstructions (#217372)
canReplaceOperandWithVariable() can depend on the operand value (e.g. if
the operand of only some instructions is a swifterror value, or a
constant operand for an operand bundle). Check operands of all
instructions to sink.
Fixes verifier errors after sinking the swifterror examples.
PR: https://github.com/llvm/llvm-project/pull/217372
[docs] Finish MyST migration for tutorial docs (#217160)
Tracking issue: #201242
See the [migration guide] for more information.
[migration guide]:
https://llvm.org/docs/SphinxQuickstartTemplate.html#markdown-migration-guidelines
This is a stacked PR based on #217158 , which will be a standalone
commit that
renames *.rst -> *.md before this PR lands for history preservation
purposes.
This was prepared with rst2myst plus LLM-assisted cleanup. I paged
through all the generated HTML looking for migration artifacts, and all
of the differences I could find appear to be formatting error
corrections. Please spot check my work and approve if it looks good. You
can use the HTML links below to confirm it renders properly.
-----
[128 lines not shown]
[docs] Rename tutorial docs to Markdown (#217158)
Tracking issue: #201242
See the [migration guide] for more information.
[migration guide]:
https://llvm.org/docs/SphinxQuickstartTemplate.html#markdown-migration-guidelines
This is the initial straight rename commit. It will probably break the
docs build, but it has to be a separate PR for blame preservation
purposes.
