OPNSense/core 4f4bec5src/opnsense/mvc/app/models/OPNsense/Core ACL.php

system: change comment to existing page
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Core/ACL.php
+1-11 files

NetBSD/pkgsrc-wip 43d10adap-modsecurity2 Makefile

ap-modsecurity2: simplify download, version number handling
DeltaFile
+4-2ap-modsecurity2/Makefile
+4-21 files

OPNSense/tools 808da9bconfig/26.7 make.conf

dns/powerdns: unset LMDB and LUA as well (#515)
DeltaFile
+1-1config/26.7/make.conf
+1-11 files

LLVM/project 3950502clang/docs ClangLinkerWrapper.rst, clang/test/OffloadTools/clang-linker-wrapper linker-wrapper-verbose.c

[ClangLinkerWrapper] Use discrete steps in verbose mode (#204186)

Summary:
One persistent problem with the linker wrapper flow is that it was more
difficult to reuse as a script than the previous flow. This is because
it did a lot of work internally. In the past we moved al ot of this into
dedicated LLVM tools, so now it's possible to simply use these tools
instead.

This PR changes the verbose mode handling to defer steps to tools rather
than doing it internally. This allows users to use verbose printing and
can copy/paste the results to re-run the steps.
DeltaFile
+194-9clang/tools/clang-linker-wrapper/ClangLinkerWrapper.cpp
+94-0clang/test/OffloadTools/clang-linker-wrapper/linker-wrapper-verbose.c
+30-21clang/docs/ClangLinkerWrapper.rst
+318-303 files

LLVM/project 6575e39lld/ELF InputFiles.cpp InputFiles.h

[ELF] Reuse SHT_GROUP selection verdicts in initializeSections. NFC (#207437)

For each SHT_GROUP section, the parallel initializeSections re-derives
what the serial parse() already decided
(https://reviews.llvm.org/D130810).

Record the kept group section indices during parse() so that we can save
the work (xxh3 string hash and DenseMap lookup) in the parallel
initializeSections().

In a clang-relassert --threads=8 benchmark, "Initialize sections"
decreases from 39.0 to 30.6.
DeltaFile
+10-8lld/ELF/InputFiles.cpp
+4-0lld/ELF/InputFiles.h
+14-82 files

LLVM/project 343197eclang/test/CIR/CodeGen inline-asm.c, clang/test/CIR/Lowering module-asm.cir

[CIR] Fix lit tests after explicit target feature for module asm (#207741)

- Fix lit tests after the module-level inline assembly is enhanced to
support specifying target features explicitly in
fcfc9167b628a2fae8fe1d662989ff7752d905ad.
DeltaFile
+4-3clang/test/CIR/CodeGen/inline-asm.c
+3-2clang/test/CIR/Lowering/module-asm.cir
+7-52 files

FreeBSD/src 3516403sys/arm64/vmm vmm_hyp.c vmm_arm64.c, sys/arm64/vmm/io vgic_v3.c vtimer.c

arm64/vmm: Make remaining registers use hypctx_*_sys_reg

Move vgic, timer and trapframe registers into sys_regs to handle them
in the same way as all the other registers.

Signed-off-by:  Kajetan Puchalski <kajetan.puchalski at arm.com>
Reviewed by:    andrew
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D56556
DeltaFile
+74-61sys/arm64/vmm/vmm_hyp.c
+63-47sys/arm64/vmm/vmm_arm64.c
+33-32sys/arm64/vmm/vmm_hyp_exception.S
+42-4sys/arm64/vmm/arm64.h
+24-22sys/arm64/vmm/io/vgic_v3.c
+18-18sys/arm64/vmm/io/vtimer.c
+254-1846 files not shown
+301-22212 files

FreeBSD/src e3cd6d1sys/arm64/vmm vmm_hyp.c arm64.h

arm64/vmm: Refactor vmm_hyp.c

Refactor vmm_hyp.c to split register reload logic by type of register,
streamline the implementation and improve readability.

Signed-off-by:  Kajetan Puchalski <kajetan.puchalski at arm.com>
Reviewed by:    andrew
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D56553
DeltaFile
+229-179sys/arm64/vmm/vmm_hyp.c
+6-0sys/arm64/vmm/arm64.h
+235-1792 files

FreeBSD/src f4c3458sys/arm64/vmm vmm_hyp.c arm64.h, sys/arm64/vmm/io vtimer.c vtimer.h

arm64/vmm: Move vttbr_el2 & vtimer into struct hypctx

Move vttbr_el2 & vtimer from struct hyp into struct hypctx to streamline
the logic and handle them in the same way as other *_el2 registers are
already being handled.

Signed-off-by:  Kajetan Puchalski <kajetan.puchalski at arm.com>
Reviewed by:    andrew
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D56554
DeltaFile
+41-58sys/arm64/vmm/io/vtimer.c
+9-12sys/arm64/vmm/vmm_hyp.c
+4-2sys/arm64/vmm/arm64.h
+2-2sys/arm64/vmm/vmm_arm64.c
+0-1sys/arm64/vmm/io/vtimer.h
+56-755 files

FreeBSD/src ee26426sys/arm64/vmm vmm_reset.c vmm_hyp.c, sys/arm64/vmm/io vgic_v3.c

arm64/vmm: Move host-side EL2 regs into sys_regs

Move EL2 host registers that are not visible to the guest into
hypctx->sys_regs. Prefix them with HOST_ to distinguish from EL2
registers which are part of the guest's own state (e.g. in VNCR).

Signed-off-by:  Kajetan Puchalski <kajetan.puchalski at arm.com>
Reviewed by:    andrew
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D56555
DeltaFile
+313-269sys/arm64/vmm/vmm_reset.c
+49-33sys/arm64/vmm/vmm_hyp.c
+32-38sys/arm64/vmm/arm64.h
+13-13sys/arm64/vmm/vmm_arm64.c
+3-3sys/arm64/vmm/io/vgic_v3.c
+410-3565 files

FreeBSD/src d2e3e76sys/arm64/vmm vmm_hyp.c arm64.h

arm64/vmm: Store non-VNCR registers in an array

Move non-VNCR EL0 and EL1 registers into a dedicated array inside of
hypctx. This enables uniform accesses to both VNCR and non-VNCR guest
register state through hypctx_[read|write]_sys_reg().

The accessors are _not_ used for non-VNCR EL2 registers in order to
create a clear separation between guest-visible and guest-invisible
register state.

Signed-off-by:  Kajetan Puchalski <kajetan.puchalski at arm.com>
Reviewed by:    andrew
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D56552
DeltaFile
+109-88sys/arm64/vmm/vmm_hyp.c
+67-32sys/arm64/vmm/arm64.h
+4-28sys/arm64/vmm/vmm_reset.c
+180-1483 files

FreeBSD/src dd08cb0sys/arm64/include hypervisor.h, sys/arm64/vmm arm64.h vmm_hyp.c

arm64/vmm: Use the VNCR_EL2 memory page to store guest registers

Wherever possible, move the storage space for guest register values from
the hypctx struct into a preallocated memory page matching the layout of
the page pointed to by VNCR_EL2.
This will streamline implementing support for nested virtualization, but
the implementation itself is not reliant on the presence of nested
virtualization architecture features.

Signed-off-by:  Kajetan Puchalski <kajetan.puchalski at arm.com>
Reviewed by:    andrew
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D56551
DeltaFile
+147-21sys/arm64/vmm/arm64.h
+72-39sys/arm64/vmm/vmm_hyp.c
+50-28sys/arm64/vmm/vmm_arm64.c
+3-19sys/arm64/vmm/vmm_reset.c
+3-0sys/arm64/vmm/vmm_nvhe.c
+2-0sys/arm64/include/hypervisor.h
+277-1076 files

FreeBSD/src 5c73153sys/arm64/include hypervisor.h

arm64/vmm: Add FEAT_NV2 definitions

Add the definitions for the VNCR_EL2 register and all of the offsets
to registers in memory relative to the page stored in VNCR_EL2.

Signed-off-by:  Kajetan Puchalski <kajetan.puchalski at arm.com>
Reviewed by:    andrew
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D56550
DeltaFile
+101-0sys/arm64/include/hypervisor.h
+101-01 files

LLVM/project 10c05feflang/lib/Optimizer/Transforms FIRToMemRef.cpp, flang/test/Transforms/FIRToMemRef emboxed-slice-rank-reduction.mlir emboxed-slice-stride.mlir

[FIRToMemRef] Fix wrong-code for array_coor over sliced fir.embox

FIRToMemRef::convertArrayCoorOp routes through getMemrefIndices, which
only folds the first `rank` triples of sliceInfo.sliceVec into the memref
indices (i.e. the array_coor's own slice); the embox's slice triples --
which sit at [rank*3 .. 2*rank*3-1] when both are present -- were dropped.
Three consequences, three fixes here:

  1. Non-collapsed embox slice lbs contribute (lb - 1) per Fortran dim to
     each memref index. Fold them in in memref order (reversed Fortran
     order) so the reinterpret_cast view lands at the right column.

  2. The shapeVec-else stride path used shapeVec[0..rank-1] to build the
     outer strides. With both slices present, that's the box's (slice's)
     extents. Use shapeVec[rank..2*rank-1] instead -- the parent's extents
     -- so the outer stride is the parent's leading dim rather than the
     slice's own size.

  3. Rank-reducing embox slices (undef ub/step triples) have no memref

    [5 lines not shown]
DeltaFile
+148-2flang/lib/Optimizer/Transforms/FIRToMemRef.cpp
+82-0flang/test/Transforms/FIRToMemRef/emboxed-slice-rank-reduction.mlir
+67-0flang/test/Transforms/FIRToMemRef/emboxed-slice-stride.mlir
+65-0flang/test/Transforms/FIRToMemRef/emboxed-slice-array-coor.mlir
+362-24 files

OPNSense/core 1b45d2bsrc/opnsense/mvc/app/views/OPNsense/Firewall group.volt

Firewall: Group: change link to new firewall rules (#10497)
DeltaFile
+1-1src/opnsense/mvc/app/views/OPNsense/Firewall/group.volt
+1-11 files

LLVM/project 2638040llvm/lib/Target/AMDGPU AMDGPULowerKernelArguments.cpp, llvm/test/CodeGen/AMDGPU lower-kernargs.ll

[AMDGPU] Copy the nofpclass attribute onto a matching kernarg load (#207734)

Follow up for https://github.com/llvm/llvm-project/pull/207655
DeltaFile
+76-32llvm/test/CodeGen/AMDGPU/lower-kernargs.ll
+8-0llvm/lib/Target/AMDGPU/AMDGPULowerKernelArguments.cpp
+84-322 files

FreeNAS/freenas bf0261dsrc/middlewared/middlewared/plugins/container bridge.py

NAS-141468 / 26.0.0-RC.1 / Enable IPv6 forwarding for the container bridge (by Qubad786) (#19262)

## Problem
On a clean install, LXC containers on the default `truenasbr0` bridge
get an IPv6 address and default route via the host's RAs but cannot
route IPv6 out. The bridge sets up full IPv6 masquerade and forward nft
rules, yet only the IPv4 forwarding sysctl was enabled, so the kernel
never forwards IPv6. Docker enables IPv6 forwarding as a side effect, so
only LXC-only (Docker-disabled) setups hit this.

## Solution
Enable `net.ipv6.conf.all.forwarding` when the bridge has an IPv6
network. Before doing so, bump `accept_ra` from 1 to 2 on interfaces
that still have it, mirroring incus, so the host keeps honouring router
advertisements while forwarding is on and doesn't lose a SLAAC-derived
address on its own uplink. The IPv4 write is likewise gated on having an
IPv4 network.

Original PR: https://github.com/truenas/middleware/pull/19257

Co-authored-by: M. Rehan <mrehanlm93 at gmail.com>
DeltaFile
+28-2src/middlewared/middlewared/plugins/container/bridge.py
+28-21 files

FreeBSD/src 302d3a2sys/sys cpu.h

cpu: cpu_get_pcpuid(): Fix typo in herald comment

Fixes:          c3c8f4d9e662 ("cpu: New cpu_get_pcpuid(), retrieves internal CPU ID")
Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-1sys/sys/cpu.h
+1-11 files

LLVM/project 8b50847clang/include/clang/AST StmtVisitor.h

[clang][AST] Inline StmtVisitor fallback methods (#203125)

Mark the trivial `StmtVisitorBase` fallback methods `always_inline` so
each `VisitFoo`-to-`VisitParent` delegation is folded into its caller
instead of retained as an out-of-line template thunk.

In matched Release assertions-off Darwin arm64 builds, stripped clang
decreased by 266,656 bytes, stripped clangd decreased by 232,912 bytes,
and the stripped upstream `llvm-driver` multicall decreased by 266,336
bytes.

Work towards #202616

AI tool disclosure: Co-authored with OpenAI Codex.

Co-authored-by: OpenAI Codex <noreply at openai.com>
DeltaFile
+20-12clang/include/clang/AST/StmtVisitor.h
+20-121 files

LLVM/project 1ac400eclang/lib/Frontend CompilerInvocation.cpp

[clang][Frontend] Batch LangOptions context hashing (#203162)

`CompilerInvocation::computeContextHash` currently expands 269
non-benign `LangOptions` into individual `HashBuilder::add` calls. This
collects the values in an `unsigned` array and passes the array to
`HashBuilder::addRangeElements`, which preserves the ordered
native-endian bytes without adding an element count.

In a Release arm64 build, clangd decreases by 16,528 bytes unstripped
and 16,544 bytes stripped.

Work towards #202616

AI tool disclosure: Co-authored with OpenAI Codex.
DeltaFile
+13-6clang/lib/Frontend/CompilerInvocation.cpp
+13-61 files

FreeBSD/ports 755b873math/blasfeo pkg-plist distinfo, math/blasfeo/files patch-CMakeLists.txt

math/blasfeo: update 0.1.4.2 → 0.1.4.3
DeltaFile
+0-11math/blasfeo/files/patch-CMakeLists.txt
+4-2math/blasfeo/pkg-plist
+3-3math/blasfeo/distinfo
+1-1math/casadi/Makefile
+1-1math/blasfeo/Makefile
+1-0math/hpipm/Makefile
+10-181 files not shown
+11-187 files

FreeBSD/ports 86960c9math/amgcl distinfo Makefile

math/amgcl: update 1.4.8 → 1.4.9
DeltaFile
+3-3math/amgcl/distinfo
+1-1math/amgcl/Makefile
+2-0math/amgcl/pkg-plist
+6-43 files

FreeBSD/ports 7019d2bmath/lean4/files patch-stage0_src_runtime_object.cpp

math/lean4: Remove patch to fix build

Reported by:    fallout
DeltaFile
+0-15math/lean4/files/patch-stage0_src_runtime_object.cpp
+0-151 files

OPNSense/core 9d8c183src/opnsense/mvc/app/models/OPNsense/Firewall/Menu Menu.php

firewall: change menu registration rules for legacy rules #9947

Keep the logic of the migration assistant but pivot to assuming
MVC rules are used by default and that menu registration hinges
on the fact that the firewall legacy plugin is installed.

Also patch outbound NAT file check although it's not needed yet
as we may want to move quicker in 26.7.x to depreate it.  Since
we already have a plugin we can easily move the files there in
a minor iteration.
DeltaFile
+11-7src/opnsense/mvc/app/models/OPNsense/Firewall/Menu/Menu.php
+11-71 files

LLVM/project 0d87d24llvm/lib/IR Type.cpp

IR: Use switch in getFloatingPointType
DeltaFile
+17-17llvm/lib/IR/Type.cpp
+17-171 files

LLVM/project 2c7d18coffload/unittests/OffloadAPI/program olCreateProgram.cpp

[offload] add unit tests for olCreateProgram (#206462)

Add tests for olCreateProgram param validation & fail on invalid program
DeltaFile
+54-1offload/unittests/OffloadAPI/program/olCreateProgram.cpp
+54-11 files

LLVM/project 4e3bb3fclang/lib/CodeGen CodeGenTypes.cpp

clang: Use getFloatingPointType instead of reinventing it

Co-authored-by: Claude (Opus 4.8) <noreply at anthropic.com>
DeltaFile
+6-25clang/lib/CodeGen/CodeGenTypes.cpp
+6-251 files

LLVM/project bd8db3aclang/lib/CodeGen CGExprScalar.cpp CodeGenTypes.cpp, clang/lib/CodeGen/TargetBuiltins NVPTX.cpp

clang: Remove useFP16ConversionIntrinsics target option

Follow up to #174494. Remove the remnants of the control to
use llvm.convert.to.fp16/llvm.convert.from.fp16. Prefer
directly using the IR half type, unless the value is used
in an ABI context where it needs to remain as i16.

I did the first 80% of this a long time ago, and AI finished
the last bit and handled the recent rebases and test updates.

Co-authored-by: Claude (Opus 4.8) <noreply at anthropic.com>
DeltaFile
+30-47clang/test/CodeGen/wasm-fp16.c
+70-0clang/test/CIR/CodeGen/fp16.c
+16-38clang/lib/CodeGen/CGExprScalar.cpp
+44-0clang/test/CIR/CodeGen/fp16-native-args.c
+10-18clang/lib/CodeGen/CodeGenTypes.cpp
+2-20clang/lib/CodeGen/TargetBuiltins/NVPTX.cpp
+172-12320 files not shown
+193-23226 files

LLVM/project 267de15clang/cmake/modules ClangConfig.cmake.in, cmake/Modules GetTripleCMakeSystemName.cmake NormalizeTriple.cmake

Reapply "runtimes: Pass CMAKE_SYSTEM_NAME based on target triple" (#205133)

This reverts commit 08c728e8528c9584bc1fe0f46bbdd657e368be91.

Reapply after runtimes build fixes on platforms without shared libraries.
DeltaFile
+89-0cmake/Modules/GetTripleCMakeSystemName.cmake
+32-37llvm/cmake/modules/LLVMConfig.cmake.in
+49-15llvm/cmake/modules/LLVMExternalProjectUtils.cmake
+36-0cmake/Modules/NormalizeTriple.cmake
+2-16runtimes/CMakeLists.txt
+4-1clang/cmake/modules/ClangConfig.cmake.in
+212-691 files not shown
+212-737 files

LLVM/project eded35clibc/test/src/math SqrtTest.h

nit
DeltaFile
+1-1libc/test/src/math/SqrtTest.h
+1-11 files