HardenedBSD/src a1338basys/dev/acpica acpi_pci.c, sys/dev/ufshci ufshci_private.h ufshci_sim.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+45-48sys/dev/ufshci/ufshci_req_queue.c
+36-1sys/dev/acpica/acpi_pci.c
+15-4sys/dev/ufshci/ufshci_ctrlr.c
+4-0sys/dev/ufshci/ufshci_sim.c
+1-1sys/dev/ufshci/ufshci_private.h
+101-545 files

HardenedBSD/src 86ab2f1share/man/man4 bnxt.4, sys/dev/bnxt/bnxt_en bnxt_hwrm.h bnxt.h

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+105-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.c
+41-0sys/dev/bnxt/bnxt_en/if_bnxt.c
+15-0sys/dev/bnxt/bnxt_en/bnxt.h
+6-1share/man/man4/bnxt.4
+2-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.h
+169-15 files

HardenedBSD/src dccec3dsys/dev/acpica acpi_pci.c, sys/dev/ufshci ufshci_private.h ufshci_sim.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+45-48sys/dev/ufshci/ufshci_req_queue.c
+36-1sys/dev/acpica/acpi_pci.c
+15-4sys/dev/ufshci/ufshci_ctrlr.c
+4-0sys/dev/ufshci/ufshci_sim.c
+1-1sys/dev/ufshci/ufshci_private.h
+101-545 files

HardenedBSD/src 1bf7c1fshare/man/man4 bnxt.4, sys/dev/bnxt/bnxt_en bnxt_hwrm.h bnxt.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+105-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.c
+41-0sys/dev/bnxt/bnxt_en/if_bnxt.c
+15-0sys/dev/bnxt/bnxt_en/bnxt.h
+6-1share/man/man4/bnxt.4
+2-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.h
+169-15 files

HardenedBSD/ports b337245misc/codex Makefile, misc/codex/files patch-codex-rs_Cargo.lock patch-codex-rs_core_src_tools_runtimes_apply_patch.rs

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-52misc/codex/files/patch-codex-rs_core_src_tools_runtimes_apply_patch.rs
+52-0misc/codex/files/patch-codex-rs_core_src_tools_runtimes_apply__patch.rs
+9-9multimedia/ab-av1/distinfo
+9-9misc/codex/files/patch-codex-rs_Cargo.lock
+10-5misc/codex/Makefile
+14-0sysutils/smartmontools/files/patch-os__freebsd.cpp
+94-7543 files not shown
+220-17049 files

FreeBSD/ports 7298a33graphics/zathura pkg-plist distinfo

graphics/zathura: Update to 2026.07.18

Add graphene and xxhash to dependencies.
Use gtk40 instead of gtk30.
Update MESON_ARGS.

Changelog: https://pwmt.org/projects/zathura/changelog/2026.07.18/index.html

PR:             297216
Approved by:    quentin.stievenart at gmail.com (maintainer)
DeltaFile
+7-4graphics/zathura/Makefile
+3-3graphics/zathura/distinfo
+3-0graphics/zathura/pkg-plist
+13-73 files

NetBSD/pkgsrc LENrh3Gdevel/py-test-lazy-fixtures PLIST Makefile

   py-test-lazy-fixtures: updated to 1.4.1

   1.4.1

   Bump astral-sh/setup-uv from 6 to 7 in the github-actions group
   Fix NameError on Python 3.14 for TYPE_CHECKING-only annotations (use FORWARDREF)
   Bump the github-actions group across 1 directory with 4 updates
VersionDeltaFile
1.10+4-4devel/py-test-lazy-fixtures/distinfo
1.11+3-3devel/py-test-lazy-fixtures/Makefile
1.3+4-1devel/py-test-lazy-fixtures/PLIST
+11-83 files

NetBSD/pkgsrc ohbeC3Ntextproc/py-pdf distinfo Makefile

   py-pdf: updated to 6.16.2

   6.16.2

   Bug Fixes (BUG)
   - Make remove_from_tree() work on outline items
   - Be more lenient about space width in layout mode text extraction
   - Do not scale the text leading by the font size
   - Update annotation appearance stream matrix on page transform
   - Allow repeated page references

   Robustness (ROB)
   - Improve RC4 fallback when cryptography can't provide it
VersionDeltaFile
1.75+2-7textproc/py-pdf/Makefile
1.68+4-4textproc/py-pdf/distinfo
+6-112 files

NetBSD/pkgsrc vKuaVCGtime/py-time-machine Makefile distinfo

   py-time-machine: updated to 3.5.0

   3.5.0 (2026-08-25)
   Support None as a destination for travel() and Traveller.move_to(), meaning the current time. Use this with tick=False to freeze time at the present moment, matching freezegun’s behaviour when freeze_time() is called with no arguments.

   Extend the Migration CLI to migrate aliased imports: import freezegun as fg and from freezegun import freeze_time as ft, plus calls using such aliases.

   Extend the Migration CLI to migrate the pytest.mark.freeze_time marker in module-level and class-level pytestmark assignments.

   Extend the Migration CLI to migrate freeze_time() calls and markers that pass tz_offset with a literal zero value. The argument is dropped, since a zero offset has no effect.

   Extend the Migration CLI to migrate freeze_time() calls and markers that pass real_asyncio. The argument is dropped, whatever its value, since time-machine does not mock time.monotonic(), so asyncio event loops always see real time.

   Extend the Migration CLI to migrate freeze_time() calls and markers with no destination argument, which freeze at the current time. None is added as the destination, using the new support for None destinations (above).

   Extend the Migration CLI to migrate freeze_time() calls and markers that pass ignore. The argument is dropped, since it works around problems with freezegun’s module patching, which time-machine’s C-level mocking doesn’t have.

   Make the Migration CLI report freezegun-related usages that it recognizes but cannot migrate, with their positions, like:
   example/tests.py:9:2: freeze_time usage not migrated

    [8 lines not shown]
VersionDeltaFile
1.15+4-4time/py-time-machine/distinfo
1.17+2-2time/py-time-machine/Makefile
+6-62 files

LLVM/project 849e90ellvm/test/CodeGen/WebAssembly/GlobalISel/instructions global_value.ll load.ll

[WebAssembly][GlobalISel] Implement pointer and memory ops (v2) (#219072)

Implements a variety of pointer and memory related ops
(`G_GLOBAL_VALUE`, `G_PTR_ADD`, `G_LOAD`, `G_STORE`, etc.).

Split from #157161

-----

TODO (in future PR)

- Move `G_PTRTOINT`, `G_INTTOPTR`, `G_PTRMASK` selection to tablegen
(for all targets)
- MAYBE try to shuffle `G_GLOBAL_VALUE` selection elsewhere (e.g.
legalizer). Doesn't seem worth it?

-----

Reapplication of #206885 with some fixes and extensions.
DeltaFile
+236-0llvm/test/CodeGen/WebAssembly/GlobalISel/instructions/store.ll
+220-0llvm/test/CodeGen/WebAssembly/GlobalISel/instructions/sextload.mir
+208-0llvm/test/CodeGen/WebAssembly/GlobalISel/instructions/zextload.mir
+202-3llvm/test/CodeGen/WebAssembly/GlobalISel/instructions/icmp.ll
+198-0llvm/test/CodeGen/WebAssembly/GlobalISel/instructions/load.ll
+127-0llvm/test/CodeGen/WebAssembly/GlobalISel/instructions/global_value.ll
+1,191-316 files not shown
+2,051-3322 files

NetBSD/pkgsrc 5YV9AcAdoc CHANGES-2026

   Updated security/libgcrypt, security/libksba
VersionDeltaFile
1.5554+4-1doc/CHANGES-2026
+4-11 files

OPNSense/ports 122e529net/rsync distinfo Makefile, net/rsync/files patch-lib_sysxattrs.c patch-testsuite_xattrs.test

net/rsync: sync with upstream

Taken from: FreeBSD
DeltaFile
+927-331net/rsync/files/extra-patch-file-flags.diff
+0-67net/rsync/files/patch-testsuite_xattrs.test
+0-26net/rsync/files/patch-lib_sysxattrs.c
+9-4net/rsync/Makefile
+3-3net/rsync/distinfo
+939-4315 files

NetBSD/pkgsrc kCqKfOqsecurity/libksba Makefile distinfo

   libksba: updated to 1.8.1

   Noteworthy changes in version 1.8.1 (2026-08-24)

   * Fix CMS parser to avoid possible infinite loop.
VersionDeltaFile
1.37+4-4security/libksba/distinfo
1.50+2-2security/libksba/Makefile
+6-62 files

NetBSD/pkgsrc XKLGWtJsecurity/libgcrypt Makefile distinfo

   libgcrypt: updated to 1.12.3

   Noteworthy changes in version 1.12.3 (2026-08-26)

   * Bug fixes:

     - Avoid theoretical drive-by loading of netapi32.dll and
       shell32.dll.
     - Validate hash algorithm for use with RSA modulus.
     - Validate parameters of Balloon KDF.
     - Validate parallelism of Argon2 KDF.
     - Fix parsing quoted parts and CRLF/LFCR in s-expression.
     - Support BUFLEN check for GCRYMPI_FMT_SSH.
     - Fix RSA PSS verify message length checking.
     - Avoid a NULL ptr deref due to a unsupported genkey flag for
       ECC.
     - Assert 32 KiB input cap in gcm_ctr_encrypt.
     - Fix assertion failure in OCB when a buffered block becomes block
       65536.

    [40 lines not shown]
VersionDeltaFile
1.108+4-4security/libgcrypt/distinfo
1.125+2-2security/libgcrypt/Makefile
+6-62 files

OPNSense/ports a2fbec9security/openssl35 Makefile distinfo

security/openssl35: sync with upstream

Taken from: FreeBSD
DeltaFile
+3-3security/openssl35/distinfo
+1-1security/openssl35/Makefile
+4-42 files

OPNSense/ports 5cb2ed5www/phalcon Makefile distinfo

www/phalcon: update to 5.20.3
DeltaFile
+3-3www/phalcon/distinfo
+1-1www/phalcon/Makefile
+4-42 files

FreeBSD/src 072f131share/man/man4 bnxt.4, sys/dev/bnxt/bnxt_en bnxt_hwrm.h bnxt.h

bnxt: Add led(4) identification support

Query the firmware for the LEDs on each physical port and expose
/dev/led/bnxt* only when alternate blinking is supported.  Configure
every LED in the advertised group for identification and restore its
default firmware state before a function reset.

This follows the DPDK and Linux bnxt HWRM identification paths.

Reviewed against: DPDK, Linux

Reviewed by:    Sumit Saxena <sumit.saxena at broadcom.com>
Sponsored by:   BBOX.io

(cherry picked from commit 98b5640786f874949e441bee7c4ad5740cd6a649)
DeltaFile
+105-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.c
+41-0sys/dev/bnxt/bnxt_en/if_bnxt.c
+15-0sys/dev/bnxt/bnxt_en/bnxt.h
+6-1share/man/man4/bnxt.4
+2-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.h
+169-15 files

FreeBSD/src b057c92share/man/man4 bnxt.4, sys/dev/bnxt/bnxt_en bnxt_hwrm.h bnxt.h

bnxt: Add led(4) identification support

Query the firmware for the LEDs on each physical port and expose
/dev/led/bnxt* only when alternate blinking is supported.  Configure
every LED in the advertised group for identification and restore its
default firmware state before a function reset.

This follows the DPDK and Linux bnxt HWRM identification paths.

Reviewed against: DPDK, Linux

Reviewed by:    Sumit Saxena <sumit.saxena at broadcom.com>
Sponsored by:   BBOX.io

(cherry picked from commit 98b5640786f874949e441bee7c4ad5740cd6a649)
DeltaFile
+105-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.c
+41-0sys/dev/bnxt/bnxt_en/if_bnxt.c
+15-0sys/dev/bnxt/bnxt_en/bnxt.h
+6-1share/man/man4/bnxt.4
+2-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.h
+169-15 files

HardenedBSD/src b057c92share/man/man4 bnxt.4, sys/dev/bnxt/bnxt_en bnxt_hwrm.h bnxt.h

bnxt: Add led(4) identification support

Query the firmware for the LEDs on each physical port and expose
/dev/led/bnxt* only when alternate blinking is supported.  Configure
every LED in the advertised group for identification and restore its
default firmware state before a function reset.

This follows the DPDK and Linux bnxt HWRM identification paths.

Reviewed against: DPDK, Linux

Reviewed by:    Sumit Saxena <sumit.saxena at broadcom.com>
Sponsored by:   BBOX.io

(cherry picked from commit 98b5640786f874949e441bee7c4ad5740cd6a649)
DeltaFile
+105-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.c
+41-0sys/dev/bnxt/bnxt_en/if_bnxt.c
+15-0sys/dev/bnxt/bnxt_en/bnxt.h
+6-1share/man/man4/bnxt.4
+2-0sys/dev/bnxt/bnxt_en/bnxt_hwrm.h
+169-15 files

FreeBSD/ports 93f5309security/libgcrypt pkg-plist Makefile

security/libgcrypt: Update to 1.12.3
DeltaFile
+3-3security/libgcrypt/distinfo
+1-1security/libgcrypt/pkg-plist
+1-1security/libgcrypt/Makefile
+5-53 files

HardenedBSD/ports 93f5309security/libgcrypt pkg-plist Makefile

security/libgcrypt: Update to 1.12.3
DeltaFile
+3-3security/libgcrypt/distinfo
+1-1security/libgcrypt/pkg-plist
+1-1security/libgcrypt/Makefile
+5-53 files

NetBSD/pkgsrc 2tADDTXmk/fetch sites.mk

   sites.mk: use https for gnupg.org
VersionDeltaFile
1.205+2-2mk/fetch/sites.mk
+2-21 files

LLVM/project 8463b1fmlir/lib/Conversion/ArithToLLVM ArithToLLVM.cpp, mlir/lib/Dialect/LLVMIR/IR LLVMDialect.cpp

[mlir][LLVM] Verify that constant attribute and result types match

`llvm.mlir.constant` only checked that the kind of the value attribute suits
the kind of the result type, never that the types themselves agree. All of the
following verified:

  %0 = llvm.mlir.constant(1 : index) : i64
  %1 = llvm.mlir.constant(1 : i8) : i16
  %2 = llvm.mlir.constant(dense<1> : vector<4xi32>) : vector<4xi64>

Translation ignores the attribute type and uses the result type, so the
attribute type was effectively decorative for integers, and passes that read it
back could observe a type that has nothing to do with the value.

Require exact type equality for integer attributes and exact element type
equality for integer elements attributes, mirroring the `AllTypesMatch`
constraint `arith.constant` gets from ODS. The op cannot use that trait itself
because `value` is an `AnyAttr` that also holds `StringAttr` and `ArrayAttr`.
The element type check is also run on the scalable vector path, which

    [11 lines not shown]
DeltaFile
+56-0mlir/test/Dialect/LLVMIR/invalid.mlir
+42-11mlir/lib/Dialect/LLVMIR/IR/LLVMDialect.cpp
+12-12mlir/test/Dialect/LLVMIR/roundtrip.mlir
+23-0mlir/test/Conversion/ArithToLLVM/constant-index-bitwidth.mlir
+11-4mlir/lib/Conversion/ArithToLLVM/ArithToLLVM.cpp
+7-7mlir/test/Dialect/LLVMIR/inlining-alias-scopes.mlir
+151-3413 files not shown
+177-5619 files

LLVM/project 325a853flang/test/Fir convert-to-llvm-openmp-and-fir.fir, mlir/test/Conversion/ArithToLLVM arith-to-llvm.mlir

[mlir] Build llvm.mlir.constant attributes from the result type (#218607)

Many conversion patterns created `llvm.mlir.constant` with a value
attribute whose type does not match the result type. The most common
case was pairing an `index`-typed attribute with the converted index
type:

```
llvm.mlir.constant(1 : index) : i64
```

but there were also plain width and signedness mismatches, e.g. NVGPU's
`makeI64Const` built `i64` constants from `i32` attributes, and the NVVM
`fdiv` expansion used `ui32` attributes on `i32` values.

Translation to LLVM IR ignores the attribute type and uses the result
type, so the emitted IR was correct, but the attribute type is
meaningless in this state and anything that reads it back sees the wrong
type. Derive the attribute from the result type in every case; where the

    [21 lines not shown]
DeltaFile
+63-63mlir/test/Target/LLVMIR/llvmir.mlir
+58-58mlir/test/Conversion/MemRefToLLVM/memref-to-llvm.mlir
+115-1mlir/test/Conversion/ArithToLLVM/arith-to-llvm.mlir
+55-55mlir/test/Conversion/MemRefToLLVM/expand-then-convert-to-llvm.mlir
+49-43flang/test/Fir/convert-to-llvm-openmp-and-fir.fir
+45-45mlir/test/Conversion/MemRefToLLVM/convert-dynamic-memref-ops.mlir
+385-265108 files not shown
+1,157-891114 files

FreeBSD/src e59d4ecsys/dev/ufshci ufshci_sim.c ufshci_ctrlr.c

ufshci: handle a recovery reset before the SIM attach

When the first start attempt fails early, the recovery reset
runs the start sequence again without a SIM. That pass still
looked up the WLUN, so it dereferenced a NULL SIM and panicked.

Attach the SIM whenever it does not exist yet. Also make the
WLUN lookup return NULL when there is no SIM.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58947
DeltaFile
+4-3sys/dev/ufshci/ufshci_ctrlr.c
+4-0sys/dev/ufshci/ufshci_sim.c
+8-32 files

FreeBSD/src 746278asys/dev/ufshci ufshci_req_queue.c

ufshci: build valid fake responses for manual completion

The manual completion wrote the fake response to the wrong
descriptor for task management slots. It also left the task tag
at zero, which tripped the task tag check under INVARIANTS.

Write the fake response where the completion path reads it.
Copy the task tag from the request.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58946
DeltaFile
+20-6sys/dev/ufshci/ufshci_req_queue.c
+20-61 files

HardenedBSD/src 746278asys/dev/ufshci ufshci_req_queue.c

ufshci: build valid fake responses for manual completion

The manual completion wrote the fake response to the wrong
descriptor for task management slots. It also left the task tag
at zero, which tripped the task tag check under INVARIANTS.

Write the fake response where the completion path reads it.
Copy the task tag from the request.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58946
DeltaFile
+20-6sys/dev/ufshci/ufshci_req_queue.c
+20-61 files

FreeBSD/src 3ecee93sys/dev/ufshci ufshci_req_queue.c

ufshci: reject new requests on a failed controller

A failed controller accepted new requests, but nothing ever
completed them, so the caller waited forever. The admin retry
path could also resubmit a request to a dead queue.

Reject new submits and admin retries on a failed controller.
The submit check runs under the queue lock, so it cannot race
with the queue walk in the fail path.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58948
DeltaFile
+5-2sys/dev/ufshci/ufshci_req_queue.c
+5-21 files

HardenedBSD/src e59d4ecsys/dev/ufshci ufshci_sim.c ufshci_ctrlr.c

ufshci: handle a recovery reset before the SIM attach

When the first start attempt fails early, the recovery reset
runs the start sequence again without a SIM. That pass still
looked up the WLUN, so it dereferenced a NULL SIM and panicked.

Attach the SIM whenever it does not exist yet. Also make the
WLUN lookup return NULL when there is no SIM.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58947
DeltaFile
+4-3sys/dev/ufshci/ufshci_ctrlr.c
+4-0sys/dev/ufshci/ufshci_sim.c
+8-32 files

HardenedBSD/src 3ecee93sys/dev/ufshci ufshci_req_queue.c

ufshci: reject new requests on a failed controller

A failed controller accepted new requests, but nothing ever
completed them, so the caller waited forever. The admin retry
path could also resubmit a request to a dead queue.

Reject new submits and admin retries on a failed controller.
The submit check runs under the queue lock, so it cannot race
with the queue walk in the fail path.

Reviewed by:            imp (mentor)
Sponsored by:           Samsung Electronics
Differential Revision:  https://reviews.freebsd.org/D58948
DeltaFile
+5-2sys/dev/ufshci/ufshci_req_queue.c
+5-21 files