LLVM/project 2680ba1clang/lib/CIR/Lowering/DirectToLLVM LowerToLLVM.cpp, clang/test/CIR/CodeGen new-delete-deactivation.cpp new-delete.cpp

[CIR] Match OGCG noalias and memory effects on operator new

Sane replaceable operator new calls now get return noalias and
memory(inaccessiblemem: readwrite, errnomem: write), matching classic
codegen. -fno-assume-sane-operator-new drops both.
DeltaFile
+44-44clang/test/CIR/CodeGen/new.cpp
+19-19clang/test/CIR/CodeGenCXX/new-array-init.cpp
+24-0clang/test/CIR/CodeGen/operator-new-noalias.cpp
+22-0clang/lib/CIR/Lowering/DirectToLLVM/LowerToLLVM.cpp
+8-8clang/test/CIR/CodeGen/new-delete.cpp
+6-6clang/test/CIR/CodeGen/new-delete-deactivation.cpp
+123-776 files not shown
+151-8912 files

FreeBSD/ports 815eb35www/chawan Makefile distinfo

www/chawan: Update 0.4.2 => 0.4.4

Changelogs:
- https://chawan.net/news/chawan-0-4-3.html
- https://chawan.net/news/chawan-0-4-4.html

PR:             298292
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 75ac0e1629d52044ff08a05cc9cfd1722910fba6)
DeltaFile
+3-3www/chawan/distinfo
+1-1www/chawan/Makefile
+4-42 files

LLVM/project 14aebabclang/lib/StaticAnalyzer/Core ExprEngineCXX.cpp, clang/test/Analysis dtor-array.cpp

[analyzer] Fix crash destructing element of a sugared array type

ExprEngine::makeElementRegion falls short trying to determine the
element type of an array that involves a type aliasing a static array
type.

This leads to a crash in ExprEngine::ProcessMemberDtor where it assumes
that element type is a CXXRecordDecl, while it is still a type alias to
a static array type.

getBaseElementType is the canonical way to desugar and peel off the
array dimensions.

Assisted by Claude Opus 5

--
CPP-8838
DeltaFile
+2-6clang/lib/StaticAnalyzer/Core/ExprEngineCXX.cpp
+7-0clang/test/Analysis/dtor-array.cpp
+9-62 files

FreeBSD/ports 75ac0e1www/chawan Makefile distinfo

www/chawan: Update 0.4.2 => 0.4.4

Changelogs:
- https://chawan.net/news/chawan-0-4-3.html
- https://chawan.net/news/chawan-0-4-4.html

PR:             298292
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+3-3www/chawan/distinfo
+1-1www/chawan/Makefile
+4-42 files

FreeBSD/src 1771ab2usr.sbin/nfsuserd nfsuserd.c

nfsuserd.c: Fix handling where pw_name/gr_name differ from lookup name

When an NSS backend returns a canonical pw_name or gr_name that differs from
the lookup name supplied by the NFSv4 upcall, nfsuserd stores the successful
mapping in the kernel cache under the canonical name instead of the requested
name.

This causes the retry lookup performed by nfsv4_strtouid() or
nfsv4_strtogid() to miss the newly inserted cache entry, resulting in the
default UID/GID being returned although the NSS lookup itself succeeded.

PR:     296753
Reviewed by:    rmacklem
Tested by:      Emanuel Helms <emanuel at nfv.cc>
MFC after:      2 weeks
DeltaFile
+4-2usr.sbin/nfsuserd/nfsuserd.c
+4-21 files

LLVM/project 4a41d7fclang/lib/CIR/CodeGen CIRGenCall.cpp, clang/test/CIR/CodeGen restrict-noalias.c

[CIR] Add noalias on malloc-like function returns

Mirror classic RestrictAttr handling so __attribute__((malloc)) and
__declspec(restrict) stamp llvm.noalias on the return, matching OGCG.
DeltaFile
+59-3clang/test/CIR/CodeGen/restrict-noalias.c
+9-3clang/lib/CIR/CodeGen/CIRGenCall.cpp
+68-62 files

FreeBSD/ports 12ee770security/gost-engine distinfo.openssl30 distinfo, security/gost-engine/files pkg-message.in

security/gost-engine: update

openssl111 has gone from Ports and we have no supported
FreeBSD versions having it in base, so drop 1.1.x support here too.

Update the code upto latest commit targeting OpenSSL 3.0.
Also, this makes it compatible with CMake 4.

Reported by:    arrowd
Tested by:      arrowd
DeltaFile
+23-41security/gost-engine/Makefile
+0-16security/gost-engine/pkg-plist-openssl30
+9-2security/gost-engine/pkg-plist
+5-3security/gost-engine/distinfo
+0-5security/gost-engine/distinfo.openssl30
+2-0security/gost-engine/files/pkg-message.in
+39-676 files

LLVM/project d42b6eelibc/test/src/__support tlsf_table_test.cpp

fix test
DeltaFile
+4-5libc/test/src/__support/tlsf_table_test.cpp
+4-51 files

LLVM/project a4dd355llvm/lib/Frontend/OpenMP OMPIRBuilder.cpp, mlir/test/Target/LLVMIR openmp-reduction-debug-loc.mlir

[OMPIRBuilder] Restore the debug location after the reduction alloca (#221253)

`createReductions` emits the array of type-erased pointers to the
private reduction values in the alloca block, which means leaving the
current insertion point and coming back. The insertion point is
re-established but the debug location is not. Everything emitted
afterwards like the `__kmpc_reduce` and the matching __kmpc_end_reduce
inherits whatever the terminator happened to carry, which is usually
nothing. This could result in a verifier error if program is linked with
openmp runtime that has debug information.

Fix it by restoring the debug location along with the InsertPoint.
DeltaFile
+56-0mlir/test/Target/LLVMIR/openmp-reduction-debug-loc.mlir
+3-0llvm/lib/Frontend/OpenMP/OMPIRBuilder.cpp
+59-02 files

FreeBSD/src 8ffe241sys/compat/linuxkpi/common/src linux_compat.c linux_page.c

linuxkpi: Fix assertion in `lkpi_vmf_insert_pfn_prot_locked()`

Before this change, the assertion would not catch a page index matching
the end address, even though the end address of a mapping is outside of
that mapping.

While here, add another assertion to catch page indexes outside of the
expected range earlier.

Also, pagefaulting an address outside of the mapping range should return
`VM_FAULT_SIGBUS` instead of panicing.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58194
DeltaFile
+4-1sys/compat/linuxkpi/common/src/linux_page.c
+2-0sys/compat/linuxkpi/common/src/linux_compat.c
+6-12 files

FreeBSD/ports 7c2e7dcsysutils/lsd Makefile

sysutils/lsd: Adopt port

While here:
- Seperate DEPENDS field from USES field (pet portlint).
- Remove increment from LIB_DEPENDS.
- Ignore failing tests.

PR:             296864
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+8-3sysutils/lsd/Makefile
+8-31 files

LLVM/project 0d98376libc/src/__support tlsf_table.h

[libc] default NUM_TABLE_ENTRIES to a fixed value of 3

6 (192 entries) is too large for 32-bit devices and can cause shift overflow.
DeltaFile
+1-1libc/src/__support/tlsf_table.h
+1-11 files

FreeBSD/ports 48110e1benchmarks/ipc-bench Makefile

benchmarks/ipc-bench: Fix building with CMake 4

Approved by:    portmgr (fixit blanket)
DeltaFile
+2-0benchmarks/ipc-bench/Makefile
+2-01 files

NetBSD/pkgsrc-wip f364b05openjdk25 distinfo bootstrap.mk

openjdk25: add NetBSD-*-i386
DeltaFile
+9-1openjdk25/bootstrap.mk
+3-0openjdk25/distinfo
+12-12 files

NextBSD/src 3332c9e. build.sh

rpi5: stop enabling the firmware-KMS overlay

nextbsd-fkms brings up the firmware-KMS node, which VideoCoreKMS.kext binds.
That driver cannot program a plane on 2712 -- the firmware does not service
SET_PLANE (nextbsd-kernel-extensions#48, measured) -- so it has no hardware
cursor and no path to one.

VideoCore6KMS.kext programs the HVS, pixelvalves and HDMI PHY directly and does
not need that node. The two must never both be loaded, because they drive the
same display, so leaving the node disabled removes the way to get that wrong.

Verified on a Pi 500+ with the overlay disabled: VideoCore6KMS binds, EDID
reads over the firmware mailbox with no DDC adapter, the connector reports the
attached panel by name, and a modeset at its native 2560x1440 at 60 puts an image
on screen with no errors. Confirmed twice, once observed directly on the panel.

hdmi_force_hotplug=1 is deliberately left alone. Removing it was tested and
breaks the display outright: bcm2835_mbox_fb_init fails with err=5, no
framebuffer is allocated and the EDID mailbox errors, on both HDMI ports. See

    [6 lines not shown]
DeltaFile
+13-10build.sh
+13-101 files

FreeBSD/ports 14d9e43chinese/fcitx-libpinyin pkg-plist Makefile

chinese/fcitx-libpinyin: Drop support for Qt5

Qt5 option requires deprecated WebEngine.

PR:             298172
Approved by:    maintainer

(cherry picked from commit 4a288edb4fd6b6f3b53d89beb9772259811e0fe7)
DeltaFile
+2-18chinese/fcitx-libpinyin/Makefile
+0-1chinese/fcitx-libpinyin/pkg-plist
+2-192 files

FreeBSD/ports b558e3fnet/libslirp Makefile distinfo

net/libslirp: Update to 4.9.4
DeltaFile
+3-3net/libslirp/distinfo
+1-1net/libslirp/Makefile
+4-42 files

FreeBSD/ports 4a288edchinese/fcitx-libpinyin pkg-plist Makefile

chinese/fcitx-libpinyin: Drop support for Qt5

Qt5 option requires deprecated WebEngine.

PR:             298172
Approved by:    maintainer
DeltaFile
+2-18chinese/fcitx-libpinyin/Makefile
+0-1chinese/fcitx-libpinyin/pkg-plist
+2-192 files

FreeBSD/ports 4f2a492astro/traccar Makefile distinfo

astro/traccar: upgrade to 6.15.3
DeltaFile
+424-409astro/traccar/pkg-plist
+3-3astro/traccar/distinfo
+1-1astro/traccar/Makefile
+428-4133 files

FreeBSD/ports a4c421cMk/Uses xorg-cat.mk, x11/xcb-proto Makefile distinfo

Mk/Uses/xorg-cat.mk: Resurrect CATEGORIES=proto and switch EXTRACT_SUFX to xz

Resurrect CATEGORIES=proto to simplify the port's Makefile.
Remove experimental from the meson's comment, as some ports have fully
transitioned to building with Meson.
Upstream has switched from bz2 to xz, so update EXTRACT_SUFX.

PR:             298092
Approved by:    x11 (arrowd)
Approved by:    fluffy (mentor)
DeltaFile
+8-5x11/xf86dga/Makefile
+7-3Mk/Uses/xorg-cat.mk
+1-5x11/xorgproto/Makefile
+3-3x11/xorgproto/distinfo
+3-3x11/xcb-proto/distinfo
+1-4x11/xcb-proto/Makefile
+23-238 files not shown
+32-4414 files

HardenedBSD/src 4f614a0share/man/man4 hardening.4

Merge remote-tracking branch 'rad/patches/768b925b5853b048ea87d47fb8c9953585a73d42' into hardened/current/master
DeltaFile
+2-2share/man/man4/hardening.4
+2-21 files

FreeBSD/ports 91a365bdevel/hyperscan/files patch-CMakeLists.txt

devel/hyperscan: Fix building with CMake 4

Approved by:    portmgr (fixit blanket)
DeltaFile
+6-0devel/hyperscan/files/patch-CMakeLists.txt
+6-01 files

FreeBSD/src 9872af2usr.sbin/gstat gstat.c

gstat: Set errno = 0 before strtoul

The strtoul function sets errno on error, but does not clear it on
success; when using strtoul and checking errno (as one should) for
ERANGE / EINVAL afterwards, it's important to zero errno first.

While here, remove a dead store.

Reviewed by:    phk
Fixes:  4fe8c1b67be0 ("Add error and range checking ... ")
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D59270

(cherry picked from commit 6ddb10cf6b7f870d749e96d2ae55976b18896f54)
DeltaFile
+1-1usr.sbin/gstat/gstat.c
+1-11 files

FreeBSD/ports 458dbcfsysutils/sylve Makefile distinfo

sysutils/sylve: Update to 0.3.1

Changelog:      https://github.com/AlchemillaHQ/Sylve/releases/tag/v0.3.1
Sponsored by:   The FreeBSD Foundation

Differential Revision:  https://reviews.freebsd.org/D59480
DeltaFile
+7-7sysutils/sylve/distinfo
+1-2sysutils/sylve/Makefile
+8-92 files

FreeBSD/src bf95db1usr.sbin/gstat gstat.c

gstat: Set errno = 0 before strtoul

The strtoul function sets errno on error, but does not clear it on
success; when using strtoul and checking errno (as one should) for
ERANGE / EINVAL afterwards, it's important to zero errno first.

While here, remove a dead store.

Reviewed by:    phk
Fixes:  4fe8c1b67be0 ("Add error and range checking ... ")
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D59270

(cherry picked from commit 6ddb10cf6b7f870d749e96d2ae55976b18896f54)
DeltaFile
+1-1usr.sbin/gstat/gstat.c
+1-11 files

FreeBSD/src b712bb8sys/netinet tcp_subr.c tcp_usrreq.c

tcp: fix TCPS_CLOSED state underleak in syncache_socket()

The syncache entry holds one TCPS_SYN_RECEIVED count that normally is
transferred to the the newborn tp.  Upon failure syncache_socket() shall
not use TCPSTATES_INC/TCPSTATES_DEC (see 5050df3f4aa4 why).  But when
syncache_socket() fails in_pcbconnect(), it calls tcp_discardcb() to free
resources that were just allocated by tcp_newtcpcb() and this
tcp_discardcb() would do TCPSTATES_DEC(tp->t_state).  The t_state is
TCPS_CLOSED at this point.

Make tcp_discardcb() symmetrical to tcp_newtcpcb() - not responsible for
the TCPSTATES.  Make the caller responsible for state count book keeping.

Reviewed by:            tuexen
Fixes:                  3703e1a73e0e0367c04f47f793e46495e46e647b
Differential Revision:  https://reviews.freebsd.org/D59325
DeltaFile
+0-1sys/netinet/tcp_subr.c
+1-0sys/netinet/tcp_usrreq.c
+1-12 files

LLVM/project f9a8decllvm/lib/Target/RISCV RISCVISelLowering.cpp, llvm/test/CodeGen/RISCV and-negpow2-cmp.ll

[RISCV] Fix infinite DAGCombine loop with SETCC and SIGN_EXTEND_INREG (#221593)

We generalized (X & -(1 << C1) & 0xffffffff) == C2 << C1 using `sraiw`.
The combine generates a `SIGN_EXTEND_INREG` when simplifying.

However, when C1 is 0 and the sign bit (bit 31) of X is already known to
be zero, `DAGCombiner` sees that `SIGN_EXTEND_INREG` is semantically
equivalent to `AND X, 0xFFFFFFFF` (zext). Because `DAGCombiner`
considers `AND` to be more canonical than `SIGN_EXTEND_INREG` in this
context, it immediately reverts the node back to `AND`.

This caused an infinite DAGCombine loop. This patch disables the folding
when the C1 is zero. That case is covered by a later combine that already
checks if bit 31 is known to be zero.

Fixes: https://github.com/llvm/llvm-project/issues/221521
DeltaFile
+34-0llvm/test/CodeGen/RISCV/and-negpow2-cmp.ll
+1-1llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+35-12 files

FreeBSD/ports 799b961security/pkcs11-tools distinfo Makefile

security/pkcs11-tools: Update 3.0.0 => 3.1.0

Port Changes:
- Use distribution tarball rather than pure source code
  for prebuilt manpages instead of depending on Pandoc.

Changelog:
https://github.com/Mastercard/pkcs11-tools/blob/v3.1.0/CHANGELOG.md

PR:             297826
Approved by:    osa, vvd (Mentors, implicit)
Co-authored-by: Yusuf Yaman <nxjoseph at FreeBSD.org>
DeltaFile
+37-1security/pkcs11-tools/pkg-plist
+10-10security/pkcs11-tools/Makefile
+3-3security/pkcs11-tools/distinfo
+50-143 files

NetBSD/pkgsrc s7aLVH3doc TODO CHANGES-2026

   doc: Updated textproc/rumdl to 0.2.68
VersionDeltaFile
1.27871+1-2doc/TODO
1.5920+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc Ocdakz5textproc/rumdl Makefile cargo-depends.mk

   textproc/rumdl: update to 0.2.68

   v0.2.68
   Fixed

       MDX: recognize Markdown links and images inside JSX elements, including generated reference tables, without requiring blank lines. This removes false MD091 warnings and lets normal link rules check the content. JavaScript expressions, JSX attributes, comments, and code are excluded, and link fixes preserve source labels and positions (#801).

   Performance

       Reduce regex locking and redundant rule work.
       Precompute proper-name lookups and streamline regex caching.

   v0.2.67
   Fixed

       code-block-tools: survive a tool that exits without reading its input (a3f2b15)
       MD042: do not report an image with an unparseable destination as an empty link (600236e)
       code-block-tools: report missing tool binaries instead of passing silently (fd83c4b)
       code-block-tools: report tool failures from the format path (4f92370)

    [91 lines not shown]
VersionDeltaFile
1.54+115-7textproc/rumdl/distinfo
1.22+37-1textproc/rumdl/cargo-depends.mk
1.56+2-2textproc/rumdl/Makefile
+154-103 files