HardenedBSD/src 81207ddsys/kern sys_process.c

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-7sys/kern/sys_process.c
+0-71 files

HardenedBSD/src f35224dlib/libsys pdfork.2, sys/kern sys_procdesc.c

Merge remote-tracking branch 'rad/freebsd/15-stable/main' into hardened/15-stable/main

Conflicts:
        sys/kern/sys_process.c (unresolved)
DeltaFile
+556-0tests/sys/kern/procdesc.c
+396-114sys/kern/sys_procdesc.c
+194-5lib/libsys/pdfork.2
+51-99tests/sys/capsicum/procdesc.cc
+4-144tests/sys/capsicum/capsicum.h
+1-144tests/sys/capsicum/syscalls.h
+1,202-50664 files not shown
+1,805-1,30170 files

NetBSD/src xIeBXO5sys/ddb db_extern.h db_command.c, usr.sbin/crash crash.c

   ddb(4), crash(8): Make `show all locks' work without LOCKDEBUG.

   Any lwp currently waiting for a _contended_ lock will now record a
   pointer to that lock in struct lwp::l_ld_wanted, even without
   LOCKDEBUG.  We can't tell who holds shared locks or spin locks, but we
   can at least tell what lock a thread is waiting for when it's spinning
   for a spin lock, and generally present the graph of current lock
   dependencies reasonably well this way.

   PR kern/60030: ddb/crash: show all locks without LOCKDEBUG
VersionDeltaFile
1.194+98-4sys/ddb/db_command.c
1.18+8-3usr.sbin/crash/crash.c
1.18+6-1sys/ddb/db_extern.h
+112-83 files

NetBSD/src B4McYjpsys/external/bsd/drm2/linux linux_rwsem.c linux_ww_mutex.c, sys/kern kern_lock.c kern_rwlock.c

   kernel: Track what lock each lwp is waiting for without LOCKDEBUG.

   This is reasonably cheap -- one extra pointer on the stack, couple
   extra stores when _waiting_ (spinning or sleeping) for a _contended_
   lock -- and doesn't change the kernel ABI.  Will enable us to get
   diagnostics from crash dumps when, e.g., there's a softint deadlock
   tripping a heartbeat panic.

   PR kern/60030: ddb/crash: show all locks without LOCKDEBUG
VersionDeltaFile
1.17+36-32sys/external/bsd/drm2/linux/linux_ww_mutex.c
1.113+22-20sys/kern/kern_mutex.c
1.23+30-11sys/sys/lockdebug.h
1.77+17-15sys/kern/kern_rwlock.c
1.5+18-14sys/external/bsd/drm2/linux/linux_rwsem.c
1.198+6-8sys/kern/kern_lock.c
+129-1006 files

NetBSD/pkgsrc E87wbyctextproc/libxml2 Makefile.common distinfo

   Pullup ticket #7237 - requested by wiz
   textproc/libxml2: Security fix

   Revisions pulled up:
   - textproc/libxml2/Makefile.common                              1.32
   - textproc/libxml2/distinfo                                     1.158

   ---
      Module Name:      pkgsrc
      Committed By:     wiz
      Date:             Sat Aug 15 02:24:28 UTC 2026

      Modified Files:
        pkgsrc/textproc/libxml2: Makefile.common distinfo

      Log Message:
      libxml2: update to 2.15.3.

      From Showta Ishizaki in PR 60591.

    [60 lines not shown]
VersionDeltaFile
1.157.4.1+4-4textproc/libxml2/distinfo
1.31.4.1+2-2textproc/libxml2/Makefile.common
+6-62 files

OpenBSD/ports olyl7C5audio/libopenmpt Makefile distinfo

   Update libopenmpt to 0.8.8.
VersionDeltaFile
1.52+2-2audio/libopenmpt/distinfo
1.55+1-1audio/libopenmpt/Makefile
+3-32 files

NetBSD/pkgsrc N3g3iPqwww/typo3-13 Makefile distinfo

   Pullup ticket #7235 - requested by taca
   www/typo3-13: Security fix

   Revisions pulled up:
   - www/typo3-13/Makefile                                         1.15-1.17
   - www/typo3-13/PLIST                                            1.10-1.11
   - www/typo3-13/distinfo                                         1.14-1.15

   ---
      Module Name:      pkgsrc
      Committed By:     wen
      Date:             Fri Jul 31 01:18:52 UTC 2026

      Modified Files:
        pkgsrc/www/typo3-13: Makefile PLIST distinfo

      Log Message:
      Update to 13.4.33


    [103 lines not shown]
VersionDeltaFile
1.9.2.1+39-2www/typo3-13/PLIST
1.13.2.1+4-4www/typo3-13/distinfo
1.14.2.1+2-2www/typo3-13/Makefile
+45-83 files

FreeBSD/src cce53d1sys/arm64/linux linux_emul_md.c, sys/compat/linux linux_emul.h

linux: unbreak arm64 linux_emul_md.c after pkey syscalls

linux_emul.h uses struct image_args without a file-scope forward
declaration.  The new arm64 (and i386) stubs include that header
without imgact.h first, which fails the build under -Werror.
Include it the same way linux_pkru.c already does, and declare the
type next to struct image_params so the header is self-contained.

Reported by:    tuexen
Fixes:          bdb561843e86
MFC after:      1 month
DeltaFile
+1-0sys/i386/linux/linux_emul_md.c
+1-0sys/compat/linux/linux_emul.h
+1-0sys/arm64/linux/linux_emul_md.c
+3-03 files

NetBSD/pkgsrc OSVOqdhwww/wordpress Makefile distinfo

   Pullup ticket #7233 - requested by taca
   www/wordpress: Security fix

   Revisions pulled up:
   - www/wordpress/Makefile                                        1.120-1.122
   - www/wordpress/PLIST                                           1.58
   - www/wordpress/distinfo                                        1.101-1.103

   ---
      Module Name:      pkgsrc
      Committed By:     wen
      Date:             Thu Jul 30 23:12:09 UTC 2026

      Modified Files:
        pkgsrc/www/wordpress: Makefile PLIST distinfo

      Log Message:
      Update to 7.0.2


    [85 lines not shown]
VersionDeltaFile
1.57.4.1+650-54www/wordpress/PLIST
1.99.2.2+3-3www/wordpress/distinfo
1.118.2.2+1-1www/wordpress/Makefile
+654-583 files

NetBSD/pkgsrc QxIUPcEwww/ruby-rails-html-sanitizer PLIST Makefile

   Pullup ticket #7232 - requested by taca
   www/ruby-rails-html-sanitizer: Security fix

   Revisions pulled up:
   - www/ruby-rails-html-sanitizer/Makefile                        1.12
   - www/ruby-rails-html-sanitizer/PLIST                           1.5
   - www/ruby-rails-html-sanitizer/distinfo                        1.14

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Wed Aug 12 05:22:49 UTC 2026

      Modified Files:
        pkgsrc/www/ruby-rails-html-sanitizer: Makefile PLIST distinfo

      Log Message:
      www/ruby-rails-html-sanitizer: update to 1.7.1


    [13 lines not shown]
VersionDeltaFile
1.13.2.1+4-4www/ruby-rails-html-sanitizer/distinfo
1.4.2.1+1-5www/ruby-rails-html-sanitizer/PLIST
1.11.2.1+3-3www/ruby-rails-html-sanitizer/Makefile
+8-123 files

NetBSD/pkgsrc 6SrGIq0textproc/expat builtin.mk Makefile

   Pullup ticket #7231 - requested by taca
   textproc/expat: Security fix

   Revisions pulled up:
   - textproc/expat/Makefile                                       1.67
   - textproc/expat/builtin.mk                                     1.28
   - textproc/expat/distinfo                                       1.61

   ---
      Module Name:      pkgsrc
      Committed By:     wiz
      Date:             Tue Aug 11 16:18:02 UTC 2026

      Modified Files:
        pkgsrc/textproc/expat: Makefile builtin.mk distinfo

      Log Message:
      expat: update to 2.8.3.


    [51 lines not shown]
VersionDeltaFile
1.59.2.2+4-4textproc/expat/distinfo
1.65.2.2+2-2textproc/expat/Makefile
1.27.4.1+2-1textproc/expat/builtin.mk
+8-73 files

NetBSD/pkgsrc v755H9Hwww/drupal11 distinfo Makefile

   Pullup ticket #7230 - requested by taca
   www/drupal11: Security fix

   Revisions pulled up:
   - www/drupal11/Makefile                                         1.9-1.11
   - www/drupal11/PLIST                                            1.5
   - www/drupal11/distinfo                                         1.5

   ---
      Module Name:      pkgsrc
      Committed By:     wen
      Date:             Fri Jul 31 10:46:31 UTC 2026

      Modified Files:
        pkgsrc/www/drupal11: Makefile PLIST distinfo

      Log Message:
      Update to 11.4.4


    [34 lines not shown]
VersionDeltaFile
1.4.6.1+2,716-509www/drupal11/PLIST
1.8.6.1+10-7www/drupal11/Makefile
1.4.6.1+4-4www/drupal11/distinfo
+2,730-5203 files

NetBSD/src i8eJGSBbin/pwd pwd.1

   "if PWD references the current directory, then PWD is assumed to be the
   name of the current directory" is tautologically confusing.

   Just state that for '-L' $PWD is _printed_ (under the right circumstances).
VersionDeltaFile
1.28+3-3bin/pwd/pwd.1
+3-31 files

NetBSD/pkgsrc DwFgROamail/postfix Makefile.common distinfo

   Pullup ticket #7228 - requested by taca
   mail/postfix: Security fix

   Revisions pulled up:
   - mail/postfix/Makefile.common                                  1.68
   - mail/postfix/distinfo                                         1.227

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Tue Aug 11 15:15:50 UTC 2026

      Modified Files:
        pkgsrc/mail/postfix: Makefile.common distinfo

      Log Message:
      mail/postfix: update to 3.11.6

      This release addresses medium-impact problems that need to be fixed

    [124 lines not shown]
VersionDeltaFile
1.224.2.2+3-3mail/postfix/distinfo
1.65.2.2+1-1mail/postfix/Makefile.common
+4-42 files

NetBSD/pkgsrc-wip 03bd922fresh distinfo, fresh/patches patch-crates_fresh-editor_src_app_file__explorer.rs

Patch for a panic in the file manager due to the lack of system-wide
trash in NetBSD
DeltaFile
+71-0fresh/patches/patch-crates_fresh-editor_src_app_file__explorer.rs
+1-0fresh/distinfo
+72-02 files

LLVM/project 30b0076llvm/lib/Transforms/Vectorize/SandboxVectorizer/Passes SeedCollection.cpp, llvm/test/Transforms/SandboxVectorizer/EndToEnd seed_bundle_cross_erasure.ll

[SandboxVectorizer] Fix out-of-bounds SeedBundle access on cross-bundle erasure

SeedCollection::runOnFunction() indexed a SeedBundle at
Seeds.getFirstUnusedElementIdx() (and, separately, at a hardcoded 0) without
first checking whether the bundle was already fully used.
getFirstUnusedElementIdx() returns Seeds.size() -- one past the end -- once
everything is used, so indexing there reads out of bounds.

This was always a latent bug, but -sbvec-collect-seeds=stores,loads is what
actually exposes it: store and load seeds share one erase-instruction
callback (SeedContainer::erase()), so when vectorizing a store chain erases
a load it packed as an operand, that erase also marks the same load "used"
in its *independent* LoadSeeds bundle. Store seeds are processed first, so
by the time the outer loop reaches that LoadSeeds bundle, it can already be
fully consumed -- or, since cross-bundle erasure can mark any index used
(not just sequentially from the front), have its element 0 specifically
erased while other elements remain live, which broke the hardcoded Seeds[0]
address-space lookup the same way.


    [12 lines not shown]
DeltaFile
+21-0llvm/test/Transforms/SandboxVectorizer/EndToEnd/seed_bundle_cross_erasure.ll
+5-2llvm/lib/Transforms/Vectorize/SandboxVectorizer/Passes/SeedCollection.cpp
+26-22 files

FreeBSD/src c1ff9c9lib/libc/gen fts.c, lib/libc/tests/gen fts_regress_test.c

fts: fix trailing-slash regression in fts_read after fts_children

When fts_read() descends into a directory whose children were
already prefetched by fts_children() (as ls -R does), it changed
directory using p->fts_name instead of p->fts_accpath.

With a trailing slash on a relative root path (e.g. 'dir/'),
the bare name was resolved relative to the wrong directory, so
every sibling directory after the first failed with ENOENT and
was reported as FTS_DNR.  This manifested as 'ls -lR dir/'
skipping the contents of all but the first subdirectory.

Restore the use of p->fts_accpath, matching the behavior prior
to 4bd01d6ae016.

Add a regression test that reproduces the exact conditions:
fts_children() on each directory, FTS_PHYSICAL without
FTS_NOCHDIR, and a trailing slash on the root path.


    [5 lines not shown]
DeltaFile
+58-0lib/libc/tests/gen/fts_regress_test.c
+1-1lib/libc/gen/fts.c
+59-12 files

NetBSD/pkgsrc JOtMho4security/clamav cargo-depends.mk Makefile.common, security/clamav-doc PLIST

   Pullup ticket #7227 - requested by taca
   security/clamav: Security fix

   Revisions pulled up:
   - security/clamav-doc/PLIST                                     1.15
   - security/clamav/Makefile.common                               1.32
   - security/clamav/cargo-depends.mk                              1.4
   - security/clamav/distinfo                                      1.50

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Sat Aug  8 13:24:33 UTC 2026

      Modified Files:
        pkgsrc/security/clamav: Makefile.common cargo-depends.mk distinfo
        pkgsrc/security/clamav-doc: PLIST

      Log Message:

    [81 lines not shown]
VersionDeltaFile
1.48.4.2+7-7security/clamav/distinfo
1.30.4.2+2-2security/clamav/Makefile.common
1.13.4.2+2-2security/clamav-doc/PLIST
1.2.4.2+1-1security/clamav/cargo-depends.mk
+12-124 files

FreeBSD/ports c995da1java/openjdk8 distinfo Makefile

java/openjdk8: Update to 8u502
DeltaFile
+3-3java/openjdk8/distinfo
+3-3java/openjdk8/Makefile
+6-62 files

FreeBSD/src 851af28sys/dev/ixgbe if_ix.c

ixgbe: Report the management packet drop counter

The management_pkts_drpd sysctl was wired to MNGPTC, making it an
alias of management_pkts_txd, instead of MNGPDC.

(cherry picked from commit 435cde959c8823ff38c699d1bc8655918fda57dd)
DeltaFile
+1-1sys/dev/ixgbe/if_ix.c
+1-11 files

FreeBSD/src dbb7ce7sys/dev/ixgbe if_ix.c

ixgbe: Re-enable the SFP laser during initialization

ixgbe_if_stop() disables the transmit laser on every 82599 SFP fiber
port, but the iflib initialization path did not re-enable it. Re-enable
the laser before deferred SFP module setup so interface
reinitialization cannot leave either single-speed or multispeed optics
dark.

The hardware wrapper is a no-op when laser control is unavailable. The
placement follows Intel ix-3.4.39; this version deliberately applies to
every SFP port affected by the stop path.

(cherry picked from commit 545779a99290b7b7d94dece6c096ce230be91ff9)
DeltaFile
+2-0sys/dev/ixgbe/if_ix.c
+2-01 files

FreeBSD/src eceddfbsys/dev/ixgbe if_ix.c

ixgbe: Report the management packet drop counter

The management_pkts_drpd sysctl was wired to MNGPTC, making it an
alias of management_pkts_txd, instead of MNGPDC.

(cherry picked from commit 435cde959c8823ff38c699d1bc8655918fda57dd)
DeltaFile
+1-1sys/dev/ixgbe/if_ix.c
+1-11 files

FreeBSD/src 45aac70sys/dev/ixgbe if_ix.c

ixgbe: Re-enable the SFP laser during initialization

ixgbe_if_stop() disables the transmit laser on every 82599 SFP fiber
port, but the iflib initialization path did not re-enable it. Re-enable
the laser before deferred SFP module setup so interface
reinitialization cannot leave either single-speed or multispeed optics
dark.

The hardware wrapper is a no-op when laser control is unavailable. The
placement follows Intel ix-3.4.39; this version deliberately applies to
every SFP port affected by the stop path.

(cherry picked from commit 545779a99290b7b7d94dece6c096ce230be91ff9)
DeltaFile
+2-0sys/dev/ixgbe/if_ix.c
+2-01 files

FreeBSD/src 5cd4954sys/net iflib.c

iflib: Permit SR-IOV configuration on a down interface

Drivers which remap PF queues need a stop/mutate/restart transaction
only when the interface has live queues. Permit their IOV
initialization callback while the interface is administratively down
and leave it down afterward.

This restores the standard boot-time iovctl.conf workflow and
lets other opt-in drivers configure VFs before netif brings the PF up.

(cherry picked from commit 2cf580c694f6f392531a63f01c3fb89c0244f89a)
DeltaFile
+31-0sys/net/iflib.c
+31-01 files

FreeBSD/src dc1d2c7sys/net iflib.c

iflib: Permit SR-IOV configuration on a down interface

Drivers which remap PF queues need a stop/mutate/restart transaction
only when the interface has live queues. Permit their IOV
initialization callback while the interface is administratively down
and leave it down afterward.

This restores the standard boot-time iovctl.conf workflow and
lets other opt-in drivers configure VFs before netif brings the PF up.

(cherry picked from commit 2cf580c694f6f392531a63f01c3fb89c0244f89a)
DeltaFile
+31-0sys/net/iflib.c
+31-01 files

FreeBSD/src 5f215a2sys/dev/pci pci.c

pci: Permit function-level reset of 82599 VFs

Intel 82599 supports FLR on VFs but reports FLR support only in the PF
Device Capabilities register.  The VF register therefore leaves the FLR
Capable bit clear, and pcie_flr() rejects the reset.

Intel documents the zeroed VF PCIe capability structure as erratum 35
in the 82599 Specification Update (B0=Yes; NoFix).

Add a positive FLR quirk for the 82599 VF.  Keep the capability check
for every other function, so an unknown nonconforming VF cannot make
pcie_flr() report success when its reset request was ignored.

SR-IOV requires VFs to support FLR, but a clear capability bit cannot
distinguish the 82599's misadvertisement from a VF that fails to
implement it.

(cherry picked from commit ee776a8e291cb73845a8611d3dec5a2a966106b9)
DeltaFile
+11-3sys/dev/pci/pci.c
+11-31 files

FreeBSD/src 61542deshare/man/man4 pci.4, sys/dev/pci pci.c

pci: Ignore SR-IOV VFs when tuning MPS

The VF Device Control MPS and MRRS fields are reserved and preserved.
VF transactions use the PF MPS, so a hardwired VF value must not be
used to retune the shared PCIe hierarchy.

Document the previously undocumented tuning knob and clarify why a VF
may continue to display its reserved hardwired value.

This fixes an instant crash/reboot on my Zen3 system with 82599 VFs.

(cherry picked from commit 5aab6164161db397d84e5fff88e1af1a9e405875)
DeltaFile
+12-1share/man/man4/pci.4
+7-0sys/dev/pci/pci.c
+19-12 files

FreeBSD/src 8620422sys/dev/ixgbe ixgbe.h if_ixv.c

ixv: reconcile VLAN filters through the mailbox

VLAN registration callbacks only update the software shadow, leaving
the PF unaware until a later full initialization.  Initialization then
retries each failed request in a tight loop, while skipping replay
entirely when local hardware filtering is disabled.

Send additions and removals as soon as the desired state changes,
independent of the VF local-filter capability.  Replay the desired
memberships after reset and retry a bounded batch per timer tick.  Stop
after the first failure so a silent PF can consume only one mailbox
timeout per pass, while a responsive PF can drain several requests.
Treat the retry window as a no-progress deadline: advance it when
pending work succeeds so a large backlog can drain, but leave entries
dormant after a sustained failure.

A successful mailbox request wakes a dormant backlog.  Dispatch
timer-driven retries only while iflib marks the VF running, so a stale
timer tick cannot restore PF VLAN state after the stop path resets the

    [14 lines not shown]
DeltaFile
+210-54sys/dev/ixgbe/if_ixv.c
+4-0sys/dev/ixgbe/ixgbe.h
+214-542 files

FreeBSD/src a3d02a6share/man/man4 ix.4, sys/dev/ixgbe ixgbe_sriov.h ixgbe.h

ixgbe: implement VF secondary MAC filters

The PF advertises the legacy SET_MACVLAN mailbox request but always
rejects it. The request installs secondary unicast addresses.

Allocate an owned RAR pool for VF secondary addresses, reserve low
entries for PF filters, and place VF-primary addresses at the top of
the usable RAR range. Reject address collisions and cap each VF at
three secondary filters so one guest cannot exhaust the shared table.

Clear secondary filters on VF or PF reset and on SR-IOV teardown. This
hardware can anti-spoof only the VF primary source address. Reject
secondary filters while MAC anti-spoofing is configured, so installing
them requires an explicit administrative policy choice. Report optional
filter-table allocation failure without disabling SR-IOV.

Adapt the owned-RAR allocation and reset-cleanup model from igb(4) in
a2ed165f0049 to DPDK's ixgbe SET_MACVLAN mailbox semantics.


    [3 lines not shown]
DeltaFile
+149-5sys/dev/ixgbe/if_sriov.c
+10-0sys/dev/ixgbe/ixgbe.h
+10-0share/man/man4/ix.4
+2-0sys/dev/ixgbe/ixgbe_sriov.h
+171-54 files

FreeBSD/src 2c12bf9sys/dev/ixgbe ixgbe_vf.c ixgbe.h

ixgbe: enforce VF promiscuity and multicast policy

The allow-promisc IOV property is advertised but ignored, and the PF
rejects the xcast request used by modern VFs. Negotiate mailbox APIs
1.2 and 1.3, implement pool-scoped xcast modes, and require
allow-promisc for requested all-multicast or unicast-promiscuous modes.

The VF mailbox can carry only 30 multicast hashes. When ixv has a
larger list, request the API 1.2 all-multicast xcast mode instead of
extending the legacy SET_MULTICAST message. The PF grants that fallback
only to VFs configured with allow-promisc; otherwise ixv reports that
only the first 30 addresses are active.

Reset xcast state with the VF and have ixv replay the mode implied by
its interface flags after multicast updates.

Follow DPDK's ixgbe API 1.2/1.3 xcast contract, with allow-promisc
policy adapted from igb(4) in a2ed165f0049.


    [3 lines not shown]
DeltaFile
+90-26sys/dev/ixgbe/if_sriov.c
+48-1sys/dev/ixgbe/if_ixv.c
+3-0sys/dev/ixgbe/ixgbe_sriov.h
+1-1sys/dev/ixgbe/ixgbe_vf.c
+2-0sys/dev/ixgbe/ixgbe.h
+144-285 files