clang/AMDGPU: Mark more capability target features read-only
Really all amdgpu subtarget features should be read-only, except
for a handful of legitimately configurable modes which should be moved
out of subtarget features. Add a few special cases here which will help
unblock progressing towards using the new generated feature bitset.
security/pam_ssh_agent_auth: Deprecate
This PAM module is abandonware: no code updates for 8+ years, no new
releases for 6+ years.
See security/pam_rssh or security/pam_ssh_agent for alternatives with
very similar functionality.
ssecurity/pam_ssh_agent: New port
pam_ssh_agent is a PAM module for authenticating using ssh-agent.
A PAM authentication module determining the identity of a user based
on a signature request and response sent via the ssh-agent protocol to
a potentially remote ssh-agent.
This project is a re-implementation of the pam_ssh_agent_auth module
but does not share any code with that project. We are pretty close to
covering all the features of the original implementation, along with
some additional features such as authentication using SSH
Certificates.
See also: security/pam_rssh security/pam_ssh_agent_auth
RuntimeLibcalls: Only provide fp128 long double libcalls when long double is fp128
The l-suffixed long double math functions (e.g, acosl, sqrtl, ...) are fp128 only
when the target's long double is fp128. The default set provided them on every
target that was not x87 or ppc_fp128, so targets using double as long
double wrongly reported the fp128 l-suffixed functions.
Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
[lldb] Remove duplicate declarations after merge (#214949)
I'm not sure why Git decided to add two duplicate declarations when
merging #212015, but this removes the duplicate ones.
iflib: Add sysctl stat for TX watchdog reset events
iflib counts resets initiated by its transmit watchdog in 69c3e0de01c1.
Export the counter in the per-device iflib sysctl tree so every
driver provides the diagnostic without a driver callback or duplicate
storage.
A watchdog reset does not establish how many packets failed. It can
recover a hardware stall involving several queued packets or a missed
completion involving no packet loss. Stop adding one output error per
watchdog event in em(4), igb(4), and igc(4).
Remove the redundant driver counters and move the diagnostic to
dev.<driver>.<unit>.iflib.tx_watchdog_events.
MFC after: 1 month
Relnotes: yes
[lldb] Allow multiple ABI runtimes for C++ (#212015)
This allows `CPPLanguageRuntime` to contain more than one ABI runtime.
For dynamic types, we ask each runtime if it knows how to deal with a
vtable symbol. For exception breakpoints, we will create all
breakpoints. Note that the MS ABI will only be added on Windows targets.
So the MS ABI will not be added to `m_abi_runtimes` on other targets.
[clang][CIR][docs] Fix invalid MyST toctree 'numbered' option (#213898)
Similar to #207217
The RST-to-Markdown migration (#206181) converted the RST flag
`:numbered:` into `:numbered: true`.
MyST parses the toctree `numbered` option as `int_or_nothing`, so the
string `true` fails with:
```
'toctree': Invalid option value for 'numbered': true:
invalid literal for int() with base 10: 'true'
```
This breaks the `-W` (warnings-as-errors) `docs-clang-html` build. Make
`numbered` a valueless flag, which MyST accepts (equivalent to the
original RST behavior of numbering all levels).
net-im/mastodon: update to 4.6.4 security release
Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.6.4
Notably, security fixes to address the following issues:
- Denial of Service through insufficient authentication of
statistics endpoints.
- Personally-identifying information disclosure due to incorrect
access control validation.
- SSRF Protection Bypass via IPv4-compatible IPv6 Addresses.
PR: 297125
Approved by: Scott Kenney <sak at codered.rmta.org> (maintainer)
Security: GHSA-hx34-2pfw-2qfj
Security: GHSA-7jvv-fhmg-wpfw
Security: GHSA-vwhj-3g83-v276
[lldb] Move dynamic type cache to common ABI runtime (#212014)
Both the Itanium and the MS ABI want some cache for dynamic types. This
moves the functionality from the Itanium ABI to the base class.
pfsync: handle large MTU pfsync interfaces
pfsync packets were allocated with m_get2(), which can't return packets
larger than MJUMPAGESIZE. As a result 9k MTU pfsync interfaces simply didn't work.
Use m_get3(), which can allocate sufficiently large mbufs.
Extend the pfsync:bulk test case to provoke this problem.
PR: 297307
MFC after: 2 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
