LLVM/project 299bf4allvm/lib/Target/AArch64 AArch64TargetTransformInfo.h AArch64TargetTransformInfo.cpp, llvm/lib/Target/ARM ARMTargetTransformInfo.h

[AArch64][ARM] Rename Type *Val to Ty. NFC (#217718)
DeltaFile
+18-19llvm/lib/Target/AArch64/AArch64TargetTransformInfo.cpp
+5-5llvm/lib/Target/AArch64/AArch64TargetTransformInfo.h
+2-2llvm/lib/Target/ARM/ARMTargetTransformInfo.h
+25-263 files

LLVM/project c6d146bbolt/lib/Passes BinaryPasses.cpp, bolt/lib/Rewrite RewriteInstance.cpp

[BOLT] Fix code section ordering comparator (#216725)

## Summary

`RewriteInstance::getCodeSections()` used a comparator that violated
strict weak ordering:

- Distinct special sections with the same name could each compare less
than the other.
- Different cold sections could each be equivalent to an `Other` section
while remaining ordered relative to one another.

This replaces that comparator with `CodeSectionOrder`, which assigns
explicit ranks to section kinds and orders cold-section suffixes
deterministically.

## Main-branch reproduction



    [49 lines not shown]
DeltaFile
+97-44bolt/lib/Rewrite/RewriteInstance.cpp
+55-0bolt/test/X86/code-section-order-injected.s
+11-7bolt/lib/Passes/BinaryPasses.cpp
+163-513 files

OPNSense/core 92cb28asrc/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms dialogAssignment.xml, src/opnsense/mvc/app/models/OPNsense/Interfaces NetworkInterface.php NetworkInterface.xml

Interfaces: Assignments - add interface configuration settings in new assignments page. for https://github.com/opnsense/core/issues/10568 (#10740)

Refactor NetworkInterface model to reuse existing property names as much as possible, move from/to legacy logic into a custom fieldtype and store all legacy settings in a container named "pending" to ease reconfiguration and updating legacy configurations.

Skip wireless and other advanced settings for now, only implement a minimal set of validations.
DeltaFile
+423-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms/dialogAssignment.xml
+176-1src/opnsense/mvc/app/models/OPNsense/Interfaces/NetworkInterface.xml
+147-0src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes/NetworkInterfaceField.php
+116-14src/opnsense/mvc/app/models/OPNsense/Interfaces/NetworkInterface.php
+58-0src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes/GatewayField.php
+23-1src/opnsense/scripts/interfaces/apply_pending_if_changes.php
+943-163 files not shown
+981-199 files

LLVM/project cb0fb6cflang/lib/Lower/OpenMP Utils.cpp, flang/test/Lower/OpenMP default-mapper-iso-c-nested.f90 explicit-map-flat-allocatable-no-mapper.f90

[Flang][OpenMP] Stop emitting implicit mappers for allocatable derived types (and arrays of them) unconditionally (#216184)

We should not be emitting these implicit mappers at the top level if the
contents of the derived type do not require mapping of allocatables. If
we do this, we negatively impact performance with unneccessary maps, in
certain cases (array of structs) this can be quite significant.
DeltaFile
+47-0flang/test/Lower/OpenMP/default-mapper-iso-c-nested.f90
+47-0flang/test/Lower/OpenMP/explicit-map-flat-allocatable-no-mapper.f90
+6-6flang/lib/Lower/OpenMP/Utils.cpp
+100-63 files

LLVM/project f2951f7clang/docs ReleaseNotes.md, clang/lib/Sema SemaDeclCXX.cpp

[Clang][Sema] Fix crash on default argument added after a parameter pack (#217386)

Fixes #216211

The DR1344 check that runs next locates "the
first defaulted parameter" as `getParamDecl(getMinRequiredArguments())`,
which is wrong when a parameter pack comes first: the pack is skipped by
the count but still occupies a slot. The lookup lands on the pack and
`assert(NewParam->hasDefaultArg())` fails. Without assertions, the
"makes this constructor a default constructor" error is emitted pointing
at the wrong parameter.

The DR1344 check now scans for the first parameter that actually has a
default argument, so the assertion holds and the diagnostic points at
the right parameter.

LLM tools were used for this contribution.
DeltaFile
+22-0clang/test/CXX/dcl.decl/dcl.meaning/dcl.fct.default/p4.cpp
+5-2clang/lib/Sema/SemaDeclCXX.cpp
+5-0clang/docs/ReleaseNotes.md
+32-23 files

OPNSense/core 1ea6581src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms dialogConfigBuilder.xml dialogEditWireguardClient.xml, src/opnsense/mvc/app/models/OPNsense/Wireguard Client.xml

vpn/wireguard: Add readonly mode to peer generator and optionally store private key
DeltaFile
+186-71src/opnsense/mvc/app/views/OPNsense/Wireguard/general.volt
+8-2src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms/dialogConfigBuilder.xml
+10-0src/opnsense/mvc/app/controllers/OPNsense/Wireguard/forms/dialogEditWireguardClient.xml
+2-0src/opnsense/mvc/app/models/OPNsense/Wireguard/Client.xml
+206-734 files

LLVM/project d125ad5clang/lib/CodeGen CGBuiltin.cpp

Fix typo
DeltaFile
+1-1clang/lib/CodeGen/CGBuiltin.cpp
+1-11 files

HardenedBSD/src 612eb89share/examples/jails jail.xxx.conf jng, sys/dev/ice if_ice_iflib.c ice_lib.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+14-14share/examples/jails/jng
+10-10share/examples/jails/jail.xxx.conf
+10-5sys/dev/ice/ice_lib.c
+12-2sys/sys/sched.h
+9-0sys/dev/ice/if_ice_iflib.c
+3-1sys/dev/usb/wlan/if_rsu.c
+58-324 files not shown
+63-3410 files

HardenedBSD/src c900b0cshare/examples/jails jail.xxx.conf jng, sys/dev/ice if_ice_iflib.c ice_lib.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+14-14share/examples/jails/jng
+10-10share/examples/jails/jail.xxx.conf
+10-5sys/dev/ice/ice_lib.c
+12-2sys/sys/sched.h
+9-0sys/dev/ice/if_ice_iflib.c
+3-1sys/dev/usb/wlan/if_rsu.c
+58-324 files not shown
+63-3410 files

FreeNAS/freenas 74d5b1csrc/middlewared/middlewared/etc_files keepalived.conf.mako

Set unicast_src_ip for VRRP instances so IPv6 adverts are received

keepalived binds the unicast receive socket to the advert source address.
Without unicast_src_ip it uses the first address it learns on the
interface, which for IPv6 is the link-local address. The peer sends
adverts to our configured address, so they are never delivered and both
controllers become MASTER for every IPv6 VIP. IPv4 only worked because the
first learned address is normally the configured one. Set unicast_src_ip to
the address the peer is configured to send to for every instance.
DeltaFile
+12-0src/middlewared/middlewared/etc_files/keepalived.conf.mako
+12-01 files

FreeBSD/ports 9cfb6b0deskutils/podman-desktop Makefile, editors/vscode Makefile

*/*: Bump port revision after electron42 update (49ce10da799e)
DeltaFile
+1-1net-im/signal-desktop/Makefile
+1-1net-im/deltachat-desktop/Makefile
+1-1graphics/drawio/Makefile
+1-1deskutils/podman-desktop/Makefile
+1-0net-im/teams/Makefile
+1-0editors/vscode/Makefile
+6-46 files

HardenedBSD/ports 7349384devel/android-tools/files patch-vendor_adb_client_usb_libusb_device.cpp, devel/electron42/files patch-electron_shell_browser_native__window__views.cc

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-150multimedia/jellyfin-ffmpeg7/pkg-plist
+61-0security/vuxml/vuln/2026.xml
+23-23devel/electron42/files/patch-electron_shell_browser_native__window__views.cc
+8-25multimedia/jellyfin-ffmpeg7/Makefile
+31-0devel/linuxapi/Makefile
+19-11devel/android-tools/files/patch-vendor_adb_client_usb_libusb_device.cpp
+142-20967 files not shown
+392-36373 files

HardenedBSD/ports 1689928lang/quickjs-ng Makefile distinfo

lang/quickjs-ng: update: 0.16.1 -> 0.16.2

ChangeLog:      https://github.com/quickjs-ng/quickjs/compare/v0.16.1...v0.16.2

Sponsored by:   tipi.work
DeltaFile
+3-3lang/quickjs-ng/distinfo
+1-1lang/quickjs-ng/Makefile
+4-42 files

FreeBSD/ports 1689928lang/quickjs-ng Makefile distinfo

lang/quickjs-ng: update: 0.16.1 -> 0.16.2

ChangeLog:      https://github.com/quickjs-ng/quickjs/compare/v0.16.1...v0.16.2

Sponsored by:   tipi.work
DeltaFile
+3-3lang/quickjs-ng/distinfo
+1-1lang/quickjs-ng/Makefile
+4-42 files

LLVM/project 4293693clang/lib/CodeGen CGBuiltin.cpp

Hoist assert
DeltaFile
+1-1clang/lib/CodeGen/CGBuiltin.cpp
+1-11 files

HardenedBSD/ports 49ce10ddevel/electron42 distinfo, devel/electron42/files patch-ui_base_cursor_cursor__factory.cc patch-ui_base_x_x11__cursor__loader.cc

devel/electron42: Update to 42.9.3

Changelog:
- https://github.com/electron/electron/releases/tag/v42.9.1
- https://github.com/electron/electron/releases/tag/v42.9.2
- https://github.com/electron/electron/releases/tag/v42.9.3

Reported by:    GitHub (watch releases)
DeltaFile
+23-23devel/electron42/files/patch-electron_shell_browser_native__window__views.cc
+8-8devel/electron42/files/patch-electron_shell_browser_api_electron__api__web__contents.cc
+7-7devel/electron42/distinfo
+11-0devel/electron42/files/patch-ui_base_cursor_cursor__unittest.cc
+5-5devel/electron42/files/patch-ui_base_x_x11__cursor__loader.cc
+4-4devel/electron42/files/patch-ui_base_cursor_cursor__factory.cc
+58-4712 files not shown
+86-7518 files

FreeBSD/ports 49ce10ddevel/electron42 distinfo, devel/electron42/files patch-ui_base_cursor_cursor__factory.cc patch-ui_base_x_x11__cursor__loader.cc

devel/electron42: Update to 42.9.3

Changelog:
- https://github.com/electron/electron/releases/tag/v42.9.1
- https://github.com/electron/electron/releases/tag/v42.9.2
- https://github.com/electron/electron/releases/tag/v42.9.3

Reported by:    GitHub (watch releases)
DeltaFile
+23-23devel/electron42/files/patch-electron_shell_browser_native__window__views.cc
+8-8devel/electron42/files/patch-electron_shell_browser_api_electron__api__web__contents.cc
+7-7devel/electron42/distinfo
+11-0devel/electron42/files/patch-ui_base_cursor_cursor__unittest.cc
+5-5devel/electron42/files/patch-ui_base_x_x11__cursor__loader.cc
+4-4devel/electron42/files/patch-ui_base_cursor_cursor__factory.cc
+58-4712 files not shown
+86-7518 files

FreeBSD/ports f6817b0math/R-cran-acepack Makefile

math/R-cran-acepack: update 1.4.1 to 1.6.3

Submitted by: chris.longros at gmail.com
Reviewed by:  uzsolt
DeltaFile
+1-1math/R-cran-acepack/Makefile
+1-11 files

HardenedBSD/ports f6817b0math/R-cran-acepack Makefile

math/R-cran-acepack: update 1.4.1 to 1.6.3

Submitted by: chris.longros at gmail.com
Reviewed by:  uzsolt
DeltaFile
+1-1math/R-cran-acepack/Makefile
+1-11 files

FreeBSD/src bdfae0fsys/kern subr_epoch.c

epoch: Fix epoch_drain_callbacks()

This function is supposed to wait until all pending callbacks have been
executed.  This is useful in some contexts where we tear down some
context (like a VNET jail and its associated UMA zones) synchronously,
and we want to make sure that all pending asynchronous callbacks (which
may free objects to said UMA zones) have run first.

The implementation schedules a callback on each CPU and waits for them
all to run.  This assumes that, on a given CPU, callbacks are executed
in the order that they are pushed.  This assumption depends on the
implementation of epoch_call_task() and ck_epoch_poll_deferred(), and it
is not true in general.

Callbacks are pushed onto a per-CPU stack in LIFO order.
ck_epoch_poll_deferred() first pulls out the callbacks from epoch - 2,
which are always safe to execute, and in so doing reorders them such
that the oldest callback as at the top of the stack, so in this case,
epoch_call_task() will execute them in order.  However,

    [26 lines not shown]
DeltaFile
+30-20sys/kern/subr_epoch.c
+30-201 files

LLVM/project 400b052llvm/lib/Transforms/Vectorize VPlanTransforms.cpp, llvm/test/Transforms/LoopVectorize cast-induction.ll as_cast.ll

[VPlan] Sink single-scalar VPI to replicate regions (#208906)

The newly-introduced scalar-casts are sunk. The patch also generalizes
the existing special cases correctly using
vputils::doesGeneratePerAllLanes.
DeltaFile
+11-10llvm/lib/Transforms/Vectorize/VPlanTransforms.cpp
+8-8llvm/test/Transforms/LoopVectorize/as_cast.ll
+2-2llvm/test/Transforms/LoopVectorize/cast-induction.ll
+21-203 files

FreeBSD/src eddae79share/man/man4 ctl.4

ctl.4: Document the assumption that CTL HA runs only on trusted networks

The CTL High Availablity clustering feature allows a pair of hosts to
implement transparent failover.  The implementation uses a TCP
connection to exchange messages.  There is no authentication mechanism
and the protocol itself embeds kernel pointers in the messages exchanged
between HA hosts.  This property (of CTL_MSG_DATAMOVE messages
specifically), as well as insufficient validation of inbound messages,
mean that anyone able to access a CTL HA port is able to remotely
execute code on that host.

Provide a warning to this effect in the CTL man page.

Approved by:    re (cperciva)
Reported by:    Ryan of Calif.io
Reviewed by:    ziaee, ken, mav
MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58622

    [3 lines not shown]
DeltaFile
+6-1share/man/man4/ctl.4
+6-11 files

FreeBSD/src 10dd09cusr.sbin/ppp lcp.c

ppp: Reject invalid endpoint discriminator options

Per RFC1717 section 5.1.3, the option length must be at least three.
Processing an undersized option would trigger a large out-of-bounds
write.

Approved by:    re (cperciva)
PR:             271910
Reported by:    Robert Morris
Reported by:    Décio Brandão (0xDBJ)
Reviewed by:    emaste
MFC after:      1 week
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58554

(cherry picked from commit b9d07a4308226b683b64827e0aaed1180e0da996)
(cherry picked from commit 30b4bdd451ad4ec2470f9a378bd62e948a85ef81)
DeltaFile
+6-0usr.sbin/ppp/lcp.c
+6-01 files

FreeBSD/src 281fb7dusr.sbin/ppp mp.c

ppp: Avoid overflow when formatting endpoint discriminator options

Each byte of the address is represented by a pair of characters, so we
should be multiplying len by 2 when figuring out how much buffer space
we have.  Previously, a sufficiently large option could cause an
overflow of the global "result" buffer.

Approved by:    re (cperciva)
Reported by:    Joshua Rogers <joshua at joshua.hu>
Tested by:      Décio Brandão (0xDBJ)
MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58555

(cherry picked from commit e004ff15f87e6aa8f2aa13cd5600ae13457b95f1)
(cherry picked from commit 607c41d8f869243db275a6b1bd6cc66bf58d0f36)
DeltaFile
+6-6usr.sbin/ppp/mp.c
+6-61 files

FreeBSD/src 43bbea2sys/kern kern_fork.c

proc: Copy the p_reapsubtree field explicitly during fork

p_reapsubtree lives in the p_startcopy/p_endcopy block of struct proc,
which is copied during fork without any synchronization.  However, the
field is not stable except when the proctree lock is held, and indeed
may change if p1's reaper exits or explicitly releases its reaper
status.  This state change can race with fork() and leave the child with
an incorrect p_reapsubtree field.

Close the race: explicitly copy the field under the proctree lock during
fork.

Approved by:    re (cperciva)
Reported by:    syzkaller
Reviewed by:    kib
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58482


    [2 lines not shown]
DeltaFile
+7-0sys/kern/kern_fork.c
+7-01 files

FreeBSD/src dde5572sys/netinet6 raw_ip6.c

rawip: Fix handling of checksums in rip6_input()

A v6 raw socket may ask the kernel to validate the checksum of an
inbound packet.  If it does, and the validation fails, we discard the
packet, but this isn't really right: other raw sockets may wish to
receive a copy of the packet anyway.

Rework checksum handling to address this problem, and use a flag to
avoid computing the checksum more than once for a given packet.

Approved by:    re (cperciva)
Fixes:          de2d47842e880281 ("SMR protection for inpcbs")
Reviewed by:    pouria, glebius
Reported by:    Yunzhi Ke
MFC after:      1 week
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58559

(cherry picked from commit 196874ce2e97e3e6425493b1d501e716b356bc36)
(cherry picked from commit 1fe3a2897b4ad7a9b9128efd6ec0c24b371bf5bd)
DeltaFile
+15-11sys/netinet6/raw_ip6.c
+15-111 files

FreeBSD/src 9c5f813sys/netinet in_mcast.c, sys/netinet6 in6_mcast.c

in_mcast: Fix uninitialized variable usage in inm_merge()

When the first loop in inm_merge() hits an error, generally because it
hit some limit on the number of source filters for a multicast group,
inm_merge() tries to atomically roll back changes to the group source
filter list.

To roll back, it iterates over the global source filter list for the
multicast group, starting at the last entry that we updated ("nims").
But, if we have not yet updated any entries, this variable is
uninitialized.  Initialize it to NULL, so that RB_FOREACH_REVERSE_FROM
doesn't visit any source filters in this case.

All of the above applies to the v6 case.

Approved by:    re (cperciva)
Reported by:    Daniel Birtwhistle
MFC after:      1 week
Sponsored by:   The FreeBSD Foundation

    [3 lines not shown]
DeltaFile
+1-0sys/netinet6/in6_mcast.c
+1-0sys/netinet/in_mcast.c
+2-02 files

LLVM/project 01b363cclang/lib/CodeGen CGOpenMPRuntime.cpp, llvm/include/llvm/Frontend/OpenMP OMPIRBuilder.h

[llvm][OpenMP] Use vector for number of threads and teams (#211453)

Changes necessary to support the `dims` modifier (OpenMP 6.1) in future PRs.
DeltaFile
+13-7llvm/unittests/Frontend/OpenMPIRBuilderTest.cpp
+11-8llvm/lib/Frontend/OpenMP/OMPIRBuilder.cpp
+6-3clang/lib/CodeGen/CGOpenMPRuntime.cpp
+4-4mlir/lib/Target/LLVMIR/Dialect/OpenMP/OpenMPToLLVMIRTranslation.cpp
+4-4llvm/include/llvm/Frontend/OpenMP/OMPIRBuilder.h
+38-265 files

LLVM/project 4e1eac7clang/lib/Lex PPDirectives.cpp, clang/test/Modules repeated-include-missing-submodule.c

[clang][lex] Fix repeated `#import` of a header missing from umbrella (#217691)

The PR https://github.com/llvm/llvm-project/pull/216704 fixed repeated
`#import` of a header that belongs to a module in textual builds. One
omission was not setting the boolean we now use to make the decision to
import or skip when we tried importing a submodule but figured out it's
not covered by the umbrella. This PR fixes that.

rdar://185417139
DeltaFile
+18-0clang/test/Modules/repeated-include-missing-submodule.c
+1-0clang/lib/Lex/PPDirectives.cpp
+19-02 files

HardenedBSD/ports 47a6449net-mgmt/icinga2 Makefile pkg-plist

net-mgmt/icinga2: Update to 2.16.5
DeltaFile
+3-3net-mgmt/icinga2/distinfo
+2-2net-mgmt/icinga2/pkg-plist
+1-2net-mgmt/icinga2/Makefile
+6-73 files