HardenedBSD/src 04528b0sys/dev/hwpmc hwpmc_mod.c, sys/dev/iommu busdma_iommu.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+145-124sys/vm/vm_domainset.c
+47-19sys/dev/usb/wlan/if_rsu.c
+41-13sys/dev/iommu/busdma_iommu.c
+31-3sys/dev/ixgbe/if_ix.c
+12-13sys/dev/qlnx/qlnxe/qlnx_os.c
+10-11sys/dev/hwpmc/hwpmc_mod.c
+286-18352 files not shown
+489-32658 files

HardenedBSD/src e044783stand/efi/loader main.c, sys/conf NOTES

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+31-3sys/dev/ixgbe/if_ix.c
+10-11sys/dev/hwpmc/hwpmc_mod.c
+7-11stand/efi/loader/main.c
+10-6sys/kern/kern_proc.c
+5-6sys/ddb/db_ps.c
+5-5sys/conf/NOTES
+68-4222 files not shown
+106-8228 files

HardenedBSD/ports dcee277devel/cond-let Makefile pkg-descr, devel/forge Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+38-0devel/cond-let/Makefile
+27-0math/R-cran-mpoly/Makefile
+13-12devel/forge/Makefile
+0-21www/py-httpx_gssapi/Makefile.new
+0-21devel/py-celery-singleton/Makefile.new
+19-0devel/cond-let/pkg-descr
+97-5432 files not shown
+191-13338 files

HardenedBSD/ports 8ae2b4bwww/go-anubis distinfo Makefile

www/go-anubis: upgrade to 1.22.0

- Upgrade to 1.22
- Fix -version command output

Changelog: https://github.com/TecharoHQ/anubis/releases
Approved by: dch at FreeBSD.org (email)
DeltaFile
+3-3www/go-anubis/distinfo
+3-2www/go-anubis/Makefile
+3-1www/go-anubis/pkg-plist
+9-63 files

HardenedBSD/ports e8265d6devel/wasm-server-runner Makefile

devel/wasm-server-runner: Fix build error

Add USES=llvm
DeltaFile
+2-2devel/wasm-server-runner/Makefile
+2-21 files

HardenedBSD/src 46347b3sys/dev/ixgbe if_ix.c

ixgbe: Fix incomplete speed coverage in link status logging

Originally ixgbe_if_update_admin_status() only handled 1G and 10G speeds,
causing any other speeds to display as "1 Gbps" in link status logs.

This issue is fixed by adding link speed to string conversion logic through
the introduction of a helper function, ixgbe_link_speed_to_str(), which
corrects the misleading logs to reflect accurate link speeds.

Signed-off-by: Yogesh Bhosale yogesh.bhosale at intel.com

PR:             288960
Reported by:    Mike Belanger - QNX
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D52442
DeltaFile
+31-3sys/dev/ixgbe/if_ix.c
+31-31 files

HardenedBSD/src 101a35estand/efi/boot1 boot1.c, stand/efi/loader efi_main.c

efi: translate errno to EFI status on exit

Translate the given errno to an efi status instead of always exiting
with EFI_LOAD_ERROR.
DeltaFile
+2-2stand/efi/boot1/boot1.c
+1-1stand/efi/loader/efi_main.c
+3-32 files

HardenedBSD/src 1814196stand/efi/loader main.c

loader/efi: remove is_last parameter from find_currdev

It is unused.

Reviewed by:    tsoome
Differential Revision:  https://reviews.freebsd.org/D52434
DeltaFile
+3-6stand/efi/loader/main.c
+3-61 files

HardenedBSD/src b4c5d58stand/efi/loader main.c

loader/efi: plug memory leak

Reviewed by:    tsoome
Differential Revision:  https://reviews.freebsd.org/D52433
DeltaFile
+2-0stand/efi/loader/main.c
+2-01 files

HardenedBSD/src cd9b43estand/efi/loader framebuffer.c

loader/efi: return error from efi_find_framebuffer

Also return actual errno values in other code paths.
(suggested by tsoome)

Reviewed by:    tsoome, imp
Differential Revision:  https://reviews.freebsd.org/D52432
DeltaFile
+5-2stand/efi/loader/framebuffer.c
+5-21 files

HardenedBSD/src 7d48a56stand/common gfx_fb.c, stand/efi/loader main.c bootinfo.c

stand: remove unused variables
DeltaFile
+2-5stand/efi/loader/main.c
+1-2stand/efi/loader/bootinfo.c
+0-2stand/efi/loader/arch/amd64/multiboot2.c
+1-1stand/efi/loader/copy.c
+0-1stand/common/gfx_fb.c
+0-1stand/efi/loader/arch/amd64/trap.c
+4-126 files

HardenedBSD/src d81b84dstand/efi/loader Makefile

loader/efi: build with -Wall

Reviewed by:    tsoome
Differential Revision:  https://reviews.freebsd.org/D52431
DeltaFile
+1-0stand/efi/loader/Makefile
+1-01 files

HardenedBSD/ports 5b93ea9editors/vim Makefile distinfo

editors/vim: Update to 9.1.1744 and handle wayland properly

Add --without-wayland for everything except the gtk3 FLAVOR. That
flavor now has a hard dep on wayland (it's already present from the
default gtk30 and libxkbcommon configurations).

This is a NOOP for everybody except gtk3 users who explicitly disabled
wayland in both gtk30 and libxkbcommon. The only effect for those
users is that wayland is now a LIB_DEP. There is no runtime effect
either way.

In the below PR, Piotr identified that vim will eagerly link against
wayland if present, even for a pure-console build.

The only toolkit that vim uses that can use wayland is gtk3, so
we now specify --without-wayland for everything else.

To complicate things, wayland support is optional in the gtk30 and
libxkbcommon ports. If either of those ports are built with wayland,

    [11 lines not shown]
DeltaFile
+5-3editors/vim/Makefile
+3-3editors/vim/distinfo
+8-62 files

HardenedBSD/src 9bfbc68usr.bin/sockstat main.c

sockstat: fix the -j option with piped output after libxo integration

The legacy code handling -j in display() was causing xo_finish() to be
skipped.  It has also been causing a memory leak since 0726c6574f8
(sockstat: Add automatic column sizing and remove -w option)

Fixes:          7b35b4d1963 (sockstat: add libxo support)
MFC after:      1 week
Reported by:    glebius
Reviewed by:    glebius
Sponsored by:   ConnectWise
Pull Request:   https://github.com/freebsd/freebsd-src/pull/1842
DeltaFile
+2-1usr.bin/sockstat/main.c
+2-11 files

HardenedBSD/ports 3a96d77misc/ggml Makefile

misc/ggml: Broken on i386

Reported by:    fallout
DeltaFile
+2-0misc/ggml/Makefile
+2-01 files

HardenedBSD/ports edde44csysutils/froxlor distinfo Makefile

sysutils/froxlor: Update to 2.2.8
DeltaFile
+3-3sysutils/froxlor/distinfo
+1-2sysutils/froxlor/Makefile
+4-52 files

HardenedBSD/ports c2d037adevel/forge Makefile distinfo

devel/forge: Update to 0.6.0

ChangeLog:      https://github.com/magit/forge/blob/v0.6.0/CHANGELOG
DeltaFile
+13-12devel/forge/Makefile
+3-3devel/forge/distinfo
+2-0devel/forge/pkg-plist
+18-153 files

HardenedBSD/ports cafc8f3devel/ghub Makefile pkg-plist

devel/ghub: Update to 5.0.0

ChangeLog:      https://github.com/magit/ghub/blob/v5.0.0/CHANGELOG
DeltaFile
+6-7devel/ghub/Makefile
+2-8devel/ghub/pkg-plist
+3-3devel/ghub/distinfo
+11-183 files

HardenedBSD/ports 5de4b9bdevel/magit Makefile distinfo

devel/magit: Update to 4.4.0

ChangeLog:      https://github.com/magit/magit/blob/v4.4.0/CHANGELOG
DeltaFile
+5-4devel/magit/Makefile
+3-3devel/magit/distinfo
+8-72 files

HardenedBSD/ports 96642d1devel Makefile, devel/cond-let Makefile pkg-descr

devel/cond-let: Add new port

Add cond-let, additional and improved binding conditionals in Emacs
Lisp.
DeltaFile
+38-0devel/cond-let/Makefile
+19-0devel/cond-let/pkg-descr
+3-0devel/cond-let/distinfo
+1-0devel/Makefile
+61-04 files

HardenedBSD/src faf7e99sys/kern kern_proc.c

'kern.proc.groups' sysctl knob: Restore outputting the effective GID

In particular, fixes 'procstat -s' on a live system (for processes with
more than 16 groups).

Reviewed by:    kib, emaste
Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52261
DeltaFile
+5-2sys/kern/kern_proc.c
+5-21 files

HardenedBSD/src 63a40casys/kern kern_proc.c

kinfo_proc: Restore outputting the effective GID

In particular, fixes 'procstat -s' on a live system or a core file (only
if there are less than 16 groups).

Reviewed by:    kib
Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52259
DeltaFile
+5-4sys/kern/kern_proc.c
+5-41 files

HardenedBSD/src 7676df2lib/libkvm kvm_proc.c

kvm_proclist(): Restore outputting the effective GID

In particular, fixes 'procstat -s -M' (only if there are less than 16
groups).

Reviewed by:    kib, emaste
Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52260
DeltaFile
+5-4lib/libkvm/kvm_proc.c
+5-41 files

HardenedBSD/src 5568b44sys/kern imgact_elf.c

imgact_elf: procstat groups: Restore sending the effective GID

Fixes 'procstat -s' run on a core file when the number of groups in
effect at the moment of core dump exceeds KI_NGROUPS (16).

Reviewed by:    kib
Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52258
DeltaFile
+3-1sys/kern/imgact_elf.c
+3-11 files

HardenedBSD/src 71db323sys/fs/nfsclient nfs_clport.c

nfscl: Restore sending the effective GID to the server

Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52256
DeltaFile
+4-3sys/fs/nfsclient/nfs_clport.c
+4-31 files

HardenedBSD/src d859d4csys/fs/procfs procfs_status.c

procfs: Restore printing the effective GID in 'status'

Reviewed by:    kib
Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52257
DeltaFile
+2-6sys/fs/procfs/procfs_status.c
+2-61 files

HardenedBSD/src 67f8bd5sys/fs/nfs nfs_commonport.c

nfs: newnfs_setroot(): Remove an obsolete comment

This comment is obsolete, as:
1. This code is FreeBSD-specific and is not shared with other BSDs.
2. With our recent changes in commit be1f7435ef218b1d ("kern: start
   tracking cr_gid outside of cr_groups[]"), all of NetBSD, OpenBSD and
   FreeBSD have the effective GID in a separate field (DragonFlyBSD
   remains to this day an outlier).

MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52254
DeltaFile
+0-2sys/fs/nfs/nfs_commonport.c
+0-21 files

HardenedBSD/src 1c40b15sys/dev/hwpmc hwpmc_mod.c

hwpmc: On attach, fix allowing a PMC's owner to attach it to itself

The returned value in this case was wrong, and would basically prevent
some PMC's owner process to attach that PMC to itself although the
security checks underneath would have allowed it.

Now that this early return has been fixed, its block basically becomes
a performance short-circuit which has no effect from a functional
standpoint.

Fixes:          ebccf1e3a6b1 ("Bring a working snapshot of hwpmc(4), ...")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-1sys/dev/hwpmc/hwpmc_mod.c
+1-11 files

HardenedBSD/src d9e11f0sys/dev/hwt hwt_ioctl.c

hwt: On attach, ensure owner is a target effective GID's member

This restores a check that existed prior to commit be1f7435ef218b1d
("kern: start tracking cr_gid outside of cr_groups[]").

Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52253
DeltaFile
+4-5sys/dev/hwt/hwt_ioctl.c
+4-51 files

HardenedBSD/src 1c3c698sys/dev/hwpmc hwpmc_mod.c

hwpmc: On attach, ensure owner is a target effective GID's member

This restores a check that existed prior to commit be1f7435ef218b1d
("kern: start tracking cr_gid outside of cr_groups[]").

While here, improve pmc_can_attach()'s style by changing the type of
'decline_attach' to 'bool', fixing tests on it, adding missing
parentheses to 'return' statements, and by changing its return value
type to 'bool'.

Fixes:          be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
MFC after:      9 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D52252
DeltaFile
+10-11sys/dev/hwpmc/hwpmc_mod.c
+10-111 files