HardenedBSD/src b496f58lib/libpmc libpmc_pmu_util.c, lib/libpmc/pmu-events jevents.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+100-29lib/libpmc/pmu-events/jevents.c
+24-20tests/sys/kern/ssl_sendfile.c
+19-0lib/libpmc/libpmc_pmu_util.c
+5-3sys/dev/ena/ena_netmap.c
+6-0sys/dev/virtio/virtqueue.c
+2-3sys/dev/ena/ena.c
+156-556 files not shown
+165-6212 files

HardenedBSD/src e435245lib/libpmc libpmc_pmu_util.c libpmc.c, lib/libpmc/pmu-events jevents.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+100-29lib/libpmc/pmu-events/jevents.c
+24-20tests/sys/kern/ssl_sendfile.c
+19-0lib/libpmc/libpmc_pmu_util.c
+5-3sys/dev/ena/ena_netmap.c
+6-0sys/dev/virtio/virtqueue.c
+4-1lib/libpmc/libpmc.c
+158-536 files not shown
+165-6212 files

HardenedBSD/ports 41690e8devel/omnilinter distinfo Makefile, games/widelands/files patch-c0b44ccc04df35a9a23ca9be3e05f5d3a5428f6f

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+9,264-821net/dpdk/pkg-plist
+203-219devel/omnilinter/distinfo
+0-224games/widelands/files/patch-c0b44ccc04df35a9a23ca9be3e05f5d3a5428f6f
+101-110devel/omnilinter/Makefile
+43-21net/dpdk/Makefile
+14-14mail/mailpit/files/patch-package-lock.json
+9,625-1,40944 files not shown
+9,770-1,58050 files

HardenedBSD/ports 0b35111security/netbird distinfo Makefile

security/netbird: Update 0.66.1 => 0.66.3

Changelogs:
https://github.com/netbirdio/netbird/releases/tag/v0.66.2
https://github.com/netbirdio/netbird/releases/tag/v0.66.3

Commit log:
https://github.com/netbirdio/netbird/compare/v0.66.1...v0.66.3

PR:     293710
DeltaFile
+5-5security/netbird/distinfo
+1-2security/netbird/Makefile
+6-72 files

HardenedBSD/ports 91316bfsecurity/chkrootkit distinfo Makefile, security/chkrootkit/files patch-Makefile patch-chkwtmp.c

security/chkrootkit: Update 0.58b => 0.59

Changelog:
 - New checks: Process executed from memory
 - New commands: nologin
 - XZ Backdoor Bottkitty (UEFI Bootkit)
 - Bug fixes
https://www.chkrootkit.org/#new

Remove local patches with support FreeBSD 9.

PR:             293520
Approved by:    Lacey Powers <lacey.leanne at gmail.com> (maintainer)
MFH:            2026Q1
DeltaFile
+15-0security/chkrootkit/files/patch-Makefile
+0-11security/chkrootkit/files/patch-chkwtmp.c
+0-11security/chkrootkit/files/patch-chklastlog.c
+3-3security/chkrootkit/distinfo
+1-1security/chkrootkit/Makefile
+19-265 files

HardenedBSD/ports faadb58biology/salmon Makefile

biology/salmon: Unbreak: Relax libgff version requirement

Also drop unnecessary libboost dep

Reported by:    pkg-fallout
DeltaFile
+4-4biology/salmon/Makefile
+4-41 files

HardenedBSD/ports c97f206textproc/elasticsearch7/files pkg-message.in

textproc/elasticsearch7: Correct product name

Rename ElasticSearch to Elasticsearch in the file pkg-message.

PR:             261591
Approved by:    elastic (maintainer, timeout 4+ years)
DeltaFile
+2-2textproc/elasticsearch7/files/pkg-message.in
+2-21 files

HardenedBSD/ports 8605c56devel/py-p4python distinfo Makefile

devel/py-p4python: Update to 2025.2.2863679

PR:             293725
Approved by:    antonfb at hesiod.org (maintainer)
DeltaFile
+3-3devel/py-p4python/distinfo
+1-1devel/py-p4python/Makefile
+4-42 files

HardenedBSD/src bfb2fd5lib/libpmc libpmc_pmu_util.c libpmc.c, lib/libpmc/pmu-events jevents.c

libpmc: Explicitly whitelist json fields

Adds all missing Intel fields and turns jevents.c into an explicit white
list mechanism so that we no longer ignore important fields that often
invalidate the counter.  The json event parser must now parse every
field on each architecture that we support.  This has been tested by
running tinderbox and manually running jevent against our current json
repository.  As a bonus I fixed spelling errors in the AMD JSON
definitions.

Sponsored by: Netflix

Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/2055
DeltaFile
+100-29lib/libpmc/pmu-events/jevents.c
+19-0lib/libpmc/libpmc_pmu_util.c
+4-1lib/libpmc/libpmc.c
+1-1lib/libpmc/pmu-events/arch/x86/amdzen6/load-store.json
+1-1lib/libpmc/pmu-events/arch/x86/amdzen4/cache.json
+1-1lib/libpmc/pmu-events/arch/x86/amdzen5/load-store.json
+126-336 files

HardenedBSD/ports 3f3ee57net/dpdk pkg-plist Makefile, net/dpdk/files patch-kernel_freebsd_contigmem_contigmem.c patch-kernel_freebsd_nic__uio_nic__uio.c

net/dpdk: update to latest LTS release, 25.11.0, adopt (+)

Tested on:      aarch64, amd64
Release notes:  http://doc.dpdk.org/guides/rel_notes/release_25_11.html
Approved by:    Bruce Richardson (former maintainer)
DeltaFile
+9,264-821net/dpdk/pkg-plist
+43-21net/dpdk/Makefile
+0-20net/dpdk/files/patch-kernel_freebsd_contigmem_contigmem.c
+0-18net/dpdk/files/patch-kernel_freebsd_nic__uio_nic__uio.c
+12-0net/dpdk/files/patch-meson.build
+4-4net/dpdk/files/patch-config_meson.build
+9,323-8841 files not shown
+9,326-8877 files

HardenedBSD/src ded881ftests/sys/kern ssl_sendfile.c

tests/kern/ssl_sendfile: fix 'random' and 'basic' flakyness

The read of c.sbytes needs to be synchronized with mutex.  The problem was
fixed for 'truncate' and 'grow' with 8a9508563542, but these two suffer
from the same problem.  Provide require_sbytes(), a locked wrapper around
ATF_REQUIRE() to reduce copy and paste.

Submitted by:           olivier
Differential Revision:  https://reviews.freebsd.org/D55781
DeltaFile
+12-8tests/sys/kern/ssl_sendfile.c
+12-81 files

HardenedBSD/src 35b976ctests/sys/kern ssl_sendfile.c

tests/kern/ssl_sendfile: reduce copy & paste

Provide sendme_locked_wait() for a common pattern.  Not functional change.
DeltaFile
+12-12tests/sys/kern/ssl_sendfile.c
+12-121 files

HardenedBSD/ports d4ce731mail/mailpit distinfo Makefile, mail/mailpit/files patch-package-lock.json

mail/mailpit: Update to 1.29.3

Improved ONLY_FOR_ARCHS_REASON message to better explain the supported
architectures.
DeltaFile
+14-14mail/mailpit/files/patch-package-lock.json
+7-7mail/mailpit/distinfo
+2-3mail/mailpit/Makefile
+23-243 files

HardenedBSD/ports 56676a3audio/subtui distinfo Makefile

audio/subtui: Update to 2.10.0

Changelog: https://github.com/MattiaPun/SubTUI/releases/tag/v2.10.0
DeltaFile
+5-5audio/subtui/distinfo
+1-1audio/subtui/Makefile
+6-62 files

HardenedBSD/src 96c5eafsys/dev/ena ena.h

ena: Update driver version to v2.8.2

Bug Fixes:
* Verify that an ENA ring is in netmap only in native mode

Minor Changes:
* Move parenthesis to correct place in switch
* Add comment
* Reorder define

MFC after: 2 weeks
Sponsored by: Amazon, Inc.
Reviewed by: cperciva
Differential Revision: https://reviews.freebsd.org/D55698
DeltaFile
+1-1sys/dev/ena/ena.h
+1-11 files

HardenedBSD/src 97e84c5sys/dev/ena ena_netmap.c

ena: Verify that an ENA ring is in netmap only in native mode

netmap operates in two modes:
1) Emulated - netmap handling is done by the network stack, the
NIC driver operates transparently to netmap.
2) Native - netmap management is done by the NIC driver.

When checking whether a specific ENA ring is running in netmap
mode, only the following checks were done:
1. IFCAP_NETMAP - Check whether netmap capability is enabled on
the device.
2. NKR_NETMAP_ON - Check whether netmap is actively using this
ring.

The above checks implied that the netmap mode is native and the
ENA driver needs to handle the netmap logic.
The code was missing an explicit check on whether native mode
is actually on (NAF_NATIVE).
This led to a case where though emulated mode was used and

    [18 lines not shown]
DeltaFile
+5-3sys/dev/ena/ena_netmap.c
+5-31 files

HardenedBSD/src 2667a84sys/dev/ena ena.c ena_rss.h

ena: Minor changes

1. Move parenthesis to correct place in switch and fix include order
2. Add comment at the end of an ifdef for clarity
3. Change include order.

MFC after: 2 weeks
Sponsored by: Amazon, Inc.
Reviewed by: cperciva
Differential Revision: https://reviews.freebsd.org/D55696
DeltaFile
+2-3sys/dev/ena/ena.c
+1-2sys/dev/ena/ena_rss.h
+3-52 files

HardenedBSD/ports 0d7ef50graphics/igt-gpu-tools Makefile, graphics/igt-gpu-tools/files patch-runner_executor.c

graphics/igt-gpu-tools: Fix builds since D49183
DeltaFile
+1-1graphics/igt-gpu-tools/files/patch-runner_executor.c
+1-1graphics/igt-gpu-tools/Makefile
+2-22 files

HardenedBSD/src 1a92fc9sys/dev/virtio virtqueue.c

virtio: Restore mb() calls

Until an issue seen on amd64 can be investigated restore two mb() calls
to virtio.

Reviewed by:    andrew
Fixes:  c499ad6f997c ("virtio: Use bus_dma for ring and indirect buffer allocations")
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D55766
DeltaFile
+6-0sys/dev/virtio/virtqueue.c
+6-01 files

HardenedBSD/src 522012csys/dev/virtio virtqueue.c

Revert "virtio: Restore mb() calls"

This reverts commit d99e725c26a7745aa349eab01ae56ca630b6d0f5.
DeltaFile
+0-6sys/dev/virtio/virtqueue.c
+0-61 files

HardenedBSD/src d99e725sys/dev/virtio virtqueue.c

virtio: Restore mb() calls

Until an issue seen on amd64 can be investigated restore two mb() calls
to virtio.

Reviewed by:    andrew
Fixes:  c499ad6f997c ("virtio: Use bus_dma for ring and indirect buffer allocations")
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D55766
DeltaFile
+6-0sys/dev/virtio/virtqueue.c
+6-01 files

HardenedBSD/ports 91df7cctextproc/qo distinfo Makefile

textproc/qo: Update to 0.3.1
DeltaFile
+5-5textproc/qo/distinfo
+2-3textproc/qo/Makefile
+7-82 files

HardenedBSD/ports d4d2f6asysutils/goaccess distinfo Makefile, sysutils/goaccess/files patch-src_wsauth.c

sysutils/goaccess: Update to 1.10.1
DeltaFile
+26-0sysutils/goaccess/files/patch-src_wsauth.c
+3-9sysutils/goaccess/distinfo
+1-6sysutils/goaccess/Makefile
+30-153 files

HardenedBSD/ports 31d509bgames/widelands Makefile distinfo, games/widelands/files patch-c0b44ccc04df35a9a23ca9be3e05f5d3a5428f6f

games/widelands: update 1.2.1 → 1.3.1

PR:             293644
Tested by:      thindil at laeran.pl.eu.org
DeltaFile
+0-224games/widelands/files/patch-c0b44ccc04df35a9a23ca9be3e05f5d3a5428f6f
+3-5games/widelands/Makefile
+3-3games/widelands/distinfo
+1-1games/widelands/pkg-plist
+7-2334 files

HardenedBSD/ports 6418513astro/gpsprune Makefile

astro/gpsprune: switch to default java version
DeltaFile
+2-4astro/gpsprune/Makefile
+2-41 files

HardenedBSD/ports a926280games/luanti distinfo Makefile

games/luanti: update 5.14.0 → 5.15.1

PR:             293560
Tested by:      giorgio.caculli at protonmail.com
DeltaFile
+3-3games/luanti/distinfo
+1-1games/luanti/Makefile
+2-0games/luanti/pkg-plist
+6-43 files

HardenedBSD/ports 2791408astro/josm Makefile distinfo, astro/josm/files josm.sh.in

astro/josm: update 19439 → 19481

- Switch to latest supported openjdk
- Simplify wrapper script, run with correct java
DeltaFile
+3-4astro/josm/Makefile
+3-3astro/josm/distinfo
+1-5astro/josm/files/josm.sh.in
+7-123 files

HardenedBSD/ports 58d1e2fdevel/omnilinter distinfo Makefile

devel/omnilinter: update 0.7.0 → 0.7.1
DeltaFile
+203-219devel/omnilinter/distinfo
+101-110devel/omnilinter/Makefile
+304-3292 files

HardenedBSD/ports db52a59astro/osmosis Makefile

astro/osmosis: switch to default java version
DeltaFile
+1-2astro/osmosis/Makefile
+1-21 files

HardenedBSD/ports ac7488cdevel/cppcheck distinfo Makefile, devel/cppcheck/files patch-CMakeLists.txt

devel/cppcheck: update 2.19.1 → 2.20.0
DeltaFile
+3-3devel/cppcheck/distinfo
+2-2devel/cppcheck/Makefile
+2-2devel/cppcheck/files/patch-CMakeLists.txt
+7-73 files