HardenedBSD/src 89c6dbfsys/dev/mlx5/mlx5_accel mlx5_ipsec.c ipsec.h, sys/dev/mlx5/mlx5_en mlx5_en_main.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+32-20sys/dev/mlx5/mlx5_accel/mlx5_ipsec.c
+28-6sys/netipsec/ipsec_offload.c
+3-0sys/dev/mlx5/mlx5_en/mlx5_en_main.c
+1-0sys/dev/mlx5/mlx5_accel/ipsec.h
+64-264 files

HardenedBSD/ports 757293adevel/py-cwltest Makefile, devel/py-schema-salad Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+31-31www/py-yt-dlp-ejs/Makefile
+41-0devel/py-cwltest/Makefile
+37-0devel/py-schema-salad/Makefile
+24-0devel/py-types-Flask-Cors/Makefile
+23-0devel/py-types-Flask-Cors/files/patch-pyproject.toml
+23-0devel/py-types-aws-xray-sdk/Makefile
+179-3125 files not shown
+306-5831 files

HardenedBSD/ports 2927539audio/sidplayfp distinfo Makefile

audio/sidplayfp: Update to 2.16.2
DeltaFile
+3-3audio/sidplayfp/distinfo
+1-1audio/sidplayfp/Makefile
+4-42 files

HardenedBSD/ports 5f3a62cmisc/hwdata distinfo Makefile

misc/hwdata: Update to 0.405

Reported by:    portscout!
DeltaFile
+3-3misc/hwdata/distinfo
+1-1misc/hwdata/Makefile
+4-42 files

HardenedBSD/ports bc00328devel Makefile, devel/py-types-aws-xray-sdk Makefile pkg-descr

devel/py-types-aws-xray-sdk: New port: Typing stubs for aws-xray-sdk
DeltaFile
+23-0devel/py-types-aws-xray-sdk/files/patch-pyproject.toml
+23-0devel/py-types-aws-xray-sdk/Makefile
+4-0devel/py-types-aws-xray-sdk/pkg-descr
+3-0devel/py-types-aws-xray-sdk/distinfo
+1-0devel/Makefile
+54-05 files

HardenedBSD/ports 44f5da4devel Makefile, devel/py-types-Flask-Cors Makefile pkg-descr

devel/py-types-Flask-Cors: New port: Typing stubs for Flask-Cors
DeltaFile
+24-0devel/py-types-Flask-Cors/Makefile
+23-0devel/py-types-Flask-Cors/files/patch-pyproject.toml
+19-0devel/py-types-Flask-Cors/files/patch-setup.py
+4-0devel/py-types-Flask-Cors/pkg-descr
+3-0devel/py-types-Flask-Cors/distinfo
+1-0devel/Makefile
+74-06 files

HardenedBSD/ports 955cbf5devel Makefile, devel/py-schema-salad Makefile distinfo

devel/py-schema-salad: New port: Schema Annotations for Linked Avro Data (SALAD)
DeltaFile
+37-0devel/py-schema-salad/Makefile
+3-0devel/py-schema-salad/distinfo
+3-0devel/py-schema-salad/pkg-descr
+1-0devel/Makefile
+44-04 files

HardenedBSD/ports e5b951bwww/py-yt-dlp-ejs Makefile

www/py-yt-dlp-ejs: Remove the IGNORE line

This do-fetch target does not repackage anything.
It fetches the tarball, extracts it, then fetches NodeJS dependencies
into the same folder, and packages this folder as a final tarball
used during build.

AFAIK there is nothing wrong with this port the way it is now.

This can't be done in post-extract due to internet access that is
required.
DeltaFile
+31-31www/py-yt-dlp-ejs/Makefile
+31-311 files

HardenedBSD/ports b97c40edevel Makefile, devel/py-types-boto Makefile pkg-descr

devel/py-types-boto: New port: Typing stubs for boto
DeltaFile
+21-0devel/py-types-boto/Makefile
+4-0devel/py-types-boto/pkg-descr
+3-0devel/py-types-boto/distinfo
+1-0devel/Makefile
+29-04 files

HardenedBSD/ports 0f01807devel Makefile, devel/py-cwltest Makefile distinfo

devel/py-cwltest: New port: Common Workflow Language testing framework
DeltaFile
+41-0devel/py-cwltest/Makefile
+3-0devel/py-cwltest/distinfo
+2-0devel/py-cwltest/pkg-descr
+1-0devel/Makefile
+47-04 files

HardenedBSD/ports 9ccd794www/freenginx-devel distinfo Makefile.extmod

www/freenginx-devel: third-party modules management (+)

- update vts module to its recent revision
- update zstd module to its recent revision

Bump PORTREVISION.

Sponsored by:   tipi.work
DeltaFile
+5-5www/freenginx-devel/distinfo
+2-2www/freenginx-devel/Makefile.extmod
+1-1www/freenginx-devel/Makefile
+8-83 files

HardenedBSD/ports d770223www/freenginx-devel distinfo Makefile.extmod

www/freenginx-devel: update njs module to 0.9.6

<ChangeLog>

nginx modules:

*) Bugfix: fixed expire field truncation in shared dict state files.
   Millisecond timestamps were silently truncated to 10 digits,
   making restored entries appear expired on restart.
   The issue has been present since eca03622 (0.9.1).

*) Bugfix: suppressed slab log_nomem for evict shared dict zones.
   When evict is enabled, memory allocation failures are expected
   and handled by evicting old entries.

*) Bugfix: fixed stack trace for native fetch exceptions for QuickJS
   engine.

Core:

    [38 lines not shown]
DeltaFile
+3-3www/freenginx-devel/distinfo
+1-1www/freenginx-devel/Makefile.extmod
+1-1www/freenginx-devel/Makefile
+5-53 files

HardenedBSD/ports 5a8f821devel/libwasmtime distinfo Makefile

devel/libwasmtime: update 42.0.0 -> 42.0.1

ChangeLog:      https://github.com/bytecodealliance/wasmtime/compare/v42.0.0...v42.0.1

Sponsored by:   tipi.work
DeltaFile
+3-3devel/libwasmtime/distinfo
+1-1devel/libwasmtime/Makefile
+4-42 files

HardenedBSD/ports cf59c9cnet-im/telegram-desktop distinfo Makefile

net-im/telegram-desktop: update: 6.6.1 -> 6.6.2

ChangeLog:      https://github.com/telegramdesktop/tdesktop/compare/v6.6.1...v6.6.2

Sponsored by:   tipi.work
DeltaFile
+3-3net-im/telegram-desktop/distinfo
+1-1net-im/telegram-desktop/Makefile
+4-42 files

HardenedBSD/src fad7cadsys/dev/mlx5/mlx5_accel mlx5_ipsec.c ipsec.h, sys/dev/mlx5/mlx5_en mlx5_en_main.c

mlx5: report IPSEC offload capabilities whenever IPSEC_OFFLOAD is configured

(cherry picked from commit de29fd0322254127c3ebaedbc91ee4f9620f5fdf)
DeltaFile
+14-5sys/dev/mlx5/mlx5_accel/mlx5_ipsec.c
+3-0sys/dev/mlx5/mlx5_en/mlx5_en_main.c
+1-0sys/dev/mlx5/mlx5_accel/ipsec.h
+18-53 files

HardenedBSD/src cda0610sys/netipsec ipsec_offload.c

netipsec/ipsec_offload.c: handle failures to install SA nicely

(cherry picked from commit 477f020c7b5453bcd3bff7f1491e9830027b271e)
DeltaFile
+21-6sys/netipsec/ipsec_offload.c
+21-61 files

HardenedBSD/src fd53b8dsys/netipsec ipsec_offload.c

ipsec_offload: add comment stating why ipsec_accel_sa_newkey_cb() returns 0

(cherry picked from commit 0e5caac7d543687d540fa83a7125726c7c9e6e58)
DeltaFile
+7-0sys/netipsec/ipsec_offload.c
+7-01 files

HardenedBSD/src b17655csys/dev/mlx5/mlx5_accel mlx5_ipsec.c

mlx5: convert GET_TRUNK_IF() to function

(cherry picked from commit 87ca74de89e0ae96774674f7ae14d303fad5b780)
DeltaFile
+18-15sys/dev/mlx5/mlx5_accel/mlx5_ipsec.c
+18-151 files

HardenedBSD/src 6e87223lib/libutil trimdomain.c trimdomain.3, lib/libutil/tests trimdomain_test.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+23-1lib/libutil/trimdomain.c
+4-4lib/libutil/trimdomain.3
+4-1lib/libutil/Symbol.map
+2-2sys/dev/acpica/acpi_spmc.c
+3-1lib/libutil/tests/trimdomain_test.c
+1-1lib/libutil/libutil.h
+37-102 files not shown
+40-118 files

HardenedBSD/src a7a1b47lib/libutil trimdomain.c trimdomain.3, lib/libutil/tests trimdomain_test.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+23-1lib/libutil/trimdomain.c
+4-4lib/libutil/trimdomain.3
+4-1lib/libutil/Symbol.map
+2-2sys/dev/acpica/acpi_spmc.c
+3-1lib/libutil/tests/trimdomain_test.c
+1-1sys/compat/linuxkpi/common/include/linux/sort.h
+37-102 files not shown
+40-118 files

HardenedBSD/ports 10839d4devel/kf6-kservice distinfo, devel/qcoro distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+7-7sysutils/nginx-ui/distinfo
+7-7www/filebrowser/distinfo
+3-4sysutils/nginx-ui/Makefile
+3-3x11-fm/xfe/distinfo
+3-3devel/kf6-kservice/distinfo
+3-3devel/qcoro/distinfo
+26-2719 files not shown
+66-5825 files

HardenedBSD/ports 3dc1215sysutils/nginx-ui distinfo Makefile, sysutils/nginx-ui/files patch-cmd_version_generate.go

sysutils/nginx-ui: Update to 2.3.3

ChangeLog: https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.3
DeltaFile
+7-7sysutils/nginx-ui/distinfo
+3-4sysutils/nginx-ui/Makefile
+1-1sysutils/nginx-ui/files/patch-cmd_version_generate.go
+11-123 files

HardenedBSD/ports 31eac1cwww/filebrowser distinfo Makefile

www/filebrowser: Update to 2.61.0

ChangeLog: https://github.com/filebrowser/filebrowser/releases/tag/v2.61.0
DeltaFile
+7-7www/filebrowser/distinfo
+2-2www/filebrowser/Makefile
+9-92 files

HardenedBSD/ports a49196fx11-fm/xfe distinfo Makefile

x11-fm/xfe: Update to 2.1.5
DeltaFile
+3-3x11-fm/xfe/distinfo
+1-1x11-fm/xfe/Makefile
+4-42 files

HardenedBSD/ports 0879b92devel/violet distinfo Makefile

devel/violet: Update 2.2.2 => 2.3.0

Approved by:  db@, yuri@ (Mentors, implicit)
DeltaFile
+3-3devel/violet/distinfo
+1-2devel/violet/Makefile
+4-52 files

HardenedBSD/ports 20d1b49audio/ft2-clone distinfo Makefile

audio/ft2-clone: Update to 2.07
DeltaFile
+3-3audio/ft2-clone/distinfo
+1-1audio/ft2-clone/Makefile
+4-42 files

HardenedBSD/src 4d876fcsys/dev/acpica acpi_spmc.c

acpi_spmc: fix revision check reading name as integer

In acpi_spmc_get_constraints_spec(), the revision of the device
constraint detail package was mistakenly read from
constraint_obj->Package.Elements[0], which is the device name
(a string), instead of from the detail sub-package's first element.

Move the initialisation of 'detail' before the revision check and
read the revision from detail->Package.Elements[0] as the comment
already states

Approved by:    obiwac
Differential Revision:  https://reviews.freebsd.org/D55639
Sponsored by:   Netflix
DeltaFile
+2-2sys/dev/acpica/acpi_spmc.c
+2-21 files

HardenedBSD/ports 568fc0amisc/bibletime Makefile

misc/bibletime:  add NOT_FOR_ARCHS i386
DeltaFile
+3-0misc/bibletime/Makefile
+3-01 files

HardenedBSD/src f268f95lib/libutil trimdomain.c, lib/libutil/tests trimdomain_test.c

libutil: avoid an out-of-bounds read in trimdomain(3)

memchr(3) will happily believe we've passed in a valid object, but
hostsize could easily exceed the bounds of fullhost.  Clamp it down to
the string size to be safe and avoid UB.  This plugs a potential
overread noted in the compat shim that was just added.

Reviewed by:    des
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D54623
DeltaFile
+6-0lib/libutil/trimdomain.c
+3-1lib/libutil/tests/trimdomain_test.c
+9-12 files

HardenedBSD/src 7e70589lib/libutil trimdomain.c trimdomain.3

libutil: take a size_t in trimdomain()

INT_MAX is already larger than a reasonable hostname might be, but
size_t makes some of this easier to reason about as we do arithmetic
with it.  This would maybe not be worth it if we had to bump the
soversion because of it, but libutil does symbol versioning now so we
can provide a compat shim.

While we're here, fix some inconsistencies in argument names in the
manpage.

Reviewed by:    des
Obtained from:  https://github.com/apple-oss-distributions/libutil
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D54622
DeltaFile
+17-1lib/libutil/trimdomain.c
+4-4lib/libutil/trimdomain.3
+4-1lib/libutil/Symbol.map
+1-1lib/libutil/libutil.h
+26-74 files