HardenedBSD/src c574ee8stand/efi/loader main.c, stand/man loader.efi.8

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+55-88sys/dev/sound/pcm/channel.c
+12-1usr.bin/netstat/netstat.1
+6-6stand/man/loader.efi.8
+4-4stand/efi/loader/main.c
+2-5sys/dev/sound/pcm/channel.h
+3-3sys/dev/sound/pcm/feeder.c
+82-1074 files not shown
+86-11710 files

HardenedBSD/ports bdc1f38lang/gcc16-devel distinfo Makefile

lang/gcc16-devel: Update to 16.0.1.s20260412
DeltaFile
+3-3lang/gcc16-devel/distinfo
+1-1lang/gcc16-devel/Makefile
+4-42 files

HardenedBSD/ports d70cbc8lang/gcc15-devel distinfo Makefile

lang/gcc15-devel: Update to 15.2.1.s20260411
DeltaFile
+3-3lang/gcc15-devel/distinfo
+1-1lang/gcc15-devel/Makefile
+4-42 files

HardenedBSD/ports 8ba8f99lang/gcc14-devel distinfo Makefile

lang/gcc14-devel: Update to 14.3.1.s20260410
DeltaFile
+3-3lang/gcc14-devel/distinfo
+1-1lang/gcc14-devel/Makefile
+4-42 files

HardenedBSD/ports 73df150lang/gcc13-devel distinfo Makefile

lang/gcc13-devel: Update to 13.4.1.s20260409
DeltaFile
+3-3lang/gcc13-devel/distinfo
+1-1lang/gcc13-devel/Makefile
+4-42 files

HardenedBSD/ports 09bf1f9math/clblast distinfo Makefile, math/clblast/files patch-test_wrapper__clblas.hpp

math/clblast: upgrade to 1.7.0

Release notes at https://github.com/CNugteren/CLBlast/releases/tag/1.7.0
DeltaFile
+12-0math/clblast/files/patch-test_wrapper__clblas.hpp
+3-3math/clblast/distinfo
+3-1math/clblast/Makefile
+18-43 files

HardenedBSD/ports 55d43a1science/py-dlib distinfo Makefile

science/py-dlib: Update to 20.0.1

Reported by:    portscout!
DeltaFile
+3-3science/py-dlib/distinfo
+2-2science/py-dlib/Makefile
+5-52 files

HardenedBSD/ports 2e0f48dscience/dlib-cpp pkg-plist distinfo

science/dlib-cpp: Update to 20.0.1

Reported by:    portscout!
DeltaFile
+4-3science/dlib-cpp/pkg-plist
+3-3science/dlib-cpp/distinfo
+1-2science/dlib-cpp/Makefile
+8-83 files

HardenedBSD/ports 3a74e0dgraphics/converseen distinfo Makefile

graphics/converseen: Update to 0.15.2.3

ChangeLog: https://converseen.fasterland.net/

 * Fixed quality issue with AVIF files
 * Various Bugfixes
DeltaFile
+3-3graphics/converseen/distinfo
+1-1graphics/converseen/Makefile
+4-42 files

HardenedBSD/ports cd8f60cdevel/android-tools Makefile

devel/android-tools: add forgotten pkg-config dependency
DeltaFile
+1-1devel/android-tools/Makefile
+1-11 files

HardenedBSD/ports 9257628science/afni distinfo Makefile

science/afni: Update to 26.1.00
DeltaFile
+3-3science/afni/distinfo
+1-1science/afni/Makefile
+4-42 files

HardenedBSD/src 893b90cusr.bin/netstat netstat.1 main.c

netstat: Add -F support for -g

This change adds the ability to examine the contents of multicast
routing tables for other FIBs without the need for executing
`netstat` with `setfib(1)`.

MFC after:      3 days
Sponsored by:   Klara, Inc.
Sponsored by:   Stormshield
Differential Revision:  https://reviews.freebsd.org/D56205
Reviewed by:    glebius, markj, zlei

(cherry picked from commit cff675e83cdb6c9027e94df9d010439e42e27dee)
DeltaFile
+12-1usr.bin/netstat/netstat.1
+2-0usr.bin/netstat/main.c
+14-12 files

HardenedBSD/src 3524d4eshare/examples Makefile, share/examples/sound mmap.c

sound examples: Add mmap example

This example opens separate OSS capture and playback channels in mmap
mode, places them into a sync group, and starts them together so both
ring buffers advance on the same device timeline. It then monitors the
capture mmap pointer with SNDCTL_DSP_GETIPTR, converts that pointer into
monotonic absolute progress using the reported block count, and copies
newly recorded audio from the input ring to the matching region of the
output ring.

The main loop is driven by an absolute monotonic frame clock rather than
a fixed relative usleep delay. Wakeups are scheduled from the sample
rate using a small frame step similar to the SOSSO timing model, while
the audio path itself stays intentionally simple: just copy input to
output, with no explicit xrun recovery or processing beyond ring
wraparound handling.

MFC after:      1 week
Reviewed by:    christos
Differential Revision:  https://reviews.freebsd.org/D53749
DeltaFile
+297-0share/examples/sound/mmap.c
+1-0share/examples/Makefile
+298-02 files

HardenedBSD/src add68b4sys/net if_bridge.c

bridge(4): Remove epoch_enter during destruction

bridge doesn't require to enter epoch during destruction.

Reviewed by: zlei, glebius
Differential Revision: https://reviews.freebsd.org/D55935

(cherry picked from commit 17920f8335106487968d7928d01b34300756ea00)
DeltaFile
+0-5sys/net/if_bridge.c
+0-51 files

HardenedBSD/src 6af0ee7sys/net if_bridge.c

if_bridge(4): don't sleep under epoch(9) in destruction

bridge tries to run callout_drain(9) twice under epoch
during destruction.
once for bridge_timer, which is not required to be under epoch.
second time for the BSTP callout, which is already disabled
earlier inside bridge_delete_member.

Reviewed by: glebius, zlei
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D55876

(cherry picked from commit a8b9a05d3cad3bdcb9008232c9172a1aeffbe9fd)
DeltaFile
+2-2sys/net/if_bridge.c
+2-21 files

HardenedBSD/src 7d38eb7sys/net/route nhop_ctl.c

routing: Fix use-after-free in finalize_nhop

FIB_NH_LOG calls the `nhop_get_upper_family(nh)` to read
`nh->nh_priv->nh_upper_family` for failure logging.
Call FIB_NH_LOG before freeing nh so failures are logged
without causing a panic.

MFC after: 3 days
DeltaFile
+2-2sys/net/route/nhop_ctl.c
+2-21 files

HardenedBSD/src 7bccc0dsys/dev/sound/pcm channel.c

sound: De-macro array definitions in chn_calclatency()

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56263

(cherry picked from commit 66a82f5fa471b8eda018b7566c3725a6742dfc0c)
DeltaFile
+16-21sys/dev/sound/pcm/channel.c
+16-211 files

HardenedBSD/src 6e5c351sys/dev/sound/pcm channel.c

sound: Simplify parts of chn_notify()

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56240

(cherry picked from commit 8b18fc456bb136112e166508a9182718cdd44be2)
DeltaFile
+20-27sys/dev/sound/pcm/channel.c
+20-271 files

HardenedBSD/src f56d086sys/dev/sound/pcm channel.c

sound: Make chn_reset() control flow clearer

I think this is cleaner than playing around with return values.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56264

(cherry picked from commit 8007a78bfe1f41b7055f8677f8ac9ae4cc2fbc7c)
DeltaFile
+18-15sys/dev/sound/pcm/channel.c
+18-151 files

HardenedBSD/src 573fd42sys/dev/sound/pcm channel.c channel.h

sound: Retire unused CHN_N_* defines

These still haven't been implemented by the original author, and there
doesn't seem to be much use for them anyway.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56239

(cherry picked from commit 2d84c8a3d3d673081c803f8aadc4eae8f6a221d8)
DeltaFile
+1-25sys/dev/sound/pcm/channel.c
+2-5sys/dev/sound/pcm/channel.h
+3-302 files

HardenedBSD/src 8b87f38sys/dev/sound/pcm feeder.c feeder.h

sound: Mark some snd_fmt* functions as static

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56238

(cherry picked from commit f369d4148b93410fe7f8ea989f66790403d23ce8)
DeltaFile
+3-3sys/dev/sound/pcm/feeder.c
+0-3sys/dev/sound/pcm/feeder.h
+3-62 files

HardenedBSD/ports 5beab28devel/py-virtualenv Makefile distinfo

devel/py-virtualenv: Update to 21.2.3

ChangeLog:

  - https://github.com/pypa/virtualenv/releases/tag/21.2.2
  - https://github.com/pypa/virtualenv/releases/tag/21.2.3

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3devel/py-virtualenv/Makefile
+3-3devel/py-virtualenv/distinfo
+6-62 files

HardenedBSD/ports 02d022cx11/damask distinfo Makefile

x11/damask: Update to 0.3.2

Changelog: https://gitlab.gnome.org/subpop/damask/-/releases/v0.3.2

Reported by:    Repology
DeltaFile
+3-3x11/damask/distinfo
+1-1x11/damask/Makefile
+4-42 files

HardenedBSD/ports e5970ddgraphics/py-fotokilof distinfo Makefile

graphics/py-fotokilof: Update to 5.2.4

ChangeLog:      https://github.com/TeaM-TL/FotoKilof/releases/tag/5.2.4
Reported by:    Tomasz Łuczak <notifications at github.com>
DeltaFile
+3-3graphics/py-fotokilof/distinfo
+1-1graphics/py-fotokilof/Makefile
+4-42 files

HardenedBSD/ports 784904fnet/knxd distinfo Makefile, net/knxd/files patch-src_libserver_tcptunserver.cpp

net/knxd: udpate to 0.14.75

Changes:        https://github.com/knxd/knxd/compare/0.14.72...0.14.75
DeltaFile
+0-10net/knxd/files/patch-src_libserver_tcptunserver.cpp
+3-3net/knxd/distinfo
+1-2net/knxd/Makefile
+4-153 files

HardenedBSD/src 4391323sys/net iflib.c

iflib: drain admin task and fix teardown order on register failure

When IFDI_ATTACH_POST() fails (or netmap attach fails), iflib tears down with
ether_ifdetach(), taskqueue_free(ifc_tq), and IFDI_DETACH(). CTX_LOCK is still
held after ether_ifattach. ether_ifdetach() and taskqueue_drain(admin) must not
run under CTX_LOCK.

Teardown ordering (match iflib_device_deregister):

- Free the per-interface admin taskqueue after IFDI_DETACH / IFDI_QUEUES_FREE, not before.
- Drop IFNET_WLOCK() across IFDI_DETACH / IFDI_QUEUES_FREE so driver detach can sleep in
LinuxKPI workqueue drain, then retake IFNET_WLOCK() before iflib_free_intr_mem and fail_unlock.

MFC after:      2 weeks
Reviewed by:    gallatin, kgalazka, #iflib
Differential Revision: https://reviews.freebsd.org/D56316
DeltaFile
+18-1sys/net/iflib.c
+18-11 files

HardenedBSD/src d2b96f6sys/net iflib.c

iflib: Fix panic observed while doing sysctl -a with if_bnxt unload

Observed below kernel panic calltrace while performing sysctl -a
operation while unloading the if_bnxt driver,

Fatal trap 9: general protection fault while in kernel mode

KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe02a7569940
vpanic() at vpanic+0x136/frame 0xfffffe02a7569a70
panic() at panic+0x43/frame 0xfffffe02a7569ad0
trap_fatal() at trap_fatal+0x68/frame 0xfffffe02a7569af0
calltrap() at calltrap+0x8/frame 0xfffffe02a7569af0

trap 0x9, rip = 0xffffffff80c0b411, rsp = 0xfffffe02a7569bc0, rbp = 0xfffffe02a7569be0 ---
sysctl_handle_counter_u64() at sysctl_handle_counter_u64+0x61/frame 0xfffffe02a7569be0
sysctl_root_handler_locked() at sysctl_root_handler_locked+0x9c/frame 0xfffffe02a7569c30
sysctl_root() at sysctl_root+0x22f/frame 0xfffffe02a7569cb0
userland_sysctl() at userland_sysctl+0x196/frame 0xfffffe02a7569d50

    [22 lines not shown]
DeltaFile
+24-21sys/net/iflib.c
+24-211 files

HardenedBSD/ports 27419a5devel/py-pybind11 distinfo, devel/py-pybind11/files patch-CMakeLists.txt

devel/{,py-}pybind11: update 3.0.1 → 3.0.3
DeltaFile
+13-0devel/py-pybind11/files/patch-CMakeLists.txt
+11-0devel/pybind11/files/patch-CMakeLists.txt
+11-0devel/pybind11/files/patch-pybind11_commands.py
+9-2devel/pybind11/Makefile
+3-3devel/py-pybind11/distinfo
+3-3devel/pybind11/distinfo
+50-82 files not shown
+54-108 files

HardenedBSD/ports 551343emisc/claude-code Makefile

misc/claude-code: Add option USE_CURL_USER_AGENT

Problem:
Certain URLs reject requests from AI agents like Claude.
Example is https://bugs.freebsd.org.

Solution:
The USE_CURL_USER_AGENT option will make Claude to look like Curl.

Benerits to the user:
Claude will be able to read such URLs, summarize their content,
or perform other actions with the contents.
This makes Claude more usable when it comes to such protected URLs.

How it works:
Claude's Fetch tool uses the rgq() function in cli.js which returns:
Claude-User (claude-code/2.1.105; +https://support.anthropic.com/)

This UA is explicitly blocked by Anubis bot protection on bugs.freebsd.org

    [5 lines not shown]
DeltaFile
+12-2misc/claude-code/Makefile
+12-21 files

HardenedBSD/ports 0cb862fnet-im/linux-discord distinfo Makefile

net-im/linux-discord: Update to 0.0.133
DeltaFile
+3-3net-im/linux-discord/distinfo
+1-1net-im/linux-discord/Makefile
+4-42 files