HardenedBSD/src dbf1d21lib/libc/tests/stdio printfloat_test.c, release Makefile

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+69-0stand/efi/acpica/acpi_detect.c
+2-40stand/efi/loader/main.c
+41-0stand/efi/acpica/include/acpi_detect.h
+13-0lib/libc/tests/stdio/printfloat_test.c
+2-2release/Makefile
+4-0stand/efi/loader/Makefile
+131-428 files not shown
+139-5414 files

HardenedBSD/src e5922d1lib/libc/tests/stdio printfloat_test.c, release Makefile

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+69-0stand/efi/acpica/acpi_detect.c
+2-40stand/efi/loader/main.c
+41-0stand/efi/acpica/include/acpi_detect.h
+13-0lib/libc/tests/stdio/printfloat_test.c
+4-0stand/efi/loader/Makefile
+2-2release/Makefile
+131-428 files not shown
+139-5414 files

HardenedBSD/src 19b1b50contrib/libxo/libxo xo_encoder.h xo.h

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+8-0contrib/libxo/libxo/xo_encoder.h
+8-0contrib/libxo/libxo/xo.h
+16-02 files

HardenedBSD/src af4fe31contrib/libxo/libxo xo.h xo_encoder.h, release Makefile

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+8-0contrib/libxo/libxo/xo.h
+8-0contrib/libxo/libxo/xo_encoder.h
+3-0release/scripts/pkgbase-stage.lua
+1-1release/Makefile
+20-14 files

HardenedBSD/ports 4b6959bsecurity/nuclei distinfo, www/filebrowser-quantum distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+52-0x11-wm/niri/files/patch-libdisplay-info-0.3
+52-0x11-wm/cosmic-comp/files/patch-libdisplay-info-0.3
+7-7www/filebrowser-quantum/distinfo
+5-5www/katana/distinfo
+5-5security/nuclei/distinfo
+2-6x11-wm/cosmic-comp/distinfo
+123-2328 files not shown
+164-6334 files

HardenedBSD/ports 6de1fe4www/py-dj52-django-stubs-ext distinfo Makefile

www/py-dj52-django-stubs-ext: Update to 5.2.5

ChangeLog:
https://github.com/typeddjango/django-stubs/releases/tag/5.2.5
DeltaFile
+3-3www/py-dj52-django-stubs-ext/distinfo
+1-1www/py-dj52-django-stubs-ext/Makefile
+4-42 files

HardenedBSD/ports e761499www/filebrowser-quantum distinfo Makefile

www/filebrowser-quantum: Update to 0.8.5-beta

ChangeLog:
https://github.com/gtsteffaniak/filebrowser/releases/tag/v0.8.5-beta
DeltaFile
+7-7www/filebrowser-quantum/distinfo
+1-1www/filebrowser-quantum/Makefile
+8-82 files

HardenedBSD/src bd7032esys/geom/concat g_concat.c, sys/geom/multipath g_multipath.c

GEOM: remove the redundant if statement

g_provider_by_name already skips the leading '/dev/' so these if
statements are redundant. This changes some error messages, but those
aren't parsed. g_concat also calls g_concat_find_disk, but it also skips
/dev/ if present at the start of the string.

Reviewed by: imp, Elliot Mitchell
Pull Request: https://github.com/freebsd/freebsd-src/pull/1793
DeltaFile
+0-3sys/geom/multipath/g_multipath.c
+0-2sys/geom/part/g_part.c
+0-2sys/geom/raid/g_raid.c
+0-2sys/geom/concat/g_concat.c
+0-94 files

HardenedBSD/src 9dd78dblib/libc/gdtoa _hdtoa.c _hldtoa.c, lib/libc/tests/stdio printfloat_test.c

libc: prevent incorrect %a/%La rounding at full precision

In __hdtoa() and __hldtoa(), rounding is incorrectly applied when
the requested precision exactly matches the number of significant
hexadecimal digits. In this case, the redux adjustment can trigger
an unintended exponent increment and shift the rounding position
left by one bit. This causes the least significant digit to be
rounded incorrectly.

The fix adds a new condition based on MAX_HEX_DIGITS (derived from
MANT_DIG) so that rounding is performed only when precision is
strictly less than the number of significant digits. This avoids
the unintended shift while preserving correct rounding for other
cases.

A new regression test
(printfloat_test:hexadecimal_rounding_offset_eq_exp) covers both
the binary64 (%.13a) and binary128 (%.28La on arm64) cases that
previously fail, ensuring the bug does not regress.

    [12 lines not shown]
DeltaFile
+13-0lib/libc/tests/stdio/printfloat_test.c
+2-1lib/libc/gdtoa/_hdtoa.c
+2-1lib/libc/gdtoa/_hldtoa.c
+17-23 files

HardenedBSD/ports ce23aa5graphics/wayland-protocols distinfo pkg-plist

graphics/wayland-protocols: update to 1.45

Release Announcement: https://lore.freedesktop.org/wayland-devel/aEw0AP7h6T8l11ug@gmail.com/T/#u

PR:             289523
Approved by:    manu (x11)
DeltaFile
+3-3graphics/wayland-protocols/distinfo
+5-0graphics/wayland-protocols/pkg-plist
+1-1graphics/wayland-protocols/Makefile
+9-43 files

HardenedBSD/src 3b6f0edshare/man/man9 taskqueue.9

taskqueue.9: replace ithread(9) with intr_event(9)

Signed-off-by: Miroslav Cimerman <mc at doas.su>
Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/1845
DeltaFile
+1-1share/man/man9/taskqueue.9
+1-11 files

HardenedBSD/src c8b87aastand/efi/acpica acpi_detect.c, stand/efi/acpica/include acpi_detect.h

loader: Move ACPI RSDP detection

Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/1843
DeltaFile
+69-0stand/efi/acpica/acpi_detect.c
+2-40stand/efi/loader/main.c
+41-0stand/efi/acpica/include/acpi_detect.h
+4-0stand/efi/loader/Makefile
+116-404 files

HardenedBSD/src da62a29release Makefile, release/scripts pkgbase-stage.lua

release: Pass ABI to pkgbase-stage.lua

We then pass ABI from pkgbase-stage.lua to pkg(8); without this,
cross-building releases with PKGBASE enabled fails with

pkg: wrong architecture: ...
pkg: repository FreeBSD-base contains packages with wrong ABI: ...

MFC after:      1 minute
Discussed with: emaste, jrtc27
Sponsored by:   https://www.patreon.com/c/cperciva

(cherry picked from commit 340e68fd7c0d62cac1f0876b6475a89df5065db5)
DeltaFile
+3-0release/scripts/pkgbase-stage.lua
+1-1release/Makefile
+4-12 files

HardenedBSD/src fa9ea99release Makefile

release: CLEANDIRS += pkgdb

This directory gets created by pkgbase-stage.lua.

MFC after:      3 days
Sponsored by:   https://www.patreon.com/c/cperciva
DeltaFile
+1-1release/Makefile
+1-11 files

HardenedBSD/src 340e68frelease Makefile, release/scripts pkgbase-stage.lua

release: Pass ABI to pkgbase-stage.lua

We then pass ABI from pkgbase-stage.lua to pkg(8); without this,
cross-building releases with PKGBASE enabled fails with

pkg: wrong architecture: ...
pkg: repository FreeBSD-base contains packages with wrong ABI: ...

MFC after:      1 minute
Discussed with: emaste, jrtc27
Sponsored by:   https://www.patreon.com/c/cperciva
DeltaFile
+3-0release/scripts/pkgbase-stage.lua
+1-1release/Makefile
+4-12 files

HardenedBSD/src c065db9contrib/libxo/libxo xo.h xo_encoder.h

contrib/libxo: fix API header files inclusions in C++ source files

C++ source files need `extern "C"` to disable C++ name mangling.

MFC after:      1 week
Reviewed by:    aokblast (previous version), phil, imp (previous version)
Differential Revision:  https://reviews.freebsd.org/D47930

(cherry picked from commit 11ace56fa030185025936c795d5cf7c57b266835)
DeltaFile
+8-0contrib/libxo/libxo/xo.h
+8-0contrib/libxo/libxo/xo_encoder.h
+16-02 files

HardenedBSD/src 6faaef2contrib/libxo/libxo xo.h xo_encoder.h

contrib/libxo: fix API header files inclusions in C++ source files

C++ source files need `extern "C"` to disable C++ name mangling.

MFC after:      1 week
Reviewed by:    aokblast (previous version), phil, imp (previous version)
Differential Revision:  https://reviews.freebsd.org/D47930

(cherry picked from commit 11ace56fa030185025936c795d5cf7c57b266835)
DeltaFile
+8-0contrib/libxo/libxo/xo.h
+8-0contrib/libxo/libxo/xo_encoder.h
+16-02 files

HardenedBSD/ports 2a78009sysutils/libdisplay-info distinfo, x11-wm/cosmic-comp distinfo

sysutils/libdisplay-info: update to 0.3.0

Changes:        https://gitlab.freedesktop.org/emersion/libdisplay-info/-/releases/0.3.0
Reported by:    GitLab (notify releases)
DeltaFile
+52-0x11-wm/niri/files/patch-libdisplay-info-0.3
+52-0x11-wm/cosmic-comp/files/patch-libdisplay-info-0.3
+2-6x11-wm/cosmic-comp/distinfo
+2-6x11-wm/niri/distinfo
+3-3sysutils/libdisplay-info/distinfo
+1-3x11-wm/niri/Makefile.crates
+112-1817 files not shown
+130-3323 files

HardenedBSD/ports 68f1367security/nuclei distinfo Makefile

security/nuclei: Update to 3.4.10

ChangeLog:
https://github.com/projectdiscovery/nuclei/releases/tag/v3.4.10
DeltaFile
+5-5security/nuclei/distinfo
+2-2security/nuclei/Makefile
+7-72 files

HardenedBSD/ports 8375d0bwww/katana distinfo Makefile

www/katana: Update to 1.2.2

ChangeLog:
https://github.com/projectdiscovery/katana/releases/tag/v1.2.2
DeltaFile
+5-5www/katana/distinfo
+1-2www/katana/Makefile
+6-72 files

HardenedBSD/src 1ed3aadsys/contrib/openzfs/cmd arc_summary zarcsummary, sys/contrib/openzfs/man/man1 arcstat.1 zarcstat.1

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+0-1,080sys/contrib/openzfs/cmd/arc_summary
+1,073-0sys/contrib/openzfs/cmd/zarcsummary
+0-812sys/contrib/openzfs/cmd/arcstat.in
+805-0sys/contrib/openzfs/cmd/zarcstat.in
+0-429sys/contrib/openzfs/man/man1/arcstat.1
+427-0sys/contrib/openzfs/man/man1/zarcstat.1
+2,305-2,321118 files not shown
+5,605-3,074124 files

HardenedBSD/src 9fc24bcsys/contrib/openzfs/cmd arc_summary zarcsummary, sys/contrib/openzfs/man/man1 arcstat.1 zarcstat.1

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+0-1,080sys/contrib/openzfs/cmd/arc_summary
+1,073-0sys/contrib/openzfs/cmd/zarcsummary
+0-812sys/contrib/openzfs/cmd/arcstat.in
+805-0sys/contrib/openzfs/cmd/zarcstat.in
+0-429sys/contrib/openzfs/man/man1/arcstat.1
+427-0sys/contrib/openzfs/man/man1/zarcstat.1
+2,305-2,321118 files not shown
+5,605-3,074124 files

HardenedBSD/src b8d8289lib/libjail jail.c, lib/libsys jail.2

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+29-88sys/kern/kern_jaildesc.c
+27-81sys/kern/kern_jail.c
+6-87lib/libsys/jail.2
+8-8lib/libjail/jail.c
+3-5sys/sys/jaildesc.h
+73-2695 files

HardenedBSD/ports 408ae3earchivers/py-zlib-ng/files patch-pyproject.toml, graphics/drm_info/files patch-libdrm-2.4.123

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+315-214sysutils/nix/pkg-plist
+249-0net/neatvnc/files/patch-aml1
+178-0net/wayvnc/files/patch-aml1
+37-115sysutils/nix/Makefile
+55-0graphics/drm_info/files/patch-libdrm-2.4.123
+22-5archivers/py-zlib-ng/files/patch-pyproject.toml
+856-33445 files not shown
+1,054-46151 files

HardenedBSD/ports 0028b32sysutils/moor distinfo Makefile

sysutils/moor: Update 2.1.0 => 2.1.1

While here, replace 'moor' with ${PORTNAME} in PLIST_FILES entries.

Changelog (only windows-related):
https://github.com/walles/moor/releases/tag/v2.1.1

PR:             289555
Reported by:    portscout
DeltaFile
+5-5sysutils/moor/distinfo
+3-3sysutils/moor/Makefile
+8-82 files

HardenedBSD/ports 48dcd22lang/luajit-openresty distinfo Makefile

lang/luajit-openresty: update to 2.1-20250826

Changelog:
https://github.com/openresty/luajit2/compare/v2.1-20250529...v2.1-20250826
DeltaFile
+3-3lang/luajit-openresty/distinfo
+2-3lang/luajit-openresty/Makefile
+5-62 files

HardenedBSD/ports d5fa9f6sysutils/lazyssh Makefile

sysutils/lazyssh: Fix sanity test

Due to port not having a default option, a sanity
test error appears, now fixing it by defining a
default one from the choices.

PR:             289457
Approved by:    yuri@ (Mentor, implicit)

Fixes:          5b93a8e048c7c85b36cb8ae3e0a7dba2407b9790
DeltaFile
+1-0sysutils/lazyssh/Makefile
+1-01 files

HardenedBSD/src 5df0b57lib/libsys jail.2, sys/kern kern_jaildesc.c kern_jail.c

MFC jaildesc: remove file-mode-based access controls

Jail descriptors were given a file-like mode, user, and group, for the
purpose of controlling how the descriptor may be used.  This is too far
removed from the file paradigm to make sense.  Remove it in favor of a
better access control method to be added, such as Capsicum.

Also add missing code in jaildesc_fill_kinfo.

Reported by:    crest at rlwinm.de, kib
MFC after:      3 days

(cherry picked from commit d81b337d690c971d60c731494795ee4b81fb929e)
DeltaFile
+25-83sys/kern/kern_jaildesc.c
+9-63sys/kern/kern_jail.c
+0-67lib/libsys/jail.2
+3-5sys/sys/jaildesc.h
+37-2184 files

HardenedBSD/src 0c23ee9lib/libjail jail.c, sys/kern kern_jail.c kern_jaildesc.c

MFC jaildesc: fix typo and style(9) violations.

Reported by:    kib
MFC after:      3 days

(cherry picked from commit d8d5324ef5335dd9404db7263be2271610245e10)
DeltaFile
+18-18sys/kern/kern_jail.c
+13-13sys/kern/kern_jaildesc.c
+8-8lib/libjail/jail.c
+39-393 files

HardenedBSD/src 595a705lib/libsys jail.2, sys/kern kern_jaildesc.c

MFC jaildesc: replace EBADF with EINVAL

Following fd9e09cb, EBADF is not the suitable error code for a non-
jail descriptor passed to jail_set, jail_get, jail_attach_fd, and
jail_remove_fd.

Reported by:    kib

(cherry picked from commit 16f600dc30b7bb82429660e540da802a1e3f7449)
DeltaFile
+6-20lib/libsys/jail.2
+1-1sys/kern/kern_jaildesc.c
+7-212 files