HardenedBSD/src 97cd80bsys/net if_lagg.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+38-21sys/net/if_lagg.c
+38-211 files

HardenedBSD/src 5dbcb0dsys/kern kern_synch.c kern_ktrace.c, sys/sys ktrace.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+11-15sys/kern/kern_synch.c
+16-2sys/kern/kern_ktrace.c
+1-0sys/sys/ktrace.h
+28-173 files

HardenedBSD/ports 4f0477adevel Makefile, devel/R-cran-pkgload distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+16-3x11/slim/Makefile
+3-3devel/R-cran-pkgload/distinfo
+3-3math/octave-forge-llms/distinfo
+3-3math/octave-forge-io/distinfo
+1-1multimedia/navidrome/Makefile
+1-1devel/Makefile
+27-143 files not shown
+30-179 files

HardenedBSD/ports 99b7707devel Makefile

devel/Makefile: Fix spago entry after renaming

PR:             292941 292975
Fixes:  d766b804ac192340a2809f069ff309acfe0b064b
DeltaFile
+1-1devel/Makefile
+1-11 files

HardenedBSD/ports 8e9cbb7multimedia/navidrome Makefile

multimedia/navidrome: Return to pool

This is a useful piece of software but between Go and Node being
grotesque in their own ways I don't enjoy working on this any longer.
DeltaFile
+1-1multimedia/navidrome/Makefile
+1-11 files

HardenedBSD/ports 9d87327devel/R-cran-pkgload distinfo Makefile

devel/R-cran-pkgload: Update to 1.5.0

Changelog:
https://cran.r-project.org/web/packages/pkgload/news/news.html
DeltaFile
+3-3devel/R-cran-pkgload/distinfo
+1-1devel/R-cran-pkgload/Makefile
+4-42 files

HardenedBSD/src 0b17876sys/kern kern_synch.c kern_ktrace.c, sys/sys ktrace.h

ktrcsw(): should not be called when the thread is owning interlock or on sleepq

(cherry picked from commit 245157fd8a382c3989075789ee98582665f3b31d)
DeltaFile
+11-15sys/kern/kern_synch.c
+16-2sys/kern/kern_ktrace.c
+1-0sys/sys/ktrace.h
+28-173 files

HardenedBSD/src 5ba503fsys/net if_lagg.c

lagg: Remove the member pr_num from struct lagg_proto

It is set but never used. Remove it to avoid confusion and save a
little space.

While here, use designated initializers to initialize the LAGG protocol
table. That improves readability, and it will be safer to initialize the
table if we introduce new protocols in the future.

No functional change intended.

Reviewed by:    glebius
MFC after:      5 days
Differential Revision:  https://reviews.freebsd.org/D55124
DeltaFile
+6-13sys/net/if_lagg.c
+6-131 files

HardenedBSD/src a622030sys/net if_lagg.c

lagg: Make the none protocol a first-class citizen

All the other protocols have corresponding start and input routines,
which are used in the fast path. Currently the none protocol is
treated specially. In the fast path it is checked to indicate whether
a working protocol is configured. There are two issues raised by this
design:

1. In production, other protocols are commonly used, but not the
none protocol. It smells like an overkill to always check it in the
fast path. It is unfair to other commonly used protocols.

2. PR 289017 reveals that there's a small window between checking the
protocol and calling lagg_proto_start(). lagg_proto_start() is possible
to see the none protocol and do NULL deferencing.

Fix them by making the none protocol a first-class citizen so that it
has start and input routines just the same as other protocols. Then we
can stop checking it in the fast path, since lagg_proto_start() and

    [13 lines not shown]
DeltaFile
+33-9sys/net/if_lagg.c
+33-91 files

HardenedBSD/ports f0e1b02x11/slim Makefile

x11/slim: Add support for xlibre

PR:             291597
Approved by:    maintainer timeout (50+ days)
DeltaFile
+16-3x11/slim/Makefile
+16-31 files

HardenedBSD/ports 13769dfmath/octave-forge-io distinfo Makefile

math/octave-forge-io: Update to 2.7.1.
DeltaFile
+3-3math/octave-forge-io/distinfo
+1-1math/octave-forge-io/Makefile
+4-42 files

HardenedBSD/ports 1dcd5efmath/octave-forge-llms distinfo Makefile

math/octave-forge-llms: Update to 0.1.4.
DeltaFile
+3-3math/octave-forge-llms/distinfo
+1-1math/octave-forge-llms/Makefile
+4-42 files

HardenedBSD/src fe035eesys/dev/cxgbe t4_main.c t4_sge.c, usr.bin/diff diffreg.c diff.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+41-0sys/dev/cxgbe/t4_main.c
+10-5sys/dev/cxgbe/t4_sge.c
+7-3usr.bin/diff/diffreg.c
+1-1usr.bin/diff/diff.c
+59-94 files

HardenedBSD/src 890a7b3bin/sh sh.1, contrib/spleen spleen-32x64.bdf spleen-16x32.bdf

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+703-64contrib/spleen/spleen-32x64.bdf
+371-20contrib/spleen/spleen-16x32.bdf
+337-27contrib/spleen/spleen-12x24.bdf
+163-161sys/dev/sym/sym_hipd.c
+213-6contrib/spleen/spleen-8x16.bdf
+183-10bin/sh/sh.1
+1,970-28859 files not shown
+2,335-50365 files

HardenedBSD/ports 332e771devel/py-nvidia-ml-py Makefile, devel/yaml-cpp Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+35-40games/minecraft-server/pkg-plist
+25-0sysutils/py-nvitop/Makefile
+14-10devel/yaml-cpp/files/patch-CMakeLists.txt
+21-0devel/py-nvidia-ml-py/Makefile
+6-6devel/yaml-cpp/Makefile
+10-2www/angie/Makefile
+111-5852 files not shown
+233-13558 files

HardenedBSD/ports d11b26bmail/py-postfix-mta-sts-resolver Makefile distinfo

mail/py-postfix-mta-sts-resolver: Update to 1.5.1

- switch to use 'USE_PYTHON=pep517'
- fix build error on Python 3.12[*] and confirmed on 3.13 and 3.14

PR:             292851 [*]
Reported by:    portscout, Mike Andrews <mandrews at bit0.com> [*]
ChangeLogs:     https://github.com/Snawoot/postfix-mta-sts-resolver/compare/v1.4.0...v1.5.1
Approved by:    hrs (mentor, blanket)
DeltaFile
+4-4mail/py-postfix-mta-sts-resolver/Makefile
+3-3mail/py-postfix-mta-sts-resolver/distinfo
+7-72 files

HardenedBSD/src 4013406usr.bin/diff diff.c

diff: Bump version number

MFC after:      1 week
Sponsored by:   Klara, Inc.
DeltaFile
+1-1usr.bin/diff/diff.c
+1-11 files

HardenedBSD/ports 36632bcsecurity/boringssl Makefile distinfo, security/boringssl/files patch-CMakeLists.txt

security/boringssl: update to the recent snapshot

Sponsored by:   tipi.work
DeltaFile
+3-3security/boringssl/Makefile
+3-3security/boringssl/distinfo
+2-2security/boringssl/files/patch-CMakeLists.txt
+4-0security/boringssl/pkg-plist
+12-84 files

HardenedBSD/ports a8bc44atextproc/R-cran-bibtex Makefile distinfo

textproc/R-cran-bibtex: Update to 0.5.2

Reported by:    portscout
DeltaFile
+2-4textproc/R-cran-bibtex/Makefile
+3-3textproc/R-cran-bibtex/distinfo
+5-72 files

HardenedBSD/ports 3e3ffacdevel/R-cran-lubridate Makefile distinfo

devel/R-cran-lubridate: Update to 1.9.5

- Update license
- Switch WWW to canonical form

ChangeLog: https://cran.r-project.org/web/packages/lubridate/news/news.html
DeltaFile
+5-5devel/R-cran-lubridate/Makefile
+3-3devel/R-cran-lubridate/distinfo
+8-82 files

HardenedBSD/ports 8d40b7awww/angie Makefile, www/angie-module-dav-ext Makefile

www/angie*: Bump PORTREVISION after www/angie update

pkg does not honor RUN_DEPENDS versions, hence it fails to re-install
module packages after updates to www/angie. The only workaround is
bumping PORTREVISION for *all* modules.

PR:     292648
DeltaFile
+10-2www/angie/Makefile
+1-1www/angie-module-dav-ext/Makefile
+1-1www/angie-module-echo/Makefile
+1-1www/angie-module-jwt/Makefile
+1-1www/angie-module-enhanced-memcached/Makefile
+1-1www/angie-module-eval/Makefile
+15-717 files not shown
+32-2423 files

HardenedBSD/ports bf0cbcbsysutils Makefile, sysutils/py-nvitop Makefile pkg-descr

sysutils/py-nvitop: New port: Interactive NVIDIA-GPU process viewer

An interactive NVIDIA-GPU process viewer and beyond, the one-stop
solution for GPU process management.

WWW: https://github.com/XuehaiPan/nvitop

PR:             289083
Approved by:    eduardo (mentor)
DeltaFile
+25-0sysutils/py-nvitop/Makefile
+5-0sysutils/py-nvitop/pkg-descr
+3-0sysutils/py-nvitop/distinfo
+1-0sysutils/Makefile
+34-04 files

HardenedBSD/ports 8127a68devel Makefile, devel/py-nvidia-ml-py Makefile distinfo

devel/py-nvidia-ml-py: New port: Python bindings to NVIDIA Management Library

This library provides a Python interface to GPU management and
monitoring functions for NVIDIA GPUs.

WWW: https://pypi.org/project/nvidia-ml-py/

PR:             289082
Approved by:    eduardo (mentor)
DeltaFile
+21-0devel/py-nvidia-ml-py/Makefile
+3-0devel/py-nvidia-ml-py/distinfo
+2-0devel/py-nvidia-ml-py/pkg-descr
+1-0devel/Makefile
+27-04 files

HardenedBSD/ports e4cee8fwww/librewolf distinfo Makefile

www/librewolf: Update 147.0.2-1 => 147.0.3-1

Release Notes:
https://www.firefox.com/en-US/firefox/147.0.3/releasenotes/

PR:     292948
MFH:    2026Q1
DeltaFile
+3-3www/librewolf/distinfo
+1-2www/librewolf/Makefile
+4-52 files

HardenedBSD/ports ad054d2games/minecraft-server pkg-plist Makefile

games/minecraft-server: Update to 1.21.11

Changelog:
https://www.minecraft.net/en-us/article/minecraft-java-edition-1-21-11

PR:             291578
Approved by:    Jonathan Price <freebsd at jonathanprice.org> (maintainer)
DeltaFile
+35-40games/minecraft-server/pkg-plist
+3-3games/minecraft-server/Makefile
+3-3games/minecraft-server/distinfo
+41-463 files

HardenedBSD/src f99ca31sys/dev/sym sym_hipd.c

sym(4): Use memcpy(9) instead of bcopy(9)

The overlap handling of bcopy(9) is not required in these cases.

Obtained from:  BSD-licensed Linux sym53c8xx driver

(cherry picked from commit c8e9479c74a2af0f6c665e930091c163bf760fd5)
DeltaFile
+5-5sys/dev/sym/sym_hipd.c
+5-51 files

HardenedBSD/src 56a09f7sys/dev/sym sym_hipd.c

sym(4): Provide a DEVICE_DETACH(9) method

This also fixes sym_cam_free() to tear things down correctly, i. e. in
opposite order of setup, as well as sym_cam_attach() to not free devq
and SIM twice in the failure case.

(cherry picked from commit 518c01b31e96bbe8353a551885a61e7da6aed5f6)
DeltaFile
+19-15sys/dev/sym/sym_hipd.c
+19-151 files

HardenedBSD/src 3445fd3sys/dev/sym sym_hipd.c

sym(4): Map HCB memory as uncacheable also on x86

As part of making the chip-specific mix and match of different accesses
(DMA/bus space) work as desired, the intent is to map the HCB memory as
uncacheable. Prior to VM_MEMATTR_*, the !x86 way of indicating this to
bus_dmamem_alloc(9) was BUS_DMA_COHERENT. Then later on in 2db99100a4,
BUS_DMA_NOCACHE was hooked up to VM_MEMATTR_UNCACHEABLE for x86. As it
turns out, still as of today bus_dmamem_alloc(9) differs in this regard
across architectures. On arm, it still supports BUS_DMA_COHERENT only
for requesting uncacheable DMA and x86 still uses BUS_DMA_NOCACHE only.
On arm64 and riscv, BUS_DMA_COHERENT seems to effectively be an alias
for BUS_DMA_NOCACHE.

Thus, allocate the HCB memory with BUS_DMA_COHERENT | BUS_DMA_NOCACHE,
so we get uncacheable memory on all architectures including x86 and so
loads and stores from/to HCB won't get reordered. However, even on x86
we still need to use at least compiler barriers to achieve the desired
program order.


    [12 lines not shown]
DeltaFile
+19-27sys/dev/sym/sym_hipd.c
+19-271 files

HardenedBSD/src 692dd70sys/dev/sym sym_hipd.c

sym(4): Consistently use device_printf(9) where applicable

(cherry picked from commit 48eee744b540ef0413fa1cb543dde6e49e7f2ac4)
DeltaFile
+114-108sys/dev/sym/sym_hipd.c
+114-1081 files

HardenedBSD/src 46cf886sys/cam/scsi scsi_enc_ses.c, sys/dev/hptmv entry.c gui_lib.c

style(9): white space after ; and around binary operators

in for() loops.  Also, use 'while', where only the
conditional test of 'for' was used.

Reviewed by: sjg

(cherry picked from commit 0050289464fa56ec79e060b8d8378b9ff7145a0e)
DeltaFile
+16-17sys/dev/hptmv/entry.c
+7-7sys/dev/ocs_fc/ocs_mgmt.c
+6-7sys/dev/tws/tws.c
+6-6sys/dev/sym/sym_hipd.c
+5-7sys/dev/hptmv/gui_lib.c
+3-3sys/cam/scsi/scsi_enc_ses.c
+43-4724 files not shown
+82-8630 files