HardenedBSD/src 2bee560sys/dev/asmc asmc.c asmcvar.h, sys/dev/rge if_rge.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+435-2sys/dev/asmc/asmc.c
+126-0sys/tools/syscalls/scripts/syscall_json.lua
+60-11tests/sys/kqueue/kqueue_fork.c
+12-16sys/dev/rge/if_rge.c
+19-0sys/tools/syscalls/core/scarg.lua
+10-0sys/dev/asmc/asmcvar.h
+662-2915 files not shown
+700-3321 files

HardenedBSD/src d47429asys/dev/asmc asmc.c asmcvar.h, sys/dev/rge if_rge.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+435-2sys/dev/asmc/asmc.c
+126-0sys/tools/syscalls/scripts/syscall_json.lua
+60-11tests/sys/kqueue/kqueue_fork.c
+12-16sys/dev/rge/if_rge.c
+19-0sys/tools/syscalls/core/scarg.lua
+10-0sys/dev/asmc/asmcvar.h
+662-2915 files not shown
+700-3321 files

HardenedBSD/ports ad9ace3lang/nickel distinfo Makefile.crates, www/ungoogled-chromium/files patch-chrome_browser_about__flags.cc patch-third__party_blink_renderer_platform_runtime__enabled__features.json5

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,221-0lang/nickel/distinfo
+609-0lang/nickel/Makefile.crates
+51-51www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc
+25-0lang/nickel/Makefile
+10-10www/ungoogled-chromium/files/patch-third__party_blink_renderer_platform_runtime__enabled__features.json5
+9-9www/ungoogled-chromium/files/patch-chrome_browser_ui_startup_startup__browser__creator__impl.cc
+1,925-7027 files not shown
+2,011-12533 files

HardenedBSD/ports 32d0835math/saga/files patch-src_saga__core_saga__cmd_saga__cmd.cpp patch-src_saga__core_saga__gui_dlg__about.cpp

math/saga: Update to 9.12.2

Fixes a crash in the landsat_scene_import tool in GDALOpen(Ex)(),
when trying to open a non-existing file

Unfortunately, the tarball still contains many files with CRLF line
endings, so dos2unix is used again.

Changelog:      https://sourceforge.net/p/saga-gis/wiki/Changelog%209.12.2/attachment/changelog_saga_9.12.2.txt
DeltaFile
+16-16math/saga/files/patch-src_saga__core_saga__cmd_saga__cmd.cpp
+14-14math/saga/files/patch-src_saga__core_saga__gui_dlg__about.cpp
+10-10math/saga/files/patch-CMakeLists.txt
+9-9math/saga/files/patch-src_saga__core_saga__gui_CMakeLists.txt
+8-8math/saga/files/patch-src_tools_imagery_imagery__svm_svm__grids.h
+8-8math/saga/files/patch-src_tools_imagery_imagery__svm_MLB__Interface.cpp
+65-652 files not shown
+72-718 files

HardenedBSD/ports a6bfc96www/ungoogled-chromium distinfo, www/ungoogled-chromium/files patch-chrome_browser_about__flags.cc patch-third__party_blink_renderer_platform_runtime__enabled__features.json5

www/ungoogled-chromium: update to 147.0.7727.101

Security:       https://vuxml.freebsd.org/freebsd/d93c247b-4dba-43ce-b5c0-ac5bd03bea8d.html
DeltaFile
+51-51www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc
+10-10www/ungoogled-chromium/files/patch-third__party_blink_renderer_platform_runtime__enabled__features.json5
+9-9www/ungoogled-chromium/files/patch-chrome_browser_ui_startup_startup__browser__creator__impl.cc
+7-7www/ungoogled-chromium/distinfo
+3-3www/ungoogled-chromium/files/patch-components_password__manager_core_browser_password__manual__fallback__flow.cc
+3-3www/ungoogled-chromium/files/patch-services_device_hid_BUILD.gn
+83-838 files not shown
+101-10114 files

HardenedBSD/ports 96a7b88lang Makefile, lang/nickel distinfo Makefile.crates

[NEW PORT] lang/nickel Universal configuration language

Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR:             294549
DeltaFile
+1,221-0lang/nickel/distinfo
+609-0lang/nickel/Makefile.crates
+25-0lang/nickel/Makefile
+16-0lang/nickel/pkg-descr
+1-0lang/Makefile
+1,872-05 files

HardenedBSD/ports 1cd34f6x11-drivers/xorgxrdp Makefile, x11-drivers/xorgxrdp-devel Makefile

x11-drivers/xorgxrdp{,-devel}: Bump after xorg update
DeltaFile
+1-1x11-drivers/xorgxrdp-devel/Makefile
+1-1x11-drivers/xorgxrdp/Makefile
+2-22 files

HardenedBSD/ports 2f88ad2sysutils/appjail distinfo Makefile

sysutils/appjail: Update to 4.11.1

ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v4.11.1

MFH:            2026Q2
DeltaFile
+3-3sysutils/appjail/distinfo
+1-1sysutils/appjail/Makefile
+4-42 files

HardenedBSD/ports 94e696dsysutils/appjail-devel distinfo Makefile

sysutils/appjail-devel: Update to 4.11.1.20260416

ChangeLog:
https://github.com/DtxdF/AppJail/commits/ddafd23acf2d30266be24d72085f7fbd6d32eb3f/

MFH:            2026Q2
DeltaFile
+3-3sysutils/appjail-devel/distinfo
+2-2sysutils/appjail-devel/Makefile
+5-52 files

HardenedBSD/ports 28d6130math/saga/files patch-src_saga__core_saga__cmd_saga__cmd.cpp patch-src_saga__core_saga__gui_dlg__about.cpp

math/saga: Fix patch phase

Forgot to commit updated patches, sorry for the breakage.

Reported by:    pkg-fallout
DeltaFile
+17-17math/saga/files/patch-src_saga__core_saga__cmd_saga__cmd.cpp
+15-15math/saga/files/patch-src_saga__core_saga__gui_dlg__about.cpp
+10-10math/saga/files/patch-src_saga__core_saga__gui_CMakeLists.txt
+9-9math/saga/files/patch-src_tools_imagery_imagery__svm_MLB__Interface.cpp
+9-9math/saga/files/patch-src_tools_imagery_imagery__svm_svm__grids.h
+13-0math/saga/files/patch-CMakeLists.txt
+73-606 files

HardenedBSD/src 2a1745dsys/tools/syscalls/core scarg.lua

syscalls: Preserve the attributes of the args

Lightly parse and preserve the attributes of the args as attributes.

Sponsored by:           Netflix
Reviewed by:            brooks
Differential Revision:  https://reviews.freebsd.org/D56407
DeltaFile
+19-0sys/tools/syscalls/core/scarg.lua
+19-01 files

HardenedBSD/src b3b23f2sys/tools/syscalls/scripts syscall_json.lua

syscall: Create a script to export the data as json

Create a script to export the parsed data as json. Include the
annotations for the system call arguments, since they are helpful to
downstream uses.

Sponsored by:           Netflix
Reviewed by:            brooks
Differential Revision:  https://reviews.freebsd.org/D56408
DeltaFile
+126-0sys/tools/syscalls/scripts/syscall_json.lua
+126-01 files

HardenedBSD/src 62a19cdsys/i386/i386 locore.S mpboot.S, sys/kern subr_ticks.S

i386: mark the stack as non-executable

Sponsored by:           Netflix
Reviewed by:            jhb
Differential Revision:  https://reviews.freebsd.org/D56411
DeltaFile
+2-0sys/i386/i386/locore.S
+2-0sys/i386/i386/mpboot.S
+2-0sys/i386/i386/support.S
+2-0sys/i386/i386/swtch.S
+2-0sys/kern/subr_ticks.S
+2-0sys/i386/i386/sigtramp.S
+12-03 files not shown
+18-09 files

HardenedBSD/src f5d0b30sbin/ipf/ippool ippool.5

ippool(5): Correct example in man page

The example provided puts the semicolon in the wrong place. It must
come after the file:// specification, not in it.

MFC after:      1 week
DeltaFile
+1-1sbin/ipf/ippool/ippool.5
+1-11 files

HardenedBSD/src 51d2c38tests/sys/kqueue kqueue_fork.c

tests: kqueue: improve diagnostics for our CPONFORK test

Notably, confirm in the child that our close-on-fork fd is actually
closed, and break RECV_ALL out into a table and check each bit
individually to provide a better message when the test fails.

While we're here, just switch to waitid() rather than trying to identify
the point where we have to make the switch.  This reduces maintenance
slightly, as keeping our assertion static would require still adding to
a _RECV_ALL mask *just* for that purpose.

Reviewed by:    kib, markj (both slightly earlier version)
Differential Revision:  https://reviews.freebsd.org/D56372
DeltaFile
+60-11tests/sys/kqueue/kqueue_fork.c
+60-111 files

HardenedBSD/src 6fb5df5share/vt/keymaps Makefile

br.lenovo.kdb: add it to Makefile

This keyboard was implemented but wasn't actually installed to the
system.

Fixes: 9357c694e8dca627c25b15529e8435b2ab3dd48b
MFC after: 1 day
Relnotes: yes
DeltaFile
+1-0share/vt/keymaps/Makefile
+1-01 files

HardenedBSD/src 4390c37share/man/man4 rge.4, sys/dev/rge if_rge.c if_rge_sysctl.c

rge: add disable_aspm tunable for PCIe power management

Add a per-interface loader tunable dev.rge.%d.disable_aspm to
disable PCIe ASPM (L0s/L1) and ECPM on the RTL8125/8126/8127.

Disabling ASPM reduces latency at the cost of higher power
consumption. Default is off (ASPM left as configured by BIOS).

Signed-off-by: Christos Longros <chris.longros at gmail.com>

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D56103
DeltaFile
+12-16sys/dev/rge/if_rge.c
+9-0share/man/man4/rge.4
+5-0sys/dev/rge/if_rge_sysctl.c
+1-0sys/dev/rge/if_rgevar.h
+27-164 files

HardenedBSD/src aae9068sys/dev/asmc asmc.c asmcvar.h

asmc: add automatic voltage/current/power/ambient sensor detection

Apple SMCs contain numerous undocumented voltage, current, power,
and ambient light sensors. This change adds automatic detection
and registration of these sensors as sysctls.

New sysctl trees:
  dev.asmc.0.voltage.*  - Voltage sensors (millivolts)
  dev.asmc.0.current.*  - Current sensors (milliamps)
  dev.asmc.0.power.*    - Power sensors (milliwatts)
  dev.asmc.0.ambient.*  - Ambient light sensors

Implementation:
- Scans all SMC keys at attach time via asmc_key_dump_by_index()
- Identifies sensors by key prefix patterns:
  - Voltage: VC*, VD*, VG*, VP*, VI*
  - Current: I{C,D,G,M,N,O,H,P,B,A,L}*
  - Power:   P{C,D,N,S,T,H,F,Z,z}*
  - Light:   ALV*, ALS*

    [24 lines not shown]
DeltaFile
+435-2sys/dev/asmc/asmc.c
+10-0sys/dev/asmc/asmcvar.h
+445-22 files

HardenedBSD/src 65ccf92sys/kern vfs_syscalls.c, sys/sys fcntl.h

openat(2): check that userspace pass known and allowed flags

(cherry picked from commit 8a5601cff1ea32ab63df1377f61620e4f91999b3)
DeltaFile
+6-0sys/sys/fcntl.h
+4-1sys/kern/vfs_syscalls.c
+10-12 files

HardenedBSD/src 52aed37lib/libthr libthr.3

libthr.3: describe SIGTHR

(cherry picked from commit 934a35ac2bbbcf8cd65d8824fa824eb5c6170c88)
DeltaFile
+19-0lib/libthr/libthr.3
+19-01 files

HardenedBSD/src 090c9easys/kern vfs_aio.c kern_event.c

kevent: do not check knote lists being empty before removing a knote

(cherry picked from commit 31069fdbdae1027a6f1af7d56d418de4428ac6d9)
DeltaFile
+2-4sys/kern/vfs_aio.c
+1-2sys/kern/kern_event.c
+3-62 files

HardenedBSD/src 46b2975lib/libthr libthr.3

libthr.3: describe what we mean by C runtime environment.

(cherry picked from commit fa912e3b9b5c074793bb1899f8256ea4baf72631)
DeltaFile
+6-0lib/libthr/libthr.3
+6-01 files

HardenedBSD/src ee3ef70lib/libsys fork.2

fork.2: note that all methods to pre-resolve symbols have consequences

(cherry picked from commit 660498986a8e56025d9d2f9c6a0813c09a27ba8e)
DeltaFile
+2-0lib/libsys/fork.2
+2-01 files

HardenedBSD/src 803a892include unistd.h

unistd.h: _Fork(2) is required by POSIX 2024

(cherry picked from commit f286933c950f6308117c8400f36f3160f6227491)
DeltaFile
+4-1include/unistd.h
+4-11 files

HardenedBSD/src 6c1672asys/kern subr_early.c

subr_early.c: cleanup includes

(cherry picked from commit 4da93b9a8a5411f7386e79053d9c46df29627594)
DeltaFile
+0-2sys/kern/subr_early.c
+0-21 files

HardenedBSD/src b49b3cclib/libsys ntp_adjtime.2

ntp_adjtime.2: Increase visibility

+ s/ntp/ntpd/ for correctness + apropos results in document description
+ silence a linter warning by escaping a period with a zero-width space

MFC after:      3 days
DeltaFile
+3-3lib/libsys/ntp_adjtime.2
+3-31 files

HardenedBSD/src 23b2b35sys/netinet6 nd6_rtr.c nd6.h, sys/powerpc/booke pmap.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+336-1sys/netinet6/nd6_rtr.c
+13-13sys/powerpc/include/tlb.h
+18-6sys/powerpc/mpc85xx/platform_mpc85xx.c
+17-6sys/powerpc/booke/pmap.c
+15-2usr.sbin/rtadvd/rtadvd.c
+13-1sys/netinet6/nd6.h
+412-2913 files not shown
+444-3419 files

HardenedBSD/src 1abf532sys/netinet6 nd6_rtr.c nd6.h, sys/powerpc/booke pmap.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+336-1sys/netinet6/nd6_rtr.c
+13-13sys/powerpc/include/tlb.h
+18-6sys/powerpc/mpc85xx/platform_mpc85xx.c
+17-6sys/powerpc/booke/pmap.c
+15-2usr.sbin/rtadvd/rtadvd.c
+13-1sys/netinet6/nd6.h
+412-2913 files not shown
+444-3419 files

HardenedBSD/ports 36c4f42devel/cargo-readme distinfo Makefile.crates, multimedia/dvdstyler pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-1,721multimedia/lebiniou-data/pkg-plist
+0-334multimedia/dvdstyler/pkg-plist
+113-129devel/cargo-readme/distinfo
+0-133multimedia/lebiniou/pkg-plist
+55-63devel/cargo-readme/Makefile.crates
+114-0multimedia/kdenlive/pkg-plist
+282-2,380359 files not shown
+1,702-3,783365 files

HardenedBSD/src cddcca7sys/conf newvers.sh, usr.bin/yacc config.h

15.1: Update stable/15 to -PRERELEASE

This marks the start of the FreeBSD 15.1 release cycle; the stable/15
tree is now in "code slush".

Developers are encouraged to prioritize fixing bugs (and/or merging bug
fixes from HEAD) over new features at this time.  Commit approval from
re@ is not required but if new features introduce problems they may be
removed from the release.

Approved by:    re (implicit)
Sponsored by:   OpenSats Initiative
DeltaFile
+2-2sys/conf/newvers.sh
+1-1usr.bin/yacc/config.h
+3-32 files