HardenedBSD/src 03a7a1asys/amd64/include ifunc.h, sys/i386/include ifunc.h

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+34-6sys/x86/x86/local_apic.c
+5-0sys/i386/include/ifunc.h
+0-5sys/netlink/ktest_netlink_message_writer.c
+5-0sys/amd64/include/ifunc.h
+1-1sys/netlink/ktest_netlink_message_writer.h
+45-125 files

HardenedBSD/src c80c367sys/amd64/include ifunc.h, sys/i386/include ifunc.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+34-6sys/x86/x86/local_apic.c
+5-0sys/amd64/include/ifunc.h
+5-0sys/i386/include/ifunc.h
+0-5sys/netlink/ktest_netlink_message_writer.c
+1-1sys/netlink/ktest_netlink_message_writer.h
+45-125 files

HardenedBSD/ports 3537948devel/arduino Makefile, graphics/darktable Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+10-2graphics/darktable/Makefile
+10-0net/wireguard-tools/files/wireguard_lite.in
+3-3devel/arduino/Makefile
+23-53 files

HardenedBSD/ports b6b8d5fdevel/arduino Makefile

devel/arduino: pin to openjdk8

Dependency comms/rxtx is tied to openjdk8 and installs jars in
PREFIX/openjdk8/jre/lib/ext. This directory is gone in jdk9+, but
arduino expects it.
So pin arduino to openjdk8 also.
If anybody wants this to be supported by jdk9+, patches are welcome.

PR:     292651
DeltaFile
+3-3devel/arduino/Makefile
+3-31 files

HardenedBSD/ports 50e6daegraphics/darktable Makefile

graphics/darktable: Add `llvm:build` after `compiler:*` in USES=

The move of `USES+=compiler:*` later in the file to be able to check
`${ARCH}` apparently triggered the following warning:

    make: .../Mk/Uses/compiler.mk:86: warning: Command "/usr/local/llvm19/bin/clang --version" exited with status 127
    make: .../Mk/Uses/compiler.mk:134: warning: Command "/usr/local/llvm19/bin/clang++ -### /dev/null 2>&1" exited with status 127

It looks like the order of `compiler:*` and `llvm:*` is important.
Moving the addition of `llvm:compiler` after `compiler:*` was added
conditionally fixes that warning.

PR:             292128
Reported by:    Trond Endrestøl <Trond.Endrestol at ximalas.info>
Tested by:      Trond Endrestøl <Trond.Endrestol at ximalas.info>,
                Herbert J. Skuhra <herbert at gojira.at>
DeltaFile
+10-2graphics/darktable/Makefile
+10-21 files

HardenedBSD/src 8352e24sys/netlink ktest_netlink_message_writer.c ktest_netlink_message_writer.h

tests/ktest_netlink_message_writer: remove INVARIANTS requirement

INVARIANTS is meant to be used to enable extra sanity checking for
internal structures, not enable/disable tests in the freebsd kyua
test suite.

STABLE branches include a GENERIC kernconf without INVARIANTS, so
ktest_netlink_message_writer is broken on such branches:

https://ci.freebsd.org/job/FreeBSD-stable-15-amd64-test/253/testReport/sys.netlink.test_netlink_message_writer/py/__test_cases_list__/

Reviewed by:    lwhsu, imp
Approved by:    lwhsu (mentor)
Pull Request:   https://github.com/freebsd/freebsd-src/pull/1889
MFC after:      3 days
Signed-off-by:  Siva Mahadevan <siva at FreeBSD.org>
Sponsored by:   The FreeBSD Foundation
DeltaFile
+0-5sys/netlink/ktest_netlink_message_writer.c
+1-1sys/netlink/ktest_netlink_message_writer.h
+1-62 files

HardenedBSD/ports 02c2969net/wireguard-tools/files wireguard_lite.in

net/wireguard-tools: Add possibility to configure keys in rc script

Add possibility to ingest WireGuard keys from files using the rc script.
It basically adds two more options: "wireguard_<iface>_key" and
"wireguard_<iface>_psk". Both are optional.

PR:     291997
DeltaFile
+10-0net/wireguard-tools/files/wireguard_lite.in
+10-01 files

HardenedBSD/src 2b1db07sys/amd64/include ifunc.h, sys/i386/include ifunc.h

x86: add machine/ifunc.h

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
DeltaFile
+5-0sys/amd64/include/ifunc.h
+5-0sys/i386/include/ifunc.h
+10-02 files

HardenedBSD/src dfc4186sys/x86/x86 local_apic.c

x86 lapic: Dump LVTs from the ddb show lapic command

Add description for each LVT element, use it in show lapic dump.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
DeltaFile
+34-6sys/x86/x86/local_apic.c
+34-61 files

HardenedBSD/src 1578f8esbin/mdmfs mdmfs.c, usr.sbin/syslogd/tests syslogd_test.sh syslogd_test_common.sh

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+144-161usr.sbin/syslogd/tests/syslogd_test.sh
+52-5usr.sbin/syslogd/tests/syslogd_test_common.sh
+16-26usr.sbin/syslogd/tests/syslogd_forwarded_format_test.sh
+12-18usr.sbin/syslogd/tests/syslogd_relayed_format_test.sh
+11-17usr.sbin/syslogd/tests/syslogd_basic_format_test.sh
+2-10sbin/mdmfs/mdmfs.c
+237-2374 files not shown
+248-24310 files

HardenedBSD/src c8fff18sbin/mdmfs mdmfs.c, usr.sbin/syslogd/tests syslogd_test.sh syslogd_test_common.sh

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+144-161usr.sbin/syslogd/tests/syslogd_test.sh
+52-5usr.sbin/syslogd/tests/syslogd_test_common.sh
+16-26usr.sbin/syslogd/tests/syslogd_forwarded_format_test.sh
+12-18usr.sbin/syslogd/tests/syslogd_relayed_format_test.sh
+11-17usr.sbin/syslogd/tests/syslogd_basic_format_test.sh
+2-10sbin/mdmfs/mdmfs.c
+237-2374 files not shown
+248-24310 files

HardenedBSD/ports f06c357astro/py-skyfield pkg-plist, devel/onetbb/files patch-include_oneapi_tbb_detail__exception.h patch-test_common_utils_concurrency_limit.h

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+181-181astro/py-skyfield/pkg-plist
+0-67x11/contour/files/patch-src_crispy_FNV.h
+0-43sysutils/logwatch/files/patch-scripts_services_postfix
+26-0devel/onetbb/files/patch-include_oneapi_tbb_detail__exception.h
+24-0devel/onetbb/files/patch-test_common_utils_concurrency_limit.h
+17-7net/rsync/Makefile
+248-29830 files not shown
+357-38136 files

HardenedBSD/ports 29bc7b2net/netatalk4 distinfo Makefile

net/netatalk4: Update to 4.4.1

See https://github.com/Netatalk/netatalk/releases/tag/netatalk-4-4-1 for
a list of changes in this release.
DeltaFile
+3-3net/netatalk4/distinfo
+1-1net/netatalk4/Makefile
+4-42 files

HardenedBSD/ports 01c5d9fsysutils/logwatch Makefile distinfo, sysutils/logwatch/files patch-scripts_services_postfix pkg-message.in

sysutils/logwatch: Update 7.13 => 7.14

Commit log:
https://sourceforge.net/p/logwatch/git/ci/93cb38bb54f0ca12f4e792d9167993c9213e2c66/log/

- Remove no longer needed files/pkg-message.in and
  files/patch-scripts_services_postfix.
- Optimize post-install-DOCS-on.

PR:     292655
DeltaFile
+0-43sysutils/logwatch/files/patch-scripts_services_postfix
+0-24sysutils/logwatch/files/pkg-message.in
+2-6sysutils/logwatch/Makefile
+3-3sysutils/logwatch/distinfo
+4-0sysutils/logwatch/pkg-plist
+2-0sysutils/logwatch/files/Makefile
+11-766 files

HardenedBSD/src 4b96204sbin/mdmfs mdmfs.c

mdmfs: Fix soft updates logic

Now that newfs(8) has a command-line argument to disable soft updates,
use that instead of running tunefs(8) after the fact to turn them off.

MFC after:      1 week
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
Reviewed by:    mckusick, imp
Differential Revision:  https://reviews.freebsd.org/D54783
DeltaFile
+2-10sbin/mdmfs/mdmfs.c
+2-101 files

HardenedBSD/ports a2327c8www/angie-console-light distinfo Makefile

www/angie-console-light: Update 1.8.1 => 1.8.2

Changelog:
- Fixed the Angie ADC documentation link.
https://github.com/webserver-llc/angie-console-light/releases/tag/1.8.2

While here remove unnecessary MKDIR - COPYTREE_SHARE does it itself.

PR:     292650
DeltaFile
+3-3www/angie-console-light/distinfo
+1-2www/angie-console-light/Makefile
+4-52 files

HardenedBSD/ports 6199a57www/angie distinfo, www/angie-module-njs Makefile

www/angie-module-njs: Update 0.9.4 => 0.9.5

Changelog:
https://github.com/nginx/njs/releases/tag/0.9.5

Commit log:
https://github.com/nginx/njs/compare/0.9.4...0.9.5

PR:     292649
DeltaFile
+2-2www/angie-module-njs/Makefile
+2-2www/angie/distinfo
+4-42 files

HardenedBSD/ports 21629ecwww/angie distinfo Makefile

www/angie: Update 1.11.1 => 1.11.2

This release mainly fixes 3 linux-specifig bugs (docker and BPF-related).

Changelog:
https://git.angie.software/web-server/angie/releases/tag/Angie-1.11.2

Commit log:
https://git.angie.software/web-server/angie/compare/Angie-1.11.1..Angie-1.11.2

PR:     292648
DeltaFile
+3-3www/angie/distinfo
+1-1www/angie/Makefile
+4-42 files

HardenedBSD/src 0dcccd1share/man/man5 src.conf.5, share/mk src.opts.mk

HBSD: Resolve merge conflicts

Regen src.conf.5.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+10-8share/man/man5/src.conf.5
+0-3share/mk/src.opts.mk
+10-112 files

HardenedBSD/ports 00a76a7sysutils/stackit distinfo Makefile

sysutils/stackit: update to 0.52.0

PR:             292642
DeltaFile
+5-5sysutils/stackit/distinfo
+1-2sysutils/stackit/Makefile
+6-72 files

HardenedBSD/ports fc42790net/rsync Makefile

net/rsync: Reinstate rrsync by flavorizing

The previous update removed the rrsync script from binary packages built
with the default options. This replaces the PYTHON option with a python
flavor so there is a package available that contains rrsync.

PR:             286073
Reported by:    Dan Langille <dvl at freebsd.org>
DeltaFile
+17-7net/rsync/Makefile
+17-71 files

HardenedBSD/ports 0622047science/afni distinfo Makefile

science/afni: Update to 26.0.05
DeltaFile
+3-3science/afni/distinfo
+1-1science/afni/Makefile
+4-42 files

HardenedBSD/ports 387cd38devel/onetbb Makefile, devel/onetbb/files patch-include_oneapi_tbb_detail__exception.h patch-test_common_utils_concurrency_limit.h

devel/onetbb: Fix more tests

Fix/improve the following tests (see patches for details):

 29 - test_resumable_tasks (SEGFAULT)
 63 - test_hw_concurrency (ILLEGAL)
 66 - test_global_control (Subprocess aborted)
 67 - test_task (SEGFAULT)
 74 - test_tbb_header (Failed)
105 - conformance_resumable_tasks (SEGFAULT)
131 - test_malloc_compliance (Subprocess aborted)

This leads to a single test still failing:

 63 - test_hw_concurrency (Subprocess aborted)

because get_cpuset_indices() is not working on FreeBSD.

PR:     292088
Reported by:    diizzy
DeltaFile
+26-0devel/onetbb/files/patch-include_oneapi_tbb_detail__exception.h
+24-0devel/onetbb/files/patch-test_common_utils_concurrency_limit.h
+23-0devel/onetbb/files/patch-src_tbb_co_context.h
+17-0devel/onetbb/files/patch-test_tbbmalloc_test_malloc_compliance.cpp
+1-1devel/onetbb/Makefile
+91-15 files

HardenedBSD/src 14dce73usr.sbin/syslogd/tests syslogd_test_common.sh syslogd_test.sh

syslogd/tests: Fix flakiness in forwarding tests

syslogd_start() waits for the local log socket to appear before
returning, to ensure that the daemon is ready to handle log messages.
Some tests start two daemons, so by default the socket already exists
when the second daemon is started, so syslogd_start() returns early.
The test subsequently sends a message to this second daemon, which
sometimes isn't ready.

Define a separate log socket for the second daemon.  Add a check to
syslogd_start() to help catch this type of bug.

Reviewed by:    jlduran
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D54800
DeltaFile
+7-2usr.sbin/syslogd/tests/syslogd_test_common.sh
+5-3usr.sbin/syslogd/tests/syslogd_test.sh
+12-52 files

HardenedBSD/src 92d2514usr.sbin/syslogd/tests syslogd_test_common.sh syslogd_test.sh

syslogd/tests: Improve loopback interface initialization

- In syslogd_start(), assign the lo0 address in the specified jail.
- Use the correct netmask.

Reviewed by:    jlduran
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D54799
DeltaFile
+5-3usr.sbin/syslogd/tests/syslogd_test_common.sh
+0-4usr.sbin/syslogd/tests/syslogd_test.sh
+5-72 files

HardenedBSD/src 560c229usr.sbin/syslogd/tests syslogd_test.sh syslogd_forwarded_format_test.sh

syslogd/tests: Address races

I occasionally see failures in the syslogd test suite.  The problem is
that the tests are racy: they send a message using logger(1), then
immediately check whether the message was logged to a log file.  If the
syslogd instance under test doesn't get a chance to run before the
second step, the test fails.

This change reworks things to avoid the race while minimizing the amount
of time sleeping.
1) Each test uses a single logfile, so have them use a new common
   variable, SYSLOGD_LOGFILE, instead of something test-specific.
2) In syslogd_start(), if the configuration references SYSLOGD_LOGFILE,
   wait for it to be created by syslogd before returning.
3) Add a helper syslogd_check_log(), to check for a given log entry in
   the last line of SYSLOGD_LOGFILE, instead of using atf_check
   directly.
4) In syslogd_check_log(), poll the logfile until the desired log entry
   appears, or the test times out.

    [8 lines not shown]
DeltaFile
+112-129usr.sbin/syslogd/tests/syslogd_test.sh
+16-26usr.sbin/syslogd/tests/syslogd_forwarded_format_test.sh
+33-0usr.sbin/syslogd/tests/syslogd_test_common.sh
+12-18usr.sbin/syslogd/tests/syslogd_relayed_format_test.sh
+11-17usr.sbin/syslogd/tests/syslogd_basic_format_test.sh
+0-1usr.sbin/syslogd/tests/syslogd_format_test_common.sh
+184-1916 files

HardenedBSD/src ffdbc1busr.sbin/syslogd/tests syslogd_test.sh syslogd_test_common.sh

syslogd/tests: Use a helper function to log from within a jail

This is just for consistency with all other logger(1) invocations, which
happen from the syslogd_log() function.

No functional change intended.

Reviewed by:    jlduran
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D54778
DeltaFile
+31-29usr.sbin/syslogd/tests/syslogd_test.sh
+7-0usr.sbin/syslogd/tests/syslogd_test_common.sh
+38-292 files

HardenedBSD/ports 5a7eba0java/jfreechart Makefile

java/jfreechart: allow building with jdk21

PR:     292647
Approved-by:    olgeni@ (maintainer)
DeltaFile
+1-0java/jfreechart/Makefile
+1-01 files

HardenedBSD/src dec3ea4lib/libiconv_modules/mapper_std citrus_mapper_std.c

libiconv: Fix typo in comment
DeltaFile
+1-1lib/libiconv_modules/mapper_std/citrus_mapper_std.c
+1-11 files

HardenedBSD/src 129aec7lib/libfetch fetch.3 common.c

libfetch: allow disabling TLS v1.3 when the connection

MFC after:      3 days
DeltaFile
+8-4lib/libfetch/fetch.3
+2-0lib/libfetch/common.c
+10-42 files