HardenedBSD/src f329997sys/compat/linuxkpi/common/src linux_page.c linux_compat.c, sys/fs/unionfs union_subr.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+186-19sys/fs/unionfs/union_subr.c
+190-0sys/compat/linuxkpi/common/src/linux_page.c
+165-0tests/sys/fs/unionfs/unionfs_test.sh
+0-111sys/compat/linuxkpi/common/src/linux_compat.c
+15-13sys/net/bpf.c
+11-7usr.bin/limits/limits.c
+567-15011 files not shown
+618-16817 files

HardenedBSD/src 870a562sys/compat/linuxkpi/common/src linux_page.c linux_compat.c, sys/fs/unionfs union_subr.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+186-19sys/fs/unionfs/union_subr.c
+190-0sys/compat/linuxkpi/common/src/linux_page.c
+165-0tests/sys/fs/unionfs/unionfs_test.sh
+0-111sys/compat/linuxkpi/common/src/linux_compat.c
+15-13sys/net/bpf.c
+11-7usr.bin/limits/limits.c
+567-15011 files not shown
+618-16817 files

HardenedBSD/src 7f57fc2sys/dev/ixgbe ixgbe_e610.c

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+0-34sys/dev/ixgbe/ixgbe_e610.c
+0-341 files

HardenedBSD/src 6fe2acasys/fs/devfs devfs_vnops.c devfs_int.h, sys/kern kern_conf.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+14-3sys/fs/devfs/devfs_vnops.c
+3-0sys/kern/kern_conf.c
+1-0sys/fs/devfs/devfs_int.h
+18-33 files

HardenedBSD/ports 1e8db82databases/heidisql/files patch-source_dbconnection.pas patch-source_apphelpers.pas, games/veloren-weekly distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+596-19net-mgmt/icinga-php-thirdparty/pkg-plist
+127-0databases/heidisql/files/patch-source_dbconnection.pas
+63-49games/veloren-weekly/distinfo
+14-64games/veloren-weekly/files/patch-unix
+63-0databases/heidisql/files/patch-source_apphelpers.pas
+30-23games/veloren-weekly/Makefile.crates
+893-15554 files not shown
+1,255-33360 files

HardenedBSD/ports f05f83bgames/veloren-weekly/files patch-unix

games/veloren-weekly: drop redundant patch after 18b1756c8222

https://github.com/gfx-rs/wgpu/commit/f6005a16c8a2

Veloren in DPorts has been broken since 24c6210e9ce4, anyway.
DeltaFile
+0-50games/veloren-weekly/files/patch-unix
+0-501 files

HardenedBSD/ports 18b1756games/veloren-weekly distinfo Makefile.crates, games/veloren-weekly/files patch-unix patch-wgpu-nvidia

games/veloren-weekly: update to s20251217

Changes:        https://gitlab.com/veloren/veloren/-/compare/7e8cec0d08...85e45ca0bd
DeltaFile
+63-49games/veloren-weekly/distinfo
+34-34games/veloren-weekly/files/patch-unix
+30-23games/veloren-weekly/Makefile.crates
+3-3games/veloren-weekly/files/patch-wgpu-nvidia
+2-3games/veloren-weekly/Makefile
+132-1125 files

HardenedBSD/ports e132acegraphics/mesa-devel distinfo Makefile

graphics/mesa-devel: update to 25.3.b.2585

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/ca96f8517cc...f5351afbc8c
DeltaFile
+3-3graphics/mesa-devel/distinfo
+2-3graphics/mesa-devel/Makefile
+5-62 files

HardenedBSD/ports 1b64b89x11-themes/cursor-dmz-aa-theme distinfo Makefile

x11-themes/cursor-dmz-aa-theme: Update 0.4.5.2 => 0.4.5.3

Changelog:
https://salsa.debian.org/gnome-team/dmz-cursor-theme/-/blob/debian/0.4.5.3/debian/changelog

PR:     291752
DeltaFile
+3-3x11-themes/cursor-dmz-aa-theme/distinfo
+1-1x11-themes/cursor-dmz-aa-theme/Makefile
+4-42 files

HardenedBSD/ports 1634dc3misc/crush distinfo Makefile

misc/crush: Update to 0.27.0

Changelog:
- https://github.com/charmbracelet/crush/releases/tag/v0.25.0
- https://github.com/charmbracelet/crush/releases/tag/v0.26.0
- https://github.com/charmbracelet/crush/releases/tag/v0.27.0

Reported by:    GitHub (watch releases)
DeltaFile
+5-5misc/crush/distinfo
+2-2misc/crush/Makefile
+7-72 files

HardenedBSD/ports ed2cd40devel/protobuf-java distinfo Makefile

devel/protobuf-java: Update 4.33.1 => 4.33.2

Changelog:
https://github.com/protocolbuffers/protobuf/releases/tag/v33.2

PR:     291753
DeltaFile
+3-3devel/protobuf-java/distinfo
+1-1devel/protobuf-java/Makefile
+4-42 files

HardenedBSD/ports e6bb3e5databases/heidisql Makefile pkg-plist, databases/heidisql/files patch-source_dbconnection.pas patch-source_apphelpers.pas

databases/heidisql: New port: a lightweight client for managing multiple databases

HeidiSQL is a graphical interface for managing MariaDB or MySQL servers,
Microsoft SQL databases, PostgreSQL, SQLite, Interbase or Firebird. "Heidi"
lets you browse and edit data, create and edit tables, views, procedures,
triggers and scheduled events. Also, you can export structure and data, either
to SQL file, clipboard or to other servers.
DeltaFile
+127-0databases/heidisql/files/patch-source_dbconnection.pas
+63-0databases/heidisql/files/patch-source_apphelpers.pas
+53-0databases/heidisql/Makefile
+26-0databases/heidisql/files/pkg-message.in
+9-0databases/heidisql/pkg-plist
+5-0databases/heidisql/pkg-descr
+283-02 files not shown
+287-08 files

HardenedBSD/ports 8aeec6asecurity/openfortivpn distinfo Makefile

security/openfortivpn: Update 1.23.1 => 1.24.0

Changelog:
https://github.com/adrienverge/openfortivpn/blob/v1.24.0/CHANGELOG.md

PR:     291750
MFH:    2025Q4
DeltaFile
+3-3security/openfortivpn/distinfo
+1-1security/openfortivpn/Makefile
+4-42 files

HardenedBSD/src e649286sys/fs/unionfs union_subr.c union_vnops.c

unionfs: Sporadic cleanup

Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
DeltaFile
+18-19sys/fs/unionfs/union_subr.c
+3-3sys/fs/unionfs/union_vnops.c
+2-3sys/fs/unionfs/union.h
+23-253 files

HardenedBSD/src a678e87etc/mtree BSD.tests.dist, sys/fs/unionfs union_subr.c union_vnops.c

unionfs: Support renaming symbolic links

This adds support for renaming a symbolic link found on the lower fs,
which necessitates copying it to the upper fs, as well as basic tests.

MFC after:      1 week
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
Reviewed by:    olce, siderop1_netapp.com, jah
Differential Revision:  https://reviews.freebsd.org/D54229
DeltaFile
+168-0sys/fs/unionfs/union_subr.c
+165-0tests/sys/fs/unionfs/unionfs_test.sh
+10-0sys/fs/unionfs/union_vnops.c
+8-0tests/sys/fs/unionfs/Makefile
+2-0etc/mtree/BSD.tests.dist
+1-0tests/sys/fs/Makefile
+354-01 files not shown
+355-07 files

HardenedBSD/src 1048271sys/netgraph ng_iface.c

ng_iface: don't recursively enter epoch in the rcvdata method

Reviewed by:            p.mousavizadeh_protonmail.com, zlei
Differential Revision:  https://reviews.freebsd.org/D54241
DeltaFile
+0-3sys/netgraph/ng_iface.c
+0-31 files

HardenedBSD/src 4d185f5tests/ci Makefile

tests/ci: Fix building in Github

When we are using Cirrus-CI and using a PR branch it creates a filename
in the form "pull/XXXX" which becomes a path seperator and the file
creation process fails.

Fails to complete the process with the following:
/bin/sh: cannot create
/tmp/meta.hUNGUq/ci-FreeBSD-16.0-pull/1932-amd64-nullhash-GENERIC.env:
No such file or directory

For future also apply the same regex for OSRELEASE and VOLUME_LABEL.
DeltaFile
+4-4tests/ci/Makefile
+4-41 files

HardenedBSD/ports 1b58092mail/pflogsumm distinfo Makefile

mail/pflogsumm: Update to 1.1.13
DeltaFile
+3-3mail/pflogsumm/distinfo
+1-1mail/pflogsumm/Makefile
+4-42 files

HardenedBSD/ports c122a0cnet-mgmt/icinga-php-library pkg-plist distinfo

net-mgmt/icinga-php-library: Update to 0.18.0
DeltaFile
+34-5net-mgmt/icinga-php-library/pkg-plist
+3-3net-mgmt/icinga-php-library/distinfo
+1-1net-mgmt/icinga-php-library/Makefile
+38-93 files

HardenedBSD/ports 679bfe7net-mgmt/icinga-php-thirdparty pkg-plist distinfo

net-mgmt/icinga-php-thirdparty: Update to 0.14.0
DeltaFile
+596-19net-mgmt/icinga-php-thirdparty/pkg-plist
+3-3net-mgmt/icinga-php-thirdparty/distinfo
+1-1net-mgmt/icinga-php-thirdparty/Makefile
+600-233 files

HardenedBSD/ports 041ac92security/certspotter distinfo Makefile

security/certspotter: Update to 0.23

Newer version works with current versions of go so remove DEPRECATED
DeltaFile
+5-5security/certspotter/distinfo
+1-1security/certspotter/Makefile
+6-62 files

HardenedBSD/ports c2de6d9net-mgmt/icingaweb2 distinfo Makefile

net-mgmt/icingaweb2: Update to 2.12.6
DeltaFile
+3-3net-mgmt/icingaweb2/distinfo
+1-1net-mgmt/icingaweb2/Makefile
+4-42 files

HardenedBSD/ports 85e01cdwww/phpmyfaq distinfo Makefile

www/phpmyfaq: Update 4.0.14
DeltaFile
+3-3www/phpmyfaq/distinfo
+1-1www/phpmyfaq/Makefile
+4-42 files

HardenedBSD/src 645942dsys/dev/ixgbe ixgbe_e610.c

ixgbe: Remove unused function ixgbe_is_media_cage_present

Remove the unused function ixgbe_is_media_cage_present that
generates a compiler warning.

Signed-off-by: Yogesh Bhosale yogesh.bhosale at intel.com

Reported by:    markj
Differential Revision:  https://reviews.freebsd.org/D52467

(cherry picked from commit 275f7d72ff6a71bbe46b4282a88f0ea9a24be22a)
DeltaFile
+0-34sys/dev/ixgbe/ixgbe_e610.c
+0-341 files

HardenedBSD/ports f048152net/spoofdpi distinfo Makefile, net/spoofdpi/files modules.txt spoofdpi.toml.sample

net/spoofdpi: Update 1.1.3 => 1.2.0

Changelog:
https://github.com/xvzc/SpoofDPI/releases/tag/v1.2.0

PR:     291748
DeltaFile
+31-17net/spoofdpi/distinfo
+29-12net/spoofdpi/files/modules.txt
+32-6net/spoofdpi/files/spoofdpi.toml.sample
+16-10net/spoofdpi/Makefile
+6-0net/spoofdpi/files/pkg-message.in
+2-2net/spoofdpi/files/spoofdpi.in
+116-476 files

HardenedBSD/src 1a26b16sys/sys param.h

LinuxKPI: bump __FreeBSD_version for vmap_pfn implementation
DeltaFile
+1-1sys/sys/param.h
+1-11 files

HardenedBSD/src 20ce906sys/compat/linuxkpi/common/src linux_page.c linux_compat.c

LinuxKPI: Move vmap-related code from linux_compat.c to linux_page.c

Coming vmap_pfn() implementation requires is_vmalloc_addr() to be in
the same file with other vmap-related code. Move code out from the
overcrowded file. No functional changes intended.

MFC after:      1 week
Reviewed by:    bz
Differential Revision:  https://reviews.freebsd.org/D54223
DeltaFile
+125-0sys/compat/linuxkpi/common/src/linux_page.c
+0-111sys/compat/linuxkpi/common/src/linux_compat.c
+125-1112 files

HardenedBSD/src df49fd8sys/compat/linuxkpi/common/include/linux vmalloc.h, sys/compat/linuxkpi/common/src linux_page.c

LinuxKPI: Implement vmap_pfn

Required by i915kms to support recent discrete graphics cards.

MFC after:      1 week
Reviewed by:    kib
Differential Revision:  https://reviews.freebsd.org/D54225
DeltaFile
+65-0sys/compat/linuxkpi/common/src/linux_page.c
+3-0sys/compat/linuxkpi/common/include/linux/vmalloc.h
+68-02 files

HardenedBSD/src d4062b9sys/net if_vlan.c

vlan: plug a new panic associated with interface removal

The ac6a7f621668 enabled execution of vlan_clone_dump_nl(), which
previously was effectively disabled.  The function itself was added back
in 089104e0e01f0.  This exposed a bug when Netlink dumps info on all
interfaces using a dangerous KPI if_foreach_sleep(), which may call its
callbacks on completely detached interfaces, hanging on the last
reference.  The ifc_dump_ifp_nl_default() is able to digest such interface
without a panic, but vlan_clone_dump_nl() can't.  Neither of the above
revisions is the actual culprit, rather it is design problem of detaching
interfaces and if_foreach_sleep().

Plug the problem with removing pointer to freed memory on detach and
making a NULL check later.

Reported by:    pho
DeltaFile
+9-1sys/net/if_vlan.c
+9-11 files

HardenedBSD/src d3690a5sys/fs/devfs devfs_vnops.c devfs_int.h, sys/kern kern_conf.c

devfs: make destroy_dev() a release barrier for cdevpriv destructors runs

Ensure that all destructors for cdevpriv finished running before
destroy_dev() returns to the caller.  Otherwise, since
devfs_destroy_cdevpriv() removes the cdevpriv data from the list, drops
the cdevpriv_mtx, and then starts the destructor, it is possible for
destroy_dev() to return before destructor finished in other thread.

This should allow drivers to safely remove cdev instance data that might
be referenced by cdevpriv data.

Diagnosed by:   kevans
Reviewed by:    kevans, markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D53303

(cherry picked from commit 4dbe6628179d8e6bf400bfdb4bfa869bdc102a56)
DeltaFile
+14-3sys/fs/devfs/devfs_vnops.c
+3-0sys/kern/kern_conf.c
+1-0sys/fs/devfs/devfs_int.h
+18-33 files