HardenedBSD/src 817156clib/msun/arm fenv.c, lib/msun/riscv fenv.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+419-311sys/netinet/ip_mroute.c
+382-190sys/netinet6/ip6_mroute.c
+428-0tests/sys/netinet/ip_mroute.py
+191-0tests/sys/netinet/ip6_mrouted.c
+105-33lib/msun/arm/fenv.c
+71-18lib/msun/riscv/fenv.c
+1,596-55233 files not shown
+2,039-74639 files

HardenedBSD/src 83d6e7elib/msun/arm fenv.c, lib/msun/riscv fenv.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+419-311sys/netinet/ip_mroute.c
+382-190sys/netinet6/ip6_mroute.c
+428-0tests/sys/netinet/ip_mroute.py
+191-0tests/sys/netinet/ip6_mrouted.c
+105-33lib/msun/arm/fenv.c
+71-18lib/msun/riscv/fenv.c
+1,596-55233 files not shown
+2,039-74639 files

HardenedBSD/src 521ab34sbin/pfctl pfctl.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+3-2sbin/pfctl/pfctl.c
+3-21 files

HardenedBSD/ports b2af14bmisc/far2l pkg-plist, misc/far2l/files patch-arclite_src_Patch7zCP.cpp

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+59-59www/iridium/files/patch-chrome_browser_about__flags.cc
+22-34www/iridium/files/patch-chrome_browser_policy_configuration__policy__handler__list__factory.cc
+37-2misc/far2l/pkg-plist
+19-19www/iridium/files/patch-chrome_browser_profiles_chrome__browser__main__extra__parts__profiles.cc
+19-19www/iridium/files/patch-chrome_browser_chrome__content__browser__client.cc
+0-27misc/far2l/files/patch-arclite_src_Patch7zCP.cpp
+156-160137 files not shown
+645-589143 files

HardenedBSD/ports a50101ewww/chromium Makefile, www/chromium/files patch-ui_gtk_select__file__dialog__linux__gtk.cc

www/*chromium: revert upstream commit to fix file dialog behaviour

This change reverts the following commit which neuters the Enter
key in the file dialogs by not preselecting the active button by
default because of the following joke:

+// GTK_RESPONSE_ACCEPT as the default button, which should be avoided to prevent
+// an exploit where the user is instructed to hold Enter before the dialog
+// appears.

commit e93121e97478a41d529c8586a48b4ec34173f79a
Author: Tom Anderson <thomasanderson at chromium.org>
Date:   Mon Jan 5 17:42:17 2026 -0800

    [GTK] Don't preselect file dialog accept buttons
DeltaFile
+12-0www/ungoogled-chromium/files/patch-ui_gtk_select__file__dialog__linux__gtk.cc
+12-0www/chromium/files/patch-ui_gtk_select__file__dialog__linux__gtk.cc
+1-1www/chromium/Makefile
+1-0www/ungoogled-chromium/Makefile
+26-14 files

HardenedBSD/ports e53ac69www/iridium/files patch-chrome_browser_about__flags.cc patch-chrome_browser_policy_configuration__policy__handler__list__factory.cc

www/iridium: update to 2026.03.146.4
DeltaFile
+59-59www/iridium/files/patch-chrome_browser_about__flags.cc
+22-34www/iridium/files/patch-chrome_browser_policy_configuration__policy__handler__list__factory.cc
+19-19www/iridium/files/patch-chrome_browser_profiles_chrome__browser__main__extra__parts__profiles.cc
+19-19www/iridium/files/patch-chrome_browser_chrome__content__browser__client.cc
+9-9www/iridium/files/patch-chrome_browser_ui_webui_chrome__web__ui__configs.cc
+9-9www/iridium/files/patch-net_BUILD.gn
+137-14976 files not shown
+403-44182 files

HardenedBSD/ports 9a15679mail/cyrus-imapd312 distinfo Makefile

mail/cyrus-imapd312: Update to 3.12.2
DeltaFile
+3-3mail/cyrus-imapd312/distinfo
+2-2mail/cyrus-imapd312/Makefile
+5-52 files

HardenedBSD/ports 1c85d42deskutils/taskwarrior-tui distinfo Makefile

deskutils/taskwarrior-tui: Update to 0.26.8
DeltaFile
+3-3deskutils/taskwarrior-tui/distinfo
+1-1deskutils/taskwarrior-tui/Makefile
+4-42 files

HardenedBSD/ports 58d999beditors/vim distinfo Makefile

editors/vim: Update to 9.2.0272 (security)

This update addresses GHSA-2gmj-rpqf-pxvh (see advisory link below):

Summary (from advisory):
  A bug chain in Vim allows arbitrary OS command execution when a user
  opens a crafted file. The tabpanel option is missing the P_MLE flag,
  allowing a modeline to inject a %{expr} expression string without
  requiring modelineexpr to be enabled. Although Vim correctly
  evaluates the expression inside the sandbox, autocmd_add() lacks
  a check_secure() call, allowing sandboxed code to register an
  autocommand that fires after the sandbox exits.

Security:       https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh
DeltaFile
+3-3editors/vim/distinfo
+1-1editors/vim/Makefile
+4-42 files

HardenedBSD/src d157330lib/msun/aarch64 fenv.c, lib/msun/amd64 fenv.c

msun: remove requirement to have C99 inline semantic

The 'extern inline' usage is removed.

PR:     277958
Reviewed by:    dim
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D56139
DeltaFile
+0-5lib/msun/amd64/fenv.c
+0-5lib/msun/arm/fenv.c
+0-5lib/msun/i387/fenv.c
+0-5lib/msun/powerpc/fenv.c
+0-5lib/msun/riscv/fenv.c
+0-5lib/msun/aarch64/fenv.c
+0-306 files

HardenedBSD/src e4505a5lib/msun/powerpc fenv.c fenv.h

msun/powerpc: convert fenv functions to proper linkage

namely
        fegetexceptflag(3)
        fesetexceptflag(3)
        feraiseexcept(3)
        fetestexcept(3)
        fegetround(3)
        fesetround(3)
        fegetenv(3)
        feholdexcept(3)
        fesetenv(3)
        feupdateenv(3)
        feenableexcept(3)
        fedisableexcept(3)
        fegetexcept(3)

PR:     277958
Reviewed by:    dim

    [3 lines not shown]
DeltaFile
+71-12lib/msun/powerpc/fenv.c
+39-12lib/msun/powerpc/fenv.h
+110-242 files

HardenedBSD/src 7067443lib/msun/arm fenv.c fenv.h

msun/arm: convert fenv functions to proper linkage

namely
        fegetexceptflag(3)
        fesetexceptflag(3)
        feraiseexcept(3)
        fetestexcept(3)
        fegetround(3)
        fesetround(3)
        fegetenv(3)
        feholdexcept(3)
        fesetenv(3)
        feupdateenv(3)
        feenableexcept(3)
        fedisableexcept(3)
        fegetexcept(3)

PR:     277958
Reviewed by:    dim

    [3 lines not shown]
DeltaFile
+105-28lib/msun/arm/fenv.c
+45-13lib/msun/arm/fenv.h
+150-412 files

HardenedBSD/src 6b89f53lib/msun/riscv fenv.c fenv.h

msun/riscv: convert fenv functions to proper linkage

namely
        fegetexceptflag(3)
        fesetexceptflag(3)
        feraiseexcept(3)
        fetestexcept(3)
        fegetround(3)
        fesetround(3)
        fegetenv(3)
        feholdexcept(3)
        fesetenv(3)
        feupdateenv(3)
        feenableexcept(3)
        fedisableexcept(3)
        fegetexcept(3)

PR:     277958
Reviewed by:    dim

    [3 lines not shown]
DeltaFile
+71-13lib/msun/riscv/fenv.c
+39-12lib/msun/riscv/fenv.h
+110-252 files

HardenedBSD/src 5bc64b7lib/msun/amd64 fenv.c, lib/msun/i387 fenv.c

msun/x86: convert rest of the extern inline fenv functions to proper linkage

namely
        fegetexceptflag(3)
        fetestexcept(3)
        fesetround(3)
        fegetround(3)
        fesetenv(3)
Same as it was done in f39754d51b7dc65c4cf9f for feclearexcept(3).

PR:     277958
Reviewed by:    dim
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D56139
DeltaFile
+27-5lib/msun/amd64/fenv.c
+27-5lib/msun/i387/fenv.c
+20-9lib/msun/x86/fenv.h
+74-193 files

HardenedBSD/src 3a01e1elib/msun/aarch64 fenv.c fenv.h

msun/aarch64: convert fenv functions to proper linkage

namely
        fegetexceptflag(3)
        fesetexceptflag(3)
        feraiseexcept(3)
        fetestexcept(3)
        fegetround(3)
        fesetround(3)
        fegetenv(3)
        feholdexcept(3)
        fesetenv(3)
        feupdateenv(3)
        feenableexcept(3)
        fedisableexcept(3)
        fegetexcept(3)

PR:     277958
Reviewed by:    dim

    [3 lines not shown]
DeltaFile
+59-13lib/msun/aarch64/fenv.c
+31-10lib/msun/aarch64/fenv.h
+90-232 files

HardenedBSD/src 7cfffe2libexec/rtld-elf rtld.c

rtld: check for overflow in parse_integer()

Reviewed by:    dim, emaste, markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D56151
DeltaFile
+4-0libexec/rtld-elf/rtld.c
+4-01 files

HardenedBSD/ports 9f80c45multimedia/obs-multi-rtmp distinfo Makefile

multimedia/obs-multi-rtmp: Update 0.7.3.2 => 0.7.4

Changelog:
https://github.com/sorayuki/obs-multi-rtmp/releases/tag/0.7.4

PR:             294137
Sponsored by:   UNIS Labs
DeltaFile
+3-3multimedia/obs-multi-rtmp/distinfo
+1-1multimedia/obs-multi-rtmp/Makefile
+4-42 files

HardenedBSD/ports 8703b93math/octave-forge-octave-pool distinfo Makefile

math/octave-forge-octave-pool: Update to 1.2.4.
DeltaFile
+3-3math/octave-forge-octave-pool/distinfo
+1-2math/octave-forge-octave-pool/Makefile
+4-52 files

HardenedBSD/ports b0a74fdmath/octave-forge-fileio distinfo Makefile

math/octave-forge-fileio: Update to 1.2.3.
DeltaFile
+3-3math/octave-forge-fileio/distinfo
+1-2math/octave-forge-fileio/Makefile
+4-52 files

HardenedBSD/src 82272cbsys/netinet6 ip6_mroute.c

ip6_mroute: Pass the multicast interface number directly to del_m6if()

There's no need to pass a pointer to the interface number.  No
functional change intended.

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55245
DeltaFile
+13-13sys/netinet6/ip6_mroute.c
+13-131 files

HardenedBSD/src a1c042asys/netinet6 ip6_mroute.c

ip6_mroute: Handle interface detach events

When an interface goes away we need to make sure the v6 multicast
routing tables don't carry any dangling references to the ifnet.  The v4
code handles this already.  Copy the approach there and use an
eventhandler to purge the corresponding MIF, if one exists, and further
go through all routes in the FIB and remove references to the interface.

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55246
DeltaFile
+67-2sys/netinet6/ip6_mroute.c
+67-21 files

HardenedBSD/src 0bb9c2bsys/netinet6 ip6_mroute.c in6.c

ip6_mroute: FIBify

Modify the control plane (ioctl and socket option handlers) to use the
routing socket FIB to index into the mfctable array.  Modify the
forwarding plane to use the mbuf's FIB to determine which routing table
to use.

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55242
DeltaFile
+77-54sys/netinet6/ip6_mroute.c
+6-11sys/netinet6/in6.c
+1-1sys/netinet6/ip6_mroute.h
+1-1sys/netinet6/raw_ip6.c
+85-674 files

HardenedBSD/src 4c486fesys/netinet ip_mroute.c ip_output.c

ip_mroute: FIBify

Modify the control plane (ioctl and socket option handlers) to use the
routing socket FIB to index into the mfctable array.  Modify the
forwarding plane to use the mbuf's FIB to determine which routing table
to use.

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55241
DeltaFile
+167-152sys/netinet/ip_mroute.c
+6-5sys/netinet/ip_output.c
+3-2sys/netinet/ip_mroute.h
+2-2sys/netinet/raw_ip.c
+2-1sys/netinet/in_mcast.c
+180-1625 files

HardenedBSD/src 09e702atests/sys/netinet ip_mroute.py ip6_mrouted.c, tests/sys/netinet6 Makefile

tests: Add some simple regression tests for ip_mroute

These use atf_python to create a number of hosts linked to a router.
The router runs pimd (for IPv4) or ip6_mrouter (simplistic IPv6
multicast router that I wrote since I couldn't find one in the ports
tree).  The vnet_host*_handler() methods are invoked in different VNET
jails connected to the router; they register the connected epair with a
multicast group and verify that they can send messages to each other.

The tests are synchronized by sending messages over a unix domain
socket.  The flow is something like:
1) test startup_method() is called, the unix socket is created,
2) the superclass creates jails and links them together using the
   declared topology,
3) we wait for all child jails to start up and send a message on the
   unix socket indicating that they are ready
4) we start the routing daemon in the main jail,
5) the test actually starts; starttest() kicks off the
   vnet_host*_handlers(), which mostly just verify that they can send

    [11 lines not shown]
DeltaFile
+428-0tests/sys/netinet/ip_mroute.py
+191-0tests/sys/netinet/ip6_mrouted.c
+9-4tests/sys/netinet/Makefile
+1-0tests/sys/netinet6/Makefile
+629-44 files

HardenedBSD/src d4339cesys/netinet6 ip6_mroute.h

ip6_mroute: Make ip6_mroute.h more self-contained

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55243
DeltaFile
+3-0sys/netinet6/ip6_mroute.h
+3-01 files

HardenedBSD/src 97a4bc9sys/netinet ip_mroute.c, sys/netinet6 ip6_mroute.c

ip(6)_mroute: Grow the routing tables when the number of FIBs changes

Use the new rtnumfibs_change event to expand the mfctable array when the
number of FIBs increases.

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55240
DeltaFile
+44-10sys/netinet/ip_mroute.c
+40-3sys/netinet6/ip6_mroute.c
+84-132 files

HardenedBSD/src 81dbacbsys/net route.h, sys/net/route route_tables.c

net/route: Add an eventhandler for rt_numfibs changes

The multicast routing code will start implementing per-FIB routing
tables.  As a part of this, it needs to be notified when the number of
FIBs changes, so that it can expand its tables.

Add an eventhandler for this purpose.

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55239
DeltaFile
+6-0sys/net/route.h
+3-1sys/net/route/route_tables.c
+9-12 files

HardenedBSD/src a223d6csys/netinet6 ip6_mroute.c

ip6_mroute: Start putting global variables into a structure

As in the IPv4 version of this change, I added a struct mf6ctable
structure which holds all global routing table state, soon to become
per-FIB state.

Note that much of the v6 multicast routing code was not VNETified; this
change fixes that too.

MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55238
DeltaFile
+229-162sys/netinet6/ip6_mroute.c
+229-1621 files

HardenedBSD/src d50d0c0sys/netinet ip_mroute.c

ip_mroute: Start moving globals into a structure

I would like to support per-FIB multicast routing tables, such that one
can run a routing daemon per-FIB, with each daemon oblivious to the
existence of others.  Currently the multicast routing code is completely
unaware of FIBs.

To that end, start collecting various global variables in ip_mroute.c
into a per-VNET struct mfctable.  In a future patch this will be
expanded into an array of mfctable structures, one per FIB.  For now,
all of the state is collected into V_mfctables[0].

Each mfctable contains, among other things:
- a pointer to the routing socket, if routing is enabled,
- a hash table of routing cache entries,
- an table of network interfaces participating in the routing
  configuration

This change has no functional effect, it is just factoring out these

    [6 lines not shown]
DeltaFile
+266-207sys/netinet/ip_mroute.c
+266-2071 files

HardenedBSD/ports 4b22751misc/far2l pkg-plist Makefile, misc/far2l/files patch-arclite_src_Patch7zCP.cpp patch-far2l_CMakeLists.txt

misc/far2l: update Far2L to version 2.8.0 (nothing except)

- New ImageViewer plugin (requires ImageMagick and/or FFmpeg,
  please install them as needed)
- Disable AppStream metainfo generation to avoid pulling
  additional dependencies and because its usefulness on
  FreeBSD is doubtful (yet keep the @comment in pkg-plist)
- Prune empty directories and fix WEBDAV_DESC while here

Reported by:    portscout
DeltaFile
+37-2misc/far2l/pkg-plist
+0-27misc/far2l/files/patch-arclite_src_Patch7zCP.cpp
+21-3misc/far2l/files/patch-far2l_CMakeLists.txt
+7-3misc/far2l/Makefile
+4-4misc/far2l/files/patch-far2l_src_panels_infolist.cpp
+3-3misc/far2l/distinfo
+72-421 files not shown
+73-437 files