HardenedBSD/src cc39531sys/contrib/dev/iwlwifi/mld mld.c, sys/contrib/dev/iwlwifi/mvm ops.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+14-0sys/contrib/dev/iwlwifi/mld/mld.c
+1-2sys/contrib/dev/iwlwifi/mvm/ops.c
+15-22 files

HardenedBSD/src a1251e7sys/contrib/dev/iwlwifi/mld mld.c, sys/contrib/dev/iwlwifi/mvm ops.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+14-0sys/contrib/dev/iwlwifi/mld/mld.c
+1-2sys/contrib/dev/iwlwifi/mvm/ops.c
+15-22 files

HardenedBSD/ports afefd30devel/glab distinfo Makefile, lang/go125 distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+13-13lang/go125/distinfo
+5-5devel/glab/distinfo
+5-5www/caddy/distinfo
+3-3lang/go126/distinfo
+2-2devel/glab/Makefile
+2-2www/caddy/Makefile
+30-30759 files not shown
+790-688765 files

HardenedBSD/ports 14bd57edevel/glab distinfo Makefile

devel/glab: update to 1.89.0

Changes:        https://gitlab.com/gitlab-org/cli/-/releases/v1.89.0
DeltaFile
+5-5devel/glab/distinfo
+2-3devel/glab/Makefile
+7-82 files

HardenedBSD/ports 61ebb9ewww/caddy distinfo Makefile

www/caddy: Update to 2.11.2

Changes:

Caddy 2.11.2 contains numerous bug fixes and enhancements! I know
that's a lame summary but it's really all over the place.

Highlights:
  - Reverse proxy got a lot of love with certain edge cases related to
    PROXY protocol, health check port, and closing body on retries.
    Dynamic upstreams are now tracked which enables passive health
    checking.
  - Performance improvements for metrics.
  - New tls_resolvers global option to control DNS resolvers for all
    sites when using the ACME DNS challenge.
  - Log rolling now supports zstd compression; deprecated roll_gzip,
    which will be removed in the future. Use roll_compression instead.
  - Refined logging and some error messages.
  - Fixed a bug in rewrite handler that could cause some URIs to not

    [22 lines not shown]
DeltaFile
+5-5www/caddy/distinfo
+2-3www/caddy/Makefile
+7-82 files

HardenedBSD/ports a8d318darchivers/nfpm Makefile, archivers/plakar Makefile

various: Bump ports for Go 1.25.8
DeltaFile
+1-1archivers/nfpm/Makefile
+1-1archivers/plakar/Makefile
+1-1archivers/unpackerr/Makefile
+1-1audio/go-librespot/Makefile
+1-1audio/gonic/Makefile
+1-1audio/murmur-cli/Makefile
+6-6741 files not shown
+747-655747 files

HardenedBSD/ports 92028b5lang/go125 distinfo Makefile

lang/go125: Update to 1.25.8

Changes:
  go1.25.8 (released 2026-03-05) includes security fixes to the
  html/template, net/url, and os packages, as well as bug fixes to the
  go command, the compiler, and the os package. See the Go 1.25.8
  milestone on our issue tracker for details.
DeltaFile
+13-13lang/go125/distinfo
+2-2lang/go125/Makefile
+15-152 files

HardenedBSD/ports 5cf3f38devel/goreleaser Makefile, dns/nextdns Makefile

various: Bump ports for Go 1.26.1
DeltaFile
+1-0net/ovhcloud-cli/Makefile
+1-0security/vuls/Makefile
+1-0dns/nextdns/Makefile
+1-0lang/typescript-go/Makefile
+1-0sysutils/nginx-ui/Makefile
+1-0devel/goreleaser/Makefile
+6-06 files not shown
+12-012 files

HardenedBSD/ports 47025a4lang/go126 distinfo Makefile

lang/go126: Update to 1.26.1

Changes:
  go1.26.1 (released 2026-03-05) includes security fixes to the
  crypto/x509, html/template, net/url, and os packages, as well as bug
  fixes to the go command, the go fix command, the compiler, and the
  os and reflect packages. See the Go 1.26.1 milestone on our issue
  tracker for details.
DeltaFile
+3-3lang/go126/distinfo
+1-1lang/go126/Makefile
+4-42 files

HardenedBSD/src 7db8503sys/contrib/dev/iwlwifi/mld mld.c

iwlwifi: mld: add LINUXKPI_PARAM_PREFIX

Add a LINUXKPI_PARAM_PREFIX to mld to properly export the
power_scheme module_param (sysctl).  This is especially needed given
mvm has the same parameter and we need to avoid a clash.

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+4-0sys/contrib/dev/iwlwifi/mld/mld.c
+4-01 files

HardenedBSD/src 782fe2fsys/contrib/dev/iwlwifi/mld mld.c, sys/contrib/dev/iwlwifi/mvm ops.c

iwlwifi: adjust driver description

Adjust the module driver descriptions for mvm and mld to make it clear
that this is not a driver for Linux but a Linux-based driver for FreeBSD.
Cleanup surroundings.

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+6-0sys/contrib/dev/iwlwifi/mld/mld.c
+1-2sys/contrib/dev/iwlwifi/mvm/ops.c
+7-22 files

HardenedBSD/src 551c4cbsys/contrib/dev/iwlwifi/mld mld.c

iwlwifi: mld: move module_init() to SI_ORDER_SECOND

In FreeBSD the iwlwifi driver is a single kernel module.
As for iwlwifi/mvm we need to make sure the common "iwlwifi drv" code
is initialized before trying to register the mld sub-driver
in order for lists, etc. in the registration code to be initialized.
We do this by using an extended (FreeBSD specific) version of
module_init which overrides the order parameter of the SYSINIT.
Otherwise we can randomly (depending on SYSINIT run order) run into
a NULL pointer deref panic.

Sponsored by:   The FreeBSD Foundation
PR:             291120
MFC after:      3 days
DeltaFile
+4-0sys/contrib/dev/iwlwifi/mld/mld.c
+4-01 files

HardenedBSD/src ef88cddcontrib/libedit ChangeLog, sys/compat/linuxkpi/common/src linux_80211.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+6,119-4contrib/libedit/ChangeLog
+524-167usr.sbin/bhyve/pci_virtio_scsi.c
+154-146sys/netinet6/nd6_rtr.c
+185-0sys/netinet6/nd6_nbr.c
+91-41sys/compat/linuxkpi/common/src/linux_80211.c
+55-51usr.sbin/bhyve/iov.c
+7,128-409134 files not shown
+8,327-909140 files

HardenedBSD/src ef30138lib/libsys rename.2, sys/amd64/amd64 trap.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+65-26lib/libsys/rename.2
+13-61sys/fs/nfsclient/nfs_clvnops.c
+73-1sys/kern/vfs_vnops.c
+42-15sys/amd64/amd64/trap.c
+35-14sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c
+33-7sys/kern/vfs_syscalls.c
+261-12443 files not shown
+555-19749 files

HardenedBSD/src b57c0edsys/dev/iwx if_iwx.c, usr.bin/less lesspipe.sh

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+16-5sys/dev/iwx/if_iwx.c
+1-1usr.bin/less/lesspipe.sh
+17-62 files

HardenedBSD/ports 2f9f5f2Mk/Uses go.mk, audio/subtui distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+35-18Mk/Uses/go.mk
+7-6x11/xdotool/Makefile
+5-5audio/subtui/distinfo
+7-0shells/yash/pkg-plist
+3-3devel/aws-crt-cpp/distinfo
+3-3shells/yash/distinfo
+60-3520 files not shown
+102-7726 files

HardenedBSD/src 6812569usr.bin/less lesspipe.sh

lesspipe: Allow zstd to operate on a symlink

By default zstd refuses to operate on symlinks, so for example
`zless /var/crash/vmcore.last.zst` failed to view the uncompressed core
file.  Add -f to the zstd command line to allow operation on symlinks.

Reviewed by:    delphij
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55101

(cherry picked from commit b4305c90a3be7e1a40b76545b8b761fdbda5c309)
DeltaFile
+1-1usr.bin/less/lesspipe.sh
+1-11 files

HardenedBSD/src 3e8a999sys/amd64/amd64 trap.c

amd64: extract uprintf_signal printing into a helper
DeltaFile
+25-15sys/amd64/amd64/trap.c
+25-151 files

HardenedBSD/src 272ea45sys/amd64/amd64 trap.c

amd64: print userspace fsbase and gsbase for uprintf_signal
DeltaFile
+19-2sys/amd64/amd64/trap.c
+19-21 files

HardenedBSD/ports 462afa7databases/R-cran-RMySQL distinfo Makefile

databases/R-cran-RMySQL: Update to 0.11.2

Reported by:    portscout
DeltaFile
+3-3databases/R-cran-RMySQL/distinfo
+1-1databases/R-cran-RMySQL/Makefile
+4-42 files

HardenedBSD/src 5c71df9sys/fs/nfsclient nfs_clvnops.c nfs_clbio.c

nfsclient: convert to use vn_delayed_setsize()

Reviewed by:    rmacklem
Tested by:      pho
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55595
DeltaFile
+7-61sys/fs/nfsclient/nfs_clvnops.c
+2-2sys/fs/nfsclient/nfs_clbio.c
+1-1sys/fs/nfsclient/nfs_clport.c
+0-1sys/fs/nfsclient/nfsnode.h
+10-654 files

HardenedBSD/src ef8292esys/compat/freebsd32 freebsd32_systrace_args.c freebsd32_syscall.h, sys/kern systrace_args.c

Regen
DeltaFile
+38-0sys/kern/systrace_args.c
+38-0sys/compat/freebsd32/freebsd32_systrace_args.c
+9-0sys/sys/sysproto.h
+2-1sys/sys/syscall.h
+2-1sys/compat/freebsd32/freebsd32_syscall.h
+2-1sys/sys/syscall.mk
+91-36 files not shown
+99-312 files

HardenedBSD/src 45117ffsys/fs/deadfs dead_vnops.c, sys/kern vfs_vnops.c vnode_if.src

vfs: add VOP_DELAYED_SETSIZE() and related infrastructure

The change generalizes code that was initially developed for nfs client
to handle filesystems that needs to call vnode_pager_setsize() while
only owning the vnode lock shared.  Since vnode pager might need to trim
or extend the vnode vm_object' page queue, the vnode lock for the call
must be owned exclusive.  This is typical for filesystems with remote
authorative source of file attributes, like nfs/p9/fuse.

Handle the conflict by delaying the vnode_pager_setsize() to the next
vnode locking to avoid relock.  But if the next locking request is in
shared mode, lock it exclusively instead, perform the delayed
vnode_pager_setsize() call by doing VOP_DEFAULT_SETSIZE(), and then
downgrade to shared.

Filesystems that opt into the feature must provide the implementation of
VOP_DELAYED_SETSIZE() that actually calls vnode_pager_setsize(), and use
vn_delay_setsize() helper to mark the vnode as requiring the delay call.


    [5 lines not shown]
DeltaFile
+73-1sys/kern/vfs_vnops.c
+31-0sys/sys/vnode.h
+8-0sys/kern/vnode_if.src
+1-0sys/fs/deadfs/dead_vnops.c
+1-0sys/kern/vfs_default.c
+114-15 files

HardenedBSD/src 5f911ealib/libsys rename.2

libsys/rename.2: remove commented-out CAVEAT section

FreeBSD UFS does not support hardlinks to directories.

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55539
DeltaFile
+0-26lib/libsys/rename.2
+0-261 files

HardenedBSD/src 7a1217fsys/contrib/openzfs/include/os/freebsd/zfs/sys zfs_vnops_os.h, sys/contrib/openzfs/module/os/freebsd/zfs zfs_vnops_os.c

zfs: implement AT_RENAME_NOREPLACE

Reviewed by:    markj
Tested by:      pho
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55539
DeltaFile
+17-8sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c
+2-2sys/contrib/openzfs/include/os/freebsd/zfs/sys/zfs_vnops_os.h
+1-1sys/contrib/openzfs/module/zfs/zfs_replay.c
+20-113 files

HardenedBSD/src 8feb8d2sys/compat/linux linux_file.c

linuxolator: translate LINUX_RENAME_NOREPLACE into our AT_RENAME_NOREPLACE

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55539
DeltaFile
+23-12sys/compat/linux/linux_file.c
+23-121 files

HardenedBSD/src e486066sys/fs/msdosfs msdosfs_vnops.c, sys/fs/nfsclient nfs_clvnops.c

VOP_RENAME(9): add flags argument

Reviewed by:    markj
Tested by:      pho
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55539
DeltaFile
+7-0sys/ufs/ufs/ufs_vnops.c
+6-1sys/fs/unionfs/union_vnops.c
+6-0sys/fs/nfsclient/nfs_clvnops.c
+5-0sys/fs/p9fs/p9fs_vnops.c
+5-0sys/fs/msdosfs/msdosfs_vnops.c
+5-0sys/fs/smbfs/smbfs_vnops.c
+34-17 files not shown
+51-413 files

HardenedBSD/src 619e49blib/libsys rename.2 Makefile.sys

renameat2(2): document

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55539
DeltaFile
+65-0lib/libsys/rename.2
+2-1lib/libsys/Makefile.sys
+67-12 files

HardenedBSD/src 7aaec5fsys/fs/msdosfs msdosfs_vnops.c, sys/fs/tmpfs tmpfs_vnops.c

renameat2(2): implement AT_RENAME_NOREPLACE flag

For msdosfs, tmpfs, and ufs.

Reviewed by:    markj
Tested by:      pho
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55539
DeltaFile
+20-4sys/kern/vfs_syscalls.c
+7-2sys/fs/msdosfs/msdosfs_vnops.c
+7-2sys/fs/tmpfs/tmpfs_vnops.c
+6-1sys/ufs/ufs/ufs_vnops.c
+3-0sys/sys/fcntl.h
+43-95 files

HardenedBSD/src 1f30200sys/compat/linux linux_file.c, sys/kern vfs_syscalls.c

kern_renameat(9): add flags argument

Reviewed by:    markj
Tested by:      pho
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55539
DeltaFile
+4-4sys/kern/vfs_syscalls.c
+2-2sys/compat/linux/linux_file.c
+1-1sys/sys/syscallsubr.h
+7-73 files