HardenedBSD/src 51620bfstand/efi/loader/arch/amd64 trap.c, sys/dev/sound/pcm channel.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+64-85sys/kern/kern_procctl.c
+15-1sys/dev/sound/pcm/channel.c
+2-2stand/efi/loader/arch/amd64/trap.c
+81-883 files

HardenedBSD/src a7290bcstand/efi/loader/arch/amd64 trap.c, sys/dev/sound/pcm channel.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+64-85sys/kern/kern_procctl.c
+15-1sys/dev/sound/pcm/channel.c
+2-2stand/efi/loader/arch/amd64/trap.c
+81-883 files

HardenedBSD/src f715995include exterr.h, lib/libc/gen uexterr_gettext.3 err.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+183-0tests/sys/kern/pdrfork.c
+71-0lib/libc/gen/uexterr_gettext.3
+23-3lib/libsys/pdfork.2
+5-0sys/kern/kern_fork.c
+2-2lib/libc/gen/err.c
+1-2include/exterr.h
+285-75 files not shown
+291-911 files

HardenedBSD/ports 1e367d7deskutils/joplin-desktop distinfo Makefile.crates, deskutils/joplin-desktop/files/app-clipper package-lock.json

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+54,295-0deskutils/joplin-desktop/files/packagejsons/yarn.lock
+26,047-0deskutils/joplin-desktop/files/default-plugins/io.github.jackgruber.backup/package-lock.json
+7,700-0deskutils/joplin-desktop/files/app-clipper/package-lock.json
+942-0deskutils/joplin-desktop/files/packagejsons/.yarn/releases/yarn-4.9.2.cjs
+751-0deskutils/joplin-desktop/distinfo
+367-0deskutils/joplin-desktop/Makefile.crates
+90,102-0129 files not shown
+94,453-296135 files

HardenedBSD/ports d5b7886devel/R-cran-future.apply Makefile distinfo

devel/R-cran-future.apply: Update to 1.20.2

- Use only RUN_DEPENDS as port doesn't compile
- Add missing test dependency

ChangeLog: https://cran.r-project.org/web/packages/future.apply/index.html
DeltaFile
+3-4devel/R-cran-future.apply/Makefile
+3-3devel/R-cran-future.apply/distinfo
+6-72 files

HardenedBSD/src 3deae7bsys/dev/sound/pcm channel.c

sound: Detect unsupported formats

This way we can avoid edge-cases like
8af6aee96ed609456900c6dd92dafabac5e89c0a ("virtual_oss(8): Remove
floating point formats from preference list").

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    emaste
Differential Revision:  https://reviews.freebsd.org/D55403
DeltaFile
+15-1sys/dev/sound/pcm/channel.c
+15-11 files

HardenedBSD/ports b1c3c8egames/punchy/files patch-ninja-jobs

games/punchy: respect MAKE_JOBS_NUMBER

Pass -j<n> from Cargo to Ninja. NUM_JOBS is part of default variables.
https://doc.rust-lang.org/cargo/reference/environment-variables.html

PR:             293314
Reported by:    fuz
Obtained from:  upstream
DeltaFile
+15-0games/punchy/files/patch-ninja-jobs
+15-01 files

HardenedBSD/src d5dd331usr.sbin/pw pw.8

pw.8: spell

(cherry picked from commit 66797b469ee3e303c5e228bea1e244f433e666e1)
DeltaFile
+1-1usr.sbin/pw/pw.8
+1-11 files

HardenedBSD/ports b3a144dsecurity/sssd2 Makefile

security/sssd2: Pass a correct path to realmd
DeltaFile
+4-1security/sssd2/Makefile
+4-11 files

HardenedBSD/ports 959cb3ftextproc/bookokrat distinfo Makefile

textproc/bookokrat: Update to 0.3.6

ChangeLog:      https://github.com/bugzmanov/bookokrat/releases/tag/v0.3.6
Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3textproc/bookokrat/distinfo
+1-1textproc/bookokrat/Makefile
+4-42 files

HardenedBSD/ports 9c5c5c1databases/rainfrog distinfo Makefile

databases/rainfrog: Update to 0.3.17

ChangeLog:      https://github.com/achristmascarl/rainfrog/releases/tag/v0.3.17
Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3databases/rainfrog/distinfo
+1-1databases/rainfrog/Makefile
+4-42 files

HardenedBSD/ports f6691f1print/lout distinfo Makefile

print/lout: Update to 3.43.3
DeltaFile
+3-3print/lout/distinfo
+1-1print/lout/Makefile
+4-42 files

HardenedBSD/ports f78b3d4databases/timescaledb distinfo Makefile

databases/timescaledb: Update to 2.25.1
DeltaFile
+3-3databases/timescaledb/distinfo
+1-1databases/timescaledb/Makefile
+1-0databases/timescaledb/pkg-plist
+5-43 files

HardenedBSD/src 677bbfftests/sys/kern pdrfork.c

pdrfork(2) tests: should wait for the child to exit

(cherry picked from commit f90ee665d035a5e4aea0bcaa18793e683ea253ed)
DeltaFile
+3-2tests/sys/kern/pdrfork.c
+3-21 files

HardenedBSD/src 558b761tests/sys/kern pdrfork.c Makefile

Add tests for pdrfork

(cherry picked from commit d1e6057fa47e842c63461b64b29ac5d3e9fdad76)
DeltaFile
+187-0tests/sys/kern/pdrfork.c
+1-0tests/sys/kern/Makefile
+188-02 files

HardenedBSD/src c2c3881tests/sys/kern pdrfork.c

pdrfork(2) tests: catch runaway child for EFAULT test

(cherry picked from commit 44843695bc4e36abd15835d627da7d38c06f2219)
DeltaFile
+10-0tests/sys/kern/pdrfork.c
+10-01 files

HardenedBSD/src e3fda88tests/sys/kern pdrfork.c

pdrfork(2) tests: RFPROCDESC|RFPROC are required

(cherry picked from commit 68ba270f4fc7799929a3d59d710f44e5e9087def)
DeltaFile
+2-44tests/sys/kern/pdrfork.c
+2-441 files

HardenedBSD/src 7a1c336tests/sys/kern pdrfork.c

pdrfork(2) tests: do not rely on (int *)-1 being invalid address

(cherry picked from commit d6bf2d14a941a88e27a82a3f91790353e134b8f6)
DeltaFile
+8-2tests/sys/kern/pdrfork.c
+8-21 files

HardenedBSD/src b0551b0lib/libc/gen uexterr_gettext.3 Makefile.inc, share/man/man9 exterror.9

libc: add man page for uexterr_gettext(3)

(cherry picked from commit a03f285afafae243396c9bc7892cbe717a3ac37d)
DeltaFile
+71-0lib/libc/gen/uexterr_gettext.3
+2-1share/man/man9/exterror.9
+1-0lib/libc/gen/Makefile.inc
+74-13 files

HardenedBSD/src 396d709tests/sys/kern pdrfork.c

pdrfork(2) tests: enable on x86

(cherry picked from commit 793e891f4ad1ef450f562a241fb0bd3b21d72251)
DeltaFile
+20-9tests/sys/kern/pdrfork.c
+20-91 files

HardenedBSD/src e166a6etests/sys/kern pdrfork.c

pdrfork(2) tests: split basic_usage

(cherry picked from commit 94e4de77dec809fa5a6975e3495a41d1924c25ad)
DeltaFile
+19-9tests/sys/kern/pdrfork.c
+19-91 files

HardenedBSD/src afe6868lib/libsys pdfork.2

pdfork.2: add EFAULT as possible error, explain some consequences of it

(cherry picked from commit db80ea9b88628168d2bb7f17a60b73568a8ea102)
DeltaFile
+18-0lib/libsys/pdfork.2
+18-01 files

HardenedBSD/src fea8849lib/libsys pdfork.2, sys/kern kern_fork.c

pdrfork(2): do require RFPROCDESC | RFPROC

(cherry picked from commit b05be03ceea0a95f7783ddc890885f34bb4023d4)
DeltaFile
+5-3lib/libsys/pdfork.2
+5-0sys/kern/kern_fork.c
+10-32 files

HardenedBSD/src fd91b1flib/libc/gen err.c

libc: print extended errors from warn(3) and vwarn(3)

(cherry picked from commit ffbf95907039821b69dfe1607d1695b46af82e35)
DeltaFile
+2-2lib/libc/gen/err.c
+2-21 files

HardenedBSD/src 6a263d7include exterr.h, lib/libc/gen uexterr_format.c

libc: improve include usage for exterror sources

(cherry picked from commit 1443a455a96e587a7b49608def79495e9d74513f)
DeltaFile
+1-2include/exterr.h
+1-0lib/libc/gen/uexterr_format.c
+2-22 files

HardenedBSD/src 0e67c3fsys/kern kern_procctl.c

reap_kill_subtree_once(): reap_kill_proc_work() might drop proctree_lock

Due to this, restart the iteration over the p_reapsiblings if the lock
was dropped.

Reviewed by:    markj
Tested by:      pho
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55288
DeltaFile
+8-3sys/kern/kern_procctl.c
+8-31 files

HardenedBSD/src be14071sys/kern kern_procctl.c

procctl(PROC_REAP_KILL): use pgrp pg_killsx sx to sync with fork

PROC_REAP_KILL must guarantee that all reaper descendants are signalled.
In particular, it must ensure that forked but not yet fully linked
descendants cannot escape killing. Currently, proc_reap() fullfils the
guarantee by single-threading stopping the target process, which moves
the target to the userspace boundary, so the target cannot fork while
the signal is sent.

Single-threading has undesirable effect of sometimes terminating sleeps
with EINTR.

Since the time that the bug with PROC_REAP_KILL was fixed, we grow
the pg_killsx mechanism that is similarly used by the process group
signalling to ensure that no member of the process group escapes.
Reuse pg_killsx for PROC_REAP_KILL as well.

Besides the functional change of no longer causing spurious EINTR, not
single-threading the target means that we no longer need to delegate the

    [9 lines not shown]
DeltaFile
+54-84sys/kern/kern_procctl.c
+54-841 files

HardenedBSD/src 5c8af59sys/kern kern_procctl.c

procctl(PROC_REAP_KILL): align error reporting with pgkill(2)

ESRCH from cr_cansignal() means that the target process should be not
visible to the initiator.  So do not report pids with ESRCH result.

Noted by:       markj
Reviewed by:    markj, olce
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55341
DeltaFile
+5-1sys/kern/kern_procctl.c
+5-11 files

HardenedBSD/ports 8506087net-im/teams distinfo Makefile, net-im/teams/files/packagejsons package-lock.json package.json

net-im/teams: Update to 2.7.7

Changelog:
- https://github.com/IsmaelMartinez/teams-for-linux/releases/tag/v2.7.6
- https://github.com/IsmaelMartinez/teams-for-linux/releases/tag/v2.7.7

Reported by:    portscout
DeltaFile
+215-107net-im/teams/files/packagejsons/package-lock.json
+5-5net-im/teams/distinfo
+2-1net-im/teams/files/packagejsons/package.json
+1-2net-im/teams/Makefile
+223-1154 files

HardenedBSD/src dc11af0stand/efi/loader/arch/amd64 trap.c

loader.efi: tss_pa setup seems to be flawed in trap.c

since sd_lobase is 24 bits, we would need to shift 24 bits, not 16.

Reviewed by:    kib
Differential Revision:  https://reviews.freebsd.org/D55178
DeltaFile
+1-1stand/efi/loader/arch/amd64/trap.c
+1-11 files