HardenedBSD/src 99e59cdlib/libpfctl libpfctl.c, lib/libusb libusb10.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+67-0lib/libpfctl/libpfctl.c
+41-0sys/netpfil/pf/pf_nl.c
+38-0tests/sys/netpfil/pf/table.sh
+7-14sbin/pfctl/pfctl_radix.c
+18-0lib/libusb/libusb10.c
+5-7sys/compat/freebsd32/freebsd32.h
+176-215 files not shown
+187-3111 files

HardenedBSD/src 533b755sys/net if_lagg.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+20-18sys/net/if_lagg.c
+20-181 files

HardenedBSD/ports 2eff77caudio/yoshimi/files patch-src_CMakeLists.txt, graphics/py-vulkan Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+190-196net-im/teams/files/packagejsons/package-lock.json
+25-29sysutils/mise/distinfo
+12-14sysutils/mise/Makefile
+17-8audio/yoshimi/files/patch-src_CMakeLists.txt
+23-0graphics/py-vulkan/Makefile
+12-7net-im/teams/files/packagejsons/package.json
+279-25452 files not shown
+428-37158 files

HardenedBSD/src 281282elib/libpfctl libpfctl.c libpfctl.h, sbin/pfctl pfctl_radix.c

pf: convert DIOCRTSTADDRS to netlink

Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+67-0lib/libpfctl/libpfctl.c
+41-0sys/netpfil/pf/pf_nl.c
+38-0tests/sys/netpfil/pf/table.sh
+7-14sbin/pfctl/pfctl_radix.c
+2-0lib/libpfctl/libpfctl.h
+1-0sys/netpfil/pf/pf_nl.h
+156-146 files

HardenedBSD/ports 8f80432net-im/teams distinfo Makefile, net-im/teams/files/packagejsons package-lock.json package.json

net-im/teams: Update to 2.7.5

While here, add target for unit testing.

Changelog:
- https://github.com/IsmaelMartinez/teams-for-linux/releases/tag/v2.7.3
- https://github.com/IsmaelMartinez/teams-for-linux/releases/tag/v2.7.4
- https://github.com/IsmaelMartinez/teams-for-linux/releases/tag/v2.7.5

Reported by:    portscout
DeltaFile
+190-196net-im/teams/files/packagejsons/package-lock.json
+12-7net-im/teams/files/packagejsons/package.json
+5-5net-im/teams/distinfo
+4-2net-im/teams/Makefile
+211-2104 files

HardenedBSD/ports 544c649x11-fonts/cantarell-fonts distinfo Makefile

x11-fonts/cantarell-fonts: update to 0.311

Update to 0.311

  Release: v0.311
  - Also provide a ss01 variant for the "fl" ligature, which I forgot in the last release.
  - Relax Python version requirements to >= 3.10 when using uv.

Remove MESON_ARGS, useprebuilt option is enabled by default

PR:             292096
DeltaFile
+3-3x11-fonts/cantarell-fonts/distinfo
+1-3x11-fonts/cantarell-fonts/Makefile
+4-62 files

HardenedBSD/ports 67adcfagraphics Makefile, graphics/py-vulkan Makefile pkg-descr

graphics/py-vulkan: Python binding for Vulkan API

vulkan is a Python extension which supports the Vulkan API. It
leverages power of Vulkan with simplicity of Python. It's a complete
Vulkan wrapper, it keeps the original Vulkan API and try to limit
differences induced by Python.

devel/py-cffi is also needed as a BUILD_DEPENDS (truckman)

PR:             289669
DeltaFile
+23-0graphics/py-vulkan/Makefile
+4-0graphics/py-vulkan/pkg-descr
+3-0graphics/py-vulkan/distinfo
+1-0graphics/Makefile
+31-04 files

HardenedBSD/ports 873e86deditors/vscode distinfo Makefile.version, editors/vscode/files product.json.extensions

editors/vscode: Update to 1.109.2

While here, update product.json for popular extensions. [1]

Changelog: https://code.visualstudio.com/updates/v1_109

Reported by:    GitHub (watch releases)
Obtained from:  https://github.com/VSCodium/vscodium/blob/1.109.31074/product.json [1]
DeltaFile
+7-7editors/vscode/distinfo
+11-2editors/vscode/files/product.json.extensions
+2-2editors/vscode/Makefile.version
+1-1editors/vscode/pkg-plist
+0-1editors/vscode/Makefile
+21-135 files

HardenedBSD/src 4ccca21sys/sys abi_types.h

sys/abi_types.h: time32_t is 64-bit on non-x86 architectures

As long as 'sys/compat/freebsd32/freebsd32.h' is used unconditionally on
all platforms (in 'kern_umtx.c' at least), the rule of thumb is to
ensure that 'struct foo32' on a 32-bit arch is type-compatible with
'struct foo' on the same arch.  In practice, this is very simple to
achieve: All 'foo32' types should be compatible with 'foo' on 32-bit
architectures, which is what we are supposed to do already for compat'
structures by design.  The recently introduced 'freebsd32_uint64_t' type
typically supports that.

This change fixes commit 87632ddf67b0 ("openzfs sys/types32.h: use
abi_compat.h for time32_t") which was defining 'time32_t' to 'in32_t'
for all 32-bit architectures, which is wrong but on i386.  By luck, this
did not change the size of whole 'struct ffclock_estimate32' (whose size
is compile-time asserted) because 'struct bintime32''s one would stay
the same, as even if its field 'sec' was incorrectly sized after that
commit, the 'frac' one is 64-bit and 64-bit aligned on all non-x86
architectures so its offset in 'struct bintime32' would stay the same.

    [5 lines not shown]
DeltaFile
+1-5sys/sys/abi_types.h
+1-51 files

HardenedBSD/src 7c2fc44sys/compat/freebsd32 freebsd32.h freebsd32_misc.c

sys/compat/freebsd32: FF clock struct: Don't pack, use 'ffcounter32'

Packing 'struct ffclock_estimate32', in absence of substitution of
'ffcounter' (some 'uint64_t') by a 32-bit compatible type, was necessary
on amd64 since 'uint64_t' is 8-byte aligned, which leaves a padding gap
of 4-byte between fields 'update_time' and 'update_ffcount'.  This gap
does not exist on i386 (or amd64 32-bit mode), as 'uint64_t' there is
only 4-byte aligned.

Change the type of the 'update_ffcount' and 'leapsec_next' fields to the
recently introduced 'freebsd32_uint64_t', and adapt copy-in and copy-out
accordingly.  Using `CP()` previously worked due to the '__packed__'
attribute.

Reviewed by:    kib
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55282
DeltaFile
+5-7sys/compat/freebsd32/freebsd32.h
+4-4sys/compat/freebsd32/freebsd32_misc.c
+9-112 files

HardenedBSD/src 6ceb731sys/net if_lagg.c

lagg: Make lagg_link_active() static

It is declared as static. Make the definition consistent with the
declaration.

It was ever fixed by commit 52e53e2de0ec, but the commit was reverted,
leaving it unfixed.

No functional change intended.

MFC after:      3 days

(cherry picked from commit 30988d0a7bd7ebd5f5825b9b7aa04ff0af788aa7)
DeltaFile
+1-1sys/net/if_lagg.c
+1-11 files

HardenedBSD/src fe1299fsys/net if_lagg.c

lagg: Avoid dropping locks when starting the interface

The init routine of a lagg(4) interface will not change during the whole
lifecycle. So we can call lagg_init() directly instead of through the
function pointer. Well, that requires a drop and pickup lock, which
unnecessarily expose a small race window. Refactor lagg_init() into
lagg_init_locked() and call the later one to avoid that.

Meanwhile, delay updating the driver managed status until after the
interface is really ready.

Reviewed by:    markj
MFC after:      5 days
Differential Revision:  https://reviews.freebsd.org/D55198

(cherry picked from commit c182cf646a4f995fa8506afd8afc9541c4d32905)
DeltaFile
+19-17sys/net/if_lagg.c
+19-171 files

HardenedBSD/ports dfc9942net/py-python-socks distinfo Makefile

net/py-python-socks: Update to 2.8.1
DeltaFile
+3-3net/py-python-socks/distinfo
+1-1net/py-python-socks/Makefile
+4-42 files

HardenedBSD/ports 45955bbaudio/shairport-sync Makefile distinfo

audio/shairport-sync: Update to 5.0.0

- Update to 5.0.0
- Drop SNDIO from default options (deprecated upstream)
- Add SNDIO deprecation note to OPTIONS

Changelog:
https://github.com/mikebrady/shairport-sync/releases
DeltaFile
+3-3audio/shairport-sync/Makefile
+3-3audio/shairport-sync/distinfo
+6-62 files

HardenedBSD/ports 2aec2b6ports-mgmt/synth distinfo Makefile

ports-mgmt/synth: update to 3.13 release (+)

Changelog:
* Attempt to fix prefetching with modern pkg
* Limit log preservation to the task that failed
* testing fix for missing synth scanner log file
* Add EXIT STATUS section to man page
* Set non-zero return code when problem encountered
* Create /etc/hosts in builder
DeltaFile
+3-3ports-mgmt/synth/distinfo
+1-1ports-mgmt/synth/Makefile
+4-42 files

HardenedBSD/ports 8191861net/py-trio distinfo Makefile

net/py-trio: Update to 0.33.0

- Add PYTHONPATH=${WRKSRC}/src to TEST_ENV so pytest runs against
  the in-tree sources (src layout)
- Disable pytest plugin autoload during tests to avoid interference
  from unrelated globally installed pytest plugins
DeltaFile
+3-3net/py-trio/distinfo
+3-1net/py-trio/Makefile
+6-42 files

HardenedBSD/ports 81da79bx11-fonts/bdf2sfd distinfo Makefile

x11-fonts/bdf2sfd: Update to 1.2.0
DeltaFile
+3-3x11-fonts/bdf2sfd/distinfo
+1-1x11-fonts/bdf2sfd/Makefile
+4-42 files

HardenedBSD/ports bd02cebdatabases/pg_citus distinfo Makefile

databases/pg_citus: update to 14.0.0

Changes:        https://github.com/citusdata/citus/blob/v14.0.0/CHANGELOG.md

PR:     292443
Reported by:    Kevin Bowling
DeltaFile
+3-3databases/pg_citus/distinfo
+2-2databases/pg_citus/Makefile
+2-0databases/pg_citus/pkg-plist
+7-53 files

HardenedBSD/src 38c1833lib/libusb libusb10.c

libusb: dequeue next transfer on completion to prevent stalls

The transfer proxy callbacks (bulk/interrupt, control, isochronous)
only called libusb10_submit_transfer_sub() in the START path to
pipeline the second kernel transfer slot. On completion or error,
no attempt was made to dequeue the next pending transfer from
tr_head onto the now-free slot.

When more than two async transfers were submitted on the same
endpoint, the third (and subsequent) transfers would remain stuck
on tr_head indefinitely, since no completion ever triggered their
submission. This caused a protocol-level deadlock in applications
like adb that submit header + payload + zero-length terminator as
three separate bulk transfers in sequence.

Fix by calling libusb10_submit_transfer_sub() after every
libusb10_complete_transfer() in all three proxy callbacks.

MFC After:      2 weeks

    [2 lines not shown]
DeltaFile
+18-0lib/libusb/libusb10.c
+18-01 files

HardenedBSD/src be52217lib/libusb libusb10_hotplug.c

libusb: make libusb_hotplug_get_user_data actually return user_data

MFC After:      2 days
Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D55291
DeltaFile
+3-1lib/libusb/libusb10_hotplug.c
+3-11 files

HardenedBSD/ports 1674666misc/ggml pkg-plist distinfo

misc/ggml: update 0.9.5 → 0.9.7

Reported by:    portscout
DeltaFile
+5-4misc/ggml/pkg-plist
+3-3misc/ggml/distinfo
+1-1misc/ggml/Makefile
+9-83 files

HardenedBSD/ports 339ececscience/phonopy distinfo Makefile, science/py-phonopy distinfo Makefile

science/{,py-}phonopy: update 2.42.0 → 2.48.0

Reported by:    portscout
DeltaFile
+3-3science/py-phonopy/distinfo
+3-3science/phonopy/distinfo
+1-4science/py-phonopy/Makefile
+1-1science/phonopy/Makefile
+8-114 files

HardenedBSD/ports c529430devel/catch2 pkg-plist distinfo

devel/catch2: update 3.12.0 → 3.13.0

Reported by:    portscout
DeltaFile
+4-2devel/catch2/pkg-plist
+3-3devel/catch2/distinfo
+2-2devel/catch2/Makefile
+9-73 files

HardenedBSD/ports f6f46b5sysutils/mise distinfo Makefile

sysutils/mise: update 2026.2.9 → 2026.2.13

Reported by:    portscout
DeltaFile
+25-29sysutils/mise/distinfo
+12-14sysutils/mise/Makefile
+37-432 files

HardenedBSD/ports 9ba87c9science/py-symfc distinfo Makefile, science/py-symfc/files patch-pyproject.toml

science/py-symfc: update 1.3.1 → 1.6.1
DeltaFile
+10-0science/py-symfc/files/patch-pyproject.toml
+3-3science/py-symfc/distinfo
+3-1science/py-symfc/Makefile
+16-43 files

HardenedBSD/ports 968942aaudio/yoshimi distinfo Makefile, audio/yoshimi/files patch-src_CMakeLists.txt patch-src_globals.h

audio/yoshimi: update 2.3.5.2 → 2.3.6

Reported by:    portscout
DeltaFile
+17-8audio/yoshimi/files/patch-src_CMakeLists.txt
+3-3audio/yoshimi/distinfo
+2-2audio/yoshimi/files/patch-src_globals.h
+1-1audio/yoshimi/Makefile
+0-1audio/yoshimi/pkg-plist
+23-155 files

HardenedBSD/ports 887c8c7science/py-phono3py Makefile distinfo

science/py-phono3py: update 3.9.0 → 3.25.0
DeltaFile
+3-3science/py-phono3py/Makefile
+3-3science/py-phono3py/distinfo
+6-62 files

HardenedBSD/ports 21669a7biology/andi Makefile distinfo

biology/andi: update 0.14-3 → 1.15

Reported by:    portscout
DeltaFile
+3-3biology/andi/Makefile
+3-3biology/andi/distinfo
+6-62 files

HardenedBSD/ports 426d67ascience/py-spglib distinfo Makefile, science/py-spglib/files patch-pyproject.toml

science/{,py-}spglib: update 2.6.0 → 2.7.0
DeltaFile
+3-3science/py-spglib/files/patch-pyproject.toml
+3-3science/py-spglib/distinfo
+3-3science/spglib/distinfo
+3-2science/py-spglib/Makefile
+2-2science/spglib/Makefile
+2-2science/spglib/pkg-plist
+16-156 files

HardenedBSD/src d200489sys/dev/ichsmb ichsmb_pci.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+3-0sys/dev/ichsmb/ichsmb_pci.c
+3-01 files