HardenedBSD/src 40a4ccasys/compat/linuxkpi/common/src linux_80211.c, sys/crypto/ccp ccp_hardware.h

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+37-8sys/sys/bus.h
+7-28sys/dev/acpica/acpivar.h
+14-11usr.sbin/bsdinstall/scripts/bootconfig
+22-0sys/compat/linuxkpi/common/src/linux_80211.c
+12-2tools/build/stddef.h
+5-5sys/crypto/ccp/ccp_hardware.h
+97-549 files not shown
+112-6615 files

HardenedBSD/src 06a4202sys/compat/linuxkpi/common/src linux_80211.c, sys/crypto/ccp ccp_hardware.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+37-8sys/sys/bus.h
+7-28sys/dev/acpica/acpivar.h
+14-11usr.sbin/bsdinstall/scripts/bootconfig
+22-0sys/compat/linuxkpi/common/src/linux_80211.c
+12-2tools/build/stddef.h
+5-5sys/crypto/ccp/ccp_hardware.h
+97-549 files not shown
+112-6615 files

HardenedBSD/src 01a1a4dsys/dev/ahci ahci_pci.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+2-1sys/dev/ahci/ahci_pci.c
+2-11 files

HardenedBSD/ports 57dbe1agames/0ad/files patch-boost-1.89, math/givaro/files patch-src_kernel_integer_random-integer.h

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+247-227security/kanidm/distinfo
+122-112security/kanidm/Makefile.crates
+75-95textproc/py-typst/distinfo
+36-46textproc/py-typst/Makefile.crates
+0-41games/0ad/files/patch-boost-1.89
+0-23math/givaro/files/patch-src_kernel_integer_random-integer.h
+480-54458 files not shown
+658-75164 files

HardenedBSD/ports c8cb646www/tikiwiki distinfo Makefile

www/tikiwiki: Update to 29.1
DeltaFile
+3-3www/tikiwiki/distinfo
+1-1www/tikiwiki/Makefile
+4-42 files

HardenedBSD/ports 44dd6eewww/py-nicegui Makefile distinfo, www/py-nicegui-nogui Makefile

www/py-nicegui{,-nogui}: Update to 3.8.0

ChangeLog:
https://github.com/zauberzeug/nicegui/compare/zauberzeug:6e1ec4f...zauberzeug:97def3b
DeltaFile
+11-3www/py-nicegui/Makefile
+3-3www/py-nicegui/distinfo
+1-1www/py-nicegui-nogui/Makefile
+15-73 files

HardenedBSD/ports 4b70270www/py-nicegui-highcharts distinfo Makefile, www/py-nicegui-highcharts/files patch-pyproject.toml

www/py-nicegui-highcharts: Update to 3.2.0

ChangeLog:
https://github.com/zauberzeug/nicegui-highcharts/compare/v2.1.0...v3.2.0
DeltaFile
+0-11www/py-nicegui-highcharts/files/patch-pyproject.toml
+3-3www/py-nicegui-highcharts/distinfo
+2-4www/py-nicegui-highcharts/Makefile
+5-183 files

HardenedBSD/ports fb2d6d2textproc/py-typst distinfo Makefile.crates, textproc/py-typst/files patch-Cargo.lock

textproc/py-typst: Update to 0.14.8

ChangeLog: https://github.com/messense/typst-py/releases/tag/v0.14.8
DeltaFile
+75-95textproc/py-typst/distinfo
+36-46textproc/py-typst/Makefile.crates
+5-5textproc/py-typst/files/patch-Cargo.lock
+1-2textproc/py-typst/Makefile
+117-1484 files

HardenedBSD/ports 321913bdatabases/libvalkey distinfo pkg-plist

databases/libvalkey: Update to 0.4.0

ChangeLogs:

- https://github.com/valkey-io/libvalkey/releases/tag/0.3.0
- https://github.com/valkey-io/libvalkey/releases/tag/0.4.0
DeltaFile
+3-3databases/libvalkey/distinfo
+2-2databases/libvalkey/pkg-plist
+1-1databases/libvalkey/Makefile
+6-63 files

HardenedBSD/ports f849c6asysutils/rdfind distinfo Makefile

sysutils/rdfind: Update to 1.8.0

ChangeLog: https://github.com/pauldreik/rdfind/releases/tag/releases/1.8.0
DeltaFile
+3-3sysutils/rdfind/distinfo
+1-1sysutils/rdfind/Makefile
+4-42 files

HardenedBSD/ports 0a58a47www/py-httpx-retries distinfo Makefile

www/py-httpx-retries: Update to 0.4.6

ChangeLog: https://github.com/will-ockmore/httpx-retries/releases/tag/0.4.6
DeltaFile
+3-3www/py-httpx-retries/distinfo
+1-1www/py-httpx-retries/Makefile
+4-42 files

HardenedBSD/src c3ed2f3sys/arm64/conf std.nxp, sys/arm64/qoriq qoriq_dw_pci.c

qoriq / nxp: Fix spelling take II

Fix spelling of NXP, which is not NPX, in two places.

Improves:       a4e30909ec98
Reported by:    Kevin Bowling (kevin.bowling kev009.com), qoriq_dw_pci.c
MFC after:      3 days
DeltaFile
+1-1sys/arm64/conf/std.nxp
+1-1sys/arm64/qoriq/qoriq_dw_pci.c
+2-22 files

HardenedBSD/ports 510181baudio/openal-soft Makefile

audio/openal-soft: Optionally remove dependency on RTKIT/DBUS

The RTKIT functionality pulls in DBUS. As this functionallity doesn't
even work on FreeBSD, add the option to remove it.
Set the default value to "ON" to not affect the current state.

PR:             292308
Approved by:    multimedia (maintainer, timeout 6+ weeks)
DeltaFile
+6-4audio/openal-soft/Makefile
+6-41 files

HardenedBSD/ports d6ad8c9lang/fpc-devel Makefile

lang/fpc-devel: Fix build cleaning env before sub-gmake

PR:             291061
DeltaFile
+4-4lang/fpc-devel/Makefile
+4-41 files

HardenedBSD/ports ab7261bsysutils/try-rs distinfo Makefile

sysutils/try-rs: Update to 1.5.2
DeltaFile
+3-3sysutils/try-rs/distinfo
+1-1sysutils/try-rs/Makefile
+4-42 files

HardenedBSD/src fc9369asys/compat/linuxkpi/common/src linux_80211.c

LinuxKPI: 802.11: do not leak BA sessions when tearing down state

In certain cases we may tear down state of a node with 'ongoing'
BA sessions.  This can trigger a firmware crash with iwlwifi as
reported in [1] when trying to remove the sta from the firmware.

   0x2010303A | ADVANCED_SYSASSERT
   ..
   0x00000000 | umac data1 (sta id=0)
   ..
   0x0088030C | last host cmd (STA_RM)

[1] https://lists.freebsd.org/archives/freebsd-wireless/2025-November/003901.html

I hit the same problem while running regression tests after
reworking some LinuxKPI 802.11 sta state machine bits.

Add the missing calls to lkpi_sta_run_to_assoc() and lkpi_sta_run_to_init()
to make sure (through net80211) we call (*ampdu_action) with

    [10 lines not shown]
DeltaFile
+22-0sys/compat/linuxkpi/common/src/linux_80211.c
+22-01 files

HardenedBSD/src 5edf24asys/ofed/include/rdma ib_verbs.h

ofed: reduce usage of struct dma_attrs *dma_attrs

ib_verbs.h still uses struct dma_attrs *dma_attrs everywhere.
It is beyond my knowledge when that struct got deprecated upstream but
it is still supported by our LinuxKPI.  The problem is that the
functions called with that argument (dma_map_single_attrs,
dma_unmap_single_attrs, dma_map_sg_attrs, dma_unmap_sg_attrs) so far
are #defines in LinuxKPI and drop the last argument (attrs) so it was
never a problem.

In preparation to pass the attrs to the actual implementation in LinuxKPI,
which has gained support for them, we now pass dma_sttrs->flags which
is the expected unsigned long bit field.

If anyone has serious interest in updating our ofed implementation they
could look into this some more and remove the usage of struct dma_attrs
entirely.

Sponsored by:   The FreeBSD Foundation

    [3 lines not shown]
DeltaFile
+4-4sys/ofed/include/rdma/ib_verbs.h
+4-41 files

HardenedBSD/src a4e3090sys/arm64/qoriq qoriq_dw_pci.c

qoriq: fix spelling in device_set_desc()

The product series is called NXP QorIQ Layerscape.  Remove the extra 'e.

MFC after:      3 days
Reviewed by:    mmel, emaste
Differential Revision: https://reviews.freebsd.org/D55388
DeltaFile
+1-1sys/arm64/qoriq/qoriq_dw_pci.c
+1-11 files

HardenedBSD/ports 9f34883cad/openscad-devel distinfo Makefile.git_rev

cad/openscad-devel: Update to 2026.02.19
DeltaFile
+9-9cad/openscad-devel/distinfo
+5-5cad/openscad-devel/Makefile.git_rev
+1-1cad/openscad-devel/Makefile
+15-153 files

HardenedBSD/src 56a6305sys/dev/ahci ahci_pci.c

ahci: Restrict NVMe redirection by BAR size

Attempts to access vendor-specific registers on emulator of older
Intel hardware was reported to confuse one.  Since the redirection
obviously require BAR size bigger than normal 2KB of AHCI, add
the condition, similar to what Linux is doing.

Requested by:   kib
MFC after:      2 weeks

(cherry picked from commit b9d3945831fc7a60f2065c7a0afc747dc5653c9f)
DeltaFile
+2-1sys/dev/ahci/ahci_pci.c
+2-11 files

HardenedBSD/ports e905399textproc/opensearch distinfo Makefile, textproc/opensearch-dashboards distinfo Makefile

textproc/opensearch*: update to 3.5.0

With hat:       opensearch
PR:             293199 293200
Reviewed by:    Sven Ruediger
DeltaFile
+5-5textproc/opensearch-dashboards/distinfo
+5-5textproc/opensearch/distinfo
+1-1textproc/opensearch/Makefile
+1-1textproc/opensearch-dashboards/Makefile
+12-124 files

HardenedBSD/ports 7af5af7multimedia/obuparse distinfo Makefile

multimedia/obuparse: Update to 2.0.2

Security update

Changelog: https://github.com/dwbuiten/obuparse/releases/tag/v2.0.2
DeltaFile
+3-3multimedia/obuparse/distinfo
+1-1multimedia/obuparse/Makefile
+4-42 files

HardenedBSD/ports ebf1cacnet-p2p/reticulum distinfo Makefile

HBSD: Bump net-p2p/reticulum

This fixes the issue with blackholepath.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+3-3net-p2p/reticulum/distinfo
+2-2net-p2p/reticulum/Makefile
+5-52 files

HardenedBSD/ports dcd66e2devel/jenkins distinfo Makefile

devel/jenkins: Update to 2.552

Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-3devel/jenkins/distinfo
+1-1devel/jenkins/Makefile
+4-42 files

HardenedBSD/ports b541bafdevel/py-kaitaistruct distinfo Makefile

devel/py-kaitaistruct: update to 0.11
DeltaFile
+3-3devel/py-kaitaistruct/distinfo
+1-2devel/py-kaitaistruct/Makefile
+4-52 files

HardenedBSD/src 0fd91c4usr.sbin/bsdinstall/scripts bootconfig

bsdinstall: fix EFI boot entry creation

update_uefi_bootentry assumes that the caller sets FREEBSD_BOOTNAME and
mntpt, which isn't the case anymore. The result is that there is no
"FreeBSD" boot entry created/updated after install. Most machines manage
to boot from the removable media path (if the loader is installed there
too), but some don't.

Take the loader's path as an argument and rename the variable used in
the ZFS mirror loop so mntpt can be reused below.

Also mark nentries as a local variable so it doesn't leak out of the
function.

PR:             293385
Fixes:          494de51bc0074472d1b01604f085daea0844f240
MFC after:      2 days
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D55469
DeltaFile
+14-11usr.sbin/bsdinstall/scripts/bootconfig
+14-111 files

HardenedBSD/src 0c075dbtools/build stddef.h

tools/build/stddef.h: fix stock clang/gcc headers

Both clang and gcc's stddef.h are designed to be included multiple times
with different combinations of __need_* macros defined (e.g
__need_size_t). Remove the #pragma once to accommodate this, ptraddr_t
is guarded by _PTRADDR_T_DECLARED anyways.

Also use __SIZE_TYPE__ instead of size_t since it's not guaranteed to be
defined.

Reviewed by:    brooks, imp, kib
Differential Revision:  https://reviews.freebsd.org/D55453
DeltaFile
+12-2tools/build/stddef.h
+12-21 files

HardenedBSD/src fac9ae3usr.sbin/efibootmgr efibootmgr.8

efibootmgr.8: capitalize examples section header

MFC after:      3 days
DeltaFile
+1-1usr.sbin/efibootmgr/efibootmgr.8
+1-11 files

HardenedBSD/ports f2569b9astro/qmapshack distinfo Makefile

astro/qmapshack: update to 1.20.1

Release Notes:
  https://github.com/Maproom/qmapshack/releases/tag/V_1.20.1
DeltaFile
+3-3astro/qmapshack/distinfo
+1-1astro/qmapshack/Makefile
+4-42 files

HardenedBSD/src 591127bsys/dev/acpica acpivar.h

acpi: Use __BUS_ACCESSOR_DEFAULT and __BUS_ACCESSOR for IVARs

- Use __BUS_ACCESSOR_DEFAULT for the global handle IVAR to preserve
  existing behavior for acpi_get_handle.

- Use __BUS_ACCESSOR for the private ACPI IVARs as these are only used
  with direct children of acpi0.

Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D55355
DeltaFile
+4-25sys/dev/acpica/acpivar.h
+4-251 files