HardenedBSD/src 8e4ad6fcontrib/kyua/cli cmd_debug.cpp, sbin/fsck_msdosfs dir.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+2-2contrib/kyua/cli/cmd_debug.cpp
+2-2sbin/fsck_msdosfs/dir.c
+2-1usr.bin/m4/misc.c
+1-1usr.sbin/makefs/msdos/direntry.h
+7-64 files

HardenedBSD/src 38b803econtrib/kyua/cli cmd_debug.cpp, sbin/fsck_msdosfs dir.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+2-2contrib/kyua/cli/cmd_debug.cpp
+2-2sbin/fsck_msdosfs/dir.c
+2-1usr.bin/m4/misc.c
+1-1usr.sbin/makefs/msdos/direntry.h
+7-64 files

HardenedBSD/ports e591c7demulators/vice pkg-plist, emulators/vice/files patch-doc_vice.texi patch-src_arch_gtk3_joystickdrv_joystick_bsd.c

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+87-89emulators/vice/pkg-plist
+0-37emulators/vice/files/patch-doc_vice.texi
+33-0emulators/vice/files/patch-src_arch_gtk3_joystickdrv_joystick_bsd.c
+0-16emulators/vice/files/patch-src_pet_pet-stubs.c
+0-15emulators/vice/files/patch-src_cbm2_cbm2-stubs.c
+0-15emulators/vice/files/patch-src_c64dtv_c64dtv-stubs.c
+120-17218 files not shown
+163-21924 files

HardenedBSD/src a3394b6usr.bin/m4 misc.c

m4: avoid warnings about too-long initializer strings

Mark `digits` as `__non_string`, to avoid warnings from clang 21 similar
to:

    usr.bin/m4/misc.c:123:27: error: initializer-string for character array is too long, array size is 36 but initializer has size 37 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
      123 |         static char digits[36] = "0123456789abcdefghijklmnopqrstuvwxyz";
          |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

MFC after:      3 days
DeltaFile
+2-1usr.bin/m4/misc.c
+2-11 files

HardenedBSD/src ba0a115usr.sbin/makefs/msdos direntry.h

makefs: avoid warnings about too-long initializer strings

Mark `direntry::deName` as `__non_string`, to avoid warnings from clang
21 similar to:

  usr.sbin/makefs/msdos/msdosfs_vnops.c:512:4: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
    512 |         {       ".          ",                          /* the . entry */
        |                 ^~~~~~~~~~~~~
  usr.sbin/makefs/msdos/msdosfs_vnops.c:522:4: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
    522 |         {       "..         ",                          /* the .. entry */
        |                 ^~~~~~~~~~~~~

MFC after:      3 days
DeltaFile
+1-1usr.sbin/makefs/msdos/direntry.h
+1-11 files

HardenedBSD/ports 30cbdfbmultimedia/ffmpeg/files patch-libavcodec_ffv1enc__vulkan.c patch-libavcodec_vulkan__ffv1.c

HBSD: Fix FORTIFYSOURCE for multimedia/ffmpeg

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+20-0multimedia/ffmpeg/files/patch-libavcodec_ffv1enc__vulkan.c
+14-0multimedia/ffmpeg/files/patch-libavcodec_vulkan__ffv1.c
+34-02 files

HardenedBSD/ports 78266bcdevel/ruby-build distinfo Makefile

devel/ruby-build: Update to 20251225

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20251225
DeltaFile
+3-3devel/ruby-build/distinfo
+1-1devel/ruby-build/Makefile
+4-42 files

HardenedBSD/ports 0530c67net-p2p/prowlarr Makefile, net-p2p/prowlarr/files prowlarr.in

net-p2p/prowlarr: Fix rc script for 15 after SSL version bump

PR:             291736
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer, implicit)
MFH:            2025Q4
DeltaFile
+4-1net-p2p/prowlarr/files/prowlarr.in
+1-0net-p2p/prowlarr/Makefile
+5-12 files

HardenedBSD/ports 82e117bnet-p2p/lidarr Makefile, net-p2p/lidarr/files lidarr.in

net-p2p/lidarr: Fix rc script for 15 after SSL version bump

PR:             291736
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer, implicit)
MFH:            2025Q4
DeltaFile
+4-1net-p2p/lidarr/files/lidarr.in
+1-0net-p2p/lidarr/Makefile
+5-12 files

HardenedBSD/ports 4139988net-p2p/readarr Makefile, net-p2p/readarr/files readarr.in

net-p2p/readarr: Fix rc script for 15 after SSL version bump

PR:             291736
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer, implicit)
MFH:            2025Q4
DeltaFile
+4-1net-p2p/readarr/files/readarr.in
+1-0net-p2p/readarr/Makefile
+5-12 files

HardenedBSD/ports 0cb581anet-p2p/radarr Makefile, net-p2p/radarr/files radarr.in

net-p2p/radarr: Fix rc script for 15 after SSL version bump

PR:             291734 291736
Tested by:      edgeman at gmail.com
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer)
MFH:            2025Q4
DeltaFile
+4-1net-p2p/radarr/files/radarr.in
+1-0net-p2p/radarr/Makefile
+5-12 files

HardenedBSD/ports 3b77347net-p2p/sonarr Makefile, net-p2p/sonarr/files sonarr.in

net-p2p/sonarr: Fix rc script for 15 after SSL version bump

By default Sonarr (Mono?) is looking for libssl.so.3.

This was worked around in the 14.X series by setting an environment
override in the shipped init script to tell the executable to instead
look for libssl.so.30

Update the override for FreeBSD >= 15.0-RELEASE so that it now looks for
libssl.so.35 without removing the workaround for FreeBSD 14.X.

Without this patch Sonarr exits code 6 and is restarted continuously.

PR:             291736
Tested by:      edgeman at gmail.com
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer)
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2025Q4
DeltaFile
+4-1net-p2p/sonarr/files/sonarr.in
+1-0net-p2p/sonarr/Makefile
+5-12 files

HardenedBSD/src ecb58f9contrib/kyua/cli cmd_debug.cpp

kyua: Fix prompt of "debug -p" command
DeltaFile
+2-2contrib/kyua/cli/cmd_debug.cpp
+2-21 files

HardenedBSD/src 98c3d86sbin/fsck_msdosfs dir.c

fsck_msdosfs: avoid warnings about too-long initializer strings

Mark `dot_name` and `dotdot_name` as as `__non_string`, to avoid
warnings from clang 21 similar to:

    sbin/fsck_msdosfs/dir.c:466:39: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
      466 | static const u_char dot_name[11]    = ".          ";
          |                                       ^~~~~~~~~~~~~
    sbin/fsck_msdosfs/dir.c:467:39: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
      467 | static const u_char dotdot_name[11] = "..         ";
          |                                       ^~~~~~~~~~~~~

MFC after:      3 days
DeltaFile
+2-2sbin/fsck_msdosfs/dir.c
+2-21 files

HardenedBSD/ports 9674788net-p2p/xmrig distinfo Makefile

net-p2p/xmrig: Update to 6.25.0
DeltaFile
+3-3net-p2p/xmrig/distinfo
+1-1net-p2p/xmrig/Makefile
+4-42 files

HardenedBSD/ports 2f8be65emulators/vice pkg-plist, emulators/vice/files patch-doc_vice.texi patch-src_arch_gtk3_joystickdrv_joystick_bsd.c

emulators/vice: update to 3.10
DeltaFile
+87-89emulators/vice/pkg-plist
+0-37emulators/vice/files/patch-doc_vice.texi
+33-0emulators/vice/files/patch-src_arch_gtk3_joystickdrv_joystick_bsd.c
+0-16emulators/vice/files/patch-src_pet_pet-stubs.c
+0-15emulators/vice/files/patch-src_c64dtv_c64dtv-stubs.c
+0-15emulators/vice/files/patch-src_c64dtv_c64dtviec.c
+120-1724 files not shown
+130-20610 files

HardenedBSD/src 9629944lib/libcuse cuse_lib.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+1-1lib/libcuse/cuse_lib.c
+1-11 files

HardenedBSD/src 3288a8elib/libcuse cuse_lib.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1-1lib/libcuse/cuse_lib.c
+1-11 files

HardenedBSD/ports c61894fastro/libosmpbf/files patch-osmpbf_CMakeLists.txt, audio/adplay/files patch-acinclude.m4

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-20audio/adplay/files/patch-acinclude.m4
+9-9lang/rust-nightly/distinfo
+18-0devel/cppcheck/files/patch-test_signal_CMakeLists.txt
+0-18astro/libosmpbf/files/patch-osmpbf_CMakeLists.txt
+7-7textproc/dyff/distinfo
+11-0devel/cppcheck/files/patch-test_CMakeLists.txt
+45-5412 files not shown
+79-8018 files

HardenedBSD/src 5629b5clib/libcuse cuse_lib.c

cuse(3): annotate cuse_init() to suppress thread safety analysis

This avoids warnings from clang 21, similar to:

    /usr/src/lib/libcuse/cuse_lib.c:111:14: error: writing variable 'h_cuse' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis]
      111 |         TAILQ_INIT(&h_cuse);
          |                     ^
    /usr/src/lib/libcuse/cuse_lib.c:111:14: error: writing variable 'h_cuse' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis]
    /usr/src/lib/libcuse/cuse_lib.c:112:14: error: writing variable 'h_cuse_entered' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis]
      112 |         TAILQ_INIT(&h_cuse_entered);
          |                     ^
    /usr/src/lib/libcuse/cuse_lib.c:112:14: error: writing variable 'h_cuse_entered' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis]

MFC after:      3 days
DeltaFile
+1-1lib/libcuse/cuse_lib.c
+1-11 files

HardenedBSD/ports 214709daudio/sidplayfp distinfo Makefile

audio/sidplayfp: Update to 2.16.0
DeltaFile
+3-3audio/sidplayfp/distinfo
+1-1audio/sidplayfp/Makefile
+4-42 files

HardenedBSD/ports a956910textproc/dyff distinfo Makefile

textproc/dyff: Update to 1.10.3
DeltaFile
+7-7textproc/dyff/distinfo
+1-2textproc/dyff/Makefile
+8-92 files

HardenedBSD/ports dae7069audio/adplay distinfo Makefile, audio/adplay/files patch-acinclude.m4

audio/adplay: Update to 1.9
DeltaFile
+0-20audio/adplay/files/patch-acinclude.m4
+3-3audio/adplay/distinfo
+2-3audio/adplay/Makefile
+5-263 files

HardenedBSD/ports bf54dd5databases/couchdb3 pkg-plist, deskutils/treesheets/files patch-CMakeLists.txt

Merge remote-tracking branch 'internal/freebsd/main' into hardenedbsd/main
DeltaFile
+0-1,139multimedia/vlc/files/vlc-3.0.21-fedora_ffmpeg7-1.patch
+508-506databases/couchdb3/pkg-plist
+0-393multimedia/vlc/files/vlc-3.0.21-ffmpeg8-1.patch
+324-0multimedia/vlc/files/vlc-3.0.22-ffmpeg8.patch
+0-159multimedia/vlc/files/patch-modules_meta__engine_taglib.cpp
+23-19deskutils/treesheets/files/patch-CMakeLists.txt
+855-2,21625 files not shown
+958-2,30831 files

HardenedBSD/ports a6d44a7multimedia/ffmpeg Makefile

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-90multimedia/ffmpeg/Makefile
+0-901 files

HardenedBSD/ports f0d0139devel/cppcheck distinfo Makefile, devel/cppcheck/files patch-test_signal_CMakeLists.txt patch-cli_CMakeLists.txt

devel/cppcheck: update 2.18.3 → 2.19.0
DeltaFile
+18-0devel/cppcheck/files/patch-test_signal_CMakeLists.txt
+11-0devel/cppcheck/files/patch-cli_CMakeLists.txt
+11-0devel/cppcheck/files/patch-test_CMakeLists.txt
+3-3devel/cppcheck/distinfo
+2-2devel/cppcheck/files/patch-CMakeLists.txt
+2-2devel/cppcheck/Makefile
+47-76 files

HardenedBSD/ports f99de0dlang/rust-nightly distinfo Makefile

lang/rust-nightly: update 1.94.0.20251207 → 1.94.0.20251222

Approved by:    rust (implicit)
DeltaFile
+9-9lang/rust-nightly/distinfo
+2-2lang/rust-nightly/Makefile
+11-112 files

HardenedBSD/ports 0e549b7astro/libosmpbf distinfo Makefile, astro/libosmpbf/files patch-osmpbf_CMakeLists.txt

astro/libosmpbf: update 1.5.1 → 1.6.1

- Do not override C++ standard - this port no longer has consumers
  which may require this.
DeltaFile
+0-18astro/libosmpbf/files/patch-osmpbf_CMakeLists.txt
+3-3astro/libosmpbf/distinfo
+1-2astro/libosmpbf/Makefile
+4-233 files

HardenedBSD/ports 3315f7ddevel/py-ty distinfo Makefile.crates

devel/py-ty: Update to 0.0.7

Changelog: https://github.com/astral-sh/ty/blob/0.0.7/CHANGELOG.md

Reported by:    Repology
DeltaFile
+5-5devel/py-ty/distinfo
+2-2devel/py-ty/Makefile.crates
+1-1devel/py-ty/Makefile
+8-83 files

HardenedBSD/ports 631fb95security/vuxml/vuln 2025.xml

security/vuxml: Document use-after-free in fluidsynth
DeltaFile
+33-0security/vuxml/vuln/2025.xml
+33-01 files