HardenedBSD/src c0b56beshare/man/man3 unreachable.3, sys/kern init_main.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+0-90share/man/man3/unreachable.3
+47-11tools/tools/git/git-arc.sh
+18-15sys/net/route.c
+0-13sys/net/if.c
+4-4sys/kern/init_main.c
+4-4sys/security/mac_test/mac_test.c
+73-13725 files not shown
+101-19131 files

HardenedBSD/src fc88be2include stddef.h, share/man/man3 unreachable.3 assert.3

Revert "stddef.h: add unreachable() for C23 compliance"

Seems like a number of ports are *really* unhappy with this new
macro.  These ports will have to be fixed and the patch reworked
to perhaps not affect C++ (see D54041).  A general discussion on
how we expose new language features may also need to take place.

Reported by:    many people
Approved by:    markj (mentor)

This reverts commit b381d0980221b476cadbef862a8e5973d675fb7a.
DeltaFile
+0-90share/man/man3/unreachable.3
+2-3share/man/man3/assert.3
+0-4include/stddef.h
+1-2share/man/man3/Makefile
+3-994 files

HardenedBSD/src 8102307share/misc organization.dot

misc: retire tcberner from portmgr

Hat:    portmgr
DeltaFile
+1-1share/misc/organization.dot
+1-11 files

HardenedBSD/src 61ffc1bsys/security/mac mac_policy.h mac_cred.c, sys/security/mac_biba mac_biba.c

MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0

Reported by:    markj
Reviewed by:    olce
Differential Revision:  https://reviews.freebsd.org/D54052
DeltaFile
+4-4sys/security/mac_test/mac_test.c
+2-2sys/security/mac/mac_policy.h
+2-2sys/security/mac_biba/mac_biba.c
+2-2sys/security/mac_lomac/mac_lomac.c
+2-2sys/security/mac/mac_cred.c
+2-2sys/security/mac_mls/mac_mls.c
+14-144 files not shown
+20-2010 files

HardenedBSD/src f6910b0sys/arm/arm pmap-v6.c, sys/i386/i386 pmap.c

sys: Remove/update references to the swapper process in various comments

Reviewed by:    olce, markj
Differential Revision:  https://reviews.freebsd.org/D54051
DeltaFile
+1-4sys/sys/sleepqueue.h
+1-1sys/i386/i386/pmap.c
+1-1sys/arm/arm/pmap-v6.c
+1-1sys/sys/proc.h
+1-1sys/vm/vnode_pager.c
+5-85 files

HardenedBSD/src 431b3b2sys/kern init_main.c

thread0: Stop calling thread0 "swapper"

Just leave it as "kernel".  While here, replace "parked" with "-" (the
typical wait channel for idle threads).

Reviewed by:    olce, kib, markj
Differential Revision:  https://reviews.freebsd.org/D54039
DeltaFile
+3-3sys/kern/init_main.c
+3-31 files

HardenedBSD/src 9793960tools/tools/git git-arc.sh

git-arc: Add patch -b option

With the new patch -b option, switch to a new branch before applying
changes from Differential revisions.

While here, do some minor clean-up:
- Fix a check to determine whether `arc patch` ran successfully.
- Always ensure at least one argument is supplied to `git arc patch`.

Sponsored by:   The FreeBSD Foundation

Reviewed by:    imp, markj
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D54024
DeltaFile
+47-11tools/tools/git/git-arc.sh
+47-111 files

HardenedBSD/src fd131b4sys/net route.c if.c, sys/netinet6 in6.c in6_var.h

net: remove dom_ifmtu

It is a remnant of a network stack design that was supposed to support
multiple network protocols.  Today it is clear that we are left with IPv4
and IPv6 only.  Only IPv6 may have an MTU different to the interface MTU.
DeltaFile
+18-15sys/net/route.c
+0-13sys/net/if.c
+2-5sys/netinet6/in6.c
+1-1sys/netinet6/in6_var.h
+0-2sys/sys/domain.h
+0-1sys/netinet6/in6_proto.c
+21-371 files not shown
+21-387 files

HardenedBSD/src c7f05efsys/net/route route_tables.c, sys/netinet in_rmx.c

net: routing table attach never fails
DeltaFile
+1-5sys/net/route/route_tables.c
+0-3sys/netinet/in_rmx.c
+0-3sys/netinet6/in6_rmx.c
+1-113 files

HardenedBSD/src 96185fflib/libpmc/pmu-events/arch/x86/emeraldrapids uncore-cache.json uncore-interconnect.json

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+6,248-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-cache.json
+6,199-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-interconnect.json
+3,617-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-io.json
+3,308-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-memory.json
+962-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/pipeline.json
+888-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/cache.json
+21,222-033 files not shown
+25,224-12839 files

HardenedBSD/src 27ff90ctests/sys/netinet carp.sh

tests/carp: make a 0.2 second pause before configuring second jail

for all scenarios where both jails have same priority/advskew.  There is a
tiny chance that on both sides carp_master_down() will be executed in
parallel and advertisements will also fly through the bridge(4) in
parallel, thus both sides will switch to MASTER before receiving the
announcement from peer.  This makes the test to fail.  So far this
flakyness was observed for carp:vrrp_v4 only, but in theory it is possible
for any of the patched scenarios.

Note that this sleep does not prolong execution of the tests, as the first
jail is already configured, and if we slept before configuring the second,
we would sleep less in wait_for_carp().
DeltaFile
+7-0tests/sys/netinet/carp.sh
+7-01 files

HardenedBSD/src e353cbftests/sys/netinet carp.sh

tests/carp: make sleep interval in the wait loop smaller

Makes tests to finish slightly faster.
DeltaFile
+1-1tests/sys/netinet/carp.sh
+1-11 files

HardenedBSD/src 2ace05b. ObsoleteFiles.inc, share/man/man9 pfind.9 Makefile

pfind(9): follow-up fixes and improvements

(Found on a branch from a year ago.)

- Adjust NAMEs
- MLINKS: add pfind_any.9, pfind_any_locked.9; remove old zpfind.9
- Reword the description of pfind_any() so that it doesn't imply only
  zombie processes are returned
- Fix a comma
- Use .Dv for the macro PRS_ZOMBIE
- Move the (logically separate) final statement to a new paragraph
- .Xr to pget(9)

Reviewed by:    0mp
Fixes:  07d78399eb79 ("pfind(9): Update to recent behavior")
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D53548
DeltaFile
+17-17share/man/man9/pfind.9
+3-0ObsoleteFiles.inc
+2-1share/man/man9/Makefile
+22-183 files

HardenedBSD/src ca3e47blib/libpmc/pmu-events/arch/x86/alderlaken adln-metrics.json pipeline.json

pmc: add alderlaken model

This commit adds alderlaken CPU model to hwpmc/libpmc. JSON event
definitions are imported from Intel perfmon version 1.16.

Reviewed by:    mhorne
MFC after:      1 week
Sponsored by:   Stormshield
Differential Revision:  https://reviews.freebsd.org/D49229
DeltaFile
+583-0lib/libpmc/pmu-events/arch/x86/alderlaken/adln-metrics.json
+533-0lib/libpmc/pmu-events/arch/x86/alderlaken/pipeline.json
+330-0lib/libpmc/pmu-events/arch/x86/alderlaken/cache.json
+175-0lib/libpmc/pmu-events/arch/x86/alderlaken/uncore-memory.json
+81-0lib/libpmc/pmu-events/arch/x86/alderlaken/memory.json
+47-0lib/libpmc/pmu-events/arch/x86/alderlaken/virtual-memory.json
+1,749-07 files not shown
+1,870-013 files

HardenedBSD/src 51a01f3lib/libpmc/pmu-events/arch/x86/emeraldrapids uncore-cache.json uncore-interconnect.json

pmc: add emerald rapids model

This commit adds emerald rapids CPU model to hwpmc/libpmc. JSON event
definitions are imported from Intel perfmon version 1.06.

Reviewed by:    mhorne
MFC after:      1 week
Sponsored by:   Stormshield
Differential Revision:  https://reviews.freebsd.org/D49228
DeltaFile
+6,248-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-cache.json
+6,199-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-interconnect.json
+3,617-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-io.json
+3,308-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-memory.json
+962-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/pipeline.json
+888-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/cache.json
+21,222-010 files not shown
+23,302-016 files

HardenedBSD/src 057dae3sys/dev/hwpmc hwpmc_intel.c

pmc: add alderlake model

The commit 601925180df4 added the models 6-B7, 6-BA, 6-BF to libpmc, but
they must also be added to the hwpmc module to allow pmc to work on
those CPUs.

Reviewed by:    mhorne
MFC after:      1 week
Fixes:          601925180df4 ("libpmc: add more alderlake models")
Sponsored by:   Stormshield
Differential Revision:  https://reviews.freebsd.org/D49255
DeltaFile
+3-0sys/dev/hwpmc/hwpmc_intel.c
+3-01 files

HardenedBSD/src 575efcfsys/kern kern_sendfile.c, sys/sys socket.h

sendfile: remove SF_SYNC in FreeBSD 16.0

See d17cbe46983c for details.

PR:     287348
DeltaFile
+0-88sys/kern/kern_sendfile.c
+1-1sys/sys/socket.h
+1-892 files

HardenedBSD/src 215c58asys/net pfvar.h, sys/netpfil/pf pf_ioctl.c

pf: make unhandled_af() inline

Otherwise you just can't include pfvar.h without compiling pf in.

Reviewed by:            kp
Differential Revision:  https://reviews.freebsd.org/D54064
DeltaFile
+5-1sys/net/pfvar.h
+0-6sys/netpfil/pf/pf_ioctl.c
+5-72 files

HardenedBSD/src 8740d7esys/sys uio.h

uio.h: Indent struct uio according to style(9)

Approved by:    christos (mentor)
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D54071
DeltaFile
+7-7sys/sys/uio.h
+7-71 files

HardenedBSD/src 15afd75sbin/ipfw ipfw.8 ipv6.c, sbin/ping ping.8

ipsec: Fix typos in references to IPsec's ESP

ESP is "Encapsulating Security Payload",
not "Encapsulated Security Payload".

This patch fixes all the place in the tree I could find
with `grep -i encapsulated security`.

MFC after:      3 days
Reviewed by:    ae
Differential Revision:  https://reviews.freebsd.org/D53769
DeltaFile
+2-2sbin/ipfw/ipfw.8
+2-2sbin/ping/ping.8
+1-1sys/netipsec/esp.h
+1-1sbin/ipfw/ipv6.c
+6-64 files

HardenedBSD/src d49d183sys/dev/nvme nvme_ctrlr.c, usr.sbin/vidcontrol vidcontrol.1

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+5-1sys/dev/nvme/nvme_ctrlr.c
+1-4usr.sbin/vidcontrol/vidcontrol.1
+6-52 files

HardenedBSD/src a8b0208sys/dev/nvme nvme_ctrlr.c

nvme: Fix devd logging of SMART_ERROR

Remove extra arg so that we have type=SMART_ERROR rather than an invalid
message. Also log all aens.

Sponsored by:           Netflix
DeltaFile
+5-1sys/dev/nvme/nvme_ctrlr.c
+5-11 files

HardenedBSD/src 9ec8196usr.sbin/vidcontrol vidcontrol.1

vidcontrol.1: Video buffer dump is syscons only

Fixes:          1f4442f71fa3 (be explicit that -p and -P are sc(4) only)
MFC after:      3 days
Reviewed by:    ziaee
Differential Revision:  https://reviews.freebsd.org/D53878
DeltaFile
+1-4usr.sbin/vidcontrol/vidcontrol.1
+1-41 files

HardenedBSD/src 43080e4sys/compat/linuxkpi/common/include/linux ieee80211.h, sys/compat/linuxkpi/common/include/linux/soc/mediatek mtk_wed.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+138-32sys/compat/linuxkpi/common/include/linux/ieee80211.h
+65-36sys/netinet/tcp_syncache.c
+35-30sys/net/bpf.c
+8-31sys/contrib/dev/mediatek/mt76/util.h
+1-32sys/netinet/tcp_input.c
+27-1sys/compat/linuxkpi/common/include/linux/soc/mediatek/mtk_wed.h
+274-16221 files not shown
+365-18827 files

HardenedBSD/src 72ca894sys/net bpf.c

bpf: global bpf list doesn't need CK

All accesses to this list are done with the global lock held.  The
CK connotation is just confusing the reader.

Fixes:                  699281b545a8a3fc5109b5f2db62d261b65b588b
Reviewed by:            markj
Differential Revision:  https://reviews.freebsd.org/D53869
DeltaFile
+14-14sys/net/bpf.c
+14-141 files

HardenedBSD/src 8458966sys/net bpf.c

bpf: calculate net.bpf.stats buffer size dynamically

This removed the global counter, that was updated in a racy manner.

Reviewed by:            markj
Differential Revision:  https://reviews.freebsd.org/D53868
DeltaFile
+17-11sys/net/bpf.c
+17-111 files

HardenedBSD/src 57673d1sys/net bpf.c bpf.h

bpf: retire struct bpf_if_ext

The struct was used for bpf_if to bif_dlist masking, that is used to
optimize bpf_peers_present() call.  The only functional change here is
that bif_dlist and bif_next swap their places in the structure.  Both
belong to the first cache line anyway.

Reviewed by:            markj
Differential Revision:  https://reviews.freebsd.org/D53867
DeltaFile
+6-7sys/net/bpf.c
+4-9sys/net/bpf.h
+10-162 files

HardenedBSD/src ee18f8bsys/netinet tcp_input.c

tcp: don't set flowid in tcp_input()

With dd0e6bb996dc setting it always on connect(2) and syncache always
picking up the flowid from the incoming packet, any ESTABLISHED connection
shall have the flowid already set.

Reviewed by:            tuexen, gallatin
Differential Revision:  https://reviews.freebsd.org/D53886
DeltaFile
+0-31sys/netinet/tcp_input.c
+0-311 files

HardenedBSD/src 73fe85esys/netinet tcp_syncache.c tcp_syncache.h

tcp: store flowid info in syncache

Now retransmissions by syncache would use correct flowid, same as
synchronous responds.

Reviewed by:            tuexen, gallatin
Differential Revision:  https://reviews.freebsd.org/D51792
DeltaFile
+65-36sys/netinet/tcp_syncache.c
+4-4sys/netinet/tcp_syncache.h
+1-1sys/netinet/tcp_input.c
+70-413 files

HardenedBSD/src 1ba6fd3sys/dev/ichsmb ichsmb.c ichsmb_pci.c

ichsmb: shutdown interrupts to prevent spurious interrupts after  kexec

Obtained from:  Hewlett Packard Enterprise
Rebiewed by:    jhb, jhibbits
DeltaFile
+11-0sys/dev/ichsmb/ichsmb.c
+1-0sys/dev/ichsmb/ichsmb_pci.c
+1-0sys/dev/ichsmb/ichsmb_var.h
+13-03 files