HardenedBSD/src f90bb4bcrypto/openssh ssh_config

HBSD: ssh client: Disable compression by default

With commit b7961aade549f05f62d65b0906db495b9423c940, HardenedBSD
hardened the server-side sshd configuration.

This commit follows the same suit by hardening at least some of the same
variables on the client's side.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
MFC-to:         15-STABLE
DeltaFile
+4-0crypto/openssh/ssh_config
+4-01 files

HardenedBSD/src 0ab1421contrib/tzcode tz-link.html localtime.c, contrib/xz ChangeLog

Merge remote-tracking branch 'rad/freebsd/current/main' into hardened/current/master
DeltaFile
+1,488-0contrib/xz/ChangeLog
+167-232contrib/tzcode/localtime.c
+172-92contrib/xz/src/liblzma/common/index.c
+219-0sys/dev/intel/intel_pmc.c
+76-82contrib/xz/src/xz/xz.1
+60-58contrib/tzcode/tz-link.html
+2,182-464112 files not shown
+3,384-1,160118 files

HardenedBSD/src 213876bsys/dev/sound/pci emu10kx-pcm.c

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+19-2sys/dev/sound/pci/emu10kx-pcm.c
+19-21 files

HardenedBSD/src be9f931sys/dev/sound/pci emu10kx-pcm.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+19-2sys/dev/sound/pci/emu10kx-pcm.c
+19-21 files

HardenedBSD/src cbd730esys/dev/sound/pci emu10kx-pcm.c

snd_emu10kx: Make sure the block count and size cover the whole buffer

The playback voices always loop over the whole EMU_PLAY_BUFSZ buffer,
but emupchan_setblocksize() only recorded the new block size and left
the block count as it was set up by emu_vinit(). The blocks then no
longer covered the whole buffer, and the part they left out was played
without ever being written to, which became audible as distortion once
playback started going through a virtual channel.

Resize the buffer, so that the block count and size always cover it.

Fixes:          02d4eeabfd73 ("sound: Allocate vchans on-demand")
PR:             287687
MFC after:      1 week
Sponsored by:   The FreeBSD Foundation
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D59444

(cherry picked from commit a7258157e1a20957af23332814197ea723f5778d)
DeltaFile
+19-2sys/dev/sound/pci/emu10kx-pcm.c
+19-21 files

HardenedBSD/src 9315ab3sys/dev/video video.c

video(4): wake the kqueue knote when a buffer completes

selwakeup() only wakes select/poll waiters; it does not notify the kqueue
knote registered on the device, so EVFILT_READ never fired when a frame
became available.
DeltaFile
+2-0sys/dev/video/video.c
+2-01 files

HardenedBSD/src bae0845sys/dev/video video.c

video(4): add missing V4L2_CAP_EXT_PIX_FORMAT feature

this fixes, 2 failed v4l2-compliances tests
DeltaFile
+3-2sys/dev/video/video.c
+3-21 files

HardenedBSD/src fe893d3lib/msun/amd64 Makefile.inc s_fmaf_avx.S, lib/msun/src s_fma.c s_fmaf.c

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+240-25lib/msun/src/s_fmaf.c
+27-1lib/msun/tests/fma_test.c
+24-0lib/msun/amd64/s_fmaf_avx.S
+24-0lib/msun/amd64/s_fma_avx.S
+10-1lib/msun/src/s_fma.c
+8-1lib/msun/amd64/Makefile.inc
+333-285 files not shown
+343-3611 files

HardenedBSD/src 8339458lib/msun/amd64 Makefile.inc s_fma_avx.S, lib/msun/src s_fma.c s_fmaf.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+240-25lib/msun/src/s_fmaf.c
+27-1lib/msun/tests/fma_test.c
+24-0lib/msun/amd64/s_fma_avx.S
+24-0lib/msun/amd64/s_fmaf_avx.S
+10-1lib/msun/src/s_fma.c
+8-1lib/msun/amd64/Makefile.inc
+333-285 files not shown
+343-3611 files

HardenedBSD/src 9f8836fsys/kern kern_sysctl.c

sys/kern: Fix a typo in a source code comment

- s/untill/until/

(cherry picked from commit 8255ae9a750f6de312f9b445c25b1c8caf3d95b7)
DeltaFile
+1-1sys/kern/kern_sysctl.c
+1-11 files

HardenedBSD/src 2150c4cinclude/arpa telnet.h

arpa/telnet: Fix a typo in a source code comment

- s/ascic/ASCII/

(cherry picked from commit 16246209d25ac437494ebe92b9819a65f1336594)
DeltaFile
+1-1include/arpa/telnet.h
+1-11 files

HardenedBSD/src 7a03960share/man/man4 asmc.4

asmc.4: clean up/modernize manpage

- sysutils/ataidle is no more: it was superseded by camcontrol(8).
- Sort the models table alphabetically.
- Use the SPDX License ID instead of the longhand licensing tort in the
  manpage header.
- Note that the driver has been heavily modified in 15.1 and later to
  support additional platforms and functionality.
- Trim down SYNOPSIS.

MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D59470
DeltaFile
+46-70share/man/man4/asmc.4
+46-701 files

HardenedBSD/src 8f478e4share/man/man4 Makefile apple_bce.4

apple_bce.4: add a basic manpage describing the driver

This new manpage describes what the apple_bce driver services, how the
driver is configured, and what Apple models the driver claims to
support.

Reviewed by:    seuros
Differential Revision:  https://reviews.freebsd.org/D59467
DeltaFile
+53-0share/man/man4/apple_bce.4
+5-0share/man/man4/Makefile
+58-02 files

HardenedBSD/src 7ffc4eccontrib/xz ChangeLog, contrib/xz/src/common my_landlock.h

MFV: xz 5.8.4.

MFC after:      3 days
DeltaFile
+1,488-0contrib/xz/ChangeLog
+172-92contrib/xz/src/liblzma/common/index.c
+76-82contrib/xz/src/xz/xz.1
+49-10contrib/xz/src/liblzma/common/index_decoder.c
+29-12contrib/xz/src/common/my_landlock.h
+20-16contrib/xz/src/liblzma/check/crc32_arm64.h
+1,834-21224 files not shown
+2,016-28730 files

HardenedBSD/src 4564e1flib/msun/src s_fmaf.c

lib/msun: use the same algorithm for sw fmaf(3) as for fma(3)

PR:     298260

(cherry picked from commit b08e6a3882b44a09fbda84dd315a431c7a585219)
DeltaFile
+230-24lib/msun/src/s_fmaf.c
+230-241 files

HardenedBSD/src cf46693lib/msun/amd64 Makefile.inc s_fma_avx.S, lib/msun/src s_fmaf.c s_fma.c

lib/msun amd64: use AVX FMA instructions for fma(3) and fmaf(3) when available

(cherry picked from commit 18a5549bcb81ec084f284a98046631db277ad47c)
DeltaFile
+24-0lib/msun/amd64/s_fma_avx.S
+24-0lib/msun/amd64/s_fmaf_avx.S
+10-1lib/msun/src/s_fmaf.c
+10-1lib/msun/src/s_fma.c
+8-1lib/msun/amd64/Makefile.inc
+76-35 files

HardenedBSD/src 3825e6blib/msun/tests fma_test.c

lib/msun: add tests for fmaf(3) subnormals

PR:     298260

(cherry picked from commit cb82cc9f0e3bdf2b39734851c74b9a13edb0cbdc)
DeltaFile
+27-1lib/msun/tests/fma_test.c
+27-11 files

HardenedBSD/src d6c9a08sys/dev/mlx5/mlx5_ib mlx5_ib_qp.c

mlx5ib: use the hardware Toeplitz id when creating an RSS TIR

(cherry picked from commit 36256f77c7de2bbfdff6922648f4d445d7212dc2)
DeltaFile
+2-1sys/dev/mlx5/mlx5_ib/mlx5_ib_qp.c
+2-11 files

HardenedBSD/src 2c02bfblib/msun Makefile

lib/msun: move the calculation of LIBC_SRCTOP earlier

(cherry picked from commit b45fd24a3ca666fbb1c754d9de94a9b33fa7949e)
DeltaFile
+5-4lib/msun/Makefile
+5-41 files

HardenedBSD/src 77535f9sys/fs/nfs nfs_commonkrpc.c, sys/rpc svc.h clnt_rc.c

nfscl: Yet more fixes for the NFS over RDMA client glue

Yet again.  I was trying to make the svc_vc_backchannel()
operations do double duty and be used by the clnt_rdma.c code
as well.  It got too messy, so this reverts svc_vc.c back to
its pre-glue form and adds the small changes needed to support
a separate set of svc_rdma_backchannel_xxx() functions.

This commit should not affect non-RDMA behaviour.

MFC after:      3 months
Fixes:  884ee8d6c9b4 ("nfscl: Add some glue for client side NFS over RDMA")
DeltaFile
+12-7sys/fs/nfs/nfs_commonkrpc.c
+2-10sys/rpc/svc_vc.c
+2-3sys/rpc/krpc.h
+1-1sys/rpc/clnt_rc.c
+1-0sys/rpc/svc.h
+18-215 files

HardenedBSD/src 9a46a14sys/dev/acpica acpi_cpu.c

acpi_cpu: only report unmapped processor objects enabled in the MADT

Firmware expose a DSDT sized for the largest SKU of the platform,
so a verbose boot prints an "ignored" line for every vacant
processor slot. A vacant slot has no enabled MADT entry; a CPU that
failed to come online does.

Reviewed by:    olce, adrian
Differential Revision:  https://reviews.freebsd.org/D59551
DeltaFile
+62-3sys/dev/acpica/acpi_cpu.c
+62-31 files

HardenedBSD/src dd9e49ashare/man/man4 Makefile intel_pmc.4, sys/conf files.x86

intel/intelpmc: Add Intel PMC Core driver

Add driver for Intel Power Management Controller (PMC) found on Sunrise Point PCH chipsets.
This device exposes S0ix sleep state residency counters and power management status.

Sysctls provided:
  dev.intelpmc.0.slp_s0_residency_us - Time in deepest sleep (us)
  dev.intelpmc.0.ltr_ignore          - LTR ignore mask
  dev.intelpmc.0.pm_cfg              - PM configuration register
  dev.intelpmc.0.pm_sts              - PM status register
  dev.intelpmc.0.access_denied       - Firmware lock status

Supported devices for now:
  - Sunrise Point-LP (0x9D21)
  - Sunrise Point-H (0xA121)

Note: Later PCH generations (Cannon Lake, Tiger Lake, ect.) have different PMC register layouts according to the datasheet and would need per-generation tables.
I avoided adding untested hardware in case they have a quirk.


    [2 lines not shown]
DeltaFile
+219-0sys/dev/intel/intel_pmc.c
+83-0share/man/man4/intel_pmc.4
+6-0sys/modules/intel_pmc/Makefile
+2-0sys/modules/Makefile
+1-0sys/conf/files.x86
+1-0share/man/man4/Makefile
+312-06 files

HardenedBSD/src 416611fsys/cam/nvme nvme_da.c, sys/dev/nvme nvme_ns.c

nvme: reject namespaces formatted with metadata

The active LBA format's MS field was never examined. I/O to a
metadata-formatted namespace carries neither interleaved metadata
nor MPTR, so every command is malformed, yet the namespace attaches
as a disk with the wrong sector size.

Reviewed by:    imp, adrian
Differential Revision:  https://reviews.freebsd.org/D59625
DeltaFile
+9-0sys/dev/nvme/nvme_ns.c
+9-0sys/cam/nvme/nvme_da.c
+18-02 files

HardenedBSD/src a22eb75sys/dev/tpm tpm_tis_core.c

tpm_tis: Quiesce interrupts before registering a handler

The current interrupt path uses the IRQ resource value directly as the
LPC SIRQ selector in TPM_INT_VECTOR and already restricts it to 1 through
15. This is a driver limitation: a parent interrupt number need not equal
an LPC SIRQ channel, and SPI TPMs can use a separate parallel interrupt.

On the reported system with ACPI IRQ 45, the existing range check runs
after handler registration and returns before disabling firmware interrupt
delivery. This can leave a polling device with a handler on an asserted
source.

Disable and verify interrupt delivery before registering a handler or
starting common TPM services. Preserve the existing range policy, using
polling without registering a handler for routes rejected by that check,
and release their IRQ resources. Keep a failed setup's potentially stale
output cookie out of the device state; the interrupt framework may
already have removed that handler.


    [19 lines not shown]
DeltaFile
+90-23sys/dev/tpm/tpm_tis_core.c
+90-231 files

HardenedBSD/src 9b26803. ChangeLog, src/common my_landlock.h

Vendor import of xz 5.8.4 (trimmed)
DeltaFile
+1,488-0ChangeLog
+172-92src/liblzma/common/index.c
+76-82src/xz/xz.1
+49-10src/liblzma/common/index_decoder.c
+29-12src/common/my_landlock.h
+20-16src/liblzma/check/crc32_arm64.h
+1,834-21223 files not shown
+2,013-28429 files

HardenedBSD/src a6b40d7sys/compat/linuxkpi/common/include/linux scatterlist.h, sys/compat/linuxkpi/common/src linux_pci.c

LinuxKPI: Add dma_length field to struct scatterlist

On Linux `dma_length` field of `struct scatterlist` is present on the
arches where DMA mapping code is able to coalesce adjacent segments
of physical address space. It contains total length of coalesced
segments while `length` field contains non-coalesced length of each
segment. On other arches `dma_length` is aliased to `length` field with
`sg_dma_len` macro. As FreeBSD does not merge scatterlist segments it
do not have `dma_length` field. It is appered that at least i915kms
driver depends on existence of `dma_length` field.

Add the field and disable it by default. To enable add to Makefile

.if ${MACHINE_CPUARCH} == "i386" || ${MACHINE_CPUARCH} == "amd64" || \\
    ${MACHINE_CPUARCH} == "aarch64" || ${MACHINE_CPUARCH} == "powerpc"
CFLAGS+=        -DCONFIG_NEED_SG_DMA_LENGTH
.endif

Reported by:    Ryan Fahy

    [4 lines not shown]
DeltaFile
+17-9sys/compat/linuxkpi/common/include/linux/scatterlist.h
+1-0sys/compat/linuxkpi/common/src/linux_pci.c
+18-92 files

HardenedBSD/src 6c7be54sys/kern kern_jail.c

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-5sys/kern/kern_jail.c
+0-51 files

HardenedBSD/src b8b5a08lib/msun/src s_fmaf.c, stand/efi/libefi efihttp.c

Merge remote-tracking branch 'rad/freebsd/current/main' into hardened/current/master

Conflicts:
        sys/kern/kern_jail.c (unresolved)
DeltaFile
+472-0sys/dev/hid/ps5dsense.c
+373-0tests/sys/fs/fdescfs/fdescfs_test.c
+347-5stand/efi/libefi/efihttp.c
+247-44sys/net/iflib.c
+230-24lib/msun/src/s_fmaf.c
+213-30stand/efi/loader/memdisk.c
+1,882-103215 files not shown
+5,655-1,102221 files

HardenedBSD/src f49dc19share/man/man4 tpm.4

tpm.4: Canonicalize SYNOPSIS and HARDWARE
DeltaFile
+13-19share/man/man4/tpm.4
+13-191 files

HardenedBSD/src dc867c3share/man/man4 tslog.4

tslog.4: Canonicalize SYNOPSIS

Also, add the missing blank comment line at the top of the file.

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+2-5share/man/man4/tslog.4
+2-51 files