HardenedBSD/src 2adad9bsys/dev/usb/controller xhci.c, usr.bin/sockstat sockstat.1 main.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+69-70usr.sbin/bhyve/pci_emul.c
+47-3usr.bin/sockstat/main.c
+18-5sys/dev/usb/controller/xhci.c
+15-2usr.bin/sockstat/sockstat.1
+6-7usr.sbin/bhyve/pci_passthru.c
+2-5usr.sbin/bhyve/pci_fbuf.c
+157-9212 files not shown
+181-10618 files

HardenedBSD/src c2c4d20sys/dev/usb/controller xhci.c, usr.bin/sockstat sockstat.1 main.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+69-70usr.sbin/bhyve/pci_emul.c
+47-3usr.bin/sockstat/main.c
+18-5sys/dev/usb/controller/xhci.c
+15-2usr.bin/sockstat/sockstat.1
+6-7usr.sbin/bhyve/pci_passthru.c
+2-5usr.sbin/bhyve/pci_fbuf.c
+157-9212 files not shown
+181-10618 files

HardenedBSD/src c54fbc9bin/chflags chflags.1

chflags.1: Change dontcache to nocache

Commit 290e563166b4 changed the flag's name from dontcache
to nocache. This patch fixes the man page.

This is a content change.

Reviewed by:    kib (earlier version)
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D58181
Fixes:  4830670a3f94 ("chflags.1: Document the new UF_DONTCACHE flag")
DeltaFile
+3-3bin/chflags/chflags.1
+3-31 files

HardenedBSD/src 290e563lib/libc/gen strtofflags.c, sys/fs/tmpfs tmpfs_subr.c

chflags: Add a new UF_NOCACHE flag

This internet draft (which is close to being an RFC)
specifies a new NFSv4.2 attribute which tells the NFSv4.2
client to not cache file data. (Similar to O_DIRECT, but
triggered by this attribute set on the file on the NFSv4.2
server and not by the application's open(2).)

https://datatracker.ietf.org/doc/draft-ietf-nfsv4-uncacheable-files/

This patch adds a new chflags(1) flag called UF_NOCACHE to
implement this.

Patches for NFS and ZFS will be done separately.

This is a redo of the patch, with a requested name change
and a #ifdef in strtofflags.c so that it doesn't break some
Linux cross build.  The name change was requested by fuz@.


    [3 lines not shown]
DeltaFile
+6-0lib/libc/gen/strtofflags.c
+1-1sys/ufs/ufs/ufs_vnops.c
+1-1sys/fs/tmpfs/tmpfs_subr.c
+1-0sys/sys/stat.h
+9-24 files

HardenedBSD/src 0f59df8sys/dev/usb/controller xhci.h xhci.c

xhci: Only reset the data toggle value when the USB stack asks for it

The previous patch assumes that we don't want to reset toggle bit in
STOPPED_STEP. However, a device can explicitly call
usbd_clear_data_toggle if necessary. As a result, instead of not
dropping the bit unconditionally, we added a field in xhci to specify
that we want to drop it, so that usbd_clear_data_toggle can handle it
correctly.

Reported by:    oh
Reviewed by:    kevans
Tested by:      oh
Fixes:          28d85db46b48 ("xhci: Do not drop and add bits in xhci")
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D59186
DeltaFile
+18-5sys/dev/usb/controller/xhci.c
+1-0sys/dev/usb/controller/xhci.h
+19-52 files

HardenedBSD/src 4a20c0asys/kern sched_ule.c

sched_ule: Fix spelling of csr_cpu in comment.

Commit 08063e9f98 renamed cs_cpu to csr_cpu.
DeltaFile
+1-1sys/kern/sched_ule.c
+1-11 files

HardenedBSD/src 0ffad4cusr.sbin/bhyve pci_passthru.c

bhyve: Tidy lobits handling in pci_passthru

- The lobits field in the "physical" BAR settings is never used, so
  don't bother setting it.

- Expand the comment explaining why the existing lobits are preserved
  (namely, to preserve the prefetch flag on memory BARs).

Reviewed by:    bnovkov
Differential Revision:  https://reviews.freebsd.org/D58894
DeltaFile
+4-3usr.sbin/bhyve/pci_passthru.c
+4-31 files

HardenedBSD/src b00bb87usr.sbin/bhyve pci_emul.c

bhyve: Refactor initial PCI BAR setup

Fully initialize BARs with an address of 0 in pci_emul_alloc_bar()
instead of deferring some of that initialization to
pci_emul_assign_bar().  Now, the latter is only used to allocate an
initial address range for PCI BARs.

Note that this means that the pci_passthru model now overrides the
initial lobits after they are set removing the need for a workaround
in pci_emul_assign_bar().

Reviewed by:    bnovkov
Differential Revision:  https://reviews.freebsd.org/D58893
DeltaFile
+63-53usr.sbin/bhyve/pci_emul.c
+63-531 files

HardenedBSD/src 3807c8busr.sbin/bhyve pci_emul.c

bhyve: Don't set the prefetch flag for large 64-bit memory BARs

The only device model that can create a large 64-bit memory BAR is the
passthru device model, and that device model reuses the lobits of the
existing BAR explicitly.

Fixes:          e87a6f3ef284 ("bhyve: use physical lobits for BARs of passthru devices")
DeltaFile
+1-2usr.sbin/bhyve/pci_emul.c
+1-21 files

HardenedBSD/src b29dc5ausr.sbin/bhyve pci_emul.h pci_nvme.c

bhyve: Return void from pci_emul_alloc_bar

This function never fails.

Reviewed by:    bnovkov, chuck, markj
Differential Revision:  https://reviews.freebsd.org/D58579
DeltaFile
+6-16usr.sbin/bhyve/pci_emul.c
+2-5usr.sbin/bhyve/pci_fbuf.c
+1-5usr.sbin/bhyve/pci_nvme.c
+2-4usr.sbin/bhyve/pci_passthru.c
+1-1usr.sbin/bhyve/pci_emul.h
+12-315 files

HardenedBSD/src 22293f8release/scripts make-manifest.sh

release: Use "debug info" for lib32 set description

This mirrors the changes applied to kernel debug symbol sets in commit
9a354a41be9a40c3c0a16cc20f4009d3b31679cc.

Reviewed by:    emaste
Sponsored by:   AFRL, DARPA
Differential Revision:  https://reviews.freebsd.org/D59058
DeltaFile
+1-1release/scripts/make-manifest.sh
+1-11 files

HardenedBSD/src 2096687sys/netinet tcp_subr.c tcp_var.h, usr.bin/sockstat sockstat.1 main.c

sockstat: provide more BBLog information

When using -b, provide in addition to the BBLog state also the number
of entries stored at the endpoint, the corresponding upper limit and
the next sequence number to be assigned.

Reviewed by:            rrs
MFC after:              1 week
MFC to:                 stable/15
MFC to:                 stable/14
Sponsored by:           Netflix, Inc.
Differential Revision:  https://reviews.freebsd.org/D59131
DeltaFile
+47-3usr.bin/sockstat/main.c
+15-2usr.bin/sockstat/sockstat.1
+4-1sys/netinet/tcp_var.h
+3-0sys/netinet/tcp_subr.c
+69-64 files

HardenedBSD/src ecc859a. UPDATING, sbin/pfctl pfctl.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+30-0tests/sys/netpfil/pf/anchor.sh
+17-7usr.bin/xinstall/tests/install_test.sh
+20-2sys/dev/sound/usb/uaudio.c
+15-0sys/dev/intel/spi_pci.c
+6-4sbin/pfctl/pfctl.c
+10-0UPDATING
+98-134 files not shown
+112-1810 files

HardenedBSD/src 612c67f. UPDATING, sbin/pfctl pfctl.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+30-0tests/sys/netpfil/pf/anchor.sh
+17-7usr.bin/xinstall/tests/install_test.sh
+20-2sys/dev/sound/usb/uaudio.c
+15-0sys/dev/intel/spi_pci.c
+6-4sbin/pfctl/pfctl.c
+10-0UPDATING
+98-134 files not shown
+112-1810 files

HardenedBSD/src a5ff412usr.bin/xinstall xinstall.c, usr.bin/xinstall/tests install_test.sh

install: Fix two bugs in stdin code

* Fix case where the source is - and the target exists.

* Only call chflags() (to remove flags that might prevent us from
  replacing an existing target) in the exists case; otherwise,
  to_sb.st_flags is uninitialized.

* Rename the source file in the stdin test case.

* Extend null and stdin test cases to cover the case where the
  target already exists.

PR:             297681
MFC after:      1 week
Fixes:          d34870708db9 ("install: Allow installing stdin")
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D59144
DeltaFile
+17-7usr.bin/xinstall/tests/install_test.sh
+3-3usr.bin/xinstall/xinstall.c
+20-102 files

HardenedBSD/src f22ffd6sys/dev/intel spi_pci.c

intelspi: add Nova Lake SPI controller IDs

Add PCI device IDs for Nova Lake-generation LPSS peripheral SPI
controllers.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D59013
DeltaFile
+6-0sys/dev/intel/spi_pci.c
+6-01 files

HardenedBSD/src 5937946sys/dev/intel spi_pci.c

intelspi: add Panther Lake SPI controller IDs

Add PCI device IDs for Panther Lake-generation LPSS peripheral SPI
controllers.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D59012
DeltaFile
+6-0sys/dev/intel/spi_pci.c
+6-01 files

HardenedBSD/src eeb02a9sys/dev/intel spi_pci.c

intelspi: add Wildcat Lake SPI controller IDs

Add PCI device IDs for Wildcat Lake-generation LPSS peripheral SPI
controllers.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D59011
DeltaFile
+3-0sys/dev/intel/spi_pci.c
+3-01 files

HardenedBSD/src 8bd30a7. UPDATING, usr.sbin/bhyve pci_nvme.c

bhyve: fix byte order for manually set NVMe eui64

Manually specified eui64 value gets converted to big endian twice:
first using htobe64() and then using be64enc(). On little-endian hosts
that results in a little-endian value instead of a big-endian.

Fix by removing htobe64() for a user submitted value.

Fixes:          409a80e5a434 ("bhyve: Create EUI64 for NVMe namespaces")
Reviewed by:    chuck
Relnotes:       yes
Sponsored by:   The FreeBSD Foundation
MFC after:      3 weeks
Differential Revision:  https://reviews.freebsd.org/D59080
DeltaFile
+10-0UPDATING
+1-1usr.sbin/bhyve/pci_nvme.c
+11-12 files

HardenedBSD/src 01482delib/libsysdecode netlink.c

libsysdecode: decode PFNL_CMD_GET_RULESETS and PFNL_CMD_GET_RULESET

Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+9-0lib/libsysdecode/netlink.c
+9-01 files

HardenedBSD/src 5de5140sbin/pfctl pfctl.c, tests/sys/netpfil/pf anchor.sh

pfctl: fix printing of wildcard anchors

PR:             297839
MFC after:      1 week
Obtained from:  OpenBSD, henning <henning at openbsd.org>, 5b6657d4d8
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+30-0tests/sys/netpfil/pf/anchor.sh
+6-4sbin/pfctl/pfctl.c
+36-42 files

HardenedBSD/src f01b594sys/dev/sound/usb uaudio.c

snd_uaudio: recognize hardware sidetone as a monitor

The Logitech H390, for instance, has the following interface layout:

~~
7 INPUT              34 INPUT            10 INPUT
  Mic (0x201)          Mic (0x201)         USB Stream (0x101)
   |                    |                     |
   v                    v                     |
 19 FEATURE           35 FEATURE              |
   |                    |                     |
   v                    v                     |
 25 EXTENSION           +------> 36 MIXER <---+
   |                              |
   v                              v
 13 OUTPUT                     22 FEATURE
 USB Stream (0x101)               |
                                  v
                               16 OUTPUT

    [29 lines not shown]
DeltaFile
+20-2sys/dev/sound/usb/uaudio.c
+20-21 files

HardenedBSD/src ea7c339sys/net route.c

routing: Use fib-aware ifa lookup in ifa_ifwithroute()

Use ifa_ifwithaddr_fib() to fix fib-specific ifa lookups with route.

Differential Revision: https://reviews.freebsd.org/D59128
DeltaFile
+1-1sys/net/route.c
+1-11 files

HardenedBSD/src eca9c21sys/arm64/iommu smmu.c, sys/arm64/vmm/io vgic.c vgic_internal.h

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+13-177sys/arm64/vmm/io/vgic_v3.c
+132-0sys/arm64/vmm/io/vgic_internal.h
+78-1sys/arm64/vmm/io/vgic.c
+1-1sys/arm64/iommu/smmu.c
+224-1794 files

HardenedBSD/src 893c2b9contrib/elftoolchain/libelftc libelftc_dem_gnu2.c, contrib/libucl/src ucl_util.c

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+13-6usr.bin/rpcgen/rpc_svcout.c
+7-7usr.bin/mkimg/mkimg.c
+6-4contrib/mandoc/read.c
+4-3contrib/libucl/src/ucl_util.c
+2-3contrib/elftoolchain/libelftc/libelftc_dem_gnu2.c
+4-1sys/amd64/vmm/x86.c
+36-2410 files not shown
+49-3616 files

HardenedBSD/src 80f4602sys/arm64/iommu smmu.c, sys/arm64/vmm/io vgic.c vgic_internal.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+13-177sys/arm64/vmm/io/vgic_v3.c
+132-0sys/arm64/vmm/io/vgic_internal.h
+78-1sys/arm64/vmm/io/vgic.c
+1-1sys/arm64/iommu/smmu.c
+224-1794 files

HardenedBSD/src 160f743contrib/elftoolchain/libelftc libelftc_dem_gnu2.c, contrib/libucl/src ucl_util.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+13-6usr.bin/rpcgen/rpc_svcout.c
+7-7usr.bin/mkimg/mkimg.c
+6-4contrib/mandoc/read.c
+4-3contrib/libucl/src/ucl_util.c
+2-3contrib/elftoolchain/libelftc/libelftc_dem_gnu2.c
+4-1sys/amd64/vmm/x86.c
+36-2410 files not shown
+49-3616 files

HardenedBSD/src 57775b3sys/arm64/iommu smmu.c

arm64/smmu: Fix undefined behaviour in Q_OVF

"1 << 31" is a signed int left shift 31 which is undefined as the shift
is too large. Use an unsigned int to make the value defined.

Sponsored by:   Arm Ltd
DeltaFile
+1-1sys/arm64/iommu/smmu.c
+1-11 files

HardenedBSD/src 1ecf7d5sys/arm64/vmm/io vgic_internal.h vgic.c

arm64: vmm: Split out VGIC register handling to a common file

Reviewed by:    Sarah Walker <sarah.walker2 at arm.com>
Sponsored by:   Arm Ltd
DeltaFile
+9-128sys/arm64/vmm/io/vgic_v3.c
+78-1sys/arm64/vmm/io/vgic.c
+49-0sys/arm64/vmm/io/vgic_internal.h
+136-1293 files

HardenedBSD/src 7823d30sys/arm64/vmm/io vgic_v3.c vgic_internal.h

arm64: vmm: Move vgic_v3 structures to header file

Move vgic_v3 structures in preparation for vgic interface rework for GICv5
support.

Reviewed by:    Sarah Walker <sarah.walker2 at arm.com>
Sponsored by:   Arm Ltd
DeltaFile
+83-0sys/arm64/vmm/io/vgic_internal.h
+4-49sys/arm64/vmm/io/vgic_v3.c
+87-492 files