HardenedBSD/src 042c220contrib/kyua/cli cmd_debug.cpp, contrib/kyua/engine scheduler.cpp scheduler.hpp

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+37-39sys/vm/vnode_pager.c
+15-5contrib/kyua/engine/scheduler.cpp
+5-1contrib/kyua/engine/scheduler.hpp
+5-1contrib/kyua/cli/cmd_debug.cpp
+1-0tools/build/Makefile
+63-465 files

HardenedBSD/src 1b6ff6econtrib/kyua/cli cmd_debug.cpp, contrib/kyua/engine scheduler.cpp scheduler.hpp

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+37-39sys/vm/vnode_pager.c
+15-5contrib/kyua/engine/scheduler.cpp
+5-1contrib/kyua/engine/scheduler.hpp
+5-1contrib/kyua/cli/cmd_debug.cpp
+1-0tools/build/Makefile
+63-465 files

HardenedBSD/src 086bedbtools/build Makefile

tools.build: also add sys/_visible.h to SYSINCS

This is needed since sys/cdefs.h includes sys/_visible.h.

Reported by:    kib
Fixes:          1c9ff80f0635
MFC after:      3 days
DeltaFile
+1-0tools/build/Makefile
+1-01 files

HardenedBSD/src 939ac0csys/vm vnode_pager.c

vnode_pager: clean up undirty_pages()

The first (second) loop of vnode_pager_undirty_pages() includes an
if-test to test whether an iteration is the last (first). Move those
if-tests out of their loops.  That allows the compiler to unroll the
loops.

Reviewed by:    alc, kib
Differential Revision:  https://reviews.freebsd.org/D54353
DeltaFile
+37-39sys/vm/vnode_pager.c
+37-391 files

HardenedBSD/src 350f319contrib/kyua/cli cmd_debug.cpp, contrib/kyua/engine scheduler.cpp scheduler.hpp

kyua: Make "debug -p" skip writing stdout/stderr to tmp files

Reviewed by:    kp, ngie
Differential Revision:  https://reviews.freebsd.org/D54363
DeltaFile
+15-5contrib/kyua/engine/scheduler.cpp
+5-1contrib/kyua/engine/scheduler.hpp
+5-1contrib/kyua/cli/cmd_debug.cpp
+25-73 files

HardenedBSD/src 98740fbsys/dev/acpica acpi.c acpi_apei.c, sys/modules/acpi Makefile

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+194-14usr.sbin/acpi/acpidump/acpi.c
+17-12usr.sbin/bhyve/bhyve_config.5
+16-13sys/dev/acpica/acpi.c
+19-3sys/modules/acpi/Makefile
+5-6sys/dev/acpica/acpi_apei.c
+6-2usr.sbin/pmcannotate/pmcannotate.c
+257-508 files not shown
+272-5914 files

HardenedBSD/src c23cc84share/man/man4 linprocfs.4, sys/dev/acpica acpi.c acpi_apei.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+194-14usr.sbin/acpi/acpidump/acpi.c
+16-13sys/dev/acpica/acpi.c
+17-12usr.sbin/bhyve/bhyve_config.5
+19-3sys/modules/acpi/Makefile
+5-6sys/dev/acpica/acpi_apei.c
+4-4share/man/man4/linprocfs.4
+255-527 files not shown
+271-5913 files

HardenedBSD/src 0d31189share/man/man4 linprocfs.4

linprocfs.4: Improve docs around pid/self entries

Mark <pid> as a placeholder and document that self is a symlink to a directory.

PR:             283080
Reviewed by:    ziaee
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D54358
DeltaFile
+4-4share/man/man4/linprocfs.4
+4-41 files

HardenedBSD/src ee47293usr.sbin/unbound/daemon Makefile

HBSD: Disable SafeStack for the Unbound daemon

When Unbound is built with SafeStack, attempts to kill the running
daemon process with SIGTERM does not kill the process. Instead, the
daemon stops responding.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
Reported-by:    @northboot
issue:          #110
MFC-to:         15-STABLE
DeltaFile
+1-0usr.sbin/unbound/daemon/Makefile
+1-01 files

HardenedBSD/src e1bfd54usr.sbin/bhyve bhyve_config.5 bhyve.8

bhyve: Document that MAC address has to be unicast

bhyve accepts any MAC address even foreign as long it is a unicast one.

Reviewed by:    ziaee
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D54372
DeltaFile
+8-4usr.sbin/bhyve/bhyve_config.5
+2-1usr.sbin/bhyve/bhyve.8
+10-52 files

HardenedBSD/src 02376betests/ci Makefile

tests/ci: Use :H:H rather than ../..

In general we want to strip subdir components, rather than appending
`..`s.

Reviewed by:    lwhsu
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D54352
DeltaFile
+1-1tests/ci/Makefile
+1-11 files

HardenedBSD/src bd8296bsys/modules Makefile, sys/modules/acpi Makefile

Build acpi kernel modules on aarch64

For now, the only kernel module built is acpi_ged.ko.

Sponsored by:   Netflix
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D54315
DeltaFile
+5-1sys/modules/acpi/Makefile
+1-1sys/modules/Makefile
+6-22 files

HardenedBSD/src fe74d52sys/modules/acpi Makefile

sys/modules/acpi/Makefile: One line per subdirectory

This makes diffs that add or remove modules easier to read.

Reviewed by:    imp
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D54314
DeltaFile
+15-3sys/modules/acpi/Makefile
+15-31 files

HardenedBSD/src 11757b1sys/dev/acpica acpi.c

acpi: Statically initialize acpi_ioctl_hooks

Reviewed by:    imp
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D54313
DeltaFile
+6-11sys/dev/acpica/acpi.c
+6-111 files

HardenedBSD/src 425b41fsys/dev/acpica acpi.c

acpi: Use M_WAITOK in acpi_register_ioctl

This function is only called from device attach routines which can
sleep.

Reviewed by:    imp
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D54312
DeltaFile
+1-2sys/dev/acpica/acpi.c
+1-21 files

HardenedBSD/src 4eb560fsys/dev/acpica acpi.c

acpi: Reject duplicate handlers for ioctl commands

Reviewed by:    imp
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D54311
DeltaFile
+9-1sys/dev/acpica/acpi.c
+9-11 files

HardenedBSD/src 88f8e3csys/dev/acpica acpi_apei.c

acpi_apei: Remove the hest member from the softc

This is only used during attach and freed after use, so just use a
local variable in the attach routine instead to avoid leaving a
dangling pointer around in the softc.

Reviewed by:    imp
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D54310
DeltaFile
+5-6sys/dev/acpica/acpi_apei.c
+5-61 files

HardenedBSD/src 5b39245sys/dev/acpica acpi.c

acpi: Free ivars in bus_child_deleted method

Reviewed by:    imp
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D54309
DeltaFile
+1-0sys/dev/acpica/acpi.c
+1-01 files

HardenedBSD/src 6b2e4dausr.sbin/acpi/acpidump acpi.c

acpidump: Extend the decoding of entries in the EINJ and ERST tables

- Decode the Action, Instruction, and Flags fields for these tables

- Omit the Flags field if it is zero

- Omit the Value field for instrunctions that do not use it

Reviewed by:    imp
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D54308
DeltaFile
+194-14usr.sbin/acpi/acpidump/acpi.c
+194-141 files

HardenedBSD/src 1c9ff80tools/build Makefile

tools.build: add sys/cdefs.h to SYSINCS, since lots of other headers use it

This is needed to let the legacy stage compile against newer versions of
sys/font.h, which transitively includes sys/cdefs.h, and requires the
new __nonstring macro from it.

Fixes:          e2c93ed09f25
MFC after:      3 days
DeltaFile
+4-0tools/build/Makefile
+4-01 files

HardenedBSD/src 6660446usr.sbin/bhyve bhyve_config.5

bhyve_config.5: Fix consistency and terms in manpage

Correct inconsistent spelling of terms and duplication.

Reviewed by:    ziaee
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D54370
DeltaFile
+9-8usr.sbin/bhyve/bhyve_config.5
+9-81 files

HardenedBSD/src e2c93edsys/sys font.h

sys/font.h: avoid warnings about too-long initializer strings

Mark `font_header::fh_magic` as `__non_string`, to avoid a warning from
clang 21 similar to:

    /usr/src/usr.bin/vtfontcvt/vtfontcvt.c:763:15: error: initializer-string for character array is too long, array size is 8 but initializer has size 9 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
      763 |                 .fh_magic = FONT_HEADER_MAGIC,
          |                             ^~~~~~~~~~~~~~~~~
    /usr/obj/usr/src/amd64.amd64/tmp/usr/include/sys/font.h:109:27: note: expanded from macro 'FONT_HEADER_MAGIC'
      109 | #define FONT_HEADER_MAGIC       "VFNT0002"
          |                                 ^~~~~~~~~~

MFC after:      3 days
DeltaFile
+1-1sys/sys/font.h
+1-11 files

HardenedBSD/src cd88001usr.sbin/pmcannotate pmcannotate.c

pmcannotate: avoid accessing uninitialized local variables

Initialize `tbfl` and `tofl` to NULL, and check whether they are
non-NULL before calling remove(3) on them, to avoid warnings from clang
21 similar to:

    usr.sbin/pmcannotate/pmcannotate.c:746:3: error: variable 'tbfl' is uninitialized when used here [-Werror,-Wuninitialized]
      746 |                 FATAL(exec, "%s: Impossible to locate the binary file\n",
          |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      747 |                     exec);
          |                     ~~~~~
    usr.sbin/pmcannotate/pmcannotate.c:57:9: note: expanded from macro 'FATAL'
       57 |         remove(tbfl);                                                   \
          |                ^~~~
    usr.sbin/pmcannotate/pmcannotate.c:695:12: note: initialize the variable 'tbfl' to silence this warning
      695 |         char *tbfl, *tofl, *tmpdir;
          |                   ^
          |                    = NULL
    usr.sbin/pmcannotate/pmcannotate.c:746:3: error: variable 'tofl' is uninitialized when used here [-Werror,-Wuninitialized]

    [13 lines not shown]
DeltaFile
+6-2usr.sbin/pmcannotate/pmcannotate.c
+6-21 files

HardenedBSD/src 3054e22usr.sbin/bsnmpd/tools/libbsnmptools bsnmptc.c

bsnmpd: avoid warnings about too-long initializer strings

Mark `UTC` as `__non_string`, to avoid a warning from clang 21 similar
to:

    usr.sbin/bsnmpd/tools/libbsnmptools/bsnmptc.c:339:29: error: initializer-string for character array is too long, array size is 3 but initializer has size 4 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
    --- all_subdir_usr.sbin ---
      339 |         static const char UTC[3] = "UTC";
          |                                    ^~~~~

MFC after:      3 days
DeltaFile
+1-1usr.sbin/bsnmpd/tools/libbsnmptools/bsnmptc.c
+1-11 files

HardenedBSD/src c66cb44sys/netpfil/pf pf.c, usr.sbin/bsnmpd/modules/snmp_pf pf_snmp.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+4-2sys/netpfil/pf/pf.c
+1-2usr.sbin/bsnmpd/modules/snmp_pf/pf_snmp.c
+5-42 files

HardenedBSD/src df2e9ecsys/netpfil/pf pf.c, usr.sbin/bsnmpd/modules/snmp_pf pf_snmp.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+4-2sys/netpfil/pf/pf.c
+1-2usr.sbin/bsnmpd/modules/snmp_pf/pf_snmp.c
+5-42 files

HardenedBSD/src b831a1asys/dev/bnxt/bnxt_re ib_verbs.c bnxt_re.h, sys/dev/qlnx/qlnxe qlnx_os.c

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+33-28usr.sbin/bhyve/bhyve.8
+14-10sys/dev/qlnx/qlnxe/qlnx_os.c
+4-4sys/security/mac_ipacl/mac_ipacl.c
+3-3sys/dev/bnxt/bnxt_re/ib_verbs.c
+3-1sys/netlink/route/iface.c
+2-2sys/dev/bnxt/bnxt_re/bnxt_re.h
+59-482 files not shown
+62-518 files

HardenedBSD/src 7703c66sys/fs/unionfs union_vnops.c union_vfsops.c, sys/kern vfs_default.c vnode_if.src

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+34-32usr.sbin/bhyve/bhyve.8
+45-0sys/fs/unionfs/union_vnops.c
+25-2sys/fs/unionfs/union_vfsops.c
+1-2sys/kern/vfs_default.c
+1-1sys/kern/vnode_if.src
+1-0sys/sys/vnode.h
+107-376 files

HardenedBSD/src eaa424eusr.sbin/bsnmpd/modules/snmp_pf pf_snmp.c

snmp_pf: remove errno usage after pfctl_get_status_h change

pfctl_get_status_h() does not set errno, so don't log it.

PR:             291936
Reviewed by:    kp
DeltaFile
+1-2usr.sbin/bsnmpd/modules/snmp_pf/pf_snmp.c
+1-21 files

HardenedBSD/src 3e5025eusr.sbin/bhyve bhyve.8

bhyve.8: Fix consistency and terms in manpage

Correct inconsistent spelling of terms and duplication.

Reviewed by:    ziaee
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D54332

(cherry picked from commit 5819f8b285fc55a75e5dea56ffe73b376525150c)
DeltaFile
+33-28usr.sbin/bhyve/bhyve.8
+33-281 files