HardenedBSD/src 5a33016lib/msun/aarch64 fenv.c, lib/msun/arm fenv.c fenv.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+110-33lib/msun/arm/fenv.c
+78-21lib/msun/powerpc/fenv.c
+77-19lib/msun/riscv/fenv.c
+64-18lib/msun/aarch64/fenv.c
+49-14lib/msun/arm/fenv.h
+43-13lib/msun/riscv/fenv.h
+421-1188 files not shown
+596-19514 files

HardenedBSD/src 5c36d1bsys/dev/sound/usb uaudio_pcm.c uaudio.c

snd_uaudio: Retire sndcard_func usage

This is effectively a no-op, as it does not make use of the
sndcard_func->varinfo field, so eventually ua_probe() always succeeds.

Also change ua_probe()'s value to 0. There is no need to return
BUS_PROBE_DEFAULT, because snd_uaudio() attaches the sound(4)'s children
with bus_attach_children().

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56160

(cherry picked from commit 0efd33382504d3172734fa21325fcabef9c7f063)
DeltaFile
+1-12sys/dev/sound/usb/uaudio_pcm.c
+0-5sys/dev/sound/usb/uaudio.c
+1-172 files

HardenedBSD/src 77e5da3lib/libc/gen posix_spawn.3

posix_spawn_file_action_addopen.3: ignoring close failure is now approved

(cherry picked from commit b7b485efac8c1b601b9c0ada39921bad0e342970)
DeltaFile
+4-2lib/libc/gen/posix_spawn.3
+4-21 files

HardenedBSD/src 35f585fsys/dev/mlx5/mlx5_en mlx5_en_main.c, sys/net iflib.c if.h

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+16-2sys/dev/mlx5/mlx5_en/mlx5_en_main.c
+9-0sys/net/iflib.c
+3-2sys/net/if.h
+4-1sys/net/iflib.h
+1-0sys/sys/sockio.h
+33-55 files

HardenedBSD/src 11950ecsys/dev/mlx5/mlx5_en mlx5_en_main.c, sys/net iflib.c iflib.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+16-2sys/dev/mlx5/mlx5_en/mlx5_en_main.c
+9-0sys/net/iflib.c
+4-1sys/net/iflib.h
+3-2sys/net/if.h
+1-0sys/sys/sockio.h
+33-55 files

HardenedBSD/src cf1f215sys/dev/mlx5/mlx5_en mlx5_en_main.c, sys/net iflib.c if.h

net: Add SIOCGI2CPB ioctl & add page/bank fields to ifi2creq

This commit adds page & bank fields to ifi2creq in preparation
for adding CMIS support for 400g optics to ifconfig.
The new ioctl SIOCGI2CPB is added, so that drivers can distinguish
between callers asking for page/bank selection and legacy callers
that simply failed to zero out all ifi2creq fields.

The mlx5en(4) driver and iflib(4) driver frameork have been updated
to use this new SIOCGI2CPB ioctl and support page/bank operations.
A follow-on patchset will add support to ifconfig for reporting
data from CMIS optics.

This has been tested on Nvidia ConnectX-7 and Broadcom Thor2 (using
out of tree driver) based NICs.

Differential Revision: https://reviews.freebsd.org/D55912
Sponsored by: Netflix Inc.
Reviewed by: kib
DeltaFile
+16-2sys/dev/mlx5/mlx5_en/mlx5_en_main.c
+9-0sys/net/iflib.c
+3-2sys/net/if.h
+4-1sys/net/iflib.h
+1-0sys/sys/sockio.h
+33-55 files

HardenedBSD/src a4252cdshare/misc committers-ports.dot, sys/fs/nfsclient nfs_clport.c nfs_clstate.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+25-12sys/nfs/nfs_diskless.c
+31-0sys/fs/nfsclient/nfs_clport.c
+15-2sys/fs/nfsclient/nfs_clstate.c
+5-2sys/fs/nfsclient/nfs_clvfsops.c
+3-0share/misc/committers-ports.dot
+2-1sys/fs/nfsclient/nfs_clrpcops.c
+81-172 files not shown
+83-188 files

HardenedBSD/src cd7da48share/misc committers-ports.dot, sys/fs/nfsclient nfs_clport.c nfs_clstate.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+25-12sys/nfs/nfs_diskless.c
+31-0sys/fs/nfsclient/nfs_clport.c
+15-2sys/fs/nfsclient/nfs_clstate.c
+5-2sys/fs/nfsclient/nfs_clvfsops.c
+2-1sys/fs/nfsclient/nfs_clrpcops.c
+3-0share/misc/committers-ports.dot
+81-172 files not shown
+83-188 files

HardenedBSD/src c84049cshare/misc committers-ports.dot

Add myself as a committer

Approved by:    makc (mentor)
DeltaFile
+3-0share/misc/committers-ports.dot
+3-01 files

HardenedBSD/src 8b97759sys/fs/nfs nfs_var.h, sys/fs/nfsclient nfs_clport.c nfs_clstate.c

nfs_diskless: Add support for an NFSv4 root fs

Without this patch, diskless root NFS file systems
could only be mounted via NFSv3 (or NFSv2).
This patch adds the basic support needed to mount
a root fs via NFSv4.

At this time, the NFSv4 mount will only work if
the following is done on the NFS server configuration:
- The root directory specified in the "V4:" line in
  /etc/exports must be "/".  This is needed since the
  path to mount must be the same for NFSv3 and NFSv4.
- The NFS server must be configured to do both NFSv3
  and NFSv4, since the bootstrap code still uses NFSv3.
- The NFSv4 server must be configured with:
  vfs.nfs.enable_uidtostring=1
  vfs.nfsd.enable_stringtouid=1
  since the NFSv4 root fs cannot be running nfsuserd(8)
  when it is booting.  (This limitation may be removed

    [14 lines not shown]
DeltaFile
+25-12sys/nfs/nfs_diskless.c
+31-0sys/fs/nfsclient/nfs_clport.c
+15-2sys/fs/nfsclient/nfs_clstate.c
+5-2sys/fs/nfsclient/nfs_clvfsops.c
+2-1sys/fs/nfsclient/nfs_clrpcops.c
+1-0sys/fs/nfs/nfs_var.h
+79-176 files

HardenedBSD/src cb81314. CONTRIBUTING.md

CONTRIBUTING.md: Correct typo

Reported by:    vladlen
DeltaFile
+1-1CONTRIBUTING.md
+1-11 files

HardenedBSD/src 081f52alib/msun/aarch64 fenv.c, lib/msun/amd64 fenv.c

msun: remove requirement to have C99 inline semantic

PR:     277958

(cherry picked from commit d15733065c4221dcd5bb3622d225760f271f6fc9)
DeltaFile
+0-5lib/msun/arm/fenv.c
+0-5lib/msun/aarch64/fenv.c
+0-5lib/msun/amd64/fenv.c
+0-5lib/msun/i387/fenv.c
+0-5lib/msun/powerpc/fenv.c
+0-5lib/msun/riscv/fenv.c
+0-306 files

HardenedBSD/src 2d81a95lib/msun/powerpc fenv.c fenv.h

msun/powerpc: convert fenv functions to proper linkage

PR:     277958

(cherry picked from commit e4505a58a77f6f4f2df60d26ea99710af6c6b3cf)
DeltaFile
+73-16lib/msun/powerpc/fenv.c
+39-12lib/msun/powerpc/fenv.h
+112-282 files

HardenedBSD/src faca80flib/msun/arm fenv.c fenv.h

msun/arm: convert fenv functions to proper linkage

PR:     277958

(cherry picked from commit 70674434e2424d61262322702d0415e54d8cc1a2)
DeltaFile
+105-28lib/msun/arm/fenv.c
+45-13lib/msun/arm/fenv.h
+150-412 files

HardenedBSD/src 492843dlib/msun/aarch64 fenv.c fenv.h

msun/aarch64: convert fenv functions to proper linkage

PR:     277958

(cherry picked from commit 3a01e1e1a50cb9a9594aac2148dc920a6b295428)
DeltaFile
+59-13lib/msun/aarch64/fenv.c
+31-10lib/msun/aarch64/fenv.h
+90-232 files

HardenedBSD/src 60b5183lib/msun/amd64 fenv.c, lib/msun/i387 fenv.c

msun/x86: convert rest of the extern inline fenv functions to proper linkage

PR:     277958

(cherry picked from commit 5bc64b7d417dd1f105755e093f8e807bcdc2a666)
DeltaFile
+27-5lib/msun/amd64/fenv.c
+27-5lib/msun/i387/fenv.c
+20-9lib/msun/x86/fenv.h
+74-193 files

HardenedBSD/src f13155clib/msun/riscv fenv.c fenv.h

msun/riscv: convert fenv functions to proper linkage

PR:     277958

(cherry picked from commit 6b89f5360f8441ffd1a3e8db7375ed3ccdba7d2a)
DeltaFile
+71-13lib/msun/riscv/fenv.c
+39-12lib/msun/riscv/fenv.h
+110-252 files

HardenedBSD/src 9687de5lib/msun/aarch64 fenv.c fenv.h, lib/msun/amd64 fenv.c

fenv.h: stop declaring feclearexcept() extern inline

PR:     277958

(cherry picked from commit f39754d51b7dc65c4cf9f8b41b6fc1fc135554e7)
DeltaFile
+5-2lib/msun/x86/fenv.h
+6-1lib/msun/aarch64/fenv.c
+5-2lib/msun/aarch64/fenv.h
+6-1lib/msun/amd64/fenv.c
+6-1lib/msun/arm/fenv.c
+6-1lib/msun/i387/fenv.c
+34-85 files not shown
+58-1311 files

HardenedBSD/src 25a62d5contrib/expat Changes, contrib/expat/doc reference.html xmlwf.xml

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+2,814-1,863contrib/expat/doc/reference.html
+244-244contrib/expat/doc/xmlwf.xml
+130-56contrib/expat/xmlwf/xmlwf_helpgen.py
+112-61contrib/expat/lib/xmlparse.c
+141-18contrib/expat/Changes
+119-0contrib/expat/lib/libexpat.map.in
+3,560-2,24230 files not shown
+3,823-2,34036 files

HardenedBSD/src 0b94911contrib/expat Changes, contrib/expat/doc reference.html xmlwf.xml

contrib/expat: import expat 2.7.5

Changes: https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes
         https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes

Security:       CVE-2026-32776
Security:       CVE-2026-32777
Security:       CVE-2026-32778
Security:       CVE-2026-24515
Security:       CVE-2026-25210

(cherry picked from commit ae04c7bbf065278687fa930e81a96767e9009d38)
DeltaFile
+2,814-1,863contrib/expat/doc/reference.html
+244-244contrib/expat/doc/xmlwf.xml
+130-56contrib/expat/xmlwf/xmlwf_helpgen.py
+112-61contrib/expat/lib/xmlparse.c
+141-18contrib/expat/Changes
+119-0contrib/expat/lib/libexpat.map.in
+3,560-2,24229 files not shown
+3,822-2,33935 files

HardenedBSD/src a849cbelib/libc/gen posix_spawn.3

posix_spawn.3: fix formatting of xref

(cherry picked from commit 59e9a4c05a81a25aaf355cb18c24835abad96ff2)
DeltaFile
+1-1lib/libc/gen/posix_spawn.3
+1-11 files

HardenedBSD/src 4e27cc4. CONTRIBUTING.md, share/examples/jails jng

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+249-70share/examples/jails/jng
+2-6CONTRIBUTING.md
+1-0sys/netinet/ip_mroute.c
+1-0sys/netinet6/ip6_mroute.c
+253-764 files

HardenedBSD/src b84f38e. CONTRIBUTING.md, share/examples/jails jng

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+249-70share/examples/jails/jng
+2-6CONTRIBUTING.md
+1-0sys/netinet/ip_mroute.c
+1-0sys/netinet6/ip6_mroute.c
+253-764 files

HardenedBSD/src 3f79bc9sys/netinet ip_mroute.c, sys/netinet6 ip6_mroute.c

Fix nooptions VIMAGE build

The recent FIBify commits deref struct thread without including
sys/proc.h, which can result in a compiler error.  This becomes
apparent when building with LINT-NOVIMAGE, as net/vnet.h includes
sys/proc.h.  Fix this by directly including sys/proc.h

Fixes: 4c486fe40267 ("ip_mroute: FIBify"), 0bb9c2b665d9 ("ip6_mroute: FIBify")
DeltaFile
+1-0sys/netinet/ip_mroute.c
+1-0sys/netinet6/ip6_mroute.c
+2-02 files

HardenedBSD/src fba8bd0. CONTRIBUTING.md

CONTRIBUTING.md: Make quality expectations section more concise

FreeBSD has not yet established an AI submission policy.  For now remove
text that implies we have.
DeltaFile
+2-6CONTRIBUTING.md
+2-61 files

HardenedBSD/src 8e68f94share/examples/jails jng

New version of jng (2.0)

Changes for jng 1.0 -> 2.0 include:

+ Add experimental MSS clamping
+ Add support for ng_bridge(4) NGM_BRIDGE_GET_STATS (getstats)
+ Add JSON formatted ng_bridge(4) statistics (see above) via "jng stats -j <name>"
+ Add error messages
+ Minor refactoring for code readability (read: quietly() function)
+ Rename eiface variables to jiface to clarify as-for jail interface (not ng_eiface(4))
+ Fix missing description for alternate form of "jng show" usage
+ Update "jng show <name>" to accept multiple names (now "jng show <name> …" is allowed)
+ Update "jng shutdown <name>" to accept multiple names (now "jng shutdown <name> …" is allowed)
+ Add "-a" option to "jng stats" (as-in "jng stats -a") to show all ng_bridge(4) stats
+ Update "jng stats <name>" to accept any kind of name (make it easier to use)
+ Add version ident
+ Remove extraneous line in LICENSE section
+ Add -h to usage statements
+ Bump copyright

    [3 lines not shown]
DeltaFile
+249-70share/examples/jails/jng
+249-701 files

HardenedBSD/src e4b9243lib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-08 files not shown
+684-914 files

HardenedBSD/src 933d76alib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-08 files not shown
+684-914 files

HardenedBSD/src e55db84lib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

lib/msun: Added fmaximum and fminimum family. Tests and man page

Starting from the existing fmax{,f,l} functions I've added the fmaximum
family, which handles NaN according to the newest standard (propagating
it).

This commit is a PoC for GSoC 2026.

Reviewed by:    fuz, kargl
MFC after:      1 month
Differential Revision:  https://reviews.freebsd.org/D55834
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-06 files not shown
+680-512 files

HardenedBSD/src 0b39d72share/man/man4 virtio.4, sys/dev/virtio/pci virtio_pci_modern.c

virtio: use modern mode for transitional device by default

This patch changes the default value of the loader tunable
hw.virtio.pci.transitional to 1. This means, virtio uses the
modern mode for transitional devices by default.

The return values of vtpci_modern_probe() and vtpci_legacy_probei()
were chosen to prefer modern mode, but hw.virtio.pci.transitional=0
prevents modern mode.
Setting hw.virtio.pci.transitional to 1 by default seems a better fit.

Reviewed by:            tuexen
Differential Revision:  https://reviews.freebsd.org/D55894
DeltaFile
+1-1share/man/man4/virtio.4
+1-1sys/dev/virtio/pci/virtio_pci_modern.c
+2-22 files