HardenedBSD/src bd6a3b6contrib/libucl/lua lua_ucl.c, sys/x86/cpufreq hwpstate_amd.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+91-65sys/x86/cpufreq/hwpstate_amd.c
+6-3usr.bin/stat/tests/readlink_test.sh
+1-1contrib/libucl/lua/lua_ucl.c
+98-693 files

HardenedBSD/src 0fefb07contrib/libucl/lua lua_ucl.c, sys/x86/cpufreq hwpstate_amd.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+91-65sys/x86/cpufreq/hwpstate_amd.c
+6-3usr.bin/stat/tests/readlink_test.sh
+1-1contrib/libucl/lua/lua_ucl.c
+98-693 files

HardenedBSD/src 1c793e7usr.bin/stat/tests readlink_test.sh

stat: Nits in readlink tests

* The f_flag test may fail if a component of the full path to the
  temporary directory is a symbolic link.

* The n_flag test had an empty head; give it a description.

* Use consistent quoting.

MFC after:      1 week
Sponsored by:   Klara, Inc.
Reviewed by:    kevans
Differential Revision:  https://reviews.freebsd.org/D56293
DeltaFile
+6-3usr.bin/stat/tests/readlink_test.sh
+6-31 files

HardenedBSD/src 095cbb1sys/x86/cpufreq hwpstate_amd.c

hwpstate_amd: Expose nodes as much as possible in legacy pstate

Reviewed by:    olce
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55606
DeltaFile
+91-65sys/x86/cpufreq/hwpstate_amd.c
+91-651 files

HardenedBSD/src a71fea5contrib/libucl/lua lua_ucl.c

contrib/libucl: Revert to old behavior of macros

Enable macros and includes by default as this is breaking package
building on HEAD. libucl 0.9.3 by default changed the behavior of
includes and macros. These were previously enabled but it switched to
disabled which breaks the package building in HEAD. This is a temporary
workaround for now to fix the package building specially for
releng/15.0. This might be reverted post EOL of 15.0 in the coming
months.

Reported by:    ivy
Fixes: abda442d92fd ("contrib/libucl: Import libucl 0.9.3")
Tested by:      ivy
Approved by:    ivy, kevans
Differential Revision:  https://reviews.freebsd.org/D56294
DeltaFile
+1-1contrib/libucl/lua/lua_ucl.c
+1-11 files

HardenedBSD/src 92c4e07sys/arm64/apple apple_aic.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+2-2sys/arm64/apple/apple_aic.c
+2-21 files

HardenedBSD/src 973ea93sys/arm64/apple apple_aic.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+2-2sys/arm64/apple/apple_aic.c
+2-21 files

HardenedBSD/src 37db90bsys/rpc clnt_bck.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+0-2sys/rpc/clnt_bck.c
+0-21 files

HardenedBSD/src 6c13732sys/rpc clnt_bck.c

clnt_bck.c: Delete a couple of old diagnostic printfs

There were two debug printf()s that were left in the
code while debugging the handling of callbacks over
a NFSv4.1/4.2 backchannel was being done.

This patch removes them, since they are no longer
of benefit and cause "noise".

(cherry picked from commit 41b423cc4e4dfe3132bb5d287bba03b82ecb5be8)
DeltaFile
+0-2sys/rpc/clnt_bck.c
+0-21 files

HardenedBSD/src e805302sys/arm64/apple apple_aic.c

arm64/apple: Fix malloc size for per-CPU arrays in AIC attach

sizeof(*sc->sc_ipimasks) * mp_maxid + 1 is parsed as
(sizeof(*sc->sc_ipimasks) * mp_maxid) + 1, so the buffers were one byte
short of a full (mp_maxid + 1) element count.  Multiply by (mp_maxid + 1)
for sc_ipimasks and sc_cpuids.

Signed-off-by: Weixie Cui <cuiweixie at gmail.com>
Reviewed-by: kevans, ngie
Pull-Request: https://github.com/freebsd/freebsd-src/pull/2112
DeltaFile
+2-2sys/arm64/apple/apple_aic.c
+2-21 files

HardenedBSD/src b1b8935. RELNOTES

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+11-0RELNOTES
+11-01 files

HardenedBSD/src cc00c4e. RELNOTES

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+11-0RELNOTES
+11-01 files

HardenedBSD/src cc2f8f3. RELNOTES

RELNOTES: Update the entry for commit 8b9775912cbc
DeltaFile
+8-3RELNOTES
+8-31 files

HardenedBSD/src dc752c2. RELNOTES

RELNOTES: Make an entry for supporting an NFSv4 root fs
DeltaFile
+6-0RELNOTES
+6-01 files

HardenedBSD/src 74398c4contrib/libfido2/fuzz functions.txt fuzz_attobj.c, contrib/libfido2/regress cred.c dev.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+553-543contrib/libfido2/fuzz/functions.txt
+972-94contrib/libfido2/regress/cred.c
+333-0contrib/libfido2/fuzz/fuzz_attobj.c
+14-220contrib/libfido2/regress/dev.c
+182-0contrib/libfido2/regress/mock.c
+75-70contrib/libfido2/tools/test.sh
+2,129-92793 files not shown
+3,476-1,60299 files

HardenedBSD/src 058fbc8contrib/libfido2/fuzz functions.txt fuzz_attobj.c, contrib/libfido2/regress cred.c dev.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+553-543contrib/libfido2/fuzz/functions.txt
+972-94contrib/libfido2/regress/cred.c
+333-0contrib/libfido2/fuzz/fuzz_attobj.c
+14-220contrib/libfido2/regress/dev.c
+182-0contrib/libfido2/regress/mock.c
+75-70contrib/libfido2/tools/test.sh
+2,129-92793 files not shown
+3,476-1,60299 files

HardenedBSD/src 44ae776etc/mtree BSD.usr.dist, share/doc/atf Makefile

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+100-90sys/fs/cd9660/cd9660_rrip.c
+7-7etc/mtree/BSD.usr.dist
+6-6share/doc/atf/Makefile
+5-5share/man/man1/Makefile
+5-5share/man/man4/Makefile
+4-2sys/amd64/conf/FIRECRACKER
+127-11512 files not shown
+166-13318 files

HardenedBSD/src a371b00stand/common commands.c, stand/efi/loader main.c

Add boot_setenv

Move is_restricted_var() to libsa/environment.c so it can be leveraged
by boot_setenv called from subr_boot with not truted input.

Also, allow for local tuning via ENV_IS_RESTRICTED_ALLOWED_LIST and
ENV_IS_RESTRICTED_LIST

Sponsored by:   Hewlett Packard Enterprise Development LP.

Reviewed by:    kevans, imp
Differential Revision:  https://reviews.freebsd.org/D56287
DeltaFile
+76-0stand/libsa/environment.c
+3-57stand/common/commands.c
+5-0stand/efi/loader/main.c
+3-0stand/libsa/stand.h
+1-1sys/kern/subr_boot.c
+88-585 files

HardenedBSD/src fb3538fetc/mtree BSD.usr.dist BSD.root.dist

pkgbase: Move all of Kyua into the kyua package

Some Kyua directories were improperly tagged as belonging to the tests
package.  Move them to the kyua package, which contains all of the
files found in these directories.

PR:             294129
MFC after:      1 week
Reviewed by:    ivy, emaste
Differential Revision:  https://reviews.freebsd.org/D56159

(cherry picked from commit 40e8afadc393a102f4199228ae2047d3e6c71251)
DeltaFile
+5-5etc/mtree/BSD.usr.dist
+1-1etc/mtree/BSD.root.dist
+6-62 files

HardenedBSD/src b68e27dsys/fs/cd9660 cd9660_rrip.c

cd9660: Partial style sweep of Rock Ridge code

This mostly just fixes indentation and continuations and adds spaces
after commas and around binary operators and parentheses around return
values, but cd9660_rrip_extref() was so egregiously unreadable I
rewrote it.  Note that this was done manually, so I may have missed a
few spots, and I made no attempt to fix over-long lines.

MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D55865

(cherry picked from commit e6a77f81d1eb345f6a8c827ecf555b88996c8763)
DeltaFile
+96-90sys/fs/cd9660/cd9660_rrip.c
+96-901 files

HardenedBSD/src 4f13c34etc/mtree BSD.usr.dist, libexec/atf/atf-sh Makefile

pkgbase: Move all of ATF into the atf package

Parts of ATF (including the licence and some of the documentation) were
for some reason part of the tests package instead of the atf package.
Moving them to where they logically belong poses no problem since tests
already depends on atf.

PR:             294129
MFC after:      1 week
Reviewed by:    ivy
Differential Revision:  https://reviews.freebsd.org/D56158

(cherry picked from commit 0a6dbf51d8ea112a1d164be260004ec795b4368d)
DeltaFile
+6-6share/doc/atf/Makefile
+5-5share/man/man1/Makefile
+5-5share/man/man4/Makefile
+2-2etc/mtree/BSD.usr.dist
+0-1libexec/atf/atf-sh/Makefile
+18-195 files

HardenedBSD/src 7c717c3sys/fs/cd9660 cd9660_rrip.c

cd9660: Add length checks to Rock Ridge parser

* cd9660_rrip_slink() did not check that the lengths of individual
  entries do not exceed the length of the overall record.

* cd9660_rrip_altname() did not check that the length of the record
  was at least 5 before subtracting 5 from it.

Note that in both cases, a better solution would be to check the length
of the data before calling the handler, or immediately upon entry of
the handler, but this would require significant refactoring.

MFC after:      1 week
Reported by:    Calif.io in collaboration with Claude and Anthropic Research
Reported by:    Adam Crosser, Praetorian
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56215

(cherry picked from commit d0afead876076f605c363f03d92304d1bd75be1c)
DeltaFile
+4-0sys/fs/cd9660/cd9660_rrip.c
+4-01 files

HardenedBSD/src 8396b38sys/amd64/conf FIRECRACKER GENERIC, sys/arm64/conf std.arm64

kernel: Be clearer about what ZSTDIO is for

ZSTDIO is not just for core dumps, and it is now required by ZFS, so
move it (and GZIO, which is still just for dumps) to a new “Compression
support” section in GENERIC, and add them both to MINIMAL.

MFC after:      1 week
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D55940

(cherry picked from commit 092687a031064dc08ac198648c6393cc50b06cee)
DeltaFile
+4-2sys/powerpc/conf/GENERIC64LE
+4-2sys/i386/conf/GENERIC
+4-2sys/arm64/conf/std.arm64
+4-2sys/riscv/conf/GENERIC
+4-2sys/amd64/conf/FIRECRACKER
+4-2sys/amd64/conf/GENERIC
+24-125 files not shown
+42-1811 files

HardenedBSD/src 53b4ae3sys/fs/nfs nfs_commonsubs.c nfsid.h, sys/nfs nfs_diskless.c

nfs_diskless: Fix handling of nfsuserd case for NFSv4

Commit 8b9775912cbc added support for an NFSv4 mounted
root file system, but only if the NFSv4 configuration
used id numbers in the strings.

This patch adds support for the case where the NFSv4
configuration uses name<-->id mappings via nfsuserd(8)
by priming the mapping cache with just enough entries
so that it works until the nfsuserd(8) is running.
They are listed in nfs_prime_userd[] in
sys/fs/nfs/nfs_commonsubs.c.

The entries in nfs_prime_userd[] are also wired into
the kernel's cache for name<-->id mappings when nfsuserd(8)
starts up.  This is necessary, since an upcall to the
nfsuserd(8) daemon for a mapping when looking up the
path to the passwd/group database files (/etc) will
hang the system, due to a vnode lock being held on

    [15 lines not shown]
DeltaFile
+66-10sys/fs/nfs/nfs_commonsubs.c
+44-0sys/nfs/nfs_diskless.c
+13-0sys/fs/nfs/nfsid.h
+1-0sys/fs/nfs/nfsrvstate.h
+124-104 files

HardenedBSD/src 8007a78sys/dev/sound/pcm channel.c

sound: Make chn_reset() control flow clearer

I think this is cleaner than playing around with return values.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56264
DeltaFile
+18-15sys/dev/sound/pcm/channel.c
+18-151 files

HardenedBSD/src 66a82f5sys/dev/sound/pcm channel.c

sound: De-macro array definitions in chn_calclatency()

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56263
DeltaFile
+16-21sys/dev/sound/pcm/channel.c
+16-211 files

HardenedBSD/src 8b18fc4sys/dev/sound/pcm channel.c

sound: Simplify parts of chn_notify()

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56240
DeltaFile
+20-27sys/dev/sound/pcm/channel.c
+20-271 files

HardenedBSD/src 2d84c8asys/dev/sound/pcm channel.c channel.h

sound: Retire unused CHN_N_* defines

These still haven't been implemented by the original author, and there
doesn't seem to be much use for them anyway.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56239
DeltaFile
+1-25sys/dev/sound/pcm/channel.c
+2-5sys/dev/sound/pcm/channel.h
+3-302 files

HardenedBSD/src f369d41sys/dev/sound/pcm feeder.c feeder.h

sound: Mark some snd_fmt* functions as static

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56238
DeltaFile
+3-3sys/dev/sound/pcm/feeder.c
+0-3sys/dev/sound/pcm/feeder.h
+3-62 files

HardenedBSD/src 6642ba3tests/sys/netpfil/pf anchor.sh

pf tests: explicitly test zeroing counters within an anchor

While here fix the match pattern in the existing test.

Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+13-1tests/sys/netpfil/pf/anchor.sh
+13-11 files