HardenedBSD/src 25a62d5contrib/expat Changes, contrib/expat/doc reference.html xmlwf.xml

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+2,814-1,863contrib/expat/doc/reference.html
+244-244contrib/expat/doc/xmlwf.xml
+130-56contrib/expat/xmlwf/xmlwf_helpgen.py
+112-61contrib/expat/lib/xmlparse.c
+141-18contrib/expat/Changes
+119-0contrib/expat/lib/libexpat.map.in
+3,560-2,24230 files not shown
+3,823-2,34036 files

HardenedBSD/src 0b94911contrib/expat Changes, contrib/expat/doc reference.html xmlwf.xml

contrib/expat: import expat 2.7.5

Changes: https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes
         https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes

Security:       CVE-2026-32776
Security:       CVE-2026-32777
Security:       CVE-2026-32778
Security:       CVE-2026-24515
Security:       CVE-2026-25210

(cherry picked from commit ae04c7bbf065278687fa930e81a96767e9009d38)
DeltaFile
+2,814-1,863contrib/expat/doc/reference.html
+244-244contrib/expat/doc/xmlwf.xml
+130-56contrib/expat/xmlwf/xmlwf_helpgen.py
+112-61contrib/expat/lib/xmlparse.c
+141-18contrib/expat/Changes
+119-0contrib/expat/lib/libexpat.map.in
+3,560-2,24229 files not shown
+3,822-2,33935 files

HardenedBSD/src a849cbelib/libc/gen posix_spawn.3

posix_spawn.3: fix formatting of xref

(cherry picked from commit 59e9a4c05a81a25aaf355cb18c24835abad96ff2)
DeltaFile
+1-1lib/libc/gen/posix_spawn.3
+1-11 files

HardenedBSD/src 4e27cc4. CONTRIBUTING.md, share/examples/jails jng

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+249-70share/examples/jails/jng
+2-6CONTRIBUTING.md
+1-0sys/netinet6/ip6_mroute.c
+1-0sys/netinet/ip_mroute.c
+253-764 files

HardenedBSD/src b84f38e. CONTRIBUTING.md, share/examples/jails jng

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+249-70share/examples/jails/jng
+2-6CONTRIBUTING.md
+1-0sys/netinet/ip_mroute.c
+1-0sys/netinet6/ip6_mroute.c
+253-764 files

HardenedBSD/src 3f79bc9sys/netinet ip_mroute.c, sys/netinet6 ip6_mroute.c

Fix nooptions VIMAGE build

The recent FIBify commits deref struct thread without including
sys/proc.h, which can result in a compiler error.  This becomes
apparent when building with LINT-NOVIMAGE, as net/vnet.h includes
sys/proc.h.  Fix this by directly including sys/proc.h

Fixes: 4c486fe40267 ("ip_mroute: FIBify"), 0bb9c2b665d9 ("ip6_mroute: FIBify")
DeltaFile
+1-0sys/netinet/ip_mroute.c
+1-0sys/netinet6/ip6_mroute.c
+2-02 files

HardenedBSD/src fba8bd0. CONTRIBUTING.md

CONTRIBUTING.md: Make quality expectations section more concise

FreeBSD has not yet established an AI submission policy.  For now remove
text that implies we have.
DeltaFile
+2-6CONTRIBUTING.md
+2-61 files

HardenedBSD/src 8e68f94share/examples/jails jng

New version of jng (2.0)

Changes for jng 1.0 -> 2.0 include:

+ Add experimental MSS clamping
+ Add support for ng_bridge(4) NGM_BRIDGE_GET_STATS (getstats)
+ Add JSON formatted ng_bridge(4) statistics (see above) via "jng stats -j <name>"
+ Add error messages
+ Minor refactoring for code readability (read: quietly() function)
+ Rename eiface variables to jiface to clarify as-for jail interface (not ng_eiface(4))
+ Fix missing description for alternate form of "jng show" usage
+ Update "jng show <name>" to accept multiple names (now "jng show <name> …" is allowed)
+ Update "jng shutdown <name>" to accept multiple names (now "jng shutdown <name> …" is allowed)
+ Add "-a" option to "jng stats" (as-in "jng stats -a") to show all ng_bridge(4) stats
+ Update "jng stats <name>" to accept any kind of name (make it easier to use)
+ Add version ident
+ Remove extraneous line in LICENSE section
+ Add -h to usage statements
+ Bump copyright

    [3 lines not shown]
DeltaFile
+249-70share/examples/jails/jng
+249-701 files

HardenedBSD/src e4b9243lib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-08 files not shown
+684-914 files

HardenedBSD/src 933d76alib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-08 files not shown
+684-914 files

HardenedBSD/src e55db84lib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

lib/msun: Added fmaximum and fminimum family. Tests and man page

Starting from the existing fmax{,f,l} functions I've added the fmaximum
family, which handles NaN according to the newest standard (propagating
it).

This commit is a PoC for GSoC 2026.

Reviewed by:    fuz, kargl
MFC after:      1 month
Differential Revision:  https://reviews.freebsd.org/D55834
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-06 files not shown
+680-512 files

HardenedBSD/src 0b39d72share/man/man4 virtio.4, sys/dev/virtio/pci virtio_pci_modern.c

virtio: use modern mode for transitional device by default

This patch changes the default value of the loader tunable
hw.virtio.pci.transitional to 1. This means, virtio uses the
modern mode for transitional devices by default.

The return values of vtpci_modern_probe() and vtpci_legacy_probei()
were chosen to prefer modern mode, but hw.virtio.pci.transitional=0
prevents modern mode.
Setting hw.virtio.pci.transitional to 1 by default seems a better fit.

Reviewed by:            tuexen
Differential Revision:  https://reviews.freebsd.org/D55894
DeltaFile
+1-1share/man/man4/virtio.4
+1-1sys/dev/virtio/pci/virtio_pci_modern.c
+2-22 files

HardenedBSD/src 39c44fcshare/man/man4 virtio.4

virtio.4: fix typo

Reviewed by:    tuexen
Fixes:          c70755bc0d8f ("virtio: add loader tunables to sysctl")
MFC after:      3 days
DeltaFile
+2-2share/man/man4/virtio.4
+2-21 files

HardenedBSD/src 4dfdf8dsys/dev/isci/scil scic_sds_remote_node_table.c scic_sds_phy_registers.h, sys/dev/ixl ixl_txrx.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+2-2sys/dev/isci/scil/scic_sds_remote_node_table.c
+2-2tools/tools/shlib-compat/shlib-compat.py
+1-1sys/dev/isci/scil/scic_sds_phy_registers.h
+1-1sys/dev/isci/scil/scic_sds_stp_request.h
+1-1sys/dev/isci/scil/scif_remote_device.h
+1-1sys/dev/ixl/ixl_txrx.c
+8-84 files not shown
+12-1210 files

HardenedBSD/src fd275c4lib/libc/gen pause.3, lib/libsys procctl.2

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+2-2tools/tools/shlib-compat/shlib-compat.py
+2-2sys/dev/isci/scil/scic_sds_remote_node_table.c
+1-1lib/libc/gen/pause.3
+1-1lib/libsys/procctl.2
+1-1sys/dev/bhnd/bhnd_bus_if.m
+1-1sys/dev/isci/scil/scic_sds_phy_registers.h
+8-84 files not shown
+12-1210 files

HardenedBSD/src b6ae102sbin/newfs newfs.8, sbin/tunefs tunefs.c tunefs.8

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+189-0sbin/tunefs/tests/tunefs_test.sh
+17-8sbin/tunefs/tunefs.c
+10-4sbin/newfs/newfs.8
+6-2sbin/tunefs/tunefs.8
+3-3sys/dev/dpaa2/dpaa2_ni.c
+4-1sbin/tunefs/Makefile
+229-183 files not shown
+238-199 files

HardenedBSD/src 26b27a8sys/dev/dpaa2 dpaa2_ni.c

dpaa2: Perform bus_dma pre-write sync before enqueue operation

Without a proper synchronization payload of the egress TCP segments
can be corrupted as tuexen@ described in
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292006#c31.

This patch is indirectly related to 292006 because a properly enabled
and announced support for the TX checksum offloading hides potentially
corrupted frame payload.

PR:             292006
Reported by:    tuexen@
Reviewed by:    tuexen@
Tested by:      dsl@, tuexen@
Differential Revision:  https://reviews.freebsd.org/D56144
MFC after:      3 days

(cherry picked from commit 5812415bee55a9063508b02fda9418b0eadb0bb4)
DeltaFile
+3-3sys/dev/dpaa2/dpaa2_ni.c
+3-31 files

HardenedBSD/src 83ec9a9etc/mtree BSD.tests.dist, sbin/tunefs Makefile

tunefs: Add tests

MFC after:      1 week
Reviewed by:    ngie
Differential Revision:  https://reviews.freebsd.org/D56034

(cherry picked from commit 6630c3a73688ae3c33df892f6802bea5b8460e17)
DeltaFile
+189-0sbin/tunefs/tests/tunefs_test.sh
+5-0sbin/tunefs/Makefile
+4-0sbin/tunefs/tests/Makefile
+2-0etc/mtree/BSD.tests.dist
+200-04 files

HardenedBSD/src 1fcaefcsbin/tunefs tunefs.c Makefile

tunefs: Don't lower WARNS

Use casts to silence the alignment warnings instead of potentially
suppressing other legitimate warnings.

MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D56033

(cherry picked from commit c5e79c7e93dda07c383be9b99a1a91894652f546)

tunefs: Fix alignment warning on arm64

MFC after:      1 week
Fixes:          c5e79c7e93dd ("tunefs: Don't lower WARNS")
Reviewed by:    bakul
Differential Revision:  https://reviews.freebsd.org/D56229

(cherry picked from commit 616f47f176c308a29b1f4a6bba1b1a4dc01c3091)
DeltaFile
+4-4sbin/tunefs/tunefs.c
+0-2sbin/tunefs/Makefile
+4-62 files

HardenedBSD/src ae185dcsbin/tunefs tunefs.c tunefs.8

tunefs: Don't combine GEOM journaling with SU

GEOM journaling shouldn't be used at the same time as soft updates, so
don't enable one if the other is already in use.

MFC after:      1 week
PR:             293896
Reviewed by:    mckusick
Differential Revision:  https://reviews.freebsd.org/D56002

(cherry picked from commit b1f72dd2a9a5e69a310b9e76b55f16cff433b8da)
DeltaFile
+13-4sbin/tunefs/tunefs.c
+6-2sbin/tunefs/tunefs.8
+19-62 files

HardenedBSD/src f758262sbin/newfs newfs.8 newfs.c

newfs: Don't combine GEOM journaling with SU

GEOM journaling shouldn't be used at the same time as soft updates, so
don't enable soft updates if GEOM journaling has been requested, and
error out if both are explicitly requested.

MFC after:      1 week
PR:             293896
Reviewed by:    mckusick
Differential Revision:  https://reviews.freebsd.org/D55999

(cherry picked from commit e30fcdaae2e68458da83d5420e6034c5f384e5f2)
DeltaFile
+10-4sbin/newfs/newfs.8
+3-1sbin/newfs/newfs.c
+13-52 files

HardenedBSD/src adc41a7sys/dev/isci/scil scic_sds_remote_node_table.c scic_sds_stp_request.h

isci(4): Fix a couple of typos in source code comments

- s/THis/This/
- s/impementation/implementation/

MFC after:      3 days
DeltaFile
+2-2sys/dev/isci/scil/scic_sds_remote_node_table.c
+1-1sys/dev/isci/scil/scic_sds_stp_request.h
+1-1sys/dev/isci/scil/scic_sds_phy_registers.h
+1-1sys/dev/isci/scil/scif_remote_device.h
+5-54 files

HardenedBSD/src ef3703asys/dev/ixl ixl_txrx.c

ixl(4): Fix a typo in a source code comment

- s/seperated/separated/

MFC after:      3 days
DeltaFile
+1-1sys/dev/ixl/ixl_txrx.c
+1-11 files

HardenedBSD/src b427b66usr.sbin/bsdconfig/share common.subr

bsdconfig(8): Fix a typo in a source code comment

- s/THis/This/

MFC after:      3 days
DeltaFile
+1-1usr.sbin/bsdconfig/share/common.subr
+1-11 files

HardenedBSD/src 3957e23tools/tools/shlib-compat shlib-compat.py

shlib-compat: Fix two typos in error messages

- s/implemeted/implemented/

MFC after:      3 days
DeltaFile
+2-2tools/tools/shlib-compat/shlib-compat.py
+2-21 files

HardenedBSD/src 04be4d0sys/dev/bhnd bhnd_bus_if.m

bhnd(4): Fix a typo in a source code comment

- s/impementations/implementations/

MFC after:      3 days
DeltaFile
+1-1sys/dev/bhnd/bhnd_bus_if.m
+1-11 files

HardenedBSD/src 9eea5eclib/libc/gen pause.3

pause.3: Fix a typo in the manual page

- s/reimplemeted/reimplemented/

MFC after:      3 days
DeltaFile
+1-1lib/libc/gen/pause.3
+1-11 files

HardenedBSD/src 982b3c5lib/libsys procctl.2

procctl.2: remove space at EOL

Fixes:  db9bbe131c92f55e6cf03657dc030c9eea93a9fb
DeltaFile
+1-1lib/libsys/procctl.2
+1-11 files

HardenedBSD/src 6c4179bsys/netinet tcp_var.h, sys/netinet/tcp_stacks rack.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+1-3sys/netinet/tcp_stacks/rack.c
+2-2sys/netinet/tcp_var.h
+3-52 files

HardenedBSD/src 802ed09sys/netinet tcp_var.h, sys/netinet/tcp_stacks rack.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1-3sys/netinet/tcp_stacks/rack.c
+2-2sys/netinet/tcp_var.h
+3-52 files