HardenedBSD/src a49a4e0share/man/man7 freebsd-base.7 release.7, sys/compat/linuxkpi/common/src linux_page.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+18-9share/man/man7/freebsd-base.7
+3-4share/man/man7/release.7
+1-1sys/compat/linuxkpi/common/src/linux_page.c
+22-143 files

HardenedBSD/src 45d8bfdsys/compat/linuxkpi/common/src linux_page.c

LinuxKPI: page.c: remove a spurious character from a comment

No functional changes.

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+1-1sys/compat/linuxkpi/common/src/linux_page.c
+1-11 files

HardenedBSD/src bc6c9d7contrib/sqlite3 sqlite3.c sqlite3.h, sys/compat/linuxkpi/common/src linux_80211.c linux_pci.c

Merge remote-tracking branch 'internal/freebsd/current/main' into hardened/current/master
DeltaFile
+122-81contrib/sqlite3/sqlite3.c
+71-28sys/compat/linuxkpi/common/src/linux_80211.c
+45-45contrib/sqlite3/sqlite3.h
+5-10sys/powerpc/include/_stdint.h
+3-10sys/compat/linuxkpi/common/src/linux_pci.c
+1-1contrib/sqlite3/VERSION
+247-1753 files not shown
+250-1789 files

HardenedBSD/src b8cab6fshare/mk src.libnames.mk

HBSD: Resolve merge conflict

Also make it clearer what HardenedBSD's changes are to this file.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+3-4share/mk/src.libnames.mk
+3-41 files

HardenedBSD/src 39b2ca9share/man/man7 freebsd-base.7

freebsd-base.7: Rewrite table into a tagged list

The table is not playing nicely with
https://man.freebsd.org/freebsd-base

MFC after:              3 days
Reviewed by:            pauamma at gundo.com
Differential Revision:  https://reviews.freebsd.org/D54036
DeltaFile
+18-9share/man/man7/freebsd-base.7
+18-91 files

HardenedBSD/src df81545share/man/man7 release.7

release.7: PKGBASE is now the default

Signed-off-by:  polyduekes-git <polyduekes at proton.me>
Reviewed by:    cperciva, emaste, ziaee
Closes:         https://github.com/freebsd/freebsd-src/pull/1913
DeltaFile
+3-4share/man/man7/release.7
+3-41 files

HardenedBSD/src 8209c08contrib/sqlite3 sqlite3.c sqlite3.h, libexec/rc/rc.d ippool

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+122-81contrib/sqlite3/sqlite3.c
+148-29sys/amd64/vmm/vmm.c
+45-45contrib/sqlite3/sqlite3.h
+7-23sys/amd64/vmm/vmm_dev.c
+3-0libexec/rc/rc.d/ippool
+2-1sys/amd64/include/vmm.h
+327-1793 files not shown
+330-1829 files

HardenedBSD/src 3807418libexec/rc/rc.d ippool

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+3-0libexec/rc/rc.d/ippool
+3-01 files

HardenedBSD/src adb4901sys/compat/linuxkpi/common/src linux_80211.c

LinuxKPI: 802.11: when synching HT and VHT cap, mask rx_mcs

When we sync the sta data, mask the rx_mcs with what the hardware is
able to do so that we do not leave, e.g., a 2nd stream enabled on a 1x1
chipset.
iwlwifi(4) has a further check for the smps_mode to limit to NSS=1 but
I believe that is historic and not actually in use anymore.

This fixes firmware crashes on TLC updates with nss=1 but the nss=2 array
index also being populated (with HT/VHT80/160 mcs information):
data being populated:
  iwlwifi0: 0x20101A0D | ADVANCED_SYSASSERT
  iwlwifi0: 0x00000006 | umac data1
  iwlwifi0: 0x00000001 | umac data2
  iwlwifi0: 0x000003FF | umac data3
  iwlwifi0: 0x____050F | last host cmd

Reported by:    Claudio Zumbo (claudiozumbo gmail.com), Erik Power
Tested by:      Claudio Zumbo, Erik Power (eppower umich.edu)

    [3 lines not shown]
DeltaFile
+71-28sys/compat/linuxkpi/common/src/linux_80211.c
+71-281 files

HardenedBSD/src ed29ffdsys/compat/linuxkpi/common/src linux_pci.c

LinuxKPI: pci: undo the pci_resource_len() check in lkpi_pci_request_region()

Creating non-passthru SR-IOV interfaces on a mlx5en(4) failed.
The problem lies in the pci_resource_len() call but not that the BAR length
is tmeporary 0 but in that we call lkpi_pci_get_bar() with a true argument
which will create the BAR resource for us and report the approriate length
back.  However, the later call to bus_alloc_resource_any() will then fail
given the resource already exists.

Restore the previous behaviour and let bus_alloc_resource_any() do the
work.  Adjust the return values from -ENODEV to -EBUSY to match callers
expectations.

In linuxkpi_pcim_request_all_regions(), like in linuxkpi_pci_request_regions(),
filter out the -EBUSY errors as "not an error" and try the next bar.
This also seems to be consistent with the expectations of the callers.

PR:             290793
Reported by:    David BOYER (jcduss13 gmail.com)

    [6 lines not shown]
DeltaFile
+3-10sys/compat/linuxkpi/common/src/linux_pci.c
+3-101 files

HardenedBSD/src 6924de8lib/libuvmem libuvmem.3, share/man/man4 ufintek.4

Merge remote-tracking branch 'internal/freebsd/current/main' into hardened/current/master

Conflicts:
        share/mk/src.libnames.mk (unresolved)
DeltaFile
+759-0sys/dev/usb/serial/ufintek.c
+146-21sys/kern/subr_vmem.c
+118-0share/man/man4/ufintek.4
+71-0lib/libuvmem/libuvmem.3
+37-0sys/modules/ufintek/Makefile
+15-8sys/sys/vmem.h
+1,146-299 files not shown
+1,199-3315 files

HardenedBSD/src 44d6df4sys/dev/nvme nvme.h

nvme: Use memcpy instead of memmove in nvme_cdata_get_disk_ident

These buffers should not overlap.

Reviewed by:    imp
Sponsored by:   Chelsio Communications
Differential Revision:  https://reviews.freebsd.org/D53842
DeltaFile
+1-1sys/dev/nvme/nvme.h
+1-11 files

HardenedBSD/src ef55f6bcontrib/sqlite3 sqlite3.c sqlite3.h

sqlite3: Update to 3.50.4

Release notes at https://www.sqlite.org/releaselog/3_50_4.html.

Obtained from:  https://www.sqlite.org/2025/sqlite-autoconf-3500400.tar.gz

Merge commit 'e7e917ee3cf2b3010b1c511c6ebaf8b65b983ad7'

(cherry picked from commit 07d5a9b1b2dd95d95137c6c2afcb84ad40c05b75)
DeltaFile
+122-81contrib/sqlite3/sqlite3.c
+45-45contrib/sqlite3/sqlite3.h
+1-1contrib/sqlite3/VERSION
+1-1contrib/sqlite3/sqlite3.pc.in
+1-1contrib/sqlite3/sqlite3rc.h
+170-1295 files

HardenedBSD/src 38eec1flibexec/rc/rc.d ippool

ipfilter: Load optionlist prior to ippool invocation

As a safety precaution df381bec2d2b limits ippool hash table size to 1K.
This causes any legitimely large hash table to fail to load. The
htable_size_max ipf tuneable adjusts this but the adjustment is made
in the ipfilter rc script, invoked after the ippool script (because it
depends on ippool). Let's load the ipfilter_optionlist in ippool as well.
ipfilter_optionlist load will also occur in the ipfilter rc script in case
the user uses ipfilter without ippool.

Fixes:          df381bec2d2b

(cherry picked from commit d5d005e9bf4933d5680dd0bb5d42bdf440122aa4)
DeltaFile
+3-0libexec/rc/rc.d/ippool
+3-01 files

HardenedBSD/src d712976libexec/rc/rc.d ippool

ipfilter: Load optionlist prior to ippool invocation

As a safety precaution df381bec2d2b limits ippool hash table size to 1K.
This causes any legitimely large hash table to fail to load. The
htable_size_max ipf tuneable adjusts this but the adjustment is made
in the ipfilter rc script, invoked after the ippool script (because it
depends on ippool). Let's load the ipfilter_optionlist in ippool as well.
ipfilter_optionlist load will also occur in the ipfilter rc script in case
the user uses ipfilter without ippool.

Fixes:          df381bec2d2b
(cherry picked from commit d5d005e9bf4933d5680dd0bb5d42bdf440122aa4)
DeltaFile
+3-0libexec/rc/rc.d/ippool
+3-01 files

HardenedBSD/src 07d5a9bcontrib/sqlite3 sqlite3.c sqlite3.h

sqlite3: Update to 3.50.4

Release notes at https://www.sqlite.org/releaselog/3_50_4.html.

Obtained from:  https://www.sqlite.org/2025/sqlite-autoconf-3500400.tar.gz

Merge commit 'e7e917ee3cf2b3010b1c511c6ebaf8b65b983ad7'
DeltaFile
+122-81contrib/sqlite3/sqlite3.c
+45-45contrib/sqlite3/sqlite3.h
+1-1contrib/sqlite3/VERSION
+1-1contrib/sqlite3/sqlite3.pc.in
+1-1contrib/sqlite3/sqlite3rc.h
+170-1295 files

HardenedBSD/src e7e917e. sqlite3.c sqlite3.h

sqlite3: Vendor import of sqlite3 3.50.4

Release notes at https://www.sqlite.org/releaselog/3_50_4.html.

Obtained from:  https://www.sqlite.org/2025/sqlite-autoconf-3500400.tar.gz
DeltaFile
+122-81sqlite3.c
+45-45sqlite3.h
+1-1VERSION
+1-1sqlite3.pc.in
+1-1sqlite3rc.h
+170-1295 files

HardenedBSD/src 1630af4sys/amd64/include vmm.h, sys/amd64/vmm vmm.c vmm_dev.c

vmm: Fix a deadlock between vm_smp_rendezvous() and vcpu_lock_all()

vm_smp_rendezvous() invokes a callback on all vCPUs, blocking the
initiator until all vCPUs have responded.  vcpu_lock_all() blocks each
vCPU by waiting for it to go idle and setting the vCPU state to frozen.
These two operations can deadlock on each other, particularly when
booting a Windows guest, when vcpu_lock_all() blocks waiting for a
rendezvous initiator, and the initiator is blocked waiting for the vCPU
thread which called vcpu_lock_all() to invoke the rendezvous callback.

Implement vcpu_lock_all() in a way that avoids deadlocks with
vm_smp_rendezvous().  In particular, when traversing vCPUs, invoke the
rendezvous callback on the vCPU's behalf to help the initiator finish.
We can only safely do so when the vCPU is IDLE or we have already locked
it, otherwise we may be racing with the target vCPU thread.  Thus:
- Use an exclusive lock to serialize vcpu_lock_all() callers, which lets
  us lock vCPUs out of order without fear of deadlock with parallel
  vcpu_lock_all() callers.
- If a rendezvous is pending, lock all idle vCPUs and invoke the

    [16 lines not shown]
DeltaFile
+148-29sys/amd64/vmm/vmm.c
+7-23sys/amd64/vmm/vmm_dev.c
+2-1sys/amd64/include/vmm.h
+157-533 files

HardenedBSD/src f417c9esys/powerpc/include _stdint.h

powerpc/_stdint.h: fix SIG_ATOMIC_{MIN,MAX,WIDTH}

On powerpc/powerpc64, sig_atomic_t is an int, but was treated as if
it was a long by <machine/_stdint.h>.  This was finally caught by the
unit test added with 4a1c752 / D53831.

Reported by:    kib
Reviewed by:    kib, imp
Approved by:    markj (mentor)
Fixes:          c3e289e1ce8c9af8d14e9f727632e22b3bf901f9
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D54026
DeltaFile
+5-10sys/powerpc/include/_stdint.h
+5-101 files

HardenedBSD/src 0789268etc/mtree BSD.usr.dist BSD.lib32.dist

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+2-2etc/mtree/BSD.usr.dist
+2-2etc/mtree/BSD.lib32.dist
+4-42 files

HardenedBSD/src babb41asys/dev/nvme nvme.h

nvme: Minor style nit

Sponsored by:           Netflix
DeltaFile
+1-2sys/dev/nvme/nvme.h
+1-21 files

HardenedBSD/src 7b44ab1share/misc bsd-family-tree

bsd-family-tree: add FreeBSD 15.0
DeltaFile
+4-1share/misc/bsd-family-tree
+4-11 files

HardenedBSD/src 1ecf010lib/libuvmem Makefile Symbol.map, share/mk src.libnames.mk

libuvmem: usermode port of vmem(9)

The quantum cache is disabled, there is no uma.

Intent is to use this for resource allocation in bhyve(8), for start.
Addition of -luvmem to bhyve linking was done to test changes to share/mk.

Reviewed by:    bnovkov, markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D27220
DeltaFile
+137-14sys/kern/subr_vmem.c
+15-8sys/sys/vmem.h
+17-0lib/libuvmem/Makefile
+15-0lib/libuvmem/Symbol.map
+5-0share/mk/src.libnames.mk
+2-0sys/contrib/openzfs/include/sys/zfs_context.h
+191-223 files not shown
+194-239 files

HardenedBSD/src 7295aealib/libuvmem libuvmem.3 Makefile

libuvmem: provide man page mostly as a pointer to vmem(9)

Reviewed by:    bnovkov, markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D27220
DeltaFile
+71-0lib/libuvmem/libuvmem.3
+2-0lib/libuvmem/Makefile
+73-02 files

HardenedBSD/src 202292esys/kern subr_vmem.c

kern/subr_vmem.c: convert explicit vmem_list_lock use to macros

Reviewed by:    bnovkov, markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D27220
DeltaFile
+9-6sys/kern/subr_vmem.c
+9-61 files

HardenedBSD/src 305e33dsys/kern subr_vmem.c

kern/subr_vmem.c: remove unused VMEM_TRYLOCK() macro

Reviewed by:    bnovkov, markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D27220
DeltaFile
+0-1sys/kern/subr_vmem.c
+0-11 files

HardenedBSD/src c6fe17aetc/mtree BSD.lib32.dist BSD.usr.dist

mtree: Keep mtree files indented with spaces

The mtree tool indents directory entries with 4 spaces.

Reviewed by:    imp
Fixes:          9cab9fde5eda ("virtual_oss: Port to base")
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D53979

(cherry picked from commit 3d91a746380e81c2089d8beaae28438867ae6dbf)
DeltaFile
+2-2etc/mtree/BSD.lib32.dist
+2-2etc/mtree/BSD.usr.dist
+4-42 files

HardenedBSD/src 791c531share/man/man4 ufintek.4, sys/dev/usb/serial ufintek.c

Fintek F81232 USB to serial driver

Driver for Feature Integration Technology Inc. (aka Fintek)
F81232 USB to serial driver.

Reviewed by:    thj,adrian,UB
Approved by:    adrian
Differential Revision:  https://reviews.freebsd.org/D53893
DeltaFile
+759-0sys/dev/usb/serial/ufintek.c
+118-0share/man/man4/ufintek.4
+37-0sys/modules/ufintek/Makefile
+914-03 files

HardenedBSD/src 2986658cddl/contrib/opensolaris/tools/ctf/cvt barrier.c, sys/dev/evdev input.h input-event-codes.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+44-29sys/dev/evdev/input.h
+35-0tests/sys/netpfil/pf/table.sh
+27-1sys/dev/evdev/input-event-codes.h
+3-23cddl/contrib/opensolaris/tools/ctf/cvt/barrier.c
+2-19usr.sbin/moused/msconvd/msconvd.8
+16-1sys/dev/evdev/evdev.c
+127-7313 files not shown
+175-9519 files

HardenedBSD/src 639e651sys/netpfil/pf if_pfsync.c

pfsync: fix incorrect unlock during destroy

During pfsync_clone_destroy() we clean up pending packets. This
may involve calling pfsync_undefer() or callout_drain(). We may not
hold the bucket lock during callout_drain(), but must hold it during
pfsync_undefer().

We incorrectly always released the lock, leading to assertion failures
during cleanup if there were pending deferred packets.

MFC after:      1 week
Sponsored by:   Orange Business Services
DeltaFile
+2-2sys/netpfil/pf/if_pfsync.c
+2-21 files