FreeBSD/ports 9deba8f — www/feroxbuster Makefile distinfo

www/feroxbuster: update 2.13.1 → 2.14.0
DeltaFile
+569-477www/feroxbuster/distinfo
+285-240www/feroxbuster/Makefile
+854-7172 files

FreeBSD/ports ba2b6b2 — shells/atuin Makefile distinfo

shells/atuin: update 18.24.6 → 18.24.8
DeltaFile
+39-13shells/atuin/distinfo
+19-6shells/atuin/Makefile
+58-192 files

FreeBSD/ports 0cc46b1 — misc/lean-ctx Makefile distinfo

misc/lean-ctx: update 3.12.3 → 3.12.4
DeltaFile
+3-3misc/lean-ctx/distinfo
+1-1misc/lean-ctx/Makefile
+4-42 files

FreeBSD/ports de62aaa — x11/rio Makefile distinfo

x11/rio: update 0.5.29 → 0.5.30
DeltaFile
+263-251x11/rio/distinfo
+131-125x11/rio/Makefile
+394-3762 files

FreeBSD/ports b929cc5 — misc/fabric Makefile distinfo

misc/fabric: update 1.4.568 → 1.4.569
DeltaFile
+5-5misc/fabric/distinfo
+1-2misc/fabric/Makefile
+6-72 files

FreeBSD/ports bb09026 — security/trufflehog Makefile distinfo

security/trufflehog: update 3.99.8 → 3.99.9
DeltaFile
+5-5security/trufflehog/distinfo
+1-2security/trufflehog/Makefile
+6-72 files

FreeBSD/ports 146d978 — devel/cli Makefile distinfo

devel/cli: update 2.2.0 → 2.3.0
DeltaFile
+15-0devel/cli/pkg-plist
+3-3devel/cli/distinfo
+3-2devel/cli/Makefile
+21-53 files

FreeBSD/doc 920e2e8 — website/data/en/events events2027.toml

website: Add 2027 events

Oh yeah, that's right, none of this "two weeks out" update,
we're adding the whole entire 2027, and it's still 2026 :)
Some of these do not have a finalized date and will need attention.

Reviewed by:            bcr, hrs
Discussed with:         adrian, cperciva
Differential Revision:  https://reviews.freebsd.org/D61237
DeltaFile
+73-0website/data/en/events/events2027.toml
+73-01 files

FreeBSD/src 553bb2a — lib/libsys aio_mlock.2

aio_mlock.2: Expand document description

+ The old one renders broken because Xr is not correct/portable in Nd
+ Take this opportunity to explain it better using mlock description

MFC after:              3 days
Reviewed by:            glebius
Differential Revision:  https://reviews.freebsd.org/D61334
DeltaFile
+2-4lib/libsys/aio_mlock.2
+2-41 files

FreeBSD/ports da30022 — misc/py-litellm Makefile distinfo

misc/py-litellm: Update to 1.109.1

Changelog: https://github.com/BerriAI/litellm/releases/tag/v1.109.1

Reported by:    portscout
DeltaFile
+3-3misc/py-litellm/distinfo
+2-2misc/py-litellm/Makefile
+5-52 files

FreeBSD/src 9329960 — tests/sys/kern ssl_sendfile.c

tests/sys/kern/ssl_sendfile: double timeouts for :grow and :truncate

The :grow and :truncate testcases fail semi-regularly in CI with
timeouts. Double the timeout to reduce false positives with the tests.

PR:             300699
MFC after:      1 week
Reviewed by:    siva
Differential Revision:  https://reviews.freebsd.org/D61444
DeltaFile
+21-2tests/sys/kern/ssl_sendfile.c
+21-21 files

FreeBSD/src 87e27bc — sys/dev/asmc asmc.c

asmc: include sys/kernel.h

This is needed for the `MODULE*` macros.

This include was accidentally removed in the linked commit.

MFC after:      1 week
Reported by:    Ian Freislich <ianfreislich at gmail.com>
Fixes:  c714cde179a4 ("asmc: split the sysctl layer into asmcsysctl.c")
DeltaFile
+1-0sys/dev/asmc/asmc.c
+1-01 files

FreeBSD/src ea8db65 — . UPDATING, sys/dev/iavf if_iavf_iflib.c

iflib: Use a single tx dma map

The need for a separate map for TSO and non-TSO seems to have arisen from
a misunderstanding about the DMA requirements for Intel drivers like
ice/ixl/iavf. Specifically, this Intel hardware has a quirk where no
more than N (=8) segs can be DMA'ed per packet on the wire. This limit
was enforced using a DMA map with a low segment limit for non-TSO and a
driver specific check for TSO. This led to a *lot* of complexity in
iflib (~80 extra lines of code that this change removes) when the
limit can simply be enforced via the existing EFBIG mechanisms.

This change adds a new flag, IFLIB_SPARSE_TX, that drivers for hardware
with this quirk must set.  When set, it causes non-TSO sends that
exceed isc_tx_nsegment to be treated as if bus_dmamap_load_mbuf_sg()
had returned EFBIG.

Due to the API/KABI change, I've bumped the FreeBSD version as well.

Note kgalazka suggested the flag, rather than a more awkward

    [12 lines not shown]
DeltaFile
+36-123sys/net/iflib.c
+9-0UPDATING
+4-1sys/net/iflib.h
+2-2sys/dev/ice/if_ice_iflib.c
+2-1sys/dev/ixl/if_ixl.c
+2-1sys/dev/iavf/if_iavf_iflib.c
+55-1281 files not shown
+56-1297 files

FreeBSD/ports a95e6c7 — devel/py-ty Makefile Makefile.crates

devel/py-ty: Update to 0.0.102

Changelog: https://github.com/astral-sh/ty/blob/0.0.102/CHANGELOG.md

Reported by:    portscout
DeltaFile
+57-59devel/py-ty/distinfo
+27-28devel/py-ty/Makefile.crates
+1-1devel/py-ty/Makefile
+85-883 files

FreeBSD/src 4edbd4e — usr.sbin/bsnmpd/modules/snmp_hostres hostres_snmp.h hostres_device_tbl.c

snmp_hostres(3): strengthen work on the devd(8) socket

Use the SOCK_SEQPACKET version of the socket.  This guarantees that
messages read won't be glued together.  Use sufficient buffer size to
read any message.

Close socket on any kind of error or a short read.

This also fixes a bug when a SOCK_STREAM socket containing exactly
multiple of 512 bytes would block the daemon in read(2) until some
other devd(8) event.  Thank to David for catching and analyzing it.

Reported by:            David Pfitzner <dpfitzner at netflix.com>

Reviewed by:            imp
Differential Revision:  https://reviews.freebsd.org/D61146
DeltaFile
+28-44usr.sbin/bsnmpd/modules/snmp_hostres/hostres_device_tbl.c
+0-3usr.sbin/bsnmpd/modules/snmp_hostres/hostres_snmp.h
+28-472 files

FreeBSD/src b1a7434 — include unistd.h, lib/libc/gen sysconf.c sysconf.3

devd: expose maximum record size via sysconf(3)

Use UMA allocation size that holds the buffer.  The buffer is actually
slightly smaller.  Document the latter so that clients don't need to use
+1 if they later want to NUL-terminate a message.

Reviewed by:            mjg, imp
Differential Revision:  https://reviews.freebsd.org/D61346
DeltaFile
+54-6sbin/devd/devd.8
+5-10sbin/devd/tests/client_test.c
+9-1lib/libc/gen/sysconf.3
+9-0sys/kern/kern_devctl.c
+7-0lib/libc/gen/sysconf.c
+4-0include/unistd.h
+88-176 files

FreeBSD/src 343afa2 — include unistd.h

unistd.h: sort sysconf(3) arguments

No functional change.  Keeping it sorted reduces chance of a collision.

Reviewed by:            kfv, imp
Differential Revision:  https://reviews.freebsd.org/D61345
DeltaFile
+19-9include/unistd.h
+19-91 files

FreeBSD/src 039ec3c — include paths.h, lib/libdevdctl consumer.cc

devd: define _PATH_DEVD_SOCKET in <paths.h>

Sweep through consumers and use the define.

Reviewed by:            kfv, imp
Differential Revision:  https://reviews.freebsd.org/D61344
DeltaFile
+2-2lib/libusb/libusb10_hotplug.c
+1-2sbin/devd/devd.cc
+2-1usr.sbin/moused/moused/moused.c
+2-1sbin/devd/tests/client_test.c
+2-1lib/libdevdctl/consumer.cc
+1-0include/paths.h
+10-76 files

FreeBSD/ports da6966f — devel/py-expression distinfo Makefile

devel/py-expression: Update to 6.0.1

Changelog: https://github.com/dbrattli/Expression/blob/v6.0.1/CHANGELOG.md

Reported by:    portscout
DeltaFile
+3-3devel/py-expression/distinfo
+3-3devel/py-expression/Makefile
+6-62 files

FreeBSD/src ef35572 — sys/net iflib.c

iflib: simplify TXQ_AVAIL

Simply the TXQ_AVAIL() macro to avoid using
get_inuse(txq->ift_size, txq->ift_cidx, txq->ift_pidx, txq->ift_gen)
and instead define it in terms of txq->ift_in_use.

Note that in_use is equivalent, because it is updated at the same time
as cidx/pidx and gen, and under the same serialization. The advantage
is that its cheaper due to using one read and no branches, and
safer, since unlocked reads get an atomic snapshot of availability,
but an unlocked read of multiple counters can produce inconsistent
results.

Reviewed by: kbowling, kgalazka
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D61279

(cherry picked from commit 44df82b11c535ae50b1e5888a361a2bd15d4182b)
DeltaFile
+7-10sys/net/iflib.c
+7-101 files

FreeBSD/src a9a9fd1 — sys/net iflib.c

iflib: rate limit deferred tx ring drain

When simple_tx gives up & return ENOBUFS because the tx ring is full,
we were doing a GROUPTASK_ENQUEUE(&txq->ift_task) each time.
On a tx ring that has overflowed and is being hammered on
by a fast UDP sender, this can result in a massive increase in
context switches (I've seen over 30M ctxw/sec due to this, and
the ctxsw codepath taking roughly 50% CPU).

This change removes the GROUPTASK_ENQUEUE() and replaces it
with a call to a callout which drains the tx ring. The callout time is
determined based on the link speed, estimating how long it would take
for a large fraction of of a ring containing full-MTU packets to drain.

This removes the 30M ctxsw / sec in my test case and reduces it
to roughly a doubling of ctxsws.

Reviewed by: kbowling
Sponsored by: Netflix

    [3 lines not shown]
DeltaFile
+54-10sys/net/iflib.c
+54-101 files

FreeBSD/src a2a0ded — sys/dev/tpm tpm20.h tpm20.c

tpm: crb: Support the ACPI start method

Some AMD firmware TPMs report StartMethod 2 and had no driver. They never
acknowledge CTRL_REQ, so skip the idle and ready requests.

Do not harvest entropy from these TPMs on AMD: on a Ryzen 7 7735HS each
periodic TPM2_GetRandom froze every CPU, for up to 1.2 s (AMD PA-410).

Reviewed by:    kbowling
Approved by:    kbowling
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/103

(cherry picked from commit 6af18560a124b84549713a5f2b667a1df0990929)
DeltaFile
+92-3sys/dev/tpm/tpm_crb.c
+11-6sys/dev/tpm/tpm20.c
+1-0sys/dev/tpm/tpm20.h
+104-93 files

FreeBSD/src 9a31307 — sys/dev/tpm tpm_crb.c

tpm_crb: Use locality registers only with plain CRB

The locality release wait times out on every command on a Framework 13
(Pluton start method), logging every 10 seconds.

Reported by:    emaste, tuexen
Reviewed by:    kbowling
Approved by:    kbowling
Fixes:          bfe4be85a935 ("tpm_crb: wait for idle and locality release after each command")

(cherry picked from commit 1dade7024457ee10df1ccae22e3c454e80f82b76)
DeltaFile
+11-5sys/dev/tpm/tpm_crb.c
+11-51 files

FreeBSD/src 052e37a — sys/dev/tpm tpm_crb.c

tpm_crb: wait for idle and locality release after each command

transmit only requested GO_IDLE and the locality release, so a back-to-back
command could see stale state and fail with EIO.
A post-send idle timeout no longer discards a completed response.

Reviewed by:    kbowling
Approved by:    kbowling
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/93

(cherry picked from commit bfe4be85a9354b92135e105028f2e1b3e0307ada)
DeltaFile
+32-7sys/dev/tpm/tpm_crb.c
+32-71 files

FreeBSD/src 133335c — sys/dev/tpm tpm_crb.c

tpm: crb: Dump register state on command failures

Include the command code in notification failures and the command code
and execution timeout in completion failures.  Capture CRB control
registers on completion timeouts and Pluton mailbox readiness or
acknowledgement timeouts, before cancellation or cleanup changes them.

Include locality registers when present and mailbox registers for the
Pluton start method.  The dump contains transport state without command
payloads or response data.

Tested by:      olivier, tuexen
Sponsored by:   BBOX.io
Differential Revision:  https://reviews.freebsd.org/D61128

(cherry picked from commit 915eb355d8fe8555f7a74c6db95bc3c02610a939)
DeltaFile
+31-2sys/dev/tpm/tpm_crb.c
+31-21 files

FreeBSD/src d6f6160 — sys/dev/tpm tpm_crb.c

tpm: crb: Correct the Pluton mailbox handshake

Pluton's REPLY register indicates readiness for a new notification, not
completion of the notification just sent.  Wait for REPLY=1 before
ringing the mailbox, then wait for START=0 when a synchronous state
change needs acknowledgement.

Use a separate command notification callback that waits for mailbox
readiness but leaves command completion to the existing CRB_CTRL_START
polling.  Bound readiness waits by TPM_TIMEOUT_C, including asynchronous
idle notifications, while retaining the command's execution timeout.

This resolves reported command timeouts on a Framework AMD laptop.

Tested by:      olivier, tuexen
Sponsored by:   BBOX.io
Differential Revision:  https://reviews.freebsd.org/D61128

(cherry picked from commit 4995fd4bf2c61e30363e588c5b90d7fc9145bf5e)
DeltaFile
+32-11sys/dev/tpm/tpm_crb.c
+32-111 files

FreeBSD/src 2e4649f — sys/dev/ixgbe if_ix.c

ixgbe: Restore EEE exclusion for X550EM_X KR

X550EM_X KR devices do not support EEE and have no setup_eee operation.
The shared-code update restored the capability removed by d61b6a41dd30,
and the E610 EEE support subsequently added an unchecked call during
attach. Together these changes allow a NULL function pointer call when
attaching a KR device.

Remove the incorrect EEE capability and use the NULL-safe ixgbe_setup_eee()
wrapper when enabling EEE at attach.

Removing the unsupported capability also stops exposing eee_state and the
eee.tx_lpi_count and eee.rx_lpi_count sysctls on X550EM_X_KR devices.

Fixes:  f72de14ea132 ("ixgbe: update if_ix and ixgbe api with ix-3.3.38 changes")
Fixes:  13ee84c591f8 ("ix(4): Add EEE support for E610 adapters")
Sponsored by:   BBOX.io

(cherry picked from commit 4678f9d8dc1324da6c021dc9d376a4671e72ad97)
DeltaFile
+1-3sys/dev/ixgbe/if_ix.c
+1-31 files

FreeBSD/src 641276e — sys/dev/ixgbe if_ix.c

ixgbe: Guard E610 Link Default Override access

Reading Link Default Override uses the E610 Admin Command Interface,
whose mutex is initialized only on E610.  Calling it on other adapters
can hang attach, as observed on X520.

Skip the read on non-E610 devices, leaving the cached policy invalid so
that the existing link-state guard also skips force-link commands.

Reviewed by:    kgalazka
Fixes:          7868958f5c79 ("ix(4): Support Total Port Shutdown on E610")
Sponsored by:   BBOX.io
Differential Revision:  https://reviews.freebsd.org/D61144

(cherry picked from commit 2c6b01416f80462b393bbe70a38cea017325dea8)
DeltaFile
+4-0sys/dev/ixgbe/if_ix.c
+4-01 files

FreeBSD/src 32fdc2b — sys/dev/ixgbe ixgbe.h ixgbe_e610.h

ix(4): Support Total Port Shutdown on E610

Firmware controls the physical link state on E610 adapters, similarly to
X700 and E800 adapters. As a result, running "ifconfig down" does not
disable the physical link unless Total Port Shutdown is enabled.

Read the Link Default Override TLV from NVM to detect when Total
Port Shutdown was enabled for given port in system setup. In that
case, force the link down when the interface is stopped and restore
it during link configuration. Leave link state management unchanged
when the TLV is unavailable or the feature is not enabled.

Co-authored-by: Miłosz Linkiewicz <milosz.linkiewicz at intel.com>
Co-authored-by: Tomasz Lichwala <tomasz.lichwala at intel.com>
Signed-off-by: Krzysztof Galazka <krzysztof.galazka at intel.com>

Tested by:      Mateusz Moga <mateusz.moga at intel.com>
Sponsored by:   Intel Corporation
Differential Revision:  https://reviews.freebsd.org/D60643

    [2 lines not shown]
DeltaFile
+82-1sys/dev/ixgbe/if_ix.c
+79-0sys/dev/ixgbe/ixgbe_e610.c
+17-0sys/dev/ixgbe/ixgbe_type_e610.h
+4-0sys/dev/ixgbe/ixgbe_e610.h
+2-0sys/dev/ixgbe/ixgbe.h
+184-15 files

FreeBSD/doc ce8cf46 — shared releases.adoc

15.2 is 15.2

Reported by:    Pau Amma
DeltaFile
+1-1shared/releases.adoc
+1-11 files