FreeBSD/src 3a4e037sys/dev/ixgbe if_fdir.c

ixgbe: Leave run-state publication to iflib during FDIR recovery

Rebuilding the Flow Director tables does not initialize the interface
or restore its queues.  Do not set IFF_DRV_RUNNING from that operation:
iflib owns the flag, and may have cleared it while a watchdog reset is
pending.  Restoring it here could admit traffic before the deferred
stop and initialization have run.

Keep the table rebuild and Flow Director interrupt re-enable unchanged.
This path is conditional on IXGBE_FDIR.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+0-3sys/dev/ixgbe/if_fdir.c
+0-31 files

FreeBSD/src 33be59bsys/dev/ice if_ice_iflib.c

ice: Use the mirror interface softc in PF callbacks

PF iflib callbacks receive struct ice_softc, not struct ice_mirr_if.
Resolve the mirror interface through sc->mirr_if before checking or
resetting subinterface state.

Use the same mirror softc when rebuilding its VSI.  This records the
required subinterface reset in the state consumed by the PF callback,
rather than overlaying the PF softc and leaving rebuilt queues stopped.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+12-8sys/dev/ice/if_ice_iflib.c
+12-81 files

FreeBSD/src 372803dsys/dev/ixl ixl_pf_iflib.c

ixl: Set critical-error state bits independently

ixl_set_state() takes a bit index, not a bit mask.  ORing the
reset request and critical error indices produced the global reset
index, so a critical interrupt could mask its cause without scheduling
the intended PF reset.

Set both state bits explicitly.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+2-2sys/dev/ixl/ixl_pf_iflib.c
+2-21 files

FreeBSD/src 99eaf07sys/dev/vmware/vmxnet3 if_vmx.c

vmxnet3: Propagate device-enable failure to iflib

Do not let iflib publish a running interface when the virtual device
rejected its enable command.  Mark initialization failed and leave the
interface stopped.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+4-1sys/dev/vmware/vmxnet3/if_vmx.c
+4-11 files

FreeBSD/src f496cd9share/man/man9 iflibdd.9

iflibdd(9): Clarify resume during suspend rollback

The resume callback also runs when suspend fails, without an intervening
PCI power-state transition or configuration-space restore.  Document
that drivers must not assume either has occurred.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+4-0share/man/man9/iflibdd.9
+4-01 files

FreeBSD/src 45dc4a1sys/dev/ixgbe ixgbe.h if_ix.c

ixgbe: Pause firmware recovery polling in low power

The firmware recovery callout continues polling controller registers
after a power transition.  An inaccessible E610 GL_MNG_FWSM register
reads as all ones in D3, which looks like firmware recovery mode and
queues an iflib reset while the device is suspended.  A later D0 poll
then reports recovery complete and queues another reset.

Pause and drain the callout before terminal stop policy is applied,
prevent an in-flight callback from rearming it, and restart polling
only after resume has cleared the wake state.  Track callout
initialization so partial attach cleanup does not drain an uninitialized
callout.

The false transition was reproduced on a dual-port E610 with direct D3
and system S3.  Validate the guard with wake-disabled and wake-armed D3,
three repeated D3 cycles per port, and an S3 magic-packet wake.  Both
ports returned to D0 without a false recovery transition.


    [2 lines not shown]
DeltaFile
+33-5sys/dev/ixgbe/if_ix.c
+2-0sys/dev/ixgbe/ixgbe.h
+35-52 files

FreeBSD/src 62dd064share/man/man9 iflibdd.9, sys/net iflib.c

iflib: Reject media changes during suspend

iflib gates its built-in administrative and media-status callbacks once
a power transition starts, but iflib_media_change() could still invoke a
driver while the device was suspending or suspended.  Several drivers
perform PHY or firmware I/O directly from this callback.

Return EBUSY before invoking IFDI_MEDIA_CHANGE() unless the device is
active.  ifmedia then restores the prior selection, avoiding both
suspended hardware access and an unvalidated configuration that would
need to be replayed during resume.

Validated with device suspend on 82579LM, I210, and I225-IT
controllers.  Media-selection requests returned EBUSY on every
suspended device.  Resume restored the linked management interfaces at
1 Gbps with working traffic and no watchdogs; unconfigured interfaces
retained their prior admin and link state.

Reviewed by:    iflib (gallatin)

    [3 lines not shown]
DeltaFile
+4-0sys/net/iflib.c
+3-0share/man/man9/iflibdd.9
+7-02 files

FreeBSD/src 2b2cc52share/man/man9 iflibdd.9, sys/dev/ice if_ice_iflib.c

iflib: Own queue quiescence during power transitions

Perform a terminal datapath stop before suspend and shutdown
callbacks, then drain the private configuration taskqueue before
entering low power.  Track power state independently of queue
ownership and prevent built-in admin, IOV, LED, and media-status
callbacks from accessing a suspended device.

Restore driver-specific state while the datapath remains stopped.
Initialize it exactly once on resume when the interface is
administratively up, and keep an administratively-down interface
stopped.  Roll back the driver when suspend or child suspension fails.

Add ifdi_power_prepare() for policy which must be established before
the terminal stop.  Use it to snapshot ixgbe(4) wake policy and preserve
X550EM PHY ordering, and remove the duplicate stop from aq(4).

Reviewed by:    iflib (gallatin)
MFC after:      2 weeks

    [2 lines not shown]
DeltaFile
+148-12sys/net/iflib.c
+39-3share/man/man9/iflibdd.9
+23-18sys/dev/ixgbe/if_ix.c
+17-0sys/net/ifdi_if.m
+7-0sys/net/iflib.h
+2-2sys/dev/ice/if_ice_iflib.c
+236-352 files not shown
+238-388 files

FreeBSD/ports 8f48a1cMk bsd.sites.mk, Mk/Uses cargo.mk

bsd.sites.mk: use static CDN to download rust crates

static.crates.io is the recommended upstream download
path. This avoids "403 Forbidden" rate limiting results
when trying to download crates too fast. This also
seems to improve download speeds/latency.

As per https://crates.io/data-access#crate-content,

> Crates can be downloaded directly from the crates.io CDN
> [...]
> No rate limits apply to static.crates.io at present.

And as per https://crates.io/data-access#api,

> you are welcome to use the crates.io API provided you abide by the following limits:
> * A maximum of 1 request per second, and
> * A user-agent header that identifies your application.


    [5 lines not shown]
DeltaFile
+1-1Mk/bsd.sites.mk
+1-1Mk/Uses/cargo.mk
+2-22 files

FreeBSD/ports acb85c1graphics/scantpaper Makefile distinfo

graphics/scantpaper: update to 3.0.18

Announcement:
  https://sourceforge.net/p/gscan2pdf/mailman/message/59388457/
DeltaFile
+3-3graphics/scantpaper/distinfo
+6-0graphics/scantpaper/pkg-plist
+2-2graphics/scantpaper/Makefile
+11-53 files

FreeBSD/ports 58c4481net/rustconn Makefile Makefile.crates

net/rustconn: Update to 0.21.11

ChangeLog:

1. https://github.com/totoshko88/RustConn/releases/tag/v0.21.11

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+559-559net/rustconn/distinfo
+6-6net/rustconn/Makefile.crates
+1-1net/rustconn/Makefile
+566-5663 files

FreeBSD/src fb8fcd4share/man/man9 iflibdd.9, sys/net iflib.c

iflib: Track queue datapath lifecycle

Track whether iflib queue mappings may still be accessed by the
device.  Keep the state private to iflib and conservative: an unknown
or failed device must pass through IFDI_STOP() before mappings are
reused or released, while a device known to be stopped need not
receive another hardware stop.

Enter the starting state before IFDI_INIT(), publish running only
after receive buffers and framework state are ready, and stop hardware
if receive-buffer setup fails after driver initialization.

Do not initialize an administratively-down interface merely because
its MTU, capabilities, VLAN configuration, or media changed.  Preserve
successful retries for an administratively-up interface whose previous
initialization failed.

This state describes ownership of iflib datapath mappings only.  It
deliberately makes no claim about firmware queues, administrative DMA,

    [6 lines not shown]
DeltaFile
+95-32sys/net/iflib.c
+11-3share/man/man9/iflibdd.9
+106-352 files

FreeBSD/ports 9a316b5sysutils/bhyvemgr pkg-plist Makefile

sysutils/bhyvemgr: Update to 2.1.0

- Add support for zfs storage snapshot
- Improve TPM support

ChangeLog at:   https://github.com/alonsobsd/bhyvemgr/releases/tag/v2.1.0
DeltaFile
+3-3sysutils/bhyvemgr/distinfo
+2-2sysutils/bhyvemgr/Makefile
+1-0sysutils/bhyvemgr/pkg-plist
+6-53 files

FreeBSD/doc 782323cdocumentation/content/en/books/handbook/advanced-networking _index.adoc

handbook/advanced-networking: Change http link to https

PR:         297884
Location:   Impromptu hacker lounge at speaker hotel breakfast room
Event:      EuroBSDcon 2026
DeltaFile
+1-1documentation/content/en/books/handbook/advanced-networking/_index.adoc
+1-11 files

FreeBSD/ports 360f135sysutils/bhyvemgrd Makefile distinfo

sysutils/bhyvemgrd: Update to 1.2.0

- Add zfs snapshot/destroy/rollback functions to include storage
  snapshot support

ChangeLog at:   https://github.com/alonsobsd/bhyvemgrd/releases/tag/v1.2.0
DeltaFile
+3-3sysutils/bhyvemgrd/distinfo
+1-1sysutils/bhyvemgrd/Makefile
+4-42 files

FreeBSD/ports 04f24b2security/gopass Makefile distinfo

security/gopass: Update to 1.17.2

ChangeLog:      https://github.com/gopasspw/gopass/releases/tag/v1.17.2
                https://github.com/gopasspw/gopass/releases/tag/v1.17.1
MFH:            2026Q3
(cherry picked from commit 211be70dc71f5b55bb84e4f7496ecfc00e4d71f9)
DeltaFile
+7-7security/gopass/distinfo
+1-1security/gopass/Makefile
+8-82 files

FreeBSD/ports 42d75fasecurity/gopass Makefile distinfo

security/gopass: Update to 1.17.0

ChangeLog: https://github.com/gopasspw/gopass/releases/tag/v1.17.0
(cherry picked from commit ff5fe3fd162f87b5b04483ea41b0dd90072ee6ea)
DeltaFile
+7-7security/gopass/distinfo
+2-3security/gopass/Makefile
+9-102 files

FreeBSD/doc a8b5d58documentation/content/en/books/handbook/virtualization _index.adoc

handbook/virtualization: Change broken link to FreeBSD github repos

The original links to the github repos no longer work, so replace them
with a link to the FreeBSD repository.

PR:         297182
Location:   Impromptu hacker lounge at speaker hotel breakfast room
Event:      EuroBSDcon 2026
DeltaFile
+1-1documentation/content/en/books/handbook/virtualization/_index.adoc
+1-11 files

FreeBSD/ports bb46197security/cryptopp-modern pkg-plist distinfo

security/cryptopp-modern: Update to 2026.8.1

- Put testing as safe

ChangeLog:
https://github.com/cryptopp-modern/cryptopp-modern/releases/tag/2026.8.1
(cherry picked from commit 3dc2a6a2f1615a1162afd061f4ac6b63287458d9)
DeltaFile
+3-3security/cryptopp-modern/distinfo
+3-3security/cryptopp-modern/Makefile
+1-1security/cryptopp-modern/pkg-plist
+7-73 files

FreeBSD/ports 3c776c0security/cryptopp-modern Makefile distinfo, security/cryptopp-modern/files patch-pull76

security/cryptopp-modern: Update to 2026.9.1

ChangeLog:
https://github.com/cryptopp-modern/cryptopp-modern/releases/tag/2026.9.1

MFH:            2026Q3
(cherry picked from commit a481ad6449f3e67daebf914d71a59c8867ba09b3)
DeltaFile
+0-162security/cryptopp-modern/files/patch-pull76
+3-3security/cryptopp-modern/distinfo
+2-3security/cryptopp-modern/Makefile
+5-1683 files

FreeBSD/ports 761a115security/cryptopp-modern Makefile pkg-plist, security/cryptopp-modern/files patch-pull76

security/cryptopp-modern: Add TOOLS option

TOOLS option will install cryptest toguether with TestData and TestVectors,
allowing the installed binary to run cryptest v and cryptest tv as post-install
checks.

PR:             297278
(cherry picked from commit 9bdadd2ec97025b8d949fe39df30d97b4046242e)
DeltaFile
+164-0security/cryptopp-modern/pkg-plist
+162-0security/cryptopp-modern/files/patch-pull76
+12-0security/cryptopp-modern/Makefile
+338-03 files

FreeBSD/ports 3c4e385security/cryptopp-modern distinfo Makefile

security/cryptopp-modern: Update to 2026.8.0

- Build with -DCRYPTOPP_BUILD_SHARED=ON
- Set tests as TESTING_UNSAFE

ChangeLog:
https://github.com/cryptopp-modern/cryptopp-modern/releases/tag/2026.8.0
(cherry picked from commit 3b83c364ef8a8b4636b04b04fd568c852a870fa6)
DeltaFile
+5-3security/cryptopp-modern/pkg-plist
+5-2security/cryptopp-modern/Makefile
+3-3security/cryptopp-modern/distinfo
+13-83 files

FreeBSD/ports a481ad6security/cryptopp-modern Makefile distinfo, security/cryptopp-modern/files patch-pull76

security/cryptopp-modern: Update to 2026.9.1

ChangeLog:
https://github.com/cryptopp-modern/cryptopp-modern/releases/tag/2026.9.1

MFH:            2026Q3
DeltaFile
+0-162security/cryptopp-modern/files/patch-pull76
+3-3security/cryptopp-modern/distinfo
+2-3security/cryptopp-modern/Makefile
+5-1683 files

FreeBSD/ports 211be70security/gopass Makefile distinfo

security/gopass: Update to 1.17.2

ChangeLog:      https://github.com/gopasspw/gopass/releases/tag/v1.17.2
                https://github.com/gopasspw/gopass/releases/tag/v1.17.1
MFH:            2026Q3
DeltaFile
+7-7security/gopass/distinfo
+1-2security/gopass/Makefile
+8-92 files

FreeBSD/ports 15ba0ealang/ldc Makefile

lang/ldc: fix build on powerpc64*

Use proper bootstrap filename.
DeltaFile
+5-2lang/ldc/Makefile
+5-21 files

FreeBSD/src cb82cc9lib/msun/tests fma_test.c

lib/msun: add tests for fmaf(3) subnormals

PR:     298260
Reviewed by:    kib
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D59579
DeltaFile
+27-1lib/msun/tests/fma_test.c
+27-11 files

FreeBSD/src b08e6a3lib/msun/src s_fmaf.c

lib/msun: use the same algorithm for sw fmaf(3) as for fma(3)

This fixes rounding at the last bit for subnormals.

PR:     298260
Reviewed by:    kib
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D59579
DeltaFile
+230-24lib/msun/src/s_fmaf.c
+230-241 files

FreeBSD/src 26248c3sys/kern uipc_mbuf.c, sys/net if_bridge.c

if_bridge: pull up only the headers bridge_pfil() inspects

bridge_pfil() pulled up min(m_pkthdr.len, max_protohdr) bytes.  When the
mapped head is shorter than that and followed by an unmapped (M_EXTPG)
mbuf -- a sendfile(2) or KTLS segment from a member advertising
IFCAP_MEXTPG -- m_pullup() ran into it and dereferenced a NULL mtod(),
panicking the kernel.

Pull up the Ethernet header first, and the SNAP/LLC header only for an
802.3 frame.  This is similar to pf and ip_output().

m_pullup() and m_copyup() asserted only the first mbuf; assert inside both
copy loops so the shape trips the check.

Fixes:          c38abd64dbc1 ("if_epair: support IFCAP_MEXTPG")
Suggested by:   markj
Reviewed by:    markj, gallatin
Assisted-by:    Claude Code (Fable 5, Opus 5)
DeltaFile
+23-10sys/net/if_bridge.c
+4-0sys/kern/uipc_mbuf.c
+27-102 files

FreeBSD/src 8209ceesys/net if_bridge.c

if_bridge: count the drops on the fragmentation path

bridge_pfil() returned a fragmentation failure without counting it,
and bridge_fragment() dropped a chain on three allocation failures
without counting those either.

Count the first on the filtered interface and the others with
ips_odropped, which is what ip_fragment() uses for the same failure
and what bridge_fragment() already uses for its success case.

Reviewed by:    gallatin
Differential Revision:  https://reviews.freebsd.org/D59391
Assisted-by:    Claude Code (Fable 5, Opus 5)
DeltaFile
+9-1sys/net/if_bridge.c
+9-11 files

FreeBSD/src 1624620include/arpa telnet.h

arpa/telnet: Fix a typo in a source code comment

- s/ascic/ASCII/

MFC after:      3 days
DeltaFile
+1-1include/arpa/telnet.h
+1-11 files