FreeBSD/src a3daa1esys/dev/tpm tpm20.h tpm20.c

tpm20: Harden the common device lifecycle

Mark the device as dying before teardown and destroy the character
device before freeing its private state or lock.  This prevents cdev
methods from entering with a freed internal buffer or a destroyed sx.

Check the teardown state in command paths, honor failures from the cdev
private data interface, and publish teardown before waiting for the
lifecycle lock.  Keep that lock across TPM retry delays so commands
cannot interpose and private state remains pinned, but abort before the
next retry once teardown begins.

Block new cdev operations after a successful Shutdown(STATE).  Keep the
suspend gate and the TPM command under the same lock so a userspace
command cannot invalidate the saved state before S3 entry.  Clear the
gate only after Startup(STATE) succeeds.

Keep entropy harvesting scheduled after a transient command or suspend
failure, but stop it while suspended or once teardown begins.  Queue the

    [14 lines not shown]
DeltaFile
+124-46sys/dev/tpm/tpm20.c
+2-0sys/dev/tpm/tpm20.h
+126-462 files

FreeBSD/src a229432sys/dev/tpm tpm20.h tpm_tis_core.c

tpm_tis: Restore validated interrupts after resume

TIS interrupt routing and enable registers may lose their state across
S3, while the driver retains its software indication that interrupts
work.  A subsequent locality or command wait can then sleep for an
interrupt that cannot arrive.

Remember whether interrupts worked before suspend and restore the
vector, pending status, and enable mask before TPM2_Startup.  Put the
transport in polling mode first; the interrupt handler promotes it back
to interrupt waits only after observing an interrupt from the restored
configuration.  If register restoration fails, Startup and subsequent
commands continue using polling.

Preserve the initial interrupt-enable mask, including the firmware's
trigger and polarity selection proven by the attach time interrupt test,
and restore that exact mask rather than accepting post-S3 defaults.

Program the same safe baseline for polling devices during attach and

    [16 lines not shown]
DeltaFile
+80-24sys/dev/tpm/tpm_tis_core.c
+1-0sys/dev/tpm/tpm20.h
+81-242 files

FreeBSD/src a0da653sys/dev/tpm tpm20.h tpm_tis_core.c

tpm20: Initialize common state before testing TIS interrupts

The TIS attach path tested its interrupt by transmitting GetRandom
before tpm20_init() allocated the internal command buffer.  A TPM2 FIFO
device with a usable IRQ could therefore dereference a null
internal_priv.

Initialize the common TPM2 state before running the interrupt test.
Make common cleanup safe for partially initialized devices and leave
cleanup to the attachment after tpm20_init() fails, avoiding duplicate
release of the lock, command buffer, and random-source state.

Clear the IRQ resource pointer after releasing it when interrupt handler
setup fails so the later polling-mode detach does not release it twice.

Free the internal command allocation through its object pointer rather
than relying on its embedded buffer being the first structure member.

Reviewed by:    kevans

    [3 lines not shown]
DeltaFile
+14-5sys/dev/tpm/tpm20.c
+9-5sys/dev/tpm/tpm_tis_core.c
+1-0sys/dev/tpm/tpm20.h
+24-103 files

FreeBSD/src 726f096sys/dev/tpm tpm20.h tpm20.c

tpm20: Validate suspend and resume commands

The internal TPM2_Shutdown and TPM2_Startup paths ignored both transport
failures and the TPM response.  Suspend could therefore enter S3 without
saved TPM state, while resume could restart entropy harvesting after a
failed state restoration.

Build both commands through one helper, validate their response framing
and TPM return codes, and propagate failures.  Retry the standard RETRY
and TESTING responses with bounded exponential backoff.  Accept
TPM_RC_INITIALIZE from Startup because firmware may already have started
the TPM during resume.

Do not enter S3 after an unsuccessful state save, and do not restart the
entropy task when TPM state restoration failed.  If Shutdown fails after
the entropy task was drained, requeue it before returning so an aborted
suspend does not permanently stop harvesting.

Reviewed by:    kevans

    [3 lines not shown]
DeltaFile
+102-62sys/dev/tpm/tpm20.c
+2-0sys/dev/tpm/tpm20.h
+104-622 files

FreeBSD/ports 8a8a26ddns/wdns Makefile distinfo

dns/wdns: Upgrade to 0.13.0

0.13.0:
  * Remove strict aliasing violations.

  * Replace Python dependency with shell script.

  * Fix various off-by-one errors in bounds checking.

  * Various small build and test fixes.

MFH:            2026Q3
Sponsored by:   DomainTools LLC
DeltaFile
+3-3dns/wdns/distinfo
+1-1dns/wdns/Makefile
+4-42 files

FreeBSD/src d5aa802sys/dev/ixl if_ixl.c

ixl: Route suspend and resume through iflib

Register the iflib device suspend and resume methods.  Remove the
direct initialization from the driver resume callback because
iflib_device_resume() performs the datapath restart after the callback
returns.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+2-6sys/dev/ixl/if_ixl.c
+2-61 files

FreeBSD/src 10d09e6sys/dev/ixgbe if_ixv.c

ixv: Wire iflib suspend and resume methods

Register the standard iflib device suspend and resume methods so the
framework reinitializes the VF datapath after a system power
transition.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+2-0sys/dev/ixgbe/if_ixv.c
+2-01 files

FreeBSD/src b8fe6d7sys/dev/iavf if_iavf_iflib.c

iavf: Wire iflib suspend and resume methods

Register the iflib device suspend and resume methods so the existing
driver callbacks run during system power transitions.  This stops
mailbox retry work before suspend and lets iflib reinitialize the
datapath after resume.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+2-0sys/dev/iavf/if_iavf_iflib.c
+2-01 files

FreeBSD/src 2397b18sys/dev/axgbe if_axgbe_pci.c

axgbe: Wire iflib power management methods

Register the standard iflib device methods for shutdown, suspend, and
resume.  This gives axgbe the framework managed reinitialization used by
other iflib drivers after a power transition.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+3-0sys/dev/axgbe/if_axgbe_pci.c
+3-01 files

FreeBSD/src 58f9855sys/dev/enic if_enic.c

enic: Route resets through iflib lifecycle

Mark the driver stopped after attach so its first IFDI_STOP() call
does not repeat hardware shutdown.

Defer error interrupt recovery through iflib instead of calling
driver stop and init methods from interrupt context.  Let iflib own
the stop and restart around MTU changes as well, avoiding duplicate
lifecycle operations.

MFC after:      2 weeks
Sponsored by:   BBOX.io
DeltaFile
+4-4sys/dev/enic/if_enic.c
+4-41 files

FreeBSD/src 799061fsys/fs/nfsclient nfs_clrpcops.c, sys/rpc clntrdma.h

nfscl: A few more fixes for the NFS over RDMA client glue

A couple of additional fixes for the NFS client side RDMA glue:
- For Readdirplus, the reply needs to be a large chunk, so set
  M_PROTO9 instead of M_PROTO8.
- The nfsclrdma.ko module now uses xprt_rdma_unmap_chunk()
  instead of xprt_rdma_rekey_chunk().

Hopefully, this is it for the NFS over RDMA client glue changes.

MFC after:      3 months
Fixes:  884ee8d6c9b4 ("nfscl: Add some glue for client side NFS over RDMA")
DeltaFile
+1-3sys/rpc/clntrdma.h
+1-1sys/fs/nfsclient/nfs_clrpcops.c
+2-42 files

FreeBSD/src bbaf254etc/mtree BSD.tests.dist, sbin/fsck_msdosfs Makefile

fsck_msdosfs: add tests for lost cluster chain repair accounting

Add an ATF test suite covering Phase 3 ("Checking for Lost Files")
error accounting.  Test images are created using newfs_msdos(8),
and lost cluster chains are injected directly into FAT copies at
offsets derived from the BPB.  The LOST.DIR directory required by
reconnect() is constructed similarly: a root directory entry with
ATTR_DIRECTORY set and its first cluster pointing to a zero-filled
cluster containing "." and ".." entries.

The lost_chain_cleared and corrupted_lost_chain_reconnected test
cases provide regression coverage for the preceding commit:
 - lost_chain_cleared verifies that clearing a lost chain (the fallback
   taken when LOST.DIR is absent) exits with status 0 rather than 8
   (unrecovered error).
 - corrupted_lost_chain_reconnected verifies that FAT modifications
   from a chain truncated by checkchain() prior to reconnection are
   written back to disk, requiring "Update FATs? yes" and ensuring a
   clean second pass.

    [8 lines not shown]
DeltaFile
+261-0sbin/fsck_msdosfs/tests/fsck_msdosfs_test.sh
+5-0sbin/fsck_msdosfs/Makefile
+5-0sbin/fsck_msdosfs/tests/Makefile
+2-0etc/mtree/BSD.tests.dist
+273-04 files

FreeBSD/src 6cf0d6csbin/fsck_msdosfs fat.c

fsck_msdosfs: fix status accounting for lost cluster chains

checklost() scans for lost cluster chains and attempts to
repair each one, first by reconnecting it to LOST.DIR,
and falling back to clearing it if reconnection fails.
However, checklost() incorrectly updates the modification
status flags (mod), which checkfilesys() relies on to
determine whether to write back changes and what exit
status to return.

The current code have three issues:

1. A reconnect() failure immediately sets FSERROR in mod
   via "mod |= ret = reconnect(...)".  If reconnect() failed
   (e.g., because LOST.DIR is missing, or full) but the
   fallback clear operation succeeds, clearchain() frees the
   chain and sets FSFATMOD.  However, the leftover FSERROR
   remains in mod: checkfilesys() skips marking the file system
   clean and exits with status 8, even though the file system was

    [30 lines not shown]
DeltaFile
+32-9sbin/fsck_msdosfs/fat.c
+32-91 files

FreeBSD/doc a6a6decdocumentation/static/pgpkeys tagattie.key

pgpkeys: Update key for tagattie
DeltaFile
+22-41documentation/static/pgpkeys/tagattie.key
+22-411 files

FreeBSD/ports 86d4e0fdevel/py-lxml Makefile distinfo

Revert "devel/py-lxml: update to 6.1.3"

Requires at least newer minor version of lang/cython 3.2.9.

Reported by: fallout

This reverts commit 3dba3a5bc9a24ad56d9312a8cb2b64eeab56cb40.
DeltaFile
+3-3devel/py-lxml/distinfo
+1-1devel/py-lxml/Makefile
+4-42 files

FreeBSD/ports 97e3d4farchivers/zim-tools Makefile, devel/p5-Alien-LibGumbo Makefile

*/*: Bump consumers of devel/gumbo after soname changed: libgumbo.so.3 => libgumbo.so.4

PR:             298115
Sponsored by:   UNIS Labs
DeltaFile
+1-1www/onlyoffice-documentserver/Makefile
+1-1net/freeswitch/Makefile
+1-1devel/p5-Alien-LibGumbo/Makefile
+1-1archivers/zim-tools/Makefile
+1-0www/tdom/Makefile
+1-0www/newsraft/Makefile
+6-43 files not shown
+9-49 files

FreeBSD/src 17fb428usr.sbin/bhyve pci_passthru.c

bhyve: Keep passthrough PCI power state virtual

The passthrough Command register is emulated, but PMCSR writes were
sent directly to the physical function.  A guest D3hot-to-D0 transition
can perform an internal reset and clear physical Command while its
emulated copy remains enabled.

Cache the Power Management capability and keep the physical D-state
host-owned.  Emulate the guest D-state and advertise No_Soft_Reset so
the guest is not promised a function reset by a virtual power cycle.
Restore the assignment-time virtual state after a managed FLR.

Reviewed by:    markj
Sponsored by:   BBOX.io

(cherry picked from commit 3b90096cf9bcaec70b717e9ff0a9e23d14b600b6)
DeltaFile
+51-2usr.sbin/bhyve/pci_passthru.c
+51-21 files

FreeBSD/src f44cde3lib/libvmmapi ppt.c, sys/amd64/vmm vmm.c vmm_dev_machdep.c

bhyve: Manage passthrough devices across guest FLR

bhyve emulates the guest PCI Command register so BAR sizing does not
disable physical decoding.  However, PCIe Device Control was passed
through.  A guest VFIO reset therefore performed a physical FLR, which
cleared physical Command, while the guest restored only its emulated
copy.  The device remained assigned with bus mastering disabled and
could not fetch DMA descriptors.

Intercept guest FLR writes and issue a PPT-managed reset.  Stop all
vCPUs, verify ownership, quiesce the function, perform only an FLR, and
restore the host-owned PCI configuration, decode, and bus-master state.
Keep the IOMMU domain in place.  bhyve removes guest BAR mappings before
this ioctl; a later guest MEMEN write recreates them.  Never escalate a
guest FLR to a power reset.

Reset the guest-owned Command, MSI, MSI-X, MSI-X table, INTx, and MRRS
state.  PCIe 6.2 section 6.6.2 explicitly preserves MPS across FLR.
Virtualize MPS, MRRS, and Completion Timeout.  Keep physical MPS and

    [27 lines not shown]
DeltaFile
+347-7usr.sbin/bhyve/pci_passthru.c
+124-10sys/amd64/vmm/io/ppt.c
+10-3usr.sbin/bhyve/pci_emul.c
+13-0lib/libvmmapi/ppt.c
+10-0sys/amd64/vmm/vmm_dev_machdep.c
+7-0sys/amd64/vmm/vmm.c
+511-206 files not shown
+520-2112 files

FreeBSD/src 61b2ea4sys/dev/e1000 if_em.c

e1000: Report 82571 packet buffer ECC errors

The 82571 PBA_ECC register contains a 12-bit count of packet buffer ECC
detections.  The shared code enables single-bit correction, but neither
FreeBSD nor the DPDK base driver consumes the counter.

Sample it with the ordinary statistics timer, accumulate the value under
dev.em.N.memory_errors.detected_packet_buffer, and clear the hardware
counter while preserving correction and reserved register state.  Do not
enable its shared interrupt: the register does not distinguish corrected
from uncorrectable events and does not provide a safe fatal recovery
policy.

Validated on a dual port 82571EB.  Both functions reported zero after a
clean boot, and a controlled link down/up cycle left the counter at zero
while the management link recovered at 1 Gb/s without issue.

Sponsored by:   BBOX.io

(cherry picked from commit aec0f1b85b54d14819747ed3364f366d21e76d88)
DeltaFile
+47-7sys/dev/e1000/if_em.c
+47-71 files

FreeBSD/src 3c928cc. UPDATING, share/man/man9 iflibtxrx.9

iflib: Plumb per-packet RX hardware timestamps to mbufs

Add iri_rcv_tstmp to if_rxd_info so an isc_rxd_pkt_get() driver can
report a hardware RX timestamp.  Copy it into m_pkthdr.rcv_tstmp,
reusing the generic mbuf timestamp path.

Widen iri_flags from uint8_t to uint32_t and define the flags drivers
may supply.  Mask the flags before copying them into the mbuf so no
other mbuf state can leak through the driver callback.

Place the timestamp next to iri_frags to avoid an alignment hole, and
document its nanoseconds-since-boot representation and validity flags.
Bump __FreeBSD_version because changing if_rxd_info breaks KBI.

Reviewed by:    gallatin
Signed-off-by:  Sreekanth Reddy <sreekanth.reddy at broadcom.com>
Differential Revision:  https://reviews.freebsd.org/D58638
DeltaFile
+18-4share/man/man9/iflibtxrx.9
+9-1sys/net/iflib.h
+4-0UPDATING
+2-1sys/net/iflib.c
+1-1sys/sys/param.h
+34-75 files

FreeBSD/ports 9230c15devel/gumbo Makefile pkg-plist

devel/gumbo: Update 0.13.2 => 0.14.0

Changelog:
https://codeberg.org/gumbo-parser/gumbo-parser/src/tag/0.14.0/CHANGES.md

PR:             298115
Sponsored by:   UNIS Labs
DeltaFile
+3-3devel/gumbo/distinfo
+2-2devel/gumbo/pkg-plist
+1-2devel/gumbo/Makefile
+6-73 files

FreeBSD/ports 7a0d924www/gallery-dl Makefile distinfo

www/gallery-dl: update to 1.32.10

Changes:        https://github.com/mikf/gallery-dl/releases/tag/v1.32.10
Reported by:    GitHub (watch releases)

(cherry picked from commit 73a3f40178994bf35c04ee5936e0daada84e439b)
DeltaFile
+3-3www/gallery-dl/distinfo
+1-1www/gallery-dl/Makefile
+4-42 files

FreeBSD/ports d79e3cegraphics/mesa-devel Makefile distinfo

graphics/mesa-devel: update to 26.2.b.2612

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/d45779b345c...946b15ec48a
DeltaFile
+3-3graphics/mesa-devel/distinfo
+2-2graphics/mesa-devel/Makefile
+5-52 files

FreeBSD/ports 6e71bf9devel/spirv-llvm-translator distinfo.llvm23 distinfo.llvm22

devel/spirv-llvm-translator: update to August releases

Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v14.0.27
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v15.0.27
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v16.0.28
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v17.0.27
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v18.1.27
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v19.1.22
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v20.1.17
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v21.1.11
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v22.1.6
Changes:        https://github.com/KhronosGroup/SPIRV-LLVM-Translator/releases/tag/v23.1.1
Reported by:    GitHub (watch releases)
DeltaFile
+10-10devel/spirv-llvm-translator/Makefile
+3-3devel/spirv-llvm-translator/distinfo.llvm23
+3-3devel/spirv-llvm-translator/distinfo.llvm22
+3-3devel/spirv-llvm-translator/distinfo.llvm21
+3-3devel/spirv-llvm-translator/distinfo.llvm20
+3-3devel/spirv-llvm-translator/distinfo.llvm19
+25-255 files not shown
+40-4011 files

FreeBSD/ports b29eacedevel/git-cinnabar Makefile Makefile.crates

devel/git-cinnabar: update to 0.7.4

Changes:        https://github.com/glandium/git-cinnabar/releases/tag/0.7.4
Reported by:    GitHub (watch releases)
DeltaFile
+107-117devel/git-cinnabar/distinfo
+51-56devel/git-cinnabar/Makefile.crates
+2-3devel/git-cinnabar/Makefile
+160-1763 files

FreeBSD/ports 73a3f40www/gallery-dl Makefile distinfo

www/gallery-dl: update to 1.32.10

Changes:        https://github.com/mikf/gallery-dl/releases/tag/v1.32.10
Reported by:    GitHub (watch releases)
DeltaFile
+3-3www/gallery-dl/distinfo
+1-1www/gallery-dl/Makefile
+4-42 files

FreeBSD/ports 9808ebemultimedia/libva-nvidia-driver Makefile distinfo

multimedia/libva-nvidia-driver: update to 0.0.18

Changes:        https://github.com/elFarto/nvidia-vaapi-driver/releases/tag/v0.0.18
Reported by:    GitHub (watch releases)
DeltaFile
+3-3multimedia/libva-nvidia-driver/distinfo
+1-1multimedia/libva-nvidia-driver/Makefile
+4-42 files

FreeBSD/src d8b6461lib/msun/arm fenv.c, lib/msun/man fenv.3 fegetmode.3

libm: Implement femode_t, fegetmode(), and fesetmode() as per C23

Reviewed by:    kargl, kib
Approved by:    fuz (mentor)
MFC after:      1 month
Differential Revision:  https://reviews.freebsd.org/D59288
DeltaFile
+78-0lib/msun/x86/fenv.h
+70-0lib/msun/man/fegetmode.3
+63-0lib/msun/tests/fenv_test.c
+48-1lib/msun/man/fenv.3
+42-0lib/msun/arm/fenv.c
+33-0lib/msun/riscv/fenv.h
+334-113 files not shown
+532-319 files

FreeBSD/ports 9dbe8bdaudio/audacity Makefile distinfo

audio/audacity: Update 3.7.8 => 3.7.9

Changelog:
https://github.com/audacity/audacity/releases/tag/Audacity-3.7.8

PR:             298114
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit 526c2ded44608d8560c1eeef9d86be1eb15f5e95)
DeltaFile
+5-5audio/audacity/distinfo
+1-1audio/audacity/Makefile
+6-62 files

FreeBSD/ports 526c2deaudio/audacity Makefile distinfo

audio/audacity: Update 3.7.8 => 3.7.9

Changelog:
https://github.com/audacity/audacity/releases/tag/Audacity-3.7.8

PR:             298114
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+5-5audio/audacity/distinfo
+1-1audio/audacity/Makefile
+6-62 files