HardenedBSD/src 416cc74sys/arm64/arm64 pmap.c, usr.sbin/acpi/acpidump acpi.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+3-4sys/arm64/arm64/pmap.c
+1-1usr.sbin/acpi/acpidump/acpi.c
+4-52 files

HardenedBSD/src 6cba29cusr.sbin/acpi/acpidump acpi.c

acpidump IVRS table format: change 'IOMMUId' into 'IOMMU DeviceId'

and apply the consistent format for device ids used in other IVRS
elements.  The field seems to be the PCI Device ID of the IOMMU itself,
instead of an abstract unit ID.

Sponsored by:   Advanced Micro Devices (AMD)
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
DeltaFile
+1-1usr.sbin/acpi/acpidump/acpi.c
+1-11 files

HardenedBSD/src 4f77144sys/arm64/arm64 pmap.c

arm64 pmap: eliminate a redundant variable

Moreover, if we attempt an L2 promotion on the kernel pmap from
pmap_enter_quick_locked(), this change eliminates the recomputation of
the L2 entry's address.

MFC after:      1 week
DeltaFile
+3-4sys/arm64/arm64/pmap.c
+3-41 files

HardenedBSD/src 06a48b7share/man/man9 vfs_getopt.9, sys/geom/eli g_eli.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+119-117sys/geom/eli/g_eli.c
+29-0tests/sys/geom/class/eli/attach_test.sh
+3-3share/man/man9/vfs_getopt.9
+151-1203 files

HardenedBSD/src 3cc1b35share/man/man9 vfs_getopt.9

vfs_getopt(9): fix typo

[skip ci]

Reported by:    Claudiu <mscotty at protomail.ch>
MFC after:      2 weeks
DeltaFile
+3-3share/man/man9/vfs_getopt.9
+3-31 files

HardenedBSD/src 838d5aesys/geom/eli g_eli.c

geli: fix indentation

no functional changes
DeltaFile
+116-116sys/geom/eli/g_eli.c
+116-1161 files

HardenedBSD/src 4b3141fsys/geom/eli g_eli.c, tests/sys/geom/class/eli attach_test.sh

geli: allocate a UMA pool earlier

The functions g_eli_init_uma and g_eli_fini_uma are used to trace
the number of devices in GELI. There is an issue where the g_eli_create
function may fail before g_eli_init_uma is called, however
g_eli_fini_uma is still executed in the fail path. This can
incorrectly decrease the device count to zero, potentially leading to
the UMA pool being freed. Accessing the device after the pool has been
freed causes a system panic.

This commit resolves the issue by ensuring devices count is increassed
eariler.

PR:             278828
Reported by:    Andre Albsmeier <mail at fbsd2.e4m.org>
Reviewed by:    asomers
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D45225
DeltaFile
+29-0tests/sys/geom/class/eli/attach_test.sh
+3-1sys/geom/eli/g_eli.c
+32-12 files

HardenedBSD/src 4ba114fsys/fs/devfs devfs_vnops.c, sys/kern vfs_mount.c

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+51-19sys/vm/device_pager.c
+1-2sys/fs/devfs/devfs_vnops.c
+1-1sys/kern/vfs_mount.c
+53-223 files

HardenedBSD/src bcd2676sys/fs/devfs devfs_vnops.c, sys/kern vfs_mount.c

Merge branch 'freebsd/13-stable/main' into hardened/13-stable/master
DeltaFile
+51-19sys/vm/device_pager.c
+1-2sys/fs/devfs/devfs_vnops.c
+1-1sys/kern/vfs_mount.c
+53-223 files

HardenedBSD/src 2eeb0e9sys/vm device_pager.c

cdev_pager_allocate(): ensure that the cdev_pager_ops ctr is called only once

PR:     278826

(cherry picked from commit e93404065177d6c909cd64bf7d74fe0d8df35edf)
DeltaFile
+51-19sys/vm/device_pager.c
+51-191 files

HardenedBSD/src e4df9d8sys/kern vfs_mount.c

vfs_domount_update(): style, use space instead of tab

(cherry picked from commit 5a061a38cdfa151315051a1ca1400bb32e39cde2)
DeltaFile
+1-1sys/kern/vfs_mount.c
+1-11 files

HardenedBSD/src 7c23465sys/fs/devfs devfs_vnops.c

devfs_allocv(): style

(cherry picked from commit 6d79564fe341c8dbf09405cae1a0a76460aaf8aa)
DeltaFile
+1-2sys/fs/devfs/devfs_vnops.c
+1-21 files

HardenedBSD/src 9ccd539sys/fs/devfs devfs_vnops.c

devfs_allocv(): style

(cherry picked from commit 6d79564fe341c8dbf09405cae1a0a76460aaf8aa)
DeltaFile
+1-2sys/fs/devfs/devfs_vnops.c
+1-21 files

HardenedBSD/src 4018bcdsys/vm device_pager.c

cdev_pager_allocate(): ensure that the cdev_pager_ops ctr is called only once

PR:     278826

(cherry picked from commit e93404065177d6c909cd64bf7d74fe0d8df35edf)
DeltaFile
+51-19sys/vm/device_pager.c
+51-191 files

HardenedBSD/src 936aa8esys/kern vfs_mount.c

vfs_domount_update(): style, use space instead of tab

(cherry picked from commit 5a061a38cdfa151315051a1ca1400bb32e39cde2)
DeltaFile
+1-1sys/kern/vfs_mount.c
+1-11 files

HardenedBSD/src 4b6000dsys/fs/nfsclient nfs_clbio.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1-1sys/fs/nfsclient/nfs_clbio.c
+1-11 files

HardenedBSD/src ff4480bsys/fs/nfsclient nfs_clbio.c

nfs client comment typo fix

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+1-1sys/fs/nfsclient/nfs_clbio.c
+1-11 files

HardenedBSD/src 6849a53share/man/man5 rc.conf.5, sys/kern kern_devctl.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+15-694sys/netinet/tcp_stacks/rack.c
+0-52sys/netinet/tcp_subr.c
+0-13sys/netinet/tcp_var.h
+1-8sys/netinet/tcp_stacks/tcp_rack.h
+1-5share/man/man5/rc.conf.5
+1-1sys/kern/kern_devctl.c
+18-7731 files not shown
+18-7747 files

HardenedBSD/src 3bb5428share/man/man5 rc.conf.5

rc.conf.5: remove obsolete advice about kld_list

Loading modules via kld_list is no longer substantially faster than via
loader.conf.

[skip ci]

MFC after:      2 weeks
Reviewed by:    imp
Differential Revision: https://reviews.freebsd.org/D45242
DeltaFile
+1-5share/man/man5/rc.conf.5
+1-51 files

HardenedBSD/src ea916b6sys/conf options, sys/netinet tcp_subr.c tcp_var.h

Remove TCP_SAD optional code now that the sack filter performs this function.

With the commit of D44903 we no longer need the SAD option. Instead all stacks that
use the sack filter inherit its protection against sack-attack.

Reviewed by: tuexen@
 Differential Revision:https://reviews.freebsd.org/D45216
DeltaFile
+15-694sys/netinet/tcp_stacks/rack.c
+0-52sys/netinet/tcp_subr.c
+0-13sys/netinet/tcp_var.h
+1-8sys/netinet/tcp_stacks/tcp_rack.h
+0-1sys/conf/options
+16-7685 files

HardenedBSD/src 97aedd3sys/kern kern_devctl.c

devctl: Disable the boottime optimization of suppressing NOMATCH

The usb bus code (uhub) doens't present the same information to devctl
as it does to the NOMATCH events it generats. As such, devmatch fails to
find USB devices on boot when NOMATCH events are optimized out. Since
the savings of boot time is relatively trivial for all but the most
demanding boot environments, disable it by default until this issue is
fixed.

Fixes: 6437872c1d66
MFC After: 1 minute
Sponsored by:           Netflix
DeltaFile
+1-1sys/kern/kern_devctl.c
+1-11 files

HardenedBSD/src ea384a0usr.bin/diff diffreg.c, usr.bin/diff/tests diff_test.sh

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+11-0usr.bin/diff/tests/diff_test.sh
+2-1usr.bin/diff/diffreg.c
+13-12 files

HardenedBSD/src fb623aausr.bin/diff diffreg.c, usr.bin/diff/tests diff_test.sh

diff: honour -B flag with -q

PR:             278988
Reviewed by:    bapt
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D45220
DeltaFile
+11-0usr.bin/diff/tests/diff_test.sh
+2-1usr.bin/diff/diffreg.c
+13-12 files

HardenedBSD/src c63a1bb. Makefile.inc1, sys/dev/cxgbe t4_filter.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+10-42sys/dev/cxgbe/tom/t4_ddp.c
+7-43sys/dev/cxgbe/tom/t4_tls.c
+5-38sys/dev/cxgbe/t4_filter.c
+42-0sys/dev/cxgbe/common/common.h
+4-38sys/dev/cxgbe/tom/t4_tom.c
+18-1Makefile.inc1
+86-1624 files not shown
+102-16810 files

HardenedBSD/src de477e4sys/dev/sound unit.c, sys/dev/sound/pcm sound.c vchan.c

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+39-442sys/dev/sound/pcm/sound.c
+187-19sys/dev/sound/pcm/vchan.c
+173-28sys/dev/sound/pcm/channel.c
+44-156sys/dev/sound/pcm/dsp.c
+0-188sys/dev/sound/unit.c
+31-73sys/dev/sound/pcm/sound.h
+474-90636 files not shown
+547-1,13442 files

HardenedBSD/src 64a00f8sys/dev/cxgbe t4_filter.c, sys/dev/cxgbe/common common.h

cxgbe(4): Consolidate all mk_set_tcb_field_ulp in one place.

MFC after:      1 week
Sponsored by:   Chelsio Communications
DeltaFile
+10-42sys/dev/cxgbe/tom/t4_ddp.c
+7-43sys/dev/cxgbe/tom/t4_tls.c
+5-38sys/dev/cxgbe/t4_filter.c
+4-38sys/dev/cxgbe/tom/t4_tom.c
+42-0sys/dev/cxgbe/common/common.h
+68-1615 files

HardenedBSD/src cca3506sys/dev/cxgbe t4_sched.c

cxgbe(4): sc->port is indexed by port_id and not tx_chan.

MFC after:      1 week
Sponsored by:   Chelsio Communications
DeltaFile
+1-1sys/dev/cxgbe/t4_sched.c
+1-11 files

HardenedBSD/src 61ad1dd. Makefile.inc1

Improve broken-on-gcc checks

Mark powerpc* and riscv broken.

Refactor and add a TRY_GCC_BROKEN option to build anyway.  This
simplifies things for people trying to get gcc builds working
while letting other developers know that they aren't expected to work.

Reviewed by:    jhb, emaste
Improves:       4c0dfd5959bd4 arm: fail early on gcc builds
Differential Revision:  https://reviews.freebsd.org/D45230
DeltaFile
+18-1Makefile.inc1
+18-11 files

HardenedBSD/src 1062db3lib/libcxxrt Makefile

libcxxrt: allow build with gcc13 and --no-undefined-version

GCC 13 supports _Float16 and __int128 on fewer architectures than clang
and thus libcxxrt compiled with gcc13 is sometimes missing related
symbols.  Hack around this by explicitly appending --undefined-version
to LDFLAGS in problematic cases.

Reviewed by:    theraven, dim
Differential Revision:  https://reviews.freebsd.org/D45233
DeltaFile
+10-0lib/libcxxrt/Makefile
+10-01 files

HardenedBSD/src f7d45c5usr.sbin/bhyve tpm_ppi_qemu.c

bhyve: avoid side effect in assertion

An assert() was setting the error variable instead of checking it.

Reported by:    Coverity Scan
CID:            1521431
Reviewed by:    jhb
Sponsored by:   The FreeBSD Foundation
Pull Request:   https://github.com/freebsd/freebsd-src/pull/1244
DeltaFile
+1-1usr.sbin/bhyve/tpm_ppi_qemu.c
+1-11 files