This URL: https://git.freebsd.catflap.wales/src/stable-14/raw-log-html/ _____________________________________________________________________________________________________________ Commit: d8307740ea1ea82b6ecca326eb5a13df479052c1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d8307740ea1ea82b6ecca326eb5a13df479052c1 Author: Roman Bogorodskiy (Fri 28 Aug 2026 17:43:26 BST) Committer: Roman Bogorodskiy (Tue 20 Oct 2026 18:58:05 BST) stand: userboot: improve userdisk error handling Currently, userdisk_init() iterates through disks and checks whether DIOCGSECTORSIZE and DIOCGMEDIASIZE ioctls are available for the device. If either ioctl fails, userdisk_init() returns ENXIO with ud_info only partially initialized. devinit() records the failure, but loader_main() ignores devinit()'s return value, so later code may access an uninitialized entry. In certain cases this code can still boot from a disk even if userdisk_init() returns ENXIO, for example, when the first of two disks is valid and the second errors out. To address this issue while not breaking the current behavior, do the following: - Zero-initialize the userdisk_info array and use a zero media size to mark disks that do not support the ioctls mentioned above or report an empty medium. - Update userdisk_print() not to print unusable disks. - Update userdisk_open() to return EIO for unusable disks. - Update extract_currdev() to pick the first usable disk instead of the first disk. Introduce userboot_disk_firstunit() for that. Additionally, reset counters on ud_info allocation failure to prevent accessing unallocated data. Reviewed by: jhb (previous version), markj MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59262 (cherry picked from commit 4445d039583a0a47fc335e0d34401581bcbc104e) M stand/userboot/userboot/libuserboot.h M stand/userboot/userboot/main.c M stand/userboot/userboot/userboot_disk.c _____________________________________________________________________________________________________________ Commit: 21a5802eede3d2004fb9b846ebe729811aaa3c17 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=21a5802eede3d2004fb9b846ebe729811aaa3c17 Author: Joel Bodenmann (Mon 12 Oct 2026 17:54:41 BST) Committer: Joel Bodenmann (Mon 19 Oct 2026 16:05:07 BST) u3g: Add ublox LARA-L6 modem MFC after: 3 days Approved by: adrian Reviewed by: kevans, adrian Differential Revision: https://reviews.freebsd.org/D60652 (cherry picked from commit a32c8dc6e8fd96e0d56e5add09638120e62d8418) M sys/dev/usb/serial/u3g.c _____________________________________________________________________________________________________________ Commit: 50f61279d2cd40e01f76698c3becf020766f8c9e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=50f61279d2cd40e01f76698c3becf020766f8c9e Author: Joel Bodenmann (Thu 8 Oct 2026 16:36:15 BST) Committer: Joel Bodenmann (Mon 19 Oct 2026 16:05:00 BST) usbdevs: Add ublox LARA-L6 The device has multiple PIDs as it supports different USB profiles. Approved by: adrian MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D60482 (cherry picked from commit 95432767ddc36fd1f6b0054e4eb1a849c73e7da6) M sys/dev/usb/usbdevs _____________________________________________________________________________________________________________ Commit: 306d71f7daa19dbdd09e878e5f1ca851b8803011 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=306d71f7daa19dbdd09e878e5f1ca851b8803011 Author: Xin LI (Mon 12 Oct 2026 08:51:43 BST) Committer: Xin LI (Mon 19 Oct 2026 02:23:41 BST) termcap: add missing capabilities to the xterm-ghostty entry (cherry picked from commit 3ceb5f150bc121f5e6a3e0cc8b289279338405a1) M share/termcap/termcap _____________________________________________________________________________________________________________ Commit: 61bc5cc3a4e9f8d93656327895a32d546126c3a4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=61bc5cc3a4e9f8d93656327895a32d546126c3a4 Author: Andrew Turner (Thu 11 Sep 2025 08:22:38 BST) Committer: John Baldwin (Sat 17 Oct 2026 16:41:34 BST) .github: Update to use llvm 15 This is the latest supported version in Ubuntu 22.04 Reviewed by: vexeduxr, imp, emaste Sponsored by: Arm Ltd Pull Request: https://github.com/freebsd/freebsd-src/pull/1862 (cherry picked from commit cf583997282f962d9e8bf478667d5087f7c1f2da) M .github/workflows/cross-bootstrap-tools.yml _____________________________________________________________________________________________________________ Commit: 913ef60b4026b7d440f6b2ba9cded2622372220a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=913ef60b4026b7d440f6b2ba9cded2622372220a Author: John Baldwin (Wed 6 Aug 2025 21:14:37 BST) Committer: John Baldwin (Sat 17 Oct 2026 16:41:22 BST) .github: Use make.py's --cross-toolchain option on macOS Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D51749 (cherry picked from commit ad43e7f4721080caedd29a21de9210f9b763ee4d) M .github/workflows/cross-bootstrap-tools.yml _____________________________________________________________________________________________________________ Commit: efdd4c21ddc75d3b100eb4cf37b65f90ed32890a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=efdd4c21ddc75d3b100eb4cf37b65f90ed32890a Author: Andrew Turner (Thu 29 Aug 2024 17:44:46 BST) Committer: John Baldwin (Sat 17 Oct 2026 16:40:56 BST) .github: Update the clang release used for macos Reviewed by: emaste, jhb Sponsored by: Arm Ltd Pull Request: https://github.com/freebsd/freebsd-src/pull/1399 (cherry picked from commit edc692b9052ab0594248104d002f32c657e36057) M .github/workflows/cross-bootstrap-tools.yml _____________________________________________________________________________________________________________ Commit: c30ae7753e8c589e85a7d9de9c3269faf1496a90 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c30ae7753e8c589e85a7d9de9c3269faf1496a90 Author: Andrew Turner (Thu 29 Aug 2024 17:45:43 BST) Committer: John Baldwin (Sat 17 Oct 2026 16:40:40 BST) .github: Use the two most recent LTS releases Ubuntu 24.04 is the most recent LTS release. Use it and the previous 22.04 LTS for cross build testing. Reported by: emaste, jhb Sponsored by: Arm Ltd Pull Request: https://github.com/freebsd/freebsd-src/pull/1399 (cherry picked from commit 386e2dc442f46d2c4b43dc9e767eaa93facdbb42) M .github/workflows/cross-bootstrap-tools.yml _____________________________________________________________________________________________________________ Commit: 1ba0979b5473c04d3206293d298aaddad3d13993 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1ba0979b5473c04d3206293d298aaddad3d13993 Author: Andrew Turner (Fri 27 Oct 2023 17:02:55 BST) Committer: John Baldwin (Sat 17 Oct 2026 16:39:26 BST) .github: Enable manually running github actions Sponsored by: Arm Ltd Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/878 (cherry picked from commit 78cc45712350d81d848706a77f28f90cc51ebfaf) M .github/workflows/cross-bootstrap-tools.yml _____________________________________________________________________________________________________________ Commit: 025393b094fdd1d68f6544c8d41eaf66d2b79847 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=025393b094fdd1d68f6544c8d41eaf66d2b79847 Author: Dimitry Andric (Sat 10 Oct 2026 22:47:47 BST) Committer: Dimitry Andric (Sat 17 Oct 2026 11:21:19 BST) Merge commit a5fa4dba6e2e from llvm-project (by PiJoules): [compiler-rt] Add interceptors for free_[aligned_]sized for asan+hwasan (#189109) This avoids a jemalloc assertion when running sanitized applications against glib, which uses free_sized(3). PR: 298943 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298943 ) MFC after: 1 week (cherry picked from commit a3fbf20c0558ee3c2b88adc0c944e66d074cab7b) M contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.cpp M contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.h M contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp M contrib/llvm-project/compiler-rt/lib/hwasan/hwasan_allocation_functions.cpp _____________________________________________________________________________________________________________ Commit: 1abf88da874c00a560e44ec7efb949c39f047163 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1abf88da874c00a560e44ec7efb949c39f047163 Author: Dimitry Andric (Sat 10 Oct 2026 22:44:49 BST) Committer: Dimitry Andric (Sat 17 Oct 2026 11:21:19 BST) Merge commit 681c2ee4dfbf from llvm-project (by Justin King): asan: refactor interceptor allocation/deallocation functions (#145087) Do some refactoring to allocation/deallocation interceptors. Expose explicit per-alloc_type functions and stop accepting explicit AllocType. This ensures we do not accidentally mix. NOTE: This change rejects attempts to call `operator new(, static_cast(0))`. For https://github.com/llvm/llvm-project/issues/144435 Signed-off-by: Justin King This a prerequisite for adding sanitizer interceptors for free_sized(3) and free_aligned_sized(3). PR: 298943 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298943 ) MFC after: 1 week (cherry picked from commit 6b0f64133cd930fec8971aa85f4ef36a67b8334f) M contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.cpp M contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.h M contrib/llvm-project/compiler-rt/lib/asan/asan_mac.cpp M contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp M contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_mac.cpp M contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_win.cpp M contrib/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp _____________________________________________________________________________________________________________ Commit: aabb358e779c30ba1da6c0fa18f746dc2db59036 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=aabb358e779c30ba1da6c0fa18f746dc2db59036 Author: Dimitry Andric (Sat 10 Oct 2026 22:41:52 BST) Committer: Dimitry Andric (Sat 17 Oct 2026 11:21:19 BST) compiler-rt: enable use of .preinit_array after ef758b59a44e After base ef758b59a44e6b5b2d2dc178b97c01cde1b34570 we can enable usage of .preinit_array in compiler-rt's sanitizers. The comment that stated "On FreeBSD, .preinit_array functions are called with rtld_bind_lock writer lock held. It will lead to dead lock ..." can also be removed. PR: 298943 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298943 ) MFC after: 1 week (cherry picked from commit 000856156745f1a9a05705f8a499c0fd84f183ca) M contrib/llvm-project/compiler-rt/lib/sanitizer_common/sanitizer_internal_defs.h _____________________________________________________________________________________________________________ Commit: a4939c554aa1e2f7e998201f0ff84c3a44fba54e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a4939c554aa1e2f7e998201f0ff84c3a44fba54e Author: Piotr Kubaj (Mon 28 Sep 2026 09:43:35 BST) Committer: Piotr Kubaj (Thu 15 Oct 2026 08:49:51 BST) virtio_gpu: use an X8R8G8B8 resource on big-endian guests The virtio-gpu resource formats are defined by byte order in memory, while vt(4) and the X server (through vt_fb and the fb mmap) write native 32-bit 0x00RRGGBB pixels into the shadow framebuffer. On a big-endian guest such as powerpc64 those pixels land in memory as 00 RR GG BB, which the host interprets under B8G8R8X8 with red and blue swapped and the padding byte taken as blue: white renders yellow and blue renders black. Request X8R8G8B8 on big-endian guests instead, which is also what the Linux driver does (DRM_FORMAT_HOST_XRGB8888). Reproduced with a colour test pattern on a powerpc64 QEMU pseries guest using the identically coded out-of-tree fork of this driver (graphics/virtio-gpu-qemu-kmod); little-endian guests are unchanged. Differential Revision: https://reviews.freebsd.org/D60085 Approved by: jhibbits MFC after: 1 week (cherry picked from commit 7cf02164a517824c07faed91c009be90f2f17ec0) (cherry picked from commit ceaf30c92ed7a44f532e24742ed08bcf730c8ac1) M sys/dev/virtio/gpu/virtio_gpu.c _____________________________________________________________________________________________________________ Commit: 472a735d09eb5504d36703b47fbd28afc5b126bb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=472a735d09eb5504d36703b47fbd28afc5b126bb Author: Bren (Thu 8 Oct 2026 20:03:51 BST) Committer: Rick Macklem (Thu 15 Oct 2026 02:25:02 BST) nfs_nfsdsocket.c: Fix "nfsstats -d" for ERELOOKUP When ERELOOKLUP is returned by a file operation (always vop_lookup?) the operation is retried without doing nfsrv_statsend(). This patch fixes this problem, The only effect of the bug was bogus "nfsstat -d" output. PR: 298534 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298534 ) (cherry picked from commit 9a237074d380233e93a17ddee6b155cc2f90ee96) M sys/fs/nfsserver/nfs_nfsdsocket.c _____________________________________________________________________________________________________________ Commit: fa7fe70671ee8edd080e13428a73e8268dea1bad URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fa7fe70671ee8edd080e13428a73e8268dea1bad Author: Mark Johnston (Tue 13 Oct 2026 20:59:10 BST) Committer: Mark Johnston (Wed 14 Oct 2026 17:03:06 BST) bhyve: Fix handling of framebuffer resizing The rfb code maintains an array of CRCs for 32x32 tiles in the framebuffer. This array is sized statically based on the rfb code's notion of the maximum framebuffer size, which changed in commit fb51ddb20d57 without updating the rfb code. Morever, writes to the framebuffer BAR can modify the recorded height and width of the framebuffer. These values were not validated against the maximum at all, unlike the parameters set via bhyve config. Fix these problems: - Define the maximum width and height in a shared header file so that they do not get out of sync again. - In pci_fbuf_render(), don't resize the console if the new dimensions are too large. - Add a mutex to synchronize framebuffer BAR I/O with the rfb thread. Approved by: so Security: FreeBSD-SA-26:72.bhyve Security: CVE-2026-101311 Fixes: fb51ddb20d57 ("bhyve: increase fbuf display resolution limit") Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D60680 M usr.sbin/bhyve/bhyvegc.h M usr.sbin/bhyve/pci_fbuf.c M usr.sbin/bhyve/rfb.c _____________________________________________________________________________________________________________ Commit: 99a3150f0615241d38acd75eddd15ea48caa3abe URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=99a3150f0615241d38acd75eddd15ea48caa3abe Author: Mark Johnston (Tue 13 Oct 2026 20:58:36 BST) Committer: Mark Johnston (Wed 14 Oct 2026 17:03:06 BST) bhyve: Improve HDA stream descriptor validation The length of each block in the stream must be non-zero. This is assumed in hda_transfer(), otherwise an out-of-bounds read or write is possible. Use atomic loads to access stream descriptor fields, since they are guest-controlled. Make sure that the descriptor array is suitably aligned so that we can drop the __packed annotation from the structure definition; per section 3.3.42 of the HDA spec the BDL pointer is supposed to be 128-byte aligned, in fact. Approved by: so Security: FreeBSD-SA-26:72.bhyve Security: CVE-2026-101310 Reported by: Brian Delgado from Intel using Anthropic Opus 4.8 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D60678 M usr.sbin/bhyve/pci_hda.c _____________________________________________________________________________________________________________ Commit: 9596b25e3412a5b1206eea1c5292cfbf40f4e6cd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9596b25e3412a5b1206eea1c5292cfbf40f4e6cd Author: Mark Johnston (Tue 13 Oct 2026 20:56:47 BST) Committer: Mark Johnston (Wed 14 Oct 2026 17:03:05 BST) bhyve: Fix handling of the xhci event ring rts->erst_p and rts->erstba_p are pointers to guest-controlled memory which describe the event rings and pending event array, respectively. The device model was not validating the size nor saving the value. As a result, the bounds checks in pci_xhci_insert_event() were susceptible to TOCTOU races. Fix pci_xhci_rtsregs_write() to save the ring size in a softc field. Validate that the size isn't larger than the maximum allowed by the XHCI specification (64KB, or 4096 TRBs). When processing TRBs, make sure we don't load fields more than once. Make sure that pci_xhci_trb_next() doesn't return a pointer to host memory. When handling ERDP writes, make sure that the guest-supplied address is actually a pointer into the TRB array, and ignore the write if not. Approved by: so Security: FreeBSD-SA-26:72.bhyve Security: CVE-2026-101309 Reported by: Brian Delgado from Intel using Anthropic Opus 4.8 Differential Revision: https://reviews.freebsd.org/D60677 M usr.sbin/bhyve/pci_xhci.c _____________________________________________________________________________________________________________ Commit: d3b8957e2a8236c3c00401ed33bfe65eac9d9f62 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d3b8957e2a8236c3c00401ed33bfe65eac9d9f62 Author: Mark Johnston (Tue 13 Oct 2026 16:54:07 BST) Committer: Mark Johnston (Wed 14 Oct 2026 17:03:05 BST) sound: Revalidate after reacquiring locks when resizing buffers sndbuf_resize() and sndbuf_remalloc() drop the channel lock in order to allocate the new buffer(s) with M_WAITOK. Before doing that they verify that the buffer is not mapped, but this could change while the lock is dropped, as there is no higher-level synchronization which prevents buffer resize (e.g., via the SNDCTL_DSP_SETBLKSIZE ioctl) from happening concurrently with mmap. Thus, these checks are insufficient. Modify sndbuf_resize() and sndbuf_remalloc() to revalidate after reacquiring the lock. Extend them to check for a couple of channel flags, mirroring the check in chn_resizebuf(). Modify chn_resizebuf() to revalidate state after reacquiring the channel lock. We could also allocate new buffers with M_NOWAIT and so avoid dropping the lock. Then, I think we could go even further and invoke CHANNEL_SETBLOCKSIZE and CHANNEL_SETFRAGMENTS with the channel lock held. But really it would be better to ensure that dsp operations are serialized; there is no reason for mmap and chn_resizebuf() to be able to run in parallel, we should not be relying on the channel lock for this. So, let's keep a more minimal approach here. Add a simple regression test. Approved by: so Security: FreeBSD-SA-26:71.sound Security: CVE-2026-101308 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D60554 M sys/dev/sound/pcm/buffer.c M sys/dev/sound/pcm/channel.c M tests/sys/sound/mmap.c _____________________________________________________________________________________________________________ Commit: 44d74b12b279f150de3d26183eb4176468297b1e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=44d74b12b279f150de3d26183eb4176468297b1e Author: Mark Johnston (Tue 13 Oct 2026 16:53:39 BST) Committer: Mark Johnston (Wed 14 Oct 2026 17:00:50 BST) sound: Check for errors from sndbuf_resize() Most implementations of CHANNEL_SETBLOCKSIZE and CHANNEL_SETFRAGMENTS were not checking this. This is probably not a big problem: it's unlikely for sndbuf_resize() to fail due to the refcount check in this case since it's operating on the hardware buffer, which doesn't get mmaped. But, I will add more reasons for it to fail in the next patch, so let's be more careful. This change modifies various CHANNEL_SETBLOCKSIZE implementations to check for errors. In some cases I reordered things to avoid updating driver state until after sndbuf_resize() succeeds. Return 0 from CHANNEL_SETBLOCKSIZE to indicate an error, as it otherwise returns the new block size. We could change the interface to return both an error number and a block size, but that would break at least one out-of-tree driver and I wish to avoid that here. Make sure that errors from CHANNEL_SETFRAGMENTS are returned to userspace. Approved by: so Security: FreeBSD-SA-26:71.sound Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D60553 M sys/arm/freescale/imx/imx6_ssi.c M sys/arm/freescale/vybrid/vf_sai.c M sys/dev/sound/pci/als4000.c M sys/dev/sound/pci/atiixp.c M sys/dev/sound/pci/cmi.c M sys/dev/sound/pci/cs4281.c M sys/dev/sound/pci/envy24.c M sys/dev/sound/pci/envy24ht.c M sys/dev/sound/pci/es137x.c M sys/dev/sound/pci/hda/hdaa.c M sys/dev/sound/pci/hdspe-pcm.c M sys/dev/sound/pci/ich.c M sys/dev/sound/pci/t4dwave.c M sys/dev/sound/pci/via8233.c M sys/dev/sound/pci/via82c686.c M sys/dev/sound/pci/vibes.c M sys/dev/sound/pcm/channel.c M sys/dev/sound/usb/uaudio.c M sys/dev/sound/usb/uaudio.h M sys/dev/sound/usb/uaudio_pcm.c _____________________________________________________________________________________________________________ Commit: c556f4e1b1e15ef49fa49a7cd795902e5f90c47d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c556f4e1b1e15ef49fa49a7cd795902e5f90c47d Author: J. David (Wed 7 Oct 2026 02:52:19 BST) Committer: Rick Macklem (Wed 14 Oct 2026 02:21:57 BST) nfscl: Fix oddball cases for session slot release We have identified some cases where silent slot loss can occur when operations on NFS mounts are aborted. We experience this when using NFSv4.2, but it likely also occurs with NFSv4.1. A slot is acquired for compound operations by nfsv4_setsequence() and freed by newnfs_request(). Any call path that abandons the compound before reaching newnfs_request() loses the slot permanently. We identified four call sites where this happens, one of which where it actually does happen for us in a semi-reproducible way, which allowed us to develop a candidate patch, attached. The patch adds one function, nfsv4_freeunsentslot(), to nfs_clcomsubs.c. It is called from each of the four call sites: nfsrpc_writerpc(), nfsrpc_writeds(), and two in nfsrpc_setextattr(). nfsv4_freeunsentslot() calls nfsv4_freeslot() with resetseq set to true because the aborted RPC will never be sent and therefore the slot sequence ID should not advance. With this patch and other diagnostics, we have confirmed that slot loss does not occur under the conditions that otherwise cause it in our environment. PR: 298416 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298416 ) (cherry picked from commit 77a7a48a1cb003831ff1d4342b1974fc7f79381e) M sys/fs/nfs/nfs_var.h M sys/fs/nfsclient/nfs_clcomsubs.c M sys/fs/nfsclient/nfs_clrpcops.c _____________________________________________________________________________________________________________ Commit: da4b59f3d4f195c061039338dba073a899202d8f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=da4b59f3d4f195c061039338dba073a899202d8f Author: Cy Schubert (Mon 10 Aug 2026 15:23:31 BST) Committer: Cy Schubert (Tue 13 Oct 2026 20:20:07 BST) wpa: Update to 2.12 Fixes and new features include: hostapd: * support RSN overriding (e.g., WPA3-Personal Compatibility Mode) * EHT/IEEE 802.11be/Wi-Fi 7 - more complete support - fix message validation issues that could enable DoS attacks - fix group key rekeying * enable SAE group 20 by default if SAE-EXT-KEY is enabled * reject unexpected SAE password identifier to avoid DoS attack against a specific STA * mandate use of SAE H2E when using password identifiers * assign VLAN when using SAE with PMKSA caching * support SPP A-MSDU negotiation * support IEEE 802.11bi functionality - changing SAE password identifiers - EPPKE - IEEE 802.1X/EAP in Authentication frames - Association frame encryption - PMKID privacy * remove the driver interface for now obsolete Host AP driver * remove the driver interface for now obsolete Atheros WEXT interface * move supported, basic, and Beacon TX rate configuration to be at BSS level instead of per-radio for all BSSs * fix various issues in Multiple-BSSID functionality * support OpenSSL 3.0 API changes * EAP-TEAP: protocol changes based on RFC 9930; this is not compatible with previous versions * support Automated Frequency Coordination (AFC) on the 6 GHz band * improve GAS/ANQP processing to support larger ANQP responses * a large number of other fixes, cleanup, and extensions wpa_supplicant: * support RSN overriding (e.g., WPA3-Personal Compatibility Mode) * improve BSS transition management support * EHT/IEEE 802.11be/Wi-Fi 7 - more complete support - fix message validation issues that could enable DoS attacks * support Wi-Fi Direct R2 * support Wi-Fi Aware (add synchronized NAN; extend USD support) * support Proximity Ranging * support SPP A-MSDU negotiation * support IEEE 802.11bi functionality - changing SAE password identifiers - EPPKE - IEEE 802.1X/EAP in Authentication frames - Association frame encryption - PMKID privacy * enable layer 2/Wi-Fi multicast filtering for all networks (not just some Passpoint networks which enabled this before) * wpa_gui: port to Qt6 * support OpenSSL 3.0 API changes * EAP-TEAP: protocol changes based on RFC 9930; this is not compatible with previous versions * maintain configuration file permissions when writing updated configuration * add option to validate PKCS#11/OpenSC engine and module paths * fix PMKSA caching to enforce network context to avoid misuse of unexpected PMKSA cache entries * fix a potential DoS attack in SAE processing of an unexpected element * fix incomplete bounds checking of mesh AMPE messages that could have resulted in DoS attacks and memory corruption * a large number of other fixes, cleanup, and extensions MFC after: 2 months Merge commit '513264698a892550ba20aeb9da7f360417fdc63b' (cherry picked from commit 71e72c9e91c4b8007a4292e09669e8b549c29e97) A contrib/wpa/Makefile M contrib/wpa/README M contrib/wpa/hostapd/Android.mk M contrib/wpa/hostapd/ChangeLog M contrib/wpa/hostapd/Makefile M contrib/wpa/hostapd/README M contrib/wpa/hostapd/README-MULTI-AP M contrib/wpa/hostapd/android.config M contrib/wpa/hostapd/config_file.c M contrib/wpa/hostapd/ctrl_iface.c M contrib/wpa/hostapd/ctrl_iface.h M contrib/wpa/hostapd/defconfig M contrib/wpa/hostapd/eap_register.c M contrib/wpa/hostapd/hlr_auc_gw.c M contrib/wpa/hostapd/hostapd.conf M contrib/wpa/hostapd/hostapd_cli.c M contrib/wpa/hostapd/main.c M contrib/wpa/hs20/client/Android.mk M contrib/wpa/hs20/client/Makefile D contrib/wpa/hs20/client/devdetail.xml D contrib/wpa/hs20/client/devinfo.xml D contrib/wpa/hs20/client/est.c D contrib/wpa/hs20/client/oma_dm_client.c M contrib/wpa/hs20/client/osu_client.c M contrib/wpa/hs20/client/osu_client.h D contrib/wpa/hs20/client/spp_client.c M contrib/wpa/src/ap/Makefile M contrib/wpa/src/ap/acs.c A contrib/wpa/src/ap/afc.c M contrib/wpa/src/ap/airtime_policy.c M contrib/wpa/src/ap/ap_config.c M contrib/wpa/src/ap/ap_config.h M contrib/wpa/src/ap/ap_drv_ops.c M contrib/wpa/src/ap/ap_drv_ops.h M contrib/wpa/src/ap/ap_mlme.c M contrib/wpa/src/ap/authsrv.c M contrib/wpa/src/ap/beacon.c M contrib/wpa/src/ap/ctrl_iface_ap.c M contrib/wpa/src/ap/ctrl_iface_ap.h M contrib/wpa/src/ap/dfs.c M contrib/wpa/src/ap/dfs.h M contrib/wpa/src/ap/dpp_hostapd.c M contrib/wpa/src/ap/drv_callbacks.c M contrib/wpa/src/ap/eap_user_db.c M contrib/wpa/src/ap/gas_query_ap.c M contrib/wpa/src/ap/gas_serv.c M contrib/wpa/src/ap/hostapd.c M contrib/wpa/src/ap/hostapd.h M contrib/wpa/src/ap/hs20.c M contrib/wpa/src/ap/hw_features.c M contrib/wpa/src/ap/hw_features.h M contrib/wpa/src/ap/ieee802_11.c M contrib/wpa/src/ap/ieee802_11.h M contrib/wpa/src/ap/ieee802_11_eht.c M contrib/wpa/src/ap/ieee802_11_he.c M contrib/wpa/src/ap/ieee802_11_ht.c M contrib/wpa/src/ap/ieee802_11_shared.c M contrib/wpa/src/ap/ieee802_11_vht.c M contrib/wpa/src/ap/ieee802_1x.c M contrib/wpa/src/ap/ieee802_1x.h A contrib/wpa/src/ap/interference.c A contrib/wpa/src/ap/interference.h M contrib/wpa/src/ap/nan_usd_ap.c M contrib/wpa/src/ap/nan_usd_ap.h M contrib/wpa/src/ap/neighbor_db.c M contrib/wpa/src/ap/pmksa_cache_auth.c M contrib/wpa/src/ap/pmksa_cache_auth.h M contrib/wpa/src/ap/rrm.c M contrib/wpa/src/ap/sta_info.c M contrib/wpa/src/ap/sta_info.h M contrib/wpa/src/ap/vlan_full.c M contrib/wpa/src/ap/wnm_ap.c M contrib/wpa/src/ap/wpa_auth.c M contrib/wpa/src/ap/wpa_auth.h M contrib/wpa/src/ap/wpa_auth_ft.c M contrib/wpa/src/ap/wpa_auth_glue.c M contrib/wpa/src/ap/wpa_auth_i.h M contrib/wpa/src/ap/wpa_auth_ie.c M contrib/wpa/src/ap/wpa_auth_kay.c M contrib/wpa/src/ap/wps_hostapd.c M contrib/wpa/src/build.rules M contrib/wpa/src/common/Makefile M contrib/wpa/src/common/common_module_tests.c M contrib/wpa/src/common/defs.h M contrib/wpa/src/common/dpp.c M contrib/wpa/src/common/dpp.h M contrib/wpa/src/common/dpp_auth.c M contrib/wpa/src/common/dpp_backup.c M contrib/wpa/src/common/dpp_crypto.c M contrib/wpa/src/common/dpp_i.h M contrib/wpa/src/common/dpp_reconfig.c M contrib/wpa/src/common/dpp_tcp.c M contrib/wpa/src/common/gas.c M contrib/wpa/src/common/gas_server.c M contrib/wpa/src/common/gas_server.h M contrib/wpa/src/common/hw_features_common.c M contrib/wpa/src/common/hw_features_common.h M contrib/wpa/src/common/ieee802_11_common.c M contrib/wpa/src/common/ieee802_11_common.h M contrib/wpa/src/common/ieee802_11_defs.h D contrib/wpa/src/common/nan.h M contrib/wpa/src/common/nan_de.c M contrib/wpa/src/common/nan_de.h A contrib/wpa/src/common/nan_defs.h A contrib/wpa/src/common/proc_coord.c A contrib/wpa/src/common/proc_coord.h A contrib/wpa/src/common/proximity_ranging.c A contrib/wpa/src/common/proximity_ranging.h M contrib/wpa/src/common/ptksa_cache.c M contrib/wpa/src/common/ptksa_cache.h M contrib/wpa/src/common/qca-vendor.h M contrib/wpa/src/common/sae.c M contrib/wpa/src/common/sae.h M contrib/wpa/src/common/sae_pk.c M contrib/wpa/src/common/version.h M contrib/wpa/src/common/wpa_common.c M contrib/wpa/src/common/wpa_common.h M contrib/wpa/src/common/wpa_ctrl.h M contrib/wpa/src/crypto/crypto.h M contrib/wpa/src/crypto/crypto_gnutls.c M contrib/wpa/src/crypto/crypto_libtomcrypt.c M contrib/wpa/src/crypto/crypto_linux.c M contrib/wpa/src/crypto/crypto_openssl.c M contrib/wpa/src/crypto/crypto_wolfssl.c M contrib/wpa/src/crypto/sha256-prf.c M contrib/wpa/src/crypto/sha256.h M contrib/wpa/src/crypto/sha384-prf.c M contrib/wpa/src/crypto/sha384.h M contrib/wpa/src/crypto/sha512-prf.c M contrib/wpa/src/crypto/tls_gnutls.c M contrib/wpa/src/crypto/tls_openssl.c M contrib/wpa/src/crypto/tls_wolfssl.c M contrib/wpa/src/drivers/driver.h D contrib/wpa/src/drivers/driver_atheros.c M contrib/wpa/src/drivers/driver_bsd.c M contrib/wpa/src/drivers/driver_common.c D contrib/wpa/src/drivers/driver_hostap.c D contrib/wpa/src/drivers/driver_hostap.h M contrib/wpa/src/drivers/driver_macsec_linux.c M contrib/wpa/src/drivers/driver_ndis.c M contrib/wpa/src/drivers/driver_nl80211.c M contrib/wpa/src/drivers/driver_nl80211.h M contrib/wpa/src/drivers/driver_nl80211_capa.c M contrib/wpa/src/drivers/driver_nl80211_event.c M contrib/wpa/src/drivers/driver_nl80211_monitor.c M contrib/wpa/src/drivers/driver_nl80211_scan.c M contrib/wpa/src/drivers/driver_openbsd.c M contrib/wpa/src/drivers/driver_privsep.c M contrib/wpa/src/drivers/driver_wext.c M contrib/wpa/src/drivers/driver_wext.h M contrib/wpa/src/drivers/drivers.c M contrib/wpa/src/drivers/drivers.mak M contrib/wpa/src/drivers/drivers.mk M contrib/wpa/src/drivers/nl80211_copy.h M contrib/wpa/src/eap_common/eap_pwd_common.c M contrib/wpa/src/eap_common/eap_teap_common.c M contrib/wpa/src/eap_common/eap_teap_common.h M contrib/wpa/src/eap_common/ikev2_common.c M contrib/wpa/src/eap_peer/eap.c M contrib/wpa/src/eap_peer/eap_config.h M contrib/wpa/src/eap_peer/eap_leap.c M contrib/wpa/src/eap_peer/eap_teap.c D contrib/wpa/src/eap_peer/eap_teap_pac.c D contrib/wpa/src/eap_peer/eap_teap_pac.h M contrib/wpa/src/eap_peer/eap_tls.c M contrib/wpa/src/eap_peer/eap_tls_common.c M contrib/wpa/src/eap_peer/eap_tls_common.h M contrib/wpa/src/eap_server/eap.h M contrib/wpa/src/eap_server/eap_server_teap.c M contrib/wpa/src/eap_server/eap_server_tls.c M contrib/wpa/src/eap_server/eap_server_tls_common.c M contrib/wpa/src/eap_server/eap_server_ttls.c M contrib/wpa/src/eap_server/eap_tls_common.h M contrib/wpa/src/eapol_auth/eapol_auth_sm.c M contrib/wpa/src/eapol_auth/eapol_auth_sm.h M contrib/wpa/src/eapol_auth/eapol_auth_sm_i.h M contrib/wpa/src/eapol_supp/eapol_supp_sm.c M contrib/wpa/src/eapol_supp/eapol_supp_sm.h M contrib/wpa/src/fst/fst.c M contrib/wpa/src/fst/fst_session.c A contrib/wpa/src/nan/Makefile A contrib/wpa/src/nan/nan.c A contrib/wpa/src/nan/nan.h A contrib/wpa/src/nan/nan_bootstrap.c A contrib/wpa/src/nan/nan_crypto.c A contrib/wpa/src/nan/nan_i.h A contrib/wpa/src/nan/nan_module_test_cases.c A contrib/wpa/src/nan/nan_module_tests.c A contrib/wpa/src/nan/nan_module_tests.h A contrib/wpa/src/nan/nan_ndl.c A contrib/wpa/src/nan/nan_ndp.c A contrib/wpa/src/nan/nan_pairing.c A contrib/wpa/src/nan/nan_sec.c A contrib/wpa/src/nan/nan_util.c M contrib/wpa/src/p2p/p2p.c M contrib/wpa/src/p2p/p2p.h M contrib/wpa/src/p2p/p2p_build.c M contrib/wpa/src/p2p/p2p_go_neg.c M contrib/wpa/src/p2p/p2p_group.c M contrib/wpa/src/p2p/p2p_i.h M contrib/wpa/src/p2p/p2p_invitation.c M contrib/wpa/src/p2p/p2p_parse.c M contrib/wpa/src/p2p/p2p_pd.c M contrib/wpa/src/p2p/p2p_utils.c M contrib/wpa/src/pae/ieee802_1x_kay.c M contrib/wpa/src/pae/ieee802_1x_kay.h M contrib/wpa/src/pasn/pasn_common.c M contrib/wpa/src/pasn/pasn_common.h M contrib/wpa/src/pasn/pasn_initiator.c M contrib/wpa/src/pasn/pasn_responder.c M contrib/wpa/src/radius/radius.c M contrib/wpa/src/radius/radius.h M contrib/wpa/src/radius/radius_client.c M contrib/wpa/src/radius/radius_server.c M contrib/wpa/src/radius/radius_server.h M contrib/wpa/src/rsn_supp/pmksa_cache.c M contrib/wpa/src/rsn_supp/pmksa_cache.h M contrib/wpa/src/rsn_supp/preauth.c M contrib/wpa/src/rsn_supp/tdls.c M contrib/wpa/src/rsn_supp/wpa.c M contrib/wpa/src/rsn_supp/wpa.h M contrib/wpa/src/rsn_supp/wpa_ft.c M contrib/wpa/src/rsn_supp/wpa_i.h M contrib/wpa/src/rsn_supp/wpa_ie.c M contrib/wpa/src/rsn_supp/wpa_ie.h M contrib/wpa/src/tls/tlsv1_client.c M contrib/wpa/src/tls/tlsv1_common.c M contrib/wpa/src/tls/tlsv1_common.h M contrib/wpa/src/tls/x509v3.c M contrib/wpa/src/utils/bitfield.c M contrib/wpa/src/utils/bitfield.h M contrib/wpa/src/utils/common.c M contrib/wpa/src/utils/common.h M contrib/wpa/src/utils/eloop.c M contrib/wpa/src/utils/ext_password_file.c M contrib/wpa/src/utils/http-utils.h M contrib/wpa/src/utils/http_curl.c M contrib/wpa/src/utils/json.c M contrib/wpa/src/utils/json.h M contrib/wpa/src/utils/module_tests.h M contrib/wpa/src/utils/os.h M contrib/wpa/src/utils/os_unix.c M contrib/wpa/src/utils/trace.c M contrib/wpa/src/utils/trace.h M contrib/wpa/src/utils/utils_module_tests.c M contrib/wpa/src/utils/wpa_debug.c M contrib/wpa/src/utils/wpa_debug.h M contrib/wpa/src/utils/wpabuf.c M contrib/wpa/src/utils/wpabuf.h M contrib/wpa/src/utils/xml-utils.c M contrib/wpa/src/utils/xml-utils.h M contrib/wpa/src/utils/xml_libxml2.c M contrib/wpa/src/wps/http_server.c M contrib/wpa/src/wps/wps_er.c M contrib/wpa/src/wps/wps_upnp_ap.c M contrib/wpa/wpa_supplicant/Android.mk M contrib/wpa/wpa_supplicant/ChangeLog M contrib/wpa/wpa_supplicant/Makefile M contrib/wpa/wpa_supplicant/README M contrib/wpa/wpa_supplicant/README-HS20 M contrib/wpa/wpa_supplicant/README-NAN-USD M contrib/wpa/wpa_supplicant/ap.c M contrib/wpa/wpa_supplicant/bgscan_learn.c M contrib/wpa/wpa_supplicant/bgscan_simple.c M contrib/wpa/wpa_supplicant/bss.c M contrib/wpa/wpa_supplicant/bss.h M contrib/wpa/wpa_supplicant/config.c M contrib/wpa/wpa_supplicant/config.h M contrib/wpa/wpa_supplicant/config_file.c M contrib/wpa/wpa_supplicant/config_none.c M contrib/wpa/wpa_supplicant/config_ssid.h M contrib/wpa/wpa_supplicant/config_winreg.c M contrib/wpa/wpa_supplicant/ctrl_iface.c M contrib/wpa/wpa_supplicant/dbus/dbus_dict_helpers.c M contrib/wpa/wpa_supplicant/dbus/dbus_dict_helpers.h M contrib/wpa/wpa_supplicant/dbus/dbus_new.c M contrib/wpa/wpa_supplicant/dbus/dbus_new.h M contrib/wpa/wpa_supplicant/dbus/dbus_new_handlers.c M contrib/wpa/wpa_supplicant/dbus/dbus_new_handlers.h M contrib/wpa/wpa_supplicant/dbus/dbus_new_handlers_p2p.c M contrib/wpa/wpa_supplicant/dbus/dbus_new_handlers_p2p.h M contrib/wpa/wpa_supplicant/dbus/dbus_new_introspect.c M contrib/wpa/wpa_supplicant/defconfig M contrib/wpa/wpa_supplicant/dpp_supplicant.c M contrib/wpa/wpa_supplicant/dpp_supplicant.h M contrib/wpa/wpa_supplicant/driver_i.h M contrib/wpa/wpa_supplicant/eap_register.c M contrib/wpa/wpa_supplicant/eapol_test.c M contrib/wpa/wpa_supplicant/events.c M contrib/wpa/wpa_supplicant/gas_query.c M contrib/wpa/wpa_supplicant/hs20_supplicant.c M contrib/wpa/wpa_supplicant/hs20_supplicant.h M contrib/wpa/wpa_supplicant/ibss_rsn.c M contrib/wpa/wpa_supplicant/interworking.c M contrib/wpa/wpa_supplicant/main.c M contrib/wpa/wpa_supplicant/mbo.c M contrib/wpa/wpa_supplicant/mesh.c M contrib/wpa/wpa_supplicant/mesh_mpm.c M contrib/wpa/wpa_supplicant/mesh_rsn.c A contrib/wpa/wpa_supplicant/nan_supplicant.c A contrib/wpa/wpa_supplicant/nan_supplicant.h D contrib/wpa/wpa_supplicant/nan_usd.c D contrib/wpa/wpa_supplicant/nan_usd.h M contrib/wpa/wpa_supplicant/notify.c M contrib/wpa/wpa_supplicant/notify.h M contrib/wpa/wpa_supplicant/offchannel.c M contrib/wpa/wpa_supplicant/op_classes.c M contrib/wpa/wpa_supplicant/p2p_supplicant.c M contrib/wpa/wpa_supplicant/p2p_supplicant.h M contrib/wpa/wpa_supplicant/pasn_supplicant.c A contrib/wpa/wpa_supplicant/pr_supplicant.c A contrib/wpa/wpa_supplicant/pr_supplicant.h M contrib/wpa/wpa_supplicant/preauth_test.c M contrib/wpa/wpa_supplicant/robust_av.c M contrib/wpa/wpa_supplicant/rrm.c M contrib/wpa/wpa_supplicant/scan.c M contrib/wpa/wpa_supplicant/scan.h M contrib/wpa/wpa_supplicant/sme.c M contrib/wpa/wpa_supplicant/sme.h M contrib/wpa/wpa_supplicant/wnm_sta.c M contrib/wpa/wpa_supplicant/wnm_sta.h M contrib/wpa/wpa_supplicant/wpa_cli.c M contrib/wpa/wpa_supplicant/wpa_passphrase.c M contrib/wpa/wpa_supplicant/wpa_supplicant.c M contrib/wpa/wpa_supplicant/wpa_supplicant.conf M contrib/wpa/wpa_supplicant/wpa_supplicant_i.h M contrib/wpa/wpa_supplicant/wpas_glue.c M contrib/wpa/wpa_supplicant/wpas_kay.c M contrib/wpa/wpa_supplicant/wpas_module_tests.c M contrib/wpa/wpa_supplicant/wps_supplicant.c M usr.sbin/wpa/Makefile.inc M usr.sbin/wpa/hostapd/Makefile M usr.sbin/wpa/src/ap/Makefile M usr.sbin/wpa/src/common/Makefile M usr.sbin/wpa/src/crypto/Makefile M usr.sbin/wpa/src/pasn/Makefile _____________________________________________________________________________________________________________ Commit: 8d1a813bf7c40bfe0a01152d75283568879f5c96 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8d1a813bf7c40bfe0a01152d75283568879f5c96 Author: Warner Losh (Fri 31 May 2024 17:02:37 BST) Committer: Cy Schubert (Tue 13 Oct 2026 20:20:06 BST) wpa: Diff reduction with upstream I inadvertantly added gratuitous changes to upstream. Revert the gratuitous parts of 676041c41ba5 Suggested by: cy Fixes: 676041c41ba5 Sponsored by: Netflix (cherry picked from commit cab9ccf3ff8c5722dace61a814d791aeba2751c6) M contrib/wpa/src/utils/os_unix.c _____________________________________________________________________________________________________________ Commit: 1efafdc8ca75128a59b853b4ca58700411f3fddc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1efafdc8ca75128a59b853b4ca58700411f3fddc Author: Warner Losh (Fri 31 May 2024 15:44:55 BST) Committer: Cy Schubert (Tue 13 Oct 2026 20:20:06 BST) WPA: Allow CLOCK_BOOTTIME and CLOCK_MONOTONIC to #define the same Historically, these have been differnet values, and only one was defined or they were defined as different values. Now that they are about to be the same value, add #ifdef to cope. Sponsored by: Netflix Reviewed by: olce, val_packett.cool, adrian Differential Revision: https://reviews.freebsd.org/D45418 (cherry picked from commit 676041c41ba587285bb934aa2fca290ea7208038) M contrib/wpa/src/utils/os_unix.c _____________________________________________________________________________________________________________ Commit: 5c1e4dffc67f6671d704474a237b28e4aaee66da URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5c1e4dffc67f6671d704474a237b28e4aaee66da Author: Mitchell Horne (Tue 13 Oct 2026 13:50:52 BST) Committer: Mitchell Horne (Tue 13 Oct 2026 13:52:31 BST) hwpmc_amd: fix INVARIANTS build The variable 'amd_npmcs' is not yet present in this branch. This is a direct commit to stable/14. Reported by: Jenkins Sponsored by: The FreeBSD Foundation M sys/dev/hwpmc/hwpmc_amd.c _____________________________________________________________________________________________________________ Commit: d38acf590a08c6669964c268e304cceb69b5a71e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d38acf590a08c6669964c268e304cceb69b5a71e Author: Piotr Kubaj (Mon 21 Sep 2026 13:48:06 BST) Committer: Piotr Kubaj (Mon 12 Oct 2026 19:18:54 BST) powerpc: keep FP, VMX and VSX ownership changes atomic with preemption trap() and set_mcontext() change the FP/VMX/VSX ownership state in several steps with preemption enabled. A context switch in between leaves the thread computing with another thread's register contents: - enable_fpu()/enable_vec() set PCB_FPU/PCB_VEC before loading the registers, so a switch mid-load saves a half-loaded unit over the PCB. - set_mcontext() clears the frame's MSR bits and then the PCB flags; a switch in between re-enables the unit, and the thread returns to user space with it enabled but not owned, so it is neither saved nor restored until the next signal. Both paths run after every sigreturn(2), setcontext(2) and swapcontext(3). A POWER9 test that keeps f14-f31 live across a signal, with other threads using the FPU on the same CPU, saw 283 corrupted round trips out of 882000; none after this change. Hold a critical section around both, as amd64 and arm64 do. Reviewed by: jhibbits MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D60054 (cherry picked from commit 1f1043d550ea2b8282e692019f17a88896212a76) (cherry picked from commit 61afe54265dc757b42cd37d9146f4cd65d543bd4) M sys/powerpc/powerpc/exec_machdep.c M sys/powerpc/powerpc/trap.c _____________________________________________________________________________________________________________ Commit: 9d7269c6b726f9148306674e4aeec1a915496515 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9d7269c6b726f9148306674e4aeec1a915496515 Author: Minsoo Choo (Mon 12 Oct 2026 16:52:01 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 17:03:27 BST) Fix build failure after 904efcc64398 On main, casting PHYS_TO_DMAP(pa) does not require casting to pt_entry_t * because it returns void * after fe3e92e6868d ("PHYS_TO_DMAP: Return a void * instead of a vm_offset_t"). That was not MFCed to stable/14 and stable/15, thus cast the return value of PHYS_TO_DMAP(pa) to pt_entry_t * to fix build failure. Approved by: jhb (mentor) Fixes: 904efcc64398 ("powerpc/radix: include page tables...") Sponsored by: FreeBSD Foundation M sys/powerpc/aim/mmu_radix.c _____________________________________________________________________________________________________________ Commit: bf1a46ffa8af5b1aa2a8ca244074f39d69023485 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bf1a46ffa8af5b1aa2a8ca244074f39d69023485 Author: Minsoo Choo (Wed 16 Sep 2026 05:20:45 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:21 BST) libkvm: support powerpc64 radix minidumps PowerPC64 radix minidumps use a 64KB root directory followed by three levels of 4KB page tables. Add an MMU backend which walks those tables, handles large-page leaves, and decodes their always-big-endian entries on both powerpc64 and powerpc64le. Reject old radix minidumps whose pmap section is empty with a specific diagnostic. Add a synthetic powerpc64le dump test which reads a page through both its kernel and direct-map addresses. PR: 298532 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298532 ) Reviewed by: jhb Approved by: jhb (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59743 (cherry picked from commit 592ede65bd48f16e5c46a016e92b732ed90094d2) M lib/libkvm/Makefile M lib/libkvm/kvm_minidump_powerpc64.c A lib/libkvm/kvm_minidump_powerpc64_radix.c M lib/libkvm/kvm_powerpc64.h M lib/libkvm/tests/kvm_open2_test.c _____________________________________________________________________________________________________________ Commit: 904efcc643981758ce2243df3eeb455bf9f5b08a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=904efcc643981758ce2243df3eeb455bf9f5b08a Author: Minsoo Choo (Wed 16 Sep 2026 05:12:30 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:21 BST) powerpc/radix: include page tables in minidumps The radix pmap did not implement the minidump pmap callbacks, so radix minidumps were emitted with an empty pmap section. Such dumps do not contain enough information for libkvm to translate kernel virtual addresses. Snapshot the 64KB radix root table in the pmap section, add lower-level page-table pages to the sparse dump, and include pages backing non-DMAP kernel mappings. Keep the bulk direct map out of the dump while retaining the relocated kernel image. PR: 298532 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298532 ) Reviewed by: jhb Approved by: jhb (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59743 (cherry picked from commit a38a698704b0289db3260617116a455fecdd54f6) M sys/powerpc/aim/mmu_radix.c _____________________________________________________________________________________________________________ Commit: 344557b3796b8fabfe64d826fc245ce2537276b3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=344557b3796b8fabfe64d826fc245ce2537276b3 Author: Minsoo Choo (Wed 16 Sep 2026 01:14:45 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:21 BST) arm: pad minidump page table libkvm locates the sparse page array after the page-rounded PTE table size, but the ARM minidump writer emitted only the unrounded size. When the table size was not page-aligned, libkvm therefore read every dumped physical page at the wrong offset. The mismatch was introduced when libkvm began rounding ptesize. It has affected ARM minidumps since ffdeef323449 ("libkvm: Improve physical address lookup scaling."). It is exposed when the dumped KVA span is not a multiple of 4 MiB. Zero-pad the final PTE page and include the padding in the dump size. Reviewed by: jhb Approved by: jhb (mentor) Fixes: ffdeef323449 ("libkvm: Improve physical address lookup scaling.") MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59716 (cherry picked from commit 4cb357c61c004f4cf27ca12e702b44a81f2752ab) M sys/arm/arm/minidump_machdep.c _____________________________________________________________________________________________________________ Commit: 951671e79a3b24efeb89db7388801f66491cb2f5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=951671e79a3b24efeb89db7388801f66491cb2f5 Author: Minsoo Choo (Sun 20 Sep 2026 14:31:43 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:17 BST) ci: Remove Cirrus CI files Cirrus CI shutted down its service on June 1, 2026 and its CI dashboard website (https://cirrus-ci.com) is now inaccessible. Since these files are no longer used, remove them from the repository. Reviewed by: brooks, emaste, lwhsu Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59858 (cherry picked from commit 8d31b7856f774554ffd5bb382bd2b3f6534817a0) D .cirrus-ci/pkg-install.sh D .cirrus.yml _____________________________________________________________________________________________________________ Commit: 4017abda65518722ae56ac7c2f01c1f302e316aa URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4017abda65518722ae56ac7c2f01c1f302e316aa Author: Minsoo Choo (Wed 16 Sep 2026 16:33:52 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:10 BST) powerpc/radix: synchronize temporary kernel mappings The radix kremove implementation cleared a kernel PTE without invalidating its TLB entry. Reusing crashdumpmap could therefore keep accessing an old physical page, causing minidumps to contain repeated stale page contents. Invalidate the removed kernel mapping and synchronize newly installed kernel PTEs before they are accessed. Reviewed by: jhibbits Approved by: olce (mentor) Fixes: 65bbba25d214 ("powerpc64: Implement Radix MMU for POWER9 CPUs") MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59728 (cherry picked from commit 8970a9f2ef781ab4f7d3fa446f7c6ac5eda26cc0) M sys/powerpc/aim/mmu_radix.c _____________________________________________________________________________________________________________ Commit: 382f26f264bd12bf73edde593616465068b7cdea URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=382f26f264bd12bf73edde593616465068b7cdea Author: Minsoo Choo (Wed 16 Sep 2026 04:26:34 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:10 BST) libkvm: route powerpc64 minidumps to minidump backend The regular powerpc64 core probes only checked the kernel ELF and thus also matched minidumps. In particular, the powerpc64le probe could claim a minidump before the minidump backend and then reject it as an invalid ELF core. Exclude minidumps from both regular powerpc64 probes and add a regression test that verifies a powerpc64le minidump reaches the minidump parser. Reviewed by: jhibbits Approved by: olce (mentor) Fixes: f4eb39ba6bc9 ("[PowerPC64LE] libkvm powerpc64le support.") MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59719 (cherry picked from commit 51b1272fca667ad4c57d94ca24600bf68f29ebd2) M lib/libkvm/kvm_powerpc64.c M lib/libkvm/tests/kvm_open2_test.c _____________________________________________________________________________________________________________ Commit: ea3004b24770733818d3246f1b988482c98df63c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ea3004b24770733818d3246f1b988482c98df63c Author: Minsoo Choo (Tue 15 Sep 2026 04:04:16 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:10 BST) libkvm: support little-endian powerpc64 minidumps Reviewed by: jhibbits Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59719 (cherry picked from commit 7b8f3db50cc992a3676e7e5ac207024e073884d4) M lib/libkvm/kvm_minidump_powerpc64.c M lib/libkvm/kvm_minidump_powerpc64_hpt.c _____________________________________________________________________________________________________________ Commit: 281b3c767815fd9bcb1dcd7cd81131ad07849fb2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=281b3c767815fd9bcb1dcd7cd81131ad07849fb2 Author: Minsoo Choo (Sat 5 Sep 2026 01:29:35 BST) Committer: Minsoo Choo (Mon 12 Oct 2026 05:00:09 BST) ixl: fix big-endian hardware interface handling Correct the byte order at the driver interfaces that do not operate in host order. Encode little-endian Admin Queue VSI and MAC/VLAN fields, and decode firmware-provided queue handles, statistics indices, and event parameters before using them. Decode transmit descriptor writeback before examining it, and construct VLAN descriptor fields in host order for the final descriptor conversion. Store paged HMC descriptors in little-endian form and retain the selected field bits when reading HMC contexts. Keep MMIO values in host order for bus-space accessors and remove the obsolete le16_to_cpu no-op macro. In particular, retain the atomic bus_space_read_8() used for 64-bit registers. On big-endian systems, the unconverted perfect-match filter flag is presented to firmware as 0x0100 instead of 0x0001. Firmware rejects that command with EINVAL, leaving receive traffic functional only in promiscuous mode. Reviewed by: kbowling Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation, Reliable Computer Systems Lab Pull Request: https://github.com/freebsd/freebsd-src/pull/2408 (cherry picked from commit bf8c4eaee6ad85e647c3026116f58332c89e3794) M sys/dev/ixl/i40e_hmc.c M sys/dev/ixl/i40e_lan_hmc.c M sys/dev/ixl/i40e_osdep.h M sys/dev/ixl/if_ixl.c M sys/dev/ixl/ixl_iw.c M sys/dev/ixl/ixl_pf_iflib.c M sys/dev/ixl/ixl_pf_iov.c M sys/dev/ixl/ixl_pf_main.c M sys/dev/ixl/ixl_txrx.c _____________________________________________________________________________________________________________ Commit: b1023deba6dfd39b84de87eeeebcdec4aecdca62 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b1023deba6dfd39b84de87eeeebcdec4aecdca62 Author: Vinicius Ferrao (Sun 4 Oct 2026 22:28:25 BST) Committer: Rick Macklem (Sun 11 Oct 2026 04:08:34 BST) nfs_nfsdstate.c: Add an extra safety belt check for the backchannel I do not think that xp_p2 can be NULL at this point, but add an extra safety belt, just in case. (cherry picked from commit a52c50b4b7c2652954ef1bd34710a4b1fc8ef391) M sys/fs/nfsserver/nfs_nfsdstate.c _____________________________________________________________________________________________________________ Commit: 07c057b5de44e993fb445e70a9e2f77b30b83867 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=07c057b5de44e993fb445e70a9e2f77b30b83867 Author: Vinicius Ferrao (Sun 4 Oct 2026 22:07:30 BST) Committer: Rick Macklem (Sun 11 Oct 2026 04:07:05 BST) clnt_vc.c: Fix handling of broken TCP connections After more than, I don't know, maybe 10k operations: mount, copy, remove, verify and unmount cycles, one cp command hung in close() / ncl_flush and never recovered. The machine and the mount continued to work normally through a new connection, but the writes using the old connection stayed frozen. I did not understand exactly what happened. I traced what appears to be the issue in the code. My current understanding is that clnt_vc_soupcall() saw the EOF and woke the caller waiting for RPC replies, but one caller remained blocked in sosend(). That thread continued holding a reference to the old client, preventing it from being completely cleaned up. The attached patch calls socantsendmore() when EOF is received, which should wake the blocked sender and let the normal reconnect code replace the connection. (cherry picked from commit 49bec8c3dc58cf8e944f9bbbbea07e7e856ad897) M sys/rpc/clnt_vc.c _____________________________________________________________________________________________________________ Commit: 4d015c4c3f94494c05c1cad936dce6dab2501f21 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4d015c4c3f94494c05c1cad936dce6dab2501f21 Author: Rick Macklem (Sun 4 Oct 2026 21:29:43 BST) Committer: Rick Macklem (Sun 11 Oct 2026 04:04:09 BST) clnt_vc.c: Fix handling of backchannel xprt When clnt_vc_destroy() is called, it might not be the current connection. Without this patch, if it is not the current connection, xp_p2 is set NULL and xprt is released when it should not be released. This patch adds a check for "current connection" to fix the problem. Found during testing to the client RDMA code, but could happen for TCP as well. (cherry picked from commit 81a6514689cefdaa5c92b5539ae885ec8c6b3336) M sys/rpc/clnt_vc.c _____________________________________________________________________________________________________________ Commit: 869500e98c9989302db19bd1c79850299aa79f70 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=869500e98c9989302db19bd1c79850299aa79f70 Author: Philip Paeps (Tue 6 Oct 2026 04:14:03 BST) Committer: Philip Paeps (Sat 10 Oct 2026 07:46:17 BST) lib80211: fix build with eXpat 2.9.0 eXpat 2.9.0 deprecates XML_GetCurrentLineNumber() in favour of XML_GetCurrentLineNumber64(). The new function behaves the same as the old one but is not prone to 32 bit integer wrap-around. (cherry picked from commit 657c089950a0388811c7ba3f6d3e7127c297864e) M lib/lib80211/lib80211_regdomain.c _____________________________________________________________________________________________________________ Commit: 1d337176fb0ad1bf7007cd9bc90336a3ef7747b8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1d337176fb0ad1bf7007cd9bc90336a3ef7747b8 Author: Philip Paeps (Tue 6 Oct 2026 08:05:31 BST) Committer: Philip Paeps (Sat 10 Oct 2026 07:46:07 BST) contrib/expat: import expat 2.9.0 Changes: https://github.com/libexpat/libexpat/blob/R_2_9_0/expat/Changes Security: CVE-2026-102633 Security: CVE-2026-77214 MFC after: 3 days (cherry picked from commit 22c3edb31297a79ec3c7bf8f906be2df11b472d2) M contrib/expat/Changes M contrib/expat/Makefile.in M contrib/expat/README.md M contrib/expat/configure.ac M contrib/expat/doc/Makefile.in M contrib/expat/doc/reference.html M contrib/expat/doc/xmlwf.1 M contrib/expat/doc/xmlwf.xml M contrib/expat/examples/Makefile.in M contrib/expat/examples/element_declarations.c M contrib/expat/examples/elements.c M contrib/expat/examples/outline.c M contrib/expat/expat_config.h.in M contrib/expat/fuzz/xml_parse_fuzzer.c M contrib/expat/fuzz/xml_parsebuffer_fuzzer.c M contrib/expat/lib/Makefile.am M contrib/expat/lib/Makefile.in M contrib/expat/lib/expat.h M contrib/expat/lib/expat_external.h M contrib/expat/lib/internal.h M contrib/expat/lib/libexpat.map.in A contrib/expat/lib/xcs.c R076 contrib/expat/lib/xcsinc.c contrib/expat/lib/xcs.h M contrib/expat/lib/xmlparse.c M contrib/expat/lib/xmltok.c M contrib/expat/lib/xmltok_impl.c M contrib/expat/tests/Makefile.am M contrib/expat/tests/Makefile.in M contrib/expat/tests/acc_tests.c M contrib/expat/tests/alloc_tests.c M contrib/expat/tests/basic_tests.c M contrib/expat/tests/benchmark/Makefile.in M contrib/expat/tests/benchmark/benchmark.c M contrib/expat/tests/chardata.c M contrib/expat/tests/common.c M contrib/expat/tests/common.h M contrib/expat/tests/handlers.c M contrib/expat/tests/misc_tests.c A contrib/expat/tests/props_tests.c A contrib/expat/tests/props_tests.h M contrib/expat/tests/runtests.c M contrib/expat/tests/structdata.c A contrib/expat/tests/xcs_tests.c A contrib/expat/tests/xcs_tests.h M contrib/expat/xmlwf/Makefile.am M contrib/expat/xmlwf/Makefile.in M contrib/expat/xmlwf/xmlfile.c M contrib/expat/xmlwf/xmlfile.h M contrib/expat/xmlwf/xmlwf.c M lib/libexpat/Makefile M lib/libexpat/expat_config.h M lib/libexpat/libbsdxml.3 _____________________________________________________________________________________________________________ Commit: 7c2a8e3a4df4d285a444355967a623e7dc2357b4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7c2a8e3a4df4d285a444355967a623e7dc2357b4 Author: Konstantin Belousov (Fri 14 Aug 2026 06:23:22 BST) Committer: Konstantin Belousov (Fri 9 Oct 2026 03:21:04 BST) kern/kern_proc.c: do not throw out read data in get_ps_strings() PR: 297512 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297512 ) (cherry picked from commit f6000e9dd934db9fefc31eaa07a7d8fa9277484e) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: 9dbf67a7948d7ba6bc8baa6d59a30aa2dc75f564 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9dbf67a7948d7ba6bc8baa6d59a30aa2dc75f564 Author: Konstantin Belousov (Fri 14 Aug 2026 06:46:07 BST) Committer: Konstantin Belousov (Fri 9 Oct 2026 03:21:04 BST) kern/sys_process.c: make vmspace_rwmem() similar to io functions PR: 297512 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297512 ) (cherry picked from commit 1a71d24ecd0dbaf61fd2a44166e9be07c328b198) M sys/kern/sys_process.c _____________________________________________________________________________________________________________ Commit: 88a592407ef7df6e1140231f9316e5b607444eb6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=88a592407ef7df6e1140231f9316e5b607444eb6 Author: Konstantin Belousov (Thu 24 Sep 2026 19:30:57 BST) Committer: Konstantin Belousov (Fri 9 Oct 2026 01:29:53 BST) libc/stdlib/getenv.c: always allocate new environment PR: 298747 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298747 ) (cherry picked from commit dec68aeff8ce0ce154e93325a74bba6af71c87af) M lib/libc/stdlib/getenv.c _____________________________________________________________________________________________________________ Commit: 983f7f9f5089fd1f3a8dd29d6d46dddad2abe841 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=983f7f9f5089fd1f3a8dd29d6d46dddad2abe841 Author: Osvaldo Janeri Filho (Wed 30 Sep 2026 16:04:08 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:57:47 BST) pcib: Only apply ARI translation to a bridge's own secondary bus ARI changes RID interpretation only for the device on a downstream port's secondary bus. pcib_xlate_ari() applied that translation to every config access through an ARI-enabled bridge, including cycles forwarded to a subordinate bus. A non-zero slot on a subordinate bus then panics an INVARIANTS kernel and is misrouted otherwise. Translate only when the access targets this bridge's secondary bus. Reviewed by: kib, jhb Fixes: 55d3ea1731d1 ("Add support for PCIe ARI") Sponsored by: AMD Differential Revision: https://reviews.freebsd.org/D60033 (cherry picked from commit 10409ee40baf593b810cd0140f3c2f0d737c1a65) M sys/dev/pci/pci_pci.c _____________________________________________________________________________________________________________ Commit: 00476f361b2f5025672e935535d9fb4470c4124e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=00476f361b2f5025672e935535d9fb4470c4124e Author: John Baldwin (Wed 23 Sep 2026 20:15:11 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:55:20 BST) x86/NOTES: Drop stale comments about si(4) This driver was removed several years ago. Fixes: c1c9764296e5 ("Remove the si(4) driver and sicontrol(8) for Specialix serial cards.") (cherry picked from commit 600c16c71ba1c1e0ad176437bcfeea12492d5ae7) M sys/x86/conf/NOTES _____________________________________________________________________________________________________________ Commit: c530d34de89ef0c6a87dfb7529053ce332429484 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c530d34de89ef0c6a87dfb7529053ce332429484 Author: John Baldwin (Thu 13 Aug 2026 18:02:17 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:48:37 BST) rtld: Remove a stale #ifdef PIC rtld has always been built PIC since commit 7ca8e6a67068e8357e251bd3ea86253c8a751d59. The stale #ifdef might confuse a reader by thinking rtld can be built as non-PIC. Reviewed by: kib Sponsored by: AFRL, DARPA Differential Revision: https://reviews.freebsd.org/D58623 (cherry picked from commit ec8985a1003326eff53cb6b594000b7cbb2114c5) M libexec/rtld-elf/rtld.c _____________________________________________________________________________________________________________ Commit: a337053ca5ddcea570f0aebd0b17680b50cc96db URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a337053ca5ddcea570f0aebd0b17680b50cc96db Author: John Baldwin (Fri 31 Jul 2026 18:52:56 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:47:52 BST) stand: Reject ELF files with PT_LOAD segments where filesz > memsz Reviewed by: jrtc27, kib Differential Revision: https://reviews.freebsd.org/D58543 (cherry picked from commit c7400fe1df4e971670a7628ddcc856f7a6775dc6) M stand/common/load_elf.c _____________________________________________________________________________________________________________ Commit: a72d720838d20ef3b51756ee53e49c66cd0b324b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a72d720838d20ef3b51756ee53e49c66cd0b324b Author: John Baldwin (Fri 31 Jul 2026 18:52:42 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:47:42 BST) kld: Reject kernel modules with PT_LOAD segments where filesz > memsz All sorts of places in the ELF loading code assume that filesz <= memsz, so check that explicitly up front. Reported by: Jane Smith (via D57785) Reviewed by: jrtc27, kib Differential Revision: https://reviews.freebsd.org/D58542 (cherry picked from commit 486dfbb67e093a461a5ebd97f66be9b345f9de77) M sys/kern/link_elf.c _____________________________________________________________________________________________________________ Commit: a3174f0f4721ab09d69d5e676b778b418fed68ad URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a3174f0f4721ab09d69d5e676b778b418fed68ad Author: John Baldwin (Fri 31 Jul 2026 18:52:34 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:47:31 BST) libc: Reject static ELF exectables with PT_TLS segments were filesz > memsz Reviewed by: jrtc27 Differential Revision: https://reviews.freebsd.org/D58558 (cherry picked from commit b9eaf9b7cef25228e8c20e3819f1b7be94f486aa) M lib/libc/gen/tls.c _____________________________________________________________________________________________________________ Commit: 144dbb0bc0e1e9f6d0997a519cb9d85b3e3d95e3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=144dbb0bc0e1e9f6d0997a519cb9d85b3e3d95e3 Author: John Baldwin (Fri 31 Jul 2026 18:52:24 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:47:10 BST) rtld: Reject ELF files with PT_LOAD or PT_TLS segments where filesz > memsz All sorts of places in the ELF loading code assume that filesz <= memsz, so check that explicitly up front. The kernel already performs this check for the PT_LOAD segments in the main binary and rtld in imgact_elf.c. Reviewed by: jrtc27, kib Differential Revision: https://reviews.freebsd.org/D58541 (cherry picked from commit 535eb24d8451bad8de745937018800df1895a9aa) M libexec/rtld-elf/map_object.c M libexec/rtld-elf/rtld.c _____________________________________________________________________________________________________________ Commit: 1e6690a40729a469ccc5fe6ca3de819925cb78d9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1e6690a40729a469ccc5fe6ca3de819925cb78d9 Author: John Baldwin (Fri 31 Jul 2026 18:51:37 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:41:24 BST) stand: Improve error handling when loading ELF files Previously all the 'goto out' statements after the image was loaded into memory returned success rather than an error. This is despite comments indicating some of these conditions were in fact errors, and some of these error conditions (such as missing PT_DYNAMIC) are treated as errors in the kernel linker. In addition, when failing to looking up the symbols for the linker set, those cases returned failure leaking memory (though it's clear from the original code from commit ca49b3342d1e that only the second failure was intended to be an actual error). To avoid more confusion, move the assignment of `ret` to just before the `out` label so that `goto out` always returns an error. This is a more consistent pattern with other code in the tree that tends to use labels for the error case. Restructure some other code to avoid a few bogus errors. Specifically, a symbol table is not required so don't treat lack of a symbol table as an error. Also, if the start symbol for the module metadata linker set is not found, don't treat that as an error either. Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D58540 (cherry picked from commit 80ee17c0285e5520e9c1db6760e84b7727778df5) M stand/common/load_elf.c _____________________________________________________________________________________________________________ Commit: 8fc3a90f8b6123667a9cefdb703eec39d4e1dff6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8fc3a90f8b6123667a9cefdb703eec39d4e1dff6 Author: John Baldwin (Fri 31 Jul 2026 18:50:33 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:41:24 BST) stand: Remove a pointless goto Commit 505222d35fea removed a batch of code that this goto used to skip around. Reviewed by: olce, kib, markj Fixes: 505222d35fea ("Implement the long-awaited module->file cache database. A userland tool (kldxref(8)) keeps a cache of what modules and versions are inside what .ko files. I have tested this on both Alpha and i386.") Differential Revision: https://reviews.freebsd.org/D58539 (cherry picked from commit 8aec309852b5285cfa03424f7776a0bf432dff7a) M stand/common/load_elf.c _____________________________________________________________________________________________________________ Commit: 4292b51335867aff31bda98107574dfc3b0ac0da URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4292b51335867aff31bda98107574dfc3b0ac0da Author: John Baldwin (Wed 29 Jul 2026 19:38:08 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:40:38 BST) rtld: Remove write-only text_end local variable from map_object Reviewed by: kib Fixes: 561991144e42 ("Remove Obj_Entry textsize member.") Sponsored by: AFRL, DARPA Differential Revision: https://reviews.freebsd.org/D58522 (cherry picked from commit ec73badfbc2e08928d917924af491c07e1f39a09) M libexec/rtld-elf/map_object.c _____________________________________________________________________________________________________________ Commit: 88670f4c95e20e64d72a7d52a32830930f36be55 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=88670f4c95e20e64d72a7d52a32830930f36be55 Author: John Baldwin (Mon 27 Jul 2026 19:09:03 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:35:31 BST) kdump: Treat a flags argument of 0 to shmat as valid Sponsored by: AFRL, DARPA (cherry picked from commit c13a9982b56f873c7aa3374a69f6aa296a2d1968) M usr.bin/kdump/kdump.c _____________________________________________________________________________________________________________ Commit: c49debc1e7509a246f494687db840beb2211dcda URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c49debc1e7509a246f494687db840beb2211dcda Author: John Baldwin (Mon 27 Jul 2026 19:09:03 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:35:12 BST) Regenerate after fixing getfhat(2) prototype (cherry picked from commit 9bf1bcf7491de99e4b0a8dd2ba8c61d5603ab407) M sys/compat/freebsd32/freebsd32_systrace_args.c M sys/kern/systrace_args.c M sys/sys/sysproto.h _____________________________________________________________________________________________________________ Commit: 3d13a659c46ddec2485ad40affc39bc319bd7972 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3d13a659c46ddec2485ad40affc39bc319bd7972 Author: John Baldwin (Mon 27 Jul 2026 19:09:03 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:34:37 BST) getfhat: Add missing 'const' to path argument This matches the documented prototype and avoids spurious -Wincompatible-pointer-types-discards-qualifiers warnings when passing a constant pathname. Sponsored by: AFRL, DARPA (cherry picked from commit 09da0899551a63ce3eb841e4ce4385b6e48dd4ec) M sys/kern/syscalls.master M sys/sys/mount.h _____________________________________________________________________________________________________________ Commit: 75182070e41d28ebc1555fe9ce6165c6312f9030 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=75182070e41d28ebc1555fe9ce6165c6312f9030 Author: John Baldwin (Wed 1 Jul 2026 01:52:55 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:33:36 BST) ktls: Centralize the check for CBC ciphers Move the check out of ktls_enable_(rx|tx) and into ktls_create_session. Reviewed by: gallatin, markj Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D57973 (cherry picked from commit 9cee48180d7a3d612110b4433f82bade288f326b) M sys/kern/uipc_ktls.c _____________________________________________________________________________________________________________ Commit: aa0edb002f51fde3d81e26013cb497f2f26916ab URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=aa0edb002f51fde3d81e26013cb497f2f26916ab Author: John Baldwin (Tue 30 Jun 2026 19:11:29 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:33:09 BST) ktls CBC decrypt: Avoid creating zero length iovec entries If an mbuf's length in the chain for an encrypted TLS record exactly matches the remaining length of header bytes to skip, skip the mbuf entirely rather than adding a zero-length iovec entry. Sponsored by: Chelsio Communications (cherry picked from commit 1756d1cab3ce28085eec94a45c557e1af265ccd0) M sys/opencrypto/ktls_ocf.c _____________________________________________________________________________________________________________ Commit: d50323847b1b9b6a0a45b04edff57aa20dac5c71 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d50323847b1b9b6a0a45b04edff57aa20dac5c71 Author: John Baldwin (Tue 23 Jun 2026 16:51:43 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:24:05 BST) cd9660: Add support for birth times Both the Extended Attribute Record in the base ISO-9660 standard and the RockRidge timestamp extension support a file creation timestamp. Use this to populate the birthtime if present. Reviewed by: markj (earlier version) Differential Revision: https://reviews.freebsd.org/D57526 (cherry picked from commit 3d945604ef8e1aaa49e153d82821fb4c6c1e67f2) M sys/fs/cd9660/cd9660_node.c M sys/fs/cd9660/cd9660_node.h M sys/fs/cd9660/cd9660_rrip.c M sys/fs/cd9660/cd9660_vnops.c _____________________________________________________________________________________________________________ Commit: 16056a0ac98b1b94b47dce0c2e2fa1cc3ab9493c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=16056a0ac98b1b94b47dce0c2e2fa1cc3ab9493c Author: John Baldwin (Tue 23 Jun 2026 16:51:43 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:23:53 BST) cd9660: Adjust parsing of timestamps in the extended atttributes record The extended attribute record includes four different timestamps: file creation, file modification, file expiration, and file effective date. Only the first two are meaningful for stat(2). The latter two (if handled) would presumably affect if a file is visible for not. Previously, the logic here was a bit contorted and made use of the effective time. It also seemed to treat the creation time as a change time timestamp. Instead, simplify the logic such that the modification time is set to either the modification time (if present), or the creation time. The access and change times are then set to the modification time. NB: This is not used if RockRidge extensions are present, and makefs does not generate the extended attributes record. Differential Revision: https://reviews.freebsd.org/D57748 (cherry picked from commit f6dd01b417dcf247904b4653063f5fb7f22a0878) M sys/fs/cd9660/cd9660_node.c _____________________________________________________________________________________________________________ Commit: 12503dba0252988381e103dc655888ac5702be5d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=12503dba0252988381e103dc655888ac5702be5d Author: John Baldwin (Mon 22 Jun 2026 17:41:04 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:23:19 BST) cd9660: Add various length checks when parsing RRIP extensions Pass the length of a RockRidge attribute to the handler functions and validate that length in each handler. If a parsing error is detected, abort the entire parsing pass. Reviewed by: des Differential Revision: https://reviews.freebsd.org/D57136 (cherry picked from commit 9cd0d6231311bc5609403fb35377a7bb97a3cfaf) M sys/fs/cd9660/cd9660_rrip.c M sys/fs/cd9660/iso_rrip.h _____________________________________________________________________________________________________________ Commit: edc101f99c2d1dafa774d9c78bfc7d23219d95cb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=edc101f99c2d1dafa774d9c78bfc7d23219d95cb Author: John Baldwin (Wed 10 Jun 2026 14:44:10 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:23:14 BST) ppp: Reject FSM messages whose length is smaller than the message header PR: 271843 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=271843 ) Reported by: Robert Morris Reviewed by: des, emaste Differential Revision: https://reviews.freebsd.org/D57139 (cherry picked from commit 4d8fde8cff0796f32e659036543aa17d16a15b1b) M usr.sbin/ppp/fsm.c _____________________________________________________________________________________________________________ Commit: 74078264a756d41d80e9962018b6a48b52d87cb9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=74078264a756d41d80e9962018b6a48b52d87cb9 Author: John Baldwin (Wed 10 Jun 2026 14:44:10 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:23:14 BST) ppp: Permit CHAP challenges up to 255 bytes RFC 1994 does not place any limit on the length of the value field in challenge messages except that the length is a single octet which bounds the maximum length to 255. NB: I'm not sure why the local[] and peer[] arrays contain room for an authentication name (AUTHLEN) in addition to a challenge value/response, but I've just left that in place. PR: 271955 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=271955 ) Reported by: Robert Morris Reviewed by: des Differential Revision: https://reviews.freebsd.org/D57138 (cherry picked from commit 7e971892dfc5aac20bd62be7817941dbaed55f42) M usr.sbin/ppp/chap.c M usr.sbin/ppp/chap.h M usr.sbin/ppp/defs.h _____________________________________________________________________________________________________________ Commit: d143c08f88ca91d5280e26399daf94d7636b7779 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d143c08f88ca91d5280e26399daf94d7636b7779 Author: John Baldwin (Wed 10 Jun 2026 14:44:10 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:23:13 BST) ppp: Don't fetch a non-existent variadic argument Only fetch the optional mode argument to ID0open to pass to open(2) if O_CREAT is present in the flags argument. It is UB to fetch an argument that doesn't exist. On CHERI this UB results in a fault. Reviewed by: brooks Obtained from: CheriBSD Sponsored by: AFRL, DARPA Differential Revision: https://reviews.freebsd.org/D57137 (cherry picked from commit b5a8b933d4994835e10226562ff8126298c96693) M usr.sbin/ppp/id.c _____________________________________________________________________________________________________________ Commit: c7194e88e42387a8ebbf868f94c13c61df81ffc6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c7194e88e42387a8ebbf868f94c13c61df81ffc6 Author: John Baldwin (Wed 10 Jun 2026 14:44:10 BST) Committer: John Baldwin (Thu 8 Oct 2026 19:23:13 BST) cd9660: Don't parse RRIP records whose length overflows the sector boundary PR: 272896 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272896 ) Reported by: Robert Morris Reviewed by: des, emaste Differential Revision: https://reviews.freebsd.org/D57135 (cherry picked from commit 0492dbe9212ee0172e8003c487f256015478edd6) M sys/fs/cd9660/cd9660_rrip.c _____________________________________________________________________________________________________________ Commit: 87963aa8be8a75aecbc9b1ee46326ec95b1da156 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=87963aa8be8a75aecbc9b1ee46326ec95b1da156 Author: Dag-Erling Smørgrav (Tue 24 Mar 2026 11:29:37 GMT) Committer: John Baldwin (Thu 8 Oct 2026 19:23:10 BST) cd9660: Partial style sweep of Rock Ridge code This mostly just fixes indentation and continuations and adds spaces after commas and around binary operators and parentheses around return values, but cd9660_rrip_extref() was so egregiously unreadable I rewrote it. Note that this was done manually, so I may have missed a few spots, and I made no attempt to fix over-long lines. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55865 (cherry picked from commit e6a77f81d1eb345f6a8c827ecf555b88996c8763) M sys/fs/cd9660/cd9660_rrip.c _____________________________________________________________________________________________________________ Commit: b259c7f6e9ec4d0c95ca6b34c1a5db55b45089dc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b259c7f6e9ec4d0c95ca6b34c1a5db55b45089dc Author: Dimitry Andric (Mon 28 Sep 2026 19:12:33 BST) Committer: Dimitry Andric (Wed 7 Oct 2026 18:20:47 BST) Merge commit c52392a6f464 from llvm-project (by ShengYi Hung): [Clang][ExprConst] Drop PRValue for nothrow new (#226753) A user defined operator new can accept prvalue for nothrow. However, it should not be a ConstExpr. Early returns by isUsableAsGlobalAllocationFunctionInConstantEvaluation instead of doing LValue evaluation. Also, move CheckPlacement new logic into new OpCode. This decouples checking from Interp.cpp to Compiler.cpp. This fixes "Assertion failed: (E->isGLValue() || E->getType()->isFunctionType() || E->getType()->isVoidType() || isa(E->IgnoreParens())), function EvaluateLValue" when building the databases/mariadb123-server port. MFC after: 1 week (cherry picked from commit ca3747034ef484b024a202d213a2e08b16066791) M contrib/llvm-project/clang/lib/AST/ByteCode/Compiler.cpp M contrib/llvm-project/clang/lib/AST/ByteCode/Interp.cpp M contrib/llvm-project/clang/lib/AST/ByteCode/Interp.h M contrib/llvm-project/clang/lib/AST/ByteCode/Opcodes.td M contrib/llvm-project/clang/lib/AST/ExprConstant.cpp _____________________________________________________________________________________________________________ Commit: 3e8ce3834ad5d0e1c10ed9e32b721c23c991296e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e8ce3834ad5d0e1c10ed9e32b721c23c991296e Author: Mitchell Horne (Mon 16 Mar 2026 23:35:35 GMT) Committer: Mitchell Horne (Tue 6 Oct 2026 19:48:43 BST) pmc.h: bump PMC_VERSION_MINOR Bump for the addition of PMC_OP_GETCAPS and the recently added Intel CPUs. Sponsored by: The FreeBSD Foundation (cherry picked from commit e39d3a6b32331437da6c13a4aeb67e5bcca67625) M sys/sys/pmc.h _____________________________________________________________________________________________________________ Commit: 1cc380dbe8148d86ba655a92d663da0fd05fb03f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1cc380dbe8148d86ba655a92d663da0fd05fb03f Author: Ali Mashtizadeh (Sun 1 Mar 2026 22:08:30 GMT) Committer: Mitchell Horne (Tue 6 Oct 2026 19:48:37 BST) libpmc: Query hwpmc for caps This change allows for fine-grained capabilities per counter index. This is particularly useful for AMD where subclasses are not exposed to the general PMC code, but other architectures also have asymmetric behaviors when it comes to specific counter indices. A new PMC_OP_GETCAPS op is added to the hwpmc(4) ioctl interface. Reviewed by: mhorne Sponsored by: Netflix Pull Request: https://github.com/freebsd/freebsd-src/pull/2058 (cherry picked from commit 44a983d249d05d932b6cff333f130baf70febc22) M lib/libpmc/libpmc.c M share/man/man4/hwpmc.4 M sys/dev/hwpmc/hwpmc_amd.c M sys/dev/hwpmc/hwpmc_mod.c M sys/sys/pmc.h _____________________________________________________________________________________________________________ Commit: b3b90afc9db7e2d2ed8a1c58a1063b5d4901e01d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b3b90afc9db7e2d2ed8a1c58a1063b5d4901e01d Author: Roman Bogorodskiy (Fri 28 Aug 2026 18:51:31 BST) Committer: Roman Bogorodskiy (Tue 6 Oct 2026 17:39:39 BST) bhyveload: validate character disk devices Currently, bhyveload(8) does not validate the supplied disk image path. For example, it allows passing the /dev/null device, which later fails in userboot because it does not support DIOCGSECTORSIZE and DIOCGMEDIASIZE ioctls (see userdisk_init() in stand/userboot/userboot/userboot_disk.c). Fix that by checking DIOCGSECTORSIZE and DIOCGMEDIASIZE ioctls early. A similar check already exists in bhyve(8). While here, make cb_diskioctl() report the obtained sector size instead of hard-coding 512. Reviewed by: markj MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59253 (cherry picked from commit 51234535ddd6ec0afe9dd4e3f34a31b92d5cdd78) M usr.sbin/bhyveload/bhyveload.c _____________________________________________________________________________________________________________ Commit: fb099c133cae7bf6c7b9625a3d81d6a3e4bb5cbe URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fb099c133cae7bf6c7b9625a3d81d6a3e4bb5cbe Author: Dimitry Andric (Sat 3 Oct 2026 12:36:42 BST) Committer: Dimitry Andric (Tue 6 Oct 2026 17:37:58 BST) Merge commit c4ce37507537 from llvm-project (by ShengYi Hung): [Clang][Sema] Create LocalScope for Variable Template (#228280) A variable template should create its own LocalScope, as it should be opaque to other instantiations. This can occur when there are multiple instantiations in the same lexical scope. The correct behavior is that these instantiations should not be chained together. Assisted-by: Claude # Test ReleaseNote Fixes: #134148 This fixes an assertion while building the devel/glaze port. PR: 276265 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=276265 ) MFC after: 3 days (cherry picked from commit fe9c7137871ee0b5c48d4c38b87d80f72e73379e) M contrib/llvm-project/clang/lib/Sema/SemaTemplateInstantiateDecl.cpp _____________________________________________________________________________________________________________ Commit: bceab8be408d7d27637d982fecdafa916fef0f7f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bceab8be408d7d27637d982fecdafa916fef0f7f Author: Xiaoqiang Zhao (Mon 28 Sep 2026 16:14:09 BST) Committer: Dimitry Andric (Tue 6 Oct 2026 17:37:49 BST) llvm: add LoongArch target support, not enabled by default Note there is ongoing work to add LoongArch support to the base system, but having target support in llvm is an essential component. This must be explicitly enabled using WITH_LLVM_TARGET_LOONGARCH. Reviewed by: dim MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59899 (cherry picked from commit 2f49e40a684a4bffd8e368a6878384ec4f735ea8) M lib/clang/include/llvm/Config/AsmParsers.def M lib/clang/include/llvm/Config/AsmPrinters.def M lib/clang/include/llvm/Config/Disassemblers.def M lib/clang/include/llvm/Config/Targets.def M lib/clang/libllvm/Makefile M lib/clang/llvm.build.mk M share/man/man5/src.conf.5 M share/mk/src.opts.mk A tools/build/options/WITHOUT_LLVM_TARGET_BPF A tools/build/options/WITHOUT_LLVM_TARGET_LOONGARCH M tools/build/options/WITH_LLVM_TARGET_BPF A tools/build/options/WITH_LLVM_TARGET_LOONGARCH _____________________________________________________________________________________________________________ Commit: 3108ab6747524117953d0f9fba511ab4d2bcc1e2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3108ab6747524117953d0f9fba511ab4d2bcc1e2 Author: Dimitry Andric (Thu 1 Oct 2026 13:31:42 BST) Committer: Dimitry Andric (Tue 6 Oct 2026 17:34:23 BST) Merge commit 80e8c0a59189 from llvm-project (by ShengYi Hung): [DebugInfo] Fill Column 0 if Line is not found (#227559) It is possible that user specified line 0 as the start of the line in C language (using `# 0`). However, it is rejected by the Lexer as we have no line but still carries column information. As a result, we fill column to 0 if we cannot find line. Assisted-by: Claude # Test Fixes: #56186 This fixes a fatal error when building the textproc/peg port. PR: 264853 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=264853 ) MFC after: 3 days (cherry picked from commit 37c9eba1644b0f9e1b5d130ccff381122f48aebe) M contrib/llvm-project/clang/lib/CodeGen/CGDebugInfo.cpp _____________________________________________________________________________________________________________ Commit: 01f93565ff8e91ed9074d32f119d77fb40edc63a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=01f93565ff8e91ed9074d32f119d77fb40edc63a Author: Jose Luis Duran (Thu 17 Apr 2025 20:08:02 BST) Committer: Ed Maste (Mon 5 Oct 2026 20:32:38 BST) secure: Adapt Makefile to ssh-sk-client everywhere Upstream commit 7b47b40b1 ("adapt Makefile to ssh-sk-client everywhere") adapted the Makefiles to ssh-sk-client. Do the same here. Reviewed by: emaste Approved by: emaste (mentor) Differential Revision: https://reviews.freebsd.org/D49795 (cherry picked from commit 65d8491719bbc88ed45637d2381931c2d29cfe87) M secure/lib/libssh/Makefile M secure/libexec/ssh-keysign/Makefile M secure/libexec/ssh-pkcs11-helper/Makefile M secure/ssh.mk M secure/usr.bin/ssh-add/Makefile M secure/usr.bin/ssh-agent/Makefile M secure/usr.bin/ssh-keygen/Makefile M secure/usr.bin/ssh-keyscan/Makefile M secure/usr.bin/ssh/Makefile M secure/usr.sbin/sshd/Makefile _____________________________________________________________________________________________________________ Commit: 2192d42bbcde78de89177994889481ae6d334f6e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2192d42bbcde78de89177994889481ae6d334f6e Author: Ahmad Khalifa (Fri 2 Oct 2026 03:11:32 BST) Committer: Ahmad Khalifa (Mon 5 Oct 2026 20:19:48 BST) stand/images: remove translucent pixels around orb Remove semi-transparent pixels around the orb. These become more pronounced when the orb is used as the spash screen image. While here also strip metadata. MFC after: 3 days Reviewed by: tsoome Differential Revision: https://reviews.freebsd.org/D60163 (cherry picked from commit f7663278c2ba527dc681b1a806d4cc78ea49452b) M stand/images/freebsd-logo-rev.png _____________________________________________________________________________________________________________ Commit: 2082f443dda8f7f2bbe21ddee7c88af809348c78 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2082f443dda8f7f2bbe21ddee7c88af809348c78 Author: Ed Maste (Mon 24 Aug 2026 02:36:25 BST) Committer: Ed Maste (Mon 5 Oct 2026 15:40:50 BST) openssh: Add date bump command to FREEBSD-upgrade instructions Provide a convenient in-place sed edit command to update the FreeBSD VersionAddendum dates with today's date. Sponsored by: The FreeBSD Foundation (cherry picked from commit 0ec81f6a531bf7b3b06e869c99295f3d4ab9ed8e) (cherry picked from commit 2ba5b9da2be10261c383035bef932cd37d52f903) M crypto/openssh/FREEBSD-upgrade _____________________________________________________________________________________________________________ Commit: b690ed49ffd0d7467789badb742e977aff1406b7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b690ed49ffd0d7467789badb742e977aff1406b7 Author: Ed Maste (Fri 15 May 2026 17:16:45 BST) Committer: Ed Maste (Mon 5 Oct 2026 15:40:50 BST) openssh: Add reference for another local patch A bug fix was committed locally and submitted upstream. Document it in our upgrade instructions, as these sometimes take a long time before getting merged. Sponsored by: The FreeBSD Foundation (cherry picked from commit 6531070132b0210aaaeb08c0dc93cb272bed348e) (cherry picked from commit 14d6926293569048d2d04f6e5a13d80f192ad99e) M crypto/openssh/FREEBSD-upgrade _____________________________________________________________________________________________________________ Commit: 0dfc112ac722b1f0437c198f6b58a2536e69be49 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0dfc112ac722b1f0437c198f6b58a2536e69be49 Author: Ed Maste (Mon 5 Oct 2026 15:35:54 BST) Committer: Ed Maste (Mon 5 Oct 2026 15:37:30 BST) openssh: Remove residual blank line at start of Makefile This is part of commit e9ac41698b2f in main by imp@ M secure/usr.bin/scp/Makefile M secure/usr.bin/sftp/Makefile M secure/usr.bin/ssh-add/Makefile M secure/usr.bin/ssh-agent/Makefile M secure/usr.bin/ssh-keygen/Makefile M secure/usr.bin/ssh-keyscan/Makefile M secure/usr.bin/ssh/Makefile M secure/usr.bin/tests/Makefile M secure/usr.sbin/Makefile M secure/usr.sbin/Makefile.inc M secure/usr.sbin/sshd/Makefile M secure/usr.sbin/tests/Makefile _____________________________________________________________________________________________________________ Commit: dcab58551115b2299e4b0f23e26fc0b763d7cf32 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dcab58551115b2299e4b0f23e26fc0b763d7cf32 Author: Jose Luis Duran (Thu 17 Apr 2025 19:56:00 BST) Committer: Ed Maste (Mon 5 Oct 2026 15:14:44 BST) secure: Rearrange Makefile SRCS to match upstream Makefile.in SRCS entries are kept in the same order and with the same line breaks as upstream, to make comparison easier. No functional change intended. Reviewed by: emaste Approved by: emaste (mentor) Differential Revision: https://reviews.freebsd.org/D49793 (cherry picked from commit 9440aad19dca73fdd224b128ac2dc2e78191ff15) M secure/lib/libssh/Makefile M secure/libexec/sftp-server/Makefile M secure/libexec/ssh-pkcs11-helper/Makefile M secure/ssh.mk M secure/usr.bin/scp/Makefile M secure/usr.bin/sftp/Makefile M secure/usr.bin/ssh-add/Makefile _____________________________________________________________________________________________________________ Commit: 514bd4465001c5d57a9dda605d00f934f8ca4e91 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=514bd4465001c5d57a9dda605d00f934f8ca4e91 Author: Alexander Ziaee (Fri 11 Sep 2026 07:17:39 BST) Committer: Alexander Ziaee (Sun 4 Oct 2026 01:51:00 BST) rc.conf.5: Improve NOAUTO configuration + tag SPDX - Show how to start a NOAUTOed interface - "configured" is not quite right, try to improve that MFC after: 3 days Event: EuroBSDcon Devsummit 2026 Reviewed by: adrian Discussed with: Antranig Vartanian Differential Revision: https://reviews.freebsd.org/D59571 (cherry picked from commit fa7094c5b06fe31a025906bcee922a46c1b36ed6) M share/man/man5/rc.conf.5 _____________________________________________________________________________________________________________ Commit: 3b593364a92e1316c80f65550a78a5fe40e9f8c7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3b593364a92e1316c80f65550a78a5fe40e9f8c7 Author: Alexander Ziaee (Wed 16 Sep 2026 02:46:38 BST) Committer: Alexander Ziaee (Sun 4 Oct 2026 01:49:29 BST) ng manpages: Standardize descriptions Netgraph document descriptions are all over the place, wordsmith them into a standard format of "%s netgraph node", trying to describe them better to enhance accessiblity of apropos results. Event: EuroBSDcon 2026 MFC after: 3 days Reviewed by: dteske, glebius Discussed with: des, dteske, glebius Differential Revision: https://reviews.freebsd.org/D59643 (cherry picked from commit b1e3d6a668c5a8290ecf32c1badb9f0c9364d280) M share/man/man4/ng_UI.4 M share/man/man4/ng_async.4 M share/man/man4/ng_bpf.4 M share/man/man4/ng_bridge.4 M share/man/man4/ng_btsocket.4 M share/man/man4/ng_car.4 M share/man/man4/ng_checksum.4 M share/man/man4/ng_cisco.4 M share/man/man4/ng_deflate.4 M share/man/man4/ng_device.4 M share/man/man4/ng_echo.4 M share/man/man4/ng_eiface.4 M share/man/man4/ng_etf.4 M share/man/man4/ng_ether.4 M share/man/man4/ng_ether_echo.4 M share/man/man4/ng_frame_relay.4 M share/man/man4/ng_gif.4 M share/man/man4/ng_gif_demux.4 M share/man/man4/ng_hci.4 M share/man/man4/ng_hole.4 M share/man/man4/ng_hub.4 M share/man/man4/ng_iface.4 M share/man/man4/ng_ip_input.4 M share/man/man4/ng_ipfw.4 M share/man/man4/ng_ksocket.4 M share/man/man4/ng_l2cap.4 M share/man/man4/ng_l2tp.4 M share/man/man4/ng_lmi.4 M share/man/man4/ng_macfilter.4 M share/man/man4/ng_mppc.4 M share/man/man4/ng_nat.4 M share/man/man4/ng_netflow.4 M share/man/man4/ng_one2many.4 M share/man/man4/ng_patch.4 M share/man/man4/ng_pipe.4 M share/man/man4/ng_ppp.4 M share/man/man4/ng_pppoe.4 M share/man/man4/ng_pptpgre.4 M share/man/man4/ng_pred1.4 M share/man/man4/ng_rfc1490.4 M share/man/man4/ng_socket.4 M share/man/man4/ng_source.4 M share/man/man4/ng_split.4 M share/man/man4/ng_tag.4 M share/man/man4/ng_tcpmss.4 M share/man/man4/ng_tee.4 M share/man/man4/ng_tty.4 M share/man/man4/ng_ubt.4 M share/man/man4/ng_vjc.4 M share/man/man4/ng_vlan.4 M share/man/man4/ng_vlan_rotate.4 M usr.sbin/nghook/nghook.8 _____________________________________________________________________________________________________________ Commit: 2febf35c90207493026ef16014b353548a375d0f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2febf35c90207493026ef16014b353548a375d0f Author: Alexander Ziaee (Tue 15 Sep 2026 21:44:12 BST) Committer: Alexander Ziaee (Sun 4 Oct 2026 01:47:55 BST) bcm2835_pwm: Fix dev.pwm.0.ratio2 register A typo in the sysctl for RPI0 PWM channel 2 was causing it to write to the wrong register, leaving it misconfigured if used. PR: 298301 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298301 ) MFC after: 3 days (problem reported on 14.4) Reviewed by: adrian Reported by: Attila Kover Differential Revision: https://reviews.freebsd.org/D59644 (cherry picked from commit 32878e64e687a848fceb710ab9b45e396f27db3f) M sys/arm/broadcom/bcm2835/bcm2835_pwm.c _____________________________________________________________________________________________________________ Commit: 8b360b405ccca12ebdc9509049d9bccad4074e1e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8b360b405ccca12ebdc9509049d9bccad4074e1e Author: Doug Rabson (Sat 3 Oct 2026 15:35:40 BST) Committer: Dave Cottlehuber (Sat 3 Oct 2026 15:35:40 BST) release: Avoid generating .pkgsave files in OCI images This also installs the pkg key from the current source tree instead of using the one currently installed on the host. Reviewed by: dch MFC after: 1 day Differential Revision: https://reviews.freebsd.org/D52615 (cherry picked from commit e21e6e96b662dcbb2f0e37ab356c9dded62a586e) M release/scripts/make-oci-image.sh M release/tools/oci-image-runtime.conf _____________________________________________________________________________________________________________ Commit: 4c46d1aac7831da0c31b10d99dfd0780b1972ab9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4c46d1aac7831da0c31b10d99dfd0780b1972ab9 Author: Roman Bogorodskiy (Thu 27 Aug 2026 18:40:43 BST) Committer: Roman Bogorodskiy (Sat 3 Oct 2026 11:54:53 BST) bhyveload: do not hang on EOF from console input Currently, when bhyveload(8) fails to boot the guest, it drops into the loader prompt waiting for user input. This behaviour is inconvenient when using bhyveload(8) from scripts. Make it exit when it receives EOF from console input. PR: 286289 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286289 ) Reviewed by: markj MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59226 (cherry picked from commit 8c20260bc55d7b4be0cbcf0a940505ae15ab41a9) M usr.sbin/bhyveload/bhyveload.c _____________________________________________________________________________________________________________ Commit: 7b8c8057225692601ce8512da5d4038b179ec22c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7b8c8057225692601ce8512da5d4038b179ec22c Author: Philip Paeps (Wed 30 Sep 2026 03:47:45 BST) Committer: Philip Paeps (Sat 3 Oct 2026 07:56:30 BST) contrib/tzdata: import tzdata 2026e Changes: https://github.com/eggert/tz/blob/2026e/NEWS Briefly: Manitoba moves to permanent -05 on 2026-10-31. (cherry picked from commit f11af6535044c8266d52806d72b07e939f94049c) M contrib/tzdata/NEWS M contrib/tzdata/backzone M contrib/tzdata/europe M contrib/tzdata/northamerica M contrib/tzdata/theory.html M contrib/tzdata/version M contrib/tzdata/zone.tab M contrib/tzdata/zone1970.tab M contrib/tzdata/zonenow.tab _____________________________________________________________________________________________________________ Commit: abed4cb15735d9743da4ef979ceef0ec678289d1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=abed4cb15735d9743da4ef979ceef0ec678289d1 Author: Minsoo Choo (Sun 6 Sep 2026 23:49:02 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:55 BST) sched: factor out hogticks calculation into sched_update_hogticks() Suggested by: olce Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59471 (cherry picked from commit 5a879394ba2eac14f65b466a46dae39326df00db) M sys/kern/sched_4bsd.c M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: 0facbd5a1d1a3949cfa93590836c6e06af08ef87 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0facbd5a1d1a3949cfa93590836c6e06af08ef87 Author: Minsoo Choo (Tue 25 Aug 2026 04:24:27 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:54 BST) sched_ule: fix typo in comment Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59409 (cherry picked from commit 5803063625371dfbaf68e55b0d9e15021f103e28) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: a7cedda695323a4865a08df33fc4f2a80b2e4699 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a7cedda695323a4865a08df33fc4f2a80b2e4699 Author: Minsoo Choo (Tue 25 Aug 2026 00:35:27 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:54 BST) sched_ule: fix invalid tdq_slice() and sched_slice_min sched_slice_min should always to be greater than zero. When modifying sched_slice through sysctl, if the new value is less than SCHED_SLICE_MIN_DIVISOR, sched_slice_min is computed to zero. Add imax(1, ...) to prevent this. tdq_slice() should not return a value less than sched_slice_min since that will cause integer underflow of ts2->ts_slice in sched_ule_fork_thread. SCHED_SLICE_MIN_DIVISOR is currently set to 6 so when load is 5 and sched_slice is 4, the two if conditions in tdq_slice() will pass and the function will return zero. Thus use imax() so tdq_slice returns sched_slice_min at minimum. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59408 (cherry picked from commit 477d2ea79252054596c73fa5f485bd224c028fd9) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: 8ef613e6ee9c5137d4101d22e808481da528a649 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8ef613e6ee9c5137d4101d22e808481da528a649 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:38 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:54 BST) sched_ule: fix comment on ts_slice In ULE ts_slice stores the number of ticks of slice passed not remaining. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59407 (cherry picked from commit 872074c50e99ab8858c2defe255d716f8f75f15b) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: 8ad706ea6eef230dee369a68de0b2ab562fab343 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8ad706ea6eef230dee369a68de0b2ab562fab343 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:37 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:54 BST) sched_4bsd: fix vague comment The comment "was incremented in schedcpu()" doesn't give enough background for decrementing ts_slptime by 1 (thus ignoring decay_cpu() for 1 ts_slptime). More accurately, ts_slptime is decremented by 1 because decay_cpu() has already executed once in schedcpu() when ts_slptime was 1. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59406 (cherry picked from commit cd33abbce5a5c3b454f00ca3d0ecd71c2234106c) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: f11c5eb89b6b99d039a3ea5caca968d3c73a5f7b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f11c5eb89b6b99d039a3ea5caca968d3c73a5f7b Author: Minsoo Choo (Mon 24 Aug 2026 03:25:37 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:54 BST) sched_4bsd: remove obsolete comment 'awake' checks if a thread, not a process, is awake. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59404 (cherry picked from commit 6c0c77e190b27d768595ef5b38d798430fb03a8b) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: a4f40ac17dfef9dd7e1924ca73fff2fd394768f0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a4f40ac17dfef9dd7e1924ca73fff2fd394768f0 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:36 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:53 BST) sched_4bsd: move comment to correct location Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59403 (cherry picked from commit 039498c2735ee0697da24b9c60c9e67680f91f31) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: efd9712ed3a1e9ce27d5adc3490e497aecf7f478 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=efd9712ed3a1e9ce27d5adc3490e497aecf7f478 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:36 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:53 BST) sched_4bsd: fix comment in maybe_preempt() The comment says the new thread's priority is not a realtime priority while the code states pri > PRI_MAX_ITHD which is interrupt priorities not realtime. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59402 (cherry picked from commit 351f6733180cebdc83585f9a00677f4998f6c6f1) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: c087ee05b525c7dfc0a2370e5770c89651d56588 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c087ee05b525c7dfc0a2370e5770c89651d56588 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:35 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:44:50 BST) sched: fix kern.sched.{4bsd,ule}.slice Fix three problems with kern.sched.{4bsd,ule}.slice: * Guarantee minimum slice is 1. * Recalculate hogticks on sysctl write. * For ULE, recalculate sched_slice_min on sysctl write. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59401 (cherry picked from commit 179f5b2bfedccc762352f06057f4e389bfabb2ea) M sys/kern/sched_4bsd.c M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: 069c6f651352a51240bfe362bec6f71631588c28 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=069c6f651352a51240bfe362bec6f71631588c28 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:34 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:40:09 BST) sched_ule: fix typo goup to group Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59400 (cherry picked from commit f609ca733fee72894634f751d1fbc3db53d603dc) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: 188234ac6e1c069a912a67b2f41e175f139e33e0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=188234ac6e1c069a912a67b2f41e175f139e33e0 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:34 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:40:09 BST) sched_ule: remove unused KTR_ULE Commit 62fa74d95a16 ("Add support for the new cpu...") removed all uses of KTR_ULE, leaving the macro unused. Reviewed by: olce Approved by: olce (mentor) Fixes: 62fa74d95a16 ("Add support for the new cpu...") MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59399 (cherry picked from commit 7997d2a18150a449b563c87490e8d440bb1023f3) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: be9536d3c4d21b49c4731d81a9f0b83485cdcc37 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=be9536d3c4d21b49c4731d81a9f0b83485cdcc37 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:33 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:40:09 BST) sched_4bsd: remove obsolete comment In old Unix, the whole process address space including scheduler-related data was paged out to disk. We now allocate thread-related data with UMA on wired memory which never page out. Thus this comment is now obsolete. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59398 (cherry picked from commit 46416a57eb7b6d74fda13cc6e40a43bdfa6b7da9) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: e3c943851a9cf65604b5b4546e8856dceb018d86 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e3c943851a9cf65604b5b4546e8856dceb018d86 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:32 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:40:08 BST) sched_4bsd: update function name in comment In b43179fbe815 ("Create a new scheduler api..."), schedclock() was renamed to sched_clock() but the function name in the comment remained still. Update the comment to reflect up-to-date name for schedclock(). Reviewed by: olce Approved by: olce (mentor) Fixes: b43179fbe815 ("Create a new scheduler api...") MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59397 (cherry picked from commit 5d67118d2c7388bdc065e640719553ff4d9eea89) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: c0e3588717033041e7bce8f0bdfe3212afdc6ca1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c0e3588717033041e7bce8f0bdfe3212afdc6ca1 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:32 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:40:08 BST) sched_4bsd: add static assertion for nice weight When NICE_WEIGHT * (PRIO_MAX - PRIO_MIN) exceeds the timeshare range, two CPU-bound threads with different nice values can have the same priority as their nice values are clamped to the timeshare range limit. Add static assertion on NICE_WEIGHT to ensure that there is always enough room for nice values in the both end of the timeshare priority range. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59396 (cherry picked from commit e90be6fdf08526624f407923d003b66efa23d304) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: f6bbf7b80e75d475d3156053a040bc7f6f1576ca URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f6bbf7b80e75d475d3156053a040bc7f6f1576ca Author: Minsoo Choo (Mon 24 Aug 2026 03:25:31 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:40:08 BST) sched_4bsd: remove dumping from maybe_preempt() 'dumping' is true only when kernel is dumping after crash (see minidumpsys()) so KERNEL_PANICKED() will catch this. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59395 (cherry picked from commit 1dfefffcbdc652ee88a3baa284182f96e20faf17) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: c7c6e744ad432570f91631fe1931cb0767097294 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c7c6e744ad432570f91631fe1931cb0767097294 Author: Minsoo Choo (Mon 24 Aug 2026 03:25:30 BST) Committer: Minsoo Choo (Fri 2 Oct 2026 16:40:03 BST) sched_4bsd: remove kern.sched.4bsd.followon kern.sched.4bsd.followon was enabled only for KSE. It was never compiled since ad1e7d285ab1 and KSE was removed years ago. Now it's time to remove this tunable. Reviewed by: olce Approved by: olce (mentor) MFC after: 2 weeks Sponsored by: FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59394 (cherry picked from commit d29c9f5aca3463e3c7f2fa2263795a78c6430d2d) M sys/kern/sched_4bsd.c _____________________________________________________________________________________________________________ Commit: ec3ebfaf9fd37ab937141f6b4fca548b1c9173a3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ec3ebfaf9fd37ab937141f6b4fca548b1c9173a3 Author: Yunheeee (Sat 26 Sep 2026 04:10:04 BST) Committer: Xin LI (Fri 2 Oct 2026 06:05:44 BST) MFC: fsck_msdosfs: fix head bitmap over-allocation on 32-bit platforms bitmap_ctor() computed the allocation size as roundup2(bits, LONG_BIT) / (LONG_BIT / 8) The dividend is a count of bits, so converting it to bytes requires dividing by 8 (bits per byte), not by LONG_BIT / 8 (bytes per long). The two divisors happen to coincide on LP64, but on ILP32 platforms the head bitmap was allocated at twice the required size; for a FAT32 file system with close to 2^28 clusters, that is 64 MiB instead of 32 MiB. The extra half of the allocation was never accessed, so there is no functional change other than the reduced memory footprint. Pull Request: https://github.com/freebsd/freebsd-src/pull/2440 (cherry picked from commit 269002da453895fc935101afefeb02d2c7d10360) M sbin/fsck_msdosfs/fat.c _____________________________________________________________________________________________________________ Commit: 2ccc24409759cf1f7fb0d67ef429da9dd40f6ff8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2ccc24409759cf1f7fb0d67ef429da9dd40f6ff8 Author: Enji Cooper (Thu 1 Oct 2026 03:08:14 BST) Committer: Enji Cooper (Fri 2 Oct 2026 01:28:35 BST) crypto/openssl: upgrade to 3.0.22 All of the security content from 3.0.22 has been merged to this branch already; this follows through with the remainder of the changes to finish off the version update -- in part to make future updates easier. This is a direct commit to :stable/14. See commit 3180d4d82f5 a description of the content update done between the two versions, as well as the update methodology used when importing OpenSSL 3.0.22. M crypto/openssl/CHANGES.md M crypto/openssl/CONTRIBUTING.md M crypto/openssl/NEWS.md M crypto/openssl/README-FIPS.md M crypto/openssl/VERSION.dat M crypto/openssl/apps/lib/apps.c M crypto/openssl/apps/lib/vms_term_sock.c M crypto/openssl/apps/s_client.c D crypto/openssl/crypto/aes/aes_x86core.c M crypto/openssl/crypto/aes/asm/aesni-mb-x86_64.pl M crypto/openssl/crypto/aes/asm/aesni-sha1-x86_64.pl M crypto/openssl/crypto/aes/asm/aesni-sha256-x86_64.pl M crypto/openssl/crypto/asn1/a_d2i_fp.c M crypto/openssl/crypto/asn1/a_mbstr.c M crypto/openssl/crypto/asn1/asn1_gen.c M crypto/openssl/crypto/bn/asm/rsaz-avx2.pl M crypto/openssl/crypto/bn/asm/rsaz-x86_64.pl M crypto/openssl/crypto/bn/asm/x86_64-mont.pl M crypto/openssl/crypto/bn/asm/x86_64-mont5.pl M crypto/openssl/crypto/bn/bn_add.c M crypto/openssl/crypto/bn/bn_exp.c M crypto/openssl/crypto/bn/bn_lib.c M crypto/openssl/crypto/chacha/asm/chacha-x86.pl M crypto/openssl/crypto/chacha/asm/chacha-x86_64.pl M crypto/openssl/crypto/cmp/cmp_protect.c M crypto/openssl/crypto/cms/cms_asn1.c M crypto/openssl/crypto/cms/cms_env.c M crypto/openssl/crypto/cms/cms_kari.c M crypto/openssl/crypto/cms/cms_local.h M crypto/openssl/crypto/cms/cms_pwri.c M crypto/openssl/crypto/cms/cms_smime.c M crypto/openssl/crypto/ct/ct_b64.c M crypto/openssl/crypto/ctype.c M crypto/openssl/crypto/dh/dh_backend.c M crypto/openssl/crypto/dh/dh_check.c M crypto/openssl/crypto/ec/asm/ecp_nistz256-x86_64.pl M crypto/openssl/crypto/ec/asm/x25519-x86_64.pl M crypto/openssl/crypto/err/openssl.txt M crypto/openssl/crypto/ffc/ffc_params_generate.c M crypto/openssl/crypto/modes/asm/aesni-gcm-x86_64.pl M crypto/openssl/crypto/modes/asm/ghash-x86_64.pl M crypto/openssl/crypto/pem/pvkfmt.c M crypto/openssl/crypto/pkcs12/p12_add.c M crypto/openssl/crypto/pkcs12/p12_decr.c M crypto/openssl/crypto/pkcs12/p12_utl.c M crypto/openssl/crypto/pkcs7/pk7_doit.c M crypto/openssl/crypto/pkcs7/pk7_lib.c M crypto/openssl/crypto/poly1305/asm/poly1305-x86.pl M crypto/openssl/crypto/poly1305/asm/poly1305-x86_64.pl M crypto/openssl/crypto/rand/rand_lib.c M crypto/openssl/crypto/sha/asm/sha1-586.pl M crypto/openssl/crypto/sha/asm/sha1-mb-x86_64.pl M crypto/openssl/crypto/sha/asm/sha1-x86_64.pl M crypto/openssl/crypto/sha/asm/sha256-586.pl M crypto/openssl/crypto/sha/asm/sha256-mb-x86_64.pl M crypto/openssl/crypto/sha/asm/sha512-x86_64.pl M crypto/openssl/crypto/threads_win.c M crypto/openssl/crypto/x509/by_dir.c M crypto/openssl/crypto/x509/pcy_cache.c M crypto/openssl/crypto/x509/v3_ncons.c M crypto/openssl/crypto/x509/x509_err.c M crypto/openssl/crypto/x509/x509_vfy.c M crypto/openssl/crypto/x509/x_crl.c M crypto/openssl/crypto/x509/x_pubkey.c M crypto/openssl/doc/man3/ASN1_INTEGER_get_int64.pod M crypto/openssl/doc/man3/ASN1_aux_cb.pod M crypto/openssl/doc/man3/ASN1_item_d2i_bio.pod M crypto/openssl/doc/man3/BIO_s_datagram.pod M crypto/openssl/doc/man3/BN_generate_prime.pod M crypto/openssl/doc/man3/SSL_CTX_set_verify.pod M crypto/openssl/doc/man7/fips_module.pod M crypto/openssl/doc/man7/openssl-core_dispatch.h.pod M crypto/openssl/include/internal/constant_time.h M crypto/openssl/include/openssl/opensslv.h M crypto/openssl/include/openssl/x509err.h M crypto/openssl/providers/baseprov.c M crypto/openssl/providers/defltprov.c M crypto/openssl/providers/fips-sources.checksums M crypto/openssl/providers/fips.checksum M crypto/openssl/providers/fips/fipsprov.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_ocb.c M crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_ccm.c M crypto/openssl/providers/implementations/macs/poly1305_prov.c M crypto/openssl/providers/implementations/rands/test_rng.c M crypto/openssl/providers/implementations/signature/rsa_sig.c M crypto/openssl/providers/implementations/storemgmt/file_store_any2obj.c M crypto/openssl/ssl/record/rec_layer_d1.c M crypto/openssl/ssl/record/record.h M crypto/openssl/ssl/record/record_local.h M crypto/openssl/ssl/record/ssl3_record.c M crypto/openssl/ssl/s3_lib.c M crypto/openssl/ssl/statem/statem_clnt.c M crypto/openssl/ssl/statem/statem_srvr.c M crypto/openssl/ssl/t1_lib.c M crypto/openssl/test/asn1_decode_test.c A crypto/openssl/test/certs/delta-crl-as-complete-ca.pem A crypto/openssl/test/certs/delta-crl-as-complete-delta-reasons.pem A crypto/openssl/test/certs/delta-crl-as-complete-delta.pem A crypto/openssl/test/certs/delta-crl-as-complete-leaf.pem A crypto/openssl/test/certs/server-ec-compressed-cert.pem A crypto/openssl/test/certs/server-ec-compressed-key.pem M crypto/openssl/test/cmp_protect_test.c M crypto/openssl/test/cmsapitest.c M crypto/openssl/test/crltest.c M crypto/openssl/test/endecode_test.c M crypto/openssl/test/evp_extra_test.c M crypto/openssl/test/p_test.c M crypto/openssl/test/pkcs7_test.c M crypto/openssl/test/punycode_test.c D crypto/openssl/test/recipes/00-prep_fipsmodule_cnf.t D crypto/openssl/test/recipes/01-test_abort.t D crypto/openssl/test/recipes/01-test_fipsmodule_cnf.t D crypto/openssl/test/recipes/01-test_sanity.t D crypto/openssl/test/recipes/01-test_symbol_presence.t D crypto/openssl/test/recipes/01-test_test.t D crypto/openssl/test/recipes/02-test_errstr.t D crypto/openssl/test/recipes/02-test_internal_context.t D crypto/openssl/test/recipes/02-test_internal_ctype.t D crypto/openssl/test/recipes/02-test_internal_exts.t D crypto/openssl/test/recipes/02-test_internal_keymgmt.t D crypto/openssl/test/recipes/02-test_internal_provider.t D crypto/openssl/test/recipes/02-test_lhash.t D crypto/openssl/test/recipes/02-test_localetest.t D crypto/openssl/test/recipes/02-test_ordinals.t D crypto/openssl/test/recipes/02-test_sparse_array.t D crypto/openssl/test/recipes/02-test_stack.t D crypto/openssl/test/recipes/03-test_exdata.t D crypto/openssl/test/recipes/03-test_fipsinstall.t D crypto/openssl/test/recipes/03-test_internal_asn1.t D crypto/openssl/test/recipes/03-test_internal_asn1_dsa.t D crypto/openssl/test/recipes/03-test_internal_bn.t D crypto/openssl/test/recipes/03-test_internal_chacha.t D crypto/openssl/test/recipes/03-test_internal_curve448.t D crypto/openssl/test/recipes/03-test_internal_ec.t D crypto/openssl/test/recipes/03-test_internal_ffc.t D crypto/openssl/test/recipes/03-test_internal_mdc2.t D crypto/openssl/test/recipes/03-test_internal_modes.t D crypto/openssl/test/recipes/03-test_internal_namemap.t D crypto/openssl/test/recipes/03-test_internal_poly1305.t D crypto/openssl/test/recipes/03-test_internal_rsa_sp800_56b.t D crypto/openssl/test/recipes/03-test_internal_siphash.t D crypto/openssl/test/recipes/03-test_internal_sm2.t D crypto/openssl/test/recipes/03-test_internal_sm3.t D crypto/openssl/test/recipes/03-test_internal_sm4.t D crypto/openssl/test/recipes/03-test_internal_ssl_cert_table.t D crypto/openssl/test/recipes/03-test_internal_x509.t D crypto/openssl/test/recipes/03-test_params_api.t D crypto/openssl/test/recipes/03-test_property.t D crypto/openssl/test/recipes/03-test_ui.t D crypto/openssl/test/recipes/04-test_asn1_decode.t D crypto/openssl/test/recipes/04-test_asn1_encode.t D crypto/openssl/test/recipes/04-test_asn1_parse.t D crypto/openssl/test/recipes/04-test_asn1_stable_parse.t D crypto/openssl/test/recipes/04-test_asn1_stable_parse_data/asn1_stable_parse.cnf D crypto/openssl/test/recipes/04-test_asn1_string_table.t D crypto/openssl/test/recipes/04-test_bio_callback.t D crypto/openssl/test/recipes/04-test_bio_core.t D crypto/openssl/test/recipes/04-test_bioprint.t D crypto/openssl/test/recipes/04-test_conf.t D crypto/openssl/test/recipes/04-test_conf_data/dollarid_off.cnf D crypto/openssl/test/recipes/04-test_conf_data/dollarid_off.txt D crypto/openssl/test/recipes/04-test_conf_data/dollarid_on.cnf D crypto/openssl/test/recipes/04-test_conf_data/dollarid_on.txt D crypto/openssl/test/recipes/04-test_conf_data/oversized_line.cnf D crypto/openssl/test/recipes/04-test_conf_data/oversized_line.txt D crypto/openssl/test/recipes/04-test_encoder_decoder.t D crypto/openssl/test/recipes/04-test_encoder_decoder_legacy.t D crypto/openssl/test/recipes/04-test_err.t D crypto/openssl/test/recipes/04-test_hexstring.t D crypto/openssl/test/recipes/04-test_nodefltctx.t D crypto/openssl/test/recipes/04-test_param_build.t D crypto/openssl/test/recipes/04-test_params.t D crypto/openssl/test/recipes/04-test_params_conversion.t D crypto/openssl/test/recipes/04-test_params_conversion_data/native_types.txt D crypto/openssl/test/recipes/04-test_pem_read_depr.t D crypto/openssl/test/recipes/04-test_pem_read_depr_data/dhparams.pem D crypto/openssl/test/recipes/04-test_pem_read_depr_data/dsaparams.pem D crypto/openssl/test/recipes/04-test_pem_read_depr_data/dsaprivatekey.pem D crypto/openssl/test/recipes/04-test_pem_read_depr_data/dsapublickey.pem D crypto/openssl/test/recipes/04-test_pem_read_depr_data/rsaprivatekey.pem D crypto/openssl/test/recipes/04-test_pem_read_depr_data/rsapublickey.pem D crypto/openssl/test/recipes/04-test_pem_read_depr_data/x942params.pem D crypto/openssl/test/recipes/04-test_pem_reading.t D crypto/openssl/test/recipes/04-test_pem_reading_data/NOTES.txt D crypto/openssl/test/recipes/04-test_pem_reading_data/beermug.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-1023line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-1024line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-1025line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-254-chars-at-the-end.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-254-chars-in-the-middle.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-255line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-256line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-257line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-blankline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-bom.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-comment.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-earlypad.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-extrapad.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-infixwhitespace.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-junk.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-leadingwhitespace.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-longline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-misalignedpad.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-onecolumn.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-oneline-multiple-of-254.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-oneline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-shortandlongline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-shortline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-threecolumn.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert-trailingwhitespace.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/cert.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/csr.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-1023line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-1024line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-1025line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-255line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-256line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-257line.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-blankline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-comment.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-corruptedheader.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-corruptiv.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-earlypad.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-extrapad.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-infixwhitespace.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-junk.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-leadingwhitespace.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-longline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-misalignedpad.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-onecolumn.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-oneline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-onelineheader.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-shortandlongline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-shortline.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-threecolumn.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa-trailingwhitespace.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsa.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/dsaparam.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/key.pem D crypto/openssl/test/recipes/04-test_pem_reading_data/wellknown D crypto/openssl/test/recipes/04-test_provfetch.t D crypto/openssl/test/recipes/04-test_provider.t D crypto/openssl/test/recipes/04-test_provider_fallback.t D crypto/openssl/test/recipes/04-test_provider_pkey.t D crypto/openssl/test/recipes/04-test_punycode.t D crypto/openssl/test/recipes/04-test_upcalls.t D crypto/openssl/test/recipes/05-test_bf.t D crypto/openssl/test/recipes/05-test_cast.t D crypto/openssl/test/recipes/05-test_cmac.t D crypto/openssl/test/recipes/05-test_des.t D crypto/openssl/test/recipes/05-test_hmac.t D crypto/openssl/test/recipes/05-test_idea.t D crypto/openssl/test/recipes/05-test_pbe.t D crypto/openssl/test/recipes/05-test_rand.t D crypto/openssl/test/recipes/05-test_rc2.t D crypto/openssl/test/recipes/05-test_rc4.t D crypto/openssl/test/recipes/05-test_rc5.t D crypto/openssl/test/recipes/06-test_algorithmid.t D crypto/openssl/test/recipes/06-test_rdrand_sanity.t D crypto/openssl/test/recipes/10-test_bn.t D crypto/openssl/test/recipes/10-test_bn_data/bnexp.txt D crypto/openssl/test/recipes/10-test_bn_data/bngcd.txt D crypto/openssl/test/recipes/10-test_bn_data/bnmod.txt D crypto/openssl/test/recipes/10-test_bn_data/bnmul.txt D crypto/openssl/test/recipes/10-test_bn_data/bnshift.txt D crypto/openssl/test/recipes/10-test_bn_data/bnsum.txt D crypto/openssl/test/recipes/10-test_exp.t D crypto/openssl/test/recipes/15-test_dh.t D crypto/openssl/test/recipes/15-test_dsa.t D crypto/openssl/test/recipes/15-test_dsaparam.t D crypto/openssl/test/recipes/15-test_dsaparam_data/invalid/p10240_q256_too_big.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/invalid/p2048_q256_bad_q.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/invalid/p768_q160_too_small.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q160_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q160_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q160_t1864.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q160_t1864_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q224_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q224_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q256_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p1024_q256_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q160_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q160_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q224_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q224_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q224_t1864.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q224_t1864_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q256_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q256_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q256_t1864.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p2048_q256_t1864_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q160_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q160_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q224_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q224_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q256_t1862.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q256_t1862_gind1.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q256_t1864.pem D crypto/openssl/test/recipes/15-test_dsaparam_data/valid/p3072_q256_t1864_gind1.pem D crypto/openssl/test/recipes/15-test_ec.t D crypto/openssl/test/recipes/15-test_ecdsa.t D crypto/openssl/test/recipes/15-test_ecparam.t D crypto/openssl/test/recipes/15-test_ecparam_data/invalid/c2pnb208w1-reducible.pem D crypto/openssl/test/recipes/15-test_ecparam_data/invalid/nistp256-nonprime.pem D crypto/openssl/test/recipes/15-test_ecparam_data/invalid/nistp256-offcurve.pem D crypto/openssl/test/recipes/15-test_ecparam_data/invalid/nistp256-wrongorder.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/c2pnb163v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/c2pnb208w1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/secp160k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/secp192k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/secp224k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/secp256k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/secp521r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect113r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect113r2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect163k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect163r2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect193r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect193r2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect233k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect233r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect239k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect283k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect283r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect409k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect409r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect571k1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/sect571r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls10-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls11-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls3-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls4-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls5-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls8-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/noncanon/wap-wsg-idm-ecid-wtls9-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb163v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb163v2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb163v2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb163v3-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb163v3-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb176v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb176v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb208w1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb272w1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb272w1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb304w1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb304w1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb368w1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2pnb368w1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb191v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb191v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb191v2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb191v2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb191v3-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb191v3-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb239v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb239v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb239v2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb239v2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb239v3-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb239v3-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb359v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb359v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb431r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/c2tnb431r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime192v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime192v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime192v2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime192v2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime192v3-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime192v3-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime239v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime239v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime239v2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime239v2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime239v3-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime239v3-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime256v1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/prime256v1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp112r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp112r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp112r2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp112r2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp128r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp128r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp128r2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp128r2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp160k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp160r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp160r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp160r2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp160r2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp192k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp224k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp224r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp224r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp256k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp384r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp384r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/secp521r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect113r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect113r2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect131r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect131r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect131r2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect131r2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect163k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect163r1-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect163r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect163r2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect193r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect193r2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect233k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect233r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect239k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect283k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect283r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect409k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect409r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect571k1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sect571r1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sm2-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/sm2-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls1-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls10-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls11-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls12-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls12-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls3-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls4-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls5-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls6-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls6-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls7-explicit.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls7-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls8-named.pem D crypto/openssl/test/recipes/15-test_ecparam_data/valid/wap-wsg-idm-ecid-wtls9-named.pem D crypto/openssl/test/recipes/15-test_gendh.t D crypto/openssl/test/recipes/15-test_gendhparam.t D crypto/openssl/test/recipes/15-test_gendsa.t D crypto/openssl/test/recipes/15-test_genec.t D crypto/openssl/test/recipes/15-test_genrsa.t D crypto/openssl/test/recipes/15-test_gensm2.t D crypto/openssl/test/recipes/15-test_mp_rsa.t D crypto/openssl/test/recipes/15-test_mp_rsa_data/plain_text D crypto/openssl/test/recipes/15-test_mp_rsa_data/rsamplcm.pem D crypto/openssl/test/recipes/15-test_out_option.t D crypto/openssl/test/recipes/15-test_rsa.t D crypto/openssl/test/recipes/15-test_rsaoaep.t D crypto/openssl/test/recipes/15-test_rsaoaep_data/plain_text D crypto/openssl/test/recipes/15-test_rsapss.t D crypto/openssl/test/recipes/15-test_rsapss_data/negativesaltlen.pem D crypto/openssl/test/recipes/15-test_sha.t D crypto/openssl/test/recipes/20-test_app.t D crypto/openssl/test/recipes/20-test_cli_fips.t D crypto/openssl/test/recipes/20-test_dgst.t D crypto/openssl/test/recipes/20-test_dhparam.t D crypto/openssl/test/recipes/20-test_dhparam_check.t D crypto/openssl/test/recipes/20-test_dhparam_check_data/invalid/dh_p1024_t1862_pkcs3.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/invalid/dh_p2048_t1862_pkcs3.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/invalid/dh_p2048_t1864_pkcs3.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/invalid/dh_p3072_t1862_pkcs3.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dh_5114_1.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dh_5114_2.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dh_5114_3.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dh_ffdhe2048.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_5114_2.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_ffdhe2048.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p1024_q160_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p1024_q160_t1864.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p1024_q224_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p1024_q256_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p2048_q160_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p2048_q224_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p2048_q224_t1864.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p2048_q256_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p2048_q256_t1864.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p3072_q160_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p3072_q224_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_check_data/valid/dhx_p3072_q256_t1862.pem D crypto/openssl/test/recipes/20-test_dhparam_data/pkcs3-2-1024.der D crypto/openssl/test/recipes/20-test_dhparam_data/pkcs3-2-1024.pem D crypto/openssl/test/recipes/20-test_dhparam_data/pkcs3-2-2048.der D crypto/openssl/test/recipes/20-test_dhparam_data/pkcs3-2-2048.pem D crypto/openssl/test/recipes/20-test_dhparam_data/pkcs3-5-1024.der D crypto/openssl/test/recipes/20-test_dhparam_data/pkcs3-5-1024.pem D crypto/openssl/test/recipes/20-test_dhparam_data/x942-0-1024.der D crypto/openssl/test/recipes/20-test_dhparam_data/x942-0-1024.pem D crypto/openssl/test/recipes/20-test_enc.t D crypto/openssl/test/recipes/20-test_enc_more.t D crypto/openssl/test/recipes/20-test_kdf.t D crypto/openssl/test/recipes/20-test_legacy_okay.t D crypto/openssl/test/recipes/20-test_mac.t D crypto/openssl/test/recipes/20-test_nocache.t D crypto/openssl/test/recipes/20-test_passwd.t D crypto/openssl/test/recipes/20-test_pkeyutl.t D crypto/openssl/test/recipes/20-test_rand_config.t D crypto/openssl/test/recipes/20-test_spkac.t D crypto/openssl/test/recipes/25-test_crl.t D crypto/openssl/test/recipes/25-test_d2i.t D crypto/openssl/test/recipes/25-test_eai_data.t D crypto/openssl/test/recipes/25-test_eai_data/ascii_chain.pem D crypto/openssl/test/recipes/25-test_eai_data/ascii_leaf.pem D crypto/openssl/test/recipes/25-test_eai_data/kdc-cert.pem D crypto/openssl/test/recipes/25-test_eai_data/kdc-root-cert.pem D crypto/openssl/test/recipes/25-test_eai_data/kdc.sh D crypto/openssl/test/recipes/25-test_eai_data/san.ascii D crypto/openssl/test/recipes/25-test_eai_data/san.utf8 D crypto/openssl/test/recipes/25-test_eai_data/utf8_chain.pem D crypto/openssl/test/recipes/25-test_eai_data/utf8_leaf.pem D crypto/openssl/test/recipes/25-test_pkcs7.t D crypto/openssl/test/recipes/25-test_pkcs7_data/malformed.pkcs7 D crypto/openssl/test/recipes/25-test_req.t D crypto/openssl/test/recipes/25-test_rusext.t D crypto/openssl/test/recipes/25-test_rusext_data/grfc.msb D crypto/openssl/test/recipes/25-test_rusext_data/grfc.utf8 D crypto/openssl/test/recipes/25-test_sid.t D crypto/openssl/test/recipes/25-test_verify.t D crypto/openssl/test/recipes/25-test_verify_store.t D crypto/openssl/test/recipes/25-test_x509.t D crypto/openssl/test/recipes/30-test_acvp.t D crypto/openssl/test/recipes/30-test_aesgcm.t D crypto/openssl/test/recipes/30-test_afalg.t D crypto/openssl/test/recipes/30-test_defltfips.t D crypto/openssl/test/recipes/30-test_defltfips/fipsmodule.cnf D crypto/openssl/test/recipes/30-test_engine.t D crypto/openssl/test/recipes/30-test_evp.t D crypto/openssl/test/recipes/30-test_evp_byname.t D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aes_ccm_cavs.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aes_common.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aes_cts.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aes_ocb.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aes_siv.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aes_stitched.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aes_wrap.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_aria.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_bf.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_camellia.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_camellia_cts.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_cast5.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_chacha.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_des.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_des3_common.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_idea.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_rc2.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_rc4.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_rc4_stitched.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_rc5.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_seed.txt D crypto/openssl/test/recipes/30-test_evp_data/evpciph_sm4.txt D crypto/openssl/test/recipes/30-test_evp_data/evpencod.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_hkdf.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_krb5.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_pbkdf1.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_pbkdf2.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_scrypt.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_ss.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_ssh.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_tls11_prf.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_tls12_prf.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_tls13_kdf.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_x942.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_x942_des.txt D crypto/openssl/test/recipes/30-test_evp_data/evpkdf_x963.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmac_blake.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmac_cmac_des.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmac_common.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmac_poly1305.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmac_siphash.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmac_sm3.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmd_blake.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmd_md.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmd_mdc2.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmd_ripemd.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmd_sha.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmd_sm3.txt D crypto/openssl/test/recipes/30-test_evp_data/evpmd_whirlpool.txt D crypto/openssl/test/recipes/30-test_evp_data/evppbe_pbkdf2.txt D crypto/openssl/test/recipes/30-test_evp_data/evppbe_pkcs12.txt D crypto/openssl/test/recipes/30-test_evp_data/evppbe_scrypt.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_brainpool.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_dh.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_dsa.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_ecc.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_ecdh.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_ecdsa.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_ecx.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_ffdhe.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_kas.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_kdf_hkdf.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_kdf_scrypt.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_kdf_tls1_prf.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_mismatch.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_rsa.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_rsa_common.txt D crypto/openssl/test/recipes/30-test_evp_data/evppkey_sm2.txt D crypto/openssl/test/recipes/30-test_evp_data/evprand.txt D crypto/openssl/test/recipes/30-test_evp_extra.t D crypto/openssl/test/recipes/30-test_evp_fetch_prov.t D crypto/openssl/test/recipes/30-test_evp_kdf.t D crypto/openssl/test/recipes/30-test_evp_libctx.t D crypto/openssl/test/recipes/30-test_evp_pkey_dparam.t D crypto/openssl/test/recipes/30-test_evp_pkey_provided.t D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DH.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DH.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DH.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DH.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DH.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DH.pub.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DSA.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DSA.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DSA.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DSA.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DSA.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/DSA.pub.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/EC.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/EC.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/EC.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/EC.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/EC.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/EC.pub.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED25519.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED25519.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED25519.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED25519.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED25519.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED25519.pub.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED448.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED448.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED448.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED448.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED448.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/ED448.pub.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/RSA.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/RSA.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/RSA.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/RSA.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/RSA.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/RSA.pub.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X25519.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X25519.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X25519.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X25519.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X25519.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X25519.pub.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X448.priv.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X448.priv.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X448.priv.txt D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X448.pub.der D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X448.pub.pem D crypto/openssl/test/recipes/30-test_evp_pkey_provided/X448.pub.txt D crypto/openssl/test/recipes/30-test_pbelu.t D crypto/openssl/test/recipes/30-test_pkey_meth.t D crypto/openssl/test/recipes/30-test_pkey_meth_kdf.t D crypto/openssl/test/recipes/30-test_prov_config.t D crypto/openssl/test/recipes/30-test_provider_status.t D crypto/openssl/test/recipes/40-test_rehash.t D crypto/openssl/test/recipes/60-test_x509_check_cert_pkey.t D crypto/openssl/test/recipes/60-test_x509_dup_cert.t D crypto/openssl/test/recipes/60-test_x509_store.t D crypto/openssl/test/recipes/60-test_x509_time.t D crypto/openssl/test/recipes/61-test_bio_prefix.t D crypto/openssl/test/recipes/61-test_bio_prefix_data/args1.pl D crypto/openssl/test/recipes/61-test_bio_prefix_data/args2.pl D crypto/openssl/test/recipes/61-test_bio_prefix_data/in1.txt D crypto/openssl/test/recipes/61-test_bio_prefix_data/in2.txt D crypto/openssl/test/recipes/61-test_bio_prefix_data/out1.txt D crypto/openssl/test/recipes/61-test_bio_prefix_data/out2.txt D crypto/openssl/test/recipes/61-test_bio_pw_callback.t D crypto/openssl/test/recipes/61-test_bio_pw_callback_data/private_key.pem D crypto/openssl/test/recipes/61-test_bio_readbuffer.t D crypto/openssl/test/recipes/65-test_cmp_asn.t D crypto/openssl/test/recipes/65-test_cmp_client.t D crypto/openssl/test/recipes/65-test_cmp_client_data/client.crt D crypto/openssl/test/recipes/65-test_cmp_client_data/client.csr D crypto/openssl/test/recipes/65-test_cmp_client_data/client.key D crypto/openssl/test/recipes/65-test_cmp_client_data/server.crt D crypto/openssl/test/recipes/65-test_cmp_client_data/server.key D crypto/openssl/test/recipes/65-test_cmp_ctx.t D crypto/openssl/test/recipes/65-test_cmp_hdr.t D crypto/openssl/test/recipes/65-test_cmp_msg.t D crypto/openssl/test/recipes/65-test_cmp_msg_data/new.key D crypto/openssl/test/recipes/65-test_cmp_msg_data/pkcs10.der D crypto/openssl/test/recipes/65-test_cmp_msg_data/server.crt D crypto/openssl/test/recipes/65-test_cmp_protect.t D crypto/openssl/test/recipes/65-test_cmp_protect_data/EndEntity1.crt D crypto/openssl/test/recipes/65-test_cmp_protect_data/EndEntity2.crt D crypto/openssl/test/recipes/65-test_cmp_protect_data/IP_PBM.der D crypto/openssl/test/recipes/65-test_cmp_protect_data/IP_PBM.txt D crypto/openssl/test/recipes/65-test_cmp_protect_data/IR_protected.der D crypto/openssl/test/recipes/65-test_cmp_protect_data/IR_unprotected.der D crypto/openssl/test/recipes/65-test_cmp_protect_data/Intermediate_CA.crt D crypto/openssl/test/recipes/65-test_cmp_protect_data/Root_CA.crt D crypto/openssl/test/recipes/65-test_cmp_protect_data/server.crt D crypto/openssl/test/recipes/65-test_cmp_protect_data/server.pem D crypto/openssl/test/recipes/65-test_cmp_server.t D crypto/openssl/test/recipes/65-test_cmp_server_data/CR_protected_PBM_1234.der D crypto/openssl/test/recipes/65-test_cmp_status.t D crypto/openssl/test/recipes/65-test_cmp_vfy.t D crypto/openssl/test/recipes/65-test_cmp_vfy_data/EndEntity1.crt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/EndEntity2.crt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/IP_waitingStatus_PBM.der D crypto/openssl/test/recipes/65-test_cmp_vfy_data/IP_waitingStatus_PBM.txt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/IR_protected.der D crypto/openssl/test/recipes/65-test_cmp_vfy_data/IR_protected_0_extraCerts.der D crypto/openssl/test/recipes/65-test_cmp_vfy_data/IR_protected_2_extraCerts.der D crypto/openssl/test/recipes/65-test_cmp_vfy_data/IR_rmprotection.der D crypto/openssl/test/recipes/65-test_cmp_vfy_data/IR_unprotected.der D crypto/openssl/test/recipes/65-test_cmp_vfy_data/Intermediate_CA.crt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/Root_CA.crt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/chain.txt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/client.crt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/insta.cert.pem D crypto/openssl/test/recipes/65-test_cmp_vfy_data/insta.priv.pem D crypto/openssl/test/recipes/65-test_cmp_vfy_data/insta_ca.cert.pem D crypto/openssl/test/recipes/65-test_cmp_vfy_data/server.crt D crypto/openssl/test/recipes/65-test_cmp_vfy_data/server.key D crypto/openssl/test/recipes/66-test_ossl_store.t D crypto/openssl/test/recipes/66-test_ossl_store_data/DH-params.pem D crypto/openssl/test/recipes/66-test_ossl_store_data/DHX-params.pem D crypto/openssl/test/recipes/66-test_ossl_store_data/DSA-params.pem D crypto/openssl/test/recipes/70-test_asyncio.t D crypto/openssl/test/recipes/70-test_bad_dtls.t D crypto/openssl/test/recipes/70-test_clienthello.t D crypto/openssl/test/recipes/70-test_comp.t D crypto/openssl/test/recipes/70-test_key_share.t D crypto/openssl/test/recipes/70-test_npn.t D crypto/openssl/test/recipes/70-test_packet.t D crypto/openssl/test/recipes/70-test_recordlen.t D crypto/openssl/test/recipes/70-test_renegotiation.t D crypto/openssl/test/recipes/70-test_servername.t D crypto/openssl/test/recipes/70-test_sslcbcpadding.t D crypto/openssl/test/recipes/70-test_sslcertstatus.t D crypto/openssl/test/recipes/70-test_sslextension.t D crypto/openssl/test/recipes/70-test_sslmessages.t D crypto/openssl/test/recipes/70-test_sslrecords.t D crypto/openssl/test/recipes/70-test_sslsessiontick.t D crypto/openssl/test/recipes/70-test_sslsigalgs.t D crypto/openssl/test/recipes/70-test_sslsignature.t D crypto/openssl/test/recipes/70-test_sslskewith0p.t D crypto/openssl/test/recipes/70-test_sslversions.t D crypto/openssl/test/recipes/70-test_sslvertol.t D crypto/openssl/test/recipes/70-test_tls13alerts.t D crypto/openssl/test/recipes/70-test_tls13cookie.t D crypto/openssl/test/recipes/70-test_tls13downgrade.t D crypto/openssl/test/recipes/70-test_tls13hrr.t D crypto/openssl/test/recipes/70-test_tls13kexmodes.t D crypto/openssl/test/recipes/70-test_tls13messages.t D crypto/openssl/test/recipes/70-test_tls13psk.t D crypto/openssl/test/recipes/70-test_tls13ticket.t D crypto/openssl/test/recipes/70-test_tlsextms.t D crypto/openssl/test/recipes/70-test_verify_extra.t D crypto/openssl/test/recipes/70-test_wpacket.t D crypto/openssl/test/recipes/71-test_ssl_ctx.t D crypto/openssl/test/recipes/79-test_http.t D crypto/openssl/test/recipes/80-test_ca.t D crypto/openssl/test/recipes/80-test_ca_data/revoked.key D crypto/openssl/test/recipes/80-test_cipherbytes.t D crypto/openssl/test/recipes/80-test_cipherlist.t D crypto/openssl/test/recipes/80-test_ciphername.t D crypto/openssl/test/recipes/80-test_cmp_http.t D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/12345.txt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/big_issuing.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/big_root.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/big_server.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/big_trusted.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/csr.pem D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/empty.txt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/issuing.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/issuing_expired.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/new.key D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/new_pass_12345.key D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/new_pub.key D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/random.bin D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/root.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/root_expired.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/server.cnf D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/server.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/server.key D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/signer.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/signer.key D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/signer.p12 D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/signer_issuing.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/signer_only.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/signer_root.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/test.cnf D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/trusted.crt D crypto/openssl/test/recipes/80-test_cmp_http_data/Mock/wrong_csr.pem D crypto/openssl/test/recipes/80-test_cmp_http_data/test_commands.csv D crypto/openssl/test/recipes/80-test_cmp_http_data/test_connection.csv D crypto/openssl/test/recipes/80-test_cmp_http_data/test_credentials.csv D crypto/openssl/test/recipes/80-test_cmp_http_data/test_enrollment.csv D crypto/openssl/test/recipes/80-test_cmp_http_data/test_verification.csv D crypto/openssl/test/recipes/80-test_cms.t D crypto/openssl/test/recipes/80-test_cms_data/bad_signtime_attr.cms D crypto/openssl/test/recipes/80-test_cms_data/ciphertext_from_1_1_1.cms D crypto/openssl/test/recipes/80-test_cms_data/ct_multiple_attr.cms D crypto/openssl/test/recipes/80-test_cms_data/dh-cert.pem D crypto/openssl/test/recipes/80-test_cms_data/dh-key.pem D crypto/openssl/test/recipes/80-test_cms_data/dh-malformed.der D crypto/openssl/test/recipes/80-test_cms_data/ecdh-cert.pem D crypto/openssl/test/recipes/80-test_cms_data/ecdh-key.pem D crypto/openssl/test/recipes/80-test_cms_data/ecdh-malformed.der D crypto/openssl/test/recipes/80-test_cms_data/no_ct_attr.cms D crypto/openssl/test/recipes/80-test_cms_data/no_md_attr.cms D crypto/openssl/test/recipes/80-test_cms_data/pkcs7-md4.pem D crypto/openssl/test/recipes/80-test_cms_data/rsa-malformed.der D crypto/openssl/test/recipes/80-test_cmsapi.t D crypto/openssl/test/recipes/80-test_cmsapi_data/cms_pwri_kek_oob.der D crypto/openssl/test/recipes/80-test_cmsapi_data/encDataWithTooLongIV.pem D crypto/openssl/test/recipes/80-test_cmsapi_data/encryptedData.der D crypto/openssl/test/recipes/80-test_ct.t D crypto/openssl/test/recipes/80-test_dane.t D crypto/openssl/test/recipes/80-test_dtls.t D crypto/openssl/test/recipes/80-test_dtls_mtu.t D crypto/openssl/test/recipes/80-test_dtlsv1listen.t D crypto/openssl/test/recipes/80-test_ocsp.t D crypto/openssl/test/recipes/80-test_ocsp_data/cert.pem D crypto/openssl/test/recipes/80-test_ocsp_data/key.pem D crypto/openssl/test/recipes/80-test_pkcs12.t D crypto/openssl/test/recipes/80-test_pkcs12_data/bad1.p12 D crypto/openssl/test/recipes/80-test_pkcs12_data/bad2.p12 D crypto/openssl/test/recipes/80-test_pkcs12_data/bad3.p12 D crypto/openssl/test/recipes/80-test_policy_tree.t D crypto/openssl/test/recipes/80-test_policy_tree_data/large_leaf.pem D crypto/openssl/test/recipes/80-test_policy_tree_data/large_policy_tree.pem D crypto/openssl/test/recipes/80-test_policy_tree_data/small_leaf.pem D crypto/openssl/test/recipes/80-test_policy_tree_data/small_policy_tree.pem D crypto/openssl/test/recipes/80-test_ssl_new.t D crypto/openssl/test/recipes/80-test_ssl_old.t D crypto/openssl/test/recipes/80-test_ssl_old_data/dsa2048.pem D crypto/openssl/test/recipes/80-test_ssl_test_ctx.t D crypto/openssl/test/recipes/80-test_sslcorrupt.t D crypto/openssl/test/recipes/80-test_tsa.t D crypto/openssl/test/recipes/80-test_tsa_data/all-zero.tsq D crypto/openssl/test/recipes/80-test_tsa_data/comodo-aaa.pem D crypto/openssl/test/recipes/80-test_tsa_data/sectigo-all-zero.tsr D crypto/openssl/test/recipes/80-test_tsa_data/sectigo-signer.pem D crypto/openssl/test/recipes/80-test_tsa_data/sectigo-time-stamping-ca.pem D crypto/openssl/test/recipes/80-test_tsa_data/user-trust-ca-aaa.pem D crypto/openssl/test/recipes/80-test_tsa_data/user-trust-ca.pem D crypto/openssl/test/recipes/80-test_x509aux.t D crypto/openssl/test/recipes/81-test_cmp_cli.t D crypto/openssl/test/recipes/90-test_asn1_time.t D crypto/openssl/test/recipes/90-test_async.t D crypto/openssl/test/recipes/90-test_bio_enc.t D crypto/openssl/test/recipes/90-test_bio_memleak.t D crypto/openssl/test/recipes/90-test_constant_time.t D crypto/openssl/test/recipes/90-test_fatalerr.t D crypto/openssl/test/recipes/90-test_fipsload.t D crypto/openssl/test/recipes/90-test_gmdiff.t D crypto/openssl/test/recipes/90-test_gost_data/server-cert2001.pem D crypto/openssl/test/recipes/90-test_gost_data/server-cert2012.pem D crypto/openssl/test/recipes/90-test_gost_data/server-key2001.pem D crypto/openssl/test/recipes/90-test_gost_data/server-key2012.pem D crypto/openssl/test/recipes/90-test_ige.t D crypto/openssl/test/recipes/90-test_includes.t D crypto/openssl/test/recipes/90-test_includes_data/conf-includes/includes1.cnf D crypto/openssl/test/recipes/90-test_includes_data/conf-includes/includes2.cnf D crypto/openssl/test/recipes/90-test_includes_data/incdir.cnf D crypto/openssl/test/recipes/90-test_includes_data/includes-broken.cnf D crypto/openssl/test/recipes/90-test_includes_data/includes-eq-ws.cnf D crypto/openssl/test/recipes/90-test_includes_data/includes-eq.cnf D crypto/openssl/test/recipes/90-test_includes_data/includes-file.cnf D crypto/openssl/test/recipes/90-test_includes_data/includes.cnf D crypto/openssl/test/recipes/90-test_includes_data/vms-includes-file.cnf D crypto/openssl/test/recipes/90-test_includes_data/vms-includes.cnf D crypto/openssl/test/recipes/90-test_memleak.t D crypto/openssl/test/recipes/90-test_overhead.t D crypto/openssl/test/recipes/90-test_secmem.t D crypto/openssl/test/recipes/90-test_shlibload.t D crypto/openssl/test/recipes/90-test_srp.t D crypto/openssl/test/recipes/90-test_sslapi.t D crypto/openssl/test/recipes/90-test_sslapi_data/dhparams.pem D crypto/openssl/test/recipes/90-test_sslapi_data/passwd.txt D crypto/openssl/test/recipes/90-test_sslbuffers.t D crypto/openssl/test/recipes/90-test_store.t D crypto/openssl/test/recipes/90-test_store_cases.t D crypto/openssl/test/recipes/90-test_store_cases_data/garbage-pkcs12.p12 D crypto/openssl/test/recipes/90-test_store_cases_data/test-BER.p12 D crypto/openssl/test/recipes/90-test_store_data/dsaparam.pem D crypto/openssl/test/recipes/90-test_store_data/rsa-key-2432.pem D crypto/openssl/test/recipes/90-test_store_data/testrsa.msb D crypto/openssl/test/recipes/90-test_store_data/testrsa.pvk D crypto/openssl/test/recipes/90-test_sysdefault.t D crypto/openssl/test/recipes/90-test_threads.t D crypto/openssl/test/recipes/90-test_threads_data/rsakey.pem D crypto/openssl/test/recipes/90-test_threads_data/store/8489a545.0 D crypto/openssl/test/recipes/90-test_time_offset.t D crypto/openssl/test/recipes/90-test_tls13ccs.t D crypto/openssl/test/recipes/90-test_tls13encryption.t D crypto/openssl/test/recipes/90-test_tls13secrets.t D crypto/openssl/test/recipes/90-test_traceapi.t D crypto/openssl/test/recipes/90-test_v3name.t D crypto/openssl/test/recipes/91-test_pkey_check.t D crypto/openssl/test/recipes/91-test_pkey_check_data/dhpkey.pem D crypto/openssl/test/recipes/91-test_pkey_check_data/dsapub.pem D crypto/openssl/test/recipes/91-test_pkey_check_data/dsapub_noparam.der D crypto/openssl/test/recipes/91-test_pkey_check_data/ec_p256_bad_0.pem D crypto/openssl/test/recipes/91-test_pkey_check_data/ec_p256_bad_1.pem D crypto/openssl/test/recipes/91-test_pkey_check_data/rsapub_17k.pem D crypto/openssl/test/recipes/91-test_pkey_check_data/sm2_bad_0.pem D crypto/openssl/test/recipes/91-test_pkey_check_data/sm2_bad_1.pem D crypto/openssl/test/recipes/91-test_pkey_check_data/sm2_bad_neg1.pem D crypto/openssl/test/recipes/95-test_external_gost_engine.t D crypto/openssl/test/recipes/95-test_external_gost_engine_data/gost_engine.sh D crypto/openssl/test/recipes/95-test_external_krb5.t D crypto/openssl/test/recipes/95-test_external_krb5_data/krb5.sh D crypto/openssl/test/recipes/95-test_external_pyca.t D crypto/openssl/test/recipes/95-test_external_pyca_data/cryptography.sh D crypto/openssl/test/recipes/99-test_ecstress.t D crypto/openssl/test/recipes/99-test_fuzz_asn1.t D crypto/openssl/test/recipes/99-test_fuzz_asn1parse.t D crypto/openssl/test/recipes/99-test_fuzz_bignum.t D crypto/openssl/test/recipes/99-test_fuzz_bndiv.t D crypto/openssl/test/recipes/99-test_fuzz_client.t D crypto/openssl/test/recipes/99-test_fuzz_cmp.t D crypto/openssl/test/recipes/99-test_fuzz_cms.t D crypto/openssl/test/recipes/99-test_fuzz_conf.t D crypto/openssl/test/recipes/99-test_fuzz_crl.t D crypto/openssl/test/recipes/99-test_fuzz_ct.t D crypto/openssl/test/recipes/99-test_fuzz_server.t D crypto/openssl/test/recipes/99-test_fuzz_x509.t D crypto/openssl/test/recipes/fuzz.pl D crypto/openssl/test/recipes/ocsp-response.der D crypto/openssl/test/recipes/tconversion.pl M crypto/openssl/test/secmemtest.c A crypto/openssl/test/ssl-tests/33-compressed-spki.cnf A crypto/openssl/test/ssl-tests/33-compressed-spki.cnf.in M crypto/openssl/test/v3ext.c M crypto/openssl/util/markdownlint.rb M secure/lib/libcrypto/man/man3/ADMISSIONS.3 M secure/lib/libcrypto/man/man3/ASN1_EXTERN_FUNCS.3 M secure/lib/libcrypto/man/man3/ASN1_INTEGER_get_int64.3 M secure/lib/libcrypto/man/man3/ASN1_INTEGER_new.3 M secure/lib/libcrypto/man/man3/ASN1_ITEM_lookup.3 M secure/lib/libcrypto/man/man3/ASN1_OBJECT_new.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_TABLE_add.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_length.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_new.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_print_ex.3 M secure/lib/libcrypto/man/man3/ASN1_TIME_set.3 M secure/lib/libcrypto/man/man3/ASN1_TYPE_get.3 M secure/lib/libcrypto/man/man3/ASN1_aux_cb.3 M secure/lib/libcrypto/man/man3/ASN1_generate_nconf.3 M secure/lib/libcrypto/man/man3/ASN1_item_d2i_bio.3 M secure/lib/libcrypto/man/man3/ASN1_item_new.3 M secure/lib/libcrypto/man/man3/ASN1_item_sign.3 M secure/lib/libcrypto/man/man3/ASYNC_WAIT_CTX_new.3 M secure/lib/libcrypto/man/man3/ASYNC_start_job.3 M secure/lib/libcrypto/man/man3/BF_encrypt.3 M secure/lib/libcrypto/man/man3/BIO_ADDR.3 M secure/lib/libcrypto/man/man3/BIO_ADDRINFO.3 M secure/lib/libcrypto/man/man3/BIO_connect.3 M secure/lib/libcrypto/man/man3/BIO_ctrl.3 M secure/lib/libcrypto/man/man3/BIO_f_base64.3 M secure/lib/libcrypto/man/man3/BIO_f_buffer.3 M secure/lib/libcrypto/man/man3/BIO_f_cipher.3 M secure/lib/libcrypto/man/man3/BIO_f_md.3 M secure/lib/libcrypto/man/man3/BIO_f_null.3 M secure/lib/libcrypto/man/man3/BIO_f_prefix.3 M secure/lib/libcrypto/man/man3/BIO_f_readbuffer.3 M secure/lib/libcrypto/man/man3/BIO_f_ssl.3 M secure/lib/libcrypto/man/man3/BIO_find_type.3 M secure/lib/libcrypto/man/man3/BIO_get_data.3 M secure/lib/libcrypto/man/man3/BIO_get_ex_new_index.3 M secure/lib/libcrypto/man/man3/BIO_meth_new.3 M secure/lib/libcrypto/man/man3/BIO_new.3 M secure/lib/libcrypto/man/man3/BIO_new_CMS.3 M secure/lib/libcrypto/man/man3/BIO_parse_hostserv.3 M secure/lib/libcrypto/man/man3/BIO_printf.3 M secure/lib/libcrypto/man/man3/BIO_push.3 M secure/lib/libcrypto/man/man3/BIO_read.3 M secure/lib/libcrypto/man/man3/BIO_s_accept.3 M secure/lib/libcrypto/man/man3/BIO_s_bio.3 M secure/lib/libcrypto/man/man3/BIO_s_connect.3 M secure/lib/libcrypto/man/man3/BIO_s_core.3 M secure/lib/libcrypto/man/man3/BIO_s_datagram.3 M secure/lib/libcrypto/man/man3/BIO_s_fd.3 M secure/lib/libcrypto/man/man3/BIO_s_file.3 M secure/lib/libcrypto/man/man3/BIO_s_mem.3 M secure/lib/libcrypto/man/man3/BIO_s_null.3 M secure/lib/libcrypto/man/man3/BIO_s_socket.3 M secure/lib/libcrypto/man/man3/BIO_set_callback.3 M secure/lib/libcrypto/man/man3/BIO_set_flags.3 M secure/lib/libcrypto/man/man3/BIO_should_retry.3 M secure/lib/libcrypto/man/man3/BIO_socket_wait.3 M secure/lib/libcrypto/man/man3/BN_BLINDING_new.3 M secure/lib/libcrypto/man/man3/BN_CTX_new.3 M secure/lib/libcrypto/man/man3/BN_CTX_start.3 M secure/lib/libcrypto/man/man3/BN_add.3 M secure/lib/libcrypto/man/man3/BN_add_word.3 M secure/lib/libcrypto/man/man3/BN_bn2bin.3 M secure/lib/libcrypto/man/man3/BN_cmp.3 M secure/lib/libcrypto/man/man3/BN_copy.3 M secure/lib/libcrypto/man/man3/BN_generate_prime.3 M secure/lib/libcrypto/man/man3/BN_mod_exp_mont.3 M secure/lib/libcrypto/man/man3/BN_mod_inverse.3 M secure/lib/libcrypto/man/man3/BN_mod_mul_montgomery.3 M secure/lib/libcrypto/man/man3/BN_mod_mul_reciprocal.3 M secure/lib/libcrypto/man/man3/BN_new.3 M secure/lib/libcrypto/man/man3/BN_num_bytes.3 M secure/lib/libcrypto/man/man3/BN_rand.3 M secure/lib/libcrypto/man/man3/BN_security_bits.3 M secure/lib/libcrypto/man/man3/BN_set_bit.3 M secure/lib/libcrypto/man/man3/BN_swap.3 M secure/lib/libcrypto/man/man3/BN_zero.3 M secure/lib/libcrypto/man/man3/BUF_MEM_new.3 M secure/lib/libcrypto/man/man3/CMS_EncryptedData_decrypt.3 M secure/lib/libcrypto/man/man3/CMS_EncryptedData_encrypt.3 M secure/lib/libcrypto/man/man3/CMS_EncryptedData_set1_key.3 M secure/lib/libcrypto/man/man3/CMS_EnvelopedData_create.3 M secure/lib/libcrypto/man/man3/CMS_add0_cert.3 M secure/lib/libcrypto/man/man3/CMS_add1_recipient_cert.3 M secure/lib/libcrypto/man/man3/CMS_add1_signer.3 M secure/lib/libcrypto/man/man3/CMS_compress.3 M secure/lib/libcrypto/man/man3/CMS_data_create.3 M secure/lib/libcrypto/man/man3/CMS_decrypt.3 M secure/lib/libcrypto/man/man3/CMS_digest_create.3 M secure/lib/libcrypto/man/man3/CMS_encrypt.3 M secure/lib/libcrypto/man/man3/CMS_final.3 M secure/lib/libcrypto/man/man3/CMS_get0_RecipientInfos.3 M secure/lib/libcrypto/man/man3/CMS_get0_SignerInfos.3 M secure/lib/libcrypto/man/man3/CMS_get0_type.3 M secure/lib/libcrypto/man/man3/CMS_get1_ReceiptRequest.3 M secure/lib/libcrypto/man/man3/CMS_sign.3 M secure/lib/libcrypto/man/man3/CMS_sign_receipt.3 M secure/lib/libcrypto/man/man3/CMS_signed_get_attr.3 M secure/lib/libcrypto/man/man3/CMS_uncompress.3 M secure/lib/libcrypto/man/man3/CMS_verify.3 M secure/lib/libcrypto/man/man3/CMS_verify_receipt.3 M secure/lib/libcrypto/man/man3/CONF_modules_free.3 M secure/lib/libcrypto/man/man3/CONF_modules_load_file.3 M secure/lib/libcrypto/man/man3/CRYPTO_THREAD_run_once.3 M secure/lib/libcrypto/man/man3/CRYPTO_get_ex_new_index.3 M secure/lib/libcrypto/man/man3/CRYPTO_memcmp.3 M secure/lib/libcrypto/man/man3/CTLOG_STORE_get0_log_by_id.3 M secure/lib/libcrypto/man/man3/CTLOG_STORE_new.3 M secure/lib/libcrypto/man/man3/CTLOG_new.3 M secure/lib/libcrypto/man/man3/CT_POLICY_EVAL_CTX_new.3 M secure/lib/libcrypto/man/man3/DEFINE_STACK_OF.3 M secure/lib/libcrypto/man/man3/DES_random_key.3 M secure/lib/libcrypto/man/man3/DH_generate_key.3 M secure/lib/libcrypto/man/man3/DH_generate_parameters.3 M secure/lib/libcrypto/man/man3/DH_get0_pqg.3 M secure/lib/libcrypto/man/man3/DH_get_1024_160.3 M secure/lib/libcrypto/man/man3/DH_meth_new.3 M secure/lib/libcrypto/man/man3/DH_new.3 M secure/lib/libcrypto/man/man3/DH_new_by_nid.3 M secure/lib/libcrypto/man/man3/DH_set_method.3 M secure/lib/libcrypto/man/man3/DH_size.3 M secure/lib/libcrypto/man/man3/DSA_SIG_new.3 M secure/lib/libcrypto/man/man3/DSA_do_sign.3 M secure/lib/libcrypto/man/man3/DSA_dup_DH.3 M secure/lib/libcrypto/man/man3/DSA_generate_key.3 M secure/lib/libcrypto/man/man3/DSA_generate_parameters.3 M secure/lib/libcrypto/man/man3/DSA_get0_pqg.3 M secure/lib/libcrypto/man/man3/DSA_meth_new.3 M secure/lib/libcrypto/man/man3/DSA_new.3 M secure/lib/libcrypto/man/man3/DSA_set_method.3 M secure/lib/libcrypto/man/man3/DSA_sign.3 M secure/lib/libcrypto/man/man3/DSA_size.3 M secure/lib/libcrypto/man/man3/DTLS_get_data_mtu.3 M secure/lib/libcrypto/man/man3/DTLS_set_timer_cb.3 M secure/lib/libcrypto/man/man3/DTLSv1_listen.3 M secure/lib/libcrypto/man/man3/ECDSA_SIG_new.3 M secure/lib/libcrypto/man/man3/ECDSA_sign.3 M secure/lib/libcrypto/man/man3/ECPKParameters_print.3 M secure/lib/libcrypto/man/man3/EC_GFp_simple_method.3 M secure/lib/libcrypto/man/man3/EC_GROUP_copy.3 M secure/lib/libcrypto/man/man3/EC_GROUP_new.3 M secure/lib/libcrypto/man/man3/EC_KEY_get_enc_flags.3 M secure/lib/libcrypto/man/man3/EC_KEY_new.3 M secure/lib/libcrypto/man/man3/EC_POINT_add.3 M secure/lib/libcrypto/man/man3/EC_POINT_new.3 M secure/lib/libcrypto/man/man3/ENGINE_add.3 M secure/lib/libcrypto/man/man3/ERR_GET_LIB.3 M secure/lib/libcrypto/man/man3/ERR_clear_error.3 M secure/lib/libcrypto/man/man3/ERR_error_string.3 M secure/lib/libcrypto/man/man3/ERR_get_error.3 M secure/lib/libcrypto/man/man3/ERR_load_crypto_strings.3 M secure/lib/libcrypto/man/man3/ERR_load_strings.3 M secure/lib/libcrypto/man/man3/ERR_new.3 M secure/lib/libcrypto/man/man3/ERR_print_errors.3 M secure/lib/libcrypto/man/man3/ERR_put_error.3 M secure/lib/libcrypto/man/man3/ERR_remove_state.3 M secure/lib/libcrypto/man/man3/ERR_set_mark.3 M secure/lib/libcrypto/man/man3/EVP_ASYM_CIPHER_free.3 M secure/lib/libcrypto/man/man3/EVP_BytesToKey.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_app_data.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_cipher_data.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_original_iv.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_DigestInit.3 M secure/lib/libcrypto/man/man3/EVP_DigestSignInit.3 M secure/lib/libcrypto/man/man3/EVP_DigestVerifyInit.3 M secure/lib/libcrypto/man/man3/EVP_EncodeInit.3 M secure/lib/libcrypto/man/man3/EVP_EncryptInit.3 M secure/lib/libcrypto/man/man3/EVP_KDF.3 M secure/lib/libcrypto/man/man3/EVP_KEM_free.3 M secure/lib/libcrypto/man/man3/EVP_KEYEXCH_free.3 M secure/lib/libcrypto/man/man3/EVP_KEYMGMT.3 M secure/lib/libcrypto/man/man3/EVP_MAC.3 M secure/lib/libcrypto/man/man3/EVP_MD_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_OpenInit.3 M secure/lib/libcrypto/man/man3/EVP_PBE_CipherInit.3 M secure/lib/libcrypto/man/man3/EVP_PKEY2PKCS8.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_ASN1_METHOD.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_ctrl.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_get0_libctx.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_get0_pkey.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set1_pbe_pass.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_hkdf_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_scrypt_N.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_asn1_get_count.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_check.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_copy_parameters.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_decapsulate.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_decrypt.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_derive.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_digestsign_supports_digest.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_encapsulate.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_encrypt.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_fromdata.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_attr.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_default_digest_nid.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_field_type.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_group_name.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_size.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_gettable_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_is_a.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_keygen.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_meth_get_count.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_print_private.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set1_RSA.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set1_encoded_public_key.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set_type.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_settable_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_sign.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_todata.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_verify.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_verify_recover.3 M secure/lib/libcrypto/man/man3/EVP_RAND.3 M secure/lib/libcrypto/man/man3/EVP_SIGNATURE.3 M secure/lib/libcrypto/man/man3/EVP_SealInit.3 M secure/lib/libcrypto/man/man3/EVP_SignInit.3 M secure/lib/libcrypto/man/man3/EVP_VerifyInit.3 M secure/lib/libcrypto/man/man3/EVP_aes_128_gcm.3 M secure/lib/libcrypto/man/man3/EVP_aria_128_gcm.3 M secure/lib/libcrypto/man/man3/EVP_bf_cbc.3 M secure/lib/libcrypto/man/man3/EVP_blake2b512.3 M secure/lib/libcrypto/man/man3/EVP_camellia_128_ecb.3 M secure/lib/libcrypto/man/man3/EVP_cast5_cbc.3 M secure/lib/libcrypto/man/man3/EVP_chacha20.3 M secure/lib/libcrypto/man/man3/EVP_des_cbc.3 M secure/lib/libcrypto/man/man3/EVP_desx_cbc.3 M secure/lib/libcrypto/man/man3/EVP_idea_cbc.3 M secure/lib/libcrypto/man/man3/EVP_md2.3 M secure/lib/libcrypto/man/man3/EVP_md4.3 M secure/lib/libcrypto/man/man3/EVP_md5.3 M secure/lib/libcrypto/man/man3/EVP_mdc2.3 M secure/lib/libcrypto/man/man3/EVP_rc2_cbc.3 M secure/lib/libcrypto/man/man3/EVP_rc4.3 M secure/lib/libcrypto/man/man3/EVP_rc5_32_12_16_cbc.3 M secure/lib/libcrypto/man/man3/EVP_ripemd160.3 M secure/lib/libcrypto/man/man3/EVP_seed_cbc.3 M secure/lib/libcrypto/man/man3/EVP_set_default_properties.3 M secure/lib/libcrypto/man/man3/EVP_sha1.3 M secure/lib/libcrypto/man/man3/EVP_sha224.3 M secure/lib/libcrypto/man/man3/EVP_sha3_224.3 M secure/lib/libcrypto/man/man3/EVP_sm3.3 M secure/lib/libcrypto/man/man3/EVP_sm4_cbc.3 M secure/lib/libcrypto/man/man3/EVP_whirlpool.3 M secure/lib/libcrypto/man/man3/HMAC.3 M secure/lib/libcrypto/man/man3/MD5.3 M secure/lib/libcrypto/man/man3/MDC2_Init.3 M secure/lib/libcrypto/man/man3/NCONF_new_ex.3 M secure/lib/libcrypto/man/man3/OBJ_nid2obj.3 M secure/lib/libcrypto/man/man3/OCSP_REQUEST_new.3 M secure/lib/libcrypto/man/man3/OCSP_cert_to_id.3 M secure/lib/libcrypto/man/man3/OCSP_request_add1_nonce.3 M secure/lib/libcrypto/man/man3/OCSP_resp_find_status.3 M secure/lib/libcrypto/man/man3/OCSP_response_status.3 M secure/lib/libcrypto/man/man3/OCSP_sendreq_new.3 M secure/lib/libcrypto/man/man3/OPENSSL_Applink.3 M secure/lib/libcrypto/man/man3/OPENSSL_FILE.3 M secure/lib/libcrypto/man/man3/OPENSSL_LH_COMPFUNC.3 M secure/lib/libcrypto/man/man3/OPENSSL_LH_stats.3 M secure/lib/libcrypto/man/man3/OPENSSL_config.3 M secure/lib/libcrypto/man/man3/OPENSSL_fork_prepare.3 M secure/lib/libcrypto/man/man3/OPENSSL_gmtime.3 M secure/lib/libcrypto/man/man3/OPENSSL_hexchar2int.3 M secure/lib/libcrypto/man/man3/OPENSSL_ia32cap.3 M secure/lib/libcrypto/man/man3/OPENSSL_init_crypto.3 M secure/lib/libcrypto/man/man3/OPENSSL_init_ssl.3 M secure/lib/libcrypto/man/man3/OPENSSL_instrument_bus.3 M secure/lib/libcrypto/man/man3/OPENSSL_load_builtin_modules.3 M secure/lib/libcrypto/man/man3/OPENSSL_malloc.3 M secure/lib/libcrypto/man/man3/OPENSSL_s390xcap.3 M secure/lib/libcrypto/man/man3/OPENSSL_secure_malloc.3 M secure/lib/libcrypto/man/man3/OPENSSL_strcasecmp.3 M secure/lib/libcrypto/man/man3/OSSL_ALGORITHM.3 M secure/lib/libcrypto/man/man3/OSSL_CALLBACK.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_CTX_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_HDR_get0_transactionID.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_ITAV_set0.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_MSG_get0_header.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_MSG_http_perform.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_SRV_CTX_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_STATUSINFO_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_exec_certreq.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_log_open.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_validate_msg.3 M secure/lib/libcrypto/man/man3/OSSL_CORE_MAKE_FUNC.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_get0_tmpl.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set0_validity.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set1_regCtrl_regToken.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set1_regInfo_certReq.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_pbmp_new.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX_new_for_pkey.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_from_bio.3 M secure/lib/libcrypto/man/man3/OSSL_DISPATCH.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX_new_for_pkey.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_to_bio.3 M secure/lib/libcrypto/man/man3/OSSL_ESS_check_signing_certs.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_REQ_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_parse_url.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_transfer.3 M secure/lib/libcrypto/man/man3/OSSL_ITEM.3 M secure/lib/libcrypto/man/man3/OSSL_LIB_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_BLD.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_allocate_from_text.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_dup.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_int.3 M secure/lib/libcrypto/man/man3/OSSL_PROVIDER.3 M secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_new.3 M secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_set_callback.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_INFO.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_LOADER.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_SEARCH.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_attach.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_expect.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_open.3 M secure/lib/libcrypto/man/man3/OSSL_trace_enabled.3 M secure/lib/libcrypto/man/man3/OSSL_trace_get_category_num.3 M secure/lib/libcrypto/man/man3/OSSL_trace_set_channel.3 M secure/lib/libcrypto/man/man3/OpenSSL_add_all_algorithms.3 M secure/lib/libcrypto/man/man3/OpenSSL_version.3 M secure/lib/libcrypto/man/man3/PEM_X509_INFO_read_bio_ex.3 M secure/lib/libcrypto/man/man3/PEM_bytes_read_bio.3 M secure/lib/libcrypto/man/man3/PEM_read.3 M secure/lib/libcrypto/man/man3/PEM_read_CMS.3 M secure/lib/libcrypto/man/man3/PEM_read_bio_PrivateKey.3 M secure/lib/libcrypto/man/man3/PEM_read_bio_ex.3 M secure/lib/libcrypto/man/man3/PEM_write_bio_CMS_stream.3 M secure/lib/libcrypto/man/man3/PEM_write_bio_PKCS7_stream.3 M secure/lib/libcrypto/man/man3/PKCS12_PBE_keyivgen.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_create_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_get0_attrs.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_get1_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_add1_attr_by_NID.3 M secure/lib/libcrypto/man/man3/PKCS12_add_CSPName_asc.3 M secure/lib/libcrypto/man/man3/PKCS12_add_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_add_friendlyname_asc.3 M secure/lib/libcrypto/man/man3/PKCS12_add_localkeyid.3 M secure/lib/libcrypto/man/man3/PKCS12_add_safe.3 M secure/lib/libcrypto/man/man3/PKCS12_create.3 M secure/lib/libcrypto/man/man3/PKCS12_decrypt_skey.3 M secure/lib/libcrypto/man/man3/PKCS12_gen_mac.3 M secure/lib/libcrypto/man/man3/PKCS12_get_friendlyname.3 M secure/lib/libcrypto/man/man3/PKCS12_init.3 M secure/lib/libcrypto/man/man3/PKCS12_item_decrypt_d2i.3 M secure/lib/libcrypto/man/man3/PKCS12_key_gen_utf8_ex.3 M secure/lib/libcrypto/man/man3/PKCS12_newpass.3 M secure/lib/libcrypto/man/man3/PKCS12_pack_p7encdata.3 M secure/lib/libcrypto/man/man3/PKCS12_parse.3 M secure/lib/libcrypto/man/man3/PKCS5_PBE_keyivgen.3 M secure/lib/libcrypto/man/man3/PKCS5_PBKDF2_HMAC.3 M secure/lib/libcrypto/man/man3/PKCS7_decrypt.3 M secure/lib/libcrypto/man/man3/PKCS7_encrypt.3 M secure/lib/libcrypto/man/man3/PKCS7_get_octet_string.3 M secure/lib/libcrypto/man/man3/PKCS7_sign.3 M secure/lib/libcrypto/man/man3/PKCS7_sign_add_signer.3 M secure/lib/libcrypto/man/man3/PKCS7_type_is_other.3 M secure/lib/libcrypto/man/man3/PKCS7_verify.3 M secure/lib/libcrypto/man/man3/PKCS8_encrypt.3 M secure/lib/libcrypto/man/man3/PKCS8_pkey_add1_attr.3 M secure/lib/libcrypto/man/man3/RAND_add.3 M secure/lib/libcrypto/man/man3/RAND_bytes.3 M secure/lib/libcrypto/man/man3/RAND_cleanup.3 M secure/lib/libcrypto/man/man3/RAND_egd.3 M secure/lib/libcrypto/man/man3/RAND_get0_primary.3 M secure/lib/libcrypto/man/man3/RAND_load_file.3 M secure/lib/libcrypto/man/man3/RAND_set_DRBG_type.3 M secure/lib/libcrypto/man/man3/RAND_set_rand_method.3 M secure/lib/libcrypto/man/man3/RC4_set_key.3 M secure/lib/libcrypto/man/man3/RIPEMD160_Init.3 M secure/lib/libcrypto/man/man3/RSA_blinding_on.3 M secure/lib/libcrypto/man/man3/RSA_check_key.3 M secure/lib/libcrypto/man/man3/RSA_generate_key.3 M secure/lib/libcrypto/man/man3/RSA_get0_key.3 M secure/lib/libcrypto/man/man3/RSA_meth_new.3 M secure/lib/libcrypto/man/man3/RSA_new.3 M secure/lib/libcrypto/man/man3/RSA_padding_add_PKCS1_type_1.3 M secure/lib/libcrypto/man/man3/RSA_print.3 M secure/lib/libcrypto/man/man3/RSA_private_encrypt.3 M secure/lib/libcrypto/man/man3/RSA_public_encrypt.3 M secure/lib/libcrypto/man/man3/RSA_set_method.3 M secure/lib/libcrypto/man/man3/RSA_sign.3 M secure/lib/libcrypto/man/man3/RSA_sign_ASN1_OCTET_STRING.3 M secure/lib/libcrypto/man/man3/RSA_size.3 M secure/lib/libcrypto/man/man3/SCT_new.3 M secure/lib/libcrypto/man/man3/SCT_print.3 M secure/lib/libcrypto/man/man3/SCT_validate.3 M secure/lib/libcrypto/man/man3/SHA256_Init.3 M secure/lib/libcrypto/man/man3/SMIME_read_ASN1.3 M secure/lib/libcrypto/man/man3/SMIME_read_CMS.3 M secure/lib/libcrypto/man/man3/SMIME_read_PKCS7.3 M secure/lib/libcrypto/man/man3/SMIME_write_ASN1.3 M secure/lib/libcrypto/man/man3/SMIME_write_CMS.3 M secure/lib/libcrypto/man/man3/SMIME_write_PKCS7.3 M secure/lib/libcrypto/man/man3/SRP_Calc_B.3 M secure/lib/libcrypto/man/man3/SRP_VBASE_new.3 M secure/lib/libcrypto/man/man3/SRP_create_verifier.3 M secure/lib/libcrypto/man/man3/SRP_user_pwd_new.3 M secure/lib/libcrypto/man/man3/SSL_CIPHER_get_name.3 M secure/lib/libcrypto/man/man3/SSL_COMP_add_compression_method.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_new.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set1_prefix.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set_flags.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set_ssl_ctx.3 M secure/lib/libcrypto/man/man3/SSL_CONF_cmd.3 M secure/lib/libcrypto/man/man3/SSL_CONF_cmd_argv.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add1_chain_cert.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add_extra_chain_cert.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add_session.3 M secure/lib/libcrypto/man/man3/SSL_CTX_config.3 M secure/lib/libcrypto/man/man3/SSL_CTX_ctrl.3 M secure/lib/libcrypto/man/man3/SSL_CTX_dane_enable.3 M secure/lib/libcrypto/man/man3/SSL_CTX_flush_sessions.3 M secure/lib/libcrypto/man/man3/SSL_CTX_free.3 M secure/lib/libcrypto/man/man3/SSL_CTX_get0_param.3 M secure/lib/libcrypto/man/man3/SSL_CTX_get_verify_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_has_client_custom_ext.3 M secure/lib/libcrypto/man/man3/SSL_CTX_load_verify_locations.3 M secure/lib/libcrypto/man/man3/SSL_CTX_new.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_number.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_set_cache_size.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_set_get_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sessions.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set0_CA_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_curves.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_sigalgs.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_verify_cert_store.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_alpn_select_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_store.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_verify_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cipher_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_client_cert_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_client_hello_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ct_validation_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ctlog_list_file.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_default_passwd_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_generate_session_id.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_info_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_keylog_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_max_cert_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_min_proto_version.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_msg_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_num_tickets.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_options.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_psk_client_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_quiet_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_read_ahead.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_record_padding_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_security_level.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_cache_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_id_context.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_ticket_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_split_send_fragment.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_srp_password.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ssl_version.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_stateless_cookie_generate_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_timeout.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_servername_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_status_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_use_srtp.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tmp_dh_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tmp_ecdh.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_verify.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_certificate.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_psk_identity_hint.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_serverinfo.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_free.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_cipher.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_hostname.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_id_context.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_peer.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_compress_id.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_protocol_version.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_time.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_has_ticket.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_is_resumable.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_print.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_set1_id.3 M secure/lib/libcrypto/man/man3/SSL_accept.3 M secure/lib/libcrypto/man/man3/SSL_alert_type_string.3 M secure/lib/libcrypto/man/man3/SSL_alloc_buffers.3 M secure/lib/libcrypto/man/man3/SSL_check_chain.3 M secure/lib/libcrypto/man/man3/SSL_clear.3 M secure/lib/libcrypto/man/man3/SSL_connect.3 M secure/lib/libcrypto/man/man3/SSL_do_handshake.3 M secure/lib/libcrypto/man/man3/SSL_export_keying_material.3 M secure/lib/libcrypto/man/man3/SSL_extension_supported.3 M secure/lib/libcrypto/man/man3/SSL_free.3 M secure/lib/libcrypto/man/man3/SSL_get0_peer_scts.3 M secure/lib/libcrypto/man/man3/SSL_get_SSL_CTX.3 M secure/lib/libcrypto/man/man3/SSL_get_all_async_fds.3 M secure/lib/libcrypto/man/man3/SSL_get_certificate.3 M secure/lib/libcrypto/man/man3/SSL_get_ciphers.3 M secure/lib/libcrypto/man/man3/SSL_get_client_random.3 M secure/lib/libcrypto/man/man3/SSL_get_current_cipher.3 M secure/lib/libcrypto/man/man3/SSL_get_default_timeout.3 M secure/lib/libcrypto/man/man3/SSL_get_error.3 M secure/lib/libcrypto/man/man3/SSL_get_extms_support.3 M secure/lib/libcrypto/man/man3/SSL_get_fd.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_cert_chain.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_certificate.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_signature_nid.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_tmp_key.3 M secure/lib/libcrypto/man/man3/SSL_get_psk_identity.3 M secure/lib/libcrypto/man/man3/SSL_get_rbio.3 M secure/lib/libcrypto/man/man3/SSL_get_session.3 M secure/lib/libcrypto/man/man3/SSL_get_shared_sigalgs.3 M secure/lib/libcrypto/man/man3/SSL_get_verify_result.3 M secure/lib/libcrypto/man/man3/SSL_get_version.3 M secure/lib/libcrypto/man/man3/SSL_group_to_name.3 M secure/lib/libcrypto/man/man3/SSL_in_init.3 M secure/lib/libcrypto/man/man3/SSL_key_update.3 M secure/lib/libcrypto/man/man3/SSL_library_init.3 M secure/lib/libcrypto/man/man3/SSL_load_client_CA_file.3 M secure/lib/libcrypto/man/man3/SSL_new.3 M secure/lib/libcrypto/man/man3/SSL_pending.3 M secure/lib/libcrypto/man/man3/SSL_read.3 M secure/lib/libcrypto/man/man3/SSL_read_early_data.3 M secure/lib/libcrypto/man/man3/SSL_rstate_string.3 M secure/lib/libcrypto/man/man3/SSL_session_reused.3 M secure/lib/libcrypto/man/man3/SSL_set1_host.3 M secure/lib/libcrypto/man/man3/SSL_set_async_callback.3 M secure/lib/libcrypto/man/man3/SSL_set_bio.3 M secure/lib/libcrypto/man/man3/SSL_set_connect_state.3 M secure/lib/libcrypto/man/man3/SSL_set_fd.3 M secure/lib/libcrypto/man/man3/SSL_set_retry_verify.3 M secure/lib/libcrypto/man/man3/SSL_set_session.3 M secure/lib/libcrypto/man/man3/SSL_set_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_set_verify_result.3 M secure/lib/libcrypto/man/man3/SSL_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_state_string.3 M secure/lib/libcrypto/man/man3/SSL_want.3 M secure/lib/libcrypto/man/man3/SSL_write.3 M secure/lib/libcrypto/man/man3/TS_RESP_CTX_new.3 M secure/lib/libcrypto/man/man3/TS_VERIFY_CTX_set_certs.3 M secure/lib/libcrypto/man/man3/UI_STRING.3 M secure/lib/libcrypto/man/man3/UI_UTIL_read_pw.3 M secure/lib/libcrypto/man/man3/UI_create_method.3 M secure/lib/libcrypto/man/man3/UI_new.3 M secure/lib/libcrypto/man/man3/X509V3_get_d2i.3 M secure/lib/libcrypto/man/man3/X509V3_set_ctx.3 M secure/lib/libcrypto/man/man3/X509_ALGOR_dup.3 M secure/lib/libcrypto/man/man3/X509_ATTRIBUTE.3 M secure/lib/libcrypto/man/man3/X509_CRL_get0_by_serial.3 M secure/lib/libcrypto/man/man3/X509_EXTENSION_set_object.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP_hash_dir.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP_meth_new.3 M secure/lib/libcrypto/man/man3/X509_NAME_ENTRY_get_object.3 M secure/lib/libcrypto/man/man3/X509_NAME_add_entry_by_txt.3 M secure/lib/libcrypto/man/man3/X509_NAME_get0_der.3 M secure/lib/libcrypto/man/man3/X509_NAME_get_index_by_NID.3 M secure/lib/libcrypto/man/man3/X509_NAME_print_ex.3 M secure/lib/libcrypto/man/man3/X509_PUBKEY_new.3 M secure/lib/libcrypto/man/man3/X509_REQ_get_attr.3 M secure/lib/libcrypto/man/man3/X509_REQ_get_extensions.3 M secure/lib/libcrypto/man/man3/X509_SIG_get0.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_get_error.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_new.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_set_verify_cb.3 M secure/lib/libcrypto/man/man3/X509_STORE_add_cert.3 M secure/lib/libcrypto/man/man3/X509_STORE_get0_param.3 M secure/lib/libcrypto/man/man3/X509_STORE_new.3 M secure/lib/libcrypto/man/man3/X509_STORE_set_verify_cb_func.3 M secure/lib/libcrypto/man/man3/X509_VERIFY_PARAM_set_flags.3 M secure/lib/libcrypto/man/man3/X509_add_cert.3 M secure/lib/libcrypto/man/man3/X509_check_ca.3 M secure/lib/libcrypto/man/man3/X509_check_host.3 M secure/lib/libcrypto/man/man3/X509_check_issued.3 M secure/lib/libcrypto/man/man3/X509_check_private_key.3 M secure/lib/libcrypto/man/man3/X509_check_purpose.3 M secure/lib/libcrypto/man/man3/X509_cmp.3 M secure/lib/libcrypto/man/man3/X509_cmp_time.3 M secure/lib/libcrypto/man/man3/X509_digest.3 M secure/lib/libcrypto/man/man3/X509_dup.3 M secure/lib/libcrypto/man/man3/X509_get0_distinguishing_id.3 M secure/lib/libcrypto/man/man3/X509_get0_notBefore.3 M secure/lib/libcrypto/man/man3/X509_get0_signature.3 M secure/lib/libcrypto/man/man3/X509_get0_uids.3 M secure/lib/libcrypto/man/man3/X509_get_extension_flags.3 M secure/lib/libcrypto/man/man3/X509_get_pubkey.3 M secure/lib/libcrypto/man/man3/X509_get_serialNumber.3 M secure/lib/libcrypto/man/man3/X509_get_subject_name.3 M secure/lib/libcrypto/man/man3/X509_get_version.3 M secure/lib/libcrypto/man/man3/X509_load_http.3 M secure/lib/libcrypto/man/man3/X509_new.3 M secure/lib/libcrypto/man/man3/X509_sign.3 M secure/lib/libcrypto/man/man3/X509_verify.3 M secure/lib/libcrypto/man/man3/X509_verify_cert.3 M secure/lib/libcrypto/man/man3/X509v3_get_ext_by_NID.3 M secure/lib/libcrypto/man/man3/b2i_PVK_bio_ex.3 M secure/lib/libcrypto/man/man3/d2i_PKCS8PrivateKey_bio.3 M secure/lib/libcrypto/man/man3/d2i_PrivateKey.3 M secure/lib/libcrypto/man/man3/d2i_RSAPrivateKey.3 M secure/lib/libcrypto/man/man3/d2i_SSL_SESSION.3 M secure/lib/libcrypto/man/man3/d2i_X509.3 M secure/lib/libcrypto/man/man3/i2d_CMS_bio_stream.3 M secure/lib/libcrypto/man/man3/i2d_PKCS7_bio_stream.3 M secure/lib/libcrypto/man/man3/i2d_re_X509_tbs.3 M secure/lib/libcrypto/man/man3/o2i_SCT_LIST.3 M secure/lib/libcrypto/man/man3/s2i_ASN1_IA5STRING.3 M secure/lib/libcrypto/man/man5/config.5 M secure/lib/libcrypto/man/man5/fips_config.5 M secure/lib/libcrypto/man/man5/x509v3_config.5 M secure/lib/libcrypto/man/man7/EVP_ASYM_CIPHER-RSA.7 M secure/lib/libcrypto/man/man7/EVP_ASYM_CIPHER-SM2.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-AES.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-ARIA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-BLOWFISH.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CAMELLIA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CAST.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CHACHA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-DES.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-IDEA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-NULL.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC2.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC4.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC5.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-SEED.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-SM4.7 M secure/lib/libcrypto/man/man7/EVP_KDF-HKDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-KB.7 M secure/lib/libcrypto/man/man7/EVP_KDF-KRB5KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF1.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF2.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PKCS12KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SCRYPT.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SS.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SSHKDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-TLS13_KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-TLS1_PRF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X942-ASN1.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X942-CONCAT.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X963.7 M secure/lib/libcrypto/man/man7/EVP_KEM-RSA.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-DH.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-ECDH.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-X25519.7 M secure/lib/libcrypto/man/man7/EVP_MAC-BLAKE2.7 M secure/lib/libcrypto/man/man7/EVP_MAC-CMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-GMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-KMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-Poly1305.7 M secure/lib/libcrypto/man/man7/EVP_MAC-Siphash.7 M secure/lib/libcrypto/man/man7/EVP_MD-BLAKE2.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD2.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD4.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD5-SHA1.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD5.7 M secure/lib/libcrypto/man/man7/EVP_MD-MDC2.7 M secure/lib/libcrypto/man/man7/EVP_MD-NULL.7 M secure/lib/libcrypto/man/man7/EVP_MD-RIPEMD160.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA1.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA2.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA3.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHAKE.7 M secure/lib/libcrypto/man/man7/EVP_MD-SM3.7 M secure/lib/libcrypto/man/man7/EVP_MD-WHIRLPOOL.7 M secure/lib/libcrypto/man/man7/EVP_MD-common.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-DH.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-DSA.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-EC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-FFC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-RSA.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-SM2.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-X25519.7 M secure/lib/libcrypto/man/man7/EVP_RAND-CTR-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-HASH-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-HMAC-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-SEED-SRC.7 M secure/lib/libcrypto/man/man7/EVP_RAND-TEST-RAND.7 M secure/lib/libcrypto/man/man7/EVP_RAND.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-DSA.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-ECDSA.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-ED25519.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-RSA.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-FIPS.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-base.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-default.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-legacy.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-null.7 M secure/lib/libcrypto/man/man7/RAND.7 M secure/lib/libcrypto/man/man7/RSA-PSS.7 M secure/lib/libcrypto/man/man7/X25519.7 M secure/lib/libcrypto/man/man7/bio.7 M secure/lib/libcrypto/man/man7/crypto.7 M secure/lib/libcrypto/man/man7/ct.7 M secure/lib/libcrypto/man/man7/des_modes.7 M secure/lib/libcrypto/man/man7/evp.7 M secure/lib/libcrypto/man/man7/fips_module.7 M secure/lib/libcrypto/man/man7/life_cycle-cipher.7 M secure/lib/libcrypto/man/man7/life_cycle-digest.7 M secure/lib/libcrypto/man/man7/life_cycle-kdf.7 M secure/lib/libcrypto/man/man7/life_cycle-mac.7 M secure/lib/libcrypto/man/man7/life_cycle-pkey.7 M secure/lib/libcrypto/man/man7/life_cycle-rand.7 M secure/lib/libcrypto/man/man7/migration_guide.7 M secure/lib/libcrypto/man/man7/openssl-core.h.7 M secure/lib/libcrypto/man/man7/openssl-core_dispatch.h.7 M secure/lib/libcrypto/man/man7/openssl-core_names.h.7 M secure/lib/libcrypto/man/man7/openssl-env.7 M secure/lib/libcrypto/man/man7/openssl-glossary.7 M secure/lib/libcrypto/man/man7/openssl-threads.7 M secure/lib/libcrypto/man/man7/openssl_user_macros.7 M secure/lib/libcrypto/man/man7/ossl_store-file.7 M secure/lib/libcrypto/man/man7/ossl_store.7 M secure/lib/libcrypto/man/man7/passphrase-encoding.7 M secure/lib/libcrypto/man/man7/property.7 M secure/lib/libcrypto/man/man7/provider-asym_cipher.7 M secure/lib/libcrypto/man/man7/provider-base.7 M secure/lib/libcrypto/man/man7/provider-cipher.7 M secure/lib/libcrypto/man/man7/provider-decoder.7 M secure/lib/libcrypto/man/man7/provider-digest.7 M secure/lib/libcrypto/man/man7/provider-encoder.7 M secure/lib/libcrypto/man/man7/provider-kdf.7 M secure/lib/libcrypto/man/man7/provider-kem.7 M secure/lib/libcrypto/man/man7/provider-keyexch.7 M secure/lib/libcrypto/man/man7/provider-keymgmt.7 M secure/lib/libcrypto/man/man7/provider-mac.7 M secure/lib/libcrypto/man/man7/provider-object.7 M secure/lib/libcrypto/man/man7/provider-rand.7 M secure/lib/libcrypto/man/man7/provider-signature.7 M secure/lib/libcrypto/man/man7/provider-storemgmt.7 M secure/lib/libcrypto/man/man7/provider.7 M secure/lib/libcrypto/man/man7/proxy-certificates.7 M secure/lib/libcrypto/man/man7/ssl.7 M secure/lib/libcrypto/man/man7/x509.7 M secure/usr.bin/openssl/man/CA.pl.1 M secure/usr.bin/openssl/man/openssl-asn1parse.1 M secure/usr.bin/openssl/man/openssl-ca.1 M secure/usr.bin/openssl/man/openssl-ciphers.1 M secure/usr.bin/openssl/man/openssl-cmds.1 M secure/usr.bin/openssl/man/openssl-cmp.1 M secure/usr.bin/openssl/man/openssl-cms.1 M secure/usr.bin/openssl/man/openssl-crl.1 M secure/usr.bin/openssl/man/openssl-crl2pkcs7.1 M secure/usr.bin/openssl/man/openssl-dgst.1 M secure/usr.bin/openssl/man/openssl-dhparam.1 M secure/usr.bin/openssl/man/openssl-dsa.1 M secure/usr.bin/openssl/man/openssl-dsaparam.1 M secure/usr.bin/openssl/man/openssl-ec.1 M secure/usr.bin/openssl/man/openssl-ecparam.1 M secure/usr.bin/openssl/man/openssl-enc.1 M secure/usr.bin/openssl/man/openssl-engine.1 M secure/usr.bin/openssl/man/openssl-errstr.1 M secure/usr.bin/openssl/man/openssl-fipsinstall.1 M secure/usr.bin/openssl/man/openssl-format-options.1 M secure/usr.bin/openssl/man/openssl-gendsa.1 M secure/usr.bin/openssl/man/openssl-genpkey.1 M secure/usr.bin/openssl/man/openssl-genrsa.1 M secure/usr.bin/openssl/man/openssl-info.1 M secure/usr.bin/openssl/man/openssl-kdf.1 M secure/usr.bin/openssl/man/openssl-list.1 M secure/usr.bin/openssl/man/openssl-mac.1 M secure/usr.bin/openssl/man/openssl-namedisplay-options.1 M secure/usr.bin/openssl/man/openssl-nseq.1 M secure/usr.bin/openssl/man/openssl-ocsp.1 M secure/usr.bin/openssl/man/openssl-passphrase-options.1 M secure/usr.bin/openssl/man/openssl-passwd.1 M secure/usr.bin/openssl/man/openssl-pkcs12.1 M secure/usr.bin/openssl/man/openssl-pkcs7.1 M secure/usr.bin/openssl/man/openssl-pkcs8.1 M secure/usr.bin/openssl/man/openssl-pkey.1 M secure/usr.bin/openssl/man/openssl-pkeyparam.1 M secure/usr.bin/openssl/man/openssl-pkeyutl.1 M secure/usr.bin/openssl/man/openssl-prime.1 M secure/usr.bin/openssl/man/openssl-rand.1 M secure/usr.bin/openssl/man/openssl-rehash.1 M secure/usr.bin/openssl/man/openssl-req.1 M secure/usr.bin/openssl/man/openssl-rsa.1 M secure/usr.bin/openssl/man/openssl-rsautl.1 M secure/usr.bin/openssl/man/openssl-s_client.1 M secure/usr.bin/openssl/man/openssl-s_server.1 M secure/usr.bin/openssl/man/openssl-s_time.1 M secure/usr.bin/openssl/man/openssl-sess_id.1 M secure/usr.bin/openssl/man/openssl-smime.1 M secure/usr.bin/openssl/man/openssl-speed.1 M secure/usr.bin/openssl/man/openssl-spkac.1 M secure/usr.bin/openssl/man/openssl-srp.1 M secure/usr.bin/openssl/man/openssl-storeutl.1 M secure/usr.bin/openssl/man/openssl-ts.1 M secure/usr.bin/openssl/man/openssl-verification-options.1 M secure/usr.bin/openssl/man/openssl-verify.1 M secure/usr.bin/openssl/man/openssl-version.1 M secure/usr.bin/openssl/man/openssl-x509.1 M secure/usr.bin/openssl/man/openssl.1 M secure/usr.bin/openssl/man/tsget.1 _____________________________________________________________________________________________________________ Commit: 74152f84fa4c4421da9d8ebf528e129ea2437c9a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=74152f84fa4c4421da9d8ebf528e129ea2437c9a Author: Dimitry Andric (Thu 24 Sep 2026 13:50:47 BST) Committer: Dimitry Andric (Thu 1 Oct 2026 19:30:09 BST) llvm: remove Mips target support The Mips architecture has been removed from all supported branches now. MFC after: 1 week (cherry picked from commit b5d1e0c5a4929e2be3bc58aad8e5b707860ec0fd) M lib/clang/include/llvm/Config/AsmParsers.def M lib/clang/include/llvm/Config/AsmPrinters.def M lib/clang/include/llvm/Config/Disassemblers.def M lib/clang/include/llvm/Config/Targets.def M lib/clang/include/llvm/Config/Targets.h M lib/clang/libllvm/Makefile M lib/clang/llvm.build.mk M share/man/man5/src.conf.5 M share/mk/src.opts.mk D tools/build/options/WITHOUT_LLVM_TARGET_MIPS D tools/build/options/WITH_LLVM_TARGET_MIPS _____________________________________________________________________________________________________________ Commit: f117b6ba9f7ccea25a105471478b81e0438a3082 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f117b6ba9f7ccea25a105471478b81e0438a3082 Author: Mark Johnston (Thu 24 Sep 2026 17:14:34 BST) Committer: Mark Johnston (Thu 1 Oct 2026 14:42:56 BST) lockf: Do not block in vfs_busy() A race is possible otherwise: vfs_busy() may return after an unmounted filesystem has been removed from the global mount list. That is, vfs_busy() will block until vfs_mount_destroy() sets MNTK_REFEXPIRE, and at that point the mountpoint has been removed from the mountlist, so TAILQ_FOREACH can return an invalid value. Simply do not block if the mountpoint is being unmounted. Reviewed by: kib Fixes: eca39864f702 ("Add sysctl KERN_LOCKF") MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59982 (cherry picked from commit dd16a5f53b0b2e967d20d2900f18fc320997679b) M sys/kern/kern_lockf.c _____________________________________________________________________________________________________________ Commit: c3b8e0bb8b3980c09204556f63a6fbdabe43a234 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c3b8e0bb8b3980c09204556f63a6fbdabe43a234 Author: Mark Johnston (Thu 24 Sep 2026 16:49:37 BST) Committer: Mark Johnston (Thu 1 Oct 2026 14:42:38 BST) vm_page: Fix the error path in vm_page_alloc_contig_domain() If we are inserting a run of pages into a VM object and fail at some point due to a memory allocation failure, we have to free all of the pages in the run. We do that by resetting some fields and calling vm_page_free_toq() on each page; this removes the page from the object and frees it back to the buddy allocator. If the page is supposed to be wired, we reset the reference count, but this was done incorrectly: the VPRC_OBJREF flag must be retained as the page still belongs to an object. Resetting it to zero will cause a panic in vm_page_free_prep(): vm_page_free_object_prep() will subtract VPRC_OBJREF from the refcount, causing underflow, and vm_page_free_prep() subsequently calls panic() if the refcount is non-zero. Reviewed by: alc, kib Fixes: fee2a2fa3983 ("Change synchonization rules for vm_page reference counting.") MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59908 (cherry picked from commit 742e58ddc989563f90a1d636cb29793641784ca1) M sys/vm/vm_page.c _____________________________________________________________________________________________________________ Commit: d1b49810e8c8872e96e35dc4e5635af73679c61e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d1b49810e8c8872e96e35dc4e5635af73679c61e Author: Mark Johnston (Wed 16 Sep 2026 13:13:25 BST) Committer: Mark Johnston (Thu 1 Oct 2026 14:42:36 BST) ppp: Fix address leaks Avoid printing timer addresses, so as to not divulge information about the address space layout. In ip.c, print the actual SPI instead of a pointer to the SPI in the header buffer. When debug logging is enabled, don't leak pointers when logging function arguments or return values. Reported by: Reo Shiseki MFC after: 2 weeks Sponsored by: The FreeBSD Foundation (cherry picked from commit c91777f23a3b13649cdf303515ee45a04c788af3) M usr.sbin/ppp/id.c M usr.sbin/ppp/ip.c M usr.sbin/ppp/radius.c M usr.sbin/ppp/timer.c M usr.sbin/ppp/tty.c _____________________________________________________________________________________________________________ Commit: 3be409a395e503f03e6ee35eec112038b1b722b8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3be409a395e503f03e6ee35eec112038b1b722b8 Author: Andrew Griffiths (Wed 16 Sep 2026 14:04:46 BST) Committer: Mark Johnston (Thu 1 Oct 2026 14:42:36 BST) mac_bsdextended: reject negative rule indices in sysctl_rule() The security.mac.bsdextended.rules. node handler takes N as `index = name[0]` (a signed int) and only checks `index >= MAC_BSDEXTENDED_MAXRULES`. A negative index is caught on the read branch, but the write-only add and delete branches proceed to `rules[index]` unconditionally. Reject `index < 0` alongside the existing upper-bound check. Submitted by calif.io for the OpenAI Patch The Planet program Signed-off-by: Andrew Griffiths Reviewed by: markj MFC after: 2 weeks (cherry picked from commit 5d0b87669a91244e330a35fc973e6c60f92f6d1f) M sys/security/mac_bsdextended/mac_bsdextended.c _____________________________________________________________________________________________________________ Commit: 1fadced1c8695631b363bc56a06123bd8111d9bf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1fadced1c8695631b363bc56a06123bd8111d9bf Author: Mateusz Piotrowski <0mp@FreeBSD.org> (Wed 23 Sep 2026 15:19:05 BST) Committer: Mateusz Piotrowski <0mp@FreeBSD.org> (Thu 1 Oct 2026 09:08:16 BST) sdiff.1: Document exit status and --help MFC after: 3 days Approved by: bnovkov (mentor) Sponsored by: fme AG Differential Revision: https://reviews.freebsd.org/D59927 (cherry picked from commit 14c7492637ec0644b5bb88da114e8cc76b9bf629) M usr.bin/sdiff/sdiff.1 M usr.bin/sdiff/sdiff.c _____________________________________________________________________________________________________________ Commit: c09c4b1560dea4382095c2f7505f5eb2c9b7f0ef URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c09c4b1560dea4382095c2f7505f5eb2c9b7f0ef Author: Enji Cooper (Mon 7 Sep 2026 04:21:50 BST) Committer: Enji Cooper (Thu 1 Oct 2026 07:33:46 BST) contrib/lutok: remove autotools generated files These files provide no value in the FreeBSD tree proper and change frequently, depending on what machine I generate the release tarball on (and what versions of autotools are on the host). Nuke the autogenerated files to avoid bloating commit history/the tree. MFC after: 3 days Requested by: Benjamin Jacobs (cherry picked from commit cfe443e1e63dd588fba7eabec553ed5e1c408d1f) D contrib/lutok/Makefile.in D contrib/lutok/aclocal.m4 D contrib/lutok/admin/ar-lib D contrib/lutok/admin/compile D contrib/lutok/admin/config.guess D contrib/lutok/admin/config.sub D contrib/lutok/admin/depcomp D contrib/lutok/admin/install-sh D contrib/lutok/admin/ltmain.sh D contrib/lutok/admin/missing D contrib/lutok/configure D contrib/lutok/m4/libtool.m4 D contrib/lutok/m4/ltoptions.m4 D contrib/lutok/m4/ltversion.m4 D contrib/lutok/m4/lt~obsolete.m4 _____________________________________________________________________________________________________________ Commit: f3a42111ec5985c0bfbca32f999921641ec10b01 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f3a42111ec5985c0bfbca32f999921641ec10b01 Author: Enji Cooper (Mon 31 Aug 2026 17:29:06 BST) Committer: Enji Cooper (Thu 1 Oct 2026 07:33:46 BST) contrib/lutok: update from 0.4 to 0.6.2 More information about what's included in the new release can be found [here](https://github.com/freebsd/lutok/compare/lutok-0.4...lutok-0.6.2). MFC after: 1 week Merge commit '447d4fe61d8bf55ffa21698ecee0ac51010a9a0f' (cherry picked from commit 132f818ddbf457ee67d502cd89b5a18e0a34713d) D contrib/lutok/.gitignore D contrib/lutok/.travis.yml D contrib/lutok/INSTALL A contrib/lutok/INSTALL.md M contrib/lutok/Makefile.am A contrib/lutok/Makefile.in M contrib/lutok/NEWS R069 contrib/lutok/README contrib/lutok/README.md A contrib/lutok/aclocal.m4 D contrib/lutok/admin/.gitignore A contrib/lutok/admin/ar-lib D contrib/lutok/admin/clean-all.sh A contrib/lutok/admin/compile A contrib/lutok/admin/config.guess A contrib/lutok/admin/config.sub A contrib/lutok/admin/depcomp A contrib/lutok/admin/install-sh A contrib/lutok/admin/ltmain.sh A contrib/lutok/admin/missing D contrib/lutok/admin/travis-build.sh D contrib/lutok/admin/travis-install-deps.sh A contrib/lutok/api-docs/html/a00002.html A contrib/lutok/api-docs/html/a00002_source.html A contrib/lutok/api-docs/html/a00029.html A contrib/lutok/api-docs/html/a00029_source.html A contrib/lutok/api-docs/html/a00032.html A contrib/lutok/api-docs/html/a00032_source.html A contrib/lutok/api-docs/html/a00038.html A contrib/lutok/api-docs/html/a00038_source.html A contrib/lutok/api-docs/html/a00041.html A contrib/lutok/api-docs/html/a00041_source.html A contrib/lutok/api-docs/html/a00053.html A contrib/lutok/api-docs/html/a00053_source.html A contrib/lutok/api-docs/html/a00056.html A contrib/lutok/api-docs/html/a00056_source.html A contrib/lutok/api-docs/html/a00064.html A contrib/lutok/api-docs/html/a00065.html A contrib/lutok/api-docs/html/a00066.html A contrib/lutok/api-docs/html/a00067.html A contrib/lutok/api-docs/html/a00880.html A contrib/lutok/api-docs/html/a00883.html A contrib/lutok/api-docs/html/a00884.html A contrib/lutok/api-docs/html/a00887.html A contrib/lutok/api-docs/html/a00888.html A contrib/lutok/api-docs/html/a00891.html A contrib/lutok/api-docs/html/a00892.html A contrib/lutok/api-docs/html/a00895.html A contrib/lutok/api-docs/html/a00895.png A contrib/lutok/api-docs/html/a00896.html A contrib/lutok/api-docs/html/a00899.html A contrib/lutok/api-docs/html/a00899.png A contrib/lutok/api-docs/html/a00900.html A contrib/lutok/api-docs/html/a00903.html A contrib/lutok/api-docs/html/a00903.png A contrib/lutok/api-docs/html/a00904.html A contrib/lutok/api-docs/html/a00907.html A contrib/lutok/api-docs/html/a00908.html A contrib/lutok/api-docs/html/a00911.html A contrib/lutok/api-docs/html/a00912.html A contrib/lutok/api-docs/html/a00915.html A contrib/lutok/api-docs/html/a00916.html A contrib/lutok/api-docs/html/a00919.html A contrib/lutok/api-docs/html/a00920.html A contrib/lutok/api-docs/html/a00923.html A contrib/lutok/api-docs/html/annotated.html A contrib/lutok/api-docs/html/bc_s.png A contrib/lutok/api-docs/html/bc_sd.png A contrib/lutok/api-docs/html/bdwn.png A contrib/lutok/api-docs/html/classes.html A contrib/lutok/api-docs/html/closed.png A contrib/lutok/api-docs/html/doc.png A contrib/lutok/api-docs/html/docd.png A contrib/lutok/api-docs/html/doxygen.css A contrib/lutok/api-docs/html/doxygen.svg A contrib/lutok/api-docs/html/dynsections.js A contrib/lutok/api-docs/html/files.html A contrib/lutok/api-docs/html/folderclosed.png A contrib/lutok/api-docs/html/folderopen.png A contrib/lutok/api-docs/html/functions.html A contrib/lutok/api-docs/html/functions_func.html A contrib/lutok/api-docs/html/functions_vars.html A contrib/lutok/api-docs/html/globals.html A contrib/lutok/api-docs/html/globals_defs.html A contrib/lutok/api-docs/html/hierarchy.html A contrib/lutok/api-docs/html/index.html A contrib/lutok/api-docs/html/jquery.js A contrib/lutok/api-docs/html/menu.js A contrib/lutok/api-docs/html/menudata.js A contrib/lutok/api-docs/html/namespacemembers.html A contrib/lutok/api-docs/html/namespacemembers_func.html A contrib/lutok/api-docs/html/namespaces.html A contrib/lutok/api-docs/html/nav_f.png A contrib/lutok/api-docs/html/nav_fd.png A contrib/lutok/api-docs/html/nav_g.png A contrib/lutok/api-docs/html/nav_h.png A contrib/lutok/api-docs/html/nav_hd.png A contrib/lutok/api-docs/html/open.png A contrib/lutok/api-docs/html/search/all_0.js A contrib/lutok/api-docs/html/search/all_1.js A contrib/lutok/api-docs/html/search/all_10.js A contrib/lutok/api-docs/html/search/all_11.js A contrib/lutok/api-docs/html/search/all_12.js A contrib/lutok/api-docs/html/search/all_2.js A contrib/lutok/api-docs/html/search/all_3.js A contrib/lutok/api-docs/html/search/all_4.js A contrib/lutok/api-docs/html/search/all_5.js A contrib/lutok/api-docs/html/search/all_6.js A contrib/lutok/api-docs/html/search/all_7.js A contrib/lutok/api-docs/html/search/all_8.js A contrib/lutok/api-docs/html/search/all_9.js A contrib/lutok/api-docs/html/search/all_a.js A contrib/lutok/api-docs/html/search/all_b.js A contrib/lutok/api-docs/html/search/all_c.js A contrib/lutok/api-docs/html/search/all_d.js A contrib/lutok/api-docs/html/search/all_e.js A contrib/lutok/api-docs/html/search/all_f.js A contrib/lutok/api-docs/html/search/classes_0.js A contrib/lutok/api-docs/html/search/classes_1.js A contrib/lutok/api-docs/html/search/classes_2.js A contrib/lutok/api-docs/html/search/classes_3.js A contrib/lutok/api-docs/html/search/classes_4.js A contrib/lutok/api-docs/html/search/classes_5.js A contrib/lutok/api-docs/html/search/close.svg A contrib/lutok/api-docs/html/search/defines_0.js A contrib/lutok/api-docs/html/search/files_0.js A contrib/lutok/api-docs/html/search/files_1.js A contrib/lutok/api-docs/html/search/files_2.js A contrib/lutok/api-docs/html/search/files_3.js A contrib/lutok/api-docs/html/search/files_4.js A contrib/lutok/api-docs/html/search/files_5.js A contrib/lutok/api-docs/html/search/functions_0.js A contrib/lutok/api-docs/html/search/functions_1.js A contrib/lutok/api-docs/html/search/functions_10.js A contrib/lutok/api-docs/html/search/functions_11.js A contrib/lutok/api-docs/html/search/functions_2.js A contrib/lutok/api-docs/html/search/functions_3.js A contrib/lutok/api-docs/html/search/functions_4.js A contrib/lutok/api-docs/html/search/functions_5.js A contrib/lutok/api-docs/html/search/functions_6.js A contrib/lutok/api-docs/html/search/functions_7.js A contrib/lutok/api-docs/html/search/functions_8.js A contrib/lutok/api-docs/html/search/functions_9.js A contrib/lutok/api-docs/html/search/functions_a.js A contrib/lutok/api-docs/html/search/functions_b.js A contrib/lutok/api-docs/html/search/functions_c.js A contrib/lutok/api-docs/html/search/functions_d.js A contrib/lutok/api-docs/html/search/functions_e.js A contrib/lutok/api-docs/html/search/functions_f.js A contrib/lutok/api-docs/html/search/mag.svg A contrib/lutok/api-docs/html/search/mag_d.svg A contrib/lutok/api-docs/html/search/mag_sel.svg A contrib/lutok/api-docs/html/search/mag_seld.svg A contrib/lutok/api-docs/html/search/namespaces_0.js A contrib/lutok/api-docs/html/search/search.css A contrib/lutok/api-docs/html/search/search.js A contrib/lutok/api-docs/html/search/searchdata.js A contrib/lutok/api-docs/html/search/typedefs_0.js A contrib/lutok/api-docs/html/search/variables_0.js A contrib/lutok/api-docs/html/search/variables_1.js A contrib/lutok/api-docs/html/search/variables_2.js A contrib/lutok/api-docs/html/search/variables_3.js A contrib/lutok/api-docs/html/search/variables_4.js A contrib/lutok/api-docs/html/splitbar.png A contrib/lutok/api-docs/html/splitbard.png A contrib/lutok/api-docs/html/sync_off.png A contrib/lutok/api-docs/html/sync_on.png A contrib/lutok/api-docs/html/tab_a.png A contrib/lutok/api-docs/html/tab_ad.png A contrib/lutok/api-docs/html/tab_b.png A contrib/lutok/api-docs/html/tab_bd.png A contrib/lutok/api-docs/html/tab_h.png A contrib/lutok/api-docs/html/tab_hd.png A contrib/lutok/api-docs/html/tab_s.png A contrib/lutok/api-docs/html/tab_sd.png A contrib/lutok/api-docs/html/tabs.css A contrib/lutok/config.h.in A contrib/lutok/configure M contrib/lutok/configure.ac M contrib/lutok/debug.hpp M contrib/lutok/examples_test.sh D contrib/lutok/m4/.gitignore A contrib/lutok/m4/ac_cxx_compile_stdcxx.m4 A contrib/lutok/m4/atf-c++.m4 A contrib/lutok/m4/atf-common.m4 A contrib/lutok/m4/atf-sh.m4 D contrib/lutok/m4/compiler-features.m4 A contrib/lutok/m4/libtool.m4 A contrib/lutok/m4/ltoptions.m4 A contrib/lutok/m4/ltsugar.m4 A contrib/lutok/m4/ltversion.m4 A contrib/lutok/m4/lt~obsolete.m4 M contrib/lutok/m4/lua.m4 M contrib/lutok/stack_cleaner.hpp M contrib/lutok/state.cpp M contrib/lutok/state.hpp _____________________________________________________________________________________________________________ Commit: 220e946f3f333239798a3b231406d121720899b9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=220e946f3f333239798a3b231406d121720899b9 Author: Enji Cooper (Sun 6 Sep 2026 23:22:50 BST) Committer: Enji Cooper (Thu 1 Oct 2026 07:11:57 BST) asmc.4: clean up/modernize manpage - sysutils/ataidle is no more: it was superseded by camcontrol(8). - Sort the models table alphabetically. - Use the SPDX License ID instead of the longhand licensing tort in the manpage header. - Note that the driver has been heavily modified in 15.1 and later to support additional platforms and functionality. - Trim down SYNOPSIS. MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D59470 (cherry picked from commit 7a039603a49db09fa574b4365ba36c92b7658868) M share/man/man4/asmc.4 _____________________________________________________________________________________________________________ Commit: 56a4abe124de6baf9ba1004893651ec210fa2a3e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=56a4abe124de6baf9ba1004893651ec210fa2a3e Author: Piotr Kubaj (Wed 23 Sep 2026 14:21:00 BST) Committer: Piotr Kubaj (Thu 1 Oct 2026 06:54:45 BST) llan: byte swap the receive queue entries The receive queue of a PAPR logical LAN is filled in by the hypervisor, so its fields are big endian, but llan_intr() read the offset and the length of each frame natively. On a little endian kernel the length of a 134 byte frame reads as 0x86000000, and ether_input() discards the mbuf because m_len is not even large enough for an ethernet header. No frame is ever received. Reproduced on a POWER9 pseries guest with a spapr-vlan interface. Before: llan0: discard frame w/o leading ethernet header (len -2046820352 pkt len -2046820352) llan0 1500 52:54:00:12:34:56 123 118 0 5838733312 7 0 that is 118 input errors out of 123 packets, dhclient(8) never completes and ping(8) loses every packet, although transmit works because the transmit path passes the lengths in hcall registers rather than through memory. Afterwards the interface gets a DHCP lease and ping reports no loss. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59926 Approved by: jhibbits (cherry picked from commit 6429199a21136cad3c82b43618a6ca2958b90bbf) (cherry picked from commit d8cbdc3b09d0196e2f23a2e1f934fa0811eb28b7) M sys/powerpc/pseries/phyp_llan.c _____________________________________________________________________________________________________________ Commit: b32597a90dfbcb8c8448b7ee6f853935c5df3e8d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b32597a90dfbcb8c8448b7ee6f853935c5df3e8d Author: Alexander Leidinger (Tue 25 Aug 2026 19:55:26 BST) Committer: Alexander Leidinger (Wed 30 Sep 2026 18:10:55 BST) hwpmc tests: the sampling log file Nine ATF cases covering PMC_OP_CONFIGURELOG and the descriptor-less log operations: which descriptors are accepted, when a log is required in the first place, and what the log operations do without one. MFC after: 1 month MFC to: stable/15 MFC to: stable/14 Assisted-by: Claude Code (Opus 5) (cherry picked from commit 8f0789bee7abb2fdb2ff6d625f254533a138e6e8) M tests/sys/pmc/Makefile A tests/sys/pmc/pmc_log_test.c _____________________________________________________________________________________________________________ Commit: 4a82521f9a113074a4537bc757112db3a284737f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4a82521f9a113074a4537bc757112db3a284737f Author: Alexander Leidinger (Tue 25 Aug 2026 19:55:25 BST) Committer: Alexander Leidinger (Wed 30 Sep 2026 18:10:54 BST) hwpmc: add credential-transition exec tests (keep and drop) The companion to pmc_exec_test.c, which covers only the drop side of a credential-changing exec. Three cases cover what the drop must not overreach into: an exec that changes no credentials keeps the PMC, a set-id exec whose credential change the kernel suppresses for a traced target keeps it too, and a set-id fexecve(2) drops it. They exercise the permission logic FreeBSD-SA-26:56.hwpmc reworked, not the defect it fixed. All three pass on a debug (INVARIANTS+WITNESS) kernel. The two keep-cases were each observed to fail on a kernel mutated to detach unconditionally. MFC after: 1 month MFC to: stable/15 MFC to: stable/14 Assisted-by: Claude Code (Opus 4.8) (cherry picked from commit bea7b932b9eeaff39393347e0600b982fd859a92) M tests/sys/pmc/Makefile A tests/sys/pmc/pmc_credexec_test.c _____________________________________________________________________________________________________________ Commit: 81ddb2e0156930052e87c2d9778d64041f16bb7b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=81ddb2e0156930052e87c2d9778d64041f16bb7b Author: Alexander Leidinger (Tue 25 Aug 2026 19:55:24 BST) Committer: Alexander Leidinger (Wed 30 Sep 2026 18:10:53 BST) hwpmc tests: process-attachment lifecycle and ownership cases Seven ATF cases covering process-attachment teardown orderings: a target that exits before it is detached, the owner that exits before its target (hwpmc's other unlink path), releasing a still-running attached PMC, row exhaustion with out-of-order release, and PMC_F_DESCENDANTS inheritance including a fork storm. All pass on a debug (INVARIANTS+WITNESS) and a KASAN kernel. MFC after: 1 month MFC to: stable/15 MFC to: stable/14 Assisted-by: Claude Code (Opus 5) (cherry picked from commit d00da14532bc4408f3e66535c88276d00905af7c) M tests/sys/pmc/Makefile A tests/sys/pmc/pmc_lifecycle_test.c _____________________________________________________________________________________________________________ Commit: 198c334c198393ebd9d781c24e9dfd68f9065343 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=198c334c198393ebd9d781c24e9dfd68f9065343 Author: Alexander Leidinger (Tue 25 Aug 2026 19:55:23 BST) Committer: Alexander Leidinger (Wed 30 Sep 2026 18:10:53 BST) hwpmc: add tests for handle validation and the privilege boundaries A pmc_id_t is a packed integer that the driver hands to userland and accepts back on eleven operations, and nothing tested what happens when one comes back forged, stale, or belonging to another process. Neither was there a test that an unprivileged caller is refused the operations that need a privilege. The cases use a SOFT-class PMC wherever the counter itself does not matter, so they run on a machine with no PMU. MFC after: 1 month MFC to: stable/15 MFC to: stable/14 Assisted-by: Claude Code (Opus 5) (cherry picked from commit 17fca802ded118102d04a7a0bbc0c076de18c4d8) M tests/sys/pmc/Makefile A tests/sys/pmc/pmc_api_test.c _____________________________________________________________________________________________________________ Commit: d5a5e414c32db06f3dab18ab2135d51bd829af39 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d5a5e414c32db06f3dab18ab2135d51bd829af39 Author: Alexander Leidinger (Tue 25 Aug 2026 19:55:22 BST) Committer: Alexander Leidinger (Wed 30 Sep 2026 18:10:52 BST) hwpmc: add regression tests for a credential-changing exec This tests what FreeBSD-SA-26:56.hwpmc fixed. exec_setgid_drops_pmc asserts the kernel takes a process-mode PMC away when its target execs a set-gid program its owner is not entitled to trace. exec_setuid_no_double_unlink lets the target exec a set-uid program; the teardown must unlink the process descriptor exactly once, and completing at all is the assertion. Both need an unprivileged owner and must not drop privileges themselves, since p_candebug() would then refuse the target to its own owner; they ask for require.user instead. MFC after: 1 month MFC to: stable/15 MFC to: stable/14 Assisted-by: Claude Code (Opus 5) (cherry picked from commit 068957e040f40eb7f484b2530481f3eae02f9d44) M tests/sys/pmc/Makefile A tests/sys/pmc/pmc_exec_test.c _____________________________________________________________________________________________________________ Commit: 517d051b81f1fd11f34157bc5489ee803b2c9a75 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=517d051b81f1fd11f34157bc5489ee803b2c9a75 Author: Alexander Leidinger (Wed 26 Aug 2026 14:26:36 BST) Committer: Alexander Leidinger (Wed 30 Sep 2026 18:10:52 BST) hwpmc tests: sort the list of test programs MFC after: 1 month MFC to: stable/15 MFC to: stable/14 (cherry picked from commit df537ff1520d82410328ebd6de529929dae620a6) M tests/sys/pmc/Makefile _____________________________________________________________________________________________________________ Commit: 0c14a8c6e7712cdabb77f76edd98fb0b96f225f4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0c14a8c6e7712cdabb77f76edd98fb0b96f225f4 Author: Piotr Kubaj (Wed 30 Sep 2026 14:09:28 BST) Committer: Piotr Kubaj (Wed 30 Sep 2026 14:12:02 BST) powerpc/radix: fix build void* casting is still necessary on stable/1{4,5} due to it being removed only in fe3e92e6868dce2ed94c98428b8df1f27ed3ef63. Fixes: 107212618921 Approved by: jhibbits (cherry picked from commit cb826c230d1b5abb684d8d00c96b8a6efcd56171) M sys/powerpc/aim/mmu_radix.c _____________________________________________________________________________________________________________ Commit: 304088ed12223e585409aba30ca62931e32f74ed URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=304088ed12223e585409aba30ca62931e32f74ed Author: Piotr Kubaj (Mon 21 Sep 2026 08:45:27 BST) Committer: Piotr Kubaj (Wed 30 Sep 2026 09:07:39 BST) powerpc/radix: fix double page offset in mmu_radix_sync_icache() mmu_radix_sync_icache() adds the offset of va within its page to the physical address it gets from mmu_radix_extract_locked(). That address already includes the offset - the extract routines return the physical address of the byte, not of the frame - so the offset is counted twice and __syncicache() is handed frame + 2 * offset. The hash MMU counterpart, moea64_sync_icache(), has to add the offset because PVO_PADDR() yields only the frame. Here the addition is wrong. Fixes: 6f0b2a235a13 ("powerpc/pmap: Add pmap_sync_icache() for radix pmap") Reviewed by: jhibbits MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59870 (cherry picked from commit 9d0859637f99160e17b656df153effae3df31f8b) (cherry picked from commit 107212618921492ffed84d6ea3c9a27c77aaf725) M sys/powerpc/aim/mmu_radix.c _____________________________________________________________________________________________________________ Commit: 6db5b4f1e684e148deff451593a349594a8cc545 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6db5b4f1e684e148deff451593a349594a8cc545 Author: Piotr Kubaj (Wed 23 Sep 2026 14:41:27 BST) Committer: Piotr Kubaj (Wed 30 Sep 2026 09:07:39 BST) sys/powerpc/powerpc/elf64_machdep.c: enable ASLR on ELFv2 Turns out that ever since introducing ELFv2 support, it was missing ASLR, it was only used for ELFv1 processes. Reviewed by: jhibbits (via IRC #powerpc64) MFC after: 1 week (cherry picked from commit 30ed27ff2556c591a1791105d1dfe7464d3f5b80) (cherry picked from commit edb560a7ccd69440e3bcd3e00ad9b347328f1be3) M sys/powerpc/powerpc/elf64_machdep.c _____________________________________________________________________________________________________________ Commit: 6b3d312f28b22280cfb668f35cbfe109ce026a0b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6b3d312f28b22280cfb668f35cbfe109ce026a0b Author: Eugene Grosbein (Sun 16 Aug 2026 09:29:20 BST) Committer: Eugene Grosbein (Wed 30 Sep 2026 06:49:53 BST) traceroute6: MFC: implement firewall evasion mode Merge implementation of "traceroute -e" to traceroute6 for TCP/UDP/SCTP. (cherry picked from commit f1cfcfb2e51ae5afa8941342ad10f650db8279c5) M usr.sbin/traceroute6/traceroute6.8 M usr.sbin/traceroute6/traceroute6.c _____________________________________________________________________________________________________________ Commit: bc57de1de8a7155392e6884218e0bb46ff6a85a0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bc57de1de8a7155392e6884218e0bb46ff6a85a0 Author: Eugene Grosbein (Wed 4 Mar 2026 08:06:05 GMT) Committer: Eugene Grosbein (Wed 30 Sep 2026 06:43:03 BST) me.4: MFC: note that it is a point-to-point interface Add explicit note that me(4) works as a point-to-point pseudo device. (cherry picked from commit f69eab727edbab1385e5ffc8b3f6cb5a233f62c0) M share/man/man4/me.4 _____________________________________________________________________________________________________________ Commit: 6d78add56fdd241a92658dd92068a84990b74517 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6d78add56fdd241a92658dd92068a84990b74517 Author: Maxim Konovalov (Tue 22 Sep 2026 23:10:39 BST) Committer: Sergey A. Osokin (Wed 30 Sep 2026 01:01:42 BST) bsd-family-tree: add NetBSD 10.2 (cherry picked from commit 7b7ef798bfc56c56e80b88bc277d5c6158dcaee4) M share/misc/bsd-family-tree _____________________________________________________________________________________________________________ Commit: 75655f9c168473a8d41884e1239923a28673fae8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=75655f9c168473a8d41884e1239923a28673fae8 Author: Maxim Konovalov (Tue 8 Sep 2026 05:03:27 BST) Committer: Sergey A. Osokin (Wed 30 Sep 2026 01:01:35 BST) bsd-family-tree: add NetBSD 9.5 and FreeBSD 14.5 (cherry picked from commit ae458518935eee7a6dc59958f1fb9da223b873c3) M share/misc/bsd-family-tree _____________________________________________________________________________________________________________ Commit: 7b8e59ccbdfc91acbb1b648a1765e452304606b9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7b8e59ccbdfc91acbb1b648a1765e452304606b9 Author: Gordon Tetlow (Sun 27 Sep 2026 23:05:27 BST) Committer: Mark Johnston (Tue 29 Sep 2026 16:56:33 BST) openssl: Fix CVE-2026-84782 This is a backport of an upstream commit to fix: dtls: reset init_off before retransmitting a message Approved by: so Security: FreeBSD-SA-26:68.openssl Security: CVE-2026-84782 M crypto/openssl/ssl/d1_lib.c M crypto/openssl/ssl/statem/statem_dtls.c _____________________________________________________________________________________________________________ Commit: 666f08d597436ad709fabc04e618e9228ec96e74 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=666f08d597436ad709fabc04e618e9228ec96e74 Author: Mark Johnston (Mon 28 Sep 2026 17:47:56 BST) Committer: Mark Johnston (Tue 29 Sep 2026 16:56:32 BST) vfs: Disallow renameat() with FD_RESOLVE_BENEATH descriptors The FD_RESOLVE_BENEATH flag was intended to try to resolve bugzilla PR 262179 without entirely disallowing fd passing between jails. However, one can use renameat() to bypass the restriction: upon receiving a directory fd with FD_RESOLVE_BENEATH set, a jailed process can still move its CWD or one of its ancestors to the directory, and just cd out of its jail root. So disallow renameat() when either the source or destination directory fds has FD_RESOLVE_BENEATH set, like we do with fchdir() and fchroot() to prevent similar escapes. Approved by: so Security: FreeBSD-SA-26:66.jail Security: CVE-2026-101305 PR: 262179 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262179 ) Reported by: firk@cantconnect.ru Reviewed by: olce, kib Differential Revision: https://reviews.freebsd.org/D59875 M lib/libc/sys/fcntl.2 M sys/kern/vfs_syscalls.c _____________________________________________________________________________________________________________ Commit: 5f9f2ac707d465984e237d86e718c05f102252f5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5f9f2ac707d465984e237d86e718c05f102252f5 Author: Mark Johnston (Mon 28 Sep 2026 15:44:04 BST) Committer: Mark Johnston (Tue 29 Sep 2026 16:56:32 BST) fdescfs: Pass up additional metadata during lookups When an fdescfs mount has the nodup option set, fdesc_lookup(/dev/fd/n) returns the vnode referenced by file descriptor n, rather than returning an fdescfs vnode. This meant that fd metadata attached to fd n was not preserved when reopening the file, which is contrary to the expected semantics for capsicum rights and the UF_RESOLVE_BENEATH fd flag. For regular fdescfs mounts, this metadata is copied via dupfdopen(). Fix the problem by passing up this metadata through the nameidata structure. Thus, if one opens /dev/fd/n, the returned fd will inherit UF_RESOLVE_BENEATH and the capability rights of fd n. Add some regression tests as well. Approved by: so Security: FreeBSD-SA-26:66.jail Security: CVE-2026-101304 Reported by: Jan Bramkamp Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59886 M sys/fs/fdescfs/fdesc_vnops.c M tests/sys/fs/Makefile A tests/sys/fs/fdescfs/Makefile A tests/sys/fs/fdescfs/fdescfs_test.c _____________________________________________________________________________________________________________ Commit: 616f35f932e92f88e6cc39dc1cb7eea1a9bc3b8e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=616f35f932e92f88e6cc39dc1cb7eea1a9bc3b8e Author: Mark Johnston (Mon 28 Sep 2026 15:43:23 BST) Committer: Mark Johnston (Tue 29 Sep 2026 16:56:32 BST) file: Add filecaps_intersect() and cap_rights_intersect() These routines let one compute the intersection of two sets of filecaps or capability rights, just as filecaps_merge() and cap_rights_merge() compute the union. This will be useful in an upcoming patch. filecaps_intersect() is complex due to the need to merge sets of ioctls. For now this is implemented with a dumb nested loop on the basis that ioctl lists are typically short enough that this is fine. It may be better to instead sort the two lists first and step through them together. No functional change intended. Approved by: so Security: FreeBSD-SA-26:66.jail Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59885 M lib/libc/capability/cap_rights_init.3 M sys/kern/kern_descrip.c M sys/kern/subr_capability.c M sys/sys/capsicum.h M sys/sys/filedesc.h _____________________________________________________________________________________________________________ Commit: f89e6b5e03f6b971f92375f8e73bb2374ea8fbd3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f89e6b5e03f6b971f92375f8e73bb2374ea8fbd3 Author: Mark Johnston (Mon 28 Sep 2026 15:42:29 BST) Committer: Mark Johnston (Tue 29 Sep 2026 16:56:32 BST) file: Add a helper function to check whether filecaps are full In a couple of places we want to know whether someone has limited rights on an fd. There, we want a predicate which determines whether the set of rights is smaller than CAP_ALL, and whether there are explicit ioctl or fcntl lists. Factor this out into a helper function, in preparation for use elsewhere. No functional change intended. Approved by: so Security: FreeBSD-SA-26:66.jail Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59884 M sys/kern/kern_descrip.c M sys/sys/filedesc.h _____________________________________________________________________________________________________________ Commit: 04f841a058367362368623c55141197126fbd539 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=04f841a058367362368623c55141197126fbd539 Author: Mark Johnston (Mon 28 Sep 2026 14:26:35 BST) Committer: Mark Johnston (Tue 29 Sep 2026 16:56:32 BST) sysvsem: Fix another sequence number wraparound race semop() may sleep waiting for a semaphore. Upon waking up, it checks to see if the set's sequence number has changed, indicating that the set was removed. The sequence number is not wide enough to prevent a false negative due to wraparound, in which case the subsequent access of `semakptr->u.__sem_base[sopptr->sem_num]` may be out of bounds. This race can be leveraged to elevate privileges. Fix this by introducing a 64-bit sequence number for each semaphore pool. This is wide enough to make the race impossible to hit. Allocate a separate array for them, as we cannot really change the layout of struct semid_kernel since some userspace tools (e.g., ipcrm(1)) embed the layout. While here, use semvalid() instead of open-coding its implementation, convert a couple of flags to be bool, and use a better variable name to store required permissions. Approved by: so Security: FreeBSD-SA-26:64.sysvsem Security: CVE-2026-58098 Reported by: Reo Shiseki Reported by: Andrew Griffiths Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59347 M sys/kern/sysv_sem.c _____________________________________________________________________________________________________________ Commit: c901f931f6eb102cc0347fddb71bdb409374bdf9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c901f931f6eb102cc0347fddb71bdb409374bdf9 Author: Roman Bogorodskiy (Sun 20 Sep 2026 15:41:55 BST) Committer: Roman Bogorodskiy (Mon 28 Sep 2026 19:39:05 BST) bhyve: fix boot device ordering EDK2's QemuBootOrderLib inspects the bootorder file provided via fw_cfg and requires it to be NUL-terminated. Otherwise, it rejects the supplied bootorder and falls back to its default boot order. Currently, bhyve registers bootorder with qemu_fwcfg_add_file() using bootorder_len returned by open_memstream(), which excludes the trailing NUL byte. Fix that by passing bootorder_len + 1 to qemu_fwcfg_add_file() so the fw_cfg payload is properly NUL-terminated. PR: 279720 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279720 ) Reviewed by: markj Found with: codex (gpt-5.6-sol) MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59859 (cherry picked from commit b27a221ef79d6d77d6173897f12118e1126453d8) M usr.sbin/bhyve/pci_emul.c _____________________________________________________________________________________________________________ Commit: 809221661a8136a19661e4e379a44203e0ea2a03 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=809221661a8136a19661e4e379a44203e0ea2a03 Author: Mark Johnston (Mon 21 Sep 2026 15:05:01 BST) Committer: Mark Johnston (Mon 28 Sep 2026 15:06:34 BST) udp: Let jail policy rewrite the dstaddr for v6 sendto()s When performing an unconnected sendto() on a v6 UDP socket in a classic jail, we were not applying the usual policy of replacing the loopback addr with the jail's primary IP. Compare with, e.g., udp6_connect() or the IPv4 udp_send(). Fix that. Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai Reviewed by: bz, glebius MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59772 (cherry picked from commit fecb9537a83b6746bc731a7cb3bcf6a33df79562) M sys/netinet6/udp6_usrreq.c _____________________________________________________________________________________________________________ Commit: fc1a02c93ba4c9a98e329a4166618bbaf17d584b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fc1a02c93ba4c9a98e329a4166618bbaf17d584b Author: Mark Johnston (Wed 23 Sep 2026 17:53:17 BST) Committer: Mark Johnston (Mon 28 Sep 2026 14:57:00 BST) ktls: Fix an off-by-one bug in tls13_find_record_type() If the entire plaintext is zero-filled, the backwards walk in tls13_find_record_type() would return the offset of the last byte of the TLS header. This causes an underflow when decrypting, resulting in a null pointer dereference. Fix the bug and add a regression test. Reviewed by: gallatin, jhb MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59767 (cherry picked from commit 7c5e457d3afdc7742ee24f0b5ee6e5e7aa00a6bd) M sys/kern/uipc_ktls.c M tests/sys/kern/ktls_test.c _____________________________________________________________________________________________________________ Commit: f80f8c38fada66163324e509d9eb6b2c844d7c58 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f80f8c38fada66163324e509d9eb6b2c844d7c58 Author: Andrew Gallatin (Wed 1 Jul 2026 01:53:15 BST) Committer: Mark Johnston (Mon 28 Sep 2026 14:57:00 BST) ktls: Add a tunable to disable TLS receive TLS receive offload is really only beneficial for in-kernel use cases (such as NFS over TLS) or when using a hardware offload. In addition, several recent SAs have involved the TLS receive path, but the only current mitigation for those is to disable TLS offload entirely. Reviewed by: ziaee, gallatin, markj Relnotes: yes Sponsored by: Netflix Sponsored by: Chelsio Communications Co-authored-by: John Baldwin Differential Revision: https://reviews.freebsd.org/D57974 (cherry picked from commit 08cda4bcd43cfcb2c0b1abd29bc7cd30896727bc) M share/man/man4/ktls.4 M sys/kern/uipc_ktls.c M tests/sys/kern/ktls_test.c _____________________________________________________________________________________________________________ Commit: 718746766c18130f06602f1625d05ac514bb84a2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=718746766c18130f06602f1625d05ac514bb84a2 Author: Andrew Griffiths (Mon 14 Sep 2026 08:55:01 BST) Committer: Mark Johnston (Mon 28 Sep 2026 14:38:23 BST) proc: free kstack buffers when debug permission changes The kern.proc.kstack handler allocates its output and stack buffers before deliberately checking p_candebug again under the process lock. If trace-control state changes between authorization checks, the failure path balances the process and exec state but leaks both buffers. Submitted by calif.io for the OpenAI Patch The Planet program Signed-off-by: Andrew Griffiths Fixes: 8b5abd9027b8 ("kern_proc.c: disallow execve around sysctl kern.proc.kstacks") Reviewed by: markj MFC after: 1 week (cherry picked from commit 3484217cc47c1f77d2be2ed0e012b870d1cd3dca) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: dd38230b589bf001f8bfa20c8a2816069eef001c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dd38230b589bf001f8bfa20c8a2816069eef001c Author: Please (Thu 17 Sep 2026 10:08:43 BST) Committer: Vladimir Kondratyev (Sun 27 Sep 2026 13:19:38 BST) ig4(4): fix attach of ACPI-enumerated LPSS controllers Intel LPSS I2C controllers enumerated through ACPI rather than PCI never attach on Haswell and Broadwell, so every device behind those buses is lost. On a Dell XPS 13 9343 that hides the I2C HID touchpad and leaves only the PS/2 fallback, which the firmware does not restore after S3. Three causes, all on the ACPI path: Firmware may leave an LPSS function in D3, where its registers read as all-ones and set_controller() fails with "controller error during attach-1". Run _PS0 before mapping them. The PCI path does not need this, which is why the gap went unnoticed. INT33C2, INT33C3, INT3432 and INT3433 are Lynx Point-LP and Wildcat Point-LP, which ig4_pci.c already classifies as IG4_HASWELL; the ACPI path called everything but APMC0D0F an Atom SoC. The functional clock stays gated until bit 0 of IG4_REG_CLK_PARMS is set. Until then the controller accepts writes into the TX FIFO, never drives the bus, raises no interrupts, and every transfer ends in IIC_ETIMEOUT. Linux ungates the same bit in acpi_lpss.c. Doing it in ig4iic_set_config() covers resume as well as attach. With all three in place the touchpad attaches as iichid0/hmt1 with multi-touch and survives suspend and resume. PR: 298558 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298558 ) Tested by: Please (XPS 13 9343, Broadwell-U, 15.1-RELEASE-p3) Reviewed by: wulf MFC after: 1 week (cherry picked from commit e75f61962ca47f0b0ae4aed89c8416e6544d9845) M sys/dev/ichiic/ig4_acpi.c M sys/dev/ichiic/ig4_iic.c M sys/dev/ichiic/ig4_reg.h _____________________________________________________________________________________________________________ Commit: 886a35528da941d2a811db533d21b16511d11625 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=886a35528da941d2a811db533d21b16511d11625 Author: Andrew Gallatin (Thu 16 Nov 2023 00:51:28 GMT) Committer: Vladimir Kondratyev (Sun 27 Sep 2026 13:19:38 BST) ig4(4): Add an EMAG device type Sponsored by: Ampere Computing LLC, Netflix Submitted by: allanjude Differential Revision: https://reviews.freebsd.org/D28746 Reviewed by: imp (cherry picked from commit 5972ffde919ab65ba29d4d51ccf735da18d52719) M sys/dev/ichiic/ig4_acpi.c M sys/dev/ichiic/ig4_iic.c M sys/dev/ichiic/ig4_var.h _____________________________________________________________________________________________________________ Commit: 27c6904a1de7b99e3aaa87f381cca19f1643616c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=27c6904a1de7b99e3aaa87f381cca19f1643616c Author: Xin LI (Sat 19 Sep 2026 19:48:28 BST) Committer: Xin LI (Sat 26 Sep 2026 02:57:10 BST) Add release notes entry for less v710. (cherry picked from commit 7f7e9584cb9dbff7f74faf5589c9154d2c6eef3f) M RELNOTES _____________________________________________________________________________________________________________ Commit: c7bcccbb669ee9900bf13c6ecbf42daa9d5d1f82 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c7bcccbb669ee9900bf13c6ecbf42daa9d5d1f82 Author: Xin LI (Sat 19 Sep 2026 19:20:29 BST) Committer: Xin LI (Sat 26 Sep 2026 02:48:17 BST) MFC: MFV: less v710. (cherry picked from commit 4523eebc6c1828d4fd41d7f1ab943cf079043bc8) M ObsoleteFiles.inc M UPDATING M contrib/less/NEWS M contrib/less/brac.c M contrib/less/ch.c M contrib/less/charset.c M contrib/less/cmd.h M contrib/less/cmdbuf.c M contrib/less/command.c M contrib/less/decode.c M contrib/less/edit.c M contrib/less/filename.c M contrib/less/forwback.c M contrib/less/funcs.h M contrib/less/help.c M contrib/less/ifile.c M contrib/less/input.c M contrib/less/jump.c M contrib/less/less.h M contrib/less/less.hlp M contrib/less/less.nro M contrib/less/lessecho.nro D contrib/less/lesskey.c M contrib/less/lesskey.h M contrib/less/lesskey.nro M contrib/less/lesskey_parse.c A contrib/less/lessmsg A contrib/less/lessmsg.inc A contrib/less/lessmsg_int M contrib/less/line.c M contrib/less/linenum.c A contrib/less/lmsg.c A contrib/less/lmsg.h M contrib/less/lsystem.c M contrib/less/main.c M contrib/less/mark.c M contrib/less/optfunc.c M contrib/less/option.c M contrib/less/option.h M contrib/less/opttbl.c M contrib/less/os.c M contrib/less/output.c M contrib/less/pattern.c M contrib/less/pattern.h M contrib/less/pckeys.h M contrib/less/prompt.c M contrib/less/screen.c M contrib/less/search.c M contrib/less/signal.c M contrib/less/tags.c M contrib/less/ttyin.c M contrib/less/version.c M targets/pseudo/userland/Makefile.depend M usr.bin/Makefile M usr.bin/less/Makefile M usr.bin/less/Makefile.common D usr.bin/lesskey/Makefile D usr.bin/lesskey/Makefile.depend _____________________________________________________________________________________________________________ Commit: 6136e3d40354c11ea0356feac2bb88ec7d6d6c04 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6136e3d40354c11ea0356feac2bb88ec7d6d6c04 Author: Philip Paeps (Wed 23 Sep 2026 05:27:57 BST) Committer: Philip Paeps (Sat 26 Sep 2026 01:40:59 BST) contrib/expat: import expat 2.8.5 Changes: https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes Security: CVE-2026-93990 (cherry picked from commit c7b67985633c408cae69703ca443cbfd84d326a8) M contrib/expat/Changes M contrib/expat/Makefile.am M contrib/expat/Makefile.in M contrib/expat/README.md M contrib/expat/configure.ac M contrib/expat/doc/Makefile.in M contrib/expat/doc/reference.html M contrib/expat/doc/xmlwf.1 M contrib/expat/doc/xmlwf.xml M contrib/expat/examples/Makefile.in M contrib/expat/fuzz/xml_lpm_fuzzer.cpp M contrib/expat/fuzz/xml_parse_fuzzer.c M contrib/expat/fuzz/xml_parsebuffer_fuzzer.c M contrib/expat/lib/Makefile.am M contrib/expat/lib/Makefile.in M contrib/expat/lib/expat.h M contrib/expat/lib/expat_external.h A contrib/expat/lib/hash_table.h M contrib/expat/lib/internal.h M contrib/expat/lib/xmlparse.c M contrib/expat/lib/xmlrole.c M contrib/expat/lib/xmlrole.h M contrib/expat/lib/xmltok.c M contrib/expat/lib/xmltok.h M contrib/expat/lib/xmltok_impl.c M contrib/expat/lib/xmltok_ns.c M contrib/expat/tests/Makefile.am M contrib/expat/tests/Makefile.in M contrib/expat/tests/acc_tests.h M contrib/expat/tests/alloc_tests.h M contrib/expat/tests/basic_tests.c M contrib/expat/tests/basic_tests.h M contrib/expat/tests/benchmark/Makefile.in M contrib/expat/tests/chardata.h M contrib/expat/tests/common.h M contrib/expat/tests/dummy.h M contrib/expat/tests/handlers.h A contrib/expat/tests/hash_tests.c A contrib/expat/tests/hash_tests.h M contrib/expat/tests/memcheck.c M contrib/expat/tests/memcheck.h M contrib/expat/tests/minicheck.h M contrib/expat/tests/misc_tests.c M contrib/expat/tests/misc_tests.h M contrib/expat/tests/ns_tests.h M contrib/expat/tests/nsalloc_tests.c M contrib/expat/tests/nsalloc_tests.h M contrib/expat/tests/runtests.c M contrib/expat/tests/structdata.h M contrib/expat/tests/xmltest.sh M contrib/expat/xmlwf/Makefile.in M contrib/expat/xmlwf/unixfilemap.c M contrib/expat/xmlwf/xmlfile.c M contrib/expat/xmlwf/xmlfile.h M contrib/expat/xmlwf/xmlmime.h M contrib/expat/xmlwf/xmlwf.c M contrib/expat/xmlwf/xmlwf_helpgen.py M contrib/expat/xmlwf/xmlwf_helpgen.sh M lib/libexpat/expat_config.h M lib/libexpat/libbsdxml.3 _____________________________________________________________________________________________________________ Commit: 736d7302e44598cb10557026b0a72e319a63194b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=736d7302e44598cb10557026b0a72e319a63194b Author: Joerg Wunsch (Sun 26 Jul 2026 21:54:01 BST) Committer: Joerg Wunsch (Fri 25 Sep 2026 09:09:58 BST) cam/cd: avoid integer divide fault in cdstart() If something goes very badly (e.g. forcibly removing a medium while the OS tries to start it), this could end up in params.blksize being 0 (and params.disksize 1). Avoid an integer divide fault, panicking the kernel, by bailing out before. MFC after: 3 days (cherry picked from commit 34ae0f7834d1bd6bb765d1c12e57e01e32b3e060) M sys/cam/scsi/scsi_cd.c _____________________________________________________________________________________________________________ Commit: 23000446fd5ef743b8d28e2754cdf84cbbc26a5f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=23000446fd5ef743b8d28e2754cdf84cbbc26a5f Author: Siva Mahadevan (Mon 21 Sep 2026 19:15:52 BST) Committer: Siva Mahadevan (Thu 24 Sep 2026 14:39:20 BST) gh-bc/tests: run tests in parallel Helps to mitigate failures due to timeout in CI on emulated architectures: https://ci.freebsd.org/job/FreeBSD-main-riscv64-test/16565/testReport/usr.bin.gh-bc/ MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59547 (cherry picked from commit 1b9aea382e31f1c72bdfefbe01db51dc7bd60952) M usr.bin/gh-bc/tests/bc_tests.sh M usr.bin/gh-bc/tests/dc_tests.sh _____________________________________________________________________________________________________________ Commit: 5a19be15c90c2a5f0a1d8c469cda6d3d4283f016 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5a19be15c90c2a5f0a1d8c469cda6d3d4283f016 Author: Kang Kang (Thu 3 Sep 2026 21:18:51 BST) Committer: Ahmad Khalifa (Thu 24 Sep 2026 03:29:31 BST) ig4: Add Lunar Lake-M I2C controllers 4 and 5 Commit 851dffef532a added the Lunar Lake-M I2C controllers 0 through 3 (0xa878-0xa87b), which sit on PCI device 0x15. The platform exposes two further controllers at 0xa850 and 0xa851 on PCI device 0x19, reported by Intel as I2C #4 and #5. This mirrors the layout already handled for Arrow Lake-U, where both the 0x777x and 0x775x ranges are listed. On an HP OmniBook X Flip 16-as0xxx (Core Ultra 9 288V) the firmware enables only four of the six controllers, and both HID devices sit on the two that were missing: an ELAN2514 touchscreen on controller 4 and a SYNA3503 touchpad on controller 5. Neither attaches without this change, so the machine has no working pointing device. Like the other four, these use the Tiger Lake revision of the I2C IP; Linux treats 0xa850/0xa851 identically to 0xa878-0xa87b in intel-lpss-pci.c. Tested on: HP OmniBook X Flip 16-as0xxx (Intel Core Ultra 9 288V) Reviewed by: vexeduxr MFC after: 2 weeks Signed-off-by: Kang Kang Pull Request: https://github.com/freebsd/freebsd-src/pull/2406 (cherry picked from commit 6b92093fdf65a80cba01af74710bdfe7ac7ef252) M sys/dev/ichiic/ig4_pci.c _____________________________________________________________________________________________________________ Commit: 1fdced9119897f60fe0c942bd4109b8add50497d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1fdced9119897f60fe0c942bd4109b8add50497d Author: Defenso-EBO (Thu 29 Jan 2026 09:47:13 GMT) Committer: Ahmad Khalifa (Thu 24 Sep 2026 03:29:31 BST) ig4: Add support for Lunar Lake-M I2C this patch adds PCI IDs to the ig4(4) driver: - Lunar Lake-M (0xa878, 0xa879, 0xa87a, 0xa87b) These controllers use the Tiger Lake hardware revision of the I2C IP. Adding these IDs enables support for peripherals connected to the I2C Bus. Tested on: Intel Lunar Lake (LENOVO_MT_21QX_BU_Think_FM_ThinkPad T14s Gen 6) Signed-off-by: Defenso-EBO MFC after: 2 weeks Sponsored by: Defenso Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/1995 (cherry picked from commit 851dffef532ad9611fcaf02318744c8de9f397b0) M sys/dev/ichiic/ig4_pci.c _____________________________________________________________________________________________________________ Commit: 508b182d1db7ef73c37b2ac52c8d361916ee7afd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=508b182d1db7ef73c37b2ac52c8d361916ee7afd Author: Takanori Watanabe (Sat 28 Jun 2025 03:38:39 BST) Committer: Ahmad Khalifa (Thu 24 Sep 2026 03:29:31 BST) ichiic: Add PCI id for Arrow Lake. Add PCI id for Arrow Lake to attach iic driver Reviewed by: wulf, mav Differential Revision: https://reviews.freebsd.org/D51107 (cherry picked from commit 87994467966806ffbd1f500b510858909c736b88) M sys/dev/ichiic/ig4_pci.c _____________________________________________________________________________________________________________ Commit: 26e90d2d2892fc9dd07fc7e9c5c342a77c337934 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=26e90d2d2892fc9dd07fc7e9c5c342a77c337934 Author: Dimitry Andric (Fri 18 Sep 2026 08:07:46 BST) Committer: Dimitry Andric (Wed 23 Sep 2026 11:18:09 BST) Fix statement with no effect in linuxkpi's xarray.h When compiling the kernel with gcc 14, errors similar to the following are emitted: sys/dev/cxgbe/iw_cxgbe/ev.c: In function 'c4iw_ev_handler': sys/compat/linuxkpi/common/include/linux/xarray.h:132:23: error: statement with no effect [-Werror=unused-value] 132 | flags == 0; \ sys/dev/cxgbe/iw_cxgbe/ev.c:274:17: note: in expansion of macro 'xa_unlock_irqrestore' 274 | xa_unlock_irqrestore(&dev->cqs, flag); | ^~~~~~~~~~~~~~~~~~~~ sys/compat/linuxkpi/common/include/linux/xarray.h:132:23: error: statement with no effect [-Werror=unused-value] 132 | flags == 0; \ sys/dev/cxgbe/iw_cxgbe/ev.c:283:17: note: in expansion of macro 'xa_unlock_irqrestore' 283 | xa_unlock_irqrestore(&dev->cqs, flag); | ^~~~~~~~~~~~~~~~~~~~ It looks like the intent of the "flags == 0" statement was to make the 'flags' macro argument not unused, but it still results in a warning. Use the construct "(void)flags" instead. Reviewed by: bz MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D59787 (cherry picked from commit aca53fc2a6879f45dcbe1a60f91f14a5f6d48448) M sys/compat/linuxkpi/common/include/linux/xarray.h _____________________________________________________________________________________________________________ Commit: 82007ce5bd23ea38fcf6cc2bbd10d8fc560eeb72 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=82007ce5bd23ea38fcf6cc2bbd10d8fc560eeb72 Author: Yudi Yang (Thu 10 Sep 2026 22:53:48 BST) Committer: Mark Johnston (Tue 22 Sep 2026 14:01:16 BST) ntb_tool: Bound memory window option strings parse_mw_buf() copies option names from privileged sysctl input into eight-byte stack buffers. Unbounded %s conversions permit option tokens longer than seven bytes to write past those buffers before the parser validates them. Limit each conversion to seven characters, leaving space for the terminating NUL. Signed-off-by: Yudi Yang Fixes: 96f556f5044a ("NTB Tool: Test driver for NTB hardware drivers.") Reviewed by: markj MFC after: 1 week (cherry picked from commit 602d1b994a22949fff7e4a87cb6e54d6fbad13b6) M sys/dev/ntb/test/ntb_tool.c _____________________________________________________________________________________________________________ Commit: 9d9063e123daa9dab485f01d9087b5c7b984f6e1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9d9063e123daa9dab485f01d9087b5c7b984f6e1 Author: ShengYi Hung (Fri 11 Sep 2026 09:22:39 BST) Committer: Mark Johnston (Tue 22 Sep 2026 14:01:16 BST) amd64/pmap: Return la57 in amd nested page AMD doesn't encode page depth in eptp. As a result, the page level is decided by the host la57 value. Without this, it uses 4 level page and therefore cause machine enable la57 have garbage page translation. PR: 291768 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291768 ) Reviewed by: kib Tested by: Antranig Vartanian MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D57978 (cherry picked from commit ef26f64c11220ea303de16d088c585f9d2908b0f) M sys/amd64/amd64/pmap.c _____________________________________________________________________________________________________________ Commit: 65a5b32c225a2d6845d6f90470f9b01ba52c432a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=65a5b32c225a2d6845d6f90470f9b01ba52c432a Author: Mark Johnston (Fri 4 Sep 2026 13:46:29 BST) Committer: Mark Johnston (Tue 22 Sep 2026 14:01:16 BST) buf: Avoid calling bufdomain() on newly initialized bufs bufinit() inserts newly initialized bufs into the QUEUE_EMPTY queue, at which point they haven't yet been assigned a domain. Thus, bufdomain() returns &bdomain[-1], which trips the array-bounds sanitizer. This is harmless since we don't use the result in that case, but let's avoid the invalid access to begin with. This is sufficient to let an amd64 kernel boot to a login prompt with -fsanitize=array-bounds configured. Reported by: Andrew Griffiths Reviewed by: rlibby, kib MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59381 (cherry picked from commit e1d903bbfaf91060c43209b35b78a9992fbffe5e) M sys/kern/vfs_bio.c _____________________________________________________________________________________________________________ Commit: 9b4b68e82739e7f5e0ea337abffd0cadcb9abc8b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9b4b68e82739e7f5e0ea337abffd0cadcb9abc8b Author: Andrey V. Elsukov (Tue 22 Sep 2026 08:21:52 BST) Committer: Andrey V. Elsukov (Tue 22 Sep 2026 08:21:52 BST) ipfw: fix gcc warning We use first loop only for possible needed realloc, so it is not required to restrict end condition. Also check realloc() return value before accessing. This is direct commit to stable/14. Reported by: dim Differential Revision: https://reviews.freebsd.org/D56616 M sbin/ipfw/ipfw2.c _____________________________________________________________________________________________________________ Commit: f3cdf3d5dda325c30786d444dbd85b7436dec033 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f3cdf3d5dda325c30786d444dbd85b7436dec033 Author: Enji Cooper (Wed 19 Aug 2026 09:38:46 BST) Committer: Enji Cooper (Tue 22 Sep 2026 07:48:36 BST) Assign and test `malloc` result separately The previous pattern is cited as an issue with ATF 0.22+ when using clang/gcc after [1]. MFC after: 2 weeks Reported by: clang (-Wparenthesis) Differential Revision: https://reviews.freebsd.org/D59274 [1]: https://github.com/freebsd/atf/pull/72 (cherry picked from commit 2561c468c11309fbc0a097d3f4fcf0bd3bf28b8f) M lib/libc/tests/stdlib/qsort_bench.c _____________________________________________________________________________________________________________ Commit: f9c5a7375be57cee32507aa32a895ee3f2f65404 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f9c5a7375be57cee32507aa32a895ee3f2f65404 Author: Enji Cooper (Wed 2 Sep 2026 08:38:11 BST) Committer: Enji Cooper (Tue 22 Sep 2026 07:48:01 BST) tests/sys/kern/ktls_test: fix -Wsign-compare issue Cast the size_t quantity used in a comparison to off_t to mute a `-Wsign-compare` complaint that now occurs after ATF 0.22 [1]. MFC after: 2 weeks Reported by: clang Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D59285 [1]: https://github.com/freebsd/atf/pull/72 (cherry picked from commit 505103215ee2e3e31d233b952633e5697ac5da5f) M tests/sys/kern/ktls_test.c _____________________________________________________________________________________________________________ Commit: a8b30af1c1d886ee4f25b6684190515efca9cf6a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a8b30af1c1d886ee4f25b6684190515efca9cf6a Author: Enji Cooper (Tue 1 Sep 2026 20:02:06 BST) Committer: Enji Cooper (Tue 22 Sep 2026 07:47:53 BST) lib/libarchive/tests/Makefile: minor fixes - Remove trailing whitespace - Fix typo with variable referenced adding sources for `test_fuzz`. MFC after: 2 weeks (cherry picked from commit edbb2e9d7a9aba7194dd0f37cede7aea51408f74) M lib/libarchive/tests/Makefile _____________________________________________________________________________________________________________ Commit: 56b9c373dc76925a8632cf3a7f7a25fcd5afebd5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=56b9c373dc76925a8632cf3a7f7a25fcd5afebd5 Author: Enji Cooper (Wed 19 Aug 2026 16:46:50 BST) Committer: Enji Cooper (Tue 22 Sep 2026 07:47:42 BST) tests/sys/sys/bitstring_test: fix build with ATF 0.22+ Do not assign `b` in the `ATF_REQUIRE` macro. Set and test `b` separately to avoid the issue cited by clang++/g++ after implementing the change referenced in [1]. MFC after: 2 weeks Reported by: clang (-Wparenthesis) Reference: https://github.com/freebsd/atf/pull/72 (cherry picked from commit 4ae95fe823c0ec8b0b93ed27192bfc91058d9a6b) M tests/sys/sys/bitstring_test.c _____________________________________________________________________________________________________________ Commit: 343618cfe7aff6ca259ec7b16bf13210ca85592a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=343618cfe7aff6ca259ec7b16bf13210ca85592a Author: Enji Cooper (Fri 4 Sep 2026 19:16:49 BST) Committer: Enji Cooper (Tue 22 Sep 2026 07:47:00 BST) tty_pts: reduce/correct libatf-c linkage ATF_TESTS_C automatically adds the appropriate library to LDADD -- there's no need to manually append the same library. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59411 (cherry picked from commit 5b10c3c3e3d5125e09e35cd607d15a546d5ad581) M tests/sys/kern/Makefile _____________________________________________________________________________________________________________ Commit: fa4f76eecbf21b440a0afaf3360065c619b95258 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fa4f76eecbf21b440a0afaf3360065c619b95258 Author: Ahmad Khalifa (Tue 9 Sep 2025 18:19:24 BST) Committer: Kyle Evans (Mon 21 Sep 2026 14:21:13 BST) stand: remove unused variables (cherry picked from commit 7d48a56205224cfa969c32b47496dc8ac6a6a637) M stand/common/gfx_fb.c M stand/efi/loader/arch/amd64/multiboot2.c M stand/efi/loader/arch/amd64/trap.c M stand/efi/loader/bootinfo.c M stand/efi/loader/copy.c M stand/efi/loader/main.c _____________________________________________________________________________________________________________ Commit: 2cfb88e5d559aeee9b1d2aa005d5f9998adfe790 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2cfb88e5d559aeee9b1d2aa005d5f9998adfe790 Author: Konstantin Belousov (Sun 13 Sep 2026 11:10:37 BST) Committer: Konstantin Belousov (Mon 21 Sep 2026 10:02:11 BST) rtld: more caution when parsing in digest_notes() (cherry picked from commit fa848d4d0c0371cdbf39265b6528f4c61bc02c7d) M libexec/rtld-elf/rtld.c _____________________________________________________________________________________________________________ Commit: deb4c7369349646b9439ecacb3929e295060909c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=deb4c7369349646b9439ecacb3929e295060909c Author: Piotr Kubaj (Mon 14 Sep 2026 14:13:51 BST) Committer: Piotr Kubaj (Mon 21 Sep 2026 08:52:32 BST) powerpc/radix: acquire the pmap lock in mmu_radix_extract() mmu_radix_extract() walks the page tables without holding the pmap lock, unlike its hash MMU counterpart moea64_extract(). A concurrent unmap can free and recycle the page table page being walked, so the read returns whatever now occupies that memory and the caller gets a physical address that never existed. That is how mmu_radix_sync_icache() came to hand a bogus address to __syncicache() and panic the machine. Commit 1574ca1955f5 worked around it by taking the pmap lock in mmu_radix_sync_icache(), but the machine independent callers of pmap_extract() - vm_sync_icache(), proc_rwmem() and the vslock() paths - remain exposed to the same failure. Rename the existing body to mmu_radix_extract_locked(), which asserts the lock, and make mmu_radix_extract() a thin wrapper that acquires it. mmu_radix_sync_icache() already holds the pmap lock, so it calls the locked variant directly and neither recurses nor reacquires the lock once per page. Suggested by: alc MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59320 Reviewed by: markj, jhibbits (cherry picked from commit 42c69445ca336b13e27e3e5960ace344c64ae0eb) M sys/powerpc/aim/mmu_radix.c _____________________________________________________________________________________________________________ Commit: ab2e484d052652b77e979d63d051b7685476c07d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ab2e484d052652b77e979d63d051b7685476c07d Author: Piotr Kubaj (Tue 1 Sep 2026 07:52:06 BST) Committer: Piotr Kubaj (Mon 21 Sep 2026 08:52:26 BST) powerpc/radix: take the pmap lock in mmu_radix_sync_icache() mmu_radix_sync_icache() walked the page tables with an unlocked pmap_extract() and passed the result straight to PHYS_TO_DMAP(), checking only that it was non-zero. Nothing keeps the mapping - or the page table page holding it - alive across that window: if another thread of the same process tears a mapping down concurrently, the page table page can be freed and reused, so pmap_extract() reads arbitrary memory and returns a bogus physical address. __syncicache() then dereferences an unmapped direct map address and the kernel takes a data storage interrupt: fatal kernel trap: exception = 0x300 (data storage interrupt) virtual address = 0xc003317ca6022a00 dsisr = 0x40000000 srr0 = 0xc000000000f59460 (__syncicache) lr = 0xc000000000f23588 (mmu_radix_sync_icache) pid = 23878, comm = skyframe-evaluator- panic: data storage interrupt trap The faulting addresses decode to physical addresses far beyond installed memory (~140 TB and ~900 TB on a 256 GB machine), i.e. translations that never existed. The hash MMU implementation of the same method, moea64_sync_icache(), already holds PMAP_LOCK() across the loop; do the same here. mmu_radix_extract() does not acquire the pmap lock itself, so this introduces no recursion. JIT workloads reach this path constantly: ppc_instr_emulate() calls pmap_sync_icache() on the faulting address for the SIGILL "second chance" retry, so a multithreaded JVM executing freshly written code races against its own threads' mmap/munmap. Every panic observed here was in a JVM thread. Tested on POWER9 (radix MMU) with a bazel/JVM build loop that previously panicked the machine twice within ten minutes: afterwards 13 consecutive builds and more than 10 hours of uptime with no panic, on both 15.1-RELEASE and 16.0-CURRENT. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59311 Reviewed by: jhibbits, adrian (cherry picked from commit 1574ca1955f55151c4c76b978c8a772ac3abfa9f) M sys/powerpc/aim/mmu_radix.c _____________________________________________________________________________________________________________ Commit: cb1ee0c3214405331bb8085d3be910d4f560edbc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cb1ee0c3214405331bb8085d3be910d4f560edbc Author: Jason A. Harmening (Mon 7 Sep 2026 18:36:20 BST) Committer: Jason A. Harmening (Mon 21 Sep 2026 06:10:47 BST) vfs_lookup_cross_mount(): fix missing LK_CANRECURSE This was a rather dumb miss on my part in commit 42442d7a6e. LK_CANRECURSE is clearly needed in any case in which the covered vnode is held exclusive across the call to VFS_ROOT(), regardless of whether it was initially held exclusive or upgraded. The commit message for that change also noted that unionfs lookup only worked without LK_CANRECURSE due to a coincidence of the then-current unionfs implementation. As it happens, said coincidence was recently removed in commit b952606b4f ("unionfs_lock(): eliminate LK_CANRECURSE special- case"). PR: 298201 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298201 ) Reported by: olivier Fixes: 42442d7a6e "Generalize the VV_CROSSLOCK logic in vfs_lookup" Reviewed by: kib, markj, pho Tested by: pho Differential Revision: https://reviews.freebsd.org/D59494 (cherry picked from commit f57ce26f2572efb8adc825ad4efc0e0743a9112f) M sys/kern/vfs_lookup.c _____________________________________________________________________________________________________________ Commit: 2d20de9ffe4d59c523592b2558a998043b4b9ccb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2d20de9ffe4d59c523592b2558a998043b4b9ccb Author: Emanuel Helms (Mon 7 Sep 2026 20:50:58 BST) Committer: Rick Macklem (Mon 21 Sep 2026 02:48:27 BST) nfsuserd.c: Fix handling where pw_name/gr_name differ from lookup name When an NSS backend returns a canonical pw_name or gr_name that differs from the lookup name supplied by the NFSv4 upcall, nfsuserd stores the successful mapping in the kernel cache under the canonical name instead of the requested name. This causes the retry lookup performed by nfsv4_strtouid() or nfsv4_strtogid() to miss the newly inserted cache entry, resulting in the default UID/GID being returned although the NSS lookup itself succeeded. PR: 296753 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296753 ) (cherry picked from commit 1771ab245c2341033f0cee3bd098c76888cf3515) M usr.sbin/nfsuserd/nfsuserd.c _____________________________________________________________________________________________________________ Commit: 1e00200e49f5fb8afaa032fdaf1c848aeae8afdd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1e00200e49f5fb8afaa032fdaf1c848aeae8afdd Author: Dag-Erling Smørgrav (Wed 16 Sep 2026 15:22:09 BST) Committer: Dag-Erling Smørgrav (Sun 20 Sep 2026 17:51:17 BST) unbound: Update to 1.26.1 Release notes at https://community.nlnetlabs.nl/t/unbound-1-26-1-released Merge commit '120aa088f4807126af42a652a07c5090e7294fcf' Security: CVE-2026-77860 Security: CVE-2026-77955 Security: CVE-2026-78227 Security: CVE-2026-80225 Security: CVE-2026-81634 Security: CVE-2026-81642 Security: CVE-2026-82717 Security: CVE-2026-82720 Security: CVE-2026-85501 (cherry picked from commit 1fb9c5ffe25fcba0857c4fdf6ed19ca5bf6bc858) M contrib/unbound/config.guess M contrib/unbound/config.h.in M contrib/unbound/config.sub M contrib/unbound/configure M contrib/unbound/configure.ac M contrib/unbound/daemon/remote.c M contrib/unbound/daemon/worker.c M contrib/unbound/doc/README M contrib/unbound/doc/example.conf M contrib/unbound/doc/example.conf.in M contrib/unbound/doc/libunbound.3 M contrib/unbound/doc/libunbound.3.in M contrib/unbound/doc/unbound-anchor.8 M contrib/unbound/doc/unbound-anchor.8.in M contrib/unbound/doc/unbound-checkconf.8 M contrib/unbound/doc/unbound-checkconf.8.in M contrib/unbound/doc/unbound-control.8 M contrib/unbound/doc/unbound-control.8.in M contrib/unbound/doc/unbound-host.1 M contrib/unbound/doc/unbound-host.1.in M contrib/unbound/doc/unbound.8 M contrib/unbound/doc/unbound.8.in M contrib/unbound/doc/unbound.conf.5 M contrib/unbound/doc/unbound.conf.5.in M contrib/unbound/doc/unbound.conf.rst M contrib/unbound/iterator/iter_scrub.c M contrib/unbound/services/authzone.c M contrib/unbound/services/authzone.h M contrib/unbound/services/cache/dns.c M contrib/unbound/services/listen_dnsport.c M contrib/unbound/services/listen_dnsport.h M contrib/unbound/services/mesh.c M contrib/unbound/util/config_file.c M contrib/unbound/util/config_file.h M contrib/unbound/util/configlexer.c M contrib/unbound/util/configlexer.lex M contrib/unbound/util/configparser.c M contrib/unbound/util/configparser.h M contrib/unbound/util/configparser.y M contrib/unbound/util/data/dname.c M contrib/unbound/util/data/msgreply.c M contrib/unbound/util/data/msgreply.h M contrib/unbound/util/fptr_wlist.c M contrib/unbound/util/netevent.c M contrib/unbound/util/netevent.h M contrib/unbound/validator/autotrust.c M contrib/unbound/validator/autotrust.h M contrib/unbound/validator/val_nsec.c M contrib/unbound/validator/val_nsec.h M contrib/unbound/validator/val_nsec3.c M contrib/unbound/validator/val_nsec3.h M contrib/unbound/validator/val_sigcrypt.c M contrib/unbound/validator/val_sigcrypt.h M contrib/unbound/validator/val_utils.c M contrib/unbound/validator/val_utils.h M contrib/unbound/validator/validator.c M contrib/unbound/validator/validator.h M lib/libunbound/config.h _____________________________________________________________________________________________________________ Commit: 6b26fcc32f1577c6dd62c5851e06c11ff33c0073 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6b26fcc32f1577c6dd62c5851e06c11ff33c0073 Author: Dag-Erling Smørgrav (Sun 13 Sep 2026 14:29:59 BST) Committer: Dag-Erling Smørgrav (Sun 20 Sep 2026 17:51:17 BST) tzcode: Update to 2026d MFC after: 1 week (cherry picked from commit 212e3524943222650688bd1f49d5eb4c9326de7f) libc/stdtime: Catch up with tzcode 2026d Fixes: 212e35249432 ("tzcode: Update to 2026c") (cherry picked from commit 1689b875b4b80c152cf7d3652c72335a2149173e) M contrib/tzcode/CONTRIBUTING M contrib/tzcode/Makefile M contrib/tzcode/NEWS M contrib/tzcode/README M contrib/tzcode/localtime.c M contrib/tzcode/private.h M contrib/tzcode/strftime.c M contrib/tzcode/theory.html M contrib/tzcode/tz-art.html M contrib/tzcode/tz-how-to.html M contrib/tzcode/tz-link.html M contrib/tzcode/version M contrib/tzcode/zdump.c M contrib/tzcode/zic.8 M contrib/tzcode/zic.c M lib/libc/stdtime/strftime.c _____________________________________________________________________________________________________________ Commit: 9401bfb06108e49cc125a237469886da34bb4f38 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9401bfb06108e49cc125a237469886da34bb4f38 Author: Dag-Erling Smørgrav (Tue 8 Sep 2026 21:55:15 BST) Committer: Dag-Erling Smørgrav (Sun 20 Sep 2026 17:51:17 BST) hastd: Use fixed-length protocol names All communication between hastd nodes and internally between hastd and its worker children passes through the same pair of send / receive functions. The receive function uses recv(2) with the MSG_WAITALL flag, which in theory means we should never get a short read. However, when handing off a socket to a worker child, we also pass a variable-length string identifying the type of socket we're passing, and reading this string relies on a short read. This used to work because the arrival of the descriptor would interrupt the recv(2) call, but this bug was fixed when the AF_UNIX code was rewritten a while ago and hastd has been broken ever since. Fixing the length of the protocol name to four characters including the terminating null solves the short-read bug by never requiring a short read (nothing else in hastd requires one). Note that this issue appears to have been reported independently first by Alessandro Sagratini in PR 292322 and then by Martin Vidovic in D57511. I ended up going in a different direction than Martin's patch, but his analysis was invaluable, hence the double credit below. PR: 292322 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292322 ) Reported by: Martin Vidovic MFC after: 1 week Event: EuroBSDcon DevSummit 2026 Reviewed by: xtronom_gmail.com, kevans, glebius, gjb Differential Revision: https://reviews.freebsd.org/D59521 (cherry picked from commit b7e5c2e008f5b441611830ad3a0329de0882419e) M sbin/hastd/proto.c M sbin/hastd/proto_impl.h M sbin/hastd/proto_socketpair.c _____________________________________________________________________________________________________________ Commit: e4b16e786847c42f6079ac8f0dea9ca9161ace52 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e4b16e786847c42f6079ac8f0dea9ca9161ace52 Author: Dag-Erling Smørgrav (Sat 5 Sep 2026 16:44:05 BST) Committer: Dag-Erling Smørgrav (Sun 20 Sep 2026 17:51:17 BST) hastd: Ensure nvpair padding is initialized The proto-libnv implementation embedded in hastd pads names and values out to the nearest multiple of eight bytes, but leaves the padding uninitialized, leaking up to 14 bytes of recycled heap per pair in a message. While here, switch from bcopy() to memcpy(). MFC after: 3 days Reviewed by: kevans, emaste Differential Revision: https://reviews.freebsd.org/D59343 (cherry picked from commit 911bda7cffbf358c4e83ea05cfe980d429aff61c) M sbin/hastd/nv.c _____________________________________________________________________________________________________________ Commit: d9dd2f9efb6b397241a607212b96d573214c6fdb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d9dd2f9efb6b397241a607212b96d573214c6fdb Author: Dag-Erling Smørgrav (Sun 13 Sep 2026 13:27:50 BST) Committer: Dag-Erling Smørgrav (Sun 20 Sep 2026 17:51:17 BST) tests: Fix graid3 insert tests The script was passing the wrong device name to `graid3 insert` and didn't notice that the command was failing. MFC after: 1 week Event: EuroBSDcon 2026 DevSummit Reviewed by: delphij Differential Revision: https://reviews.freebsd.org/D59564 (cherry picked from commit 4cc85d1f00fa1938923fe8d6fc2934593d4303b4) M tests/sys/geom/class/raid3/6_test.sh M tests/sys/geom/class/raid3/7_test.sh M tests/sys/geom/class/raid3/8_test.sh M tests/sys/geom/class/raid3/9_test.sh _____________________________________________________________________________________________________________ Commit: 0b7215cfa262a1c21026e5dc791ec8235c83324a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0b7215cfa262a1c21026e5dc791ec8235c83324a Author: Dag-Erling Smørgrav (Sun 13 Sep 2026 13:27:18 BST) Committer: Dag-Erling Smørgrav (Sun 20 Sep 2026 17:51:16 BST) graid3: Restore lock acquisition The lock acquisition in g_raid3_ctl_insert() was improperly dropped a while ago, making it impossible to add or replace a device in an existing graid3. This went unnoticed because the tests are broken. MFC after: 1 week Fixes: fcf69f3dbce6 ("Consistently use gctl_get_provider instead of home-grown variants.") Event: EuroBSDcon 2026 DevSummit Reviewed by: delphij Differential Revision: https://reviews.freebsd.org/D59563 (cherry picked from commit 9094f86b57a7e4b356cae83f35c8d41c842b42a2) M sys/geom/raid3/g_raid3_ctl.c _____________________________________________________________________________________________________________ Commit: a0bb961dde2f8b56d7bd4a107d1fa7e0db48d855 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a0bb961dde2f8b56d7bd4a107d1fa7e0db48d855 Author: Dimitry Andric (Thu 17 Sep 2026 20:36:25 BST) Committer: Dimitry Andric (Sun 20 Sep 2026 08:03:13 BST) kern.mk: make clang 23 -Wunused-but-set-global non-fatal This warning triggers in a few places in contributed code, and would therefore be annoying to fix. Use -Wno-error= to at least show the warnings so there is some incentive to submit them upstream. MFC after: 3 days (cherry picked from commit bcd0d76d4882dd8d19a49c050411b5c58a0deb74) M sys/conf/kern.mk _____________________________________________________________________________________________________________ Commit: 6fa06708dee9ed8a3a9303d3bf2c46e7f2acb72a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6fa06708dee9ed8a3a9303d3bf2c46e7f2acb72a Author: Dimitry Andric (Thu 17 Sep 2026 20:35:22 BST) Committer: Dimitry Andric (Sun 20 Sep 2026 08:03:08 BST) bsd.sys.mk: make clang 23 -Wunused-but-set-global non-fatal This warning triggers in a few places in contributed code, and would therefore be annoying to fix. Use -Wno-error= to at least show the warnings so there is some incentive to submit them upstream. MFC after: 3 days (cherry picked from commit d577b4ed588c0f259d7298188233b17dc0435dd4) M share/mk/bsd.sys.mk _____________________________________________________________________________________________________________ Commit: 1aea303cc2e8f65acba3928b7fcc2196ca82d4c0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1aea303cc2e8f65acba3928b7fcc2196ca82d4c0 Author: Dimitry Andric (Thu 17 Sep 2026 20:32:45 BST) Committer: Dimitry Andric (Sun 20 Sep 2026 08:03:05 BST) Merge commit 1f332ae4f1b3 from llvm-project (by Alexander Kornienko): Fix -Wformat diagnostic after #190965 (#193704) Fixes libunwind compiler diagnostic when building with clang after 034d4dcad6396d1241e8262e69871b8d61da7e4f: ``` In file included from libunwind/src/libunwind.cpp:31: In file included from libunwind/src/UnwindCursor.hpp:52: libunwind/src/CompactUnwinder.hpp:339:46: error: format specifies type 'unsigned long long' but the argument has type 'uint64_t' (aka 'unsigned long') [-Werror,-Wformat] 338 | "function starting at 0x%llX", | ~~~~ | %lX 339 | compactEncoding, functionStart); | ^~~~~~~~~~~~~ libunwind/src/config.h:215:63: note: expanded from macro '_LIBUNWIND_DEBUG_LOG' 215 | #define _LIBUNWIND_DEBUG_LOG(msg, ...) _LIBUNWIND_LOG(msg, __VA_ARGS__) | ~~~ ^~~~~~~~~~~ libunwind/src/config.h:181:45: note: expanded from macro '_LIBUNWIND_LOG' 181 | fprintf(stderr, "libunwind: " msg "\n", __VA_ARGS__); \ | ~~~ ^~~~~~~~~~~ In file included from libunwind/src/libunwind.cpp:31: In file included from libunwind/src/UnwindCursor.hpp:52: libunwind/src/CompactUnwinder.hpp:458:39: error: format specifies type 'unsigned long long' but the argument has type 'uint64_t' (aka 'unsigned long') [-Werror,-Wformat] 457 | "function starting at 0x%llX", | ~~~~ | %lX 458 | encoding, functionStart); | ^~~~~~~~~~~~~ libunwind/src/config.h:215:63: note: expanded from macro '_LIBUNWIND_DEBUG_LOG' 215 | #define _LIBUNWIND_DEBUG_LOG(msg, ...) _LIBUNWIND_LOG(msg, __VA_ARGS__) | ~~~ ^~~~~~~~~~~ libunwind/src/config.h:181:45: note: expanded from macro '_LIBUNWIND_LOG' 181 | fprintf(stderr, "libunwind: " msg "\n", __VA_ARGS__); \ | ~~~ ^~~~~~~~~~~ ``` This avoids a -Werror failure with clang >= 23. MFC after: 3 days (cherry picked from commit 8a8c14464dd372495c9bf4b87c9b88d73f78d587) M contrib/llvm-project/libunwind/src/CompactUnwinder.hpp _____________________________________________________________________________________________________________ Commit: d7cf7209efab6d3a88620a035c7d74d60a17e114 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d7cf7209efab6d3a88620a035c7d74d60a17e114 Author: Piotr Kubaj (Thu 3 Sep 2026 15:08:45 BST) Committer: Piotr Kubaj (Fri 18 Sep 2026 14:36:09 BST) umtx: do not sleep on an unowned mutex after a spurious CAS failure On ll/sc architectures casueword32() may report a spurious store-conditional failure (reservation lost to an interrupt, preemption, or another CPU touching the same reservation granule), and this is indistinguishable from a genuine comparison mismatch: both return 1. That is intentional since D20772 and documented in casueword(9) ("The store can fail on load-linked/store-conditional architectures."), so callers must cope. do_lock_normal() does not fully cope. When the initial UMUTEX_UNOWNED -> id acquire CAS fails spuriously, the observed owner is still UMUTEX_UNOWNED, so neither the UMUTEX_CONTESTED branch nor the real-owner case applies, and execution falls through past the "rv == 1 but not contested, likely store failure" comment into the sleep path. There, the contested-bit CAS (expecting the observed owner, i.e. UMUTEX_UNOWNED) succeeds because the mutex really is unowned, stamping m_owner = UMUTEX_CONTESTED with no owner tid, and the thread sleeps on "umtxn" forever: nobody owns the mutex, so no unlock and no wakeup ever arrive. In _UMUTEX_TRY mode the same situation returns a false EBUSY for a free mutex. Treat an observed owner of UMUTEX_UNOWNED like UMUTEX_CONTESTED: try to acquire the mutex, setting the contested bit, instead of falling through to the sleep path. rv == 1 with the observed value equal to the expected value can only mean a spurious store failure, so the mutex is free. If the acquire CAS fails again, the outer loop restarts and re-evaluates ownership. The contested bit set with no waiters present only costs the matching unlock one trip through the kernel. This was hit in practice on powerpc64le (POWER9): the Swift runtime's Synchronization.Mutex issues _umtx_op(UMTX_OP_MUTEX_LOCK) directly with no userspace fast path, so an uncontended lock of an unowned mutex runs the kernel CAS exactly where a spurious failure deadlocks (single-threaded process parked on "umtxn" with m_owner == 0x80000000, observed as Foundation.Process.run() hanging). libthr mostly masks the bug because pthread_mutex_lock() enters the kernel only when there is a real owner that will eventually issue a wakeup. The mechanism was confirmed with an experimental powerpc kernel that instead retried the ll/sc sequence inside casueword32()/casueword(); that also eliminated the hang, but is not proposed here since the single-attempt semantics of casueword(9) are intentional. Reviewed by: kib MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D59338 (cherry picked from commit c5d9485e7d7faeba1019301ed83a781dac2d0cb0) M sys/kern/kern_umtx.c _____________________________________________________________________________________________________________ Commit: 930464eecabe65c42f42d1b688576b6bf9f0f4a5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=930464eecabe65c42f42d1b688576b6bf9f0f4a5 Author: Kevin Bowling (Thu 3 Sep 2026 11:55:36 BST) Committer: Kevin Bowling (Fri 18 Sep 2026 01:11:41 BST) ixl: Reset VSI statistics after initial sampling The initial statistics update runs before the PF VSI has obtained its firmware-assigned statistics counter index. Discard that provisional VSI baseline so the first update after initialization records the correct hardware counter. Without this reset, subtracting a larger provisional value from a newly selected counter can be mistaken for a 32-bit wrap and report nearly UINT32_MAX receive drops immediately after boot. Reported by: Daniel Braniss Tested by: Daniel Braniss Obtained from: Intel ixl 1.14.2 Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59336 (cherry picked from commit 429cb537015ea11808de23dac8c1cc7ade3a4552) M sys/dev/ixl/if_ixl.c _____________________________________________________________________________________________________________ Commit: 8d58fa9fed63355d8921db13b899511ebff406c3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8d58fa9fed63355d8921db13b899511ebff406c3 Author: Xin LI (Mon 14 Sep 2026 02:08:22 BST) Committer: Xin LI (Thu 17 Sep 2026 05:12:43 BST) MFV: xz 5.8.4. (cherry picked from commit 7ffc4ec4860d01414b493cdf43738878a9ede538) M contrib/xz/ChangeLog M contrib/xz/THANKS M contrib/xz/src/common/my_landlock.h M contrib/xz/src/liblzma/api/lzma/container.h M contrib/xz/src/liblzma/api/lzma/hardware.h M contrib/xz/src/liblzma/api/lzma/version.h M contrib/xz/src/liblzma/check/crc32_arm64.h M contrib/xz/src/liblzma/check/crc32_loongarch.h M contrib/xz/src/liblzma/common/alone_decoder.c M contrib/xz/src/liblzma/common/file_info.c M contrib/xz/src/liblzma/common/index.c M contrib/xz/src/liblzma/common/index.h M contrib/xz/src/liblzma/common/index_decoder.c M contrib/xz/src/liblzma/common/index_decoder.h M contrib/xz/src/liblzma/common/lzip_decoder.c M contrib/xz/src/liblzma/common/microlzma_decoder.c M contrib/xz/src/liblzma/common/stream_buffer_decoder.c M contrib/xz/src/liblzma/common/stream_decoder_mt.c M contrib/xz/src/liblzma/lz/lz_decoder.c M contrib/xz/src/liblzma/lzma/lzma2_decoder.c M contrib/xz/src/liblzma/simple/simple_coder.c M contrib/xz/src/xz/args.c M contrib/xz/src/xz/args.h M contrib/xz/src/xz/coder.c M contrib/xz/src/xz/list.c M contrib/xz/src/xz/main.c M contrib/xz/src/xz/message.c M contrib/xz/src/xz/util.c M contrib/xz/src/xz/xz.1 M lib/liblzma/config.h _____________________________________________________________________________________________________________ Commit: 84141e3e88c0bb52be5cff4c0647519f9a370d98 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=84141e3e88c0bb52be5cff4c0647519f9a370d98 Author: Alexander Ziaee (Tue 8 Sep 2026 12:36:26 BST) Committer: Alexander Ziaee (Wed 16 Sep 2026 13:10:26 BST) sort.1: Fix default memory buffer size PR: 261496 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=261496 ) Fixes: 554442439dd0 ("Change the memory heuristics") MFC after: 3 days Reported by: wosch (cherry picked from commit 4fb4be7e36428058c6abaa29f359b3d70ae60f0a) M usr.bin/sort/sort.1.in _____________________________________________________________________________________________________________ Commit: 9d0db3ca81ebbb354c4ead2b0e4e372eb92160ad URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9d0db3ca81ebbb354c4ead2b0e4e372eb92160ad Author: Alexander Ziaee (Sun 30 Aug 2026 02:08:12 BST) Committer: Alexander Ziaee (Wed 16 Sep 2026 13:10:26 BST) pthread_mutex_consistent.3: Fix typo + tag SPDX PR: 298044 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298044 ) MFC after: 3 days (cherry picked from commit ef3e7d4054db562b04669f36f87f385127fbd03e) M share/man/man3/pthread_mutex_consistent.3 _____________________________________________________________________________________________________________ Commit: 7fa0ed470f721ef98273ef228caca7ed517d984d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7fa0ed470f721ef98273ef228caca7ed517d984d Author: Philip Paeps (Sat 12 Sep 2026 01:29:28 BST) Committer: Philip Paeps (Tue 15 Sep 2026 01:51:42 BST) contrib/tzdata: import tzdata 2026d Changes: https://github.com/eggert/tz/blob/2026d/NEWS (cherry picked from commit fe81d42176f04718d7534242dfd4b9f250ac50fc) M contrib/tzdata/CONTRIBUTING M contrib/tzdata/Makefile M contrib/tzdata/NEWS M contrib/tzdata/README M contrib/tzdata/asia M contrib/tzdata/backward M contrib/tzdata/backzone M contrib/tzdata/northamerica M contrib/tzdata/southamerica M contrib/tzdata/theory.html M contrib/tzdata/version M contrib/tzdata/zone.tab M contrib/tzdata/zone1970.tab M contrib/tzdata/zonenow.tab _____________________________________________________________________________________________________________ Commit: 354069b6141a6b01d538765e66e948b842d4b432 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=354069b6141a6b01d538765e66e948b842d4b432 Author: Siva Mahadevan (Wed 2 Sep 2026 19:09:48 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:33:30 BST) dtrace/tests: compile D sources at runtime on test target Previously, we would precompile D test dependencies using the host's dtrace, which unconditionally outputs ELF files in the host's format. This breaks the cross-compile build with errors like the following: dtrace: failed to link script: incorrect ELF machine type for object file: tst.usdt.pieo --- usdt.o --- *** Failed target: usdt.o This patch moves compilation to runtime for all C-based testcases that have a dependent D source file. Reviewed by: markj MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59030 (cherry picked from commit 60d78908f57cf2100d5aeafa7db5d97cda3c5607) M cddl/usr.sbin/dtrace/tests/amd64/arrays/Makefile M cddl/usr.sbin/dtrace/tests/common/aggs/Makefile M cddl/usr.sbin/dtrace/tests/common/arithmetic/Makefile M cddl/usr.sbin/dtrace/tests/common/arrays/Makefile M cddl/usr.sbin/dtrace/tests/common/assocs/Makefile M cddl/usr.sbin/dtrace/tests/common/begin/Makefile M cddl/usr.sbin/dtrace/tests/common/bitfields/Makefile M cddl/usr.sbin/dtrace/tests/common/buffering/Makefile M cddl/usr.sbin/dtrace/tests/common/builtinvar/Makefile M cddl/usr.sbin/dtrace/tests/common/cg/Makefile M cddl/usr.sbin/dtrace/tests/common/clauses/Makefile M cddl/usr.sbin/dtrace/tests/common/cpc/Makefile M cddl/usr.sbin/dtrace/tests/common/decls/Makefile M cddl/usr.sbin/dtrace/tests/common/docsExamples/Makefile M cddl/usr.sbin/dtrace/tests/common/drops/Makefile M cddl/usr.sbin/dtrace/tests/common/dtraceUtil/Makefile M cddl/usr.sbin/dtrace/tests/common/end/Makefile M cddl/usr.sbin/dtrace/tests/common/enum/Makefile M cddl/usr.sbin/dtrace/tests/common/env/Makefile M cddl/usr.sbin/dtrace/tests/common/error/Makefile M cddl/usr.sbin/dtrace/tests/common/exit/Makefile M cddl/usr.sbin/dtrace/tests/common/fbtprovider/Makefile M cddl/usr.sbin/dtrace/tests/common/funcs/Makefile M cddl/usr.sbin/dtrace/tests/common/grammar/Makefile M cddl/usr.sbin/dtrace/tests/common/include/Makefile M cddl/usr.sbin/dtrace/tests/common/inline/Makefile M cddl/usr.sbin/dtrace/tests/common/io/Makefile M cddl/usr.sbin/dtrace/tests/common/ip/Makefile M cddl/usr.sbin/dtrace/tests/common/java_api/Makefile M cddl/usr.sbin/dtrace/tests/common/json/Makefile M cddl/usr.sbin/dtrace/tests/common/kinst/Makefile M cddl/usr.sbin/dtrace/tests/common/lexer/Makefile M cddl/usr.sbin/dtrace/tests/common/llquantize/Makefile M cddl/usr.sbin/dtrace/tests/common/mdb/Makefile M cddl/usr.sbin/dtrace/tests/common/mib/Makefile M cddl/usr.sbin/dtrace/tests/common/misc/Makefile M cddl/usr.sbin/dtrace/tests/common/multiaggs/Makefile M cddl/usr.sbin/dtrace/tests/common/nfs/Makefile M cddl/usr.sbin/dtrace/tests/common/offsetof/Makefile M cddl/usr.sbin/dtrace/tests/common/oformat/Makefile M cddl/usr.sbin/dtrace/tests/common/operators/Makefile M cddl/usr.sbin/dtrace/tests/common/pid/Makefile M cddl/usr.sbin/dtrace/tests/common/plockstat/Makefile M cddl/usr.sbin/dtrace/tests/common/pointers/Makefile M cddl/usr.sbin/dtrace/tests/common/pragma/Makefile M cddl/usr.sbin/dtrace/tests/common/predicates/Makefile M cddl/usr.sbin/dtrace/tests/common/preprocessor/Makefile M cddl/usr.sbin/dtrace/tests/common/print/Makefile M cddl/usr.sbin/dtrace/tests/common/printa/Makefile M cddl/usr.sbin/dtrace/tests/common/printf/Makefile M cddl/usr.sbin/dtrace/tests/common/privs/Makefile M cddl/usr.sbin/dtrace/tests/common/probes/Makefile M cddl/usr.sbin/dtrace/tests/common/proc/Makefile M cddl/usr.sbin/dtrace/tests/common/profile-n/Makefile M cddl/usr.sbin/dtrace/tests/common/providers/Makefile M cddl/usr.sbin/dtrace/tests/common/raise/Makefile M cddl/usr.sbin/dtrace/tests/common/rates/Makefile M cddl/usr.sbin/dtrace/tests/common/safety/Makefile M cddl/usr.sbin/dtrace/tests/common/scalars/Makefile M cddl/usr.sbin/dtrace/tests/common/sched/Makefile M cddl/usr.sbin/dtrace/tests/common/scripting/Makefile M cddl/usr.sbin/dtrace/tests/common/sdt/Makefile M cddl/usr.sbin/dtrace/tests/common/sizeof/Makefile M cddl/usr.sbin/dtrace/tests/common/speculation/Makefile M cddl/usr.sbin/dtrace/tests/common/stability/Makefile M cddl/usr.sbin/dtrace/tests/common/stack/Makefile M cddl/usr.sbin/dtrace/tests/common/stackdepth/Makefile M cddl/usr.sbin/dtrace/tests/common/stop/Makefile M cddl/usr.sbin/dtrace/tests/common/strlen/Makefile M cddl/usr.sbin/dtrace/tests/common/strtoll/Makefile M cddl/usr.sbin/dtrace/tests/common/struct/Makefile M cddl/usr.sbin/dtrace/tests/common/sugar/Makefile M cddl/usr.sbin/dtrace/tests/common/syscall/Makefile M cddl/usr.sbin/dtrace/tests/common/sysevent/Makefile M cddl/usr.sbin/dtrace/tests/common/tick-n/Makefile M cddl/usr.sbin/dtrace/tests/common/trace/Makefile M cddl/usr.sbin/dtrace/tests/common/tracemem/Makefile M cddl/usr.sbin/dtrace/tests/common/translators/Makefile M cddl/usr.sbin/dtrace/tests/common/typedef/Makefile M cddl/usr.sbin/dtrace/tests/common/types/Makefile M cddl/usr.sbin/dtrace/tests/common/uctf/Makefile M cddl/usr.sbin/dtrace/tests/common/union/Makefile M cddl/usr.sbin/dtrace/tests/common/usdt/Makefile M cddl/usr.sbin/dtrace/tests/common/ustack/Makefile M cddl/usr.sbin/dtrace/tests/common/vars/Makefile M cddl/usr.sbin/dtrace/tests/common/version/Makefile M cddl/usr.sbin/dtrace/tests/dtrace.test.mk M cddl/usr.sbin/dtrace/tests/i386/arrays/Makefile M cddl/usr.sbin/dtrace/tests/i386/funcs/Makefile M cddl/usr.sbin/dtrace/tests/i386/pid/Makefile M cddl/usr.sbin/dtrace/tests/i386/ustack/Makefile M cddl/usr.sbin/dtrace/tests/tools/dtest.sh M cddl/usr.sbin/dtrace/tests/tools/genmakefiles.sh _____________________________________________________________________________________________________________ Commit: 73d67bc5545b7cf8c4ba6a0cd49430e5f97bbb05 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=73d67bc5545b7cf8c4ba6a0cd49430e5f97bbb05 Author: Siva Mahadevan (Sat 12 Sep 2026 19:29:02 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:51 BST) lib/googletest: also use -O0 for internal tests with GCC This fixes the build with gcc 16's aggressive inlining. Reviewed by: ngie MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59538 (cherry picked from commit 243bdaff75853606ce477807e87e4fbcc1decfb1) M lib/googletest/tests/Makefile.inc _____________________________________________________________________________________________________________ Commit: 6f7e47dff44d9eeb1e24472b38baa48e90d3faad URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6f7e47dff44d9eeb1e24472b38baa48e90d3faad Author: Siva Mahadevan (Fri 11 Sep 2026 15:56:10 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:23 BST) sctp: remove unused variable This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: tuexen MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59590 (cherry picked from commit b7e91f238c2f70e8432f56762499aebd0ab9960b) M sys/netinet/sctp_usrreq.c _____________________________________________________________________________________________________________ Commit: f006552b18e0abe50428fa2d88b5d046f8e02bb3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f006552b18e0abe50428fa2d88b5d046f8e02bb3 Author: Siva Mahadevan (Thu 10 Sep 2026 15:40:28 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:23 BST) libctf: remove unused variable This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: markj MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59537 (cherry picked from commit 8e75ea59b085fb6dedfe5911481e6673a60b48fe) M cddl/contrib/opensolaris/common/ctf/ctf_hash.c _____________________________________________________________________________________________________________ Commit: 09f68ad046a6b812f8580787c6be81c9ead409fe URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=09f68ad046a6b812f8580787c6be81c9ead409fe Author: Siva Mahadevan (Thu 10 Sep 2026 15:40:03 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:23 BST) camcontrol: remove unused variable This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: ken, imp MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59540 (cherry picked from commit 076c9db51f95291f73c25b39a8c9c4206c050bc1) M sbin/camcontrol/persist.c _____________________________________________________________________________________________________________ Commit: d6c48b05c0d0de49a06dce6954d4190bd41cac38 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d6c48b05c0d0de49a06dce6954d4190bd41cac38 Author: Siva Mahadevan (Thu 10 Sep 2026 15:39:37 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:22 BST) sbin/ifconfig: remove unused static function parameter This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: glebius MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59541 (cherry picked from commit e1a1206245be0db252d52f4b090c62a002fc1cc5) M sbin/ifconfig/ifieee80211.c _____________________________________________________________________________________________________________ Commit: 655adcb2ff8e1326e5b8932f6b3a1e5f03ed8ad3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=655adcb2ff8e1326e5b8932f6b3a1e5f03ed8ad3 Author: Siva Mahadevan (Thu 10 Sep 2026 15:39:11 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:22 BST) tests/kqueue: remove unused variable This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: markj MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59542 (cherry picked from commit c65c63cf5104bff198854fd1d8fe277dfc1c1956) M tests/sys/kqueue/libkqueue/timer.c _____________________________________________________________________________________________________________ Commit: 83623954e4c86914439eee546dfcc84b4e2acecc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=83623954e4c86914439eee546dfcc84b4e2acecc Author: Siva Mahadevan (Thu 10 Sep 2026 15:38:44 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:22 BST) fsck_msdosfs: remove unused variable This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: delphij MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59543 (cherry picked from commit fead44b3ed61a09c2a0c4f79537462e837067fce) M sbin/fsck_msdosfs/dir.c _____________________________________________________________________________________________________________ Commit: 8aa43e6a637694ab1bcced006d13fe70fc0c9fd9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8aa43e6a637694ab1bcced006d13fe70fc0c9fd9 Author: Siva Mahadevan (Thu 10 Sep 2026 15:38:19 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:22 BST) iflib: remove unused variables This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: gallatin MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59544 (cherry picked from commit d1ef616302f185ca9c217a9bfa70509b19136016) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: cf48fcc8c9be44e6407e24b26f05881d0606aea5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cf48fcc8c9be44e6407e24b26f05881d0606aea5 Author: Siva Mahadevan (Thu 10 Sep 2026 15:37:06 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:22 BST) cxgb(4): remove unused variable This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: np MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59545 (cherry picked from commit d5047ddeddab45923ff4870cf9a0e158619e3a30) M sys/dev/cxgb/cxgb_sge.c _____________________________________________________________________________________________________________ Commit: 63d78df8d304b7ab3333b10736cf8f9410bea9fa URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=63d78df8d304b7ab3333b10736cf8f9410bea9fa Author: Siva Mahadevan (Wed 9 Sep 2026 18:14:45 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:22 BST) ipfilter: remove unused variable This fixes the build with gcc 16 after the changes to -Wunused*[0]. [0] https://gcc.gnu.org/gcc-16/porting_to.html#changes-to-wunused Reviewed by: cy MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 94f7019668f8a02416c5b32ba8a9c32a68edd261) M sys/netpfil/ipfilter/netinet/ip_nat.c _____________________________________________________________________________________________________________ Commit: c9213ef4667dac484113ef95f4bed7c39acd8203 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c9213ef4667dac484113ef95f4bed7c39acd8203 Author: Siva Mahadevan (Tue 8 Sep 2026 21:10:51 BST) Committer: Siva Mahadevan (Mon 14 Sep 2026 15:32:22 BST) tests/fusefs: fix the build with gcc 16 Reviewed by: asomers MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 0e3dae1ca8fc371eb5c451032adc5e0813b00db6) M tests/sys/fs/fusefs/Makefile M tests/sys/fs/fusefs/utils.cc _____________________________________________________________________________________________________________ Commit: 4161e83f5ef56b107adb364a07f72575040a238d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4161e83f5ef56b107adb364a07f72575040a238d Author: Gordon Bergling (Fri 11 Sep 2026 17:30:10 BST) Committer: Gordon Bergling (Mon 14 Sep 2026 05:03:29 BST) sys/kern: Fix a typo in a source code comment - s/untill/until/ (cherry picked from commit 8255ae9a750f6de312f9b445c25b1c8caf3d95b7) M sys/kern/kern_sysctl.c _____________________________________________________________________________________________________________ Commit: 3d8b78359f2f309fb5f097c9be4d03c17aa2a013 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3d8b78359f2f309fb5f097c9be4d03c17aa2a013 Author: Gordon Bergling (Fri 11 Sep 2026 17:29:05 BST) Committer: Gordon Bergling (Mon 14 Sep 2026 05:03:23 BST) arpa/telnet: Fix a typo in a source code comment - s/ascic/ASCII/ (cherry picked from commit 16246209d25ac437494ebe92b9819a65f1336594) M include/arpa/telnet.h _____________________________________________________________________________________________________________ Commit: 3e271569ab62ab38cf42d4cd2e88c75ddacc5e59 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e271569ab62ab38cf42d4cd2e88c75ddacc5e59 Author: Kevin Bowling (Sun 13 Sep 2026 02:47:39 BST) Committer: Kevin Bowling (Sun 13 Sep 2026 02:50:42 BST) pci: Adapt PME capability queries to stable/14 Add explicit D3hot and D3cold names and the bounds needed by pci_has_pme(), while retaining PCI_POWERSTATE_D3 == 3. D3cold is a capability-query state here, not a newly supported power transition. This avoids importing the ACPI D3cold changes for the PME and igc Wake-on-LAN backports. Use pci_has_pm() to check capability presence instead of pp_location, which is not present in stable/14. Keep the PCI configuration structure layout unchanged. Fixes: d831cb2ad3d8 ("pci: Expose PME support by power state") Fixes: 443dc80b712c ("igc: Correct Wake-on-LAN filter programming") M sys/dev/pci/pci.c M sys/dev/pci/pcivar.h _____________________________________________________________________________________________________________ Commit: 443dc80b712c5eff1cadcd0fd816c3071aa8a0bf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=443dc80b712c5eff1cadcd0fd816c3071aa8a0bf Author: Kevin Bowling (Sun 30 Aug 2026 07:06:02 BST) Committer: Kevin Bowling (Sun 13 Sep 2026 01:48:36 BST) igc: Correct Wake-on-LAN filter programming The attach path translated WUC.APME into a saved link-change filter, then advertised magic-packet wake. Suspend removed unselected magic, unicast, and multicast bits from that saved value, commonly leaving no hardware wake filter at all. The destructive masking also made later capability changes ineffective. Advertise the I225/I226 wake filters whenever PCI power management is available and enable magic-packet wake by default. Build a fresh WUFC mask for every suspend, and explicitly clear WUC, WUFC, and PCI PME when wake is disabled. Require the PCI power-management capability to report D3hot PME support before advertising or arming wake. A PM capability alone does not mean the function can signal PME from the state used during system sleep. Reconstruct RAR0, the multicast table, and the receive filter after the stop-time reset so unicast and multicast wake use the current interface state. Keep the PHY powered while wake is armed, drain pending PCIe transactions, and disable bus mastering before D3. Clear the sticky base and extended wake status before arming filters. On resume, report the saved hardware wake cause, clear the device wake source, and then clear PCI PME. Run the DMA-fencing sequence even when wake programming fails, while allowing shutdown to continue after logging the failure. Explicitly restore PCI bus mastering during initialization so an iflib-local resume after another child rejects suspend can restart the device. Restore the Intel shared code PHY power down test from DPDK. The FreeBSD split inverted the reset-block condition, so its dormant hook would power down only when firmware explicitly vetoed the operation. Do not copy the generic legacy management test verbatim. The I225 and I226 define MANC bits 0 and 1 as flow-control and NC-SI discard controls, not SMBus and ASF enable bits. Preserve the link when the documented TCO receive path is enabled; the shared reset-block test separately honors the firmware keep-link-up veto. This follows section 8.21.1 of the Foxville Software User Manual. Evaluate management pass-through at each suspend. When neither a host wake filter nor management requires the link, invoke the shared-code power-down hook before D3. Leave a management-owned link untouched and restore a link previously powered down by the driver without another PHY reset. This follows DPDK's stop/start pairing without changing ordinary ifconfig down behavior. The implementation was checked against the Intel I225/I226 programming model, the Intel Linux igc lifecycle, and DPDK. On an I225-LM, a device-only D3 test observed PME for a valid magic packet and no PME with every host wake filter disabled. Both cases resumed to D0 with the link and configured addresses operational. The I225 system also completed a full ACPI S3 cycle and resumed with link, configured addresses, and traffic operational. On an I226-V, a device-only D3 test changed PMCSR accordingly after a magic packet. With dev.igc.0.wake enabled, a full ACPI S3 cycle remained asleep until a delayed magic packet and resumed with link, addresses, and traffic operational. PR: 282140 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=282140 ) Obtained from: DPDK (shared-code power-down structure) (cherry picked from commit 90bee82638c3f277f729aa5321aacd5d7333d512) M share/man/man4/igc.4 M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h M sys/dev/igc/igc_base.c M sys/dev/igc/igc_defines.h M sys/dev/igc/igc_mac.c M sys/dev/igc/igc_mac.h M sys/dev/igc/igc_regs.h _____________________________________________________________________________________________________________ Commit: d831cb2ad3d8caa31b9338cf6a4c11dc88290255 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d831cb2ad3d8caa31b9338cf6a4c11dc88290255 Author: Kevin Bowling (Sun 30 Aug 2026 09:18:10 BST) Committer: Kevin Bowling (Sun 13 Sep 2026 01:48:24 BST) pci: Expose PME support by power state The presence of the PCI power management capability does not imply that a function can signal PME# from every power state. Drivers which advertise wake based only on pci_has_pm() can consequently expose wake modes that cannot work. Add pci_has_pme() to query the PME_Support bitmap for a specific state. Use it to implement LinuxKPI pci_pme_capable(), removing its duplicate PME_Support decoder. Validated the helper against PCI PMC capability values from 82571EB, 82573L, 82579LM, I210, I225, and I226-V controllers. The 82571 and 82573 reported PMC 0xc822, while the I226-V reported 0xc823. In both values, bits 15, 14, and 11 advertise PME from D3cold, D3hot, and D0; the low-bit difference is only the PM capability version. Sponsored by: BBOX.io (cherry picked from commit c4e24e95c3f905b817d4bfc6e93457eb297bfa4b) M share/man/man9/Makefile M share/man/man9/pci.9 M sys/compat/linuxkpi/common/include/linux/pci.h M sys/dev/pci/pci.c M sys/dev/pci/pcivar.h _____________________________________________________________________________________________________________ Commit: 8e1ad850df7a2da65c37387f4bccd19227463111 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8e1ad850df7a2da65c37387f4bccd19227463111 Author: Haowu Ge (Mon 2 Dec 2024 11:36:28 GMT) Committer: Ed Maste (Sat 12 Sep 2026 11:07:58 BST) elf_common.h: Add definitions for LoongArch ELF files Including e_machine, e_flags and relocation types. References: Loongson documentation: https://github.com/loongson/la-abi-specs/blob/release/laelf.adoc LLVM reviews / commits: https://reviews.llvm.org/D134601 https://reviews.llvm.org/D115859 https://reviews.llvm.org/D131467 https://reviews.llvm.org/D152184 https://github.com/llvm/llvm-project/pull/73345 https://github.com/llvm/llvm-project/pull/77039 Binutils commits: 6d13722a97cee3fd397e116bde3bcedbb1e220be 9801120721c3a702ce3bd50433ef920f92a83502 57a930e3bfe4b2c7fd6463ed39311e1938513138 Reviewed by: markj, emaste Pull Request: https://github.com/freebsd/freebsd-src/pull/1532 (cherry picked from commit 2bb61497ca76646c92f25127b8d4d64281123400) (cherry picked from commit e049e2c37309af210c606756089b331fbfdda7b9) M sys/sys/elf_common.h _____________________________________________________________________________________________________________ Commit: f006f9ee93feb77e8fc4723d6c2e386b3956bb51 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f006f9ee93feb77e8fc4723d6c2e386b3956bb51 Author: Kevin Bowling (Thu 27 Aug 2026 07:23:42 BST) Committer: Kevin Bowling (Thu 10 Sep 2026 06:53:16 BST) acpi_pci: Honor device proximity for DMA tags A PCI function with its own _PXM still inherits a DMA tag carrying the upstream bridge's proximity domain. Resolving an SR-IOV VF's locality through its PF therefore does not affect the domain used for DMA allocations. Create and cache a private child tag when the function, or a VF's owning PF, has an explicit _PXM. Parent it to the existing PCI or IOMMU tag so its constraints remain intact, then apply the function's domain without mutating a shared tag. pci_get_dma_tag() already performs the IOMMU lookup, so remove the duplicated lookup in the ACPI subclass while here. Reviewed by: jhb Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59063 (cherry picked from commit f1f58bdf7b5fc58e6011c6ac2ae2ba129dc41991) M sys/dev/acpica/acpi_pci.c _____________________________________________________________________________________________________________ Commit: 44f0c9d2f89f1712de294c39c6e48bd6d6f388f0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=44f0c9d2f89f1712de294c39c6e48bd6d6f388f0 Author: Kevin Bowling (Thu 27 Aug 2026 07:22:56 BST) Committer: Kevin Bowling (Thu 10 Sep 2026 06:49:26 BST) acpi_pci: Cache PCI proximity domains A PCI function's _PXM is stable for the lifetime of its device instance, but CPU and DMA locality queries may evaluate it repeatedly. SR-IOV amplifies this because every VF resolves locality through the same PF. Cache successful mappings and the stable absence of _PXM on the locality source device, and share that result between CPU and domain queries. Continue to retry generic evaluation or mapping errors rather than making a potentially transient failure permanent. Reviewed by: jhb Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59207 (cherry picked from commit 5f78d024695b39208a6c92f6a96017bae53cdf2c) M sys/dev/acpica/acpi.c M sys/dev/acpica/acpi_pci.c M sys/dev/acpica/acpivar.h _____________________________________________________________________________________________________________ Commit: 2bab696fbb85b858729da5a0ca9ec9a80d0d5886 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2bab696fbb85b858729da5a0ca9ec9a80d0d5886 Author: Kevin Bowling (Thu 27 Aug 2026 07:21:59 BST) Committer: Kevin Bowling (Thu 10 Sep 2026 06:49:15 BST) acpi_pci: Preserve CPU locality queries for descendants bus_generic_get_cpus() preserves the original leaf device while forwarding a request through the bus hierarchy. Consequently, acpi_pci_get_cpus() may receive a descendant below a PCI function rather than one of the PCI bus's direct children. Only apply the SR-IOV PF-locality mapping to direct PCI children. Preserve the previous ACPI CPU-locality lookup for descendants so their unrelated bus ivars are not interpreted as PCI device information. Reviewed by: jhb Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59206 (cherry picked from commit dc4f80da18f0dcc557a969b4283a86569266eb5c) M sys/dev/acpica/acpi_pci.c _____________________________________________________________________________________________________________ Commit: bf94f298c998bc366e6c29fbbd0dd37d53a056e0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bf94f298c998bc366e6c29fbbd0dd37d53a056e0 Author: Kevin Bowling (Fri 21 Aug 2026 03:27:49 BST) Committer: Kevin Bowling (Thu 10 Sep 2026 06:49:03 BST) acpi_pci: Inherit PF locality for SR-IOV VFs SR-IOV VFs are instantiated from their PF and intentionally do not receive an ACPI handle by matching their runtime BDF. Consequently, ACPI locality queries for a VF fall back to the upstream bus. This is usually sufficient, but loses a _PXM supplied specifically for the PF. Use the PCI core's owning-PF accessor for BUS_GET_DOMAIN and BUS_GET_CPUS requests made for a VF. This preserves the VF's lack of an ACPI handle while allowing its CPU and NUMA placement to follow the PF. Reviewed by: jhb Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59062 (cherry picked from commit 1a2a88684a0126be8d7172362d5ec7dbb7a41c81) M sys/dev/acpica/acpi_pci.c _____________________________________________________________________________________________________________ Commit: 197e0e35161c2c8516158d75ff3022518e74c494 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=197e0e35161c2c8516158d75ff3022518e74c494 Author: Kevin Bowling (Tue 18 Aug 2026 03:39:41 BST) Committer: Kevin Bowling (Thu 10 Sep 2026 06:48:51 BST) acpi_pci: Do not match SR-IOV VFs to ACPI devices SR-IOV VFs are instantiated dynamically from their PF rather than enumerated from ACPI. A VF's runtime slot and function can match an unrelated _ADR below the bridge. acpi_pci_save_handle() stores that handle in the VF's devinfo before acpi_pci_update_device() runs. If the handle is already bound to another device_t whose parent is not acpi0, acpi_pci_update_device() panics under INVARIANTS. Without INVARIANTS, the VF retains the unrelated handle, so subsequent ACPI lookups, including NUMA and power-management operations, can act on the wrong namespace node. Skip ACPI namespace matching for VFs. Reviewed by: jhb Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59061 (cherry picked from commit 8b74806161a188103666387013cdd93fb3f5dc07) M sys/dev/acpica/acpi_pci.c _____________________________________________________________________________________________________________ Commit: 565b058d0b14cd238852ebe94bc256b687261465 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=565b058d0b14cd238852ebe94bc256b687261465 Author: Xin LI (Sat 5 Sep 2026 02:03:17 BST) Committer: Xin LI (Thu 10 Sep 2026 03:37:52 BST) MFC: libmagic: Add swap.c and magic.h to SRCS. (cherry picked from commit 8929675e11c0c64ff96a2441082794980c9c6b2e) M lib/libmagic/Makefile _____________________________________________________________________________________________________________ Commit: 2ae59e248be30d5a1f87bce4a90f6661f465a540 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2ae59e248be30d5a1f87bce4a90f6661f465a540 Author: Xin LI (Thu 3 Sep 2026 05:29:02 BST) Committer: Xin LI (Thu 10 Sep 2026 03:34:40 BST) MFC: MFV: file 5.48 (cherry picked from commit 7af41682a96bf7058b82665c33bb9b1bfa079c17) M contrib/file/ChangeLog M contrib/file/Makefile.in M contrib/file/README.md M contrib/file/aclocal.m4 M contrib/file/compile M contrib/file/config.h.in M contrib/file/configure M contrib/file/configure.ac M contrib/file/depcomp M contrib/file/doc/Makefile.in M contrib/file/doc/magic.man A contrib/file/magic/Magdir/a2ml M contrib/file/magic/Magdir/acorn M contrib/file/magic/Magdir/aes M contrib/file/magic/Magdir/amigaos A contrib/file/magic/Magdir/andrew M contrib/file/magic/Magdir/android M contrib/file/magic/Magdir/apple M contrib/file/magic/Magdir/archive A contrib/file/magic/Magdir/atari M contrib/file/magic/Magdir/c-lang M contrib/file/magic/Magdir/cad M contrib/file/magic/Magdir/coff M contrib/file/magic/Magdir/compress M contrib/file/magic/Magdir/console M contrib/file/magic/Magdir/dyadic M contrib/file/magic/Magdir/filesystems M contrib/file/magic/Magdir/finger M contrib/file/magic/Magdir/fonts M contrib/file/magic/Magdir/games M contrib/file/magic/Magdir/images M contrib/file/magic/Magdir/interleaf M contrib/file/magic/Magdir/ispell M contrib/file/magic/Magdir/javascript A contrib/file/magic/Magdir/k9 M contrib/file/magic/Magdir/lua M contrib/file/magic/Magdir/mail.news M contrib/file/magic/Magdir/mips M contrib/file/magic/Magdir/msdos A contrib/file/magic/Magdir/nix M contrib/file/magic/Magdir/ole2compounddocs A contrib/file/magic/Magdir/partclone M contrib/file/magic/Magdir/riff M contrib/file/magic/Magdir/ruby M contrib/file/magic/Magdir/sun M contrib/file/magic/Magdir/tex M contrib/file/magic/Magdir/virtual M contrib/file/magic/Magdir/windows M contrib/file/magic/Magdir/wordprocessors M contrib/file/magic/Makefile.am M contrib/file/magic/Makefile.in M contrib/file/missing M contrib/file/python/Makefile.in M contrib/file/python/magic.py M contrib/file/src/Makefile.am M contrib/file/src/Makefile.in M contrib/file/src/apprentice.c M contrib/file/src/ascmagic.c M contrib/file/src/cdf.c M contrib/file/src/cdf_time.c M contrib/file/src/compress.c M contrib/file/src/der.c M contrib/file/src/encoding.c M contrib/file/src/file.c M contrib/file/src/file.h M contrib/file/src/funcs.c M contrib/file/src/is_csv.c M contrib/file/src/is_tar.c A contrib/file/src/landlock.c M contrib/file/src/magic.c M contrib/file/src/magic.h.in M contrib/file/src/print.c M contrib/file/src/readcdf.c M contrib/file/src/readelf.c M contrib/file/src/seccomp.c M contrib/file/src/softmagic.c A contrib/file/src/swap.c A contrib/file/src/swap.h M contrib/file/tests/Makefile.in M contrib/file/tests/bgcode.result M contrib/file/tests/efi-signature-list-sha256.result M lib/libmagic/config.h _____________________________________________________________________________________________________________ Commit: 981bb14f5de86c9f911a51de5e8d0110173aa24c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=981bb14f5de86c9f911a51de5e8d0110173aa24c Author: Chris Suter (Thu 3 Sep 2026 06:23:46 BST) Committer: Xin LI (Thu 10 Sep 2026 03:31:08 BST) MFC: fsck_msdosfs: avoid signed integer overflow in readboot() (cherry picked from commit 18094609d301540526d3d57e92705bc989d29986) M sbin/fsck_msdosfs/boot.c _____________________________________________________________________________________________________________ Commit: 8a702ccda30da602007db38f1ebf91e92d72fe52 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8a702ccda30da602007db38f1ebf91e92d72fe52 Author: Jie Li (Wed 2 Sep 2026 07:15:05 BST) Committer: Xin LI (Thu 10 Sep 2026 03:31:07 BST) MFC: fsck_msdosfs: fix status accounting for lost cluster chains (cherry picked from commit 6cf0d6c3b5777e053074200ff99dc4b750e62b96) M sbin/fsck_msdosfs/fat.c _____________________________________________________________________________________________________________ Commit: 0011a183ccd16fa315e4cf4c1f9650f81c6c9740 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0011a183ccd16fa315e4cf4c1f9650f81c6c9740 Author: CooperCao (Thu 3 Sep 2026 08:10:12 BST) Committer: Xin LI (Thu 10 Sep 2026 03:31:07 BST) MFC: fsck_msdosfs: fix 32-bit overflow computing the LOST.DIR offset (cherry picked from commit d3c5464fee7b178a39c189363e48806a11fd3da4) M sbin/fsck_msdosfs/dir.c _____________________________________________________________________________________________________________ Commit: 741eb8ae72c0eb7f51d06229a51291742aab2a7c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=741eb8ae72c0eb7f51d06229a51291742aab2a7c Author: Chris Suter (Tue 4 Aug 2026 06:58:25 BST) Committer: Xin LI (Thu 10 Sep 2026 03:31:06 BST) MFC: fsck_msdosfs: fix memory leaks in checkfilesys() (cherry picked from commit 6d49b0c0e7b8b77d8043593356e712307e894743) M sbin/fsck_msdosfs/check.c M sbin/fsck_msdosfs/ext.h M sbin/fsck_msdosfs/fat.c _____________________________________________________________________________________________________________ Commit: 2643ff9626b4af80c4c55056cef333b7b7314952 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2643ff9626b4af80c4c55056cef333b7b7314952 Author: Xin LI (Thu 3 Sep 2026 08:33:31 BST) Committer: Xin LI (Thu 10 Sep 2026 03:31:06 BST) MFC: fsck_msdosfs: add a test for reconnecting on volumes larger than 4 GiB MFC after: 1 week (cherry picked from commit 37aec55d0a7165960f686e5277f030ab3d44cf45) M sbin/fsck_msdosfs/tests/Makefile A sbin/fsck_msdosfs/tests/fsck_msdosfs_large_test.sh _____________________________________________________________________________________________________________ Commit: 79e284a3d0ca5781a167a270b2a77353f599c569 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=79e284a3d0ca5781a167a270b2a77353f599c569 Author: Xin LI (Thu 3 Sep 2026 06:23:53 BST) Committer: Xin LI (Thu 10 Sep 2026 03:31:05 BST) MFC: fsck_msdosfs: add tests for the 32-bit boot block field decoding (cherry picked from commit c4f458da4411872df4968e02ca292389df462b7b) M sbin/fsck_msdosfs/tests/Makefile A sbin/fsck_msdosfs/tests/fsck_msdosfs_boot_test.sh _____________________________________________________________________________________________________________ Commit: 9af3236ece36e244bb709839b120d7daf6f99113 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9af3236ece36e244bb709839b120d7daf6f99113 Author: Xin LI (Thu 3 Sep 2026 03:15:05 BST) Committer: Xin LI (Thu 10 Sep 2026 03:30:58 BST) MFC: fsck_msdosfs: add tests for lost cluster chain repair accounting (cherry picked from commit bbaf254293f7e19fa7b0f9ed1da21c7a43126d79) M etc/mtree/BSD.tests.dist M sbin/fsck_msdosfs/Makefile A sbin/fsck_msdosfs/tests/Makefile A sbin/fsck_msdosfs/tests/fsck_msdosfs_test.sh _____________________________________________________________________________________________________________ Commit: 35c935b4b370d26dd13821a5456b1014426e7344 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=35c935b4b370d26dd13821a5456b1014426e7344 Author: Colin Percival (Wed 2 Sep 2026 17:37:58 BST) Committer: Colin Percival (Wed 9 Sep 2026 01:30:45 BST) vmimage.subr: Use makefs -N By default, makefs uses the host environment's user and group databases when creating filesystems. This causes makefs to fail when trying to create files owned by users or groups which don't exist in the host environment, for example when creating a VM with packages pre-installed which added their own users/groups. Pass "-N ${DESTDIR}/etc" to makefs to point it at the user and group databases from the image being created. MFC after: 1 week Sponsored by: Amazon (cherry picked from commit 7ca0c1eba2e4c49ac92499ef0f6adf27c8b930d4) M release/tools/vmimage.subr _____________________________________________________________________________________________________________ Commit: e0a8be177171b3acad8a618885781e251a8277c2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e0a8be177171b3acad8a618885781e251a8277c2 Author: Philip Paeps (Tue 1 Sep 2026 03:25:25 BST) Committer: Philip Paeps (Tue 8 Sep 2026 03:18:55 BST) contrib/expat: import expat 2.8.4 Changes: https://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes Security: CVE-2026-66046 Security: CVE-2026-76641 Security: CVE-2026-76957 Security: CVE-2026-76956 (cherry picked from commit f89b0ce5fd0786f5ed306d9cdf6f019942ae0d8a) M contrib/expat/Changes M contrib/expat/README.md M contrib/expat/configure.ac M contrib/expat/doc/reference.html M contrib/expat/doc/xmlwf.1 M contrib/expat/doc/xmlwf.xml M contrib/expat/fix-xmltest-log.sh M contrib/expat/lib/expat.h M contrib/expat/lib/internal.h M contrib/expat/lib/random_getentropy.c M contrib/expat/lib/xmlparse.c M contrib/expat/lib/xmltok.h M contrib/expat/tests/basic_tests.c M contrib/expat/tests/misc_tests.c M lib/libexpat/expat_config.h M lib/libexpat/libbsdxml.3 _____________________________________________________________________________________________________________ Commit: 9872af2e9644dc4aa1ce5632bb4e60fc52c690b6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9872af2e9644dc4aa1ce5632bb4e60fc52c690b6 Author: Colin Percival (Sat 29 Aug 2026 21:22:15 BST) Committer: Colin Percival (Mon 7 Sep 2026 20:11:38 BST) gstat: Set errno = 0 before strtoul The strtoul function sets errno on error, but does not clear it on success; when using strtoul and checking errno (as one should) for ERANGE / EINVAL afterwards, it's important to zero errno first. While here, remove a dead store. Reviewed by: phk Fixes: 4fe8c1b67be0 ("Add error and range checking ... ") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59270 (cherry picked from commit 6ddb10cf6b7f870d749e96d2ae55976b18896f54) M usr.sbin/gstat/gstat.c _____________________________________________________________________________________________________________ Commit: 6624f3cf2bd4f08adb295f22aa6733f314043247 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6624f3cf2bd4f08adb295f22aa6733f314043247 Author: Enji Cooper (Wed 2 Sep 2026 16:42:04 BST) Committer: Enji Cooper (Mon 7 Sep 2026 08:42:20 BST) [tests] libarchive: mark `test_read_filter_lz4_raw_skip` broken This test has not passed since 185becb1e1bd2657c156f78aeb52edac05ba5fb5 (the libarchive 3.8.9 upgrade). PR: 297505 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297505 ) MFC after: 1 week Reviewed by: siva Differential Revision: https://reviews.freebsd.org/D59314 (cherry picked from commit 064d190cdac48465083da1798a36d923f50790ac) M lib/libarchive/tests/Makefile _____________________________________________________________________________________________________________ Commit: 1cc8353a1c633aedc6f4a7af198fddcc26a63126 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1cc8353a1c633aedc6f4a7af198fddcc26a63126 Author: Kevin Bowling (Sun 16 Aug 2026 08:10:09 BST) Committer: Kevin Bowling (Mon 7 Sep 2026 08:23:13 BST) e1000: Serialize 82579 CSR writes with the Management Engine The 82579 PCIm2PCI arbiter can acknowledge a host MAC CSR write while the Management Engine is accessing another CSR. The host write can be lost; subsequent target accesses may no longer be claimed by the MAC and can hang the system. For 82579 controllers with valid management firmware, wait for the ME CSR access indication before every MAC CSR write. Keep the wait bounded and use DELAY because writes occur in interrupt and datapath contexts. Verify every transmit and receive tail write. If a tail does not hold the requested value, disable its datapath direction and request a full iflib reset. Keep the ordinary register-write path as a direct MMIO write behind a predicted per-device gate. Contain the wait and tail recovery in the 82579 slow path rather than adding tail-specific accessors and state to the rest of the e1000 family. Documentation on the PCH NICs is scare so Intel's Linux e1000e fixes publicly document the hardware failure and required serialization as commits bdc125f73f3c and d601afcae2fe. This implementation is a bit cleaner. Tested on a Thinkpad T430 (82579LM) with a test kernel to simulate ME contention without incident as well as lost tail writes causing a succesful recovery. Sponsored by: BBOX.io (cherry picked from commit e7aa5a5a3f690f49488f89e01444ba1bcebc427b) M sys/dev/e1000/e1000_osdep.c M sys/dev/e1000/e1000_osdep.h M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 5717b3bec7b7616c12383b69aa02e533262222bc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5717b3bec7b7616c12383b69aa02e533262222bc Author: Abdelkader Boudih (Wed 26 Aug 2026 18:28:54 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:36 BST) intelspi: add Nova Lake SPI controller IDs Add PCI device IDs for Nova Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59013 (cherry picked from commit f22ffd63aa83976251a7b425ac17b8ecb8a80177) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 875f1a1789c246cc80ff012414c8fa290496670c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=875f1a1789c246cc80ff012414c8fa290496670c Author: Abdelkader Boudih (Wed 26 Aug 2026 18:28:40 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:36 BST) intelspi: add Panther Lake SPI controller IDs Add PCI device IDs for Panther Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59012 (cherry picked from commit 59379461f00c0a7ca1c911c20674510affa6795a) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: c5c3eca21947b7b3bf12fbf7a25bd4f63c65b5c1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c5c3eca21947b7b3bf12fbf7a25bd4f63c65b5c1 Author: Abdelkader Boudih (Wed 26 Aug 2026 17:27:07 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:36 BST) intelspi: add Wildcat Lake SPI controller IDs Add PCI device IDs for Wildcat Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59011 (cherry picked from commit eeb02a9c24e9b59295b2cdf09bed955ccbf89a7e) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 7a1547d657ddbf0cffd17617405e56b88b79c073 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7a1547d657ddbf0cffd17617405e56b88b79c073 Author: Abdelkader Boudih (Sat 22 Aug 2026 03:29:30 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:36 BST) intelspi: add Lunar Lake SPI controller IDs Add PCI device IDs for Lunar Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59010 (cherry picked from commit be503dd912a18e5f7eb16c73326562e13681cf49) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 32151c3a1685e8fb8900263f8492cbb1da9a1270 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=32151c3a1685e8fb8900263f8492cbb1da9a1270 Author: Abdelkader Boudih (Sat 22 Aug 2026 03:28:40 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:35 BST) intelspi: add Arrow Lake SPI controller IDs Add PCI device IDs for Arrow Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59009 (cherry picked from commit ca1a2bf39614a910c87cbc703df25396fe2bd26b) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 3e5b0e7bdaeaa4a030aa24f9b454553f54102809 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e5b0e7bdaeaa4a030aa24f9b454553f54102809 Author: Abdelkader Boudih (Sat 22 Aug 2026 03:28:05 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:35 BST) intelspi: add Meteor Lake SPI controller IDs Add PCI device IDs for Meteor Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59008 (cherry picked from commit 6d4b45ac5c6c7b01febda0185df420d08f80096b) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 5597accdc28fe9d9ab2d8b1442186135a44d9d9a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5597accdc28fe9d9ab2d8b1442186135a44d9d9a Author: Abdelkader Boudih (Sat 22 Aug 2026 03:27:22 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:35 BST) intelspi: add Raptor Lake SPI controller IDs Add PCI device IDs for Raptor Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59007 (cherry picked from commit a6d84d04b3f2b570d7fff0835058d14f3bd84d9a) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 0a916fc66176f0f5a0cbcca65994f17b7e57e456 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0a916fc66176f0f5a0cbcca65994f17b7e57e456 Author: Abdelkader Boudih (Sat 22 Aug 2026 03:27:04 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:34 BST) intelspi: add Alder Lake SPI controller IDs Add PCI device IDs for Alder Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59006 (cherry picked from commit 2dd4027c07e91ea5903314411f4bae44f72ca03b) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: ced8de538528adbb258371ae8e9875828dae5987 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ced8de538528adbb258371ae8e9875828dae5987 Author: Abdelkader Boudih (Sat 22 Aug 2026 03:26:01 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:34 BST) intelspi: add Elkhart Lake SPI controller IDs Add PCI device IDs for Elkhart Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59005 (cherry picked from commit bdda595a8ea31cb8161e5773139df3cf8785abb7) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 7988c591e177d7d093957d5acf590b3c958db3db URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7988c591e177d7d093957d5acf590b3c958db3db Author: Abdelkader Boudih (Sat 22 Aug 2026 03:25:39 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:34 BST) intelspi: add Tiger Lake SPI controller IDs Add PCI device IDs for Tiger Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59004 (cherry picked from commit 3ff56f81a1a58d708d0101d601e88c289cfc5882) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: f0b1eed6d907e65a974bebd1d44498de81ea052c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f0b1eed6d907e65a974bebd1d44498de81ea052c Author: Abdelkader Boudih (Sat 22 Aug 2026 03:25:24 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:33 BST) intelspi: add Jasper Lake SPI controller IDs Add PCI device IDs for Jasper Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59003 (cherry picked from commit e7db9fa2e10408257541c38b99323a17824c6078) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 7d1f5854ac3fbea4644ca67fdc01d2b12591af15 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7d1f5854ac3fbea4644ca67fdc01d2b12591af15 Author: Abdelkader Boudih (Sat 22 Aug 2026 03:24:32 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:33 BST) intelspi: add Ice Lake SPI controller IDs Add PCI device IDs for Ice Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59002 (cherry picked from commit 88919d5ab6c4f611fb2b90d4ff17667072296950) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 4a1ca542ffc50f303b88fe9e8f52819d588c4748 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4a1ca542ffc50f303b88fe9e8f52819d588c4748 Author: Abdelkader Boudih (Sat 22 Aug 2026 03:20:19 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:33 BST) intelspi: add Lakefield SPI controller IDs Add PCI device IDs for Lakefield-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59001 (cherry picked from commit 0b4ff3e1def98c6d804f1e8cc96f3f8eaf4c60bb) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: d26d88b1733a580171af8d08170d714b149412c9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d26d88b1733a580171af8d08170d714b149412c9 Author: Abdelkader Boudih (Fri 21 Aug 2026 17:03:09 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:32 BST) intelspi: add Comet Lake SPI controller IDs Add PCI device IDs for Comet Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D59000 (cherry picked from commit 9fb03dd2f759fa68fadecbab40ae84ec390b3a62) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 4611c9f5d3b9ac2bcd776eead532c35f951796a5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4611c9f5d3b9ac2bcd776eead532c35f951796a5 Author: Abdelkader Boudih (Fri 21 Aug 2026 17:02:56 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:32 BST) intelspi: add Cannon Lake SPI controller IDs Add PCI device IDs for Cannon Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D58999 (cherry picked from commit 26b921d8bd86d14ddb2441186440f6a6136cc1c1) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 7f1bf9485695f4bdbc0abc16d5f6092f700fe39d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7f1bf9485695f4bdbc0abc16d5f6092f700fe39d Author: Abdelkader Boudih (Fri 21 Aug 2026 17:02:40 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:32 BST) intelspi: add Apollo Lake SPI controller IDs Add PCI device IDs for Apollo Lake-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D58998 (cherry picked from commit 4c998ff28471e3fbfcf96decbef5a472cd3d0dd1) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: d00b66df2785f10368fbceff00e42334a2ce8d35 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d00b66df2785f10368fbceff00e42334a2ce8d35 Author: Abdelkader Boudih (Fri 21 Aug 2026 17:02:29 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:31 BST) intelspi: add Broxton SPI controller IDs Add PCI device IDs for Broxton-generation LPSS peripheral SPI controllers. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D58997 (cherry picked from commit a3489cc47083b7dd4ddddd6d9c03b7ba33f1271f) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 176d8caba590bc41dd19bd53f15357a851a91e43 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=176d8caba590bc41dd19bd53f15357a851a91e43 Author: Abdelkader Boudih (Fri 21 Aug 2026 17:02:15 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:30 BST) intelspi: sort PCI ID table by device ID Sort the existing LPSS peripheral SPI controller PCI ID table by numeric device ID so new entries have an unambiguous insertion point. Reviewed by: wulf Differential Revision: https://reviews.freebsd.org/D58996 (cherry picked from commit 728775442c62c6eff1b521c074dcbccde9e70764) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: a21cd455197989971f0bca4f3fa8f9c46fd507e9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a21cd455197989971f0bca4f3fa8f9c46fd507e9 Author: Abdelkader Boudih (Wed 19 Aug 2026 02:50:37 BST) Committer: Enji Cooper (Sun 6 Sep 2026 22:14:30 BST) intelspi: add Gemini Lake SPI controller PCI IDs Add Gemini Lake LPSS SPI controller PCI IDs (0x31c2, 0x31c4, 0x31c6) to intelspi_pci_devices[]. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D58868 (cherry picked from commit 8ddc54f923aec9738c323d2077419b17ba4a1226) M sys/dev/intel/spi_pci.c _____________________________________________________________________________________________________________ Commit: 50949816e0f1f8338b37bb4cc1da21a86b09e5c3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=50949816e0f1f8338b37bb4cc1da21a86b09e5c3 Author: Christian Weisgerber (Sun 6 Sep 2026 21:24:47 BST) Committer: Christian Weisgerber (Sun 6 Sep 2026 21:24:47 BST) stty(1): list DISCARD control character (cherry picked from commit da8b3e70abecdb038eac87086748899a04b29636) M bin/stty/stty.1 _____________________________________________________________________________________________________________ Commit: 5c45e22dee1b86618ff05708df3342504d30914f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5c45e22dee1b86618ff05708df3342504d30914f Author: Kevin Bowling (Mon 10 Aug 2026 17:01:45 BST) Committer: Kevin Bowling (Sun 6 Sep 2026 02:21:22 BST) ixgbe: Probe additional controller variants The shared base code already selects and configures the 82598 BX, 82599 KR, 82599 SFP Express Module, X552 XFI, X553 QSFP, and X553 N QSFP device IDs, but the FreeBSD probe table omits them while DPDK lists them. Sponsored by: BBOX.io (cherry picked from commit 27f0491e3648722a892558416a768dda77850ad9) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 4a5177e1ac6377766f076200558e4cfa308c6786 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4a5177e1ac6377766f076200558e4cfa308c6786 Author: Kevin Bowling (Thu 6 Aug 2026 09:22:37 BST) Committer: Kevin Bowling (Sun 6 Sep 2026 02:21:14 BST) amd_iommu: Bound IVHD device-entry parsing Validate the IVRS table and every subtable length before using either to form iterator bounds. Reject truncated typed IVHD blocks instead of passing them to a type-specific callback. Within each IVHD payload, correct the lower-bound comparison for extended range entries and validate fixed-size entries, paired range terminators, the fixed HID body, and the variable HID UID before dereferencing or advancing. Malformed firmware can no longer drive either iterator beyond its enclosing object. Reviewed by: kib Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D58724 (cherry picked from commit 4a2494d76ad03c755f2cb0ed5e1311b03bb2a8e2) M sys/x86/iommu/amd_drv.c _____________________________________________________________________________________________________________ Commit: 7a0f01a84d62e05d6f68c58ee504647068403586 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7a0f01a84d62e05d6f68c58ee504647068403586 Author: Abdelkader Boudih (Mon 17 Aug 2026 04:12:00 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:47 BST) asmc: prefer MMIO backend over PIO when both are present T2, T1, and some pre-T1 Macs advertise a legacy PIO range in the SMC ACPI _CRS alongside a live MMIO window, but the silicon behind the PIO range is bogus. Try MMIO first, validate via LDKN >= 2, fall back to PIO if that fails or no MMIO resource is present. Drop "(T2)" from the backend message since MMIO isn't T2-exclusive. MFC: 1 week Reviewed by: ngie Differential Revision: https://reviews.freebsd.org/D58839 (cherry picked from commit 37826269b41b46c72264191d35b09baf24e055b9) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcmmio.c _____________________________________________________________________________________________________________ Commit: a6e503c5fe693058107027bb271469c4baf65dd7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a6e503c5fe693058107027bb271469c4baf65dd7 Author: Abdelkader Boudih (Wed 1 Jul 2026 01:15:51 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:47 BST) asmc: deduplicate sensor converters and cause sysctls Replace per-type spXX_to_milli() functions with a table-driven asmc_sensor_convert() that looks up the divisor by SMC type string. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D57854 (cherry picked from commit 126f82a3eb613976f477aa8326a208459f60465d) M sys/dev/asmc/asmc.c _____________________________________________________________________________________________________________ Commit: 6e4229e0e17b6958371c4e4df28cbd60e331d272 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6e4229e0e17b6958371c4e4df28cbd60e331d272 Author: Abdelkader Boudih (Wed 1 Jul 2026 01:15:24 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:47 BST) asmc: add system state and board identity sysctls Add dev.asmc.0.system subtree with read-only sysctls for SMC diagnostic and identity keys: shutdown_cause (MSSD), sleep_cause (MSSP), thermal_status (MSAL), time_of_day (CLKT), power_state (MSPS), board_id (RPlt), and chip_gen (RGEN). Each sysctl is registered only if the key exists on the hardware. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D57853 (cherry picked from commit 6a1bd5212f290933d1429a6d4787394ee53e3181) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h _____________________________________________________________________________________________________________ Commit: 95aa170e635866a9943fa262b1f76e484bcba8c6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=95aa170e635866a9943fa262b1f76e484bcba8c6 Author: Abdelkader Boudih (Wed 1 Jul 2026 01:13:42 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:46 BST) asmc: try PIO before MMIO to avoid false T2 detection Add hw.asmc.system-state and hw.asmc.board-id read-only sysctls to expose the T2 system state register and Mac board identifier via SMC. Try PIO access before MMIO during probe to prevent false T2 detection on Macs that happen to have something mapped at the T2 BAR address. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D57844 (cherry picked from commit bb1e071be47fa03accadace587784c85654de91e) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcmmio.c M sys/dev/asmc/asmcvar.h _____________________________________________________________________________________________________________ Commit: 5a7ff2eb7d0dcc7d8b7f08663fc2e65ac7ef1ebe URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5a7ff2eb7d0dcc7d8b7f08663fc2e65ac7ef1ebe Author: Abdelkader Boudih (Thu 25 Jun 2026 03:06:34 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:46 BST) asmc: Refactor sensor detection and sysctl registration Replace repeated per-sensor-type blocks for voltage, current, power, and ambient light sensors with table-driven loops. Reviewed by: ngie, adrian Differential Revision: https://reviews.freebsd.org/D57595 (cherry picked from commit 104b311a03e45ebb8fd7a93e4ac26644bbae9bae) M sys/dev/asmc/asmc.c _____________________________________________________________________________________________________________ Commit: 9537554b617bb1a45d6b66a08153daca5686232b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9537554b617bb1a45d6b66a08153daca5686232b Author: Abdelkader Boudih (Sun 14 Jun 2026 21:55:12 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:46 BST) asmc: fix asmc_key_dump() page fault on T2 MMIO backend asmc_key_dump() used I/O port macros (ASMC_DATAPORT_WRITE/READ, asmc_command()) unconditionally. On T2 Macs, sc_ioport is NULL (MMIO backend is used instead), causing a page fault when ASMC_DEBUG triggers asmc_dumpall() during attach. Add an MMIO guard at the top of asmc_key_dump(): delegate to asmc_key_dump_by_index() + asmc_key_read() for MMIO devices, consistent with the rest of the T2 code paths. Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D56748 (cherry picked from commit e37e49bfaa2763f0ce522a3e54de9b494e346465) M sys/dev/asmc/asmc.c _____________________________________________________________________________________________________________ Commit: 744396cdb66abe4d8a0485721aa1d8ff8e7ba79e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=744396cdb66abe4d8a0485721aa1d8ff8e7ba79e Author: Abdelkader Boudih (Wed 3 Jun 2026 06:57:49 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:46 BST) asmc: add MMIO backend for T2 Macs T2 Macs (2018+) expose the SMC via memory-mapped registers instead of I/O ports. Add asmcmmio.c/asmcmmio.h implementing the MMIO transport: key read/write, getinfo, getbyindex, and a poll-based wait with exponential backoff. The driver probes for MMIO at attach time by checking the LDKN firmware version key; if MMIO is available it is used, otherwise the standard I/O port backend is used. T2 fan speeds use IEEE 754 floats instead of fpe2 fixed-point. Per-fan manual mode uses F%dMd keys instead of the FS! bitmask. Battery charge limit is exposed via dev.asmc.N.battery_charge_limit. Tested on: MacBookPro16,2 (A2251, iBridge2,10) MacBookPro15,4 (A2159, iBridge2,8) MacBookAir8,2 (A1932, iBridge2,5) Mac mini 8,1 (A1993, iBridge2,7) iMac20,2 (A2115, iBridge2,16) iMacPro1,1 (A1862, iBridge1,1) MFC after: 2 weeks Reviewed by: ngie, adrian Differential Revision: https://reviews.freebsd.org/D57086 (cherry picked from commit a48b900300ebdbd5c47e664b4cc06e705da91bd8) M sys/conf/files.amd64 M sys/dev/asmc/asmc.c A sys/dev/asmc/asmcmmio.c A sys/dev/asmc/asmcmmio.h M sys/dev/asmc/asmcvar.h M sys/modules/asmc/Makefile _____________________________________________________________________________________________________________ Commit: 94b80b3dc4f8b0e1b6a38fd8d40f5abf4c7e7abc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=94b80b3dc4f8b0e1b6a38fd8d40f5abf4c7e7abc Author: Abdelkader Boudih (Mon 4 May 2026 15:26:44 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:46 BST) asmc: rename wol sysctl to auto_poweron Older SMC firmware exposed AUPO as a Wake-on-LAN control. On updated firmware, the key controls automatic power-on when AC power is restored after a power loss; WoL is handled by the GBE controller instead. Rename the sysctl to reflect the current semantics. No compatibility alias is provided as the sysctl has not appeared in any release. Reviewed by: ziaee, adrian Differential Revision: https://reviews.freebsd.org/D56747 (cherry picked from commit 36b399f55e3fa16063188b6f8ad8eaaf8c2215ab) M share/man/man4/asmc.4 M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h _____________________________________________________________________________________________________________ Commit: c23d7287f22dd14d3b874fef6a359cbaf4808ac1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c23d7287f22dd14d3b874fef6a359cbaf4808ac1 Author: Abdelkader Boudih (Thu 30 Apr 2026 01:38:38 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:46 BST) asmc: replace hardcoded model table with universal probing Probe SMC keys at attach time to detect hardware capabilities, supporting all Intel Apple machines without per-model entries. Sensors are discovered by scanning sorted SMC key ranges for known prefixes and types. Capabilities such as SMS, fan safe speed, and ambient light are detected by key presence. A global key description table provides human-readable names for well-known temperature sensors. Tested on: - MacBook Pro (Early 2007, Mid 2014, Mid 2015) - MacBook Air (Early 2015, Mid 2017) - iMac (Mid 2011, Late 2013) - Mac mini (Mid 2011) Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D56405 (cherry picked from commit e7f4269dbfad02119934c35d523cb33ff8c93493) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h _____________________________________________________________________________________________________________ Commit: 6bdc21d47fe437a9e5d3bb1766c3d88c7c54c8a7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6bdc21d47fe437a9e5d3bb1766c3d88c7c54c8a7 Author: Abdelkader Boudih (Fri 17 Apr 2026 03:31:21 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:45 BST) asmc: add automatic voltage/current/power/ambient sensor detection Apple SMCs contain numerous undocumented voltage, current, power, and ambient light sensors. This change adds automatic detection and registration of these sensors as sysctls. New sysctl trees: dev.asmc.0.voltage.* - Voltage sensors (millivolts) dev.asmc.0.current.* - Current sensors (milliamps) dev.asmc.0.power.* - Power sensors (milliwatts) dev.asmc.0.ambient.* - Ambient light sensors Implementation: - Scans all SMC keys at attach time via asmc_key_dump_by_index() - Identifies sensors by key prefix patterns: - Voltage: VC*, VD*, VG*, VP*, VI* - Current: I{C,D,G,M,N,O,H,P,B,A,L}* - Power: P{C,D,N,S,T,H,F,Z,z}* - Light: ALV*, ALS* - Dynamically creates sysctls for detected sensors - Supports 8 fixed-point SMC data types: - sp78, sp87, sp4b, sp5a, sp69, sp96, sp2d, ui16 - Auto-converts all values to milli-units (mV, mA, mW) On Mac Mini 5,1, detects: - 7 voltage sensors - 18 current sensors - 27 power sensors - 2 ambient light sensors Enables power consumption monitoring, voltage rail debugging, and ambient light detection without hardcoding model-specific sensor lists. Tested on: - Mac Mini 5,1 (2011) running FreeBSD 15.0-RELEASE - 54 sensors auto-detected and exposed via sysctl - All sensor types verified with multimeter readings - Fixed-point conversions validated against known values - Memory management tested (malloc/free on detach) Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D55807 (cherry picked from commit aae9068404947dd9ffd8522359d0f9dffaa70414) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h _____________________________________________________________________________________________________________ Commit: 470993a3d879ab41b2e6466d3495887f480cd247 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=470993a3d879ab41b2e6466d3495887f480cd247 Author: Marcus Gartner (Sat 11 Apr 2026 03:03:18 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:45 BST) asmc: add support for MacBookPro13,1 This commit adds support for the MacBookPro13,1 (late 2016, 13-inch). The SMC keys were collected from https://logi.wiki/index.php/SMC_Sensor_Codes. Two temperature keys are omitted because they fail to be read: TI0P (IO Proximity) and Ta0P (Ambient Air). Note that the with this model the `dev.asmc.0.fan.0.minspeed` setting only applies when the fans have been activated by the system. In my testing, the fans did not spin up until CPU temperatures hit about 80C. At lower temperatures, the fans will happily ignore the minimum speed and remain at 0 rpm. Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/2137 (cherry picked from commit b5b9c65a689457e608cc31831ed690d303d63ffa) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h _____________________________________________________________________________________________________________ Commit: 967501b3c7cc170b6b373db22d137650b3ef519a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=967501b3c7cc170b6b373db22d137650b3ef519a Author: Abdelkader Boudih (Wed 15 Apr 2026 05:20:52 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:45 BST) asmc: add raw SMC key read/write interface This patch adds a debugging interface to read and write arbitrary Apple SMC keys by name through sysctl, enabling hardware exploration and control of undocumented features. The interface provides four sysctls under dev.asmc.0.raw.*: - key - Set the 4-character SMC key name (e.g., "AUPO") - value - Read/write key value as a hex string - len - Auto-detected key value length (can be overridden) - type - Read-only 4-character type string (e.g., "ui8", "flt") Implementation includes a new asmc_key_getinfo() function using SMC command 0x13 to query key metadata. The interface automatically detects key lengths and types, uses hex string encoding for arbitrary binary values, and is safe for concurrent access via CTLFLAG_NEEDGIANT. This interface was essential for discovering that the AUPO key enables Wake-on-LAN from S5 state, and for mapping all 297 SMC keys on Mac Mini 5,1. Reviewed by: ngie, adrian, markj Differential Revision: https://reviews.freebsd.org/D54441 (cherry picked from commit 3e27114a7f961aac49d75a663a55332375d0bef3) M share/man/man4/asmc.4 M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h _____________________________________________________________________________________________________________ Commit: 8c39d9f752398976e156c4c38997ccf29d9d24c4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8c39d9f752398976e156c4c38997ccf29d9d24c4 Author: Vladimir Kondratyev (Sun 29 Mar 2026 20:00:59 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:45 BST) asmc(4): Add support for backlight(9) interface MFC after: 1 month (cherry picked from commit 5d7862fb998f48ba71dac7e34106aaad350db348) M share/man/man4/asmc.4 M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h M sys/modules/asmc/Makefile _____________________________________________________________________________________________________________ Commit: 20f75b486aa903007f77280122b7f5cd655ffcee URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=20f75b486aa903007f77280122b7f5cd655ffcee Author: Vladimir Kondratyev (Sun 29 Mar 2026 20:00:59 BST) Committer: Enji Cooper (Sun 6 Sep 2026 00:31:45 BST) asmc(4): Add PnP record To load asmc(4) automagically on boot with devd(8). MFC after: 1 month (cherry picked from commit 056e29070f083ac4cea31ac0a08619add6370839) M sys/dev/asmc/asmc.c _____________________________________________________________________________________________________________ Commit: b88d20eb024110e563352ad2beb83817ed1f08bc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b88d20eb024110e563352ad2beb83817ed1f08bc Author: Kevin Bowling (Sat 22 Aug 2026 04:14:37 BST) Committer: Kevin Bowling (Sat 5 Sep 2026 01:31:07 BST) pci: Expose a VF's owning PF to bus subclasses ofw_pcibus now uses pci_iov_get_pf() to inherit PF locality for VFs, but the accessor was inadvertently left in an uncommited ACPI change. This breaks powerpc builds. Expose the accessor from the PCI core and provide a stub when PCI_IOV is omitted. Record VF ownership before pci_add_child() so child added callbacks can safely query it, and remove the later redundant assignment. Sponsored by: BBOX.io (cherry picked from commit 3481a9cdc4dc26ef583bb0f46a04d5d059cde466) M sys/dev/pci/pci.c M sys/dev/pci/pci_iov.c M sys/dev/pci/pci_private.h _____________________________________________________________________________________________________________ Commit: 7e2631981e2465e44d992ca115b468cda1be7221 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7e2631981e2465e44d992ca115b468cda1be7221 Author: Kevin Bowling (Sat 22 Aug 2026 02:24:28 BST) Committer: Kevin Bowling (Sat 5 Sep 2026 01:30:48 BST) e1000: Limit the TSO sentinel to lem(4) controllers The TSO workaround splits the final DMA segment to create a four byte sentinel descriptor. Intel documents the premature descriptor writeback erratum and this workaround in the 82540EP and 82545GM specification updates (erratum 3) and the 82546GB specification update (erratum 1). Limit the workaround and its preceding TSO state to the legacy PCI and PCI-X controllers so PCIe controllers retain their natural descriptor layout using one fewer descriptor per TSO packet, no split of the final segment, and one less four byte DMA. Sponsored by: BBOX.io (cherry picked from commit 2a7af8ebcf90af83f01f9523b25bfc6e58c7b809) M sys/dev/e1000/em_txrx.c _____________________________________________________________________________________________________________ Commit: ac364c3b368c520930328d3a363f3aa921519b6c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ac364c3b368c520930328d3a363f3aa921519b6c Author: Kevin Bowling (Fri 21 Aug 2026 04:08:13 BST) Committer: Kevin Bowling (Sat 5 Sep 2026 01:30:37 BST) ofw_pcibus: Honor device proximity for DMA tags BUS_GET_DOMAIN can report a PCI function's firmware locality, including an SR-IOV VF's inherited PF locality, but ordinary OFW PCI functions still use the shared bus DMA tag. Consequently, busdma metadata and coherent memory can be allocated from the bus's domain instead of the function's domain. Create and cache a child tag for each function that requests a DMA tag and apply its reported domain without modifying the shared parent tag. Apply the same domain to the private IOMMU tag already created by the pSeries PCI bus. Destroy cached tags when PCI children are removed so VF create and destroy cycles do not leak them. Reviewed by: PowerPC (jhibbits) Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59065 (cherry picked from commit df6bbc9b17dcb75e220b9ab44f5a6483b47c562e) M sys/powerpc/ofw/ofw_pcibus.c M sys/powerpc/pseries/plpar_pcibus.c _____________________________________________________________________________________________________________ Commit: c58ec93eee8d5300959b84525b82c76826b586e0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c58ec93eee8d5300959b84525b82c76826b586e0 Author: Kevin Bowling (Fri 21 Aug 2026 03:45:33 BST) Committer: Kevin Bowling (Sat 5 Sep 2026 01:30:27 BST) ofw_pcibus: Inherit PF locality for SR-IOV VFs PCI VFs are allocated dynamically and have no corresponding OFW node. The zero-filled OFW PCI devinfo currently leaves obd_node as 0, which is not the invalid-node sentinel and can send NUMA lookup through an unrelated firmware node. Initialize dynamically allocated devinfo with an invalid OFW node. For VF locality queries, use the owning PF's node when it exists. Fall back to the PCI bus when neither the VF nor PF has a firmware node. This preserves existing CPU-locality behavior for ordinary PCI devices while making VF domain and interrupt placement follow their PF. Reviewed by: PowerPC (jhibbits) Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D59064 (cherry picked from commit f003e86335c9c16c6769ef8f0c091d425dba7ef9) M sys/powerpc/ofw/ofw_pcibus.c _____________________________________________________________________________________________________________ Commit: f656bde0c2efd016f1c5d1f22460d657e73a7eb5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f656bde0c2efd016f1c5d1f22460d657e73a7eb5 Author: ShengYi Hung (Mon 24 Aug 2026 18:51:41 BST) Committer: Kyle Evans (Fri 4 Sep 2026 18:56:23 BST) xhci: Only reset the data toggle value when the USB stack asks for it The previous patch assumes that we don't want to reset toggle bit in STOPPED_STEP. However, a device can explicitly call usbd_clear_data_toggle if necessary. As a result, instead of not dropping the bit unconditionally, we added a field in xhci to specify that we want to drop it, so that usbd_clear_data_toggle can handle it correctly. Reported by: oh Reviewed by: kevans Tested by: oh Fixes: 28d85db46b48 ("xhci: Do not drop and add bits in xhci") (cherry picked from commit 0f59df83869d3734a33d96b01381823e6a3ef3ff) M sys/dev/usb/controller/xhci.c M sys/dev/usb/controller/xhci.h _____________________________________________________________________________________________________________ Commit: dc052bc25986f86975b1642e663caf8dd85cd61e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dc052bc25986f86975b1642e663caf8dd85cd61e Author: Etienne Bonnand (Thu 18 Jun 2026 17:37:31 BST) Committer: Kyle Evans (Fri 4 Sep 2026 16:40:00 BST) stand: set st_dev/st_ino in the loader's ZFS stat for veriexec The loader's ZFS implementation never set st_dev or st_ino in zfs_dnode_stat(). With an uninitialized struct stat, veriexec's device comparison in lib/libsecureboot/veopen.c read stack garbage and skipped the matching manifest entry, failing with a spurious "no entry" on ZFS root under UEFI Secure Boot. Rather than zeroing the device (which would break veriexec's ability to tell apart the same path on different datasets), populate st_dev and st_ino with the same intrinsic identifiers the kernel uses: - st_dev = the dataset's ds_fsid_guid (as the kernel does via dmu_objset_fsid_guid()/dsl_dataset_fsid_guid()), already read in zfs_mount_dataset() and now propagated through struct zfsmount. - st_ino = the object number resolved in zfs_lookup(), propagated through struct file (the loader's equivalent of the kernel's z_id). dev_t and ino_t are 64-bit on FreeBSD, so both are assigned directly with no hashing. A memset() at the top of zfs_dnode_stat() zeroes the remaining fields so they no longer hold stack garbage. Tested on 16.0-CURRENT (amd64), ZFS-on-GELI root: rebuilt and re-signed the EFI loader; the system boots under UEFI Secure Boot with mac_veriexec active. (boot1 segment was modified by kevans) PR: 295935 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295935 ) Sponsored by: Defenso Reviewed-by: kevans Pull-Request: https://github.com/freebsd/freebsd-src/pull/2271 (cherry picked from commit b567434a592e1a35b20c5a39c4ccc2ea9e00601d) M stand/efi/boot1/zfs_module.c M stand/libsa/zfs/zfs.c M stand/libsa/zfs/zfsimpl.c _____________________________________________________________________________________________________________ Commit: 4337e2bd5f895d945f87a364e341c613e47c5cf9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4337e2bd5f895d945f87a364e341c613e47c5cf9 Author: Kyle Evans (Tue 11 Aug 2026 02:26:47 BST) Committer: Kyle Evans (Fri 4 Sep 2026 16:39:57 BST) usb: xhci: allow up to 1s for SET_ADDRESS Some devices take a little longer, and the spec doesn't really seem to mandate a maximum. The common path in usbd_req_set_address() has already been bumped to 1s and I have a headset (Logitech H390) that does need a little bit longer, so let's match it in xhci. Reviewed by: aokblast (cherry picked from commit 135df778543123a7dea08553c78da1b51a6b3098) M sys/dev/usb/controller/xhci.c _____________________________________________________________________________________________________________ Commit: 7399eb45406874f35e736f105d7d6ff0516c7a2e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7399eb45406874f35e736f105d7d6ff0516c7a2e Author: Kyle Evans (Sat 8 Aug 2026 05:06:33 BST) Committer: Kyle Evans (Fri 4 Sep 2026 16:39:55 BST) kern: fix oversight in security.bsd.unprivileged_kenv_read It was intended that one could close the hole back in loader, but the sysctl was actually not marked TUNABLE. The hardening menu option thus did nothing, because we wouldn't read the value from kenv. Reported by: markj Fixes: 6e81fbf5833d ("bsdinstall: add a hardening knob [...]") Fixes: 4fd518fcb2bb ("kern: add a security knob to disable [...]") (cherry picked from commit 8befc9e8b194d874d00239568584552279bebddd) M sys/kern/kern_environment.c _____________________________________________________________________________________________________________ Commit: 1cfebc97445cdc72e1a01236c92732042205146e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1cfebc97445cdc72e1a01236c92732042205146e Author: Kyle Evans (Fri 7 Aug 2026 02:54:04 BST) Committer: Kyle Evans (Fri 4 Sep 2026 16:39:52 BST) prometheus_sysctl_exporter: don't abort on bad labels We can probaby consider these kernel bugs, in which case asserting is not the most helpful thing we can do. Let's emit the necessary details to stderr and exit non-zero to aid debugging these without completely blocking the ability to export all of the well-formed metrics. Reviewed by: rew (cherry picked from commit 4f42ec2f38ee4a4eba8f3298e7968f0523f87aa0) M usr.sbin/prometheus_sysctl_exporter/prometheus_sysctl_exporter.8 M usr.sbin/prometheus_sysctl_exporter/prometheus_sysctl_exporter.c _____________________________________________________________________________________________________________ Commit: b8370f520dbaa652c4592e02f8f7840db44e95e1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b8370f520dbaa652c4592e02f8f7840db44e95e1 Author: Kyle Evans (Fri 7 Aug 2026 00:41:43 BST) Committer: Kyle Evans (Fri 4 Sep 2026 16:39:47 BST) bsdinstall: add a hardening knob for unprivileged kenv access It makes sense. Reviewed by: zleei (cherry picked from commit 6e81fbf5833d43529fd8a253b592af9666b04e8e) M usr.sbin/bsdinstall/scripts/hardening _____________________________________________________________________________________________________________ Commit: c4df3e37784ebc5a0e4095f401aff80dc0a6e5fa URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c4df3e37784ebc5a0e4095f401aff80dc0a6e5fa Author: Enji Cooper (Thu 16 Jul 2026 22:48:37 BST) Committer: Enji Cooper (Fri 4 Sep 2026 07:03:15 BST) libproc: link against libctf if MK_CTF != no instead of MK_CDDL != no Logic prior to this change would incorrectly try linking when MK_CDDL != no, instead of MK_CTF != no, which could result in the library and the tests being broken if/when MK_CTF == no and MK_CDDL != no (an uncommon, but possible combination with today's build knobs). This change updates the conditional to correctly track the value of MK_CTF, which in turn is properly toggled to no if/when MK_CDDL == no as it's a dependent build knob. This [niche] build bug has been present in FreeBSD since 2014. MFC after: 1 week (cherry picked from commit f2e6a8b9e50c7552037cb635f17b955ead84a813) M lib/libproc/Makefile M share/mk/src.libnames.mk _____________________________________________________________________________________________________________ Commit: b82d5062426dca5887d656ce729603b9626160f6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b82d5062426dca5887d656ce729603b9626160f6 Author: Enji Cooper (Thu 16 Jul 2026 17:24:54 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:57:58 BST) rc.d/dumpon: minor hardening/tightening up - Scope local variables properly to each function. - Quote variables that should be treated as single words. - Replace `${cmd}; if [ $? -eq 0 ]` with `if ${cmd}` for simplicity. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D57899 (cherry picked from commit fc186c24b1e72fa3eba91c166f7a554a5cea5828) M libexec/rc/rc.d/dumpon _____________________________________________________________________________________________________________ Commit: bb0300c6ff4683e6f330c9ffa39c8753df0c3bee URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bb0300c6ff4683e6f330c9ffa39c8753df0c3bee Author: Enji Cooper (Tue 21 Jul 2026 17:08:44 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:56:38 BST) linux_firmware: reformat error print-out This makes it easier to grep for the error message to better understand the call stack when loading firmware modules fails. Fix a cosmetic-only style(9) bug while here in the same function related to another logging message. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D58380 (cherry picked from commit a594783bac906ecc4f6528d7d576215f85a21bda) M sys/compat/linuxkpi/common/src/linux_firmware.c _____________________________________________________________________________________________________________ Commit: 10d1f60a2641c52bf665214330b224b445260302 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=10d1f60a2641c52bf665214330b224b445260302 Author: Enji Cooper (Sat 25 Jul 2026 17:51:53 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:55:33 BST) [test] libatexit: leverage __{BEGIN,END}_DECLS This change converts the longhand form of `extern "C" {` and its corresponding `}` into `__BEGIN_DECLS` and `__END_DECLS`, respectively. The new form is much easier to grep for and is a best practice to use in the FreeBSD tree. This is meant to be a non-functional change. MFC after: 1 week (cherry picked from commit bc81728c00b200297ac556974b5373c804077a17) M lib/libc/tests/stdlib/libatexit/libatexit.cc _____________________________________________________________________________________________________________ Commit: e89277923bc402f093ede1e9c09c4ba676da499f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e89277923bc402f093ede1e9c09c4ba676da499f Author: Enji Cooper (Sun 9 Aug 2026 06:31:20 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:53:57 BST) cpuset(9): correct markup - Remove `\(em` from .Nm section as it's not valid mandoc markup. - Remove the section from the .Nm directive (it's handled under the .Dt directive). MFC after: 1 week Reported by: make manlint (cherry picked from commit 5007a5d682d3737fe9b49c4cd69e04d025d209ec) M share/man/man9/cpuset.9 _____________________________________________________________________________________________________________ Commit: fb608899416b5e6dc682c541339d881fe9d6b5f0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fb608899416b5e6dc682c541339d881fe9d6b5f0 Author: Enji Cooper (Sun 9 Aug 2026 06:28:35 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:53:34 BST) DB_COMMAND(9): correct mdoc markup for .Nm entries Add missing commas after .Nm entries. MFC after: 1 week Reported by: make manlint (cherry picked from commit b96a063f61001e60ac282eb3500e703c7c3faf9c) M share/man/man9/DB_COMMAND.9 _____________________________________________________________________________________________________________ Commit: 73641670314e1c9f1ecb7abf307f611f016b424f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=73641670314e1c9f1ecb7abf307f611f016b424f Author: Enji Cooper (Sun 9 Aug 2026 06:04:15 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:48:23 BST) alq(9): add missing .Nm entry for ALQ(9) MFC after: 1 week Reported by: make manlint (cherry picked from commit 4fa245edc7ad426ebde7a316191b579e62fe795f) M share/man/man9/alq.9 _____________________________________________________________________________________________________________ Commit: b853bac8e610176641d78cbbb117b341f7fb78b2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b853bac8e610176641d78cbbb117b341f7fb78b2 Author: Enji Cooper (Mon 10 Aug 2026 00:20:46 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:45:19 BST) acl(9): fix typo (ACL_ACL -> ACL) MFC after: 1 week (cherry picked from commit 9fd963b0a149357b6fbc16ef0b999e6b487e513a) M share/man/man9/acl.9 _____________________________________________________________________________________________________________ Commit: b7a2b3d27bd6872f3c3590e937434d8727eac32d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b7a2b3d27bd6872f3c3590e937434d8727eac32d Author: Enji Cooper (Sun 9 Aug 2026 06:02:13 BST) Committer: Enji Cooper (Fri 4 Sep 2026 06:42:28 BST) atomic(9): add missing .Nm entries MFC after: 1 week Reported by: make manlint (cherry picked from commit 8eced03c369a6f8aad0013604f790bafd4526848) M share/man/man9/atomic.9 _____________________________________________________________________________________________________________ Commit: 26164de409a0ea1f6f31fbcdf3fef628d13f02e1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=26164de409a0ea1f6f31fbcdf3fef628d13f02e1 Author: Pouria Mousavizadeh Tehrani (Sat 22 Aug 2026 21:37:58 BST) Committer: Pouria Mousavizadeh Tehrani (Fri 4 Sep 2026 00:02:32 BST) route/fib_algo: Free leaked radix_masks in radix_lockless radix_lockless algorithm creates its own radix tree and allocates its own radix_masks by directly calling rnh_addaddr(). However, during destruction, it only frees the radix_tree without freeing its allocated radix_masks. Fix the leak by calling rn_delete() during radix_destroy(). PR: 297339 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297339 ) Reviewed by: melifaro MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D59112 (cherry picked from commit 790817f5a7a640c9ceb5c2ad99135f1a69aeb77d) M sys/netinet/in_fib_algo.c M sys/netinet6/in6_fib_algo.c _____________________________________________________________________________________________________________ Commit: 70b70acec7797961e6c6a8810b8fac4ca3dddd30 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=70b70acec7797961e6c6a8810b8fac4ca3dddd30 Author: Kristof Provost (Wed 26 Aug 2026 15:52:07 BST) Committer: Kristof Provost (Thu 3 Sep 2026 15:03:15 BST) pfctl: fix printing of wildcard anchors PR: 297839 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297839 ) MFC after: 1 week Obtained from: OpenBSD, henning , 5b6657d4d8 Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 5de5140f06959f2724c626c7fab3e1c9187beefb) M sbin/pfctl/pfctl.c M tests/sys/netpfil/pf/anchor.sh _____________________________________________________________________________________________________________ Commit: 4d83686bc38780405459b45819e9f6482dcd335c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4d83686bc38780405459b45819e9f6482dcd335c Author: Glen Barber (Thu 3 Sep 2026 08:51:28 BST) Committer: Dag-Erling Smørgrav (Thu 3 Sep 2026 12:56:44 BST) hastd: Fix crash on empty message A HAST message can be empty, in which case ebuf_add_tail() does nothing and ebuf_data() returns NULL because the size of the ebuf is zero, but hast_proto_recv_hdr() asserts that the return value is not NULL, resulting in an immediate crash if hastctl or hastd receive an empty message. This is trivially reproducable by running `hastctl status` or `hastctl role init` (as the rc script does prior to stopping hastd). To avoid this, don't try to grow the ebuf or receive additional data if the header size is zero. PR: 298085 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298085 ) MFC after: 3 days Reviewed by: kevans, gjb Differential Revision: https://reviews.freebsd.org/D59306 (cherry picked from commit 8646d65b45339642d4aab1de35a2bc79fc45f09e) M sbin/hastd/hast_proto.c _____________________________________________________________________________________________________________ Commit: 6c8a50c9196d0d81550fe4ce755f8ff900137e10 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6c8a50c9196d0d81550fe4ce755f8ff900137e10 Author: Dag-Erling Smørgrav (Tue 1 Sep 2026 13:49:24 BST) Committer: Dag-Erling Smørgrav (Thu 3 Sep 2026 12:56:44 BST) various: Fix nlist invocations Fix nlist(3) consumers that either expected our toolchain to prepend an underscore to symbol names or expected nlist(3) to ignore the mismatch, as it did until we overhauled it back in May. While here, also fix cases where the last element in the list had an empty string instead of NULL as sentinel. MFC after: 3 days Fixes: 4617a6cb82a6 ("nlist: Handle multiple symbol tables") Reviewed by: kib, jhb Differential Revision: https://reviews.freebsd.org/D59254 (cherry picked from commit cdfc673811aca2c6690f37bde9ef4896ea2e1d6b) M lib/libkvm/kvm_amd64.c M lib/libkvm/kvm_cptime.c M lib/libkvm/kvm_getloadavg.c M lib/libkvm/kvm_getswapinfo.c M lib/libkvm/kvm_i386.c M lib/libkvm/kvm_pcpu.c M lib/libkvm/kvm_proc.c M lib/libkvm/kvm_vnet.c M lib/libmemstat/memstat_malloc.c M lib/libmemstat/memstat_uma.c M sbin/ddb/ddb_capture.c M usr.bin/ktrdump/ktrdump.c M usr.bin/netstat/Makefile M usr.bin/netstat/nlist_symbols M usr.bin/vmstat/vmstat.c M usr.sbin/iostat/iostat.c M usr.sbin/pstat/pstat.c _____________________________________________________________________________________________________________ Commit: 6e94e0734b9d3036df8c7d94d827f8eb1119905b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6e94e0734b9d3036df8c7d94d827f8eb1119905b Author: Mark Johnston (Tue 1 Sep 2026 17:07:09 BST) Committer: Mark Johnston (Wed 2 Sep 2026 18:40:15 BST) devstat: Fix a kernel stack disclosure The 16-byte "device_name" field was not zero-filled, so could contain uninitialized stack data. Zero the whole struct, as that's the prevailing pattern for this kind of conversion code, and it's more robust in the face of future revisions to struct devstat. Reviewed by: olce, kib Reported by: Reo Shiseki Fixes: a11d132f6c62 ("devstat: Provide 32-bit compatibility") MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59309 (cherry picked from commit 7cb1a76f88158fb690418336b736e66c238cd4f7) M sys/kern/subr_devstat.c _____________________________________________________________________________________________________________ Commit: b1f63c6ab7df2f2f9febcd72e6af2e80fcc55197 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b1f63c6ab7df2f2f9febcd72e6af2e80fcc55197 Author: Cy Schubert (Wed 11 Feb 2026 19:30:38 GMT) Committer: Cy Schubert (Wed 2 Sep 2026 15:13:42 BST) ipfilter: Avoid negative array indicies Array indices must always be posive. We avoid this by making each index unsigned. This mitigates out-of-bounds reads and writes. Reported by: Ilja Van Sprundel Reviewed by: glebius Differential revision: https://reviews.freebsd.org/D55260 (cherry picked from commit 3fdbd8a07a2dcb8fe3cec19fc59ef064453e4755) M sys/netpfil/ipfilter/netinet/fil.c M sys/netpfil/ipfilter/netinet/ip_fil.h M sys/netpfil/ipfilter/netinet/ip_state.c _____________________________________________________________________________________________________________ Commit: 67854972ffdea86df09ec2720cb3557d70819c9e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=67854972ffdea86df09ec2720cb3557d70819c9e Author: Ed Maste (Tue 18 Nov 2025 13:21:03 GMT) Committer: Ed Maste (Tue 1 Sep 2026 15:18:06 BST) diff3: Use a format string to quiet a compiler warning And bump WARNS to 2 (cherry picked from commit fd52a9becc62f721ad6a61c7301559afaedee010) (cherry picked from commit 61c2141f50e689f835d0f2c15a98930c66ec917c) M contrib/diff/src/diff3.c M gnu/usr.bin/diff3/Makefile _____________________________________________________________________________________________________________ Commit: 12c799e0268c52efa5cb2b5fcb90a32f8d622fa9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=12c799e0268c52efa5cb2b5fcb90a32f8d622fa9 Author: Krzysztof Galazka (Mon 17 Aug 2026 16:46:39 BST) Committer: Krzysztof Galazka (Tue 1 Sep 2026 10:20:39 BST) ice(4): Add two more 4-part IDs for E835 adapters Two additional subdevice IDs were introduced to distinguish between adapters with and without manageability over USB support. Signed-off-by: Krzysztof Galazka Reviewed by: erj Tested by: Mateusz Moga Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D57337 (cherry picked from commit f370d9e4d5844daa06d77e57236e03bd7c5f4ba1) M sys/dev/ice/ice_drv_info.h _____________________________________________________________________________________________________________ Commit: e0954f7967576149677a4585c28bd033815f41cf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e0954f7967576149677a4585c28bd033815f41cf Author: Sobczyk, Pawel (Tue 18 Aug 2026 09:10:54 BST) Committer: Krzysztof Galazka (Tue 1 Sep 2026 10:20:25 BST) ix(4): Sanitize negative error codes Due to development history FreeBSD driver error codes are reported the same way as in Linux (as negatives) which is inconsistent with FreeBSD standard. It may cause unexpected behavior when driver errors are interpreted by a kernel as syscall handler return values. This patch converts error codes from negative to positive values for NVM access functions. Signed-off-by: Pawel Sobczyk Reviewed by: kbowling, erj, milosz.linkiewicz_intel.com Tested by: Mateusz Moga Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D57642 (cherry picked from commit 33e2eac3e3e738daa95a06f42d6c661b87ad9aac) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 05ef2394a1938bc5bad83464ff41976a5de29f57 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=05ef2394a1938bc5bad83464ff41976a5de29f57 Author: Krzysztof Galazka (Mon 17 Aug 2026 10:17:46 BST) Committer: Krzysztof Galazka (Tue 1 Sep 2026 10:19:58 BST) ix(4): Remove workaround for 2.5/5G speeds on E610 The problem observed on X550 adapters with 2.5 and 5 Gbps speeds negotiation on some switches is not affecting E610 adapters. Remove workaround, which omitted those speeds in the list of initially advertised speeds and advertise all speeds supported by adapter. Signed-off-by: Krzysztof Galazka Reviewed by: kbowling Tested by: Mateusz Moga Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D57339 (cherry picked from commit 62d5d119ee7d935ac05966f1c7c4333c33c4f3a9) M sys/dev/ixgbe/ixgbe_e610.c _____________________________________________________________________________________________________________ Commit: 094c5673be99605abb1779af259edb7ba9406da8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=094c5673be99605abb1779af259edb7ba9406da8 Author: Kevin Bowling (Tue 18 Aug 2026 01:33:46 BST) Committer: Kevin Bowling (Tue 1 Sep 2026 01:29:15 BST) bnxt(4): Cross-reference led(4) Point the identification LED documentation to led(4), which describes how to control /dev/led device nodes. Sponsored by: BBOX.io (cherry picked from commit af069400a8ea514c8e55f123cae478aee65e04d5) M share/man/man4/bnxt.4 _____________________________________________________________________________________________________________ Commit: 5ef98cb7a74b0dc5d23fee22fbb6ff3d19fc1c9b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5ef98cb7a74b0dc5d23fee22fbb6ff3d19fc1c9b Author: Jose Luis Duran (Tue 25 Aug 2026 18:27:28 BST) Committer: Jose Luis Duran (Mon 31 Aug 2026 18:30:42 BST) openssh: Fix shosts.equiv path in manual pages Change the path for the shosts.equiv file to consistently reflect /etc/ssh/shosts.equiv across all manual pages. This change stems from 35d4ccfb5576 ("Document FreeBSD defaults and paths.") Reviewed by: bcr, emaste Differential Revision: https://reviews.freebsd.org/D52203 (cherry picked from commit 336cc041a492b03fde96fd89915ae694cf31b551) M crypto/openssh/ssh.1 M crypto/openssh/sshd.8 _____________________________________________________________________________________________________________ Commit: 65e155b918f9a46a4160242a1a9d83c0d9e017d7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=65e155b918f9a46a4160242a1a9d83c0d9e017d7 Author: Jose Luis Duran (Mon 24 Aug 2026 21:45:50 BST) Committer: Jose Luis Duran (Mon 31 Aug 2026 18:30:24 BST) ministat.1: Match actual output Fix a documentation discrepancy, where the implementation was updated to use uncertainty propagation for the ratio of means, but the example output in the manual page was left unchanged. Update the manual page example from 70.7384% to 102.3% to reflect the actual output. While here, also update the example in the README. Reviewed by: ziaee Fixes: a304ad90e9ae ("Reduce the bogosity of ministat's % difference calculations.") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D59157 (cherry picked from commit 595e665cb292a70f9d17b779c8ad0470ff3e3964) M usr.bin/ministat/README M usr.bin/ministat/ministat.1 _____________________________________________________________________________________________________________ Commit: 91eff108cd3e57f32c35e10d372eaa6afdc571e7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=91eff108cd3e57f32c35e10d372eaa6afdc571e7 Author: Cy Schubert (Sun 16 Aug 2026 04:24:45 BST) Committer: Cy Schubert (Mon 31 Aug 2026 17:35:32 BST) sqlite3: Vendor import of sqlite3 3.53.3 Release notes at https://www.sqlite.org/releaselog/3_53_3.html. Obtained from: https://www.sqlite.org/2026/sqlite-autoconf-3530300.tar.gz MFC after: 2 weeks Merge commit 'e698feec080925c6cffa9ec31be884daa5cea536' (cherry picked from commit 14e3daa72db7d6410877481a4ed2791603e2b99f) M contrib/sqlite3/VERSION M contrib/sqlite3/autosetup/sqlite-config.tcl M contrib/sqlite3/shell.c M contrib/sqlite3/sqlite3.c M contrib/sqlite3/sqlite3.h M contrib/sqlite3/sqlite3rc.h _____________________________________________________________________________________________________________ Commit: d461550fc2c08ee7706e0ca022ded84731e2ea8e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d461550fc2c08ee7706e0ca022ded84731e2ea8e Author: Cy Schubert (Mon 25 May 2026 18:19:28 BST) Committer: Cy Schubert (Mon 31 Aug 2026 17:35:31 BST) sqlite3: Vendor import of sqlite3 3.53.1 Release notes at https://www.sqlite.org/releaselog/3_53_1.html. Obtained from: https://www.sqlite.org/2026/sqlite-autoconf-3530100.tar.g Merge commit 'b00eb376e3fb28e738f9370552dae9d92c1fdd76' into sqlite3 (cherry picked from commit 5b8f59e648431715e8f5f60ef09c0be4508b3ae6) M contrib/sqlite3/Makefile.in M contrib/sqlite3/Makefile.msc M contrib/sqlite3/VERSION M contrib/sqlite3/autosetup/README.md M contrib/sqlite3/autosetup/autosetup M contrib/sqlite3/autosetup/cc-shared.tcl M contrib/sqlite3/autosetup/jimsh0.c M contrib/sqlite3/autosetup/proj.tcl M contrib/sqlite3/autosetup/sqlite-config.tcl M contrib/sqlite3/autosetup/teaish/core.tcl M contrib/sqlite3/autosetup/teaish/tester.tcl A contrib/sqlite3/make.bat M contrib/sqlite3/shell.c M contrib/sqlite3/sqlite3.1 M contrib/sqlite3/sqlite3.c M contrib/sqlite3/sqlite3.h M contrib/sqlite3/sqlite3ext.h M contrib/sqlite3/sqlite3rc.h M contrib/sqlite3/tea/Makefile.in M contrib/sqlite3/tea/README.txt M contrib/sqlite3/tea/_teaish.tester.tcl.in M contrib/sqlite3/tea/configure D contrib/sqlite3/tea/doc/sqlite3.n M contrib/sqlite3/tea/generic/tclsqlite3.c M contrib/sqlite3/tea/teaish.tcl _____________________________________________________________________________________________________________ Commit: 454fabe4d43bc9a86dcf9b9262b1bc755004a4b8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=454fabe4d43bc9a86dcf9b9262b1bc755004a4b8 Author: Kevin Bowling (Sun 9 Aug 2026 09:35:58 BST) Committer: Kevin Bowling (Sun 30 Aug 2026 02:12:12 BST) ixgbe: Add missing mailbox API 1.6 definition The SR-IOV status change reports mailbox API 1.6 but omitted its enum definition, leaving main unable to compile. API 1.6 is an established ixgbe mailbox wire revision. Add it at the end of the revision enum, before the unknown sentinel as required by the stable numbering contract. Naming the revision does not enable negotiation or operations which will come with the E610 support. Reported by: Herbert J. Skuhra (cherry picked from commit 6a1703c112ff2904feb39288f0746c8f0a04f938) M sys/dev/ixgbe/ixgbe_mbx.h _____________________________________________________________________________________________________________ Commit: 62fb72bae6ba161d03ee5b5a8f8e689fa1355b3f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=62fb72bae6ba161d03ee5b5a8f8e689fa1355b3f Author: Kevin Bowling (Sun 16 Aug 2026 02:36:41 BST) Committer: Kevin Bowling (Sun 30 Aug 2026 01:30:22 BST) ixv(4): Add a manual page Document supported virtual-function families, driver features, queue negotiation, PF-controlled policy, and media limitations. Sponsored by: BBOX.io (cherry picked from commit 1391e272de36f7aae2c800d96cc06762553d5027) M share/man/man4/Makefile A share/man/man4/ixv.4 _____________________________________________________________________________________________________________ Commit: ffb83a7eafde5a00de6e6a0d222510018bde7d95 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ffb83a7eafde5a00de6e6a0d222510018bde7d95 Author: Kevin Bowling (Mon 10 Aug 2026 16:55:41 BST) Committer: Kevin Bowling (Sun 30 Aug 2026 01:30:12 BST) ixgbe: Enable per-pool RSS on X550 family devices X550 family devices provide a separate RSS key, redirection table, and MRQC register for every VMDq pool. With SR-IOV enabled, the driver continued programming only the global RSS state and never selected MRQC.MULTIPLE_RSS. VF-local RSS programming was therefore ineffective. Enable multiple-RSS mode for X550, X552, X553, and E610. Initialize the PF pool's 64-entry key, redirection table, and RSS hash controls. Leave each VF pool untouched so its driver retains ownership of its RSS key and mapping. E610 folds IPv6 extension-header traffic into its base RSS selectors and reserves the legacy EX selector bits. Translate those requested hash types rather than programming reserved bits. With two E610 VFs active and four PF queue sets, eight fixed TCP flows distributed across all four PF receive queues. E610 uses the same per-pool mode according to the E610 Datasheet, sections 7.1.3.6.2 and 8.2.2.8.20-21. Sponsored by: Dirk-Willem van Gulik from Web Weaving (E610 hardware) Sponsored by: BBOX.io (cherry picked from commit 87406f8351664aa444851499cda83b00fdc07662) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 8d39b5c4517e8d6199cea8a906bafef7ba8b671f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8d39b5c4517e8d6199cea8a906bafef7ba8b671f Author: Kevin Bowling (Mon 10 Aug 2026 16:12:24 BST) Committer: Kevin Bowling (Sun 30 Aug 2026 01:30:01 BST) ixv: Preserve statistics across resets The VF statistics registers are free running and are not cleared on read. The existing code records attach time bases and pre-reset totals, but never uses either when publishing counters. It instead replaces the low hardware bits directly, so counters can inherit pre-attach traffic or jump backward after a reset. Accumulate modular 32- and 36-bit deltas, following DPDK, while keeping the software totals across planned resets. Establish a fresh hardware baseline after each successful reset and invalidate the sampling epoch when mailbox state is lost. Detect unsolicited PF resets explicitly so a reset while link is down cannot be mistaken for counter wrap. Remove the unused base and saved-reset bookkeeping. On E610, packet and octet counters remained monotonic across a VF FLR and a PF down/up cycle. Traffic after each reset advanced both RX and TX counters. Sponsored by: BBOX.io (cherry picked from commit cb85c4397bb3f57e60ab20c239b9339c4b752412) M sys/dev/ixgbe/if_ixv.c M sys/dev/ixgbe/ixgbe_vf.h _____________________________________________________________________________________________________________ Commit: 09a1acfcf150e02ab7a3bfc25bec4dea62fce24b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=09a1acfcf150e02ab7a3bfc25bec4dea62fce24b Author: Kevin Bowling (Sat 1 Aug 2026 03:47:11 BST) Committer: Kevin Bowling (Sun 30 Aug 2026 01:29:51 BST) ixgbe: Enable SR-IOV on E610 PFs E610 inherits the X550-family virtualization registers, anti-spoofing controls, and malicious-driver operations, but the frontend does not advertise SR-IOV and cannot negotiate the mailbox revision needed by E610 VFs. Initialize the X550-family PF/VF mailbox registers for E610 and use PFVFLREC for its VF reset events, following DPDK shared ixgbe code. Advertise the E610 SR-IOV capability, accept API 1.6 only on E610, carry the existing xcast and queue operations forward to that revision, and return the cached physical link speed and state with the three-dword E610 operation. Unsupported RSS and optional feature requests continue to receive explicit failures. SR-IOV activation also enables the existing X550-derived per-pool MDD recovery path on E610. Document the expanded protection and link-state coverage. Hardware validation created 63 VFs and rejected a 64th without flapping the running PF. Invalid TX and RX descriptor DMA independently asserted the offender's WQBR bit, gated only that VF, preserved sibling traffic, and recovered after the VF reset. FreeBSD ixv, FreeBSD DPDK, Linux ixgbevf, and Linux DPDK exercised the PF mailbox and data paths. Relnotes: yes Sponsored by: Dirk-Willem van Gulik from Web Weaving (E610 hardware) Sponsored by: BBOX.io (cherry picked from commit df02513fd44bcede0aa8833ae5c2af826f63ce10) M share/man/man4/ix.4 M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe_mbx.c M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: b36753db40ca462a1847e5ba7bc76fd3ee3e240e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b36753db40ca462a1847e5ba7bc76fd3ee3e240e Author: Kevin Bowling (Sat 1 Aug 2026 03:41:56 BST) Committer: Kevin Bowling (Sun 30 Aug 2026 01:29:39 BST) ixv: Support E610 mailbox API 1.6 E610 VFs no longer report the actual PF link state and speed through VFLINKS. They can consequently report the default 10 Gb/s speed even when the physical link uses another rate. Negotiate mailbox API 1.6 on E610 and request the PF link state with its three-dword operation. Retain VFLINKS as the fallback when an older PF rejects API 1.6. Permit API 1.6 in the inherited xcast and queue discovery helpers so negotiating the newer revision does not disable existing operations. Use GET_QUEUES to replace E610's one-queue fallback with the grant from the PF. The common path continues to use one iflib queue set per data MSI-X vector and caps the result at two queue pairs. Preserve mailbox transport errors so the driver can distinguish an explicit PF NACK from a transient timeout. A NACK means clear-to-send state was lost and requires a VF reset. Preserve the last confirmed link state across brief transport failures and publish link down after three consecutive failures. Poll E610 link state every two seconds, matching Intel's ixgbevf service timer, and phase VFs across the intervening iflib timer ticks. This avoids a mailbox polling herd when many VFs share a PF. Media-status queries return the cached state instead of starting another synchronous exchange. An admin interrupt caused by a mailbox reply only checks for an unsolicited PF reset, preventing a request/reply interrupt loop. Hardware validation on an E610 10GBASE-T PF exercised 63 VFs. Each VF negotiated API 1.6, two queue pairs, and three MSI-X vectors. Phased polling kept 31 active VFs idle, and all 63 recovered after a PF down/up cycle without watchdogs. Adapt the API 1.6 link-state operation from DPDK shared ixgbe code. The timeout and NACK distinction follows Intel ixgbevf 5.3.25. Sponsored by: Dirk-Willem van Gulik from Web Weaving (E610 hardware) Sponsored by: BBOX.io (cherry picked from commit 40367d1f3b8ff694ffc3e4bf3278ec2a762648d2) M sys/dev/ixgbe/if_ixv.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_mbx.h M sys/dev/ixgbe/ixgbe_vf.c M sys/dev/ixgbe/ixgbe_vf.h _____________________________________________________________________________________________________________ Commit: 12b31da2a088af258a70596994b323180cbe2801 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=12b31da2a088af258a70596994b323180cbe2801 Author: Kevin Bowling (Sun 16 Aug 2026 00:47:10 BST) Committer: Kevin Bowling (Sun 30 Aug 2026 01:29:29 BST) pci: Export pcie_flr_supported() Move the capability and quirk checks used by pcie_flr() into a public side effect free helper. This lets callers determine whether an FLR can be attempted before quiescing a device or saving state. The helper considers the advertised PCIe FLR capability and both the enable and disable FLR quirks. Sponsored by: BBOX.io (cherry picked from commit 5b48968c1a57bd1a7f086d7e09add59afa158340) M share/man/man9/pci.9 M sys/dev/pci/pci.c M sys/dev/pci/pcivar.h _____________________________________________________________________________________________________________ Commit: 3ccccd8f50f5199b16df79a7f07f2932e4b422f8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3ccccd8f50f5199b16df79a7f07f2932e4b422f8 Author: Kevin Bowling (Wed 12 Aug 2026 02:51:18 BST) Committer: Kevin Bowling (Fri 28 Aug 2026 03:20:57 BST) iflib: Initialize the VFLR task unconditionally The VFLR task was initialized only from drivers MSI-X interrupt assignment paths. ixl's legacy interrupt handler can nevertheless defer VFLR work, leaving an uninitialized task. Even with MSI-X, the admin interrupt was established before the task was initialized. Initialize it alongside the other private tasks. The existing detach check and private-taskqueue drains then cover its lifecycle for every interrupt mode and registration failure. Sponsored by: BBOX.io (cherry picked from commit b4208a67edc2eb7898a9ff2a6f3990c6852910e4) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: 375892c6ab09107e92a781a84f11546ac75ae2f5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=375892c6ab09107e92a781a84f11546ac75ae2f5 Author: Kevin Bowling (Sat 8 Aug 2026 07:18:26 BST) Committer: Kevin Bowling (Fri 28 Aug 2026 03:20:57 BST) iflib: Add an admin task detach fail point Add an exact-device fail point immediately after the admin task checks IFC_IN_DETACH. This makes the detach race reproducible without affecting another interface. Use a bounded delay to keep the task active while detach enters the taskqueue drain. Mark the point nonsleepable as a safety backstop, and document a one-shot test for verifying that deregistration drains an already-running task before ether_ifdetach(). Reviewed by: gallatin, kgalazka Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D58720 (cherry picked from commit ac56d36007a5a1a01fe69df370f272060e852e0b) M share/man/man4/iflib.4 M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: 546e2c0380c48ad0a05db5386fc2952d2fe2f13c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=546e2c0380c48ad0a05db5386fc2952d2fe2f13c Author: Nick Price (Sat 8 Aug 2026 07:17:16 BST) Committer: Kevin Bowling (Fri 28 Aug 2026 03:20:56 BST) iflib: Drain configuration tasks before interface detach iflib_device_deregister() sets IFC_IN_DETACH before removing the interface, but a task which already passed its detach check can still report a link change. This can re-arm if_linktask after ether_ifdetach() has drained it and leave work pending across queue teardown. Drain the entire private taskqueue before ether_ifdetach(). Drivers may register their own link-related configuration tasks there, so draining only the framework admin task leaves the same race for those drivers. Differential Revision: https://reviews.freebsd.org/D58452 Co-authored-by: Andrew Gallatin Co-authored-by: Kevin Bowling (cherry picked from commit ba353c8950d575f9d15b82c92658e660935fba25) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: 794a87c37e05c2d8d8207c3a087a0f21d86a3d46 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=794a87c37e05c2d8d8207c3a087a0f21d86a3d46 Author: Kevin Bowling (Sat 8 Aug 2026 05:33:25 BST) Committer: Kevin Bowling (Fri 28 Aug 2026 03:20:56 BST) iflib: Add registration failure injection points Add six device-scoped fail(9) points at the registration milestones needed to exercise each unwind path. An exact, runtime-only device selector prevents unrelated iflib devices from consuming an armed point. Mark the points non-sleepable because registration holds the ifnet and context locks. Document one-shot operation and bus-address reprobe so a failed attach can be recovered without another kernel build. Reviewed by: gallatin Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D58722 (cherry picked from commit 90e7dbe5e2ca47baff4e4c6d9e892a0554eec4db) M share/man/man4/iflib.4 M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: ead5f246f8827ad32b3c5e03bab14002cc2bff45 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ead5f246f8827ad32b3c5e03bab14002cc2bff45 Author: Kevin Bowling (Sat 8 Aug 2026 05:14:53 BST) Committer: Kevin Bowling (Fri 28 Aug 2026 03:20:56 BST) iflib: Complete registration failure cleanup Pre-attach sysctls contain pointers into the iflib context. Any later registration failure that frees the context must first remove that sysctl tree. Failures after a successful IFDI_ATTACH_PRE also did not consistently call IFDI_DETACH or free the private taskqueue. In particular, routing a taskqueue creation failure through the context cleanup could free the driver softc while resources allocated by attach_pre remained live. Track successful interrupt and queue setup and use one common unwind path. Invoke IFDI_DETACH with IFNET_WLOCK dropped and release only resources whose setup completed. Leave a failed IFDI_ATTACH_PRE to unwind its own partial state, as required by the existing driver contract. A failed post-attach can follow driver registration of an SR-IOV schema. Remove that registration before detaching the interface and driver, matching normal deregistration, so a failed attach cannot leave a stale /dev/iov node or make the next attach report EBUSY. A successful attach_pre can now be followed by detach before driver queue allocation. Make the remaining queue-backed interrupt cleanup paths tolerate absent queue arrays. Mark a failed registration as detaching before draining the entire private taskqueue. Drivers can register configuration tasks there, and taskqueue_drain_all() does not wait for work queued during its drain. Make every current non-admin callback reject detaching contexts so late work cannot touch driver state. Drain tasks and call ether_ifdetach() with neither the ifnet nor context lock held. A callback already running may need either lock, while ether_ifdetach() acquires ifnet_detach_sx. Reacquire IFNET_WLOCK before the context lock to preserve the established lock order. The shared automatic core-offset allocator also lacked acquisition state. Late registration failures leaked its reference, while normal detach could decrement a reference belonging to another device when a configured offset or allocation failure meant that this context never acquired one. Record acquisition explicitly and release only references held. Reviewed by: gallatin Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D58721 (cherry picked from commit fe00ca2f88718c7751b8953cc8ee7fc0dad0bbe1) M sys/dev/bnxt/bnxt_en/if_bnxt.c M sys/dev/enetc/if_enetc.c M sys/dev/igc/if_igc.c M sys/dev/ixgbe/if_sriov.c M sys/dev/vmware/vmxnet3/if_vmx.c M sys/net/iflib.c M sys/net/iflib.h _____________________________________________________________________________________________________________ Commit: 18c03a9df09db380eb77a45d5f654d8af66a60c9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=18c03a9df09db380eb77a45d5f654d8af66a60c9 Author: Sumit Saxena (Mon 13 Apr 2026 07:33:46 BST) Committer: Kevin Bowling (Fri 28 Aug 2026 03:20:51 BST) iflib: drain admin task and fix teardown order on register failure When IFDI_ATTACH_POST() fails (or netmap attach fails), iflib tears down with ether_ifdetach(), taskqueue_free(ifc_tq), and IFDI_DETACH(). CTX_LOCK is still held after ether_ifattach. ether_ifdetach() and taskqueue_drain(admin) must not run under CTX_LOCK. Teardown ordering (match iflib_device_deregister): - Free the per-interface admin taskqueue after IFDI_DETACH / IFDI_QUEUES_FREE, not before. - Drop IFNET_WLOCK() across IFDI_DETACH / IFDI_QUEUES_FREE so driver detach can sleep in LinuxKPI workqueue drain, then retake IFNET_WLOCK() before iflib_free_intr_mem and fail_unlock. Reviewed by: gallatin, kgalazka, #iflib Differential Revision: https://reviews.freebsd.org/D56316 (cherry picked from commit 439132310ae1f623f6c0a3dc241d0a34e98e040b) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: b5fa8911002012f196704fe702a74b58572a311d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b5fa8911002012f196704fe702a74b58572a311d Author: Sreekanth Reddy (Mon 13 Apr 2026 07:28:08 BST) Committer: Kevin Bowling (Fri 28 Aug 2026 03:20:35 BST) iflib: Fix panic observed while doing sysctl -a with if_bnxt unload Observed below kernel panic calltrace while performing sysctl -a operation while unloading the if_bnxt driver, Fatal trap 9: general protection fault while in kernel mode KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe02a7569940 vpanic() at vpanic+0x136/frame 0xfffffe02a7569a70 panic() at panic+0x43/frame 0xfffffe02a7569ad0 trap_fatal() at trap_fatal+0x68/frame 0xfffffe02a7569af0 calltrap() at calltrap+0x8/frame 0xfffffe02a7569af0 trap 0x9, rip = 0xffffffff80c0b411, rsp = 0xfffffe02a7569bc0, rbp = 0xfffffe02a7569be0 --- sysctl_handle_counter_u64() at sysctl_handle_counter_u64+0x61/frame 0xfffffe02a7569be0 sysctl_root_handler_locked() at sysctl_root_handler_locked+0x9c/frame 0xfffffe02a7569c30 sysctl_root() at sysctl_root+0x22f/frame 0xfffffe02a7569cb0 userland_sysctl() at userland_sysctl+0x196/frame 0xfffffe02a7569d50 sys___sysctl() at sys___sysctl+0x65/frame 0xfffffe02a7569e00 amd64_syscall() at amd64_syscall+0x169/frame 0xfffffe02a7569f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe02a7569f30 Root Cause: iflib adds per-device sysctl nodes under the device tree using the device sysctl context. Some of those nodes are counter sysctl that point at fields inside txq→ift_br. When the if_bnxt driver is unloaded, iflib_device_deregister runs and calls iflib_tx_structures_free, which frees the txqs ift_br. The device sysctl tree is only freed when the device is destroyed. If sysctl -a runs during unload, it can still traverse the device tree and call sysctl_handle_counter_u64 for those nodes. The handler does counter_u64_fetch(*(counter_u64_t *)arg1). By then arg1 can point into freed memory and leads to use after free type kernel panic. Fix: flib now uses its own sysctl context for all iflib-related nodes instead of using device’s context. And iflib sysctl context is now removed before any queue/ring memory is freed. Reviewed by: gallatin, ssaxena, #iflib Differential Revision: https://reviews.freebsd.org/D55981 (cherry picked from commit d2b96f654a672f6059c5c623c276dcd76841ed12) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: 203438d0a38c50b366f6d2615e1076a53f4ffff8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=203438d0a38c50b366f6d2615e1076a53f4ffff8 Author: Dag-Erling Smørgrav (Wed 26 Aug 2026 18:34:18 BST) Committer: Dag-Erling Smørgrav (Thu 27 Aug 2026 07:34:19 BST) install: Fix two bugs in stdin code * Fix case where the source is - and the target exists. * Only call chflags() (to remove flags that might prevent us from replacing an existing target) in the exists case; otherwise, to_sb.st_flags is uninitialized. * Rename the source file in the stdin test case. * Extend null and stdin test cases to cover the case where the target already exists. PR: 297681 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297681 ) MFC after: 1 week Fixes: d34870708db9 ("install: Allow installing stdin") Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D59144 (cherry picked from commit a5ff4125cf08a83f7e67f498e423f3e354144327) M usr.bin/xinstall/tests/install_test.sh M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: 84bfbd6bf78febee82b7298cf5fdb77b9f7398c4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=84bfbd6bf78febee82b7298cf5fdb77b9f7398c4 Author: Dag-Erling Smørgrav (Thu 13 Aug 2026 13:28:09 BST) Committer: Dag-Erling Smørgrav (Thu 27 Aug 2026 07:34:19 BST) build: Use -f when copying sources If one of the source files we copy is non-writeable, cp will create a non-writeable copy. If the original is later modified, cp will fail to overwrite the copy since it is not writeable. Using cp -f ensures the copy always succeeds, as long as the object directory is writeable. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. (cherry picked from commit 336b6d11922ac3d080de50f789d40ff95b540cdf) M tools/build/Makefile _____________________________________________________________________________________________________________ Commit: 072f131a90125a228359917d02669b6b563d366b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=072f131a90125a228359917d02669b6b563d366b Author: Kevin Bowling (Wed 12 Aug 2026 02:29:31 BST) Committer: Kevin Bowling (Thu 27 Aug 2026 06:18:13 BST) bnxt: Add led(4) identification support Query the firmware for the LEDs on each physical port and expose /dev/led/bnxt* only when alternate blinking is supported. Configure every LED in the advertised group for identification and restore its default firmware state before a function reset. This follows the DPDK and Linux bnxt HWRM identification paths. Reviewed against: DPDK, Linux Reviewed by: Sumit Saxena Sponsored by: BBOX.io (cherry picked from commit 98b5640786f874949e441bee7c4ad5740cd6a649) M share/man/man4/bnxt.4 M sys/dev/bnxt/bnxt_en/bnxt.h M sys/dev/bnxt/bnxt_en/bnxt_hwrm.c M sys/dev/bnxt/bnxt_en/bnxt_hwrm.h M sys/dev/bnxt/bnxt_en/if_bnxt.c _____________________________________________________________________________________________________________ Commit: 87b97830f7e65685448827bc87ee82d769eecb20 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=87b97830f7e65685448827bc87ee82d769eecb20 Author: Kevin Bowling (Wed 12 Aug 2026 02:29:31 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:06:54 BST) iflib: Allow conditional LED device support A driver class may implement LED control even though the capability is not available on every device or firmware version it supports. Add an optional capability method and consult it before creating the led(4) device. Default to supported so existing providers are unchanged. This will be used by bnxt which blends PF and VF in the same driver. (cherry picked from commit 2519e19f05e0c3e5925bf81b729b4c28f2ad1af6) M sys/net/ifdi_if.m M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: b73064225666b527a61413921f456525022af8f1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b73064225666b527a61413921f456525022af8f1 Author: Kevin Bowling (Wed 12 Aug 2026 05:13:43 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:06:41 BST) igc: Report corrected internal ECC errors I225 and I226 do not interrupt for corrected internal ECC errors. Instead, the DMA packet buffer and PCIe memories expose sticky status bits in PBECCSTS and PCIEECCSTS. Sample these bits with the regular hardware statistics update, preserve the PBECCSTS ECC enable state while clearing its RW1C indication, and expose separate counters for the DMA packet buffer, PCIe transmit-data memory, and PCIe retry buffer. These counters represent observed indications rather than an exact error count because multiple corrections between samples collapse into one sticky status bit. Hardware validation used an I225-IT (rev 3) and a debug kernel that wrote only the documented self-clearing injection bits. Each test armed the injector, exercised the owning RAM with traffic, and compared the corresponding counter before and after. Coverage: Memory Observed result DMA packet buffer corrected_dma advanced once PCIe transmit data corrected_pcie_tx_data advanced once PCIe retry buffer No PCIe replay source; not exercised The retry-buffer injector requires a real PCIe replay to read the corrupted entry. The test root port exposed AER and DPC reporting but no protocol error injector, so ordinary traffic could not cover that case. Sponsored by: BBOX.io (cherry picked from commit 9f7633b932954162792e2caef4f6f0cd87e82f43) M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h _____________________________________________________________________________________________________________ Commit: 7b48d8d841650ca795cc02d7b1b71ba09af28902 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7b48d8d841650ca795cc02d7b1b71ba09af28902 Author: Kevin Bowling (Wed 12 Aug 2026 05:12:49 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:06:18 BST) igc: Recover from fatal internal memory errors I225 and I226 report uncorrectable internal memory errors through ICR.FER and identify the affected region in PEIND. Depending on the region, hardware stops transmit or all PCIe and DMA traffic until the port is reset and reinitialized. Enable the fatal error interrupt and capture its read clear status in the interrupt filter. Mask the cause while an iflib reset is pending, report the affected memory regions, and expose per region indication counters. PCIe region parity failures require a different recovery order from a normal reset: assert DEV_RST, wait at least 3 ms, disable PCIe master requests, clear PCIEERRSTS, and then reinitialize the port. Follow that sequence before entering the normal reset path and clear the remaining LAN status afterward. The I225/I226 PBECCSTS layout is unrelated to the PCH layout previously copied into the igc headers. Replace those unused definitions with the I225/I226 memory error register definitions. Hardware validation used an I225-IT revision 3 and a debug kernel that wrote only the documented self-clearing injection bits. It did not synthesize interrupt or status state. Coverage, notably DMA and Mgmt are not fully testable in my setup: Region Observed hardware status Result LAN PEIND 0x1, LANPERRSTS 0x200 Reset and recovered PCIe PEIND 0x4, PCIEERRSTS 0x8 Reset and recovered DMA DRPARC injection read back zero DFT-gated on test NIC Mgmt Host debug strap unavailable Not injectable The repeated LAN and PCIe tests recovered without a panic or watchdog. A PCIe-to-LAN sequence also verified that reset-time PEIND indications are drained before FER is unmasked. Sponsored by: BBOX.io (cherry picked from commit bbf93227fe9ee1f38b7db5477398c3564e5c84bc) M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h M sys/dev/igc/igc_defines.h M sys/dev/igc/igc_regs.h _____________________________________________________________________________________________________________ Commit: 7ac83b9cab38c2a727f0febfa215d8cb390006c4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7ac83b9cab38c2a727f0febfa215d8cb390006c4 Author: Kevin Bowling (Wed 12 Aug 2026 04:57:29 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:03:01 BST) ixgbe: Defer E610 thermal shutdown to iflib The E610 firmware event handler invoked ixgbe_if_stop() directly from IFDI_UPDATE_ADMIN_STATUS(). This reset the device without the iflib queue lifecycle and left the interface marked running after its hardware was stopped. Request an iflib reset instead. Fail the automatic initialization once so the reset transaction stops the interface and publishes that state. A later operator-requested initialization remains possible, matching the previous recovery policy without bypassing iflib. (cherry picked from commit 3aac283613bd3fd0228a06d6c854ca0bf190ecfb) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/ixgbe.h _____________________________________________________________________________________________________________ Commit: f89ea9e7b61b2d6ba5c1ddcd6795dd4463f1f080 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f89ea9e7b61b2d6ba5c1ddcd6795dd4463f1f080 Author: Kevin Bowling (Wed 12 Aug 2026 04:36:03 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:02:47 BST) ixgbe: Defer firmware recovery transitions to iflib The firmware-mode callout invoked ixgbe_if_stop() directly. This performed a full device reset without the iflib context lock or the iflib queue lifecycle. It could also poll the E610 firmware command interface from callout context while identification was active. Request an iflib reset from the callout instead. Reject initialization while firmware recovery remains active. This leaves the interface stopped and lets iflib publish that state. Request initialization when firmware exits recovery so an administratively-up interface can recover without operator intervention. (cherry picked from commit 43aa553ef45a4345bdfabadae40d811730151144) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 16b31a18421169addeef688be07538152e07032b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=16b31a18421169addeef688be07538152e07032b Author: Kevin Bowling (Wed 12 Aug 2026 03:33:20 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:02:37 BST) ixgbe: Defer ECC recovery to iflib The link interrupt filter performed a full hardware reset in interrupt context. This bypassed iflib stop and initialization, including queue quiescence and restoration of temporary LED state. Record the ECC event in the administrative request mask and ask iflib to perform the reset from its taskqueue. Keep the ECC cause masked until reset so the intermediate admin pass cannot re-enable a sticky condition. Handle ECC independently of Flow Director and in legacy interrupt mode. Remove the redundant EICR write; the filter has already cleared the reported causes. Also remove the accompanying complement-mask update of mac.flags. It set every flag except DOUBLE_RESET_REQUIRED and had no place in ECC recovery. (cherry picked from commit c28f2c551daf07345ac78b74459efe1014c49464) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_type.h _____________________________________________________________________________________________________________ Commit: 553667cae5baebcbf897d90fdddf583ee881fc46 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=553667cae5baebcbf897d90fdddf583ee881fc46 Author: Kevin Bowling (Wed 12 Aug 2026 01:54:21 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:02:27 BST) ixl: Add led(4) identification support Expose each physical port identification LED through /dev/led/ixl*. Use the existing GPIO LED helpers for most devices and the PHY provisioning interface for X710 10GBASE-T adapters. Preserve and restore the original GPIO or PHY indication mode, including before the interface is stopped. (cherry picked from commit 8b2e75970c0328e7397290417cc06e9d9c763d2a) M share/man/man4/ixl.4 M sys/dev/ixl/if_ixl.c M sys/dev/ixl/ixl_pf.h M sys/dev/ixl/ixl_pf_iflib.c _____________________________________________________________________________________________________________ Commit: d7bed48ef1b1e3790bf81cb2ee52c9f49b9e274e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d7bed48ef1b1e3790bf81cb2ee52c9f49b9e274e Author: Kevin Bowling (Wed 12 Aug 2026 01:54:21 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:02:17 BST) ixgbe: Add led(4) identification support Expose the physical port identification LED through /dev/led/ix*. Save and restore the NVM-selected LEDCTL value around each request. The X550 operations also clear their PHY manual override before the register is restored. Use the dedicated firmware port-identification command on E610. Its interface selects between firmware blinking and the original mode rather than directly controlling LEDCTL. Restore the normal indication before a device stop or reset. (cherry picked from commit fb7e249ce4fd03fe53e4407efe661f9e94852bb6) M share/man/man4/ix.4 M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/ixgbe.h _____________________________________________________________________________________________________________ Commit: 9fbf42910ec4ce05ec9a1256ea23c7de9d57b332 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9fbf42910ec4ce05ec9a1256ea23c7de9d57b332 Author: Kevin Bowling (Wed 12 Aug 2026 04:03:11 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:02:07 BST) igc: Remove invalid debug ring pointer iteration The debug routine reads queue registers by queue index. It also advanced unused pointers to rings embedded in queue structures. Those pointers had the wrong stride and could proceed beyond the ring object. Remove the unused pointer arithmetic. (cherry picked from commit 423927d6c3dc87628fc2a19f25b5b5c07b3b73e2) M sys/dev/igc/if_igc.c _____________________________________________________________________________________________________________ Commit: b06e4268aad4720b479744f28b6f66d634fa27dd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b06e4268aad4720b479744f28b6f66d634fa27dd Author: Kevin Bowling (Wed 12 Aug 2026 01:33:18 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 02:02:02 BST) e1000: Fix the multiqueue debug register dump The debug routine advanced ring pointers as if rings were contiguous. They are embedded in queue structures, so rings beyond queue zero had the wrong stride. The bogus queue index could cause an invalid MMIO read and panic the machine. Index the queue arrays first and then select the embedded ring. (cherry picked from commit 7dd826171b69a01c234ba6e9117917398ba2705e) M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 9d5a1488755938edf8a05d472fe68399b9129c11 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9d5a1488755938edf8a05d472fe68399b9129c11 Author: Kevin Bowling (Wed 12 Aug 2026 01:29:17 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 01:59:48 BST) e1000: Identify SerDes adapters with LED blink The generic LED on and off operations do not handle internal SerDes media, leaving the led(4) device ineffective on my I210 fiber port. Use the hardware blink operation for the on phase on internal SerDes. The off phase restores the saved OEM LED configuration as before. (cherry picked from commit 28f96cc3748fc46408cc6ab6172f09bc2182cad7) M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 34817fae3a2cd1aa1718c2cc25a49e66b1d38617 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=34817fae3a2cd1aa1718c2cc25a49e66b1d38617 Author: Kevin Bowling (Wed 12 Aug 2026 01:22:35 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 01:59:32 BST) igc: Add led(4) identification support I225 and I226 expose three programmable LED outputs. Use LED1 for adapter identification, following the convention in DPDK. Preserve the OEM configuration across identification requests. Restore the OEM configuration before a device reset so an active led(4) pattern cannot leave the output overridden across stop or detach. The LED mode values follow the Intel I225 Software User Manual. (cherry picked from commit 19f75b38199b9d30e85fab83e61ff36b0b9ed015) M share/man/man4/igc.4 M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h M sys/dev/igc/igc_defines.h _____________________________________________________________________________________________________________ Commit: 618cd9f089ad15de71ca4c39d0faf6f68f48cbfc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=618cd9f089ad15de71ca4c39d0faf6f68f48cbfc Author: Kevin Bowling (Wed 12 Aug 2026 03:03:33 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 01:59:22 BST) igb(4): Document identification LED device nodes The shared em(4) manual page lists only the em device-node name. Document the /dev/led/igb* name as well. (cherry picked from commit fc0e6adb9d26f94616db5357afcbb585e4176c6d) M share/man/man4/em.4 _____________________________________________________________________________________________________________ Commit: ba7e8e8dcb318099abc6013c27b3e6d3196d4f39 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ba7e8e8dcb318099abc6013c27b3e6d3196d4f39 Author: Kevin Bowling (Wed 12 Aug 2026 01:12:51 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 01:26:14 BST) iflib: Create led(4) devices When a driver implements ifdi_led_func, have the framework create its led(4) device after attach completes and the ifnet and context locks are released. PR: 246885 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=246885 ) Reported by: jlduran Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D32389 (cherry picked from commit 6591a7f6919295f2ec2b463d1ae9554a8bbf6104) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: c287fb614943a721adc0ef59a7e19c32b839e5d9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c287fb614943a721adc0ef59a7e19c32b839e5d9 Author: Kevin Bowling (Wed 12 Aug 2026 01:12:15 BST) Committer: Kevin Bowling (Wed 26 Aug 2026 01:26:07 BST) iflib: Defer LED control to the device taskqueue led(4) invokes driver callbacks while holding its mutex, including from a callout. iflib_led_func() cannot acquire the sleepable context lock in those contexts without causing a lock-order reversal or sleeping from the callout. Record the latest requested state under the iflib state lock and enqueue the existing per-device taskqueue. The task can safely take the context lock before invoking the driver. Coalescing requests also avoids accumulating stale blink transitions when hardware access is slow. Destroy the LED device before draining its task so no new callback can race driver detach. (cherry picked from commit 952994751911d5d059d53e73eb874e00ee98b9ed) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: e6a2ee4072071f9a76996d08525c4fb3db04ba31 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e6a2ee4072071f9a76996d08525c4fb3db04ba31 Author: Mitchell Horne (Tue 8 Oct 2024 19:49:11 BST) Committer: Mitchell Horne (Tue 25 Aug 2026 18:44:42 BST) cpufreq_dt: fix attach for single CPU The 'opp-shared' property is required, but has no meaning for a single-processor system, and is thus not present in such device trees as the BeagleBone Black. Expand the check so we do not fail attachment in this case. This is a partial cherry-pick from the original commit. Intended for merge into releng/14.5. PR: 297788 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297788 ) Reported by: Rick Richard Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D48124 (cherry picked from commit def7999c2ccddc9a303a65c0bea22976e79d8613) M sys/dev/cpufreq/cpufreq_dt.c _____________________________________________________________________________________________________________ Commit: 68da0d6e6086ca523610f1fe922390aae9bcd8d3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=68da0d6e6086ca523610f1fe922390aae9bcd8d3 Author: Mitchell Horne (Tue 30 Jun 2026 15:58:11 BST) Committer: Mitchell Horne (Tue 25 Aug 2026 18:44:41 BST) generic_ehci_fdt: fix driver softc size This subclass declares its own softc structure adding necessary members after the embedded ehci_softc_t. The full size of the struct must be included in the driver declaration, otherwise the allocation backing the softc is not guaranteed to be large enough. Reported by: KASAN Reviewed by: jrtc27, manu Fixes: 7a58744fd0f1 ("Split out the attachment from the generic-ehci driver") MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57951 (cherry picked from commit d5332d3a904242cb82e7dbf35e4aeec7c2df4402) M sys/dev/usb/controller/generic_ehci_fdt.c _____________________________________________________________________________________________________________ Commit: ac15e5619d1bde4bba0b1529812bb6f6730af91d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ac15e5619d1bde4bba0b1529812bb6f6730af91d Author: Ricardo Branco (Fri 15 May 2026 15:58:41 BST) Committer: Mitchell Horne (Tue 25 Aug 2026 18:44:41 BST) crashinfo: Create core.txt.last symlink When saving a coredump, savecore(8) maintains .last symlinks for the info and vmcore artifacts, but not for the crashinfo text report. Make crashinfo(8) create the link, pointing at the current core.txt. file. This makes /var/crash/core.txt.last track the same core dump as info.last and vmcore.last. [mhorne: I tweaked the submission, such that the link will be created as soon as the core.txt.X file is generated; not only after a successful report has been written.] Signed-off-by: Ricardo Branco Reviewed by: mhorne MFC after: 1 week Pull Request: https://github.com/freebsd/freebsd-src/pull/2199 (cherry picked from commit 4dfc78e0e3bb096514455e9bb6cf63e46e84db13) M usr.sbin/crashinfo/crashinfo.sh _____________________________________________________________________________________________________________ Commit: 179d779c6427fe0d8a9eedc83c43746e723b187c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=179d779c6427fe0d8a9eedc83c43746e723b187c Author: Brian Scott (Mon 11 May 2026 17:24:46 BST) Committer: Mitchell Horne (Tue 25 Aug 2026 18:44:30 BST) g_part,mkimg: Add additional GPT partition types Add the hifive-fsbl, hifive-bbl, and xbootldr aliases to mkimg(1). Add the xbootldr alias to geom(4), and thus gpart(8). The "hifive" partition types are defined and used by various RISC-V SBCs for locating firmware. "xbootldr", or the Extended Boot Loader Partition is defined here: https://uapi-group.org/specifications/specs/boot_loader_specification/ Reviewed by: emaste, markj, mhorne MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56784 (cherry picked from commit dab8138e13dea539a387c458979403980a137bf2) (cherry picked from commit 54d0ae979d9596399f33dc7d7245866f86ab7f8e) M lib/geom/part/gpart.8 M sys/geom/part/g_part.c M sys/geom/part/g_part.h M sys/geom/part/g_part_gpt.c M sys/sys/disk/gpt.h M usr.bin/mkimg/gpt.c M usr.bin/mkimg/scheme.c M usr.bin/mkimg/scheme.h _____________________________________________________________________________________________________________ Commit: 6bfd894c8b14fe781248aa94e3b7b29dd324b106 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6bfd894c8b14fe781248aa94e3b7b29dd324b106 Author: Mark Johnston (Mon 24 Aug 2026 19:15:38 BST) Committer: Mark Johnston (Tue 25 Aug 2026 16:58:57 BST) posixshm: Fix a TOCTOU race in the FIOSSHMLPGCNF handler The check for whether shm_lp_psind was assigned was unlocked. This race can be exploited to create an object with psind==2 but with only pagesizes[1] worth of pages populated. This in turn can be used to escalate privileges. Fix this by acquiring the rangelock earlier. In shm_mmap_large(), assert that we hold the rangelock. In shm_write(), annotate an unlocked load of shm_lp_psind. Approved by: so Security: FreeBSD-SA-26:63.posixshm Security: CVE-2026-58094 Reported by: tsune of GMO Cybersecurity by Ierae, Inc. working with TrendAI Zero Day Initiative Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59104 M sys/kern/uipc_shm.c M sys/sys/mman.h _____________________________________________________________________________________________________________ Commit: 6269b9bce0e344336e9cc4f35ebf3fa66d74ca10 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6269b9bce0e344336e9cc4f35ebf3fa66d74ca10 Author: Mark Johnston (Mon 24 Aug 2026 19:14:18 BST) Committer: Mark Johnston (Tue 25 Aug 2026 16:58:57 BST) tty: Revalidate after dropping the tty lock in ioctl handlers The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the proctree relock. After relocking the tty, it did not revalidate the tty state, and it could end up linking a doomed tty to the calling process' session. This race can be exploited to escalate privileges. TIOCSPGRP has a similar race, fix that too. Approved by: so Security: FreeBSD-SA-26:62.tty Security: CVE-2026-58093 Reported by: tsune of GMO Cybersecurity by Ierae, Inc. working with TrendAI Zero Day Initiative Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59126 M sys/kern/tty.c _____________________________________________________________________________________________________________ Commit: 9e9609ab9c5c36baba4f8c58de2c3770e1de247f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9e9609ab9c5c36baba4f8c58de2c3770e1de247f Author: Gordon Tetlow (Sun 23 Aug 2026 16:56:38 BST) Committer: Mark Johnston (Tue 25 Aug 2026 16:58:57 BST) openssl: Fix multiple vulnerabilities This is a rollup commit from upstream to fix: Avoid full read buffer allocation when buffering DTLS records ssl/record: lower the DTLS unprocessed_rcds queue limit Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap Add a test for restricting growth in cmp cert cache Fix unbounded cert cache growth in cmp Fix Remote NULL deref in ossl_cmp_calc_protection() via crafted protectionAlg Approved by: so Obtained from: OpenSSL Security: FreeBSD-SA-26:61.openssl Security: CVE-2026-54874 Security: CVE-2026-63072 Security: CVE-2026-63074 Security: CVE-2026-63076 M crypto/openssl/crypto/cmp/cmp_protect.c M crypto/openssl/crypto/cmp/cmp_vfy.c M crypto/openssl/crypto/cms/cms_kari.c M crypto/openssl/ssl/record/rec_layer_d1.c M crypto/openssl/ssl/record/record.h M crypto/openssl/ssl/record/record_local.h M crypto/openssl/ssl/record/ssl3_record.c M crypto/openssl/test/build.info A crypto/openssl/test/cmp_extracerts_dos_test.c M crypto/openssl/test/recipes/65-test_cmp_msg.t _____________________________________________________________________________________________________________ Commit: e6c1c92155578688b9999f7a88cfe5d438c401f1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e6c1c92155578688b9999f7a88cfe5d438c401f1 Author: Mark Johnston (Mon 24 Aug 2026 16:20:32 BST) Committer: Mark Johnston (Tue 25 Aug 2026 16:58:57 BST) dsp: Fix a potential use-after-free in dsp_oss_syncstart() This function has a loop where it attempts to lock all channels in a group. If doing so would block, it releases all locks, sleeps for a bit, and tries again. However, once the syncgroup lock is dropped, nothing prevents the syncgroup structure from being freed. Fix the inner loop: after waking up, break out of it unconditionally and start everything again. I think the old code was also buggy and not well-exercised: after waking up we'd continue to try and continue locking channels. Then we'd try again from the beginning and fail to lock the channels we had already locked. Approved by: so Security: FreeBSD-SA-26:58.sound Security: CVE-2026-58091 Reported by: Hazley Samsudin of GovTech CSG Reviewed by: christos Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58912 M sys/dev/sound/pcm/channel.h M sys/dev/sound/pcm/dsp.c _____________________________________________________________________________________________________________ Commit: 5eaecdb275d34eae25de5c13a170e5c36c1cd11e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5eaecdb275d34eae25de5c13a170e5c36c1cd11e Author: Mark Johnston (Mon 24 Aug 2026 15:57:16 BST) Committer: Mark Johnston (Tue 25 Aug 2026 16:58:57 BST) hwpmc: Fix the execve handler When a process execve()s, pmc_process_exec() is supposed to evaluate whether the new image is setuid/setgid and if so, whether to detach PMCs. This was handled by pmc_can_attach(), which is effectively an open-coded copy of cr_xids_subset(). Unfortunately, the test of the result of this function was inverted, with the result that we'd detach PMCs only if the predicate said it was okay to do so. It appears the bug has always been there; it seems the intent was to return 0 on "success", i.e., it is okay to attach the PMCs, much like p_candebug(). Commits 1c3c698ba4c4 and 1c40b15971f0 obscured this a bit. I think this check is trying to be too clever. Let's make it simpler: simply do not attach PMCs unless the owner is privileged. This is how, e.g., ktrace works. I do not think it's worth trying to be more sophisticated than this unless we can generalize the policy in a way that's applicable to other subsystems. Also fix a bug at the end of pmc_process_exec(): pmc_detach_one_process() will call pmc_remove_process_descriptor() for us. Approved by: so Security: FreeBSD-SA-26:56.hwpmc Security: CVE-2026-58089 Reported by: netchild Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59102 M sys/dev/hwpmc/hwpmc_mod.c M sys/kern/kern_exec.c _____________________________________________________________________________________________________________ Commit: f07ba9543211668fa991de1cefce016059fa61e9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f07ba9543211668fa991de1cefce016059fa61e9 Author: Kevin Bowling (Tue 11 Aug 2026 20:41:07 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:42:30 BST) ixgbe: Avoid a signed shift while assembling the PHY ID The PHY identifier word is promoted to signed int when the cast is applied after the shift. Cast the 16-bit register value first so identifiers with their high bit set are assembled as unsigned data. (cherry picked from commit f4bf1da7bac80cbe3ec862f395c22a3c5d176312) M sys/dev/ixgbe/ixgbe_phy.c _____________________________________________________________________________________________________________ Commit: eee64d77475d2fe3cebf0f67d66e139cc55d3988 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=eee64d77475d2fe3cebf0f67d66e139cc55d3988 Author: Kevin Bowling (Tue 11 Aug 2026 20:40:56 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:42:19 BST) igc: Avoid a signed shift while assembling the PHY ID The PHY identifier word is promoted to signed int when the cast is applied after the shift. Cast the 16-bit register value first so identifiers with their high bit set are assembled as unsigned data. (cherry picked from commit f5fd839fe688181e57171850ce51e4dec71e62fd) M sys/dev/igc/igc_phy.c _____________________________________________________________________________________________________________ Commit: b714f22fd2d404a7da776fbce9177fec9f6ee6de URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b714f22fd2d404a7da776fbce9177fec9f6ee6de Author: Kevin Bowling (Tue 11 Aug 2026 20:40:48 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:42:09 BST) e1000: Avoid signed shifts while assembling PHY IDs PHY identifier words are promoted to signed int when the cast is applied after the shift. Cast each 16-bit register value first so identifiers with their high bit set are assembled as unsigned data. (cherry picked from commit 13a7470096567480676e24545b3c1d6404f3f2ec) M sys/dev/e1000/e1000_82571.c M sys/dev/e1000/e1000_ich8lan.c M sys/dev/e1000/e1000_phy.c _____________________________________________________________________________________________________________ Commit: c4a11b45a0369f435991f01415572fdce9a9be2b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c4a11b45a0369f435991f01415572fdce9a9be2b Author: Kevin Bowling (Tue 11 Aug 2026 20:39:52 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:41:57 BST) igc: Export EEE Low Power Idle counters The driver already accumulates the clear-on-read transmit and receive LPI event counters. Expose the 64-bit totals under the per-device eee sysctl node. (cherry picked from commit 13d78e4b9d0a27128319a1241f00f7ab9aa864bb) M sys/dev/igc/if_igc.c _____________________________________________________________________________________________________________ Commit: 81758eb56a677a08afda8f40746190fae5f59472 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=81758eb56a677a08afda8f40746190fae5f59472 Author: Kevin Bowling (Tue 11 Aug 2026 20:36:33 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:41:48 BST) ixl: Avoid a signed PHY capability shift The PHY capability display examines all 32 bits of the firmware bitmap. Use an unsigned value so examining bit 31 does not shift a signed integer into its sign bit. (cherry picked from commit f7427f890c7f34d0842a35eb9df814adad11a95a) M sys/dev/ixl/ixl_pf_main.c _____________________________________________________________________________________________________________ Commit: 025c27c0b3a7f6b04a801ce46d7b2061926c3fbf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=025c27c0b3a7f6b04a801ce46d7b2061926c3fbf Author: Kevin Bowling (Tue 11 Aug 2026 20:36:20 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:41:38 BST) e1000: Avoid a signed manageability VLAN bitmap shift A manageability VLAN can select bit 31 of its VFTA register. Use an unsigned value when constructing the register mask. (cherry picked from commit 392fbdcf2232f12cb973d00ae931740c72d970c6) M sys/dev/e1000/e1000_82571.c _____________________________________________________________________________________________________________ Commit: e2a0b3b1b7a36fb971a384c8f2f5aa21db9e6f3c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e2a0b3b1b7a36fb971a384c8f2f5aa21db9e6f3c Author: Kevin Bowling (Tue 11 Aug 2026 20:36:08 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:41:28 BST) ixgbe: Use unsigned register bitmap shifts VLAN, VMDq, and VF reset bit indices can reach 31. Use unsigned values when constructing their 32-bit register masks so the shifts do not operate on signed integers. (cherry picked from commit bf6feffef6c16559333048859b24547acea3dba5) M sys/dev/ixgbe/ixgbe_82598.c M sys/dev/ixgbe/ixgbe_common.c M sys/dev/ixgbe/ixgbe_mbx.c _____________________________________________________________________________________________________________ Commit: e24a14c4c3613a8163b1a005062ed141a2ef79e8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e24a14c4c3613a8163b1a005062ed141a2ef79e8 Author: Kevin Bowling (Tue 11 Aug 2026 20:34:50 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:41:19 BST) ixgbe: Avoid signed overflow in LED register masks LED index three shifts the blink bit into bit 31. Convert the base to the register width before shifting so the operation is unsigned. This is the ixgbe counterpart of the e1000 correction imported from DPDK commit 214cb0d7f1. (cherry picked from commit bbdd3c4692e2869817f77c359b4a2719e716921d) M sys/dev/ixgbe/ixgbe_type.h _____________________________________________________________________________________________________________ Commit: aa8cfbac9f8c96c9b627bfb597a33c358c9ffb14 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=aa8cfbac9f8c96c9b627bfb597a33c358c9ffb14 Author: Kevin Bowling (Tue 11 Aug 2026 20:34:40 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:41:09 BST) ixgbe: Avoid a signed shift while assembling the PBA number The EEPROM word is promoted to signed int before the left shift when the cast is applied to the complete expression. Cast the word first so all 16-bit values are shifted as unsigned data. This is the ixgbe counterpart of the e1000 correction imported from DPDK commit b932270c66. (cherry picked from commit baa6e3af8525244e65a404fa13306fbca7feae9c) M sys/dev/ixgbe/ixgbe_common.c _____________________________________________________________________________________________________________ Commit: 56b862b57d920e5802ec789d25e6f5100822c5ba URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=56b862b57d920e5802ec789d25e6f5100822c5ba Author: Kevin Bowling (Tue 11 Aug 2026 20:34:29 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:41:00 BST) igc: Check PHY control register reads Do not modify a zero-initialized PHY control value when its preceding read failed. Leave the PHY unchanged when the void power helpers cannot read its current state. This follows the defensive checks added to the corresponding e1000 helpers. (cherry picked from commit 1121aaa0758baf04bed6f16d4157116b49c25000) M sys/dev/igc/igc_phy.c _____________________________________________________________________________________________________________ Commit: 444c0425f2f8cc87ea646b78494c016075b8ce31 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=444c0425f2f8cc87ea646b78494c016075b8ce31 Author: Barbara Skobiej (Tue 11 Aug 2026 20:34:13 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:40:50 BST) igc: fix data type in MAC hash DPDK commit message net/e1000/base: fix data type in MAC hash One of the bit shifts in MAC hash calculation triggers a static analysis warning about a potential overflow. Fix the data type to avoid this. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Barbara Skobiej Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (458734aaac) (cherry picked from commit 3fc1786aa2a3f590453abb6ea2351a12e19f6b45) M sys/dev/igc/igc_mac.c _____________________________________________________________________________________________________________ Commit: 1aa70ba43f476e626be122b77ffb3503ac2c3664 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1aa70ba43f476e626be122b77ffb3503ac2c3664 Author: Aleksandr Loktionov (Tue 11 Aug 2026 20:34:01 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:40:39 BST) igc: fix MAC address hash bit shift DPDK commit message net/e1000/base: fix MAC address hash bit shift In e1000_hash_mc_addr_generic() the expression: "mc_addr[4] >> 8 - bit_shift", right shifting "mc_addr[4]" shift by more than 7 bits always yields zero, so hash becomes not so different. Add initialization with bit_shift = 1, and add a loop condition to ensure bit_shift will be always in [1..8] range. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Aleksandr Loktionov Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (1749e662f6) (cherry picked from commit cba56bc3427db0bb4efc3d0117cda4bdc7717f98) M sys/dev/igc/igc_mac.c _____________________________________________________________________________________________________________ Commit: 4900f203a778ddd96e17d6713e3cbb5f59680b99 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4900f203a778ddd96e17d6713e3cbb5f59680b99 Author: Amir Avivi (Tue 11 Aug 2026 20:33:49 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:40:28 BST) igc: fix iterator type DPDK commit message net/e1000/base: fix iterator type Fix static analysis warning about comparison between types of incompatible width, which might lead to an infinite loop due to overflow. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Amir Avivi Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (3d36053991) (cherry picked from commit 5587cb18b168f57a4d68c7e58ec660ab2a5ce4da) M sys/dev/igc/igc_phy.c _____________________________________________________________________________________________________________ Commit: 0379490cbd275632f5fe283f7e430577d10e8884 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0379490cbd275632f5fe283f7e430577d10e8884 Author: Kevin Bowling (Tue 11 Aug 2026 20:27:45 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:40:19 BST) ixgbe: Avoid a signed multicast bitmap shift The multicast vector bit can be 31. Use an unsigned value so setting the bit cannot shift a signed integer into its sign bit. (cherry picked from commit 8704d29c6cc86f0780dff3d3d17d744106776ad3) M sys/dev/ixgbe/ixgbe_common.c _____________________________________________________________________________________________________________ Commit: a11e0540332972c9676b445aaad7743f44b9b701 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a11e0540332972c9676b445aaad7743f44b9b701 Author: Kevin Bowling (Tue 11 Aug 2026 20:27:35 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:40:09 BST) igc: Avoid a signed multicast bitmap shift The multicast hash bit can be 31. Use an unsigned value so setting the bit cannot shift a signed integer into its sign bit. (cherry picked from commit 275ca86f6abffc4ee6e52a6daab06f5e5c21aa05) M sys/dev/igc/igc_mac.c _____________________________________________________________________________________________________________ Commit: db875e2839b5ef037305a2f73c601ccaa7d975fc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=db875e2839b5ef037305a2f73c601ccaa7d975fc Author: Kevin Bowling (Tue 11 Aug 2026 18:38:39 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:39:58 BST) e1000: Preserve errors while disabling D0 LPLU Return a PHY write failure immediately when disabling D0 low-power link-up on 82571-family controllers. (cherry picked from commit b1da641d23a95c4e7f61b7a546938ec8fceb47e7) M sys/dev/e1000/e1000_82571.c _____________________________________________________________________________________________________________ Commit: 56767c01d41a5ab4ffa42fb0196fbd9119b8fcea URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=56767c01d41a5ab4ffa42fb0196fbd9119b8fcea Author: Kevin Bowling (Tue 11 Aug 2026 18:35:43 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:39:37 BST) e1000: Verify i210 and i211 multicast table writes The i210 and i211 can occasionally fail to accept multicast table writes, particularly while addresses are added and removed rapidly. Read the table back and rewrite mismatches for up to three passes. This prevents multicast reception from retaining stale filter state while keeping the workaround limited to the affected controllers. (cherry picked from commit bb8d0944b5d53863f00492b69b7bf13d2618fc95) M sys/dev/e1000/e1000_mac.c _____________________________________________________________________________________________________________ Commit: ffa35082112cac74a0af65b6441293265f5f3e87 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ffa35082112cac74a0af65b6441293265f5f3e87 Author: Kevin Bowling (Tue 11 Aug 2026 20:00:51 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:39:25 BST) e1000: Avoid a signed multicast bitmap shift The multicast hash bit can be 31. Use an unsigned value so setting the bit cannot shift a signed integer into its sign bit. (cherry picked from commit a86d65b2c99bab3fe46389b3b51ad27956dccfe9) M sys/dev/e1000/e1000_mac.c _____________________________________________________________________________________________________________ Commit: 14639ea383043a061e8a699b196d897bbff23884 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=14639ea383043a061e8a699b196d897bbff23884 Author: Barbara Skobiej (Thu 6 Feb 2025 16:08:41 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:39:14 BST) e1000: fix data type in MAC hash DPDK commit message net/e1000/base: fix data type in MAC hash One of the bit shifts in MAC hash calculation triggers a static analysis warning about a potential overflow. Fix the data type to avoid this. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Barbara Skobiej Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (458734aaac) (cherry picked from commit a09034d561cbb3792ecc0146b41d4794ab3bda37) M sys/dev/e1000/e1000_mac.c M sys/dev/e1000/e1000_vf.c _____________________________________________________________________________________________________________ Commit: 1e53317f00587b08c047dbb99d7f0c17687cdeb7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1e53317f00587b08c047dbb99d7f0c17687cdeb7 Author: Aleksandr Loktionov (Thu 6 Feb 2025 16:08:40 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:39:02 BST) e1000: fix MAC address hash bit shift DPDK commit message net/e1000/base: fix MAC address hash bit shift In e1000_hash_mc_addr_generic() the expression: "mc_addr[4] >> 8 - bit_shift", right shifting "mc_addr[4]" shift by more than 7 bits always yields zero, so hash becomes not so different. Add initialization with bit_shift = 1, and add a loop condition to ensure bit_shift will be always in [1..8] range. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Aleksandr Loktionov Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (1749e662f6) (cherry picked from commit e7ffea395ee8add21b2cce0806285131e12cc454) M sys/dev/e1000/e1000_mac.c M sys/dev/e1000/e1000_vf.c _____________________________________________________________________________________________________________ Commit: 0d2dd958135129e7286be2c313692b921288b85a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0d2dd958135129e7286be2c313692b921288b85a Author: Barbara Skobiej (Thu 6 Feb 2025 16:08:45 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:38:51 BST) e1000: fix reset for 82580 DPDK commit message net/e1000/base: fix reset for 82580 Fix setting device reset status bit in e1000_reset_hw_82580() function for 82580 by first reading the register value, and then setting the device reset bit. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Barbara Skobiej Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (88a1eb79ef) (cherry picked from commit 53e4711616041a668ab61f2ce86c9fa139ab67a9) M sys/dev/e1000/e1000_82575.c _____________________________________________________________________________________________________________ Commit: 5ad4a31b3adee03198dfe53d86ee96ee654ac41c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5ad4a31b3adee03198dfe53d86ee96ee654ac41c Author: Sasha Neftin (Fri 7 Feb 2025 12:45:14 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:36:31 BST) e1000: add LPI counters DPDK commit message net/e1000/base: add LPI counters Add new fields in structure to indicate if EEE LPI entries have been observed on Tx and Rx path. Signed-off-by: Sasha Neftin Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (2e8078ee69) (cherry picked from commit d1c20195c0fae27b6b1d526c03d8844f200e5c86) M sys/dev/e1000/e1000_hw.h M sys/dev/e1000/e1000_mac.c _____________________________________________________________________________________________________________ Commit: 2519c42aff5d3e9e6d1c0a0fc417adb9e0370f2b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2519c42aff5d3e9e6d1c0a0fc417adb9e0370f2b Author: Dima Ruinskiy (Thu 6 Feb 2025 16:08:46 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:36:21 BST) e1000: fix unchecked return DPDK commit message net/e1000/base: fix unchecked return Static analysis has detected a write that is not checked for errors, leading to ignored error return value. Add a check. Fixes: edcdb3c5f71b ("e1000/base: fix link flap on 82579") Cc: stable@dpdk.org Signed-off-by: Dima Ruinskiy Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (b0b6b50c20) (cherry picked from commit c80aface0f4662c7dc46eed3fbb27b64ab931500) M sys/dev/e1000/e1000_ich8lan.c _____________________________________________________________________________________________________________ Commit: 1b6419428ee6e9116f815d15993d61db832f2917 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1b6419428ee6e9116f815d15993d61db832f2917 Author: Kevin Bowling (Tue 11 Aug 2026 17:19:25 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:36:11 BST) e1000: Check PHY control register reads Do not modify a zero-initialized PHY control value when its preceding read failed. (cherry picked from commit c276a80a4e52c065ed631e498ed2c3d284b45c75) M sys/dev/e1000/e1000_phy.c _____________________________________________________________________________________________________________ Commit: d68b2c74020e77b42d0851bf7489624abb931a7e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d68b2c74020e77b42d0851bf7489624abb931a7e Author: Kevin Bowling (Tue 11 Aug 2026 17:19:02 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:36:00 BST) e1000: Allow more time for PCH ULP exit Firmware may take up to one second to unconfigure ULP, and affected Lenovo systems have required nearly two seconds. Allow 2.5 seconds before treating the transition as a PHY failure. This extends DPDK commit 7aa4c34581a5 using the field-tested bound from Linux commit 3cf31b1a9eff. (cherry picked from commit e49cb7f757f6db8976b0d247e6a897eab5867634) M sys/dev/e1000/e1000_ich8lan.c _____________________________________________________________________________________________________________ Commit: 558e870b8e935a51694d5c7bf04ed0d39ceb1e35 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=558e870b8e935a51694d5c7bf04ed0d39ceb1e35 Author: Kevin Bowling (Tue 11 Aug 2026 17:18:33 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:35:50 BST) e1000: Compare decoded PCH LTR latencies The LTR encoding combines a value and a nonlinear scale, so encoded values cannot be compared directly. Decode both the device latency and the platform maximum before deciding whether to clamp the request. (cherry picked from commit 6058dfa40238e2cd6ac6f2377986fdff99d14686) M sys/dev/e1000/e1000_ich8lan.c _____________________________________________________________________________________________________________ Commit: c68093156714e59808ce3fd0aa3e856ab5459de7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c68093156714e59808ce3fd0aa3e856ab5459de7 Author: Kevin Bowling (Tue 11 Aug 2026 17:18:06 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:35:39 BST) e1000: Reconfigure modern PCH K1 clock synchronization Meteor Lake and newer PCH generations can lose packets while the MAC and PHY clocks synchronize. Move K1 power-down to P1 and extend the PHY K1 exit timeout before PHY access and after reset. Use the longer 1 Gb/s PLL clock-gate timeout added by Linux so K1 can remain enabled without the power penalty of disabling it. Apply the workaround through the newer PTP and NVP generations. This follows DPDK commits ba54bdc79d94 and d88ef2356ecc, with the longer exit time observed in Linux 578294b8b60d. (cherry picked from commit 17d90d5b9350239a87e66a3612cb9b084b2d75e9) M sys/dev/e1000/e1000_ich8lan.c M sys/dev/e1000/e1000_ich8lan.h _____________________________________________________________________________________________________________ Commit: b104189a2ffc1b8c863f05735cc76a4f506a436f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b104189a2ffc1b8c863f05735cc76a4f506a436f Author: Kevin Bowling (Tue 11 Aug 2026 17:15:28 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:35:28 BST) e1000: Retry transient MDIC failures on modern PCH Some Meteor Lake and newer systems sporadically fail an MDIC PHY transaction while the MAC and PHY clocks synchronize. Retry twice before reporting the transaction failure. Disable retries around PHY interface transitions where an MDI error is expected. Preserve and restore the configured retry count on every exit from those flows. This follows DPDK commit bdca22d62ff0, extended to the PTP and NVP PCH types. (cherry picked from commit df34ccfc913d6635e957c685d7452a05911eab89) M sys/dev/e1000/e1000_hw.h M sys/dev/e1000/e1000_ich8lan.c M sys/dev/e1000/e1000_phy.c M sys/dev/e1000/e1000_phy.h _____________________________________________________________________________________________________________ Commit: 380d32f6e1d65f4139a4121dfc159bb4051f29d9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=380d32f6e1d65f4139a4121dfc159bb4051f29d9 Author: Pawel Malinowski (Thu 6 Feb 2025 16:08:37 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:35:18 BST) e1000: fix semaphore timeout value DPDK commit message net/e1000/base: fix semaphore timeout value According to datasheet, software ownership of SWSM.SWESMBI bit should not exceed 100ms. Current implementation caused incorrect timeout counter values, where each iteration equals 50us delay. Because of that driver was allowed to wait for semaphore even for 1.5s. This might trigger DPC timeout. This implementation hardcodes value to 2000, which multiplied by 50us, gives 100ms of possible wait time. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Pawel Malinowski Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (c8bcaf0f2a) (cherry picked from commit ea2e8b056b455e92830bd1bae56b4d72a42018c3) M sys/dev/e1000/e1000_defines.h M sys/dev/e1000/e1000_mac.c _____________________________________________________________________________________________________________ Commit: 520e2ae7aa320342191b82e16fd62ce6905d0e98 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=520e2ae7aa320342191b82e16fd62ce6905d0e98 Author: Kevin Bowling (Tue 11 Aug 2026 19:58:17 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:35:07 BST) e1000: Separate hardware semaphore policies by family The shared semaphore helper accesses both the 82571 retry counter and the I210 one-time-clear flag. Those fields occupy overlapping members of the device-specific union. On 82571, incrementing the counter thus enables the I210 recovery and clears SMBI after the first timeout. Give 82571, generic 80003/82575, and I210/I211 users distinct acquire paths. Preserve the legacy peer-driver policy on 82571 and one-time recovery on I210. The separation follows the Intel e1000 base code in DPDK. (cherry picked from commit 26251926892585e0746c2b65227e56cf9b2fed58) M sys/dev/e1000/e1000_82571.c M sys/dev/e1000/e1000_82575.c M sys/dev/e1000/e1000_i210.c M sys/dev/e1000/e1000_i210.h M sys/dev/e1000/e1000_mac.c M sys/dev/e1000/e1000_mac.h _____________________________________________________________________________________________________________ Commit: 97f6c301d8b2d1e3b43a33913c05a6ab7440baaa URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=97f6c301d8b2d1e3b43a33913c05a6ab7440baaa Author: Kevin Bowling (Tue 11 Aug 2026 19:57:52 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:34:57 BST) e1000: Accept uninitialized Tiger Lake NVM checksums Some transitional Tiger Lake systems shipped with an uninitialized checksum word. Accept that state while continuing to validate newer read-only NVM images. (cherry picked from commit ccb8ad1f645eb77d393eb81ff1b86b213b74bc87) M sys/dev/e1000/e1000_defines.h M sys/dev/e1000/e1000_nvm.c _____________________________________________________________________________________________________________ Commit: a8a18e78e7445214a00bd40550b8e3d71760f510 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a8a18e78e7445214a00bd40550b8e3d71760f510 Author: Sasha Neftin (Fri 7 Feb 2025 12:45:22 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:34:42 BST) e1000: improve NVM checksum handling DPDK commit message net/e1000/base: improve NVM checksum handling When reading NVM checksum, we may encounter the following scenarios: - Checksum may be invalid, and can be updated - Checksum may be invalid but cannot be updated because NVM is read-only For the latter case, we should just ignore invalid checksum and not attempt to update it. Signed-off-by: Sasha Neftin Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (5241c17f0d) (cherry picked from commit 8e8755e011955d12abab7c2be324429cccf0b975) M sys/dev/e1000/e1000_ich8lan.c _____________________________________________________________________________________________________________ Commit: 55005cc408bd7a65e68b8640ad813b272ae7907e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=55005cc408bd7a65e68b8640ad813b272ae7907e Author: Menachem Fogel (Wed 20 May 2026 13:52:44 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:34:28 BST) e1000: fix NVM loop bounds and pointer access DPDK commit message net/e1000/base: fix NVM loop bounds and pointer access Improve the NVM checksum routines by ensuring loop bounds are compared at the correct integer width. Use array indexing instead of explicit pointer arithmetic. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Menachem Fogel Signed-off-by: Dima Ruinskiy Signed-off-by: Ciara Loftus Acked-by: Bruce Richardson Obtained from: DPDK (39fba42d04) (cherry picked from commit 0fc30789dff08d62c5c830e9aa8c5a0ca9080ad9) M sys/dev/e1000/e1000_82575.c M sys/dev/e1000/e1000_manage.c _____________________________________________________________________________________________________________ Commit: 3dcce131c455ea4afa6b0836ebc26b422f789b0a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3dcce131c455ea4afa6b0836ebc26b422f789b0a Author: Lukasz Czapnik (Wed 20 May 2026 13:52:40 BST) Committer: Kevin Bowling (Tue 25 Aug 2026 01:34:17 BST) e1000: fix possible variable overflow DPDK commit message net/e1000/base: fix possible variable overflow Bits can be lost as temporary math is done on signed variables and the result is assigned to an unsigned variable. Cast to u32 to force the compiler to do operations on unsigned temporary variables. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Lukasz Czapnik Signed-off-by: Ciara Loftus Acked-by: Bruce Richardson Obtained from: DPDK (214cb0d7f1) (cherry picked from commit b3bdffd7a428e43934772850966a3f80638c666f) M sys/dev/e1000/e1000_mac.c _____________________________________________________________________________________________________________ Commit: f2912bc216f680607cee3b110451024eec34bea9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f2912bc216f680607cee3b110451024eec34bea9 Author: Przemyslaw Ciesielski (Thu 6 Feb 2025 16:08:44 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:34:04 BST) e1000: fix NVM data type in bit shift DPDK commit message net/e1000/base: fix NVM data type in bit shift There is a static analysis warning due to wrong data types being used for NVM read data shifts. Fix it via explicit type cast. Fixes: 38db3f7f50bd ("e1000: update base driver") Cc: stable@dpdk.org Signed-off-by: Przemyslaw Ciesielski Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (b932270c66) (cherry picked from commit 146ae81c6a5c72779bee81f1d5d5913491ae4eef) M sys/dev/e1000/e1000_nvm.c _____________________________________________________________________________________________________________ Commit: 67c7c75f8cf3f1f9ad121a3d98088f45ac76dc2c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=67c7c75f8cf3f1f9ad121a3d98088f45ac76dc2c Author: Amir Avivi (Thu 6 Feb 2025 16:08:39 GMT) Committer: Kevin Bowling (Tue 25 Aug 2026 01:33:53 BST) e1000: fix iterator type DPDK commit message net/e1000/base: fix iterator type Fix static analysis warning about comparison between types of incompatible width, which might lead to an infinite loop due to overflow. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Amir Avivi Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (3d36053991) (cherry picked from commit 15a0db2101cd67eccd0be2ddf1ad18be1ea5afd0) M sys/dev/e1000/e1000_phy.c _____________________________________________________________________________________________________________ Commit: 55ee29bf351533644d35e82da87fd1661d879f04 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=55ee29bf351533644d35e82da87fd1661d879f04 Author: Mark Johnston (Mon 24 Aug 2026 15:46:28 BST) Committer: Mark Johnston (Mon 24 Aug 2026 19:48:33 BST) ppp: Fix a buffer overflow in the endpoint discriminator set command Reported by: Reo Shiseki MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59054 (cherry picked from commit 6cb7e368daab6f166b7c8e26367ea6fee4cdd03a) M usr.sbin/ppp/mp.c _____________________________________________________________________________________________________________ Commit: 6420ead539ddcc7026933888665b7e4f5f0eb9cd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6420ead539ddcc7026933888665b7e4f5f0eb9cd Author: Mark Johnston (Fri 7 Aug 2026 15:47:06 BST) Committer: Mark Johnston (Mon 24 Aug 2026 19:48:15 BST) netmap: Fix a race in kqueue registration We need to acquire the netmap global lock earlier, to avoid racing with the NETMAP_REQ_REGISTER ioctl handler. Reported by: syzkaller Reviewed by: vmaffione MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58677 (cherry picked from commit 6de818285f066c6705816674c671761dc09bff90) M sys/dev/netmap/netmap_freebsd.c _____________________________________________________________________________________________________________ Commit: 9c2ad5b3d10e639c966cd8dd6664338a40a26bfd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9c2ad5b3d10e639c966cd8dd6664338a40a26bfd Author: Mark Johnston (Fri 7 Aug 2026 15:46:52 BST) Committer: Mark Johnston (Mon 24 Aug 2026 19:48:15 BST) netmap: Fix driver name handling if_initname() requires the caller to ensure that the lifetime of the interface's name buffer contains that of the ifnet itself. netmap_vi_create() wasn't respecting that; we were instead passing the stack-allocated buffer provided by the ioctl handler. While here, add a check to avoid assuming that the caller-provided buffer is nul-terminated. Reported by: syzkaller Reviewed by: vmaffione MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58676 (cherry picked from commit 800d5b7a8a4f5665ced0453e090f8d563366bd47) M sys/dev/netmap/netmap_kern.h M sys/dev/netmap/netmap_vale.c _____________________________________________________________________________________________________________ Commit: 47f89e7907e2ef0b308b033c102bc31fcff5cb73 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=47f89e7907e2ef0b308b033c102bc31fcff5cb73 Author: Martin Matuska (Mon 24 Aug 2026 13:58:13 BST) Committer: Martin Matuska (Mon 24 Aug 2026 13:59:31 BST) libarchive: rename macro ALIGN in test_write_format_pax_align.c This is a direct commit to stable/14 M contrib/libarchive/libarchive/test/test_write_format_pax_align.c _____________________________________________________________________________________________________________ Commit: 620c4c2ddb1087cdbc2949572b819baf65e59c3b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=620c4c2ddb1087cdbc2949572b819baf65e59c3b Author: Martin Matuska (Thu 30 Jul 2026 09:13:34 BST) Committer: Martin Matuska (Mon 24 Aug 2026 10:53:22 BST) libarchive: merge from vendor branch libarchive 3.8.9 ChangeLog: https://github.com/libarchive/libarchive/compare/v3.8.7...v3.8.9 Obtained from: libarchive Vendor commit: 27cbc7827172698143e440801fc0ba39ccb4f1f5 MFC after: 2 weeks (cherry picked from commit 185becb1e1bd2657c156f78aeb52edac05ba5fb5) M contrib/libarchive/FREEBSD-Xlist M contrib/libarchive/NEWS M contrib/libarchive/SECURITY.md D contrib/libarchive/build/ci/github_actions/install-macos-dependencies.sh M contrib/libarchive/cpio/cpio.c M contrib/libarchive/cpio/test/test_extract_cpio_absolute_paths.c M contrib/libarchive/cpio/test/test_format_newc.c M contrib/libarchive/libarchive/archive.h M contrib/libarchive/libarchive/archive_acl.c M contrib/libarchive/libarchive/archive_acl_private.h M contrib/libarchive/libarchive/archive_check_magic.c M contrib/libarchive/libarchive/archive_cmdline.c M contrib/libarchive/libarchive/archive_crc32.h M contrib/libarchive/libarchive/archive_cryptor.c M contrib/libarchive/libarchive/archive_cryptor_private.h M contrib/libarchive/libarchive/archive_digest.c M contrib/libarchive/libarchive/archive_digest_private.h M contrib/libarchive/libarchive/archive_endian.h M contrib/libarchive/libarchive/archive_entry.c M contrib/libarchive/libarchive/archive_entry.h M contrib/libarchive/libarchive/archive_entry_link_resolver.c M contrib/libarchive/libarchive/archive_entry_sparse.c M contrib/libarchive/libarchive/archive_entry_strmode.c M contrib/libarchive/libarchive/archive_entry_xattr.c M contrib/libarchive/libarchive/archive_hmac.c M contrib/libarchive/libarchive/archive_hmac_private.h A contrib/libarchive/libarchive/archive_integer.h M contrib/libarchive/libarchive/archive_match.c M contrib/libarchive/libarchive/archive_options.c M contrib/libarchive/libarchive/archive_pack_dev.c M contrib/libarchive/libarchive/archive_parse_date.c M contrib/libarchive/libarchive/archive_pathmatch.c M contrib/libarchive/libarchive/archive_private.h M contrib/libarchive/libarchive/archive_random.c M contrib/libarchive/libarchive/archive_read.c M contrib/libarchive/libarchive/archive_read_append_filter.c M contrib/libarchive/libarchive/archive_read_data_into_fd.c M contrib/libarchive/libarchive/archive_read_disk_entry_from_file.c M contrib/libarchive/libarchive/archive_read_disk_posix.c M contrib/libarchive/libarchive/archive_read_disk_set_standard_lookup.c M contrib/libarchive/libarchive/archive_read_filter.3 M contrib/libarchive/libarchive/archive_read_open.3 M contrib/libarchive/libarchive/archive_read_open_fd.c M contrib/libarchive/libarchive/archive_read_open_file.c M contrib/libarchive/libarchive/archive_read_open_filename.c M contrib/libarchive/libarchive/archive_read_open_memory.c M contrib/libarchive/libarchive/archive_read_private.h M contrib/libarchive/libarchive/archive_read_support_filter_all.c M contrib/libarchive/libarchive/archive_read_support_filter_bzip2.c M contrib/libarchive/libarchive/archive_read_support_filter_compress.c M contrib/libarchive/libarchive/archive_read_support_filter_grzip.c M contrib/libarchive/libarchive/archive_read_support_filter_gzip.c M contrib/libarchive/libarchive/archive_read_support_filter_lrzip.c M contrib/libarchive/libarchive/archive_read_support_filter_lz4.c M contrib/libarchive/libarchive/archive_read_support_filter_lzop.c M contrib/libarchive/libarchive/archive_read_support_filter_program.c M contrib/libarchive/libarchive/archive_read_support_filter_rpm.c M contrib/libarchive/libarchive/archive_read_support_filter_uu.c M contrib/libarchive/libarchive/archive_read_support_filter_xz.c M contrib/libarchive/libarchive/archive_read_support_filter_zstd.c M contrib/libarchive/libarchive/archive_read_support_format_7zip.c M contrib/libarchive/libarchive/archive_read_support_format_all.c M contrib/libarchive/libarchive/archive_read_support_format_ar.c M contrib/libarchive/libarchive/archive_read_support_format_cab.c M contrib/libarchive/libarchive/archive_read_support_format_cpio.c M contrib/libarchive/libarchive/archive_read_support_format_iso9660.c M contrib/libarchive/libarchive/archive_read_support_format_lha.c M contrib/libarchive/libarchive/archive_read_support_format_mtree.c M contrib/libarchive/libarchive/archive_read_support_format_rar.c M contrib/libarchive/libarchive/archive_read_support_format_rar5.c M contrib/libarchive/libarchive/archive_read_support_format_raw.c M contrib/libarchive/libarchive/archive_read_support_format_tar.c M contrib/libarchive/libarchive/archive_read_support_format_warc.c M contrib/libarchive/libarchive/archive_read_support_format_xar.c M contrib/libarchive/libarchive/archive_read_support_format_zip.c M contrib/libarchive/libarchive/archive_string.c M contrib/libarchive/libarchive/archive_time.c M contrib/libarchive/libarchive/archive_util.3 M contrib/libarchive/libarchive/archive_util.c M contrib/libarchive/libarchive/archive_version_details.c M contrib/libarchive/libarchive/archive_write.c M contrib/libarchive/libarchive/archive_write_add_filter.c M contrib/libarchive/libarchive/archive_write_add_filter_b64encode.c M contrib/libarchive/libarchive/archive_write_add_filter_bzip2.c M contrib/libarchive/libarchive/archive_write_add_filter_compress.c M contrib/libarchive/libarchive/archive_write_add_filter_grzip.c M contrib/libarchive/libarchive/archive_write_add_filter_gzip.c M contrib/libarchive/libarchive/archive_write_add_filter_lrzip.c M contrib/libarchive/libarchive/archive_write_add_filter_lz4.c M contrib/libarchive/libarchive/archive_write_add_filter_lzop.c M contrib/libarchive/libarchive/archive_write_add_filter_program.c M contrib/libarchive/libarchive/archive_write_add_filter_uuencode.c M contrib/libarchive/libarchive/archive_write_add_filter_xz.c M contrib/libarchive/libarchive/archive_write_add_filter_zstd.c M contrib/libarchive/libarchive/archive_write_disk_posix.c M contrib/libarchive/libarchive/archive_write_disk_set_standard_lookup.c M contrib/libarchive/libarchive/archive_write_filter.3 M contrib/libarchive/libarchive/archive_write_format.3 M contrib/libarchive/libarchive/archive_write_private.h M contrib/libarchive/libarchive/archive_write_set_format_7zip.c M contrib/libarchive/libarchive/archive_write_set_format_ar.c M contrib/libarchive/libarchive/archive_write_set_format_cpio_binary.c M contrib/libarchive/libarchive/archive_write_set_format_cpio_newc.c M contrib/libarchive/libarchive/archive_write_set_format_cpio_odc.c M contrib/libarchive/libarchive/archive_write_set_format_gnutar.c M contrib/libarchive/libarchive/archive_write_set_format_iso9660.c M contrib/libarchive/libarchive/archive_write_set_format_mtree.c M contrib/libarchive/libarchive/archive_write_set_format_pax.c M contrib/libarchive/libarchive/archive_write_set_format_raw.c M contrib/libarchive/libarchive/archive_write_set_format_shar.c M contrib/libarchive/libarchive/archive_write_set_format_ustar.c M contrib/libarchive/libarchive/archive_write_set_format_v7tar.c M contrib/libarchive/libarchive/archive_write_set_format_warc.c M contrib/libarchive/libarchive/archive_write_set_format_xar.c M contrib/libarchive/libarchive/archive_write_set_format_zip.c M contrib/libarchive/libarchive/archive_write_set_options.3 M contrib/libarchive/libarchive/libarchive-formats.5 M contrib/libarchive/libarchive/test/read_open_memory.c A contrib/libarchive/libarchive/test/test_acl_from_text_overread.c A contrib/libarchive/libarchive/test/test_acl_nfs4_null_id_overflow.c A contrib/libarchive/libarchive/test/test_acl_nfs4_text.c A contrib/libarchive/libarchive/test/test_acl_posix1e_text.c M contrib/libarchive/libarchive/test/test_archive_match_path.c M contrib/libarchive/libarchive/test/test_archive_parse_date.c M contrib/libarchive/libarchive/test/test_archive_pathmatch.c A contrib/libarchive/libarchive/test/test_archive_pathmatch_oob.c A contrib/libarchive/libarchive/test/test_archive_pathmatch_oob_bracket.bin.uu A contrib/libarchive/libarchive/test/test_archive_pathmatch_oob_strchr.bin.uu M contrib/libarchive/libarchive/test/test_archive_read_close_twice.c D contrib/libarchive/libarchive/test/test_archive_read_set_option.c M contrib/libarchive/libarchive/test/test_archive_read_set_options.c A contrib/libarchive/libarchive/test/test_archive_seek_data_unsupported.c M contrib/libarchive/libarchive/test/test_archive_string.c M contrib/libarchive/libarchive/test/test_archive_string_conversion.c A contrib/libarchive/libarchive/test/test_archive_string_conversion_overread.c A contrib/libarchive/libarchive/test/test_archive_write_add_filter.c M contrib/libarchive/libarchive/test/test_archive_write_add_filter_by_name.c M contrib/libarchive/libarchive/test/test_archive_write_set_format_by_name.c M contrib/libarchive/libarchive/test/test_archive_write_set_format_filter_by_ext.c D contrib/libarchive/libarchive/test/test_archive_write_set_format_option.c D contrib/libarchive/libarchive/test/test_archive_write_set_option.c M contrib/libarchive/libarchive/test/test_archive_write_set_options.c M contrib/libarchive/libarchive/test/test_compat_bzip2.c M contrib/libarchive/libarchive/test/test_compat_cpio.c M contrib/libarchive/libarchive/test/test_compat_gtar.c M contrib/libarchive/libarchive/test/test_compat_gtar_large.c M contrib/libarchive/libarchive/test/test_compat_gzip.c M contrib/libarchive/libarchive/test/test_compat_lz4.c M contrib/libarchive/libarchive/test/test_compat_lzip.c M contrib/libarchive/libarchive/test/test_compat_lzma.c M contrib/libarchive/libarchive/test/test_compat_lzop.c M contrib/libarchive/libarchive/test/test_compat_mac.c M contrib/libarchive/libarchive/test/test_compat_perl_archive_tar.c M contrib/libarchive/libarchive/test/test_compat_plexus_archiver_tar.c M contrib/libarchive/libarchive/test/test_compat_solaris_pax_sparse.c M contrib/libarchive/libarchive/test/test_compat_tar_directory.c M contrib/libarchive/libarchive/test/test_compat_tar_hardlink.c M contrib/libarchive/libarchive/test/test_compat_xz.c M contrib/libarchive/libarchive/test/test_compat_zip.c M contrib/libarchive/libarchive/test/test_compat_zstd.c M contrib/libarchive/libarchive/test/test_entry.c M contrib/libarchive/libarchive/test/test_fuzz.c A contrib/libarchive/libarchive/test/test_fuzz_consumer.h M contrib/libarchive/libarchive/test/test_gnutar_filename_encoding.c M contrib/libarchive/libarchive/test/test_open_filename.c M contrib/libarchive/libarchive/test/test_pax_filename_encoding.c M contrib/libarchive/libarchive/test/test_pax_xattr_header.c A contrib/libarchive/libarchive/test/test_read_data_into_fd_size_exceeds_declared.c A contrib/libarchive/libarchive/test/test_read_data_into_fd_size_exceeds_declared_deflate.zip.uu A contrib/libarchive/libarchive/test/test_read_data_into_fd_size_exceeds_declared_stored.zip.uu M contrib/libarchive/libarchive/test/test_read_data_large.c M contrib/libarchive/libarchive/test/test_read_disk_directory_traversals.c R065 contrib/libarchive/libarchive/test/test_archive_write_set_filter_option.c contrib/libarchive/libarchive/test/test_read_files_compressed.c A contrib/libarchive/libarchive/test/test_read_files_compressed.part01.uu A contrib/libarchive/libarchive/test/test_read_files_compressed.part02.uu M contrib/libarchive/libarchive/test/test_read_filter_compress.c M contrib/libarchive/libarchive/test/test_read_filter_grzip.c M contrib/libarchive/libarchive/test/test_read_filter_gzip_recursive.c M contrib/libarchive/libarchive/test/test_read_filter_lrzip.c R066 contrib/libarchive/libarchive/test/test_archive_read_set_filter_option.c contrib/libarchive/libarchive/test/test_read_filter_lz4_raw.c A contrib/libarchive/libarchive/test/test_read_filter_lz4_raw_skip.uu M contrib/libarchive/libarchive/test/test_read_filter_lzop.c M contrib/libarchive/libarchive/test/test_read_filter_lzop_multiple_parts.c M contrib/libarchive/libarchive/test/test_read_filter_program.c M contrib/libarchive/libarchive/test/test_read_filter_uudecode_raw.c R069 contrib/libarchive/libarchive/test/test_archive_read_close_twice_open_fd.c contrib/libarchive/libarchive/test/test_read_filter_zstd_raw.c A contrib/libarchive/libarchive/test/test_read_filter_zstd_raw_loop.uu M contrib/libarchive/libarchive/test/test_read_format_7zip.c A contrib/libarchive/libarchive/test/test_read_format_7zip_archive_properties.7z.uu M contrib/libarchive/libarchive/test/test_read_format_7zip_encryption_data.c M contrib/libarchive/libarchive/test/test_read_format_7zip_encryption_header.c M contrib/libarchive/libarchive/test/test_read_format_7zip_encryption_partially.c A contrib/libarchive/libarchive/test/test_read_format_7zip_entries_oom.7z.uu A contrib/libarchive/libarchive/test/test_read_format_7zip_entries_oom.c A contrib/libarchive/libarchive/test/test_read_format_7zip_folders_oom.7z.uu A contrib/libarchive/libarchive/test/test_read_format_7zip_folders_oom.c M contrib/libarchive/libarchive/test/test_read_format_7zip_issue2765.c M contrib/libarchive/libarchive/test/test_read_format_7zip_malformed.c A contrib/libarchive/libarchive/test/test_read_format_7zip_malformed4.7z.uu A contrib/libarchive/libarchive/test/test_read_format_7zip_malformed_numfiles_oom.7z.uu M contrib/libarchive/libarchive/test/test_read_format_7zip_packinfo_digests.c A contrib/libarchive/libarchive/test/test_read_format_7zip_sfx_boundary_elf.elf.uu A contrib/libarchive/libarchive/test/test_read_format_7zip_sfx_boundary_pe.exe.uu M contrib/libarchive/libarchive/test/test_read_format_cab.c M contrib/libarchive/libarchive/test/test_read_format_cab_filename.c A contrib/libarchive/libarchive/test/test_read_format_cab_lzx_16bit.c A contrib/libarchive/libarchive/test/test_read_format_cab_lzx_16bit.cab.uu A contrib/libarchive/libarchive/test/test_read_format_cab_lzx_e8.c A contrib/libarchive/libarchive/test/test_read_format_cab_lzx_e8.cab.uu A contrib/libarchive/libarchive/test/test_read_format_cab_mszip_oob.c A contrib/libarchive/libarchive/test/test_read_format_cab_multi.c A contrib/libarchive/libarchive/test/test_read_format_cab_multi.p1.cab.uu A contrib/libarchive/libarchive/test/test_read_format_cab_multi.p2.cab.uu M contrib/libarchive/libarchive/test/test_read_format_cpio_afio.c A contrib/libarchive/libarchive/test/test_read_format_cpio_afio_header.part1.cpio.uu A contrib/libarchive/libarchive/test/test_read_format_cpio_afio_header.part2.cpio.uu M contrib/libarchive/libarchive/test/test_read_format_cpio_bin_bz2.c M contrib/libarchive/libarchive/test/test_read_format_cpio_bin_gz.c M contrib/libarchive/libarchive/test/test_read_format_cpio_filename.c M contrib/libarchive/libarchive/test/test_read_format_cpio_svr4_bzip2_rpm.c M contrib/libarchive/libarchive/test/test_read_format_cpio_svr4_gzip.c M contrib/libarchive/libarchive/test/test_read_format_cpio_svr4_gzip_rpm.c A contrib/libarchive/libarchive/test/test_read_format_cpio_symlink_trailer.c A contrib/libarchive/libarchive/test/test_read_format_cpio_symlink_trailer.cpio.uu M contrib/libarchive/libarchive/test/test_read_format_gtar_filename.c M contrib/libarchive/libarchive/test/test_read_format_gtar_gz.c M contrib/libarchive/libarchive/test/test_read_format_gtar_redundant_L.c M contrib/libarchive/libarchive/test/test_read_format_gtar_sparse.c A contrib/libarchive/libarchive/test/test_read_format_gtar_sparse_reuse.tar.uu M contrib/libarchive/libarchive/test/test_read_format_gtar_sparse_skip_entry.c M contrib/libarchive/libarchive/test/test_read_format_huge_rpm.c A contrib/libarchive/libarchive/test/test_read_format_iso_joliet_utf16be_overflow.c A contrib/libarchive/libarchive/test/test_read_format_iso_joliet_utf16be_overflow.iso.uu A contrib/libarchive/libarchive/test/test_read_format_iso_rockridge_ce_loop.iso.Z.uu A contrib/libarchive/libarchive/test/test_read_format_iso_rockridge_zf_overflow.c A contrib/libarchive/libarchive/test/test_read_format_iso_rockridge_zf_overflow.iso.uu R096 contrib/libarchive/libarchive/test/test_read_format_isojoliet_bz2.c contrib/libarchive/libarchive/test/test_read_format_isojoliet_compress.c A contrib/libarchive/libarchive/test/test_read_format_isorr_ce_loop.c R098 contrib/libarchive/libarchive/test/test_read_format_isorr_bz2.c contrib/libarchive/libarchive/test/test_read_format_isorr_compress.c R098 contrib/libarchive/libarchive/test/test_read_format_isorr_new_bz2.c contrib/libarchive/libarchive/test/test_read_format_isorr_new_compress.c R098 contrib/libarchive/libarchive/test/test_read_format_isozisofs_bz2.c contrib/libarchive/libarchive/test/test_read_format_isozisofs_compress.c M contrib/libarchive/libarchive/test/test_read_format_lha.c M contrib/libarchive/libarchive/test/test_read_format_lha_bugfix_0.c M contrib/libarchive/libarchive/test/test_read_format_lha_filename.c M contrib/libarchive/libarchive/test/test_read_format_lha_filename_utf16.c A contrib/libarchive/libarchive/test/test_read_format_lha_symlink_missing_target.c A contrib/libarchive/libarchive/test/test_read_format_lha_symlink_missing_target.lzh.uu M contrib/libarchive/libarchive/test/test_read_format_mtree.c M contrib/libarchive/libarchive/test/test_read_format_pax_bz2.c M contrib/libarchive/libarchive/test/test_read_format_rar.c A contrib/libarchive/libarchive/test/test_read_format_rar3_lowdist_reset.rar.uu M contrib/libarchive/libarchive/test/test_read_format_rar5.c A contrib/libarchive/libarchive/test/test_read_format_rar5_bad_filter.c A contrib/libarchive/libarchive/test/test_read_format_rar5_bad_tables.c A contrib/libarchive/libarchive/test/test_read_format_rar5_bad_tables.rar.uu A contrib/libarchive/libarchive/test/test_read_format_rar5_block_hdr_fail_loop.c A contrib/libarchive/libarchive/test/test_read_format_rar5_bytes_remaining_underflow.rar.uu A contrib/libarchive/libarchive/test/test_read_format_rar5_main_block_extra_bytes.rar.uu A contrib/libarchive/libarchive/test/test_read_format_rar5_skip_block_extra_bytes.rar.uu A contrib/libarchive/libarchive/test/test_read_format_rar5_unpacked_size_exceeds_declared.rar.uu M contrib/libarchive/libarchive/test/test_read_format_rar_encryption.c M contrib/libarchive/libarchive/test/test_read_format_rar_encryption_data.c M contrib/libarchive/libarchive/test/test_read_format_rar_encryption_header.c M contrib/libarchive/libarchive/test/test_read_format_rar_encryption_partially.c M contrib/libarchive/libarchive/test/test_read_format_rar_invalid1.c A contrib/libarchive/libarchive/test/test_read_format_rar_newsub_rr_over_1m.rar.uu M contrib/libarchive/libarchive/test/test_read_format_rar_overflow.c A contrib/libarchive/libarchive/test/test_read_format_rar_seek_data_cursor0.rar.uu A contrib/libarchive/libarchive/test/test_read_format_rar_unbound_staticdata.rar.uu R062 contrib/libarchive/libarchive/test/test_archive_read_close_twice_open_filename.c contrib/libarchive/libarchive/test/test_read_format_tar_acl_oob_read.c A contrib/libarchive/libarchive/test/test_read_format_tar_acl_oob_read.tar.uu M contrib/libarchive/libarchive/test/test_read_format_tar_concatenated.c M contrib/libarchive/libarchive/test/test_read_format_tar_empty_filename.c M contrib/libarchive/libarchive/test/test_read_format_tar_empty_pax.c M contrib/libarchive/libarchive/test/test_read_format_tar_empty_with_gnulabel.c M contrib/libarchive/libarchive/test/test_read_format_tar_filename.c M contrib/libarchive/libarchive/test/test_read_format_tar_mac_metadata.c M contrib/libarchive/libarchive/test/test_read_format_tar_pax_g_large.c M contrib/libarchive/libarchive/test/test_read_format_tar_pax_large_attr.c M contrib/libarchive/libarchive/test/test_read_format_tar_pax_negative_time.c A contrib/libarchive/libarchive/test/test_read_format_tar_pax_sun_holesdata.c A contrib/libarchive/libarchive/test/test_read_format_tar_pax_sun_holesdata.tar.uu A contrib/libarchive/libarchive/test/test_read_format_tar_pax_timestamps.c A contrib/libarchive/libarchive/test/test_read_format_tar_pax_timestamps.tar.uu A contrib/libarchive/libarchive/test/test_read_format_tar_timestamp_overflow.c A contrib/libarchive/libarchive/test/test_read_format_tar_timestamp_overflow.tar.uu M contrib/libarchive/libarchive/test/test_read_format_tgz.c M contrib/libarchive/libarchive/test/test_read_format_ustar_filename.c M contrib/libarchive/libarchive/test/test_read_format_warc.c M contrib/libarchive/libarchive/test/test_read_format_xar.c A contrib/libarchive/libarchive/test/test_read_format_xar_atou64_overread.xar.uu A contrib/libarchive/libarchive/test/test_read_format_xar_base64_oob.xar.uu A contrib/libarchive/libarchive/test/test_read_format_xar_large_mode.xar.uu A contrib/libarchive/libarchive/test/test_read_format_xar_parse_time_overread.xar.uu M contrib/libarchive/libarchive/test/test_read_format_zip.c M contrib/libarchive/libarchive/test/test_read_format_zip_7075_utf8_paths.c M contrib/libarchive/libarchive/test/test_read_format_zip_comment_stored.c M contrib/libarchive/libarchive/test/test_read_format_zip_encryption_data.c M contrib/libarchive/libarchive/test/test_read_format_zip_encryption_header.c M contrib/libarchive/libarchive/test/test_read_format_zip_encryption_partially.c M contrib/libarchive/libarchive/test/test_read_format_zip_filename.c M contrib/libarchive/libarchive/test/test_read_format_zip_jar.c M contrib/libarchive/libarchive/test/test_read_format_zip_mac_metadata.c M contrib/libarchive/libarchive/test/test_read_format_zip_malformed.c M contrib/libarchive/libarchive/test/test_read_format_zip_nested.c M contrib/libarchive/libarchive/test/test_read_format_zip_nofiletype.c M contrib/libarchive/libarchive/test/test_read_format_zip_padded.c A contrib/libarchive/libarchive/test/test_read_format_zip_pkware_unix.zip.uu A contrib/libarchive/libarchive/test/test_read_format_zip_ppmd8_aes256_streaming.zipx.uu M contrib/libarchive/libarchive/test/test_read_format_zip_sfx.c A contrib/libarchive/libarchive/test/test_read_format_zip_size_exceeds_declared.c A contrib/libarchive/libarchive/test/test_read_format_zip_size_exceeds_declared_deflate.zip.uu A contrib/libarchive/libarchive/test/test_read_format_zip_size_exceeds_declared_stored.zip.uu A contrib/libarchive/libarchive/test/test_read_format_zip_symlink_unsupported_compression.c A contrib/libarchive/libarchive/test/test_read_format_zip_symlink_unsupported_compression.zip.uu M contrib/libarchive/libarchive/test/test_read_format_zip_traditional_encryption_data.c A contrib/libarchive/libarchive/test/test_read_format_zip_uncompressed_size_off_by_4gib.c A contrib/libarchive/libarchive/test/test_read_format_zip_uncompressed_size_off_by_4gib.zip.uu M contrib/libarchive/libarchive/test/test_read_format_zip_winzip_aes.c A contrib/libarchive/libarchive/test/test_read_format_zip_winzip_aes256_large_bzip2.zip.uu A contrib/libarchive/libarchive/test/test_read_format_zip_winzip_aes256_large_lzma.zip.uu A contrib/libarchive/libarchive/test/test_read_format_zip_winzip_aes256_large_ppmd.zip.uu A contrib/libarchive/libarchive/test/test_read_format_zip_winzip_aes256_large_xz.zip.uu A contrib/libarchive/libarchive/test/test_read_format_zip_winzip_aes256_large_zstd.zip.uu M contrib/libarchive/libarchive/test/test_read_format_zip_winzip_aes_large.c M contrib/libarchive/libarchive/test/test_read_format_zip_with_invalid_traditional_eocd.c M contrib/libarchive/libarchive/test/test_read_format_zip_zip64.c A contrib/libarchive/libarchive/test/test_read_format_zip_zipx_encrypted.c A contrib/libarchive/libarchive/test/test_read_format_zip_zipx_lzma_oom.c A contrib/libarchive/libarchive/test/test_read_format_zip_zipx_lzma_oom.zipx.uu M contrib/libarchive/libarchive/test/test_read_pax_empty_val_no_nl.c M contrib/libarchive/libarchive/test/test_read_pax_xattr_rht_security_selinux.c M contrib/libarchive/libarchive/test/test_read_pax_xattr_schily.c M contrib/libarchive/libarchive/test/test_read_set_format.c M contrib/libarchive/libarchive/test/test_sparse_basic.c M contrib/libarchive/libarchive/test/test_ustar_filename_encoding.c M contrib/libarchive/libarchive/test/test_write_disk_appledouble.c M contrib/libarchive/libarchive/test/test_write_disk_hfs_compression.c M contrib/libarchive/libarchive/test/test_write_disk_mac_metadata.c M contrib/libarchive/libarchive/test/test_write_disk_no_hfs_compression.c M contrib/libarchive/libarchive/test/test_write_disk_secure.c M contrib/libarchive/libarchive/test/test_write_disk_secure744.c M contrib/libarchive/libarchive/test/test_write_disk_secure745.c M contrib/libarchive/libarchive/test/test_write_disk_secure746.c M contrib/libarchive/libarchive/test/test_write_disk_secure_noabsolutepaths.c M contrib/libarchive/libarchive/test/test_write_filter_b64encode.c M contrib/libarchive/libarchive/test/test_write_filter_bzip2.c M contrib/libarchive/libarchive/test/test_write_filter_gzip.c M contrib/libarchive/libarchive/test/test_write_filter_lrzip.c M contrib/libarchive/libarchive/test/test_write_filter_lz4.c M contrib/libarchive/libarchive/test/test_write_filter_lzip.c M contrib/libarchive/libarchive/test/test_write_filter_lzma.c M contrib/libarchive/libarchive/test/test_write_filter_lzop.c M contrib/libarchive/libarchive/test/test_write_filter_uuencode.c M contrib/libarchive/libarchive/test/test_write_filter_xz.c M contrib/libarchive/libarchive/test/test_write_filter_zstd.c M contrib/libarchive/libarchive/test/test_write_format_7zip.c M contrib/libarchive/libarchive/test/test_write_format_7zip_empty.c M contrib/libarchive/libarchive/test/test_write_format_7zip_large.c M contrib/libarchive/libarchive/test/test_write_format_gnutar.c M contrib/libarchive/libarchive/test/test_write_format_gnutar_filenames.c A contrib/libarchive/libarchive/test/test_write_format_gnutar_huge.c M contrib/libarchive/libarchive/test/test_write_format_iso9660.c M contrib/libarchive/libarchive/test/test_write_format_iso9660_boot.c A contrib/libarchive/libarchive/test/test_write_format_iso9660_bugs.c M contrib/libarchive/libarchive/test/test_write_format_iso9660_empty.c M contrib/libarchive/libarchive/test/test_write_format_iso9660_filename.c A contrib/libarchive/libarchive/test/test_write_format_iso9660_joliet_id.c A contrib/libarchive/libarchive/test/test_write_format_iso9660_joliet_overflow.bin.uu A contrib/libarchive/libarchive/test/test_write_format_iso9660_null_deref.bin.uu R051 contrib/libarchive/libarchive/test/test_archive_read_set_format_option.c contrib/libarchive/libarchive/test/test_write_format_iso9660_rockridge.c A contrib/libarchive/libarchive/test/test_write_format_iso9660_rockridge_overflow.c A contrib/libarchive/libarchive/test/test_write_format_iso9660_underflow.bin.uu M contrib/libarchive/libarchive/test/test_write_format_iso9660_zisofs.c A contrib/libarchive/libarchive/test/test_write_format_iso9660_zisofs_overflow.c M contrib/libarchive/libarchive/test/test_write_format_mtree.c A contrib/libarchive/libarchive/test/test_write_format_mtree_absolute.c A contrib/libarchive/libarchive/test/test_write_format_mtree_dotdot.c A contrib/libarchive/libarchive/test/test_write_format_mtree_null_deref.bin.uu A contrib/libarchive/libarchive/test/test_write_format_mtree_null_deref.c M contrib/libarchive/libarchive/test/test_write_format_mtree_preset_digests.c M contrib/libarchive/libarchive/test/test_write_format_pax.c A contrib/libarchive/libarchive/test/test_write_format_pax_align.c A contrib/libarchive/libarchive/test/test_write_format_tar_empty_dirname.c M contrib/libarchive/libarchive/test/test_write_format_tar_ustar.c M contrib/libarchive/libarchive/test/test_write_format_warc.c M contrib/libarchive/libarchive/test/test_write_format_xar.c A contrib/libarchive/libarchive/test/test_write_format_xar_bugs.c M contrib/libarchive/libarchive/test/test_write_format_xar_empty.c A contrib/libarchive/libarchive/test/test_write_format_xar_fflags.c A contrib/libarchive/libarchive/test/test_write_format_xar_strcpy_overlap.bin.uu A contrib/libarchive/libarchive/test/test_write_format_xar_underflow.bin.uu M contrib/libarchive/libarchive/test/test_write_format_zip.c R097 contrib/libarchive/libarchive/test/test_write_format_zip_compression_lzmaxz.c contrib/libarchive/libarchive/test/test_write_format_zip_compression_lzma_xz.c A contrib/libarchive/libarchive/test/test_write_format_zip_empty_pathname.c A contrib/libarchive/libarchive/test/test_write_format_zip_long_pathname.c M contrib/libarchive/libarchive/test/test_write_format_zip_windows_path.c M contrib/libarchive/libarchive/test/test_write_format_zip_zip64.c M contrib/libarchive/libarchive/test/test_write_read_format_zip.c M contrib/libarchive/libarchive/xxhash.c A contrib/libarchive/libarchive_fe/lafe_fnmatch.c A contrib/libarchive/libarchive_fe/lafe_fnmatch.h M contrib/libarchive/tar/bsdtar.h M contrib/libarchive/tar/read.c M contrib/libarchive/tar/subst.c M contrib/libarchive/tar/test/test_option_P_upper.c M contrib/libarchive/tar/test/test_option_mtime.c M contrib/libarchive/tar/test/test_option_s.c A contrib/libarchive/tar/test/test_option_stdout_size_exceeds_declared.c A contrib/libarchive/tar/test/test_option_stdout_size_exceeds_declared_deflate.zip.uu A contrib/libarchive/tar/test/test_option_stdout_size_exceeds_declared_stored.zip.uu M contrib/libarchive/tar/test/test_stdio.c M contrib/libarchive/tar/util.c M contrib/libarchive/tar/write.c M contrib/libarchive/test_utils/test_main.c M contrib/libarchive/test_utils/test_utils.c M contrib/libarchive/unzip/bsdunzip.c M contrib/libarchive/unzip/bsdunzip_platform.h M contrib/libarchive/unzip/test/test_I.c M contrib/libarchive/unzip/test/test_P_encryption.c A contrib/libarchive/unzip/test/test_f.c A contrib/libarchive/unzip/test/test_f_new.zip.uu A contrib/libarchive/unzip/test/test_f_old.zip.uu A contrib/libarchive/unzip/test/test_symlink.c A contrib/libarchive/unzip/test/test_symlink_1.zip.uu A contrib/libarchive/unzip/test/test_symlink_2.zip.uu A contrib/libarchive/unzip/test/test_symlink_dotdot.c A contrib/libarchive/unzip/test/test_symlink_dotdot.zip.uu A contrib/libarchive/unzip/test/test_u.c A contrib/libarchive/unzip/test/test_u_new.zip.uu A contrib/libarchive/unzip/test/test_u_old.zip.uu M lib/libarchive/tests/Makefile M usr.bin/tar/tests/Makefile M usr.bin/unzip/tests/Makefile _____________________________________________________________________________________________________________ Commit: b258fa0f41252aeb395e4c8063eec531810836bf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b258fa0f41252aeb395e4c8063eec531810836bf Author: Kevin Bowling (Mon 10 Aug 2026 17:02:16 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) ixgbe: Recognize production X550 PHY IDs According to Linux 5f1c3589b0f0, the X550 PHY classifier still matches an alpha silicon ID, while the shared definitions contain the two production IDs. This can leave production hardware on the generic probing path and issue unnecessary PHY queries. (cherry picked from commit 392f0af6685a06e89fecdc38cc2e910d2b84d738) M sys/dev/ixgbe/ixgbe_phy.c _____________________________________________________________________________________________________________ Commit: 1b368793c10a68ea5943fe16582b6e20377f1f3d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1b368793c10a68ea5943fe16582b6e20377f1f3d Author: Kevin Bowling (Mon 10 Aug 2026 16:53:10 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) ixgbe: Preserve the full VF RSS domain in the shared RETA The 82599 and X540 share the global RSS redirection table between the PF and its VFs. Programming that table from the PF queue count prevents a VF from using queue indices absent from the PF layout. A one-queue PF consequently directs every flow for a two- or four-queue VF to queue zero. Program at least four queue indices while SR-IOV is active. Each pool PSRTYPE.RQPL field masks the shared table to the queue subset available to that function, so the PF can continue using fewer queues. (cherry picked from commit 8b668bc7e7c8b0a1bcb018360a4aafa445ff554f) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 134c7091554c7fbeeb9c2782b5820c32f4a99986 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=134c7091554c7fbeeb9c2782b5820c32f4a99986 Author: Kevin Bowling (Mon 10 Aug 2026 17:29:24 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) ixgbe: Add 10GBase-BX BiDi SFP+ module support 10G-BX optics use paired wavelengths to carry 10 Gb/s Ethernet over a single strand of single-mode fiber. Their 10G compliance byte is empty, so identify them from the SFF-8472 nominal signaling rate and single-mode reach fields. When an EEPROM also advertises 1G BASE-BX10, give the complete 10G bitrate and reach signature precedence. Otherwise retain FreeBSD's permissive 1G-BX identification rather than requiring a nominal 1.3 GBd rate. Relnotes: yes (cherry picked from commit f9ce33b0d8ef233063bd6c27bdba2580f97d9094) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/ixgbe_82599.c M sys/dev/ixgbe/ixgbe_phy.c M sys/dev/ixgbe/ixgbe_phy.h M sys/dev/ixgbe/ixgbe_type.h M sys/dev/ixgbe/ixgbe_x550.c _____________________________________________________________________________________________________________ Commit: 4bd47ddadf3cda0f981e1aff6926fa2ccb39661f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4bd47ddadf3cda0f981e1aff6926fa2ccb39661f Author: Kevin Bowling (Mon 10 Aug 2026 17:28:14 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) net: Add ifmedia support for 10GBase-BX BiDi 10GBase-BX uses paired wavelengths to carry both directions over a single strand of single-mode fiber. The optics must be paired so that the transmit and receive wavelengths cross over. MFC after: 2 weeks (cherry picked from commit 4220b52453c9701922955dcc1c1e1554d6a9f3ae) M sys/net/if_media.h _____________________________________________________________________________________________________________ Commit: 91c34d52c9cf108db3a70805c8ace3e04228cf6d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=91c34d52c9cf108db3a70805c8ace3e04228cf6d Author: Slava Shwartsman (Wed 13 May 2026 11:10:50 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) net/if_media.h: Add 800GBase-X and 200Gbit/s per lane support Reviewed by: kib Tested by: Wafa Hamzah MFC after: 1 week Sponsored by: Nvidia networking Differential revision: https://reviews.freebsd.org/D57083 (cherry picked from commit 51f313dbc7a28a7bd2013c205261f29f115eb0a7) M sys/net/ieee8023ad_lacp.c M sys/net/if_media.h _____________________________________________________________________________________________________________ Commit: d794d8d44bc048c2603053dd4d492c7c1ad9b9ef URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d794d8d44bc048c2603053dd4d492c7c1ad9b9ef Author: Andrew Gallatin (Tue 2 Jun 2026 17:18:03 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) lacp: Simplify lacp_compose_key() lacp uses interface speed to separate lacp members into different aggregation groups. It wants to use the lower 4 bits of the key to represent the speed. This change fixes a few bugs around that: 1) Actually use the baud rate reported by the interface as the speed (and fall back to use the baudrate associated with the media if the interface somehow doesn't support if_baudrate) 2) Compressess the baud rates down to the 4 bits reserved for them. Using things like FM_400G_FR8 does not fit in 4 bits (its value is 0x1811) . In fact, interfaces faster than 1Gb/s don't fit in 4 bits using the old scheme 3) Emits a warning on the console once per boot if it encounters a NIC with an unsupported speed to make it slightly more obvious why LACP might not behave as expected. This was prompted by a 400g nic with a broken media detection reporting "unknown" as its speed, and being unable to be in the same aggregation group with a different 400g nic that was properly reporting its speed. Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D57026 Reviewed by: slavash (cherry picked from commit e98ed8d99fd41873dc52cf78e70e9f12e3e93042) M sys/net/ieee8023ad_lacp.c _____________________________________________________________________________________________________________ Commit: bd07986f91bd335533d0895be9f880b3718f743c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bd07986f91bd335533d0895be9f880b3718f743c Author: Ed Maste (Tue 5 May 2026 00:48:25 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) if_media: Claim 10BASE-T1S and 10BASE-T1L constants These are two single-pair Ethernet (SPE) variants that run at 10 Mbps. 10BASE-T1S has automotive origins and supports multiple nodes on up to 25m of cable. 10BASE-T1L is intended for building and industrial automation and supports long-distance point to point links of over 1km. Reviewed by: kbowling Differential Revision: https://reviews.freebsd.org/D56952 (cherry picked from commit a3036edd0292291a71fb74ba2bce355159ac6913) M sys/net/if_media.h _____________________________________________________________________________________________________________ Commit: 09ec7b7fb3ed1d5bc3924da59dc5ae67f970c988 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=09ec7b7fb3ed1d5bc3924da59dc5ae67f970c988 Author: Navdeep Parhar (Fri 14 Nov 2025 06:02:28 GMT) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) Fix typo in recently added 400G media Reported by: glebius Fixes: 2d608a4cebbd if_media.h: Add 400GBase-SR8 and 400GBase-CR8 MFC after: 1 week Sponsored by: Chelsio Communications (cherry picked from commit 4d2d65cad49765a084819195d81a7c0043f1938c) M sys/net/if_media.h _____________________________________________________________________________________________________________ Commit: 08b751fcce772cb2120cfd4ef088815b3c461325 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=08b751fcce772cb2120cfd4ef088815b3c461325 Author: Navdeep Parhar (Wed 12 Nov 2025 22:10:04 GMT) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) if_media.h: Add 400GBase-SR8 and 400GBase-CR8 Reviewed by: bz (network) MFC after: 1 week Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D53387 (cherry picked from commit 2d608a4cebbd5b9e648f86e52f115c02fac52d88) M sys/net/ieee8023ad_lacp.c M sys/net/if_media.h _____________________________________________________________________________________________________________ Commit: d5bd650db5ecc2c4ed10f210d1888811d0302af9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d5bd650db5ecc2c4ed10f210d1888811d0302af9 Author: Kevin Bowling (Mon 10 Aug 2026 16:12:43 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) ixgbe: Expose EEE LPI event counters X550-family devices provide clear-on-read counters for transmit and receive Low Power Idle events. Accumulate each register once in the normal statistics poll and expose the monotonic totals below the eee sysctl node. Document the counters together with the existing EEE control. Obtained from: Intel ix 3.4.39 (cherry picked from commit ff86fd4f36618dacf1628180034c312c70294276) M share/man/man4/ix.4 M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/ixgbe_type.h _____________________________________________________________________________________________________________ Commit: 111dbcdb2190d21f07c516e3d7b4f406301a9ee2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=111dbcdb2190d21f07c516e3d7b4f406301a9ee2 Author: Kevin Bowling (Mon 10 Aug 2026 16:11:01 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:23 BST) ixv: Report multigigabit link speeds The VF link-status path can receive 2.5 and 5 Gb/s speed bits from X550-family PFs, but media reporting has no cases for them. The bootverbose message also assumes every non-10-Gb/s link is 1 Gb/s. Expose the corresponding ifmedia subtypes and derive the diagnostic speed through the shared link-speed conversion helper. (cherry picked from commit a884921abbaf52ff862a32ff6806bf071974faa6) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: 1c6690a9b5eaedb4f8fd5bea3fda70bb5455b21a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1c6690a9b5eaedb4f8fd5bea3fda70bb5455b21a Author: Kevin Bowling (Mon 10 Aug 2026 16:09:56 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) ixgbe: Compare flow control against requested mode The flow-control sysctl represents the configured policy, while current_mode is the mode negotiated with the link partner. Comparing a new request with current_mode can needlessly reprogram an unchanged policy or skip a requested policy change that happens to match the current negotiation result. Compare with requested_mode before deciding that no update is needed. (cherry picked from commit c410551b9feadf9b65f920fd25714fcda8299a56) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: c6c6d71def5f225742f092f18020460824a9d714 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c6c6d71def5f225742f092f18020460824a9d714 Author: Kevin Bowling (Mon 10 Aug 2026 16:09:41 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) ixgbe: Validate EEPROM checksum section bounds The generic checksum walker trusts NVM section pointers and lengths and iterates with a 16-bit index. A corrupt section that crosses the end of the EEPROM can wrap the index and leave the driver in an effectively unbounded read loop during attach. Validate each non-empty section against the discovered EEPROM word size before reading it, and use widened arithmetic for the inclusive end and iterator. (cherry picked from commit be3e1068ea8699fb719691453899ca20a601fe1d) M sys/dev/ixgbe/ixgbe_common.c _____________________________________________________________________________________________________________ Commit: d7e118471d10179f10e9f27c38709de3cd35799a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d7e118471d10179f10e9f27c38709de3cd35799a Author: Kevin Bowling (Mon 10 Aug 2026 16:09:29 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) ixgbe: Restore missed packet accounting missed_rx and total_missed_rx are never populated. As a result, the GPRC erratum workaround does not remove missed packets and iqdrops always remains zero. The rx_missed_packets sysctl and input-error total also expose only MPC bank zero. Read and accumulate all eight MPC banks. Use the interval total to correct GPRC and the cumulative total for iqdrops, input errors, and the aggregate sysctl. This matches DPDK's coverage of the hardware banks. (cherry picked from commit 660099c985e8bfc931b01398715441c90cf0d4db) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 0adc18f9f8d7c7e3c81e7cd5384f872de7bceb52 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0adc18f9f8d7c7e3c81e7cd5384f872de7bceb52 Author: Kevin Bowling (Mon 10 Aug 2026 16:08:49 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) ixgbe: Preserve VF jumbo frame size across PF resets sc->max_frame_size represents the largest frame requested by the PF or an active VF. The MTU callback replaces it with the PF frame size, so a subsequent reinitialization can program MHADD below an active VF's jumbo-frame request. Recompute the aggregate before hardware initialization and use it when programming MHADD. Recompute after each VF LPE request as well, so a reduced request can lower the hardware limit when no other function needs the previous value. (cherry picked from commit 877f0ee40c2af801c5ca758a37b3ebddc560dad2) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: a9f39c3bc2ecfa39ea6fc8a08a459b32ed1743c6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a9f39c3bc2ecfa39ea6fc8a08a459b32ed1743c6 Author: Kevin Bowling (Mon 10 Aug 2026 12:56:57 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) ixl: Quiesce VF DMA before a PF reset A PF reset has a warning interval before the hardware reset begins. Cooperative VF drivers respond to the reset event by stopping and releasing their receive buffers, but notifying VFs did not stop the hardware queues. An active VF could therefore DMA through its old rings into freed mbuf clusters during the warning interval. Put every enabled VF in reset, drain its PCIe transactions, disable its queues, wait for receive queue shutdown, and drain transactions again before tearing down the PF HMC and AdminQ. Hold VFs in reset again while rebuilding the firmware topology. Release VF reset before programming the replacement VSI and queue mappings, since VF reset clears those registers, and publish VFACTIVE only after reconstruction succeeds. Leave a VF held in reset if rebuilding it fails. Fixes: 983e628a0c47 ("ixl: Rebuild VF resources after a PF reset") (cherry picked from commit 0048dfddc049f3ef050ba16544f42503d5c42db8) M sys/dev/ixl/ixl_pf.h M sys/dev/ixl/ixl_pf_iflib.c M sys/dev/ixl/ixl_pf_iov.c _____________________________________________________________________________________________________________ Commit: 3cbfafcc9919f1e9b120fede8b20c2cf862745dc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3cbfafcc9919f1e9b120fede8b20c2cf862745dc Author: Kevin Bowling (Mon 10 Aug 2026 11:54:26 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) iavf: Resume AdminQ processing after PF reset A PF reset indication leaves IAVF_STATE_RESET_PENDING set while the VF recreates its AdminQ and negotiates new resources. The ordinary AdminQ task refuses to consume messages while that state is set. Consequently, the first DISABLE_QUEUES reply after successful mailbox rediscovery remains in the receive queue and initialization times out. Later retries and manual interface restarts repeat the same cycle. Clear the stale reset indication once VERSION and GET_VF_RESOURCES have succeeded, before enabling interrupts and resuming normal virtchnl requests. (cherry picked from commit 02fbb1ce07f60fab82e21e5bbe2dae85f024bb55) M sys/dev/iavf/if_iavf_iflib.c _____________________________________________________________________________________________________________ Commit: d79c9a8675f15dee6a0cd2b8c0a37e6c7d014d55 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d79c9a8675f15dee6a0cd2b8c0a37e6c7d014d55 Author: Kevin Bowling (Mon 10 Aug 2026 05:00:46 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) iavf: Do not publish link-up while stopped A PF link event remains cached while a VF is administratively down. Media status queries called iavf_update_link_status() and published that cached state as link-up, while the stopped admin path immediately published link-down. Consumers reacting to link events could turn this into an unbounded notification loop and prevent interface detach from draining its link-state task. Keep the cached PF state, but only publish link-up after iflib has marked the VF running. A subsequent admin pass publishes the cached state after a successful initialization. (cherry picked from commit 46241b7d6647dfc2fc557c02804d20b9f05af5c4) M sys/dev/iavf/if_iavf_iflib.c _____________________________________________________________________________________________________________ Commit: 3e8b8afbb6e99f1f5e0a9a299b15e639deb33329 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e8b8afbb6e99f1f5e0a9a299b15e639deb33329 Author: Kevin Bowling (Mon 10 Aug 2026 04:46:24 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) ixl: Track and recover MDD-blocked VFs The hardware identifies each VF with TX and RX malicious-driver status latches, but the driver combined all events into one counter and reported only the last VF found. Consume every PF and VF latch, keep per-direction VF counters, and rate-limit per-VF diagnostics. Keep the software block until a successful VF or PF reset reconstructs its resources. Match Linux i40e policy by leaving a detected VF blocked by default. Add an opt-in hw.ixl.mdd_auto_reset_vf tunable that notifies and resets the VF for installations that prefer availability. DPDK provides the register clear and per-VF attribution precedent; Linux provides the recovery policy. (cherry picked from commit 93f1065920d806400ace6b60b025faf91926bdaa) M share/man/man4/ixl.4 M sys/dev/ixl/if_ixl.c M sys/dev/ixl/ixl_pf.h M sys/dev/ixl/ixl_pf_iov.c M sys/dev/ixl/ixl_pf_main.c _____________________________________________________________________________________________________________ Commit: d06f0c8ebe51e966afd2969a16c7bd9795325ac9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d06f0c8ebe51e966afd2969a16c7bd9795325ac9 Author: Kevin Bowling (Mon 10 Aug 2026 04:41:08 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:22 BST) ixl: Report PF initialization failures to iflib ixl_if_init() returned early after AdminQ reconstruction, LAA, or VSI initialization failures. Since IFDI_INIT has no return value, iflib then marked the interface RUNNING and enabled its interrupts and timers despite the incomplete hardware state. Use iflib_init_failed() on each incomplete path. Also stop at the first ring-enable error and tear down any partially enabled rings before reporting failure. This keeps the interface stopped and makes a later initialization attempt start from a bounded state. (cherry picked from commit f008b582c9f1e1a636e88a5f330ff3a167094440) M sys/dev/ixl/if_ixl.c M sys/dev/ixl/ixl_pf_iflib.c _____________________________________________________________________________________________________________ Commit: 94fe5296a43d44aa0db1ecb4e779f9b4d718d161 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=94fe5296a43d44aa0db1ecb4e779f9b4d718d161 Author: Kevin Bowling (Mon 10 Aug 2026 04:38:40 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 10:12:21 BST) ixl: Rebuild VF resources after a PF reset A PF or EMP reset destroys the firmware switch topology, including every VF VSI. The driver rebuilt only its PF VSI and left configured VFs with stale switch element and VSI identifiers. Notify VFs before a driver initiated reset, recreate the IOV VEB, and rebuild each configured VF VSI and queue mapping after the PF switch is restored. Keep a VF out of VFACTIVE if its reconstruction fails so one failure cannot expose incomplete resources or prevent the PF and other VFs from recovering. Invalidate cached VF firmware identifiers and runtime state before recreating the VEB. If VEB creation itself fails, teardown and mailbox paths can no longer use pre-reset SEIDs or VSI data. Factor the common VEB setup out of IOV initialization so initial setup and post-reset reconstruction use the same topology and filter sequence. (cherry picked from commit 983e628a0c47afb47d201ce629e9619fb751254d) M sys/dev/ixl/ixl_pf.h M sys/dev/ixl/ixl_pf_iflib.c M sys/dev/ixl/ixl_pf_iov.c M sys/dev/ixl/ixl_pf_main.c _____________________________________________________________________________________________________________ Commit: f9b8badc77f32f81686ff818f1b6c7684cff0819 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f9b8badc77f32f81686ff818f1b6c7684cff0819 Author: Kevin Bowling (Mon 10 Aug 2026 04:34:59 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 09:55:20 BST) ixl: Enforce VF VLAN policy Add access and trunk VLAN policy to the SR-IOV schema. Access VFs use a hardware PVID and cannot alter their VLAN membership. Trunk VFs may register up to 16 VLANs, while VLAN 0 remains implicitly admitted for untagged and priority-tagged traffic. Enable hardware VLAN anti-spoofing and maintain the MAC-by-VLAN filter cross-product used by DPDK. Apply Linux's untrusted-VF limits of 18 MAC addresses and 16 VLANs so one guest cannot consume the shared PF filter table without bound. Document the access and trunk policy in ixl(4). (cherry picked from commit e2daa5c06c2febacf141f9fd3a6a18cf86df8fe1) M share/man/man4/ixl.4 M sys/dev/ixl/ixl_pf.h M sys/dev/ixl/ixl_pf_iov.c M sys/dev/ixl/ixl_pf_iov.h _____________________________________________________________________________________________________________ Commit: b92d13ab60dc0eb929e66edddf6f389e5b56e50d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b92d13ab60dc0eb929e66edddf6f389e5b56e50d Author: Kristof Provost (Fri 7 Aug 2026 15:07:09 BST) Committer: Kristof Provost (Mon 24 Aug 2026 08:17:33 BST) pfsync: handle large MTU pfsync interfaces pfsync packets were allocated with m_get2(), which can't return packets larger than MJUMPAGESIZE. As a result 9k MTU pfsync interfaces simply didn't work. Use m_get3(), which can allocate sufficiently large mbufs. Extend the pfsync:bulk test case to provoke this problem. PR: 297307 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297307 ) MFC after: 2 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 7e2781fdcfdbe489cc07572d33dc36bca06a342d) M sys/netpfil/pf/if_pfsync.c M tests/sys/netpfil/pf/pfsync.sh _____________________________________________________________________________________________________________ Commit: 9a34256fd915f759fa36df40f776a33b76926546 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9a34256fd915f759fa36df40f776a33b76926546 Author: Cy Schubert (Tue 18 Aug 2026 00:23:32 BST) Committer: Cy Schubert (Mon 24 Aug 2026 06:37:33 BST) ipfilter: Fix checksum update for NAT_DIVERTOUT When taking a snapshot of the before ip_len (s1) for comparison with the after-translated ip_len (s2), we must convert it from network to host byte order before we can use it. Add the missing ntohs() call. PR: 296944 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296944 ) MFC after: 3 days (cherry picked from commit c08a97fa27b914988ef092352872b2f455abb7c3) M sys/netpfil/ipfilter/netinet/ip_nat.c _____________________________________________________________________________________________________________ Commit: 8bee78182d91a601f6cefb5bf2d44b178af4c54d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8bee78182d91a601f6cefb5bf2d44b178af4c54d Author: Kevin Bowling (Mon 10 Aug 2026 04:21:01 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:57:39 BST) ixl: Make VF reset resource reconstruction fallible Treat each stage of VF reset and VSI reconstruction as fallible. Keep the VF out of VFACTIVE when PCIe drain, reset completion, VSI release, or VSI allocation fails, following the DPDK PF reset model. Propagate initial reset failures back through pci_iov_vf_add and unwind the VF queue allocation. Free the old software filter list before initializing a replacement VSI. ixl_init_filters() previously replaced the list head without freeing its entries, so every VF FLR leaked all MAC and VLAN filter objects. Reset the associated counters and VLAN bitmap with the list. Avoid allocating an initial VSI only to destroy it during the required initial VF reset, and remove redundant broadcast/filter programming from VSI setup. Also delete a partially created VSI when later Admin Queue setup fails. (cherry picked from commit ee52b925fa08158e510d5dddfd1c8fa26f120575) M sys/dev/ixl/ixl_pf_iflib.c M sys/dev/ixl/ixl_pf_iov.c _____________________________________________________________________________________________________________ Commit: d4f1764bb0be0c29dc9be6207d9c5487b945545b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d4f1764bb0be0c29dc9be6207d9c5487b945545b Author: Kevin Bowling (Mon 10 Aug 2026 04:15:17 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:57:28 BST) ixl: Validate VF virtchnl configuration Bound variable-length virtchnl messages before computing their expected length, following the newer Intel virtchnl implementation. Validate VF ring sizes and alignments before programming HMC contexts. DPDK uses 128-byte ring alignment and 64 through 8160 descriptors; the virtchnl ABI further specifies TX multiples of 8 and RX multiples of 32. Preserve the 4096-descriptor limit on X722. Validate queue bitmaps before changing any rings, validate all queue and interrupt contexts before applying a request, and reject invalid RSS table entries. Also avoid sending an ACK after VLAN-strip setup fails and reply to delete-VLAN errors with the correct opcode. These checks prevent malformed or oversized requests from an untrusted VF from partially programming resources outside its allocation. (cherry picked from commit e779914354db5cb3a20f4ec894d08b0f81d05ba2) M sys/dev/ixl/ixl_pf_iov.c M sys/dev/ixl/virtchnl.h _____________________________________________________________________________________________________________ Commit: 7afc16edf128f24d84a6d14e677320f9b43a6beb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7afc16edf128f24d84a6d14e677320f9b43a6beb Author: Kevin Bowling (Mon 10 Aug 2026 05:53:08 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:56:46 BST) ixl: Initialize VF sysctl contexts before use The VF array is zeroed at allocation, but its sysctl contexts were only populated after each VF was successfully added. If VF setup failed, IOV teardown still passed every requested VF context to sysctl_ctx_free(). An untouched context is not an initialized empty TAILQ and caused a page fault during teardown. Initialize every VF context with the array so both successful setup and partial-failure cleanup have a valid lifetime. (cherry picked from commit ae122c5443882ae4d3d19aacfcfd16a2c8d7b688) M sys/dev/ixl/ixl_pf_iov.c _____________________________________________________________________________________________________________ Commit: 78f5c8efef89c8927f5e9a67197d86d5bb6ca076 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=78f5c8efef89c8927f5e9a67197d86d5bb6ca076 Author: Kevin Bowling (Mon 10 Aug 2026 08:31:56 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:56:35 BST) iavf: Honor iflib transmit completion batching iavf uses descriptor writeback by default. Hardware writes completion status into a transmit descriptor only when it completes a descriptor marked RS. iavf marked every packet RS even though its report-status queue recorded and inspected only descriptors selected by iflib. The other completion writes could not help reclaim descriptors. iflib marks selected packets with IPI_TX_INTR as completion checkpoints. It forces a checkpoint as deferred work or ring pressure grows. Retain EOP on every packet, but set RS only at those checkpoints. The deprecated head-writeback option on 700-series VFs gets the same batching: each RS checkpoint permits hardware to publish the completed ring head. DPDK uses the same sparse RS design. Let iflib choose the adaptive interval for FreeBSD. This is a PCIe/memory bandwidth savings. (cherry picked from commit 8eb4403e9d4a35f33a0ce41067ccb1924c6960dd) M sys/dev/iavf/iavf_txrx_iflib.c _____________________________________________________________________________________________________________ Commit: a721f72dea13e716fb702b36358116dbc0f1679b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a721f72dea13e716fb702b36358116dbc0f1679b Author: Kevin Bowling (Mon 10 Aug 2026 08:31:48 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:56:24 BST) ixl: Honor iflib transmit completion batching ixl uses head writeback by default. Hardware publishes the transmit ring head through DMA only after completing a descriptor marked RS. Marking every packet requested much more frequent head updates than iflib needs to reclaim descriptors. iflib marks selected packets with IPI_TX_INTR as completion checkpoints. It forces a checkpoint as deferred work or ring pressure grows. Retain EOP on every packet, but set RS only at those checkpoints. This batches head writebacks while preserving bounded descriptor reclamation. The optional descriptor writeback mode benefits as well. ixl already recorded only IPI_TX_INTR descriptors in its report-status queue, so status written for every other packet was not inspected. DPDK uses the same sparse RS design. Let iflib choose the adaptive interval for FreeBSD. This is a PCIe/memory bandwidth savings. (cherry picked from commit dd32931271c784caf2c51e27f24514093b81429c) M sys/dev/ixl/ixl_txrx.c _____________________________________________________________________________________________________________ Commit: b902b279919f325516160240e4856bf43a6d41b4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b902b279919f325516160240e4856bf43a6d41b4 Author: Kevin Bowling (Sun 9 Aug 2026 10:36:12 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:56:14 BST) iavf: Recover when PF communication is unavailable A PF reset or loss of virtchnl service can make visible interface initialization wait up to ten seconds and then return from the void ifdi_init callback. Iflib consequently marks the interface running even though its queues were not initialized, and no retry is scheduled when the PF returns. Check reset readiness without polling during reinitialization, propagate queue-message submission errors, and bound a silent enable or disable to one mailbox timeout. Report unsuccessful initialization to iflib and publish link-down state without polling the stopped mailbox. A VFLR also discards the Admin Queue and permits the PF to replace the VF VSI. Track when full virtchnl rediscovery is required, renegotiate the API version, refresh and validate the VF resources before using a cached VSI ID, and replay the MAC and VLAN filters cleared by reset. Bound each runtime discovery attempt while preserving the existing attach-time wait. While the VF remains administratively up, retry complete initialization after 250 ms, one second, four seconds, and then at a capped eight-second interval. (cherry picked from commit e9a4d3969a3164d41d41480bacd3520fcf05ccbf) M sys/dev/iavf/iavf_iflib.h M sys/dev/iavf/iavf_lib.c M sys/dev/iavf/iavf_lib.h M sys/dev/iavf/iavf_vc_common.c M sys/dev/iavf/iavf_vc_common.h M sys/dev/iavf/if_iavf_iflib.c _____________________________________________________________________________________________________________ Commit: 84e092e9db3973eef96e3cc06368cb6057c251cd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=84e092e9db3973eef96e3cc06368cb6057c251cd Author: Kevin Bowling (Mon 10 Aug 2026 01:40:16 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:56:04 BST) e1000: Correct 82542 flow-control mode handling The 82542-specific setup routine unconditionally reads the NVM default, overwriting a flow-control mode selected by software. It also removes transmit PAUSE support from all 82542 revisions even though the hardware restriction applies only to rev 2.0. Resolve the NVM default only when requested, scope the transmit restriction to rev 2.0, and replace integer bit masking of the enum with explicit valid mode transitions. This restores the behavior from before the Intel shared-code split and resolves -Wassign-enum. Reported by: glebius (cherry picked from commit 2f1d9ab96214db2ec6ce30c44b55a89a7eaa8f6a) M sys/dev/e1000/e1000_82542.c _____________________________________________________________________________________________________________ Commit: d1e26c2153c9c149c4e8124558110b1fd0a0664d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d1e26c2153c9c149c4e8124558110b1fd0a0664d Author: Kevin Bowling (Sun 9 Aug 2026 10:38:21 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:55:53 BST) ice: Report initialization failures to iflib The primary and mirror-VSI ifdi_init callbacks can return early when reset state or hardware queue and filter setup prevents initialization. Iflib then marks the interface running and enables interrupts although the driver did not finish bringing it up. Report each non-detach failure through iflib_init_failed(). Keep the existing ice reset and subinterface-reinitialization machinery responsible for scheduling recovery. (cherry picked from commit dcdc00a41d3e4be0e75eb625cd3a23d5a927ed15) M sys/dev/ice/if_ice_iflib.c _____________________________________________________________________________________________________________ Commit: b50cef613c7dc993b94af06d4e3e1955fb51a741 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b50cef613c7dc993b94af06d4e3e1955fb51a741 Author: Kevin Bowling (Sun 9 Aug 2026 10:37:20 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:55:39 BST) bnxt: Report initialization failures to iflib HWRM failures currently return from the void ifdi_init callback. iflib then marks the interface running and enables interrupts despite an incomplete ring or VNIC setup. Move the hardware setup into an error-returning helper. The ifdi_init wrapper can report failure through iflib_init_failed(), while firmware recovery can propagate the same error through bnxt_open(). Also clear the initialized state after partial setup is torn down. (cherry picked from commit cb0e8f5fb6de03428137c096b1c8b62710829029) M sys/dev/bnxt/bnxt_en/if_bnxt.c _____________________________________________________________________________________________________________ Commit: f336c4564391f699317326cebed69b428d9e031b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f336c4564391f699317326cebed69b428d9e031b Author: Kevin Bowling (Sun 9 Aug 2026 12:34:58 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:55:29 BST) ixgbe: Enable PF RSS across queues with SR-IOV PSRTYPE is indexed by pool in VMDq+RSS mode, and its RQPL field selects the number of receive queues available within the pool. The PF occupies the last pool, but the driver programmed pool zero and left the PF RQPL value at zero. As a result, all PF receive traffic was directed to its first queue while SR-IOV was enabled. Program PSRTYPE for the PF pool and encode its allocated receive queue count. (cherry picked from commit 49f9143d9a37a4646c9f4ddac53b97dde04e3fa3) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 17222ebeb31a77ffb73424e1c002c8353d9d2e79 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=17222ebeb31a77ffb73424e1c002c8353d9d2e79 Author: Kevin Bowling (Sun 9 Aug 2026 08:16:57 BST) Committer: Kevin Bowling (Mon 24 Aug 2026 01:55:17 BST) ixv: Recover when the PF mailbox is unavailable A failed VF reset or mailbox API negotiation currently returns from the void ifdi_init callback. Iflib then marks the interface running even though ixv left its adapter stopped. Stopped media queries can continue polling the PF, and no timer remains active to retry when the PF returns. Track mailbox readiness and report unsuccessful initialization to iflib. Stopped admin and media-status passes now publish cached link-down state without touching the mailbox. While the VF remains administratively up, retry complete initialization after 250 ms, one second, four seconds, and then at a capped eight-second interval. Preserve the requested MAC across reset, then program it once after mailbox API negotiation. The previous two pre-reset requests each could wait a full mailbox timeout after an established PF disappeared, holding the iflib context lock for about two seconds before the reset handshake. Avoid a redundant VF reset in the stop half of an immediate iflib reinitialization. Also remove the stop-time RAR mailbox request: reset has already discarded CTS at that point, and successful initialization restores the current address. Retain a reset for an ordinary administrative stop when the mailbox was established. (cherry picked from commit 0e56ccb5d86618994f884da21dfce692ad21e458) M sys/dev/ixgbe/if_ixv.c M sys/dev/ixgbe/ixgbe.h _____________________________________________________________________________________________________________ Commit: e9944ab701376272b1422f5fdf34c98018600de5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e9944ab701376272b1422f5fdf34c98018600de5 Author: Kevin Bowling (Sun 16 Aug 2026 02:35:44 BST) Committer: Kevin Bowling (Sun 23 Aug 2026 01:25:04 BST) ixgbe: Correct the PFVFRSSRK index range comment PFVFRSSRK contains ten 32-bit RSS key words, numbered 0 through 9. The previous inclusive range incorrectly ended at 10. Sponsored by: BBOX.io (cherry picked from commit f177ff939a91a3d710752438b13aff53d5afc725) M sys/dev/ixgbe/ixgbe_type.h _____________________________________________________________________________________________________________ Commit: 5f5b209fa492595de5ad415975a690345b24e302 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5f5b209fa492595de5ad415975a690345b24e302 Author: Kevin Bowling (Sat 1 Aug 2026 03:42:28 BST) Committer: Kevin Bowling (Sun 23 Aug 2026 01:24:54 BST) ixv: Reject unsupported E610 Hyper-V VFs E610 Hyper-V VFs use PCI configuration space communication instead of the native PF/VF mailbox. The generic E610 match currently attaches native mailbox operations to those devices, and the imported Hyper-V subdevice identifier is incorrect. Correct the subdevice identifier to 0x00ff, as used by DPDK shared ixgbe code, and reject that subtype until ixv has a complete Hyper-V operations table. Sponsored by: BBOX.io (cherry picked from commit 08c41a679b281505eb7f1fd0cb528f3c1fe87fed) M sys/dev/ixgbe/if_ixv.c M sys/dev/ixgbe/ixgbe_type.h _____________________________________________________________________________________________________________ Commit: 1d368c131018bc6b23bea5ddc2f49de07f713d61 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1d368c131018bc6b23bea5ddc2f49de07f713d61 Author: Kevin Bowling (Sun 9 Aug 2026 08:16:56 BST) Committer: Kevin Bowling (Sun 23 Aug 2026 01:24:44 BST) iflib: Support recoverable initialization failure The ifdi_init method cannot report an error, so iflib always marks an interface running and enables its interrupts after the callback returns. Drivers whose hardware initialization depends on an unavailable peer can only return early and leave a falsely running interface. Add iflib_init_failed() so a callback can leave the interface stopped. Also add a conditional reset request for asynchronous recovery: it is discarded if the interface is administratively down when the admin task runs, preventing a queued retry from resurrecting a stopped interface. Do not restore saved driver flags after an MTU or capability change when initialization failed. Restoring the pre-init flags would overwrite the stopped result with stale RUNNING state. Document that reset requests require the caller to schedule the admin task, that output remains blocked during recovery, and that iflib rather than the driver owns the driver flags. (cherry picked from commit 9328a7eedba115040312bd1ea368371a0dbd0cac) M share/man/man9/Makefile M share/man/man9/iflibdd.9 M share/man/man9/iflibdi.9 M sys/net/iflib.c M sys/net/iflib.h _____________________________________________________________________________________________________________ Commit: 21f5c8438851ed2a8ac9251a42648999f8b36439 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=21f5c8438851ed2a8ac9251a42648999f8b36439 Author: Andre Albsmeier (Sat 17 Aug 2024 10:20:00 BST) Committer: Michael Osipov (Sat 22 Aug 2026 22:13:51 BST) daemon(8): Add option to write pidfile w/o supervising it Co-authored-by: Michael Osipov PR: 280487 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280487 ) Reviewed by: kevans, michaelo MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D46313 (cherry picked from commit fe06e383cc64fce8b604d21f8526b91fa6aecc39) M usr.sbin/daemon/daemon.8 M usr.sbin/daemon/daemon.c _____________________________________________________________________________________________________________ Commit: 224e136f86c571c3cea82baca94b809fd16ecf9c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=224e136f86c571c3cea82baca94b809fd16ecf9c Author: Gordon Bergling (Mon 17 Aug 2026 06:57:15 BST) Committer: Gordon Bergling (Sat 22 Aug 2026 06:20:21 BST) bluetooth(4): Fix a typo in a kernel message in l2cap - s/staring/starting/ (cherry picked from commit 8e968c5ff4112387c87f7afdf79d873a6f475b21) M sys/netgraph/bluetooth/l2cap/ng_l2cap_llpi.c _____________________________________________________________________________________________________________ Commit: 9a1395752cba93bb17ac934fdd16a88ed2b787f9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9a1395752cba93bb17ac934fdd16a88ed2b787f9 Author: Kevin Bowling (Tue 11 Aug 2026 16:21:49 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:59:02 BST) e1000: Add Nova Lake I219 support Add support for future client platform (cherry picked from commit 698c3b0ce1e788415173639366ae89ae7b7903ca) M sys/dev/e1000/e1000_api.c M sys/dev/e1000/e1000_hw.h M sys/dev/e1000/e1000_ich8lan.c M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 76c8c9900d0691c63e45316cb0b6bd432fa4c7cf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=76c8c9900d0691c63e45316cb0b6bd432fa4c7cf Author: Kevin Bowling (Sat 8 Aug 2026 11:44:36 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:58:03 BST) ixv: Negotiate VF queue-set limits ixv uses one queue set on 82599 and X540 VFs and assumes two on X550-family VFs. The PF reports the queues assigned to each VF with GET_QUEUES after mailbox API 1.1 negotiation. Query the PF during attach. Bound symmetric iflib queue sets by the PF grant and available MSI-X data vectors. Retain one queue set per data vector: ixgbe VFs expose at most three vectors and one is reserved for the mailbox. The hardware permits each pool to use a subset of its RSS queues, so a two-queue ceiling is valid when the PF assigns four. This enables the second data vector on 82599 and X540 while avoiding an assumed second queue when an X550-family VF is granted only one. Keep the existing family limits if the mailbox is unavailable or the PF uses an older API. (cherry picked from commit 98fad621ed697586782e488afdc05252c060fec3) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: 33127459114663c6a95a3e45c0416d54ea5c650e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=33127459114663c6a95a3e45c0416d54ea5c650e Author: Kevin Bowling (Sat 8 Aug 2026 12:10:18 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:57:51 BST) ix/ixv: Match Tx writeback thresholds to iflib PTHRESH controls when the device prefetches transmit descriptors, HTHRESH controls how many host descriptors must be ready, and WTHRESH controls completion writeback batching. iflib places RS on selected descriptors and reclaims through those checkpoints. The data sheets require WTHRESH to be zero when software uses RS. Clear WTHRESH while retaining the established PTHRESH 32 and HTHRESH 1 fetch policy. This also follows DPDK in pairing sparse RS descriptors with WTHRESH zero. DPDK defaults to 32/0/0, while Linux ixgbevf uses 32/1/8. The 32/1/0 setting preserves FreeBSD's prefetch policy and the data-sheet requirement that HTHRESH be nonzero when PTHRESH is used. (cherry picked from commit 0baf0fabdb5e60e917458f85706707ee92683080) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_ixv.c M sys/dev/ixgbe/ixgbe.h _____________________________________________________________________________________________________________ Commit: c116b6fbf0bc276b9b8ca654dd06ae467a4fac2f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c116b6fbf0bc276b9b8ca654dd06ae467a4fac2f Author: Kevin Bowling (Sat 8 Aug 2026 12:30:40 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:57:34 BST) igc: Correct descriptor control programming The transmit-ring setup was copied from the e1000 path. On I225 and I226, bits 22 through 24 are reserved and bit 25 enables the queue; it is not a legacy low-water threshold. Correct the field masks, remove the nonapplicable legacy definitions, and program only defined fields. Use PTHRESH=8 and HTHRESH=1. Keep WTHRESH at zero so the hardware honors sparse RS descriptors issued by iflib. Linux and DPDK use a writeback threshold of 16, but request status on every packet. A nonzero threshold makes hardware ignore individual RS bits and is unsuitable for the iflib completion model. The receive-ring setup likewise used a magic mask that left bit 20 of the five-bit WTHRESH field untouched. Define the receive threshold fields and replace them exactly before installing the established PTHRESH=8, HTHRESH=8, WTHRESH=4 policy. (cherry picked from commit e2aff50727cbe4cb5e99f825c2c6bd8a4915de67) M sys/dev/igc/if_igc.c M sys/dev/igc/igc_defines.h _____________________________________________________________________________________________________________ Commit: cd9b04bdb1cc18496e84ee86fcdee8cf6b19d431 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cd9b04bdb1cc18496e84ee86fcdee8cf6b19d431 Author: Kevin Bowling (Sat 8 Aug 2026 13:27:37 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:56:22 BST) igb: Program Rx descriptor thresholds by family 82576 specification-update erratum 26 says MSI-X EITR expiration can fail to trigger receive descriptor writeback. A WTHRESH above one can therefore leave received packets invisible until the threshold fills. The shared threshold macros selected policy by enum ordering, so an 82576 VF fell into the generic WTHRESH=4 case. VFs always use MSI-X and require the same WTHRESH=1 workaround as the PF. Use PTHRESH=8 for 82575 and 82576 PFs and VFs, matching DPDK and the current Linux PF driver. The legacy FreeBSD PF and Linux igbvf value of 16 thrashes limited descriptor cache; no specification or erratum requires it. Retain the i354 PTHRESH=12 exception. Enumerate every supported igb PF and VF MAC type so each receives its intended policy. Also clear every threshold bit before installing the new values. The old mask retained the high WTHRESH bit, and 82575 uses six-bit fields while later controllers use five-bit fields. (cherry picked from commit bd4182a2c96eb8329de54448a96bbd15f14238da) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: bf10f15ca79eebfbe2a834b34cd5c54afb3ed96a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bf10f15ca79eebfbe2a834b34cd5c54afb3ed96a Author: Kevin Bowling (Sat 22 Aug 2026 01:54:57 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:56:02 BST) Revert "e1000: Correct Rx descriptor threshold programming" Commit 98b95af873ac accidentally applied abe22383f1b1 a second time after its complete MFC in 081745262395. It added a duplicate em_integrated_jumbo_rx() definition and broke the build. Revert only the duplicate application. The original MFC remains in place. This reverts commit 98b95af873acf4beeb4ac9a0c83e5d009fb78cd9. M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 036522d3b97fc3cb165524d85e697d2219219225 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=036522d3b97fc3cb165524d85e697d2219219225 Author: Kevin Bowling (Sat 8 Aug 2026 12:29:44 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:50:00 BST) igb: Match Tx descriptor control to iflib iflib requests transmit completion status only on selected descriptors. Program a zero writeback threshold so igb hardware honors those sparse RS bits instead of writing back every descriptor in threshold-sized batches. Use the existing family specific prefetch threshold: eight descriptors on most controllers and 20 on I354, with a host threshold of one. These values match the Intel-derived Linux and DPDK drivers. Their nonzero writeback settings are not appropriate here because those drivers set RS on every packet. A zero writeback threshold also avoids depending on interrupt timer flushes affected by 82576 specification update erratum 26. Remove the old IGB_TX_WTHRESH macro as well. It has had no callers since the iflib conversion, so its 82575 conditional no longer implements any policy. (cherry picked from commit fddc393d93169b428fe64e9513ee463b5154b62a) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: 98b95af873acf4beeb4ac9a0c83e5d009fb78cd9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=98b95af873acf4beeb4ac9a0c83e5d009fb78cd9 Author: Kevin Bowling (Sat 8 Aug 2026 13:26:23 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:49:40 BST) e1000: Correct Rx descriptor threshold programming Jumbo receive tuning on integrated controllers enabled PTHRESH without a nonzero HTHRESH, contrary to the hardware programming requirements. It also covered only the integrated MAC generations present when the workaround was added. Enumerate every jumbo-capable ICH and PCH type and program PTHRESH=3 with HTHRESH=1. Linux fixed the same HTHRESH omission in b701cacdbcfb. The 82574 path combined threshold values with the reset values using bitwise OR. Requesting WTHRESH=4 while the reset value was one thus programmed five. Clear the complete threshold fields before installing the established PTHRESH=32, HTHRESH=4, WTHRESH=4 descriptor-granularity policy. (cherry picked from commit abe22383f1b144f0868aa0654ec4514d36f7a4f5) M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 0817452623951370c44e8529cc3cc7b84074ed3d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0817452623951370c44e8529cc3cc7b84074ed3d Author: Kevin Bowling (Sat 8 Aug 2026 13:26:23 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:48:37 BST) e1000: Correct Rx descriptor threshold programming Jumbo receive tuning on integrated controllers enabled PTHRESH without a nonzero HTHRESH, contrary to the hardware programming requirements. It also covered only the integrated MAC generations present when the workaround was added. Enumerate every jumbo-capable ICH and PCH type and program PTHRESH=3 with HTHRESH=1. Linux fixed the same HTHRESH omission in b701cacdbcfb. The 82574 path combined threshold values with the reset values using bitwise OR. Requesting WTHRESH=4 while the reset value was one thus programmed five. Clear the complete threshold fields before installing the established PTHRESH=32, HTHRESH=4, WTHRESH=4 descriptor-granularity policy. MFC after: 2 weeks (cherry picked from commit abe22383f1b144f0868aa0654ec4514d36f7a4f5) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: 0491dc48b51a80dd27eccb8a756f383b342d99aa URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0491dc48b51a80dd27eccb8a756f383b342d99aa Author: Kevin Bowling (Sat 8 Aug 2026 12:48:43 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:47:34 BST) e1000: Program Tx descriptor control by family TXDCTL programming is family dependent. 82543 erratum 35 and 82544 erratum 20 require WTHRESH to remain zero; a nonzero value can corrupt descriptor writebacks and hang the controller. Leave all descriptor-control thresholds at their reset values on 82542, 82543, and 82544. On the remaining em controllers, retain the established PTHRESH=31, HTHRESH=1, WTHRESH=1, and descriptor granularity policy. Several legacy specification updates identify full descriptor writeback as a workaround for transmit descriptor-queue errata. TXDCTL bit 22 is also family dependent. It is COUNT_DESC on the 82571 family and 80003ES2LAN. Intel shared initialization explicitly sets raw bit 22 on both transmit queues of every supported ICH/PCH generation, although the integrated public documentation marks it reserved. Preserve that required setting when iflib programs the thresholds, as DPDK does. Clearing it caused a persistent I219 transmit stall under descriptor pressure. The combined em/igb setup also wrote LWTHRESH=1 on every em controller. The driver does not enable the TXD_LOW interrupt controlled by that field. Enumerate every supported em MAC type and leave the unused low-water threshold disabled. This keeps the legacy descriptor-writeback safety policies separate from igb sparse-RS operation while programming only the fields appropriate to each family. (cherry picked from commit 66baeec9f8a4c4b1609d255b62e3572e0618747f) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: eafb6167ac2770fbc382d633d99807d316f6bb5a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=eafb6167ac2770fbc382d633d99807d316f6bb5a Author: Kevin Bowling (Sat 8 Aug 2026 12:09:21 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:47:24 BST) ixv: Advertise SCTP checksum offload The shared ixgbe transmit path already creates SCTP context descriptors, and the hardware exposes the same checksum capability to VFs. Advertise it through iflib as the PF driver does. (cherry picked from commit 4a13b8a7c5611059384309fdebad8e0fb49a73c2) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: 1ad87333e552531ac5d0aa31a69dd89c85d79bbc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1ad87333e552531ac5d0aa31a69dd89c85d79bbc Author: Kevin Bowling (Sat 8 Aug 2026 12:10:41 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:47:12 BST) ixv: Remove unused loader tunables The flow_control and hdr_split variables have never been read. VF flow control is controlled by the PF, while implementing header split would require receive-path support that ixv does not provide. (cherry picked from commit 8eeb25899afd7818d99ce1500be27ae8d992131f) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: 2db7e1143a770b8c61a2de26b75ff36244c970cc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2db7e1143a770b8c61a2de26b75ff36244c970cc Author: Kevin Bowling (Sat 8 Aug 2026 12:11:09 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:46:53 BST) ixgbe: Reject Flow Director with SR-IOV The iflib Flow Director path does not assign filters using the absolute queue and pool identifiers required by SR-IOV. Reject the combination during preflight validation rather than allowing an unsupported configuration to alter the PF receive path. The loader tunable is fixed before VFs can be created, so validation also prevents the reverse ordering of this combination. (cherry picked from commit c017bceda48c766780ab1d2239b296242fcf9cf2) M share/man/man4/ix.4 M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: f74b20db135499e1e419274cb0af155df5c075b3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f74b20db135499e1e419274cb0af155df5c075b3 Author: Kevin Bowling (Thu 6 Aug 2026 07:42:55 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:43:20 BST) ixgbe: Drain events for inactive VFs The aggregate VF mailbox poll includes only VFs whose driver configuration completed. A configured VF slot whose vf_add callback failed can nevertheless report reset, request, or acknowledgement events. Because the mailbox handler skips inactive entries, such an event remains latched and can retrigger administrative work indefinitely. Build the poll masks from every configured VF index and consume reset, message, and acknowledgement events for inactive entries without treating them as usable VFs. Use the index rather than the pool because early vf_add errors precede pool initialization. Also include E610 PFVFLREC in aggregate reset sampling. (cherry picked from commit 5017a241b987d365beb2c35faf0017b6afef2b64) M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: 92211aefa361dff962bae3a5f45c63118296ff59 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=92211aefa361dff962bae3a5f45c63118296ff59 Author: Kevin Bowling (Thu 6 Aug 2026 09:22:21 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:43:04 BST) ixgbe: Handle deferred link-status requests The iflib conversion records link-status interrupts in the administrative request mask, but the administrative task did not consume them. Timer polling usually hid the omission; frequent mailbox interrupts could continually rearm that timer and leave cached link state down after hardware recovered. Claim request batches atomically, process link-setup dependencies, and sample hardware before publishing link state. Bound each invocation to eight batches and requeue residual work so a continuous producer cannot monopolize the admin taskqueue. Queue every link-related request from the legacy interrupt path. Unlike MSI-X, its threaded continuation services RX and does not enqueue the admin task. This restores the event-driven behavior of ix-3.4.39. Fixes: b2c1e8e62049 ("ix(4): Run {mod,msf,mbx,fdir,phy}_task in if_update_admin_status") (cherry picked from commit 2b763a82f9f21b722b50830bc22af2b2acf36746) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 5cb13dd109f511800ea327332c2a306355627d2e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5cb13dd109f511800ea327332c2a306355627d2e Author: Kevin Bowling (Thu 6 Aug 2026 09:22:11 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:42:50 BST) ixv: Tolerate temporary PF mailbox unavailability A PF can be resetting, handling a slow link event, or deliberately withholding mailbox CTS while its VFs enumerate. Keep the VF attached when the reset handshake is temporarily unavailable so a later if_init can retry. Never leave VF hardware running without a negotiated mailbox API: start hardware only after reset succeeds, stop it when negotiation fails in attach or init, and defer later recovery through iflib. This prevents a tight reset loop while preserving recovery when the PF returns. (cherry picked from commit 26e3a8045ec7e2abfea9e2e49577c5e2c4226df1) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: d75bea6f8ec7b4404a296c1fc2b834b83e6ca58a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d75bea6f8ec7b4404a296c1fc2b834b83e6ca58a Author: Kevin Bowling (Sat 8 Aug 2026 05:14:53 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:42:38 BST) enic: Correct queue and attach resource ownership Completion queues are allocated by attach_pre but released by queues_free. An iflib failure between those stages leaks the allocation, while the original size expression also underallocates the array. Move completion queue allocation into the TX queue callback, correct its size, and unwind it with TX state if RX allocation fails. Make interrupt cleanup tolerate an unavailable array and reuse the array allocated during device initialization instead of replacing and leaking it. Release the DMA, multicast, and lock resources owned by a successful attach_pre during detach. Avoid allocating the statistics DMA area a second time near the end of attach_pre. (cherry picked from commit a97e1c2450ae62a73a3e0a2a2284e591cd82180a) M sys/dev/enic/if_enic.c _____________________________________________________________________________________________________________ Commit: 522e73a8d345272ffc45bd65363bc9d9d1749f35 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=522e73a8d345272ffc45bd65363bc9d9d1749f35 Author: Kevin Bowling (Sat 8 Aug 2026 05:14:53 BST) Committer: Kevin Bowling (Sat 22 Aug 2026 01:42:15 BST) axgbe: Align channel lifetime with queue allocation DMA channels are allocated by attach_pre but released by queues_free. When iflib fails after attach_pre and before queue allocation, neither the old detach nor queues_free path releases them. Allocate channels with the TX queue state and make queues_free tolerate partially allocated rings. Use it to unwind allocation failures so TX rings are also released when RX allocation fails. An early detach can also precede PHY initialization and interrupt assignment. Skip absent PHY and channel state, and release the locks owned by attach_pre on both failure and detach. (cherry picked from commit 65228a835267191ba692c2699b18913a388b4d20) M sys/dev/axgbe/if_axgbe_pci.c _____________________________________________________________________________________________________________ Commit: e1b0391424c6cf44cc0756547a4506e5cf49fd82 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e1b0391424c6cf44cc0756547a4506e5cf49fd82 Author: Kevin Bowling (Fri 14 Aug 2026 06:16:41 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:44:32 BST) pci: Do not reconcile MPS across PCI domains A PCI function can provide a host bridge into a synthetic PCI domain. Intel VMD does this: the host facing VMD function remains in its original domain while the hidden Root Ports and endpoints appear in a separate domain. The VMD function's Device Control does not describe an upstream link in that synthetic hierarchy. The hierarchy wide cold pass incorrectly used the VMD function's MPS to reprogram the hidden ports and their endpoints. Stop both cold reconciliation and runtime path walks at a PCI domain boundary. The real Root Ports within the VMD domain continue to reconcile their endpoints normally. Reviewed by: imp Tested by: Michael Butler Fixes: 8e9fe9996a1f ("pci: Reconcile MPS before attaching PCIe devices") Sponsored by: BBOX.io Differential Revision: https://reviews.freebsd.org/D58837 (cherry picked from commit 57293f4541cdea8e4158f751a4439f69b3ec1711) M sys/dev/pci/pci.c _____________________________________________________________________________________________________________ Commit: b5c6cea8bcb6a6df258f9c034192bd0a3891cb6e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b5c6cea8bcb6a6df258f9c034192bd0a3891cb6e Author: Kevin Bowling (Thu 6 Aug 2026 09:21:45 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:44:09 BST) ixgbe: Quiesce VFs across PF reset Stop VF transmit and receive in hardware, clear PF-side mailbox CTS, and notify active VFs before resetting a PF. A PF reset invalidates VF queue state, so the no-CTS control message makes cooperative VFs discard stale state and renegotiate after the PF returns. The hardware queue gates synchronously prevent further VF DMA. Do not hold the exclusive iflib context lock for a fixed VF-watchdog interval after the reset. Report the PF link transition directly instead of dispatching mailbox work from the stop path, which could otherwise re-enable VF I/O mid-reset. The CTS, PF-control, and VF queue controls follow the reset mechanisms used by DPDK. (cherry picked from commit aea4240ef5834fb4a47f80c659c80f902cb4bb06) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: c36be2987c8bf386651a73d92f1e414626d29d78 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c36be2987c8bf386651a73d92f1e414626d29d78 Author: Kevin Bowling (Wed 5 Aug 2026 15:14:44 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:43:59 BST) ixgbe: Use PF MTU for 82599 VF jumbo policy The shared maximum frame size is raised by VF LPE requests, so it cannot describe the PF MTU when enforcing the 82599 PF/VF jumbo restriction. Consult the PF ifnet MTU instead. Also correct the API 1.1 and later comparison so a jumbo VF is enabled when, and only when, the PF itself uses a jumbo MTU. This matches the policy implemented by DPDK. (cherry picked from commit 2a803e6f349c3d6cf770089f8a71bc5139308465) M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: 9f8a2669125695334d5d6eee998d9e5dea86f906 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9f8a2669125695334d5d6eee998d9e5dea86f906 Author: Kevin Bowling (Wed 5 Aug 2026 15:33:32 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:43:46 BST) ixgbe: Apply the 82599 D3 link workaround only for D3 ixgbe_stop_mac_link_on_d3_82599() implements the workaround for 82599 erratum 33. It forces incompatible auto-negotiation settings before the device enters D3, and reset clears them when returning to D0. ixgbe_if_stop() is also used for ordinary interface reconfiguration and recovery. Those paths do not enter D3 and should not program this power-management workaround. They continue to stop the adapter and disable the transmit laser. Move the call to ixgbe_setup_low_power_mode(), after ixgbe_if_stop(). This preserves the required ordering for detach, shutdown, and suspend while avoiding the D3 settings during ordinary restarts. (cherry picked from commit d025b84268ec18d55c2d3088729cf4ad7673ecac) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: de3c6546816e9dabe3876235695be1ed59986f23 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=de3c6546816e9dabe3876235695be1ed59986f23 Author: Kevin Bowling (Thu 6 Aug 2026 09:21:06 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:43:35 BST) ixv: Defer reset after mailbox failure When link polling loses mailbox clear-to-send or times out, request an iflib reset instead of continuing with stale VF state. The driver callback runs after iflib samples reset requests, so requeue the admin task to make iflib consume the request on its next pass rather than waiting for an unrelated timer or interrupt. (cherry picked from commit 2a2867c89a7ec2d89ad0a1be8847bb9dc0a4a9f0) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: 522a87d9e29fd2f31eda62af9f6e2ddf6efb5d51 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=522a87d9e29fd2f31eda62af9f6e2ddf6efb5d51 Author: Kevin Bowling (Thu 6 Aug 2026 12:05:13 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:43:25 BST) ixgbe: quarantine repeatedly faulting legacy VFs A guest can reinitialize after a VF function-level reset and repeatedly strand an 82599 or X540 PF with invalid descriptor DMA targets. Count only distinct Received Master Abort events accepted by the qualified transmit-stall detector and quarantine the VF after five events. Preserve quarantine across PF reinitialization, reject reset mailbox requests, and keep transmit, receive, and clear-to-send disabled. Recreating SR-IOV clears quarantine. Expose the affected pools through a read-only bitmap. After a successful quarantine FLR, leave the function in post-FLR configuration, explicitly keep decode and bus mastering disabled, verify the Command register, and refresh its PCI-layer cache so a later restore cannot re-enable the function. This addresses CVE-2021-33061 on 82599. Apply the same bounded-failure policy to X540 as defense in depth; the CVE does not list X540. Intel documents the 82599 issue in: http://iommu.com/datasheets/ethernet/controllers-nics/intel/ixgbe/Intel_82599_Application_Note_655276.pdf Security: CVE-2021-33061 (cherry picked from commit 31285bddf21e986e006e5405acc2c4626e43d190) M share/man/man4/ix.4 M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: e26c0652f7d65877b368317bed90250153b20f8b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e26c0652f7d65877b368317bed90250153b20f8b Author: Kevin Bowling (Thu 6 Aug 2026 12:04:58 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:43:14 BST) ixgbe: Recover legacy VFs from invalid DMA targets 82599 and X540 lack the X550 malicious-driver detector. Detect a VF whose PCI status reports a received master abort while its transmit ring has outstanding descriptors and makes no progress across consecutive samples. Consume the accepted PCI status latch, gate that VF I/O, and recover one pending VF per task pass with round-robin selection. This prevents an unreadable function from starving detection or recovery of other VFs. Save the complete writable VF PCI configuration before FLR, restore it afterward, and verify the hardware-backed Command state. Preserve the first good snapshot and pending state across reset events until restore and verification succeed. Introduce a common I/O-disabled policy bitmask so later quarantine policy can extend traffic gating without duplicating fault-state checks. (cherry picked from commit fe02e14c8843939abf4f5beb1f9d9db68e9df937) M share/man/man4/ix.4 M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: 44fd85b1a55ad95fdc9c2ddf173151dcd8fb2d6c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=44fd85b1a55ad95fdc9c2ddf173151dcd8fb2d6c Author: Kevin Bowling (Fri 7 Aug 2026 14:30:06 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:43:03 BST) pci: Skip PF SR-IOV state handling for VFs A VF's pci_devinfo references its PF's pcicfg_iov for resource bookkeeping, but only the PF implements the SR-IOV capability. pci_cfg_save() and pci_cfg_restore() treated any non-NULL cfg.iov as an owned capability and accessed the PF capability offset in VF configuration space. Saving a VF could therefore replace the shared PF settings with unrelated VF register values. Skip SR-IOV capability save and restore for PCICFG_VF children. The generic PCI and PCIe state of the VF remains preserved. This is also required by drivers that save VF state around a PF-driven function-level reset. (cherry picked from commit 78547d542f776d366c36b5a2fc747ddfe99523c6) M sys/dev/pci/pci.c _____________________________________________________________________________________________________________ Commit: 097430cb4c10b0680609d2e32ae4b05c3e9593e5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=097430cb4c10b0680609d2e32ae4b05c3e9593e5 Author: Kevin Bowling (Sat 1 Aug 2026 07:43:08 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:42:53 BST) ixgbe: force receive drops on every VF queue PFQDE is indexed by absolute receive queue, but the driver programs one index per VF. Only the first quarter or half of the VF queues therefore have queue-drop isolation, depending on the virtualization mode. The flow-control path can also clear those bits even though SR-IOV requires them independently of the PF pause policy. Program every queue in a VF pool before enabling receive for that VF. For an X550-family VF with an administrative port VLAN, also hide the VLAN tag as the hardware requires. Keep PF flow-control changes confined to the PF SRRCTL registers, and clear the VF queue settings when SR-IOV is torn down and the queues can be reassigned to the PF. (cherry picked from commit 4383ab82b0bbaf1c78ecdf4eb7628f1e154db24b) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: c344d5d9b2fcf37c68b3ecb1cc93725c02f155bc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c344d5d9b2fcf37c68b3ecb1cc93725c02f155bc Author: Kevin Bowling (Fri 31 Jul 2026 14:16:36 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:42:41 BST) ixgbe: recover from X550 malicious-driver events The shared X550 code provides malicious-driver detection, event decoding, and per-pool recovery operations, but the PF never enables or services them. A malformed VF descriptor can therefore go undetected and avoid the per-pool recovery path supplied by the MAC. Configure IOV state while VF DMA remains disabled, then enable MDD and activate the VFs only after PF queue initialization is complete. On an MDD event, withdraw mailbox CTS and gate the VF pool through PFVFTE and PFVFRE. Retain the per-queue WQBR blocks until the VF enters a new reset epoch; PFVFTE can still permit descriptor fetches into the internal queue, so releasing WQBR early would allow a hostile VF to retrigger MDD before it resets. Send the non-CTS reset notification after servicing the VF mailbox. Let a posted VF request win mailbox arbitration, defer notification if the pass produced a response, and retry failed notifications from the periodic admin pass. Poll WQBR so recovery does not depend on another mailbox interrupt edge, while suppressing already-fenced pools. Latch a PF reset request until the next hardware initialization. The X550 datasheet defines every bit of WQBR_RX and WQBR_TX as a queue bit, so an all-ones value is valid. Reject it only when IXGBE_STATUS, which has reserved-zero bits, also reads as all ones and confirms dead MMIO. Temporarily disable MDD around live multiqueue SRRCTL drop-mode updates, which hardware otherwise reports as queue-context changes. Serialize that window with the iflib context lock and resample pending work after MDD is restored. Apply the per-pool recovery model used by igb(4) in a2ed165f0049 to the existing DPDK-derived X550 hooks. The same register interface is documented for X552 and X553, so cover the entire X550 family. Document that VF traffic remains disabled until the reset handshake completes. Relnotes: yes (cherry picked from commit dda6a00a5202154b4f83925b8e08bdb03228d4ce) M share/man/man4/ix.4 M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_mbx.c M sys/dev/ixgbe/ixgbe_sriov.h M sys/dev/ixgbe/ixgbe_x550.c _____________________________________________________________________________________________________________ Commit: 496f503b2827205f7a1470eff81ae56c263714fb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=496f503b2827205f7a1470eff81ae56c263714fb Author: Kevin Bowling (Sat 1 Aug 2026 07:03:17 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:42:29 BST) ixgbe: complete PF cleanup after VF FLR The 82599, X540, and X550 documentation identifies VF registers which retain state across VFLR and must be reconfigured before a VF is reused. The VF reset path already initializes its queue-owned registers, but the PF only cleared VF mailbox memory and transmit head write-back addresses after a cooperative mailbox reset. A bare hardware VFLR therefore left both behind on affected devices. Move TDWBA cleanup into the common reset path. Clear CTS when VFLR invalidates the mailbox session, and accept only VF_RESET during the reset pass before restoring VF traffic. Clear VFMBMEM through the PFU/VFU semaphore. Recheck VFREQ while holding PFU so a reset event cannot erase a request posted between the initial mailbox check and the clear. Dispatch an already-read message even if the residual clear fails, but keep cleanup pending until a synchronized clear succeeds. Retry cleanup in the same admin pass after a failed message read or clear. The 82599 also retains VFMAILBOX.VFU across VFLR. Leave a VF-owned mailbox intact initially so a live post-reset writer can finish. Retry cleanup from the admin timer and, after a two-second grace period, use PFMAILBOX.RVFU only when VFU remains set and no request has been posted. Clear the mailbox under PFU afterward. This recovers an abandoned pre-reset owner without sleeping under the iflib context lock or immediately stealing from a new reset request. Suppress mailbox dispatch once iflib has cleared IFF_DRV_RUNNING so a pending reset request cannot re-enable VF traffic inside the PF stop path. Periodically sample aggregate VFREQ, VFACK, and VFLR registers, masked to active VFs, so work suppressed across a stop/restart and a bare 82599 VFLR without EICR_MAILBOX are both discovered without another interrupt edge. (cherry picked from commit 33fdcdb18eb61f089b9a4786ef7aa9224ad0722c) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_mbx.c M sys/dev/ixgbe/ixgbe_mbx.h M sys/dev/ixgbe/ixgbe_sriov.h M sys/dev/ixgbe/ixgbe_vf.c _____________________________________________________________________________________________________________ Commit: ef5956efcbde2afb1f565643a166ef1c4874787a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ef5956efcbde2afb1f565643a166ef1c4874787a Author: Kevin Bowling (Thu 6 Aug 2026 12:05:32 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:42:19 BST) ixgbe: Validate SR-IOV before restarting the PF A deterministic IOV configuration error currently reaches the driver only after iflib has stopped the PF. The required cleanup restart then causes an avoidable carrier flap. Follow the igb pattern and validate the request in the PCI IOV method before entering the restart transaction. Reject queue layouts wider than the selected virtualization pool before they can alias unrelated 82599 registers. (cherry picked from commit 703c756a2d298e5841471eb7d4d40f95a0dafe50) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: 0280fff5f78aacfc1e9b1db20ace8ba3eee81003 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0280fff5f78aacfc1e9b1db20ace8ba3eee81003 Author: Kevin Bowling (Thu 6 Aug 2026 12:03:35 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:42:08 BST) ixgbe: restart iflib around SR-IOV reconfiguration The IOV callback changes the PF pool, virtualization mode, and hardware queue indices while iflib still considers the old queue layout live. Teardown likewise leaves the software pool and mode at their SR-IOV values. Use iflib stop/mutate/restart transactions for both transitions. Disable VF DMA and PCI VF Enable before queue reuse, let outstanding transactions drain, and restore the non-IOV pool and queue indices on teardown. Remove the redundant driver-local pci_iov_detach() wrapper; iflib already performs that check centrally before the driver detach callback. It may be possible to avoid some restart in the future on this hardware pausing DMA and remapping rings but not pursued yet. (cherry picked from commit 86199f1a74abc76c3bb1ed15ccee7df3cabf3d7b) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: 32ba894e1fbb0403f4dd6d8c9cee747857f1aa60 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=32ba894e1fbb0403f4dd6d8c9cee747857f1aa60 Author: Kevin Bowling (Thu 6 Aug 2026 07:42:26 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:41:49 BST) pci: Optionally disable endpoints with unsafe MPS Keep warn-only behavior as the default. Add an opt-in policy that clears endpoint decoding and bus mastering when a newly discovered function cannot match its active path, while never disabling bridge functions and their subtrees. (cherry picked from commit 114f4a68f21345e1e6680b7acf1bf733d9047002) M share/man/man4/pci.4 M sys/dev/pci/pci.c _____________________________________________________________________________________________________________ Commit: 6b35d1d8ea0b3fbc35563bd8073e2674a8a01d8f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6b35d1d8ea0b3fbc35563bd8073e2674a8a01d8f Author: Kevin Bowling (Thu 6 Aug 2026 07:41:41 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:41:35 BST) pci: Add a hierarchy-wide MPS limit Add a boot-time ceiling for MPS reconciliation. Apply it only while an entire cold-enumerated link can be configured consistently, and leave an established active path unchanged. (cherry picked from commit 673cb5265a2df2228982fc220f4e7ea62ab765b2) M share/man/man4/pci.4 M sys/dev/pci/pci.c _____________________________________________________________________________________________________________ Commit: 28470d5619e519480b294b975c2c10bf0d16bd33 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=28470d5619e519480b294b975c2c10bf0d16bd33 Author: Kevin Bowling (Thu 6 Aug 2026 07:40:55 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:41:16 BST) pci: Reconcile MPS before attaching PCIe devices Reconcile each newly enumerated link as a unit before child drivers attach. Firmware may leave Bus Master Enable set after handoff, so use the bus attachment state rather than that bit to identify the cold phase. Preserve an established hierarchy during rescan and hot-add. Refuse a reduction below a switch because recursive enumeration may already have made a sibling subtree live; lowering only the local port or Root Port would produce an inconsistent path. Report capability and active-use conflicts distinctly. Handle OFW PCI buses that clone the generic enumeration path. MFC after: 2 weeks (cherry picked from commit 8e9fe9996a1fbdb79033b082e6a96b9e1266e33f) M share/man/man4/pci.4 M sys/dev/pci/pci.c M sys/dev/pci/pci_private.h M sys/dev/pci/pcivar.h M sys/powerpc/ofw/ofw_pcibus.c _____________________________________________________________________________________________________________ Commit: 3ec8d978b7129a6e7dd2018aae6baa971bd5c1be URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3ec8d978b7129a6e7dd2018aae6baa971bd5c1be Author: Kevin Bowling (Thu 6 Aug 2026 10:36:43 BST) Committer: Kevin Bowling (Fri 21 Aug 2026 01:35:06 BST) pci: Preserve adjusted PCIe control state The PCI bus changes live capability registers after the initial configuration snapshot has been saved. A later driver reprobe restores that snapshot and can silently undo the adjustment. Update the cached Device Control and Root Control bits together with pcie_adjust_config() writes. Route the persistent Maximum Read Request setter and the bus-owned AER control changes through that helper as well, so they share the same restore semantics as MPS reconciliation. Document the persistent-write contract. Merge only explicitly adjusted bits into the saved image so unrelated or transient bits observed during the hardware read-modify-write cannot become persistent. (cherry picked from commit a9752e9ac8a635f49ca058dd7268298840c7e915) M share/man/man9/pci.9 M sys/dev/pci/pci.c _____________________________________________________________________________________________________________ Commit: 2296f3563a5319a99c0fe604dae89b95842cc0d9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2296f3563a5319a99c0fe604dae89b95842cc0d9 Author: Gordon Bergling (Mon 17 Aug 2026 06:48:33 BST) Committer: Gordon Bergling (Thu 20 Aug 2026 07:04:40 BST) nullfs(4): Fix a typo in a source code comment - s/modifing/modifying/ (cherry picked from commit 27c70deb3d260b48bee8f3c4c975fd2de64264fb) M sys/fs/nullfs/null_vnops.c _____________________________________________________________________________________________________________ Commit: 10e3185593cdc84165a52673729d09f4f554a689 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=10e3185593cdc84165a52673729d09f4f554a689 Author: Gordon Bergling (Mon 17 Aug 2026 06:54:10 BST) Committer: Gordon Bergling (Thu 20 Aug 2026 07:04:24 BST) ichwd(4): Fix a typo in a source code comment - s/modifing/modifying/ (cherry picked from commit 8362aecdeb2548813942a7e604543c71f5a10271) M sys/dev/ichwd/i6300esbwd.c _____________________________________________________________________________________________________________ Commit: 8402cf6c35d032bf34c1b2fc7f3d44e4845fa0ff URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8402cf6c35d032bf34c1b2fc7f3d44e4845fa0ff Author: Gordon Bergling (Mon 17 Aug 2026 06:53:07 BST) Committer: Gordon Bergling (Thu 20 Aug 2026 07:04:08 BST) fxp(4): Fix a typo in a source code comment - s/modifing/modifying/ (cherry picked from commit c47b430c6ea3aa8d133af0af426d018bae3b7018) M sys/dev/fxp/rcvbundl.h _____________________________________________________________________________________________________________ Commit: 05f49086ac008e2384bbeb6531190757f3e05eff URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=05f49086ac008e2384bbeb6531190757f3e05eff Author: Gordon Bergling (Mon 17 Aug 2026 06:55:17 BST) Committer: Gordon Bergling (Thu 20 Aug 2026 07:03:52 BST) ipfw(4): Fix a typo in a source code comment - s/varaiables/variables/ (cherry picked from commit 251e6ef40203a6f911d7f4daacf3075de7f870c0) M sys/netpfil/ipfw/dn_sched_fq_pie.c _____________________________________________________________________________________________________________ Commit: 06c3e7ce67a260b3c74adf3dc37c8e1b5b344ba6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=06c3e7ce67a260b3c74adf3dc37c8e1b5b344ba6 Author: Gordon Bergling (Mon 17 Aug 2026 06:47:17 BST) Committer: Gordon Bergling (Thu 20 Aug 2026 07:03:33 BST) msun: Fix a typo in a source code comment - s/uneccessarily/unnecessarily/ Obtained from: NetBSD (cherry picked from commit cd4aae2fa9d35015248c445752e23800e75e8517) M lib/msun/src/catrig.c _____________________________________________________________________________________________________________ Commit: 259c45db10303992ba5a17a0fc8332b35baa7ed5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=259c45db10303992ba5a17a0fc8332b35baa7ed5 Author: Gordon Bergling (Mon 17 Aug 2026 06:51:05 BST) Committer: Gordon Bergling (Thu 20 Aug 2026 07:03:17 BST) swap_pager: Fix a typo in a source code comment - s/errornous/erroneous/ (cherry picked from commit 88293bdd1eefb4bf518e1764d370b4a2321afdd1) M sys/vm/swap_pager.c _____________________________________________________________________________________________________________ Commit: 1c4f2a69587e8f4be11f738e991ff258893429e7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1c4f2a69587e8f4be11f738e991ff258893429e7 Author: Gordon Bergling (Mon 17 Aug 2026 06:52:09 BST) Committer: Gordon Bergling (Thu 20 Aug 2026 07:02:59 BST) ppbus(4): Fix a typo in a source code comment - s/predifined/predefined/ (cherry picked from commit 709bd45a1b3a5ca21e05995c0c01f0ee8e7e8c38) M sys/dev/ppbus/ppb_msq.h _____________________________________________________________________________________________________________ Commit: 843ef8961512682f152266a6cec85de47c7b9396 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=843ef8961512682f152266a6cec85de47c7b9396 Author: Mark Johnston (Tue 11 Aug 2026 17:42:41 BST) Committer: Mark Johnston (Wed 19 Aug 2026 19:08:59 BST) in_mcast: Fix uninitialized variable usage in inm_merge() When the first loop in inm_merge() hits an error, generally because it hit some limit on the number of source filters for a multicast group, inm_merge() tries to atomically roll back changes to the group source filter list. To roll back, it iterates over the global source filter list for the multicast group, starting at the last entry that we updated ("nims"). But, if we have not yet updated any entries, this variable is uninitialized. Initialize it to NULL, so that RB_FOREACH_REVERSE_FROM doesn't visit any source filters in this case. All of the above applies to the v6 case. Reported by: Daniel Birtwhistle MFC after: 1 week Sponsored by: The FreeBSD Foundation (cherry picked from commit b9db5a5b16477863654f92ec653e8464528ef981) M sys/netinet/in_mcast.c M sys/netinet6/in6_mcast.c _____________________________________________________________________________________________________________ Commit: f30ef139274b54a39eb219f47c7a91b17a1accec URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f30ef139274b54a39eb219f47c7a91b17a1accec Author: Sujithra Periasamy (Fri 7 Aug 2026 14:07:20 BST) Committer: Mark Johnston (Wed 19 Aug 2026 19:08:59 BST) gve: Implement AQ batching for queue creation and destruction Currently, the FreeBSD driver configures and destroys queues sequentially by issuing individual Admin Queue (AQ) commands. During queue teardown (e.g., interface reset), disabling queues one by one leaves the device in a partially configured state. Because the device does not yet know that the driver is in the process of fully unconfiguring all queues, this intermediate state can trigger transient error logs (such as when queue 0 is disabled while other queues are still active). Modify the driver to use Admin Queue batching for both the creation and destruction of TX and RX queues. Commands are now queued and kicked together, ensuring the queue configuration changes are applied atomically and preventing transient errors from being logged. Signed-off-by: Sujithra Periasamy Reviewed by: markj MFC after: 1 week Sponsored by: Google Differential Revision: https://reviews.freebsd.org/D58696 (cherry picked from commit 36d57489ca07642dec31390e90c25b2a0ca9313e) M sys/dev/gve/gve_adminq.c _____________________________________________________________________________________________________________ Commit: 1fe3a2897b4ad7a9b9128efd6ec0c24b371bf5bd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1fe3a2897b4ad7a9b9128efd6ec0c24b371bf5bd Author: Mark Johnston (Tue 4 Aug 2026 14:35:35 BST) Committer: Mark Johnston (Wed 19 Aug 2026 19:08:59 BST) rawip: Fix handling of checksums in rip6_input() A v6 raw socket may ask the kernel to validate the checksum of an inbound packet. If it does, and the validation fails, we discard the packet, but this isn't really right: other raw sockets may wish to receive a copy of the packet anyway. Rework checksum handling to address this problem, and use a flag to avoid computing the checksum more than once for a given packet. Fixes: de2d47842e880281 ("SMR protection for inpcbs") Reviewed by: pouria, glebius Reported by: Yunzhi Ke MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58559 (cherry picked from commit 196874ce2e97e3e6425493b1d501e716b356bc36) M sys/netinet6/raw_ip6.c _____________________________________________________________________________________________________________ Commit: 43a34002f6c607d5f120fc34b869bacbe3b061ca URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=43a34002f6c607d5f120fc34b869bacbe3b061ca Author: Mark Johnston (Tue 4 Aug 2026 14:42:53 BST) Committer: Mark Johnston (Wed 19 Aug 2026 19:08:59 BST) ctl.4: Document the assumption that CTL HA runs only on trusted networks The CTL High Availablity clustering feature allows a pair of hosts to implement transparent failover. The implementation uses a TCP connection to exchange messages. There is no authentication mechanism and the protocol itself embeds kernel pointers in the messages exchanged between HA hosts. This property (of CTL_MSG_DATAMOVE messages specifically), as well as insufficient validation of inbound messages, mean that anyone able to access a CTL HA port is able to remotely execute code on that host. Provide a warning to this effect in the CTL man page. Reported by: Ryan of Calif.io Reviewed by: ziaee, ken, mav MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58622 (cherry picked from commit 3c8f8432b6f653128016c6aaf826e1efb7ee1cec) M share/man/man4/ctl.4 _____________________________________________________________________________________________________________ Commit: 8eef4664327fcc2fe04eb74e03e2e793df90d5af URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8eef4664327fcc2fe04eb74e03e2e793df90d5af Author: Mark Johnston (Wed 8 Jul 2026 18:13:01 BST) Committer: Mark Johnston (Wed 19 Aug 2026 19:08:59 BST) epoch: Fix epoch_drain_callbacks() This function is supposed to wait until all pending callbacks have been executed. This is useful in some contexts where we tear down some context (like a VNET jail and its associated UMA zones) synchronously, and we want to make sure that all pending asynchronous callbacks (which may free objects to said UMA zones) have run first. The implementation schedules a callback on each CPU and waits for them all to run. This assumes that, on a given CPU, callbacks are executed in the order that they are pushed. This assumption depends on the implementation of epoch_call_task() and ck_epoch_poll_deferred(), and it is not true in general. Callbacks are pushed onto a per-CPU stack in LIFO order. ck_epoch_poll_deferred() first pulls out the callbacks from epoch - 2, which are always safe to execute, and in so doing reorders them such that the oldest callback as at the top of the stack, so in this case, epoch_call_task() will execute them in order. However, ck_epoch_poll_deferred() may determine that it is safe to execute callbacks from epoch - 1 (or even from the current epoch if there are no active readers), and in this case it will push those callbacks onto the returned stack. This means that epoch_call_task() will invoke those newer destructors before the older ones, which means that epoch_drain_callbacks() may return early. Fix the correctness problem by simply doing all of this twice: once the first callback is invoked, we know that all of the callbacks that were pending at the time that epoch_drain_callbacks() was called are scheduled to be executed, so when the second callback is executed we know that they must be finished. This is slow, but it is already slow, and the slowness is less noticeable after commit dce56594991. I note that in an ideal world, this function would not exist, and all of the teardown would happen asynchronously, rather than the current mismash of synchronous and asynchronous cleanup. PR: 290201 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290201 ) Reviewed by: glebius MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D58030 (cherry picked from commit 7bf11a2f0c9ad7af00996105fd34e61f1040402b) M sys/kern/subr_epoch.c _____________________________________________________________________________________________________________ Commit: fb0af871db6820862a1a0bbfe56a43c0446e40b3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fb0af871db6820862a1a0bbfe56a43c0446e40b3 Author: Mark Johnston (Tue 28 Jul 2026 00:03:47 BST) Committer: Mark Johnston (Wed 19 Aug 2026 19:08:59 BST) proc: Copy the p_reapsubtree field explicitly during fork p_reapsubtree lives in the p_startcopy/p_endcopy block of struct proc, which is copied during fork without any synchronization. However, the field is not stable except when the proctree lock is held, and indeed may change if p1's reaper exits or explicitly releases its reaper status. This state change can race with fork() and leave the child with an incorrect p_reapsubtree field. Close the race: explicitly copy the field under the proctree lock during fork. Reported by: syzkaller Reviewed by: kib MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58482 (cherry picked from commit 8616b7dc3850758eb39a5b63f41f56c05403380b) M sys/kern/kern_fork.c _____________________________________________________________________________________________________________ Commit: d583f3101bcf346655086a2d6bfd77137f05498e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d583f3101bcf346655086a2d6bfd77137f05498e Author: Ed Maste (Fri 30 May 2025 16:58:41 BST) Committer: Ed Maste (Wed 19 Aug 2026 17:01:08 BST) tests: Fix build if TIOCSTI is not defined Some downstream projects (e.g. ElectroBSD) have removed the TIOCSTI We already have some components (such as mail and tcsh) that build without TIOCSTI defined. This is (existing portability support in those projects. Simplify things for downstreams by extending this approach to this additional TIOCSTI user. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D50614 (cherry picked from commit 52a2b4bc5da21d7a54cb16b9450196244b59b8c0) (cherry picked from commit b1bb3aa65cc9d720f54dba009565e0d1d0419323) M tests/sys/kern/tty/test_sti.c _____________________________________________________________________________________________________________ Commit: b826ca04190ec790f3d18957b4b542b4c9b0691d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b826ca04190ec790f3d18957b4b542b4c9b0691d Author: Philip Paeps (Sun 16 Aug 2026 03:24:29 BST) Committer: Philip Paeps (Wed 19 Aug 2026 03:55:05 BST) libexpat: update AUTHORS section of libbsdxml.3 The eXpat project has changed maintainers since this section was written in 2002. Update it to reflect reality. Discussed with: Sebastian Pipping Reviewed by: bcr Differential Revision: https://reviews.freebsd.org/D58835 (cherry picked from commit 5e6c894510fc66c18d69164d591184a2d23b16e5) M lib/libexpat/libbsdxml.3 _____________________________________________________________________________________________________________ Commit: 465c0e484458a2896fb7c28780f2cf73ea79f8ce URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=465c0e484458a2896fb7c28780f2cf73ea79f8ce Author: Philip Paeps (Tue 11 Aug 2026 00:30:15 BST) Committer: Philip Paeps (Wed 19 Aug 2026 03:54:59 BST) contrib/expat: import expat 2.8.3 Changes: https://github.com/libexpat/libexpat/blob/R_2_8_3/expat/Changes Security: CVE-2026-72522 (cherry picked from commit 207d96dabfec14d7b3699747abb539ab3c1118ab) M contrib/expat/Changes M contrib/expat/Makefile.am M contrib/expat/Makefile.in M contrib/expat/README.md M contrib/expat/configure.ac M contrib/expat/doc/reference.html M contrib/expat/doc/xmlwf.1 M contrib/expat/doc/xmlwf.xml M contrib/expat/examples/element_declarations.c M contrib/expat/examples/elements.c M contrib/expat/examples/outline.c M contrib/expat/lib/ascii.h M contrib/expat/lib/asciitab.h M contrib/expat/lib/expat.h M contrib/expat/lib/expat_external.h M contrib/expat/lib/fallthrough.h M contrib/expat/lib/iasciitab.h M contrib/expat/lib/internal.h M contrib/expat/lib/latin1tab.h M contrib/expat/lib/memory_sanitizer.h M contrib/expat/lib/nametab.h M contrib/expat/lib/random_arc4random.c M contrib/expat/lib/random_arc4random.h M contrib/expat/lib/random_arc4random_buf.c M contrib/expat/lib/random_arc4random_buf.h M contrib/expat/lib/random_dev_urandom.c M contrib/expat/lib/random_dev_urandom.h M contrib/expat/lib/random_getentropy.c M contrib/expat/lib/random_getentropy.h M contrib/expat/lib/random_getrandom.c M contrib/expat/lib/random_getrandom.h M contrib/expat/lib/random_rand_s.c M contrib/expat/lib/random_rand_s.h M contrib/expat/lib/siphash.h M contrib/expat/lib/utf8tab.h M contrib/expat/lib/xcsinc.c M contrib/expat/lib/xmlparse.c M contrib/expat/lib/xmlrole.c M contrib/expat/lib/xmlrole.h M contrib/expat/lib/xmltok.c M contrib/expat/lib/xmltok.h M contrib/expat/lib/xmltok_impl.c M contrib/expat/lib/xmltok_impl.h M contrib/expat/lib/xmltok_ns.c M contrib/expat/tests/acc_tests.c M contrib/expat/tests/acc_tests.h M contrib/expat/tests/alloc_tests.c M contrib/expat/tests/alloc_tests.h M contrib/expat/tests/basic_tests.c M contrib/expat/tests/basic_tests.h M contrib/expat/tests/chardata.c M contrib/expat/tests/chardata.h M contrib/expat/tests/common.c M contrib/expat/tests/common.h M contrib/expat/tests/dummy.c M contrib/expat/tests/dummy.h M contrib/expat/tests/handlers.c M contrib/expat/tests/handlers.h M contrib/expat/tests/memcheck.c M contrib/expat/tests/memcheck.h M contrib/expat/tests/minicheck.c M contrib/expat/tests/minicheck.h M contrib/expat/tests/misc_tests.c M contrib/expat/tests/misc_tests.h M contrib/expat/tests/ns_tests.c M contrib/expat/tests/ns_tests.h M contrib/expat/tests/nsalloc_tests.c M contrib/expat/tests/nsalloc_tests.h M contrib/expat/tests/runtests.c M contrib/expat/tests/structdata.c M contrib/expat/tests/structdata.h M contrib/expat/xmlwf/codepage.c M contrib/expat/xmlwf/codepage.h M contrib/expat/xmlwf/ct.c M contrib/expat/xmlwf/filemap.h M contrib/expat/xmlwf/readfilemap.c M contrib/expat/xmlwf/unixfilemap.c M contrib/expat/xmlwf/win32filemap.c M contrib/expat/xmlwf/xmlfile.c M contrib/expat/xmlwf/xmlfile.h M contrib/expat/xmlwf/xmlmime.c M contrib/expat/xmlwf/xmlmime.h M contrib/expat/xmlwf/xmltchar.h M contrib/expat/xmlwf/xmlwf.c M contrib/expat/xmlwf/xmlwf_helpgen.py M contrib/expat/xmlwf/xmlwf_helpgen.sh M lib/libexpat/expat_config.h M lib/libexpat/libbsdxml.3 _____________________________________________________________________________________________________________ Commit: 7334d92f24f670f64c5a4875984518d5e5f116af URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7334d92f24f670f64c5a4875984518d5e5f116af Author: Li-Wen Hsu (Sat 15 Aug 2026 13:59:19 BST) Committer: Li-Wen Hsu (Tue 18 Aug 2026 14:59:56 BST) share/man/man4: Move non-USB man pages out of MK_USB block uart(4), unix(4) and the gzero(4) MLINK are not USB things, but they were in the .if ${MK_USB} != "no" block. So if we build with WITHOUT_USB, these man pages are lost. Move them out of the block. Sponsored by: The FreeBSD Foundation (cherry picked from commit 1100d9eca9cb2860c58633a9176dd11a30850da4) M share/man/man4/Makefile _____________________________________________________________________________________________________________ Commit: 86aea5b4db379327f02ca547575105788bfbe807 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=86aea5b4db379327f02ca547575105788bfbe807 Author: Xin LI (Sat 15 Aug 2026 06:55:38 BST) Committer: Xin LI (Tue 18 Aug 2026 03:23:56 BST) MFV: less v704. (cherry picked from commit fa0dc4f0f96a1b77d4be7bcdbf965897cda14521) M contrib/less/NEWS M contrib/less/README M contrib/less/ch.c M contrib/less/charset.c M contrib/less/charset.h M contrib/less/cmd.h M contrib/less/cmdbuf.c M contrib/less/command.c M contrib/less/decode.c M contrib/less/edit.c M contrib/less/filename.c M contrib/less/forwback.c M contrib/less/funcs.h M contrib/less/help.c M contrib/less/input.c M contrib/less/jump.c A contrib/less/less-osc8-open.sh M contrib/less/less.h M contrib/less/less.hlp M contrib/less/less.nro M contrib/less/lessecho.nro M contrib/less/lesskey.nro M contrib/less/lesskey_parse.c M contrib/less/line.c M contrib/less/lsystem.c M contrib/less/main.c M contrib/less/mark.c M contrib/less/optfunc.c M contrib/less/opttbl.c M contrib/less/os.c M contrib/less/output.c M contrib/less/pattern.c M contrib/less/pattern.h M contrib/less/position.c M contrib/less/prompt.c M contrib/less/regexp.c M contrib/less/regexp.h M contrib/less/screen.c M contrib/less/search.c M contrib/less/tags.c M contrib/less/ttyin.c M contrib/less/version.c M usr.bin/less/Makefile M usr.bin/less/defines.h _____________________________________________________________________________________________________________ Commit: 6330c2f5fbbf1320d768fa55f267c114654d729b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6330c2f5fbbf1320d768fa55f267c114654d729b Author: Xin LI (Thu 7 May 2026 04:51:51 BST) Committer: Xin LI (Tue 18 Aug 2026 03:23:56 BST) MFV less v691 Relnotes: yes (cherry picked from commit dafba19e42e78cd3d7c9264ece49ddd3d7d70da5) MFV: less v692. (cherry picked from commit e2abec625bf07c054f7ac2df2402d6c454113df8) M contrib/less/LICENSE M contrib/less/NEWS M contrib/less/README M contrib/less/brac.c M contrib/less/ch.c M contrib/less/charset.c M contrib/less/charset.h M contrib/less/cmd.h M contrib/less/cmdbuf.c M contrib/less/command.c M contrib/less/compose.uni M contrib/less/cvt.c M contrib/less/decode.c M contrib/less/edit.c M contrib/less/evar.c M contrib/less/filename.c M contrib/less/fmt.uni M contrib/less/forwback.c M contrib/less/funcs.h M contrib/less/help.c M contrib/less/ifile.c M contrib/less/input.c M contrib/less/jump.c M contrib/less/lang.h M contrib/less/less.h M contrib/less/less.hlp M contrib/less/less.nro M contrib/less/lessecho.c M contrib/less/lessecho.nro M contrib/less/lesskey.c M contrib/less/lesskey.h M contrib/less/lesskey.nro M contrib/less/lesskey_parse.c M contrib/less/lglob.h M contrib/less/line.c M contrib/less/linenum.c M contrib/less/lsystem.c M contrib/less/main.c M contrib/less/mark.c M contrib/less/omit.uni M contrib/less/optfunc.c M contrib/less/option.c M contrib/less/option.h M contrib/less/opttbl.c M contrib/less/os.c M contrib/less/output.c M contrib/less/pattern.c M contrib/less/pattern.h M contrib/less/pckeys.h M contrib/less/position.c M contrib/less/position.h M contrib/less/prompt.c M contrib/less/screen.c M contrib/less/scrsize.c M contrib/less/search.c M contrib/less/signal.c M contrib/less/tags.c M contrib/less/ttyin.c M contrib/less/ubin.uni M contrib/less/version.c M contrib/less/wide.uni M contrib/less/xbuf.c M contrib/less/xbuf.h M usr.bin/less/defines.h _____________________________________________________________________________________________________________ Commit: 7ee086b95dce6913b8b76f887ed6deb337c401ae URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7ee086b95dce6913b8b76f887ed6deb337c401ae Author: Kevin Bowling (Tue 11 Aug 2026 16:23:51 BST) Committer: Kevin Bowling (Tue 18 Aug 2026 02:31:29 BST) e1000: Disable autonomous PCH power gating after reset Panther Point changed the reset value of CTRL_EXT.DPG_EN to enable autonomous power gating. Clear it after hardware reset on Panther Point and Nova Point controllers to prevent unexpected Tx/Rx hangs, packet loss, or corruption. (cherry picked from commit 0979b0430c2d728e595841ecba30b63972794fe9) M sys/dev/e1000/e1000_defines.h M sys/dev/e1000/e1000_ich8lan.c _____________________________________________________________________________________________________________ Commit: dd51b852d1e7edd6f46699d42aca85076cf27a68 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dd51b852d1e7edd6f46699d42aca85076cf27a68 Author: Pawel Sobczyk (Tue 11 Aug 2026 16:11:22 BST) Committer: Kevin Bowling (Tue 18 Aug 2026 02:31:29 BST) ice(4): Add support for E835 CNSA 2.0 adapters Added support for E835 adapters with post-quantum cryptographic (PQC) algorithms in firmware/software signage and in SPDM attestation. Signed-off-by: Pawel Sobczyk Reviewed by: Miłosz Linkiewicz Differential Revision: https://reviews.freebsd.org/D57868 (cherry picked from commit 8194c32827e9c3867d4b295edca9842b71608526) M sys/dev/ice/ice_drv_info.h _____________________________________________________________________________________________________________ Commit: c559590a303ee1380abd3b2192e55fde1b193427 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c559590a303ee1380abd3b2192e55fde1b193427 Author: Jose Luis Duran (Tue 11 Aug 2026 23:27:30 BST) Committer: Jose Luis Duran (Tue 18 Aug 2026 01:29:45 BST) makefs: tests: Fix a missing slash in multi_dataset_4 Fix a typo in the ZFS multi_dataset_4 test, where a path separator was missing. Reported by: markj MFC after: 1 week (cherry picked from commit 889d08f6b61da4724a6f718be7ec8d47824bc602) M usr.sbin/makefs/tests/makefs_zfs_tests.sh _____________________________________________________________________________________________________________ Commit: 94596f92c690b0ce68452b8f70e3358b57b86b25 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=94596f92c690b0ce68452b8f70e3358b57b86b25 Author: Kevin Bowling (Mon 3 Aug 2026 11:31:36 BST) Committer: Kevin Bowling (Mon 17 Aug 2026 01:27:11 BST) igc: Correct hardware error statistics Track RERC separately instead of adding receive errors to the collision count, and read the previously omitted RXERRC register. Include RFC in input errors because CRCERRS does not count bad-CRC runts, implementing the I225 length-error accounting workaround alongside RUC and ROC. Stop treating host transmit MAC discards as receive errors. Expose both RERC and HTDPMC as dedicated MAC statistics so their overlapping counts remain available without corrupting aggregate interface counters. (cherry picked from commit a108ee9138a698f212d6d6832d54e88ce6786617) M sys/dev/igc/if_igc.c M sys/dev/igc/igc_hw.h M sys/dev/igc/igc_mac.c M sys/dev/igc/igc_regs.h _____________________________________________________________________________________________________________ Commit: 1c8363854095fa2c7ebeff6e7b6980244ba829f7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1c8363854095fa2c7ebeff6e7b6980244ba829f7 Author: Kevin Bowling (Mon 3 Aug 2026 11:57:39 BST) Committer: Kevin Bowling (Mon 17 Aug 2026 01:26:28 BST) igc: Add VLAN hardware filtering Borrow the e1000 VLAN filter table Ambiguous presence of the feature by Intel was settled by DPDK and emperical testing. Relnotes: yes (cherry picked from commit 8f779f159e2198c85b4fcb8685989879a9330104) M share/man/man4/igc.4 M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h _____________________________________________________________________________________________________________ Commit: c577d5eb972dc406a079ee7ed8b44fb9132b6da7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c577d5eb972dc406a079ee7ed8b44fb9132b6da7 Author: Kevin Bowling (Mon 3 Aug 2026 11:28:49 BST) Committer: Kevin Bowling (Mon 17 Aug 2026 01:26:19 BST) igc: Work around I225 v1 minimum IPG erratum I225 v1 cannot receive the minimum inter-packet gap required at 2.5 Gb/s. For affected back-to-back links, Intel recommends using a 15-byte transmit IPG instead of 12 bytes. Program TIPG.IPGT to 0xb for pre-v2 I225 devices at 2.5 Gb/s and restore the default at lower speeds. Avoid penalizing fixed I225 and I226 parts. (cherry picked from commit 709426551c6a3607fb5a33f5b8dbb87cfa9c8125) M sys/dev/igc/if_igc.c M sys/dev/igc/igc_defines.h _____________________________________________________________________________________________________________ Commit: f75a28ea852c824d92f2fbc10de9412e8b3b7de4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f75a28ea852c824d92f2fbc10de9412e8b3b7de4 Author: Kevin Bowling (Tue 28 Jul 2026 22:53:18 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 23:18:01 BST) iflib: Add restart transactions for IOV reconfiguration Some devices remap the PF queues when entering or leaving SR-IOV. Add opt-in PCI IOV helpers that hold the iflib context lock across the complete stop, driver callback, and restart transaction. Existing drivers continue to use the non-restarting helpers. Sponsored by: BBOX.io (cherry picked from commit f8fa2d77bc305bec519f9f02afe211e903c57573) M sys/net/iflib.c M sys/net/iflib.h _____________________________________________________________________________________________________________ Commit: 851af287a1f6ec7fff02db2a2e6f624971b993f9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=851af287a1f6ec7fff02db2a2e6f624971b993f9 Author: Kevin Bowling (Mon 10 Aug 2026 16:56:03 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:58:28 BST) ixgbe: Report the management packet drop counter The management_pkts_drpd sysctl was wired to MNGPTC, making it an alias of management_pkts_txd, instead of MNGPDC. (cherry picked from commit 435cde959c8823ff38c699d1bc8655918fda57dd) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: dbb7ce7cc0edc24057e5215fe63d2094c39982c9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dbb7ce7cc0edc24057e5215fe63d2094c39982c9 Author: Kevin Bowling (Thu 6 Aug 2026 09:21:35 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:58:18 BST) ixgbe: Re-enable the SFP laser during initialization ixgbe_if_stop() disables the transmit laser on every 82599 SFP fiber port, but the iflib initialization path did not re-enable it. Re-enable the laser before deferred SFP module setup so interface reinitialization cannot leave either single-speed or multispeed optics dark. The hardware wrapper is a no-op when laser control is unavailable. The placement follows Intel ix-3.4.39; this version deliberately applies to every SFP port affected by the stop path. (cherry picked from commit 545779a99290b7b7d94dece6c096ce230be91ff9) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: dc1d2c7f1453544ad11d9f88e5207cc6670acec5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dc1d2c7f1453544ad11d9f88e5207cc6670acec5 Author: Kevin Bowling (Thu 6 Aug 2026 12:03:28 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:54:37 BST) iflib: Permit SR-IOV configuration on a down interface Drivers which remap PF queues need a stop/mutate/restart transaction only when the interface has live queues. Permit their IOV initialization callback while the interface is administratively down and leave it down afterward. This restores the standard boot-time iovctl.conf workflow and lets other opt-in drivers configure VFs before netif brings the PF up. (cherry picked from commit 2cf580c694f6f392531a63f01c3fb89c0244f89a) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: 5f215a2af31298f4d6af3f8ce04e2dd531b4e01c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5f215a2af31298f4d6af3f8ce04e2dd531b4e01c Author: Kevin Bowling (Thu 6 Aug 2026 07:38:06 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:52:36 BST) pci: Permit function-level reset of 82599 VFs Intel 82599 supports FLR on VFs but reports FLR support only in the PF Device Capabilities register. The VF register therefore leaves the FLR Capable bit clear, and pcie_flr() rejects the reset. Intel documents the zeroed VF PCIe capability structure as erratum 35 in the 82599 Specification Update (B0=Yes; NoFix). Add a positive FLR quirk for the 82599 VF. Keep the capability check for every other function, so an unknown nonconforming VF cannot make pcie_flr() report success when its reset request was ignored. SR-IOV requires VFs to support FLR, but a clear capability bit cannot distinguish the 82599's misadvertisement from a VF that fails to implement it. (cherry picked from commit ee776a8e291cb73845a8611d3dec5a2a966106b9) M sys/dev/pci/pci.c _____________________________________________________________________________________________________________ Commit: 61542def72870cf83ff5370a6427fe3179b65f5a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=61542def72870cf83ff5370a6427fe3179b65f5a Author: Kevin Bowling (Thu 6 Aug 2026 07:39:20 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:52:23 BST) pci: Ignore SR-IOV VFs when tuning MPS The VF Device Control MPS and MRRS fields are reserved and preserved. VF transactions use the PF MPS, so a hardwired VF value must not be used to retune the shared PCIe hierarchy. Document the previously undocumented tuning knob and clarify why a VF may continue to display its reserved hardwired value. This fixes an instant crash/reboot on my Zen3 system with 82599 VFs. (cherry picked from commit 5aab6164161db397d84e5fff88e1af1a9e405875) M share/man/man4/pci.4 M sys/dev/pci/pci.c _____________________________________________________________________________________________________________ Commit: 8620422df12e0dc20d1b708fb1a7792cac448511 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8620422df12e0dc20d1b708fb1a7792cac448511 Author: Kevin Bowling (Fri 31 Jul 2026 14:07:27 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:51:43 BST) ixv: reconcile VLAN filters through the mailbox VLAN registration callbacks only update the software shadow, leaving the PF unaware until a later full initialization. Initialization then retries each failed request in a tight loop, while skipping replay entirely when local hardware filtering is disabled. Send additions and removals as soon as the desired state changes, independent of the VF local-filter capability. Replay the desired memberships after reset and retry a bounded batch per timer tick. Stop after the first failure so a silent PF can consume only one mailbox timeout per pass, while a responsive PF can drain several requests. Treat the retry window as a no-progress deadline: advance it when pending work succeeds so a large backlog can drain, but leave entries dormant after a sustained failure. A successful mailbox request wakes a dormant backlog. Dispatch timer-driven retries only while iflib marks the VF running, so a stale timer tick cannot restore PF VLAN state after the stop path resets the VF. Because the callbacks now update the PF or retain failed work for retry, do not restart the VF for VLAN configuration changes. This avoids resetting and flapping the interface for every VLAN addition or removal. Also keep receive VLAN stripping synchronized in both the enabled and disabled cases. Adapt the bounded VLAN reconciliation scheme from igb VF commit fdce3830d9a6 to the ixgbe VF mailbox. (cherry picked from commit 9d871fa96a6e5dff533bc7685fc72d51f55cfd18) M sys/dev/ixgbe/if_ixv.c M sys/dev/ixgbe/ixgbe.h _____________________________________________________________________________________________________________ Commit: a3d02a658a8e485019701c4636647652a8734102 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a3d02a658a8e485019701c4636647652a8734102 Author: Kevin Bowling (Fri 31 Jul 2026 13:58:01 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:51:32 BST) ixgbe: implement VF secondary MAC filters The PF advertises the legacy SET_MACVLAN mailbox request but always rejects it. The request installs secondary unicast addresses. Allocate an owned RAR pool for VF secondary addresses, reserve low entries for PF filters, and place VF-primary addresses at the top of the usable RAR range. Reject address collisions and cap each VF at three secondary filters so one guest cannot exhaust the shared table. Clear secondary filters on VF or PF reset and on SR-IOV teardown. This hardware can anti-spoof only the VF primary source address. Reject secondary filters while MAC anti-spoofing is configured, so installing them requires an explicit administrative policy choice. Report optional filter-table allocation failure without disabling SR-IOV. Adapt the owned-RAR allocation and reset-cleanup model from igb(4) in a2ed165f0049 to DPDK's ixgbe SET_MACVLAN mailbox semantics. Relnotes: yes (cherry picked from commit 6404ef10d62999d6ac16b0fb25bbdcb463b866a2) M share/man/man4/ix.4 M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: 2c12bf9b643d54ccd88320e91a64c1032bf143b0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2c12bf9b643d54ccd88320e91a64c1032bf143b0 Author: Kevin Bowling (Fri 31 Jul 2026 13:53:13 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:51:21 BST) ixgbe: enforce VF promiscuity and multicast policy The allow-promisc IOV property is advertised but ignored, and the PF rejects the xcast request used by modern VFs. Negotiate mailbox APIs 1.2 and 1.3, implement pool-scoped xcast modes, and require allow-promisc for requested all-multicast or unicast-promiscuous modes. The VF mailbox can carry only 30 multicast hashes. When ixv has a larger list, request the API 1.2 all-multicast xcast mode instead of extending the legacy SET_MULTICAST message. The PF grants that fallback only to VFs configured with allow-promisc; otherwise ixv reports that only the first 30 addresses are active. Reset xcast state with the VF and have ixv replay the mode implied by its interface flags after multicast updates. Follow DPDK's ixgbe API 1.2/1.3 xcast contract, with allow-promisc policy adapted from igb(4) in a2ed165f0049. Relnotes: yes (cherry picked from commit 660ea2c4dafe9c2206c95fe57ecd8972d6395952) M sys/dev/ixgbe/if_ixv.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_sriov.h M sys/dev/ixgbe/ixgbe_vf.c _____________________________________________________________________________________________________________ Commit: 5aa48d0059c06771108a81122787ad58c0982eeb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5aa48d0059c06771108a81122787ad58c0982eeb Author: Kevin Bowling (Thu 6 Aug 2026 09:21:16 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:51:08 BST) ixgbe: Preserve priority-tagged traffic with SR-IOV VID 0 carries only 802.1p priority and does not identify VLAN membership. Keep VFTA bit zero in the persistent PF shadow table so reset and SR-IOV replay admit priority-tagged frames while VLAN filtering is enabled. In virtualization mode, also reserve VLVF slot zero and restore PF and eligible VF pool memberships. A VFTA hit alone admits the tag globally but does not deliver it to the correct pools. This matches the priority-tag treatment in em/igb. (cherry picked from commit caa08ed331da02a91f95472193e25e573c0ae1e3) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ix_txrx.c _____________________________________________________________________________________________________________ Commit: 1b45a0a2bac1535b3e0b42fcb1699d2233637999 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1b45a0a2bac1535b3e0b42fcb1699d2233637999 Author: Kevin Bowling (Fri 31 Jul 2026 13:47:03 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:50:57 BST) ixgbe: preserve VLAN ownership with SR-IOV The VF VLAN capability is checked but never granted, and no SR-IOV configuration property exposes the existing default-VLAN support. PF VLAN updates also replace VFTA registers from a PF-only shadow, erasing live VF filters. Expose access VLAN and trunk policy through the IOV schema. Track each VF VLAN as desired state, restore the administrative VLAN after reset, and use the native VLVF helper for incremental PF and VF ownership changes. Keep VLAN filtering enabled while SR-IOV is active. When PF hardware filtering is disabled, admit every VLAN to the PF without bypassing per-pool VF isolation. Reconstruct VLVF and the shared VFTA from PF and VF desired state after reset or a filtering-mode transition, and restore PF-only state on teardown. When the last VF leaves a VLAN still owned by the PF, free its VLVF slot while retaining the shared VFTA bit. This prevents a trunk VF from exhausting the 64-entry VLVF table by cycling VLAN memberships. Adapt the VLAN ownership model introduced for igb(4) in a2ed165f0049 to ixgbe's native VLVF machinery. Match Linux receive semantics by exposing a stripped VLAN tag only when that VID was registered by the VF. A PF-assigned port VLAN is an administrative tag and must be delivered to the VF as untagged traffic; otherwise the stack dispatches it to a nonexistent VLAN interface and access-VLAN receive traffic is blackholed. Relnotes: yes (cherry picked from commit a81f97aecbfda71fe0b423678732e863571793e2) M share/man/man4/ix.4 M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ix_txrx.c M sys/dev/ixgbe/ixgbe.h _____________________________________________________________________________________________________________ Commit: fc2fcb0c437e1da1a459f366d84dfa3007a6782b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fc2fcb0c437e1da1a459f366d84dfa3007a6782b Author: Kevin Bowling (Fri 31 Jul 2026 13:34:36 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:50:43 BST) ixgbe: enforce configured VF anti-spoofing The SR-IOV schema advertises MAC anti-spoofing and enables it by default, but the VF configuration was never consumed and the hardware policy remained disabled. Record the configured policy and apply MAC and VLAN anti-spoofing throughout VF initialization and reset. On X550-family devices, also protect the LLDP and flow-control Ethertypes and enable per-VF spoof-event accounting. Remove the driver-owned state during SR-IOV teardown. Adapt the anti-spoof configuration lifecycle used by igb(4) in a2ed165f0049 to the ixgbe hardware controls. Relnotes: yes (cherry picked from commit 7d3d6309398ebeb4d60e35535160c722cd25f9bb) M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: 180a03f43d917f3a8108495914de2c6f12f9d406 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=180a03f43d917f3a8108495914de2c6f12f9d406 Author: Kevin Bowling (Fri 31 Jul 2026 12:53:17 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:50:16 BST) ixgbe: rebuild the shared multicast table The MTA is shared by the PF and all VFs. The VF mailbox handler only ORs new bits, so hashes survive list removal and VF reset. Conversely, PF multicast updates replace the whole table with PF-only state and discard live VF filters. Rebuild the table from the PF list and every active VF whenever either changes. Clear VF multicast state during reset and PF reinitialization, and remove all VF hashes on SR-IOV teardown. Keep the software shadow and multicast control state synchronized, and avoid writes to unchanged MTA registers. Adapt the aggregate desired-state rebuild introduced for igb(4) in a2ed165f0049 and its write-elision scheme from 350211ab1782 to ixgbe's shared MTA. (cherry picked from commit 1a180b4c86fc7534596cfbe451e25e403db81666) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_sriov.h _____________________________________________________________________________________________________________ Commit: da1cc3eeb3657673a6a3a502cdfd343075b82a44 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=da1cc3eeb3657673a6a3a502cdfd343075b82a44 Author: Kevin Bowling (Fri 31 Jul 2026 13:59:24 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:49:51 BST) ixv: reconcile the PF-approved MAC address The shared VF set-RAR helper restores hw.mac.addr when the PF rejects a requested address, but ixv ignores the error and leaves the interface link-layer address unchanged. Subsequent initialization repeats the rejected request while the interface appears to use an address the PF will not deliver. Refresh the permanent address returned by the PF after every successful reset handshake. Copy the resulting PF-approved address back to the interface and emit the normal link-layer address notification without re-entering the driver initialization path. This also recovers from a prior mailbox transport failure or a PF-side reassignment. Adapt the igb VF address reconciliation added in a6bb3850e7c6. (cherry picked from commit 4c03feacd17199a4d8689e4415992111c99e6220) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: f6c5fdf9b2b6f46df2b34ac8be19f283096a52e9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f6c5fdf9b2b6f46df2b34ac8be19f283096a52e9 Author: Kevin Bowling (Fri 31 Jul 2026 13:58:30 BST) Committer: Kevin Bowling (Sun 16 Aug 2026 21:49:39 BST) ixv: defer every admin-vector interrupt The VF admin vector carries both link and PF mailbox causes, but the filter schedules the admin task only for link-status changes. Defer administration for every interrupt so reset and control notifications are serviced promptly. (cherry picked from commit 5e05c40aff53f2adb366b3c30ff5b98aac0bb54a) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: c78ab620bb1fed047451babc6921732a5d091e4c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c78ab620bb1fed047451babc6921732a5d091e4c Author: Dag-Erling Smørgrav (Fri 14 Aug 2026 09:23:47 BST) Committer: Dag-Erling Smørgrav (Sun 16 Aug 2026 21:25:00 BST) ifnet: Restore previous size of if_afdata Struct ifnet contains an array if_afdata of AF_MAX pointers to address information for each possible address family. Since 2013, when AF_MAX was inadvertently changed to be equal to the highest possible value, instead of one more than the highest possible value, this array has been too small in theory, but this never mattered in practice because the higher address families were not assignable to interfaces. My recent commit which corrected the value of AF_MAX had the side effect of breaking the KBI by changing the size and layout of struct ifnet. This manifested itself as kernel panics when using third-party network drivers and went unnoticed in main because if_afdata no longer exists there. Address the issue for stable/15 and stable/14 by keeping the correct value of AF_MAX but deliberately making if_afdata off by one, restoring its previous size. Fixes: ddd850aa7720 ("sys/socket.h: Fix AF_MAX") Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: glebius Differential Revision: https://reviews.freebsd.org/D58840 M sys/net/if.c M sys/net/if_private.h _____________________________________________________________________________________________________________ Commit: fffd648a220d0453a9e3a3476980f8cc57cf329a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fffd648a220d0453a9e3a3476980f8cc57cf329a Author: Dag-Erling Smørgrav (Thu 13 Aug 2026 22:45:58 BST) Committer: Dag-Erling Smørgrav (Sun 16 Aug 2026 21:25:00 BST) libifconfig: Fix table size Tables that have one element per protocol or address family were previously sized by AF_MAX + 1 since AF_MAX was off by one. Now that AF_MAX has been corrected, we need to apply the opposite correction to these tables. Fixes: ddd850aa7720 ("sys/socket.h: Fix AF_MAX") MFC after: 3 days Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D58827 (cherry picked from commit 79a6ad63e6afdfa00d0e625996bddf91e9f217c3) M lib/libifconfig/libifconfig_internal.h _____________________________________________________________________________________________________________ Commit: fde12de2c686e49d75629dabb226066cb055374e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fde12de2c686e49d75629dabb226066cb055374e Author: Dag-Erling Smørgrav (Thu 13 Aug 2026 22:45:53 BST) Committer: Dag-Erling Smørgrav (Sun 16 Aug 2026 21:25:00 BST) routing: Fix table sizes Tables that have one element per protocol or address family were previously sized by AF_MAX + 1 since AF_MAX was off by one. Now that AF_MAX has been corrected, we need to apply the opposite correction to these tables. Fixes: ddd850aa7720 ("sys/socket.h: Fix AF_MAX") MFC after: 3 days Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: pouria, kevans, glebius Differential Revision: https://reviews.freebsd.org/D58826 (cherry picked from commit 6c41d928bcd763ec60d55bec2886c05b03cf9e6a) M sys/net/route/route_tables.c _____________________________________________________________________________________________________________ Commit: 3626363aaed8fa8becbb3c89ba0bbeeea6ae1139 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3626363aaed8fa8becbb3c89ba0bbeeea6ae1139 Author: Konstantin Belousov (Fri 14 Aug 2026 00:18:18 BST) Committer: Konstantin Belousov (Sun 16 Aug 2026 17:37:22 BST) netipsec/xform_ipcomp.c: fix sockaddr type set in ipcomp6_nonexp_encapcheck() (cherry picked from commit 01d4e3c1d3ffa14041d8faa3a7a6e6509e73af84) M sys/netipsec/xform_ipcomp.c _____________________________________________________________________________________________________________ Commit: 022f935a1fbc75d39a055eee0a327cb2062a4596 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=022f935a1fbc75d39a055eee0a327cb2062a4596 Author: Konstantin Belousov (Tue 4 Aug 2026 16:52:53 BST) Committer: Konstantin Belousov (Sun 16 Aug 2026 17:37:15 BST) PF_KEY socket: limit the length of copied socket address PR: 297264 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297264 ) (cherry picked from commit cba481a7bff2fcf31420ee8b2714660e2666452b) M sys/netipsec/key.c _____________________________________________________________________________________________________________ Commit: af11a69e53070b6002e9246d24696cd03ea9d40a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=af11a69e53070b6002e9246d24696cd03ea9d40a Author: Konstantin Belousov (Fri 14 Aug 2026 00:25:21 BST) Committer: Konstantin Belousov (Sun 16 Aug 2026 17:37:12 BST) netipsec/key.c::key_checksockaddrs(): constify src/dst address buffer pointers (cherry picked from commit fbe9aa7ebfcd6d89b298cc7a23de02d119367221) M sys/netipsec/key.c _____________________________________________________________________________________________________________ Commit: 065396e09e41d6932ef726053bed97aed6e022e1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=065396e09e41d6932ef726053bed97aed6e022e1 Author: Eric van Gyzen (Sat 4 Oct 2025 13:23:41 BST) Committer: Eric van Gyzen (Fri 14 Aug 2026 14:20:33 BST) if_vmx: fix panic during kldload Just like vmxnet3_intr_disable_all, iflib may invoke this routine before vmxnet3_attach_post() has run, which is before the top-level shared data area is initialized and the device made aware of it. PR: 294312 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294312 ) Sponsored by: Dell Inc. (cherry picked from commit 01b0690c495e1043a72cae9ee945f9f2c2adc216) M sys/dev/vmware/vmxnet3/if_vmx.c _____________________________________________________________________________________________________________ Commit: 273804965ae21d4912ae3a4e24082708bc2da636 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=273804965ae21d4912ae3a4e24082708bc2da636 Author: Gordon Bergling (Mon 10 Aug 2026 10:30:19 BST) Committer: Gordon Bergling (Thu 13 Aug 2026 06:02:44 BST) ipfilter(4): Fix a typo in a source code comment - s/pointr/pointer/ Obtained from: NetBSD (cherry picked from commit f98d856f613b3d8ac564d03dbe0011bd9eaab757) M sys/netpfil/ipfilter/netinet/fil.c _____________________________________________________________________________________________________________ Commit: a58471a2789dd6c96933d9ecb8c30bafb1705fba URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a58471a2789dd6c96933d9ecb8c30bafb1705fba Author: Abdelkader Boudih (Wed 5 Aug 2026 05:40:58 BST) Committer: Kevin Bowling (Wed 12 Aug 2026 21:30:46 BST) igc: defer sysctl-driven reinit to the admin task igc_sysctl_eee() and igc_sysctl_dmac() called igc_if_init() directly. Request the reset through iflib instead, and skipping while the interface is down; the new value is picked up by the next init. Unlike e1000, igc has no ASSERT_CTX_LOCK_HELD and no acquire_swflag path, so the defect is silent here rather than an assertion failure. While here also remove unnecessary igc_if_init uses: iflib_if_init_locked() already runs after IFDI_RESUME and IFDI_MEDIA_CHANGE, so the trailing *_if_init() only added an unstopped IFDI_INIT that the following iflib_stop() undoes. Differential Revision: https://reviews.freebsd.org/D58629 (cherry picked from commit 30ccf2f48c11e54fc0540510dcec7cd006a2c366) M sys/dev/igc/if_igc.c _____________________________________________________________________________________________________________ Commit: 0fa6b2c523ee763604a842df8da16ebf30888354 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0fa6b2c523ee763604a842df8da16ebf30888354 Author: Abdelkader Boudih (Wed 5 Aug 2026 05:34:13 BST) Committer: Kevin Bowling (Wed 12 Aug 2026 21:30:35 BST) e1000: defer sysctl-driven reinit to the admin task Request the reset through iflib and let the admin task perform the stop/init under the context lock, matching what the VF and SR-IOV paths already do. The assertion is compiled out without INVARIANTS, where the same write instead resets the MAC and takes the ICH software flag while the queues stay live and an ioctl or the admin task may be running. While here also remove unnecessary em_if_init uses: iflib_if_init_locked() already runs after IFDI_RESUME and IFDI_MEDIA_CHANGE, so the trailing *_if_init() only added an unstopped IFDI_INIT that the following iflib_stop() undoes. Differential Revision: https://reviews.freebsd.org/D58628 (cherry picked from commit abdde8b602813753e423610b39be6806da5647e2) M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 887114a9e1aec877a44ddb7ce1eb4319ee1b19bf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=887114a9e1aec877a44ddb7ce1eb4319ee1b19bf Author: Dag-Erling Smørgrav (Sat 8 Aug 2026 01:10:23 BST) Committer: Dag-Erling Smørgrav (Wed 12 Aug 2026 20:20:22 BST) du: Print progress information to stderr * On SIGINFO, print the current path to stderr rather than stdout. * Do so immediately, instead of the next time we finish a directory. * Document this behavior in the manual page. PR: 296861 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296861 ) MFC after: 1 week Fixes: d1588599c024 ("Report the next directory being scanned ...") Reviewed by: wollman Differential Revision: https://reviews.freebsd.org/D58702 (cherry picked from commit fd79bf63442eefd2c3bfb695a377dbd705f5cc6d) M usr.bin/du/du.1 M usr.bin/du/du.c _____________________________________________________________________________________________________________ Commit: ea65604407f4c2c73e889cfba07f5c65fb208996 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ea65604407f4c2c73e889cfba07f5c65fb208996 Author: Dag-Erling Smørgrav (Wed 5 Aug 2026 09:50:47 BST) Committer: Dag-Erling Smørgrav (Wed 12 Aug 2026 20:15:48 BST) pseudofs: Don't purge the cache on shutdown This is a waste of time and results in a use-after-free if linsysfs is loaded and a USB network interface is in use, since USB devices are disconnected at shutdown, which triggers a call into linsysfs, which then tries to destroy a pseudofs node which has already been purged. MFC after: 1 week Reviewed by: glebius Differential Revision: https://reviews.freebsd.org/D58359 (cherry picked from commit 4ebcdb8dd9a7bdddbc97ff6ee47e0a7556c76b5a) M sys/fs/pseudofs/pseudofs.c _____________________________________________________________________________________________________________ Commit: ceb764f65dcdc7349abc0b27b934a89d2209180d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ceb764f65dcdc7349abc0b27b934a89d2209180d Author: Dag-Erling Smørgrav (Tue 4 Aug 2026 19:27:21 BST) Committer: Dag-Erling Smørgrav (Wed 12 Aug 2026 20:15:48 BST) unbound: Update to 1.26.0 Release notes at https://community.nlnetlabs.nl/t/unbound-1-26-0-released Merge commit '84ffc29dc8ddb0c946db5cb3b3c1310bec6a9e6c' (cherry picked from commit 7a789145f88a6aceacc59029a0cafe7de7aeefea) M contrib/unbound/README.md M contrib/unbound/ax_pthread.m4 M contrib/unbound/cachedb/cachedb.c M contrib/unbound/compat/getentropy_osx.c M contrib/unbound/compat/inet_pton.c M contrib/unbound/config.guess M contrib/unbound/config.h.in M contrib/unbound/config.sub M contrib/unbound/configure M contrib/unbound/configure.ac M contrib/unbound/daemon/cachedump.c M contrib/unbound/daemon/daemon.c M contrib/unbound/daemon/remote.c M contrib/unbound/daemon/remote.h M contrib/unbound/daemon/stats.c M contrib/unbound/daemon/worker.c M contrib/unbound/dns64/dns64.c M contrib/unbound/dnscrypt/dnscrypt.c M contrib/unbound/dnstap/dnstap.c M contrib/unbound/dnstap/dnstap.h M contrib/unbound/dnstap/dtstream.c M contrib/unbound/dnstap/unbound-dnstap-socket.c M contrib/unbound/doc/Changelog M contrib/unbound/doc/README M contrib/unbound/doc/example.conf M contrib/unbound/doc/example.conf.in M contrib/unbound/doc/libunbound.3 M contrib/unbound/doc/libunbound.3.in M contrib/unbound/doc/unbound-anchor.8 M contrib/unbound/doc/unbound-anchor.8.in M contrib/unbound/doc/unbound-checkconf.8 M contrib/unbound/doc/unbound-checkconf.8.in M contrib/unbound/doc/unbound-control.8 M contrib/unbound/doc/unbound-control.8.in M contrib/unbound/doc/unbound-control.rst M contrib/unbound/doc/unbound-host.1 M contrib/unbound/doc/unbound-host.1.in M contrib/unbound/doc/unbound.8 M contrib/unbound/doc/unbound.8.in M contrib/unbound/doc/unbound.conf.5 M contrib/unbound/doc/unbound.conf.5.in M contrib/unbound/doc/unbound.conf.rst M contrib/unbound/edns-subnet/addrtree.c M contrib/unbound/edns-subnet/subnetmod.c M contrib/unbound/ipsecmod/ipsecmod-whitelist.c M contrib/unbound/ipsecmod/ipsecmod.c M contrib/unbound/ipset/ipset.c M contrib/unbound/iterator/iter_delegpt.c M contrib/unbound/iterator/iter_delegpt.h M contrib/unbound/iterator/iter_resptype.c M contrib/unbound/iterator/iter_resptype.h M contrib/unbound/iterator/iter_scrub.c M contrib/unbound/iterator/iter_scrub.h M contrib/unbound/iterator/iter_utils.c M contrib/unbound/iterator/iter_utils.h M contrib/unbound/iterator/iterator.c M contrib/unbound/iterator/iterator.h M contrib/unbound/libunbound/context.h M contrib/unbound/libunbound/libunbound.c M contrib/unbound/libunbound/libworker.c A contrib/unbound/libunbound/remote.h M contrib/unbound/libunbound/worker.h M contrib/unbound/respip/respip.c M contrib/unbound/services/authzone.c M contrib/unbound/services/authzone.h M contrib/unbound/services/cache/dns.c M contrib/unbound/services/cache/rrset.c M contrib/unbound/services/listen_dnsport.c M contrib/unbound/services/localzone.c M contrib/unbound/services/localzone.h M contrib/unbound/services/mesh.c M contrib/unbound/services/mesh.h M contrib/unbound/services/outside_network.c M contrib/unbound/services/outside_network.h M contrib/unbound/services/rpz.c M contrib/unbound/sldns/keyraw.c M contrib/unbound/sldns/str2wire.c M contrib/unbound/smallapp/unbound-anchor.c M contrib/unbound/smallapp/unbound-checkconf.c M contrib/unbound/smallapp/worker_cb.c M contrib/unbound/util/config_file.c M contrib/unbound/util/config_file.h M contrib/unbound/util/configlexer.c M contrib/unbound/util/configlexer.lex M contrib/unbound/util/configparser.c M contrib/unbound/util/configparser.h M contrib/unbound/util/configparser.y M contrib/unbound/util/data/msgencode.c M contrib/unbound/util/data/msgparse.c M contrib/unbound/util/data/msgreply.c M contrib/unbound/util/data/packed_rrset.c M contrib/unbound/util/data/packed_rrset.h M contrib/unbound/util/fptr_wlist.c M contrib/unbound/util/fptr_wlist.h M contrib/unbound/util/iana_ports.inc M contrib/unbound/util/module.h M contrib/unbound/util/net_help.c M contrib/unbound/util/netevent.c M contrib/unbound/util/netevent.h M contrib/unbound/util/proxy_protocol.c M contrib/unbound/util/proxy_protocol.h M contrib/unbound/util/shm_side/shm_main.c M contrib/unbound/util/tube.c M contrib/unbound/validator/autotrust.c M contrib/unbound/validator/val_anchor.c M contrib/unbound/validator/val_neg.c M contrib/unbound/validator/val_nsec.c M contrib/unbound/validator/val_nsec3.c M contrib/unbound/validator/val_secalgo.c M contrib/unbound/validator/val_sigcrypt.c M contrib/unbound/validator/val_utils.c M contrib/unbound/validator/val_utils.h M contrib/unbound/validator/validator.c M lib/libunbound/config.h _____________________________________________________________________________________________________________ Commit: fe264ccf86b4024331bec8849c077a2f270626fd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fe264ccf86b4024331bec8849c077a2f270626fd Author: Philippe Michaud-Boudreault (Wed 22 Jul 2026 09:39:30 BST) Committer: Dag-Erling Smørgrav (Wed 12 Aug 2026 20:15:48 BST) tarfs: remove unused 'ino' in mount structure. Differential Revision: https://reviews.freebsd.org/D57898 (cherry picked from commit 54e6dec44b6dd264b19e50439a58b33cab4c10c3) M sys/fs/tarfs/tarfs.h _____________________________________________________________________________________________________________ Commit: 60539af27fda620911ea0f055dea339d6c5444ba URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=60539af27fda620911ea0f055dea339d6c5444ba Author: Maxim Konovalov (Mon 3 Aug 2026 19:08:07 BST) Committer: Sergey A. Osokin (Wed 12 Aug 2026 13:28:32 BST) bsd-family-tree: add NetBSD 11.0 (cherry picked from commit 396e6d69955669b564cb605418e9d8025b3592bd) M share/misc/bsd-family-tree _____________________________________________________________________________________________________________ Commit: 42ad07230426924aafb8b2f6f90b605b4d8c0817 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=42ad07230426924aafb8b2f6f90b605b4d8c0817 Author: Maxim Konovalov (Tue 16 Jun 2026 13:34:28 BST) Committer: Sergey A. Osokin (Wed 12 Aug 2026 13:28:24 BST) bsd-family-tree: add FreeBSD 15.1 (cherry picked from commit f8b5df434e419e00272bfce343bf7da239081276) M share/misc/bsd-family-tree _____________________________________________________________________________________________________________ Commit: 71ac7ff5d6f97d0f49b72922bcaca191ff7677d2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=71ac7ff5d6f97d0f49b72922bcaca191ff7677d2 Author: Kristof Provost (Mon 3 Aug 2026 15:05:28 BST) Committer: Kristof Provost (Tue 11 Aug 2026 09:34:13 BST) pf: attempt to handle overlapping group and interface names pf assumes that network groups and network interfaces share a namespace (that is, a name is unused, a group or an interface, never both a the same time). Unfortunately this assumption was broken when interface renaming was introduced. Attempt to cope with this rather than panicking. Note that this is a band-aid, not a full solution. The correct fix is for the network stack to go back to enforcing a single namespace for groups and interfaces. PR: 297220 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297220 ) Reported by: Robert Morris MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit d2a5b5a86a92e86f77737273ab4b2e99da63c21d) M sys/netpfil/pf/pf_if.c M tests/sys/netpfil/pf/names.sh _____________________________________________________________________________________________________________ Commit: 82255ae9139995c0597246b90c90ba4cf955d3ed URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=82255ae9139995c0597246b90c90ba4cf955d3ed Author: Kristof Provost (Tue 2 Sep 2025 09:46:26 BST) Committer: Kristof Provost (Tue 11 Aug 2026 09:34:13 BST) pf: check if a group has a kif before dereferencing it It's possible for interface groups to not have had a pfi_kkif assigned to them, so before we pass that pointer to pfi_kkif_update() we must check if it's actually set. We've seen panics such as this, where we get an address update for an interface that belongs to a group without associated pfi_kkif: Tracing pid 12 tid 100034 td 0xfffff80100d2a000 kdb_enter() at kdb_enter+0x33/frame 0xfffffe0067eed340 panic() at panic+0x43/frame 0xfffffe0067eed3a0 trap_pfault() at trap_pfault+0x3c9/frame 0xfffffe0067eed3f0 calltrap() at calltrap+0x8/frame 0xfffffe0067eed3f0 --- trap 0xc, rip = 0xffffffff8102ebd5, rsp = 0xfffffe0067eed4c0, rbp = 0xfffffe0067eed500 --- pfi_kkif_update() at pfi_kkif_update+0x15/frame 0xfffffe0067eed500 pfi_kkif_update() at pfi_kkif_update+0x1fc/frame 0xfffffe0067eed550 pfi_ifaddr_event() at pfi_ifaddr_event+0x82/frame 0xfffffe0067eed5a0 srcaddr_change_event() at srcaddr_change_event+0xa7/frame 0xfffffe0067eed610 in6_update_ifa() at in6_update_ifa+0xd52/frame 0xfffffe0067eed790 in6_ifadd() at in6_ifadd+0x29a/frame 0xfffffe0067eed8b0 nd6_ra_input() at nd6_ra_input+0xf65/frame 0xfffffe0067eeda90 icmp6_input() at icmp6_input+0x3c8/frame 0xfffffe0067eedc10 ip6_input() at ip6_input+0xa15/frame 0xfffffe0067eedcf0 sppp_input() at sppp_input+0x502/frame 0xfffffe0067eedd80 pppoe_data_input() at pppoe_data_input+0x1e7/frame 0xfffffe0067eeddf0 swi_net() at swi_net+0x128/frame 0xfffffe0067eede60 ithread_loop() at ithread_loop+0x239/frame 0xfffffe0067eedef0 fork_exit() at fork_exit+0x7b/frame 0xfffffe0067eedf30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0067eedf30 Note that pf doesn't assign pfi_kkif objects to groups created before pf has fully started (see V_pf_vnet_active check in pfi_attach_group_event()), which is one possible way for this to happen. Reported by: garga Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit dc0cf0648c8d28ab4914c798a4cff8256ae94ee5) M sys/netpfil/pf/pf_if.c _____________________________________________________________________________________________________________ Commit: c64d42caebb77f927777408f5a284a7313df1fc4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c64d42caebb77f927777408f5a284a7313df1fc4 Author: Boris Lytochkin (Tue 11 Aug 2026 09:03:16 BST) Committer: Andrey V. Elsukov (Tue 11 Aug 2026 09:03:16 BST) ipfw: rework 32-bit KBI detection When we run 14.X jail on 15.X host system previous implementation could not correctly detect 32-bit KBI due to jails can overwrite osreldate. Add special handling for this case and use detection using IP_FW_DUMP_SOPTCODES and IP_FW_XGET sockopts version. Reported by: Vova Grebenschikov Fixes: 704ec5e68c44 MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56616 M sbin/ipfw/ipfw2.c M sbin/ipfw/ipfw2.h M sbin/ipfw/main.c _____________________________________________________________________________________________________________ Commit: c66a923cd12a41ab1e31f3e9522cfba19bc66d48 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c66a923cd12a41ab1e31f3e9522cfba19bc66d48 Author: Xin LI (Sun 26 Jul 2026 03:17:55 BST) Committer: Xin LI (Tue 11 Aug 2026 04:07:36 BST) release/Makefile.gce: migrate gsutil usages to gcloud CLI Google Cloud recommends migrating from gsutil to gcloud storage CLI. Update gce-do-upload target to use `gcloud storage buckets create` and `gcloud storage cp` instead of `gsutil mb` and `gsutil cp` commands. PR: conf/297016 (cherry picked from commit 4174cc2f69d36105a735b19fadc9c18497b02b1a) M release/Makefile.gce _____________________________________________________________________________________________________________ Commit: e55338fc5df9578f259d429ce47051005aace514 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e55338fc5df9578f259d429ce47051005aace514 Author: Kevin Bowling (Sat 1 Aug 2026 13:41:22 BST) Committer: Kevin Bowling (Mon 10 Aug 2026 01:43:13 BST) ixgbe: supply PF transmit contexts under SR-IOV X550-family malicious-driver detection validates the transmit context selected by a data descriptor with Check Context set. ixgbe sets that bit on every transmit data descriptor, but ordinary PF packets without a VLAN or checksum offload do not create a context descriptor. The empty context then reports an invalid MAC-header length and blocks the PF queue as soon as MDD is enabled. Create the existing context descriptor for every PF packet while SR-IOV is active. This supplies the required MAC-header length and keeps MDD from mistaking normal PF traffic for a malicious-driver event. (cherry picked from commit 0787b1f5b8bdfcaed97eeee7bfbd7f14ac162b0d) M sys/dev/ixgbe/ix_txrx.c _____________________________________________________________________________________________________________ Commit: b3e20e1a0386815878f91872f5fe133bea4e08b0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b3e20e1a0386815878f91872f5fe133bea4e08b0 Author: Pouria Mousavizadeh Tehrani (Wed 5 Aug 2026 09:27:54 BST) Committer: Pouria Mousavizadeh Tehrani (Sat 8 Aug 2026 07:19:29 BST) rtadvd(8): Fix RA flag inconsistency messages During flag inconsistency report, we handle rai->rai_otherflg as a bool, but the value is 0x40. Make it a simple number comparison. PR: 295995 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295995 ) Reviewed by: markj, Faraz Vahedi MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D58672 (cherry picked from commit 200de1b70e2b4f809d1d3a4c430db80b24124468) M usr.sbin/rtadvd/rtadvd.c _____________________________________________________________________________________________________________ Commit: 3da5aba3f6131baaf76949d54ba6caa73fb055cd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3da5aba3f6131baaf76949d54ba6caa73fb055cd Author: Kevin Bowling (Mon 3 Aug 2026 10:55:15 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:43:44 BST) igc: Disable PCIe L1.2 on I225 I225 devices can incorrectly enter L1 substates while CLKREQ# is asserted, both while idle and in D3. Disable ASPM and PCI-PM L1.2 on I225 to prevent the resulting packet loss. Keep the I226 workaround ASPM-only because it addresses a separate traffic exit latency observation. PR: 265714 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265714 ) (cherry picked from commit 4a28d390f5fbae2483e88805559881b04ccf9a80) M sys/dev/igc/if_igc.c M sys/dev/igc/igc_base.c M sys/dev/igc/igc_base.h _____________________________________________________________________________________________________________ Commit: 30f409552cbadeab12279f86eb6b67f54409b3ec URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=30f409552cbadeab12279f86eb6b67f54409b3ec Author: Michael Adler (Sat 1 Aug 2026 00:54:00 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:43:34 BST) igc: Apply ASPM L1.2 workaround to all I226 devices Classify I226_LMVP and I226_BLANK_NVM as I226 silicon so they receive the I226-specific ASPM L1.2 workaround. PR: 279245 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279245 ) Pull-Request: https://github.com/freebsd/freebsd-src/pull/2318 (cherry picked from commit cecb0f45cb83349c60514da38fddce83ad042468) M sys/dev/igc/igc_base.c _____________________________________________________________________________________________________________ Commit: 94d7960ab011e34b2c36c0d45973751f2e5b0ccb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=94d7960ab011e34b2c36c0d45973751f2e5b0ccb Author: Kevin Bowling (Tue 28 Jul 2026 12:26:28 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:43:22 BST) ixgbe: clear VF head write-back state on reset VF reset and FLR do not clear the transmit head write-back address registers. A previous VF driver can therefore leave DMA write-back enabled with a stale address for the next driver instance. After consuming the reset request and disabling the VF queues, clear the address registers for each queue belonging to that VF. Derive the queue count from the active IOV mode so peer queue state is not touched. Linux commit dbf231af81a7 documents the hardware behavior. The FreeBSD implementation follows the local queue mapping and register interfaces. (cherry picked from commit 6f940ca879cbf691ddf5605d852770cef27847b2) M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: 2ece40431fd1a83bd2c9f569464f98fdff153916 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2ece40431fd1a83bd2c9f569464f98fdff153916 Author: Kevin Bowling (Tue 28 Jul 2026 12:25:48 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:43:11 BST) ixgbe: dispatch PBA string reads through EEPROM ops E610 installs a device-specific PBA string reader, but the public API always calls the generic implementation. Dispatch through the EEPROM operation table so device overrides are honored. Initialize the generic operation for devices that use the ordinary EEPROM representation. Obtained from: Intel ix 3.4.39 (cherry picked from commit 9cf1aa6e68e4b9dd4a77c67b7b902b9221198e7a) M sys/dev/ixgbe/ixgbe_api.c M sys/dev/ixgbe/ixgbe_common.c _____________________________________________________________________________________________________________ Commit: 72b76123715509af8914440b1e51fd85f1bec5e5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=72b76123715509af8914440b1e51fd85f1bec5e5 Author: Kevin Bowling (Tue 28 Jul 2026 12:21:37 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:43:01 BST) ixgbe: avoid signed shift when assembling ETrack ID Obtained from: Intel ix 3.4.39 (cherry picked from commit 86869d77658aef48b2bab3e57517f88d7bd5389d) M sys/dev/ixgbe/ixgbe_common.c _____________________________________________________________________________________________________________ Commit: 33fb0b470b36e3b7aa0f2b8979f203f0bdee9d10 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=33fb0b470b36e3b7aa0f2b8979f203f0bdee9d10 Author: Kevin Bowling (Tue 28 Jul 2026 12:21:14 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:42:51 BST) ixgbe: fix host interface timeout detection The host-interface polling loop was scaled from milliseconds to microseconds, but its terminal test was left using the unscaled timeout. Completion at that intermediate iteration can be reported as a timeout, while actual expiry is not recognized and can accept stale status. Test against the scaled loop bound used by the polling loop. Fixes: f46d75c90f5f ("ixgbe: improve MDIO performance by reducing semaphore/IPC delays") (cherry picked from commit db2bf4553ce32fdcae00f6e7392a6c2010247dd6) M sys/dev/ixgbe/ixgbe_common.c _____________________________________________________________________________________________________________ Commit: edf4edbd1ca09ee9b0c255d7506f3b5bc9542557 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=edf4edbd1ca09ee9b0c255d7506f3b5bc9542557 Author: Wei Zhao (Tue 28 Jul 2026 12:20:32 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:42:40 BST) ixgbe: disable VF multicast reception for empty list Clear ROMPE for an empty list and enable it only for a nonempty list. FreeBSD already clears ROMPE when resetting a VF, so that part of the DPDK change is not needed. DPDK commit message net/ixgbe: fix over using multicast table for VF VMOLR.ROMPE allows a VF to receive packets matching the shared multicast table. Leaving it enabled after the VF removes its last multicast address lets PF or peer-VF table entries continue selecting that VF. Signed-off-by: Wei Zhao Acked-by: Qi Zhang Obtained from: DPDK (dc5a6e7422) (cherry picked from commit 786c71845f80b8bf733d07f9155de9740a8cbc19) M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: 4857be0b810080452f6ef2ca4b80be06e174a4aa URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4857be0b810080452f6ef2ca4b80be06e174a4aa Author: Kevin Bowling (Tue 28 Jul 2026 12:20:08 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:42:29 BST) ixgbe: check negotiated API for VF queue query The GET_QUEUES handler switches on msg[0], which contains the mailbox command rather than the negotiated API version. It therefore cannot reject API 1.0 or an unnegotiated VF as intended. Switch on the API version stored for the VF. (cherry picked from commit 8d1d32942b810d613be45ea78939872711803c3b) M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: 23c1d528bc0e0fa7ae09a22aa2240aefa8092709 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=23c1d528bc0e0fa7ae09a22aa2240aefa8092709 Author: Kevin Bowling (Tue 28 Jul 2026 12:19:47 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:42:18 BST) ixgbe: reject VF requests before CTS A VF that sends a non-reset request before completing reset negotiation has not received CTS. The PF ignores the request but currently reports success, leaving the VF with a false view of the programmed state. Return failure for the ignored request. This restores the behavior lost when the mailbox helpers were renamed. Fixes: 36c516b31136 ("ixgbe: update if_sriov to use the new mailbox apis") (cherry picked from commit 9fc83caf48e710c3f6457cab4bdb5e6c76e8be51) M sys/dev/ixgbe/if_sriov.c _____________________________________________________________________________________________________________ Commit: 49fc8bbbffae366e3063647b62e4f548226ddd94 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=49fc8bbbffae366e3063647b62e4f548226ddd94 Author: Kevin Bowling (Tue 28 Jul 2026 12:10:09 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:42:06 BST) ixgbe: avoid signed overflow in pause time calculation pause_time is promoted to signed int before multiplication. Its default value of 65535 multiplied by 65537 exceeds INT_MAX and triggers UBSAN, even though the result is assigned to a u32. Make the multiplier unsigned so the calculation has the intended u32 semantics. Linux commit 3b70683fc4d6 reported the failure in the generic path and used the same mechanical correction. The 82598-specific flow control operation contains the identical expression, so correct it as well. (cherry picked from commit 35374c3ec69aa87561431e6236706c485bdeeacc) M sys/dev/ixgbe/ixgbe_82598.c M sys/dev/ixgbe/ixgbe_common.c _____________________________________________________________________________________________________________ Commit: c50447c7075e58c7d02279b37735f101b093087f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c50447c7075e58c7d02279b37735f101b093087f Author: Kevin Bowling (Tue 28 Jul 2026 12:09:39 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:41:56 BST) ixgbe: fix unaligned access in ixgbe_update_flash_X550() ixgbe_host_interface_command() treats its buffer as a u32 array. The local union contained only byte-sized fields, giving it one-byte stack alignment and allowing unaligned accesses on strict-align systems. Add a u32 member to the union to provide the required alignment and pass that member to ixgbe_host_interface_command(). No functional change is expected on x86. Obtained from: Intel ix 3.4.39 (cherry picked from commit 8fa2a7503468abb5f863729c4e244d738239503d) M sys/dev/ixgbe/ixgbe_type.h M sys/dev/ixgbe/ixgbe_x550.c _____________________________________________________________________________________________________________ Commit: 70df28a9281a799d33f2391d4cf605341980e080 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=70df28a9281a799d33f2391d4cf605341980e080 Author: Stephen Douthit (Tue 28 Jul 2026 12:09:02 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:41:44 BST) ixgbe: retry incoherent SFP identifier reads FreeBSD's I2C helper already retries failed transactions. Limit this new outer loop to successful reads with an invalid identifier so that retry budget is not multiplied. DPDK commit message net/ixgbe: retry misbehaving SFP read Some XGS-PON SFPs ACK I2C reads and return uninitialized data while their microcontroller boots. A bogus identifier can cause an otherwise working module to be marked unsupported. Retry the identifier read several times, checking for both successful I2C completion and a valid SFP identifier. Signed-off-by: Stephen Douthit Signed-off-by: Jeff Daly Reviewed-by: Haiyue Wang Obtained from: DPDK (774263bb4e) (cherry picked from commit 985bef0c4474abe8ebc3b0def601db8ceff2a690) M sys/dev/ixgbe/ixgbe_phy.c _____________________________________________________________________________________________________________ Commit: fce4d00876e805ef7063141b22ce08b2e97bd42b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fce4d00876e805ef7063141b22ce08b2e97bd42b Author: Barbara Skobiej (Tue 28 Jul 2026 12:08:12 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:41:34 BST) ixgbe: check EEPROM read in 82599 D3 path DPDK commit message net/ixgbe/base: fix unchecked return value Check the return value from ixgbe_read_eeprom() before using the control word to configure link disable during D3. Fixes: b7ad3713b958 ("ixgbe/base: allow to disable link on D3") Cc: stable@dpdk.org Signed-off-by: Barbara Skobiej Signed-off-by: Anatoly Burakov Acked-by: Bruce Richardson Obtained from: DPDK (eb3684b191) (cherry picked from commit a8598143803d8db60568844cae86b0f330e49a1e) M sys/dev/ixgbe/ixgbe_82599.c _____________________________________________________________________________________________________________ Commit: d535381ea414ec12163339d8438ff03cbabdf7e9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d535381ea414ec12163339d8438ff03cbabdf7e9 Author: Daniil Iskhakov (Tue 28 Jul 2026 12:07:33 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:41:23 BST) ixgbe: avoid flow control counter overflow DPDK commit message net/ixgbe: fix flow control frame byte adjustment LXONTXC and LXOFFTXC are 32-bit counters for transmitted XON and XOFF packets. Their deltas are summed and used to adjust the transmitted packet and byte counters. Perform the addition in 64 bits so it cannot wrap before the result is used for the byte adjustment. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: af75078fece3 ("first public release") Cc: stable@dpdk.org Signed-off-by: Daniil Iskhakov Acked-by: Bruce Richardson Obtained from: DPDK (bdf8608559) (cherry picked from commit 21e03ab39603fbab4bcef1dd61fe75e9e9276079) M sys/dev/ixgbe/if_ix.c _____________________________________________________________________________________________________________ Commit: 6b23a23c14ec01e6fb87ae981a711a6ffb5b3ed4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6b23a23c14ec01e6fb87ae981a711a6ffb5b3ed4 Author: Dan Nowlin (Tue 28 Jul 2026 12:07:01 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:41:11 BST) ixgbe: copy ACI buffer before command retry DPDK commit message net/ixgbe/base: add missing buffer copy for ACI Add the missing buffer copy in ixgbe_aci_send_cmd(). The retry path saves the original descriptor and allocates storage for the command buffer so both can be restored before another attempt. It did not copy the original command buffer into that storage. Fixes: 25b48e569f2f Cc: stable@dpdk.org Signed-off-by: Dan Nowlin Signed-off-by: Yuan Wang Acked-by: Bruce Richardson Obtained from: DPDK (37239792b0) (cherry picked from commit e45178957d3a25a162279687d82ce791d8253f97) M sys/dev/ixgbe/ixgbe_e610.c _____________________________________________________________________________________________________________ Commit: b84a50bd0e850575be99c7f798ccc7c89796073c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b84a50bd0e850575be99c7f798ccc7c89796073c Author: Kevin Bowling (Tue 28 Jul 2026 12:06:23 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:40:56 BST) ixv: fix multicast address enumeration if_foreach_llmaddr() adds each callback return value to its running count. Returning the incremented count made the address indices grow as 0, 1, 3, 7, and so on, eventually writing beyond the multicast address array. Return one address per callback and stop copying when the array is full, matching the ixv-1.6.12 driver. Fixes: ff06a8dbb677 ("Mechanically convert ixgbe(4) to IfAPI") (cherry picked from commit 6020de5ad154d54c8b9a838f28612c2182330c67) M sys/dev/ixgbe/if_ixv.c _____________________________________________________________________________________________________________ Commit: f19cf6441e00c1140a8b8e6eb3dc6c51c0da5cb4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f19cf6441e00c1140a8b8e6eb3dc6c51c0da5cb4 Author: Kevin Bowling (Fri 31 Jul 2026 11:41:02 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:40:43 BST) ixgbe: fail fast on VF-held PF mailboxes The active PF mailbox operations use the legacy helpers. The mailbox API import changed check_for_msg into a read-only probe and added up to 2,000 500-microsecond lock retries. If a VF leaves VFU set, the PF cannot acquire the lock, busy-waits for up to one second, and leaves VFREQ pending so the delay can repeat. Give the legacy checker its old consume-on-check behavior so a failed read does not leave VFREQ asserted. If VFU is already set, fail immediately instead of retrying, while preserving retries for PF-side contention. Do not force RVFU, which would discard peer transaction state. (cherry picked from commit 2a678cfeb5838978ef3a1907c686142d03237e15) M sys/dev/ixgbe/ixgbe_mbx.c _____________________________________________________________________________________________________________ Commit: 5b61d1c82f38ff31b2940f54f6b0ee946b125302 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5b61d1c82f38ff31b2940f54f6b0ee946b125302 Author: Kevin Bowling (Tue 28 Jul 2026 10:27:24 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:40:31 BST) ixgbe: respect peer mailbox ownership A VF currently treats an existing VFU bit as a successful acquisition, while the PF checks its own PFU bit before claiming the mailbox. Check both the local and peer ownership bits before setting local ownership. This prevents same-side callers from sharing the mailbox and avoids an acquisition attempt while the peer owns it. VFLR does not clear VFMAILBOX.VFU. Clear stale VF ownership and cached mailbox status after the reset indication settles and before sending the reset request, so the ownership check cannot strand a reinitialized VF. Adapt only the live ownership checks from Intel ix 3.4.39. Do not import its upgraded-mailbox changes, which are not active in FreeBSD. Obtained from: Intel ix 3.4.39 (cherry picked from commit 409601911b327426a34a6f28b31fdd5d95d1d275) M sys/dev/ixgbe/ixgbe_mbx.c M sys/dev/ixgbe/ixgbe_vf.c _____________________________________________________________________________________________________________ Commit: f8eea82a0b97aec6c6d3b603772f9cc6b3e69abc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f8eea82a0b97aec6c6d3b603772f9cc6b3e69abc Author: Kevin Bowling (Tue 28 Jul 2026 10:21:47 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:40:19 BST) ixgbe: isolate VF reset state IXGBE_VF_INDEX() selects a 32-VF register bank. PFMBMEM() selects one mailbox per VF, while ixgbe_toggle_txdctl() calculates queue offsets from a VF number. Passing the bank index aliases VF1-31 to VF0 and VF32-63 to VF1. Resetting one VF can therefore clear the peer mailbox and leave its transmit queues disabled. The VF raises its reset event before posting its mailbox request. The PF checks reset events before mailbox messages. If both are pending, clearing PFMBMEM during generic reset handling can erase the request before ixgbe_read_mbx() consumes it. Clear the mailbox only from the reset-message handler after the request has been read. Use the VF number for queue toggling and document that API contract. (cherry picked from commit 4b67335676b09249c8ef5ea5508655c0b5733618) M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe_api.c M sys/dev/ixgbe/ixgbe_api.h M sys/dev/ixgbe/ixgbe_common.c M sys/dev/ixgbe/ixgbe_type.h _____________________________________________________________________________________________________________ Commit: c1a574ef9a35cf277ae3ecc5238586ca7763d4f5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c1a574ef9a35cf277ae3ecc5238586ca7763d4f5 Author: Michael Adler (Thu 9 Jul 2026 18:02:37 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:40:07 BST) igc: Disable ASPM L1.2 on I226 to prevent RX stalls I226 parts advertise support for the PCIe L1.2 link substate, but a hardware erratum makes the exit latency from that low-power state longer than the packet buffer can absorb under load. This stalls the inbound packet stream. Disabling ASPM system-wide (BIOS or OS ASPM policy) does not fix it. The L1.2 enable bit must be cleared directly in the device's own PCIe L1 PM extended capability. Add igc_is_device_id_i226() to identify affected parts and igc_disable_broken_aspm_l1_2() to clear the ASPM L1.2 enable bit on attach and after resume, since PCIe config space can be reset across a suspend/resume cycle. Adapted from the Linux igc driver: 0325143b59c6 igc: disable L1.2 PCI-E link substate to avoid performance issue 1468c1f97cf3 igc: fix disabling L1.2 PCI-E link substate on I226 on init Signed-off-by: Michael Adler PR: 279245 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279245 ) Reviewed by: Jim Thompson Pull-Request: https://github.com/freebsd/freebsd-src/pull/2318 (cherry picked from commit 9d30fd353dd3eacb095ce98cb9c91ec015b9af64) M sys/dev/igc/if_igc.c M sys/dev/igc/igc_base.c M sys/dev/igc/igc_base.h _____________________________________________________________________________________________________________ Commit: 96028adb8599cdda264ff3258aadf709e3f8ff1b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=96028adb8599cdda264ff3258aadf709e3f8ff1b Author: Michael Adler (Thu 9 Jul 2026 18:00:32 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:39:55 BST) pci: Add L1 PM definitions Add register/bit definitions for the L1 PM substates capability (PCIZ_L1PM) to pcireg.h. Signed-off-by: Michael Adler Pull-Request: https://github.com/freebsd/freebsd-src/pull/2318 (cherry picked from commit 04f8a6aeeba5cbaa48be7134765ee49d5b1b9857) M sys/dev/pci/pcireg.h _____________________________________________________________________________________________________________ Commit: 198908895f18c81d4e645199b5992d6e65922c2f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=198908895f18c81d4e645199b5992d6e65922c2f Author: Kevin Bowling (Fri 31 Jul 2026 08:02:22 BST) Committer: Kevin Bowling (Sat 8 Aug 2026 01:39:45 BST) e1000: restrict conventional PCI DMA to 32 bits Some conventional PCI e1000 configurations hang when given DMA addresses above 4 GB, particularly on systems using AMD HyperTransport-to-PCI bridges. Linux has restricted e1000 to DMA32 in PCI mode since 2011 for the same failure class in commit e508be174ad36b0cf9b324cd04978c2b13c21502. Set iflib's DMA width after determining the negotiated bus type. This covers descriptor and packet-buffer mappings while preserving 64-bit DMA for PCI-X and PCIe devices and providing a conditional tunable. PR: 297064 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297064 ) Reported by: Alexander Leidinger Tested by: Alexander Leidinger (cherry picked from commit 41759495769dff87cd4ebbb257d4054128ea5b42) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: 3d064b7b158a0ecedb6021dcd1f9b6a9e43f0a2d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3d064b7b158a0ecedb6021dcd1f9b6a9e43f0a2d Author: Zhang Qiyue (Sun 12 Jul 2026 07:26:36 BST) Committer: Enji Cooper (Fri 7 Aug 2026 22:32:40 BST) libc: tests: add static to resolve -Wmissing-prototypes The function create_staticobj() is only used inside this translation unit. Clang produces a -Wmissing-prototypes warning during standard buildworld. This warning will become a fatal compile error if MK_WERROR is enabled for hardened builds. PR: 285870 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=285870 ) Fixes: ee9ce1078 ("libc: tests: add some tests for __cxa_atexit...") Signed-off-by: Zhang Qiyue Reviewed-by: ngie Pull-Request: https://github.com/freebsd/freebsd-src/pull/2321 (cherry picked from commit 64038db825d64fb4827fc8ee264ea0fa1a046d82) M lib/libc/tests/stdlib/libatexit/libatexit.cc _____________________________________________________________________________________________________________ Commit: 2e04d98688230fecce228b4d32e1bbf7da6ef508 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2e04d98688230fecce228b4d32e1bbf7da6ef508 Author: Enji Cooper (Fri 7 Aug 2026 05:58:28 BST) Committer: Enji Cooper (Fri 7 Aug 2026 20:33:55 BST) crypto/openssl: correct version numbers for pkg-config files The files were incorrectly reporting 3.5.1 instead of 3.0.21. This is a direct commit to stable/14 as stable/15 and later are on OpenSSL 3.5. PR: 297144 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297144 ) Fixes: d03be8cf ("crypto/openssl: make vendor imports easier/less error prone") M crypto/openssl/exporters/libcrypto.pc M crypto/openssl/exporters/libssl.pc M crypto/openssl/exporters/openssl.pc _____________________________________________________________________________________________________________ Commit: 51f5623874c0c2b8e5adb2e02313ac6f41229d31 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=51f5623874c0c2b8e5adb2e02313ac6f41229d31 Author: Konstantin Belousov (Sun 26 Jul 2026 22:45:07 BST) Committer: Konstantin Belousov (Fri 7 Aug 2026 16:57:08 BST) geom_zero(4): reset the uio vector on each uiomove() PR: 297062 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297062 ) (cherry picked from commit 34ca5a9e7362b0c820fe339daa2b8d06c58b6fea) M sys/geom/zero/g_zero.c _____________________________________________________________________________________________________________ Commit: daf81f32f834f8619dceca745758983ccc767866 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=daf81f32f834f8619dceca745758983ccc767866 Author: Colin Percival (Fri 7 Aug 2026 16:49:49 BST) Committer: Colin Percival (Fri 7 Aug 2026 16:53:48 BST) Revert "release: Ship firmware from kmods repo on DVD" This was a good idea, but we don't build metapackages in the kmods repo so it ends up breaking the release build. I might resurrect this change if/when the kmods repo includes the wifi-firmware-kmod metapackage. This reverts commit bda8028146694ee490543b35e3349e060936fde4. MFC after: 1 second (cherry picked from commit ca0cff79320d49d3f10bd3aa3c472fa450a5c494) M release/pkg_repos/release-dvd.conf M release/scripts/pkg-stage.sh _____________________________________________________________________________________________________________ Commit: 2d252764711bebe09970507a30dff0f7641c6e0c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2d252764711bebe09970507a30dff0f7641c6e0c Author: Dag-Erling Smørgrav (Tue 4 Aug 2026 10:55:22 BST) Committer: Dag-Erling Smørgrav (Fri 7 Aug 2026 16:49:18 BST) sys/socket.h: Fix AF_MAX AF_MAX was always intended to be one more than the greatest allocated value. Jeff broke this in 2013. Unfortunately, a bunch of people then decided to adapt to the mistake instead of correcting it. Fixes: 863c7e45628d (" - Reserve a special AF for SDP. The one we were incorrectly using before was taken by another AF.") MFC after: 3 days Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: kevans, glebius Differential Revision: https://reviews.freebsd.org/D58597 (cherry picked from commit ddd850aa7720f77b6605599655df898b16ed74cc) M lib/libifconfig/libifconfig.c M lib/libifconfig/libifconfig_internal.c M sys/kern/vfs_export.c M sys/net/route.c M sys/net/route/route_ddb.c M sys/net/route/route_helpers.c M sys/net/rtsock.c M sys/netlink/route/rt.c M sys/sys/socket.h _____________________________________________________________________________________________________________ Commit: 7d8fc2a82bfbfc3ad313ae72bfa72851c342eaf2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7d8fc2a82bfbfc3ad313ae72bfa72851c342eaf2 Author: Dag-Erling Smørgrav (Tue 28 Jul 2026 13:08:48 BST) Committer: Dag-Erling Smørgrav (Fri 7 Aug 2026 16:46:53 BST) mbuf: Parenthesize macro arguments MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. (cherry picked from commit 744cc514567d33d38986f0ff7de009f786acc180) M sys/sys/mbuf.h _____________________________________________________________________________________________________________ Commit: 30b4bdd451ad4ec2470f9a378bd62e948a85ef81 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=30b4bdd451ad4ec2470f9a378bd62e948a85ef81 Author: Mark Johnston (Fri 31 Jul 2026 14:13:26 BST) Committer: Mark Johnston (Fri 7 Aug 2026 01:40:03 BST) ppp: Reject invalid endpoint discriminator options Per RFC1717 section 5.1.3, the option length must be at least three. Processing an undersized option would trigger a large out-of-bounds write. PR: 271910 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=271910 ) Reported by: Robert Morris Reported by: Décio Brandão (0xDBJ) Reviewed by: emaste MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58554 (cherry picked from commit b9d07a4308226b683b64827e0aaed1180e0da996) M usr.sbin/ppp/lcp.c _____________________________________________________________________________________________________________ Commit: 607c41d8f869243db275a6b1bd6cc66bf58d0f36 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=607c41d8f869243db275a6b1bd6cc66bf58d0f36 Author: Mark Johnston (Mon 3 Aug 2026 16:18:25 BST) Committer: Mark Johnston (Fri 7 Aug 2026 01:40:03 BST) ppp: Avoid overflow when formatting endpoint discriminator options Each byte of the address is represented by a pair of characters, so we should be multiplying len by 2 when figuring out how much buffer space we have. Previously, a sufficiently large option could cause an overflow of the global "result" buffer. Reported by: Joshua Rogers Tested by: Décio Brandão (0xDBJ) MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58555 (cherry picked from commit e004ff15f87e6aa8f2aa13cd5600ae13457b95f1) M usr.sbin/ppp/mp.c _____________________________________________________________________________________________________________ Commit: 4abf6e721694211317eb9b7997a49ea47d7e3674 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4abf6e721694211317eb9b7997a49ea47d7e3674 Author: Colin Percival (Fri 7 Aug 2026 01:00:00 BST) Committer: Colin Percival (Fri 7 Aug 2026 01:00:00 BST) Post-14.5-branch updates Rename stable/14 to -STABLE Bump __FreeBSD_version to 1405500 Approved by: re (implicit) Sponsored by: OpenSats Initiative M sys/conf/newvers.sh M sys/sys/param.h _____________________________________________________________________________________________________________ Commit: e73fcd4c3205b61e82548aff1ba3b645ed74e5b7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e73fcd4c3205b61e82548aff1ba3b645ed74e5b7 Author: Quentin Thébault (Sun 14 Jun 2026 17:34:51 BST) Committer: Kyle Evans (Fri 7 Aug 2026 00:51:31 BST) evdev: add devnum sysctl Add a sysctl entry for the evdev device number (devnum) to allow libudev-devd to populate the corresponding device information fields (MAJOR and MINOR) when running in a jail with no input devices exposed through devfs. Signed-off-by: Quentin Thébault Reviewed by: wulf Sponsored by: Defenso (cherry picked from commit 746c374aa94b46712e6defb3ab56dd2d6ad8db64) M sys/dev/evdev/evdev.c M sys/dev/evdev/evdev_private.h _____________________________________________________________________________________________________________ Commit: 01e37e47d240db81c7daf1388c7f949ff1c78db6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=01e37e47d240db81c7daf1388c7f949ff1c78db6 Author: Kyle Evans (Sun 12 Jul 2026 15:51:05 BST) Committer: Kyle Evans (Thu 6 Aug 2026 23:53:13 BST) rockchip: fix stack overflow in rk8xx_rtc Presumably surfaced by -fstack-protector-strong, rk8xx_settime was triggering SSP when ntpd set the time on the RockPro64, at the very least. A minor oops meant that the weeks mask was getting tossed into the wrong field, and the mask was never populated. The mask is 0x7 for all three of these, thus overflowing the `data` array in settime by one byte. PR: 296719 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296719 ) Reported by: jsm, "Tenkawa" on Discord Reviewed by: mmelt (cherry picked from commit d387a43ec8e2663b2d8bc0c8cb02d3a2ff14b6e6) M sys/dev/iicbus/pmic/rockchip/rk805.c M sys/dev/iicbus/pmic/rockchip/rk808.c M sys/dev/iicbus/pmic/rockchip/rk817.c _____________________________________________________________________________________________________________ Commit: 387634c880bec9a24388529c7653b52ebea8f828 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=387634c880bec9a24388529c7653b52ebea8f828 Author: Kyle Evans (Tue 30 Jun 2026 20:12:10 BST) Committer: Kyle Evans (Thu 6 Aug 2026 23:53:07 BST) kern: syscall_thread_enter() cannot fail Attempting to handle the error gracefully can easily result in missing SIGSYS, so this was made to always succeed in 39024a89146 ("syscalls: fix missing SIGSYS for several ENOSYS errors") and returns the nosys entry on failure. Drop the pretense of returning an error and clean up a few dead error paths. Reviewed by: kib, markj (cherry picked from commit eca26803d880060555393ab89b44b967cd467a0e) M sys/kern/kern_sig.c M sys/kern/kern_syscalls.c M sys/kern/subr_syscall.c M sys/sys/sysent.h _____________________________________________________________________________________________________________ Commit: e55aa7b67cb0f7a29a0117231b8764524d1fb971 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e55aa7b67cb0f7a29a0117231b8764524d1fb971 Author: Kyle Evans (Tue 30 Jun 2026 17:51:57 BST) Committer: Kyle Evans (Thu 6 Aug 2026 23:53:01 BST) evdev: use a prometheus-safe label for ev_sysctl_tree Prometheus doesn't allow spaces, let's normalize this to what we use elsewhere for consistency. The sysctl exporter could probably do this itself, but let's decouple that from the immediate problem: matching the label between the exported data and in-tree is nice for greppability. PR: 296179 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296179 ) Reviewed by: asomers, wulf (cherry picked from commit cb8bda40695f5d402f334f48795b1ab27b72dce5) M sys/dev/evdev/evdev.c _____________________________________________________________________________________________________________ Commit: c839c1566147cc2d255aab1f7a1f8ed3f86299a8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c839c1566147cc2d255aab1f7a1f8ed3f86299a8 Author: Kyle Evans (Mon 22 Jun 2026 21:22:25 BST) Committer: Kyle Evans (Thu 6 Aug 2026 23:52:29 BST) kern: add a security knob to disable unprivileged access to kenv We sometimes store sensitive things in the kenv that get zapped, but we really shouldn't rely on that zapping to actually happen. Most unprivileged processes don't really need to read from the kernel environment in the first place, so add a knob that allows it to be disabled. Note that we consider jailed root to be unprivileged from this perspective; they have their own meta/env concepts and we should encourage users to take advantage of those for passing information to jails. Relnotes: yes (The capability to disable unpriv access exists) "Hey we should do something about that": dch Reviewed by: imp, ziaee, zlei (all slightly previous version) Differential Revision: https://reviews.freebsd.org/D57697 (cherry picked from commit 4fd518fcb2bbee4c8c41215d6993b923ef57a0e5) M bin/kenv/kenv.1 M lib/libc/sys/kenv.2 M share/man/man7/security.7 M sys/kern/kern_environment.c M sys/sys/priv.h _____________________________________________________________________________________________________________ Commit: f08af2491ffd603f571b2cd5c7f1fe0cab603a10 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f08af2491ffd603f571b2cd5c7f1fe0cab603a10 Author: Kyle Evans (Sat 20 Jun 2026 14:55:26 BST) Committer: Kyle Evans (Thu 6 Aug 2026 23:52:25 BST) adjtime(2): document that delta can be NULL The current verbiage somewhat indicates that always adjusts the time, which hasn't been true as far back as I had the energy to `git blame`. Reviewed by: imp (cherry picked from commit 8ed580b1d3811e73e25db3d8a9fd235156c65387) M lib/libc/sys/adjtime.2 _____________________________________________________________________________________________________________ Commit: 8ab54c5d7dd9e83a450c96742e4c1f229459fab2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8ab54c5d7dd9e83a450c96742e4c1f229459fab2 Author: Kyle Evans (Sat 20 Jun 2026 14:55:26 BST) Committer: Kyle Evans (Thu 6 Aug 2026 23:51:51 BST) rights(4): fix our representation of the unused bits The current format seems to be a little confusing, and the version of it for index 0 was broken by the below-referenced commit. Break our UNUSED macros out into one per unused bit to enumerate the entirety of the space and make it easier to claim an unused one. Reviewed by: oshogbo (previous version), kib, markj (cherry picked from commit 57fefbee1f959d0c65376dbdad309d01c182d710) M sys/sys/capsicum.h _____________________________________________________________________________________________________________ Commit: 2abf4ce4d799d84112402867229c7d5bb4f81a90 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2abf4ce4d799d84112402867229c7d5bb4f81a90 Author: Mathias Eggers (Tue 23 Jun 2026 21:09:24 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:30:35 BST) iostat.8: Expand -w description PR: 194781 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194781 ) MFC after: 3 days Reviewed by: ziaee Event: Halifax Hackathon 202606 (cherry picked from commit 4d299a767acce2841ded288e789a9c36620b57d7) M usr.sbin/iostat/iostat.8 _____________________________________________________________________________________________________________ Commit: 0312eb44fb32b42f1f73b7275ab4bca49ca22af7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0312eb44fb32b42f1f73b7275ab4bca49ca22af7 Author: Matteo Riondato (Wed 17 Jun 2026 15:59:01 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:30:15 BST) tcp.fastopen.client_enable: Fix documented default The default value has been 1 since June 2018, but the docs were not updated to reflect the change. MFC after: 3 days Reviewed by: ziaee Fixes: af4da5865557 (Enable TCP_FASTOPEN by default) Signed-off-by: Matteo Riondato Closes: https://github.com/freebsd/freebsd-src/pull/2285 (cherry picked from commit 0bc852cc62afcd79fc776f784623c3f2b7691d27) M share/man/man4/tcp.4 M sys/netinet/tcp_fastopen.c _____________________________________________________________________________________________________________ Commit: dcffbdf28aabf628fc7135f2239f9c8add5e6b9e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dcffbdf28aabf628fc7135f2239f9c8add5e6b9e Author: Caleb Harper (Mon 15 Jun 2026 23:51:05 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:29:15 BST) loader.efi.8: hw.uart.console is explained in uart PR: 295944 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295944 ) MFC to: 15 MFC after: 3 days (cherry picked from commit a641aa1c80f80e44cd9212b95e6584db9533712c) M stand/man/loader.efi.8 _____________________________________________________________________________________________________________ Commit: ca5648c78ef3debe3b55e47f502c052b033e0844 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ca5648c78ef3debe3b55e47f502c052b033e0844 Author: Alexander Ziaee (Fri 12 Jun 2026 16:47:54 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:29:04 BST) symlink.7: Clean up markup and tag SPDX Also unwind some parentheticals. MFC after: 3 days (cherry picked from commit e821152cc71dbd09f5bd28be86499165c553f3ae) M bin/ln/symlink.7 _____________________________________________________________________________________________________________ Commit: e2b376fdf0578f58d55e296477dd0e64a2f966e5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e2b376fdf0578f58d55e296477dd0e64a2f966e5 Author: Alexander Ziaee (Mon 8 Jun 2026 23:22:32 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:28:59 BST) mount_udf.8: Alphabetize and align options While here, remove "The following UDF specific options are available:". It is unused and does not appear to have ever been used. MFC after: 3 days (cherry picked from commit 05f132adc530cd53203b9cd09d7e1b211d2babc4) M sbin/mount_udf/mount_udf.8 _____________________________________________________________________________________________________________ Commit: 4f3662233a0c7a4ed328a008b913e87ec0421295 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4f3662233a0c7a4ed328a008b913e87ec0421295 Author: Alexander Ziaee (Fri 22 May 2026 19:09:23 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:28:49 BST) mdoc.7: Revert upstream changes to Lb/LIBRARY Since this manual describes the mdoc syntax throughout the ecosystem, I had to blend what we had before with what upstream is doing now. Thanks: adrian MFC after: 3 days (we shipped this doc in 15.0/14.4) Reviewed by: ivy, mhorne, des, adrian Discussed with: arch@ Differential Revision: https://reviews.freebsd.org/D56153 (cherry picked from commit 4e2bf6e90a65bee317e4dd379e098ba2eb5d8c0d) M contrib/mandoc/mdoc.7 _____________________________________________________________________________________________________________ Commit: de72f7644981ec7f06d333bbffb79d24281170c1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=de72f7644981ec7f06d333bbffb79d24281170c1 Author: Alexander Ziaee (Fri 15 May 2026 13:49:20 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:28:25 BST) style.mdoc: Explain why not to abuse Nm MFC after: 3 days Reviewed by: 0mp Differential Revision: https://reviews.freebsd.org/D55299 (cherry picked from commit bcd50fe5c3c6e70c710e13378999814e9df43d3c) M share/man/man5/style.mdoc.5 _____________________________________________________________________________________________________________ Commit: 96f9f950c8d8cba36ebb17fc37d3d6132b7f2ad4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=96f9f950c8d8cba36ebb17fc37d3d6132b7f2ad4 Author: Alexander Ziaee (Sun 3 May 2026 19:27:05 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:27:56 BST) ocs_fc.4: Cleanup + more consistent document description + enumerate available options in synopsis in vt.4 style + tag spdx + tweak list rendering + cleanup HARDWARE + reflow excessively long lines silencing linter warnings + fix link macros MFC after: 3 days Reported by: michaelo (hardware notes) Differential Revision: https://reviews.freebsd.org/D56753 (cherry picked from commit dd97c3d83f9a92bbeb9740ceff4c1c74c451293e) M share/man/man4/ocs_fc.4 _____________________________________________________________________________________________________________ Commit: 91be2282781d5437403b1bc96798f9e29eaad2f8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=91be2282781d5437403b1bc96798f9e29eaad2f8 Author: Alexander Ziaee (Sun 3 May 2026 18:39:27 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:27:37 BST) nvram.8: Align option list and tag SPDX MFC after: 3 days (cherry picked from commit 33fbfceeb4d9daf1145089a10ce7b25110d8840f) M usr.sbin/nvram/nvram.8 _____________________________________________________________________________________________________________ Commit: 5e144321152815f476978b70c6749ff216579e29 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5e144321152815f476978b70c6749ff216579e29 Author: Alexander Ziaee (Sun 3 May 2026 18:25:41 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:27:31 BST) ports.7/FILES: Expand and refactor into 3 tables Add make.conf, CHANGES, CONTRIBUTING.Md, UPDATING, and Tools/scripts. Refactor the FILES section of the ports reference manual into a bigger table with three sections separated by root directory. Remove preceeding article from all but "the big Kahuna", and root dirs where reasonable. MFC after: 3 days Relnotes: yes Reported by: adamw, arrowd, linimon Differential Revision: https://reviews.freebsd.org/D55441 (cherry picked from commit 28deec9b7e2b08b00160eb39de84ade6f27eb125) M share/man/man7/ports.7 _____________________________________________________________________________________________________________ Commit: b2e845c577de15e29d9a635dea839da3c1687276 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b2e845c577de15e29d9a635dea839da3c1687276 Author: Alexander Ziaee (Tue 28 Apr 2026 17:59:19 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:27:19 BST) bsdinstall: Improve auto-partition message Manually tuning ZFS for systems with <8GB ram hasn't been necessary at least since the switch to OpenZFS. We have users reporting using 1GB RAM with no manual tuning/issues. Further, the page this links to is a stale wiki page, which is causing complaints. Remove this misleading note and replace it with a similar message for UFS. While here, reword that note to be a bit clearer. PR: 287719 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287719 ) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D50971 (cherry picked from commit 5ed26c21e4ff1d478d4611abbf3dc14cc1b77244) M usr.sbin/bsdinstall/scripts/auto _____________________________________________________________________________________________________________ Commit: 30c821ac04c1facc5bfcd59c5f4effc741ab6f96 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=30c821ac04c1facc5bfcd59c5f4effc741ab6f96 Author: Alexander Ziaee (Mon 20 Apr 2026 18:21:23 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:26:48 BST) geom manuals: Clarify units The gpart manual says that sizes are specified in blocks, unless an SI unit suffix is provided. This confuses new operators because GEOM uses binary bytes, a large difference at modern storage pool sizes. Rewrite suffixes in all GEOM manuals to consistently clarify this, matching what we and the rest of the industry have been doing in other documentation. While here, use non-breaking spaces between numbers and units, unless they are already written with a hyphen. MFC after: 3 days Reviewed by: fuz Reported by: bbaovanc Differential Revision: https://reviews.freebsd.org/D56534 (cherry picked from commit 975e3605ebb15cbaf5a25c1c9d1f51aed41291d0) M lib/geom/cache/gcache.8 M lib/geom/eli/geli.8 M lib/geom/part/gpart.8 M sbin/ggate/ggatec/ggatec.8 M sbin/ggate/ggated/ggated.8 _____________________________________________________________________________________________________________ Commit: 0b35f51766877e7b8cfd5933911fbc3da620fbb4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0b35f51766877e7b8cfd5933911fbc3da620fbb4 Author: Alexander Ziaee (Fri 17 Apr 2026 16:25:01 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:26:42 BST) dtrace: Improve dmesg kernel message prefix Provide intuitive log search keywords and increased system consistency. MFC after: 2 weeks Reported by: mav Reviewed by: 0mp, dteske OpenZFS change: d45c8d648 (Improve dmesg kernel message prefix) Differential Revision: https://reviews.freebsd.org/D55765 (cherry picked from commit 49e9b3061df036a73e8bc424c026158f3f57b183) M sys/cddl/compat/opensolaris/kern/opensolaris_cmn_err.c _____________________________________________________________________________________________________________ Commit: b75965e7354435f69010e31d86509e5de0ed1159 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b75965e7354435f69010e31d86509e5de0ed1159 Author: Alexander Ziaee (Fri 17 Apr 2026 01:30:38 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:26:36 BST) ntp_adjtime.2: Increase visibility + s/ntp/ntpd/ for correctness + apropos results in document description + silence a linter warning by escaping a period with a zero-width space MFC after: 3 days (cherry picked from commit b49b3ccd40bda02f530c679f23f42ba9e0e4b2e2) M lib/libc/sys/ntp_adjtime.2 _____________________________________________________________________________________________________________ Commit: 21783b3b8a758dd3915d57b589670c0f53e5cd22 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=21783b3b8a758dd3915d57b589670c0f53e5cd22 Author: Alexander Ziaee (Tue 14 Apr 2026 14:02:53 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:26:27 BST) Bourne shell -> POSIX shell The FreeBSD shell is a POSIX compatible shell. It evolved over several decades from the Almquist shell, which was preceeded a decade before that by the Bourne shell. Most readers today have never seen a Bourne shell. If someone wants to learn to use our shell, they need to look for tutorials on the POSIX shell. Align descriptions through out the tree with this reality, consistent with it's manual and common parlance. We made a similar change to the doc tree in b4d6eb01540fe. MFC after: 3 days Reviewed by: carlavilla Differential Revision: https://reviews.freebsd.org/D56382 (cherry picked from commit dc140a9fc151f3717bce2157f49070daafa13ec0) M share/skel/dot.profile M usr.bin/apply/apply.1 M usr.bin/chpass/chpass.1 M usr.bin/fortune/datfiles/freebsd-tips M usr.bin/script/script.1 M usr.sbin/adduser/adduser.8 _____________________________________________________________________________________________________________ Commit: 9bc3d8e002b96d8afd9a5f04f5d45500244f1e1b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9bc3d8e002b96d8afd9a5f04f5d45500244f1e1b Author: Kristofer Peterson (Tue 24 Mar 2026 14:56:48 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:26:18 BST) sh: Increase default history size to POSIX mandated minimum of 128 The default history size in bin/sh is currently 100 however POSIX.1-2024 mandates that a default greater than or equal to 128 shall be used, therefore this increases the default history size in /bin/sh to 128. POSIX standards reference: https://pubs.opengroup.org/onlinepubs/9799919799/utilities/sh.html#tag_20_110_08 MFC after: 3 days Reviewed by: emaste, jilles, jlduran, ziaee Signed-off-by: Kristofer Peterson Closes: https://github.com/freebsd/freebsd-src/pull/2093 (cherry picked from commit 81b2055c49dec8884d7bb23503f1dfeac37ac95d) M bin/sh/histedit.c _____________________________________________________________________________________________________________ Commit: 4bcf7485ee125f5cf1bbaf90c3fcd44cbdc69285 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4bcf7485ee125f5cf1bbaf90c3fcd44cbdc69285 Author: Alexander Ziaee (Mon 13 Apr 2026 02:59:33 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:26:07 BST) diskinfo: Align and alphabetize options MFC after: 3 days (cherry picked from commit afe57c12e97d5c8773d829c2914f35462a7cdd0c) M usr.sbin/diskinfo/diskinfo.8 M usr.sbin/diskinfo/diskinfo.c _____________________________________________________________________________________________________________ Commit: a716cf6d56043823cebe9b5eb5d0804c8d0f7888 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a716cf6d56043823cebe9b5eb5d0804c8d0f7888 Author: Artem Bunichev (Mon 13 Apr 2026 02:15:41 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:26:02 BST) timeout.1: Document non-POSIX options MFC after: 3 days Reviewed by: Aaron Li , ziaee Differential Revision: https://reviews.freebsd.org/D56090 (cherry picked from commit b1bc748430b5ee79ae103c464dbf5ebc8802f782) M bin/timeout/timeout.1 _____________________________________________________________________________________________________________ Commit: 6758b7f9932da0f27e1ef1ef44129ea09f689110 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6758b7f9932da0f27e1ef1ef44129ea09f689110 Author: Alexander Ziaee (Fri 10 Apr 2026 16:26:29 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:25:51 BST) arcmsr.4: Improve HARDWARE introductory sentence MFC after: 3 days (cherry picked from commit ff32dbb1d14f05bf77e356ae68c82c048c88888f) M share/man/man4/arcmsr.4 _____________________________________________________________________________________________________________ Commit: 6e790449df11840d064e0f88ec3fc27698e5af1b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6e790449df11840d064e0f88ec3fc27698e5af1b Author: Alexander Ziaee (Thu 2 Apr 2026 04:20:45 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:25:38 BST) mfiutil.8: Fix typo - missing macro for dev node MFC after: 3 days (cherry picked from commit 2bcdab574598e729273f7ddc7d898ffdb43b63b9) M usr.sbin/mfiutil/mfiutil.8 _____________________________________________________________________________________________________________ Commit: 37bd9f15e37ed608fd910dfce4b0755cee49d2f2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=37bd9f15e37ed608fd910dfce4b0755cee49d2f2 Author: Christos Longros (Tue 31 Mar 2026 03:24:16 BST) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:25:14 BST) vmgenc.4: Add VM Generation ID Counter manual Document the vmgenc(4) ACPI driver which detects virtual machine cloning and snapshot restoration via the VM Generation ID specification. The driver reseeds the kernel entropy pool when a generation change is detected. MFC after: 3 days Reviewed by: cem (previous), ziaee Signed-off-by: Christos Longros Differential Revision: https://reviews.freebsd.org/D56011 (cherry picked from commit 59cb18f35617d3a53f7d7e142b4f91ad7951f5e0) M share/man/man4/Makefile A share/man/man4/vmgenc.4 _____________________________________________________________________________________________________________ Commit: 3c0afd5bea93a77a63632d3858896160932e7013 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3c0afd5bea93a77a63632d3858896160932e7013 Author: Matt Delco (Thu 26 Mar 2026 17:30:31 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:25:08 BST) x86: Handle when MPERF/APERF MSRs aren't writable For performance and/or correct reasons some hypervisors allow MPERF/APERF MSRs to be read but not written to. This change modifies the handling of these MSRs to not rely on writes. This patch is part of Google Cloud Engine (GCE) C4-LSSD turnup. Sponsored by: Google Tested by: NetApp (previous) PR: 292808 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292808 ) MFC after: 3 days Co-authored-by: Jim Mattson Reviewed by: jrtc27, imp, kib, markj, olce, obiwac Differential Revision: https://reviews.freebsd.org/D55996 (cherry picked from commit 7e7d4e711ff94d114c93fd522d4125aa9bd9f5cd) M sys/x86/x86/cpu_machdep.c M sys/x86/x86/tsc.c _____________________________________________________________________________________________________________ Commit: 7a068100b4b57ef1db4cec7f3c35e5311617bb85 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7a068100b4b57ef1db4cec7f3c35e5311617bb85 Author: Matt Delco (Thu 26 Mar 2026 17:22:54 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:25:02 BST) x86: Guard clock frequency against a divide by 0 We may be running in a Virtual Machine which may not fully support hardware performance counters. If the MPERF counter somehow ends up at zero, return an error and fail gracefully instead of panicking. This patch is part of Google Cloud Engine (GCE) C4-LSSD turnup. Sponsored by: Google Tested by: NetApp (previous) PR: 292808 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292808 ) MFC after: 3 days Co-authored-by: Aymeric Wibo Co-authored-by: Jim Mattson Suggested by: jrtc27 (split out this part) Reviewed by: imp, obiwac, olce Differential Revision: https://reviews.freebsd.org/D56056 (cherry picked from commit c505fc1468849150f48484b225b6476d8316de57) M sys/x86/x86/cpu_machdep.c _____________________________________________________________________________________________________________ Commit: a1479a37fcf8d66fa0de5076449f64d6297d1e1f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a1479a37fcf8d66fa0de5076449f64d6297d1e1f Author: Alexander Ziaee (Fri 20 Mar 2026 14:42:33 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:24:37 BST) dwcotg.4: Initial manual page Create visibility in apropos and the Hardware Release Notes. MFC after: 3 days Relnotes: yes Reviewed by: pauamma, ray Differential Revision: https://reviews.freebsd.org/D53287 (cherry picked from commit 8475cd93fb6db65a02afe435f16306bc18e96ec9) M share/man/man4/man4.arm/Makefile A share/man/man4/man4.arm/dwcotg.4 _____________________________________________________________________________________________________________ Commit: b8d1a7e375910f6d46d0727b8132a48b6f9c59b2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b8d1a7e375910f6d46d0727b8132a48b6f9c59b2 Author: Alexander Ziaee (Mon 9 Mar 2026 16:34:00 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:24:16 BST) igc.4: Describe better MFC after: 3 days (cherry picked from commit 6560ee97e8f51d5147521319dfd9d1e7afe74d34) M share/man/man4/igc.4 _____________________________________________________________________________________________________________ Commit: f31df6513b17e0a22757aedcbdc2b2a515d46f43 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f31df6513b17e0a22757aedcbdc2b2a515d46f43 Author: Alexander Ziaee (Fri 6 Mar 2026 23:44:50 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:23:57 BST) ports.7: Document DEFAULT_VERSIONS MFC after: 3 days Co-authored-by: Adam Weinberger Differential Revision: https://reviews.freebsd.org/D55443 (cherry picked from commit 74aec9f02d9d8fbde250da1ecc881729c8baf489) M share/man/man7/ports.7 _____________________________________________________________________________________________________________ Commit: e7cdcb52c32715dfe83cc20d2585c0b347348932 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e7cdcb52c32715dfe83cc20d2585c0b347348932 Author: Alexander Ziaee (Mon 2 Mar 2026 10:41:07 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:23:49 BST) style.mdoc: Left angle bracket is not less-than MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55300 (cherry picked from commit 06ac71cffba4a0f86334844453d0a6fb3c46aa12) M share/man/man5/style.mdoc.5 _____________________________________________________________________________________________________________ Commit: e5c5e7db7ebdf67355f26b561e1e2902d5e6cc5e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e5c5e7db7ebdf67355f26b561e1e2902d5e6cc5e Author: Alexander Ziaee (Mon 2 Mar 2026 10:24:11 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:23:42 BST) style.mdoc: Remove synopsis formatting advice Remove incorrect advice. The first rule was no spaces padding pipes when showing alternates. Almost universally we not do this, and third party manuals do not either. The second was using Cm to mark up symbols. This advice is in conflict with mdoc(7), and the extended documentation on mdoc linked below, which is also linked at the bottom of mdoc(7). Conflicting information in our docs is a natural result of documentation proliferation. The most important thing we can do to reduce technical debt in the documentation is reduce the amount of doc overlap. Excessive technical debt and conflicting rules is a barrier to new contributors. This type of work requires thorough expertise, is not glamorous at all, and to add insult to injury, is socially unsafe. To get new contributors to the docs project, we must deduplicate documentation. We have the mdoc manual, examples/mdoc, style.mdoc, and the fdp chapter on manual pages. With this many, they will inevitably come to contain conflicting information, and people will learn not to read them or work on them. MFC after: 3 days Ref: https://mandoc.bsd.lv/mdoc/style/commands.html Differential Revision: https://reviews.freebsd.org/D55298 (cherry picked from commit 47326cb470278e891975354286481b5ba876929a) M share/man/man5/style.mdoc.5 _____________________________________________________________________________________________________________ Commit: 612a0fd7cddec87a4bb83a0327026b9e6b04d2b7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=612a0fd7cddec87a4bb83a0327026b9e6b04d2b7 Author: Alexander Ziaee (Mon 2 Mar 2026 10:20:01 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:23:36 BST) style.mdoc: Li macro is undeprecated for some time Previously, the mdoc linter warned against using Li as it was deprecated upstream. However, upstream undeprecated it since last year. As usual when it comes to style, the best thing to do is to follow the existing style of the page. We have many manuals which prefer double quotes. MFC after: 3 days Citation: https://cvsweb.bsd.lv/mandoc/mdoc.7?rev=1.297 Differential Revision: https://reviews.freebsd.org/D55297 (cherry picked from commit fae551b76785d2357b09e2c022a92f410d871b9b) M share/man/man5/style.mdoc.5 _____________________________________________________________________________________________________________ Commit: b8f42658ddd2984846a538c0e2a79f5971bb50b1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b8f42658ddd2984846a538c0e2a79f5971bb50b1 Author: Alexander Ziaee (Thu 26 Feb 2026 07:07:09 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:23:29 BST) style.mdoc: Add example manuals to FILES This is the OG meat and potatoes. MFC after: 3 days Reviewed by: 0mp, carlavilla Differential Revision: https://reviews.freebsd.org/D55301 (cherry picked from commit 2abdbe9d796419e8149705ffb4c81f0c0cdea05f) M share/man/man5/style.mdoc.5 _____________________________________________________________________________________________________________ Commit: de899a4efc620ea044fce14c3ed9379d21df4e66 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=de899a4efc620ea044fce14c3ed9379d21df4e66 Author: Alexander Ziaee (Sun 22 Feb 2026 02:51:13 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:22:06 BST) ports.7: Add port files to FILES Add terse descriptions for the individual files that make up a port to the FILES section of the ports reference manual. MFC after: 3 days Reviewed by: adamw Differential Revision: https://reviews.freebsd.org/D55404 (cherry picked from commit 451f593194cbea74bcae53b4b8e6e55f6b2ec12d) M share/man/man7/ports.7 _____________________________________________________________________________________________________________ Commit: bad1b88e0978c0929939a465e6b220d7cccb5795 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bad1b88e0978c0929939a465e6b220d7cccb5795 Author: Alexander Ziaee (Tue 17 Feb 2026 17:22:26 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:21:49 BST) trimdomain.3: Explain DISPLAY a bit more MFC after: 3 days Reported by: jrtc27 Reviewed by: des Differential Revision: https://reviews.freebsd.org/D54629 (cherry picked from commit 960719762f0a1f6689ec58bc6d8ce21c4daa9096) M lib/libutil/trimdomain.3 _____________________________________________________________________________________________________________ Commit: 3e05b2366af1fa56907390d540a97e29f0f191dd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e05b2366af1fa56907390d540a97e29f0f191dd Author: Rick Parrish (Sun 15 Feb 2026 17:45:21 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:21:32 BST) libusb20: Add dev_open + be_device_foreach manuals Manual pages for libusb20_open(3) and libusb20_be_device_foreach(3). PR: 291675 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291675 ) Relnotes: yes MFC after: 3 days Reviewed by: adrian (usb), ziaee (manpages) Differential Revision: https://reviews.freebsd.org/D54231 (cherry picked from commit caf23c8e0b7981dd022c52feaf6edfef232f7e27) M lib/libusb/Makefile A lib/libusb/libusb20_be_device_foreach.3 A lib/libusb/libusb20_dev_open.3 _____________________________________________________________________________________________________________ Commit: d2d03e485bd2a50881188eee249145d86993b75a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d2d03e485bd2a50881188eee249145d86993b75a Author: Alexander Ziaee (Sat 7 Feb 2026 21:54:59 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:20:24 BST) accf_*.9: Rewrite broken synopsis These manuals abused the name macro for every line of kernel cfg as well as an example command to show the module name which was mixed in without separation. This bugs the whatis database into thinking that `INET` and `kldload` are names for this page, and violates best practice by mixing commands and configuration in a continuous example. Rewrite to use the kernel configuration macro, Cd, and show the module name via an example configuration in rc.conf, according to the spec and established practice. Do not bump the date because these markup errors are not a content change. MFC after: 3 days (cherry picked from commit c59f12da11d75502b16f9163edc76514007462db) M share/man/man9/accf_data.9 M share/man/man9/accf_dns.9 M share/man/man9/accf_http.9 M share/man/man9/accf_tls.9 _____________________________________________________________________________________________________________ Commit: 606e70b7af7e7f9924c1e002eb3ed4e0df94ec27 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=606e70b7af7e7f9924c1e002eb3ed4e0df94ec27 Author: Minsoo Choo (Tue 6 Jan 2026 18:11:11 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:18:01 BST) Makefile: Update doxygen requirements MFC after: 3 days Reviewed by: imp, ziaee Signed-off-by: Minsoo Choo Closes: https://github.com/freebsd/freebsd-src/pull/1869 (cherry picked from commit d2f1c8e0d1bebab9fba32d69d261abc101f368ba) M Makefile M Makefile.inc1 _____________________________________________________________________________________________________________ Commit: 9f7f30b8df12bc36c8260f5de52862039d897f03 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9f7f30b8df12bc36c8260f5de52862039d897f03 Author: Alexander Ziaee (Thu 1 Jan 2026 17:53:31 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:17:27 BST) periodic/801.trim-zfs: Fix daily-trim-zfs-flags This variable was named incorrectly, resulting in any specified flags being silently ignored. PR: 292074 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292074 ) MFC after: 3 days Reported by: CrazyMihey@Ya.Ru Fixes: 493908c4b45c (Add a daily zfs trim script) (cherry picked from commit 68d6abd9714384a41028dc0d5086b4930366bbea) M usr.sbin/periodic/etc/daily/801.trim-zfs _____________________________________________________________________________________________________________ Commit: 01c8bd31ff3b9518e32d9f27429d5cff6648af01 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=01c8bd31ff3b9518e32d9f27429d5cff6648af01 Author: Artem Bunichev (Tue 16 Dec 2025 17:42:46 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:17:12 BST) libpathconv: Document library in the man pages Reviewed by: ziaee, imp Differential Revision: https://reviews.freebsd.org/D54213 (cherry picked from commit 2c75ac14d7e9d1d57d70bbf26716868607f0d1fe) M lib/libpathconv/abs2rel.3 M lib/libpathconv/rel2abs.3 _____________________________________________________________________________________________________________ Commit: 0209906f101587346bd1dce1383d741123ce8b45 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0209906f101587346bd1dce1383d741123ce8b45 Author: Pau Amma (Thu 4 Dec 2025 03:28:17 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:16:27 BST) vidcontrol.1: Video buffer dump is syscons only Fixes: 1f4442f71fa3 (be explicit that -p and -P are sc(4) only) MFC after: 3 days Reviewed by: ziaee Differential Revision: https://reviews.freebsd.org/D53878 (cherry picked from commit 9ec8196f68bac015965164f7f1a65c619bab4e85) M usr.sbin/vidcontrol/vidcontrol.1 _____________________________________________________________________________________________________________ Commit: 3e79e506ae80c3f6b2c3008c2f174107014d4b72 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e79e506ae80c3f6b2c3008c2f174107014d4b72 Author: Alexander Ziaee (Thu 13 Nov 2025 21:13:45 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:15:42 BST) hgame.4: Polish Explain driver loading and application access in the body of the manual. Crossreference other game controller driver manuals, and devfs.rules to hint about how to configure application access. Add a common dongle to supported hardware. Add evdev a few places to make it really clear how it works. MFC after: immediately for inclusion in 15.0R Reviewed by: wulf Differential Revision: https://reviews.freebsd.org/D53290 (cherry picked from commit c0c8d812b560a3e89656c026022a44631f88e233) M share/man/man4/hgame.4 _____________________________________________________________________________________________________________ Commit: cf16565eb92924e213fae3fa393ef8b7cb1c3dd7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cf16565eb92924e213fae3fa393ef8b7cb1c3dd7 Author: Alexander Ziaee (Fri 7 Nov 2025 18:38:54 GMT) Committer: Alexander Ziaee (Thu 6 Aug 2026 23:15:03 BST) jail.8: Add creating a jail from distribution set PR: 200803 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200803 ) MFC after: 3 days Reviewed by: jamie Differential Revision: https://reviews.freebsd.org/D53631 (cherry picked from commit d59903481dbaef9ef7e91ea4945d2355ae17c53a) M usr.sbin/jail/jail.8 _____________________________________________________________________________________________________________ Commit: bdea6e971844ac2e0a3dfab47fc6e678a11e5d19 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bdea6e971844ac2e0a3dfab47fc6e678a11e5d19 Author: Rick Macklem (Tue 4 Aug 2026 16:55:24 BST) Committer: Rick Macklem (Thu 6 Aug 2026 20:52:36 BST) nfs_commonkrpc.c: Get rid of NFSv4.0 delegation cruft Delegations in NFSv4.0 never worked well and, since the NFSv4.0 protocol is now deprecated, use of delegations for NFSv4.0 is disabled as far as the client can do so. It turns out that some Illumos NFSv4.0 server issues delegations anyhow (even when the callback path is specified as 0.0.0.0) and this can cause use after free problems. This patch deleted some cruft that did an nfsrpc_openrpc() call recursively when an NFSv4.0 server failed to issue a delegation when it had previously done so. This code was only meant to be an optimization and would have been rarely exercised. Since this recursive call of nfsrpc_openrpc() is in some of the backtraces in the bugzilla PR, getting rid of the cruft makes sense. It is not known if this helps w.r.t. the use after free problems at this time. PR: 297233 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297233 ) (cherry picked from commit 8f20299b473af6132e0f146d7f634640993aeb81) M sys/fs/nfsclient/nfs_clrpcops.c _____________________________________________________________________________________________________________ Commit: ca0dcfd1a8ecbd7f4f99b06adcb5d67c8742679c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ca0dcfd1a8ecbd7f4f99b06adcb5d67c8742679c Author: Rick Macklem (Tue 4 Aug 2026 00:57:38 BST) Committer: Rick Macklem (Thu 6 Aug 2026 20:51:27 BST) nfs_commonkrpc.c: Fix recovery that was broken by 4d80d4913e79 Commit 4d80d4913e79 added a check for nfsess_defunct already being set. This was incorrect because, once set, nfsess_defunct remains set and an additional recovery might be needed. This patch reverts this part of 4d80d4913e79. PR: 297252 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297252 ) (cherry picked from commit 5ab48fb9f7ac43fb1242a678312a02df5d4d5b53) M sys/fs/nfs/nfs_commonkrpc.c _____________________________________________________________________________________________________________ Commit: f93ab585852341bd5b8635cab1df7020eb677bd8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f93ab585852341bd5b8635cab1df7020eb677bd8 Author: Jessica Clarke (Wed 29 Jul 2026 15:09:42 BST) Committer: Jessica Clarke (Thu 6 Aug 2026 19:04:28 BST) link_elf: Make phdrs first page check actually fatal Otherwise we'll print an error but carry on regardless, presumably destined to walk off the end of the mapping. Reported by: thebugfixers@pm.me MFC after: 1 week (cherry picked from commit 1e39a314d870e312f623199e146eda6bdbc293a3) M sys/kern/link_elf.c _____________________________________________________________________________________________________________ Commit: 1f62c6f0fc4a46b028d26765b632da9c4ac651a9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1f62c6f0fc4a46b028d26765b632da9c4ac651a9 Author: Jessica Clarke (Tue 28 Jul 2026 12:54:04 BST) Committer: Jessica Clarke (Thu 6 Aug 2026 19:04:28 BST) Merge commit 6b0a46958c56 from llvm-project (by Piotr Kubaj): [libunwind][PPC64] Fix unw_getcontext corrupting callee-saved VSX registers on LE (#198371) This is the first of two independent fixes for libunwind on ppc64le (ELFv2 ABI, little-endian), where two separate bugs together cause SIGSEGV during backtracing. This commit addresses the VSX register corruption; the TOC-restore fault is handled in a follow-up. Both were discovered while debugging lang/rust build failures with RUST_BACKTRACE=1 on FreeBSD/powerpc64le (IBM POWER9). On ppc64le, `unw_getcontext` saves each VS register with an in-place `xxswapd n, n` followed by `stxvd2x`. The swap is needed because `stxvd2x` stores doublewords in the wrong order on LE. However, the macro never applies a second `xxswapd` to restore the register after the store, so all 64 VS registers are permanently corrupted on return from `unw_getcontext`. This affects every callee-saved VSX register: f14-f31 (VSR14-VSR31) and VR20-VR31 (VSR52-VSR63). After `_Unwind_Backtrace` returns, any code that uses these registers sees wrong values. In practice this manifests as SIGSEGV inside hashbrown's `reserve_rehash`: VR20-VR31 are corrupted before a SIMD comparison loop runs, producing an out-of-bounds access. Fix: add a second `xxswapd n, n` after the `stxvd2x` store. Since `xxswapd` is its own inverse, the pair is a no-op on the architectural register while still writing the correctly byte-swapped value to memory. MFC after: 1 week (cherry picked from commit 70509d1d9cba254dfd5b3dd83d8a011b5e125788) M contrib/llvm-project/libunwind/src/UnwindRegistersSave.S _____________________________________________________________________________________________________________ Commit: aa3b76871e9644c86b5dc16c3a42215447a29853 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=aa3b76871e9644c86b5dc16c3a42215447a29853 Author: Jessica Clarke (Mon 27 Jul 2026 17:54:04 BST) Committer: Jessica Clarke (Thu 6 Aug 2026 19:04:27 BST) Merge commit 26bf39cdba0b from llvm-project (by Jessica Clarke): [ELF][PowerPC] Don't assume TOC pointer is valid in IPLT entries (#207555) Unlike normal PLT entries, IPLT entries can be called indirectly even when in PIEs/DSOs, and so there's no guarantee on what's in the TOC pointer register at that time. Therefore we must emit variants of the existing code that work without it, whether r12-relative (playing the same role as MIPS's $25) in the same number of instructions, or first retrieving PC in an i386-like manner, being careful not to clobber LR. On 32-bit PowerPC even direct calls to IPLT entries face the same issue, since we'd use the TOC base of the resolver, which may not be the same as the caller, even within the same object. Normal canonical PLTs still look broken on 64-bit PowerPC as they use the TOC pointer register too, and similarly on 32-bit PowerPC for PIEs. We should probably treat these cases the same as PIE on i386 (except including PDEs for 64-bit PowerPC), where it's an error due to the use of %ebx in PLT entries. Bump LLD_FREEBSD_VERSION for this fix as otherwise an existing system linker will be deemed new enough to use and produce broken kernels for TARGET=powerpc (regardless of TARGET_ARCH/MACHINE/MACHINE_ARCH) builds. PR: 294369 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294369 ) MFC after: 1 week (cherry picked from commit b68f2fe1932cbc9809245e2c5a2db2bc0944cc5d) M contrib/llvm-project/lld/ELF/Arch/PPC.cpp M contrib/llvm-project/lld/ELF/Arch/PPC64.cpp M contrib/llvm-project/lld/ELF/Thunks.cpp M contrib/llvm-project/lld/ELF/Thunks.h M lib/clang/include/lld/Common/Version.inc _____________________________________________________________________________________________________________ Commit: f89b8493d7b2f8b4f98273669e607fbeecb73f50 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f89b8493d7b2f8b4f98273669e607fbeecb73f50 Author: Jessica Clarke (Mon 27 Jul 2026 17:53:53 BST) Committer: Jessica Clarke (Thu 6 Aug 2026 19:04:11 BST) Merge commit cbf48349e3e1 from llvm-project (by Jessica Clarke): [NFC][ELF][PPC64] Pass address not offset to writePPC64LoadAndBranch (#212275) Every caller currently subtracts the TOC base in its argument, so move that into common code inside writePPC64LoadAndBranch. This will also allow a different computation to be used in some cases in a future commit. Note that offset is now unsigned not signed; even previously, all arguments were uint64_t, and all uses are unsigned, so making it signed doesn't make much sense. MFC after: 1 week (cherry picked from commit bcbcd7303009344dc1051e4601284620bca29be8) M contrib/llvm-project/lld/ELF/Arch/PPC64.cpp M contrib/llvm-project/lld/ELF/Thunks.cpp M contrib/llvm-project/lld/ELF/Thunks.h _____________________________________________________________________________________________________________ Commit: 2705320b7c820f77ca1f6afabadbb5d3ef9a1e90 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2705320b7c820f77ca1f6afabadbb5d3ef9a1e90 Author: Jessica Clarke (Mon 6 Jul 2026 17:25:48 BST) Committer: Jessica Clarke (Thu 6 Aug 2026 19:03:48 BST) libllvmminimal: Fix building with LLVM < 21 on riscv64 On most architectures we end up not needing ABIBreak.cpp as, although some of the sources here do reference EnableABIBreakingChecks (or, if assertions are disabled, DisableABIBreakingChecks) at a source level, we compile with -ffunction-sections and -fdata-sections, and link with --gc-sections, and it happens to be the case that all references can be GC'ed. However, prior to LLVM 21, the RISC-V backend did not apply -fdata-sections to .sdata, where references to these symbols end up, and for some files we're building with such references we end up not being able to GC .sdata due to the other unrelated data in it, meaning that we do in fact need to build ABIBreak.cpp. Whilst we could make this conditional on the architecture, it's a tiny file, and it's a bit fragile to rely on GC behaviour, so just include it unconditionally. Reviewed by: dim, emaste Fixes: 770cf0a5f02d ("Fixups after llvm-project main llvmorg-21-init-19288-gface93e724f4 merge") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D58044 (cherry picked from commit 7a0b9e30a5ba07066caffba51fa82ca3782a5da1) M lib/clang/libllvmminimal/Makefile _____________________________________________________________________________________________________________ Commit: 6454c6e825902039c8083626ef728d2deea7992f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6454c6e825902039c8083626ef728d2deea7992f Author: Jessica Clarke (Fri 1 May 2026 17:55:28 BST) Committer: Jessica Clarke (Thu 6 Aug 2026 19:03:48 BST) lib/clang: Fix bootstrapping on macOS after LLVM 21 merge Fixes: 770cf0a5f02d ("Fixups after llvm-project main llvmorg-21-init-19288-gface93e724f4 merge") MFC after: 1 month (cherry picked from commit 50bd6ee0cce9d3959828b0267b06ea0403781f41) M lib/clang/include/llvm/Config/config.h _____________________________________________________________________________________________________________ Commit: 1b8d19dea4624cba3c96fb4fdcf05f681562ee0b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1b8d19dea4624cba3c96fb4fdcf05f681562ee0b Author: Michael Tuexen (Thu 6 Aug 2026 15:54:45 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 15:54:45 BST) Revert "loopback: improve checksum offloading" This reverts commit d6c4cea7740d5c5c673a06ba37e4f1bdcddb2ece. It is done because this change interferes with the ipfilter NAT functionality. So Back it out until ipfilter has been fixed. M share/man/man4/lo.4 M sys/net/if_loop.c _____________________________________________________________________________________________________________ Commit: 74f75000499001ea7e8e8261b56f2b0538e2125c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=74f75000499001ea7e8e8261b56f2b0538e2125c Author: Bjoern A. Zeeb (Sat 18 Apr 2026 14:25:18 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:59:01 BST) sctp: initialize inp to avoid uninitialized use If we take an early goto out_unlocked inp is uninitialized and then may be used in SCTP_LTRACE_ERR_RET(). Initialize inp to NULL to avoid warnings. Found with: gcc15 tinderbox build Reviewed by: tuexen, pouria Differential Revision: https://reviews.freebsd.org/D56503 (cherry picked from commit 4cdbcc2b6a2e551529f7133665ef406869b48bf7) M sys/netinet/sctp_output.c _____________________________________________________________________________________________________________ Commit: 1c62c8bac5ae5ede9b65d32b08e10ae05aa955ac URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1c62c8bac5ae5ede9b65d32b08e10ae05aa955ac Author: Michael Tuexen (Mon 3 Aug 2026 12:07:32 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:56:07 BST) tcp: improve SEG.SEQ validation for RST segments A RST segment can be sent in response to (a) received segment or (b) by the upper layer protocol. The SEG.SEQ validation consists of two checks: (1) the in-window check of SEG.SEQ and (2) the exact match check of SEG.SEQ. For the in-window check (1), the left edge of the window needs to be based on tp->last_ack_sent to cover the delayed ACK case, whereas the right edge needs to be based on tp->rcv_nxt + tp->rcv_wnd. This both assumes that tp->rcv_wnd is not zero. For the special case of tp->rcv_wnd being zero, add checks against tp->last_ack_sent for (a) and on tp->rcv_nxt for (b). This applies to all TCP stacks. When the exact match (2) of SEG.SEQ is performed, it should be based on tp->last_ack_sent for (a) and on tp->rcv_nxt for (b). To cover both, check for both. Add this only to the base stack, since the RACK and BBR stacks already do this. PR: 296594 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296594 ) Reviewed by: rscheff Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D58594 (cherry picked from commit c9df1a6cf9be9d44eacc8616ebba1cd19010c7fc) M sys/netinet/tcp_input.c M sys/netinet/tcp_stacks/rack_bbr_common.c _____________________________________________________________________________________________________________ Commit: 85485a570d4f9c5f9d9b867ee847b8ee5f7d2445 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=85485a570d4f9c5f9d9b867ee847b8ee5f7d2445 Author: Michael Tuexen (Tue 28 Jul 2026 21:15:22 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:55:09 BST) tcp: improve handling of stopped timers When a TCP timer is stopped, t_timers[] is set to SBT_MAX. Adding the corresponding t_precisions[], if it is not zero, would result in overflows in tcp_timer_next(). To avoid this, skip stopped timers. The problem was identified while debugging uperf by Lukas Book and an initial patch was provided by him. The committed patch was suggested by glebius. The problem can be observed by running netstat -nxptcp and looking for negative timer values and by observing very long running timers in some cases. Reported by: Lukas Book Reviewed by: glebius Differential Revision: https://reviews.freebsd.org/D58484 (cherry picked from commit 52b7cbcb78c14e89f6faec8da5acc2caa3d37208) M sys/netinet/tcp_timer.c _____________________________________________________________________________________________________________ Commit: 0ef3c91623307f04102e45bcff932388bb0f4ed1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0ef3c91623307f04102e45bcff932388bb0f4ed1 Author: Michael Tuexen (Wed 1 Jul 2026 17:07:04 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:52:32 BST) tests: fix checksum computation This fixes an endianness bug in sys/netinet/ip_reass_test. Just use the code from RFC 1071. Reported by: glebius Reviewed by: glebius, Timo Völker Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D57988 (cherry picked from commit fbc039e512c3bb1635ad20cc8f70ad608ea818b7) M tests/sys/netinet/ip_reass_test.c _____________________________________________________________________________________________________________ Commit: 9a1511e23f79bd779a6643cab079f8407d4cfee1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9a1511e23f79bd779a6643cab079f8407d4cfee1 Author: Timo Völker (Mon 29 Jun 2026 21:03:46 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:47:02 BST) loopback: use new names for checksum offloading flags No functional change intended. Reviewed by: tuexen Differential Revision: https://reviews.freebsd.org/D57945 (cherry picked from commit bcf4e3c001f5ec9cc206b0d81f0954559d1424d8) M sys/net/if_loop.c _____________________________________________________________________________________________________________ Commit: 1cd388ddf0d3ab5190bce65a3adaffcb8d2b07f7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1cd388ddf0d3ab5190bce65a3adaffcb8d2b07f7 Author: Jana Smith (Sun 28 Jun 2026 12:04:05 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:46:14 BST) rack_bbr_common: don't use stale pointer after m_pullup() Reviewed by: tuexen Differential Revision: https://reviews.freebsd.org/D57816 (cherry picked from commit be23edc1e4028e32a46e8fe7118de787fd5d79a2) M sys/netinet/tcp_stacks/rack_bbr_common.c _____________________________________________________________________________________________________________ Commit: fd3582e683d6cf97c59dcd898ece47a5497d5995 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fd3582e683d6cf97c59dcd898ece47a5497d5995 Author: Timo Völker (Sun 28 Jun 2026 11:50:15 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:45:51 BST) loopback: improve checksum offloading * Allow disabling IFCAP_RXCSUM_IPV6 or IFCAP_TXCSUM_IPV6. * Do not pretend the checksum is correct by setting the LO_CSUM_SET flags if IFCAP_RXCSUM_IPV6 or IFCAP_RXCSUM is enabled. Instead, remove the LO_CSUM_SET flags (in case they have been set somehow) if IFCAP_RXCSUM_IPV6 or IFCAP_RXCSUM is disabled. * Do not unset the transmit checksum offload flags LO_CSUM_FEATURES or LO_CSUM_FEATURES6 since they now have a meaning for the receive path. Reviewed by: glebius, pouria, tuexen Okayed by: bz Differential Revision: https://reviews.freebsd.org/D57518 (cherry picked from commit d6c4cea7740d5c5c673a06ba37e4f1bdcddb2ece) M share/man/man4/lo.4 M sys/net/if_loop.c _____________________________________________________________________________________________________________ Commit: 976f400a7e5284e36a62c253647d519728b1241f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=976f400a7e5284e36a62c253647d519728b1241f Author: Kevin Bowling (Wed 29 Jul 2026 05:23:30 BST) Committer: Kevin Bowling (Thu 6 Aug 2026 08:40:48 BST) igb: Stop writing the legacy TADV register TADV is an em-class interrupt delay register and is absent from the 82575 and later register model. The igb attach path does not expose or initialize that control, but transmit initialization still wrote its zero valued storage into a reserved queue-window offset. Apply the same igb_mac_min boundary already used for TIDV and the absolute-delay sysctls. Sponsored by: BBOX.io (cherry picked from commit c637d474045a41b1763c17a8b4b7763d4159504f) M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 8ef5d8b48862dbee2728361aa2a71cc8fdb81f7d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8ef5d8b48862dbee2728361aa2a71cc8fdb81f7d Author: Kevin Bowling (Thu 30 Jul 2026 05:37:08 BST) Committer: Kevin Bowling (Thu 6 Aug 2026 08:40:33 BST) igb: Reprogram descriptor queues while disabled Disable each igb-class transmit and receive queue and flush before changing its descriptor-ring registers. Restore the head and tail indices that Intel documents as surviving a VF reset. Use the igb queue-enable control instead of programming legacy TXDCTL granularity, low-water, and reserved bits that do not belong to the 82575 and later. Sponsored by: BBOX.io (cherry picked from commit f879d1cd7df3c5afa69428cc2b07e1675d7776c9) M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: c4109200f17e8fd41031eec64ae63f2bb2ee4192 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c4109200f17e8fd41031eec64ae63f2bb2ee4192 Author: Kevin Bowling (Wed 29 Jul 2026 03:57:46 BST) Committer: Kevin Bowling (Thu 6 Aug 2026 08:39:29 BST) igb: Correct I350 loopback VLAN byte order I350 loopback receive descriptors report VLAN tags byte-swapped for both PFs and VFs. The receive path handled the PF device types but omitted e1000_vfadapt_i350, causing an admitted VF VLAN packet to be delivered untagged to the VF parent. Include the I350 VF type in the existing correction. This matches the dedicated IGB_RXQ_FLAG_LB_BSWAP_VLAN handling in DPDK igbvf. Sponsored by: BBOX.io (cherry picked from commit 7eb7ff6459219e802d51add3ba9d1d9d874db561) M sys/dev/e1000/igb_txrx.c _____________________________________________________________________________________________________________ Commit: 799f8ebd69fd0af7c38cf3729eaab50a54821529 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=799f8ebd69fd0af7c38cf3729eaab50a54821529 Author: Kevin Bowling (Wed 29 Jul 2026 00:30:28 BST) Committer: Kevin Bowling (Thu 6 Aug 2026 08:39:10 BST) pci_iov: Clear NumVFs when configuration fails pci_iov_config() programs NumVFs before validating the final VF RID layout and allocating all generic resources. A subsequent error ran the driver uninit callback but left the hardware NumVFs register programmed while the software VF count returned to zero. Clear NumVFs in the error path after the driver uninit callback, matching normal SR-IOV teardown ordering. This prevents stale hardware state after a failed configuration and permits a clean retry. Sponsored by: BBOX.io (cherry picked from commit 621498b58cdab36a237d5f0b5c902952ad743fa9) M sys/dev/pci/pci_iov.c _____________________________________________________________________________________________________________ Commit: b1afe190d7668d7c89eb6c350d03692a9b241088 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b1afe190d7668d7c89eb6c350d03692a9b241088 Author: Timo Völker (Sun 28 Jun 2026 11:39:10 BST) Committer: Michael Tuexen (Thu 6 Aug 2026 06:09:02 BST) virtio_pci_modern: Remove endianness conversion for config space The bus_* functions already handle converting from PCI endianness (i.e. little-endian) to native endianness when accessing the config space (see ofw_pcib_bus_get_bus_tag), so converting again with virtio_htogX/virtio_gtohX undoes any byte-swapping and breaks big-endian systems. They should only be used for operating on shared memory. Note part of this reverts commit fb53b42e36a9 ("virtio-modern: fix PCI common read/write functions on big endian targets"). PR: 294706 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294706 ) Reviewed by: adrian, tuexen Fixes: fb53b42e36a9 ("virtio-modern: fix PCI common read/write functions on big endian targets") Fixes: 9da9560c4dd3 ("virtio: Add VirtIO PCI modern (V1) support") Differential Revision: https://reviews.freebsd.org/D57392 (cherry picked from commit 07b5d1ca52b113cecad3cda73ff5e782d8f4d07d) M sys/dev/virtio/pci/virtio_pci_modern.c _____________________________________________________________________________________________________________ Commit: 7d9ab6ff71ec034079b71bc3182ef72072fefcec URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7d9ab6ff71ec034079b71bc3182ef72072fefcec Author: Michael Tuexen (Wed 17 Jun 2026 14:46:56 BST) Committer: Michael Tuexen (Wed 5 Aug 2026 23:37:35 BST) tcp: cleanup resource handling in SYN handling Handle cred, ipopts, and maclabel using the same pattern: allocate at the beginning and set to NULL when the object is transferred to a struct syncache. When exiting the function, free these objects if not transferred or when transferred to the on-stack struct syncache. This makes use of a new function syncache_release(). This fixes a use after free problem: ipopts should only be freed, if the on-stack struct syncache is used and the pointer in this structure still points to the allocated ipopts. If the ipopts are moved from the struct syncache to the struct inpcb in syncache_socket(), which is called by syncache_tfo_expand(), the pointer in the struct syncache is set to NULL. In a FreeBSD default setup this problem is mitigated by 1. TCP fast open support on the server side not being enabled (the sysctl-variable net.inet.tcp.fastopen.server_enable is 0). 2. Incoming IP packet with source routing options are not being processed by the host stack (the sysctl-variable net.inet.ip.accept_sourceroute is 0). Only if these two sysctl-variables are changed, a FreeBSD system is affected, if a server actually using TCP fast open is running. Reported by: Yuxiang Yang, Yizhou Zhao, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM5.1 from Z.ai Reviewed by: markj, rscheff Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D57374 (cherry picked from commit 1ed2bf1e0052df8dd6b429fc4ddd1908005f39ef) M sys/netinet/tcp_syncache.c _____________________________________________________________________________________________________________ Commit: 625a7eb911884cc6e3a54d331953daa274bd3fab URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=625a7eb911884cc6e3a54d331953daa274bd3fab Author: Li-Wen Hsu (Wed 17 Dec 2025 10:34:14 GMT) Committer: Li-Wen Hsu (Thu 6 Aug 2026 02:44:51 BST) tests/lorder_test: Update test case description from copy/paste MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 5a674a0694836616eaaff448345823594742ad76) M usr.bin/lorder/tests/lorder_test.sh _____________________________________________________________________________________________________________ Commit: ffdac5099420c77ce658fed66e7eacd58b48b60e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ffdac5099420c77ce658fed66e7eacd58b48b60e Author: Li-Wen Hsu (Sat 27 Jun 2026 03:26:05 BST) Committer: Li-Wen Hsu (Thu 6 Aug 2026 02:40:12 BST) libdtrace: Fix dt_print_sym() not printing symbols in non-oformat mode dt_print_sym() fills the symbol string via snprintf() in non-oformat mode but the guarding `dtp->dt_oformat != 0 &&` for the dt_printf() call causes the symbol is computed but never emitted. This fixes tests: - common.profile-n.t_dtrace_contrib.tst_sym_ksh - common.profile-n.t_dtrace_contrib.tst_func_ksh Reviewed by: markj Fixes: 93f27766a7e1 ("dtrace: Add the 'oformat' libdtrace option") MFC after: 3 days Event: Halifax Hackathon 202606 Location: Room 208, Computer Science Building, Dalhousie University Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57895 (cherry picked from commit 8e61d8707f8a10acc143210089fea2502a3f2922) M cddl/contrib/opensolaris/lib/libdtrace/common/dt_consume.c _____________________________________________________________________________________________________________ Commit: d690bf86d2c87d2f3f4c2cbed10deb8d065fe2df URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d690bf86d2c87d2f3f4c2cbed10deb8d065fe2df Author: Li-Wen Hsu (Fri 31 Jul 2026 19:05:03 BST) Committer: Li-Wen Hsu (Thu 6 Aug 2026 02:35:19 BST) rc.d/bthidd: Correct load_kld invocations Pass a single module name to load_kld for kbdmux and vkbd, allowing bthidd_prestart to load both modules successfully. Fixes: cfe1962a1925 (rc: Fix improper use of load_kld) MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit b5fe1bc5c6e4b483aacadddd8bdf37aa12c89982) M libexec/rc/rc.d/bthidd _____________________________________________________________________________________________________________ Commit: 51acd75a12ddb8fbd738f0b20f882eb8af1f24d9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=51acd75a12ddb8fbd738f0b20f882eb8af1f24d9 Author: Sean Eric Fagan (Mon 27 Jul 2026 20:18:36 BST) Committer: Sean Eric Fagan (Wed 5 Aug 2026 22:25:09 BST) sleep: Fix man page about IGINFO output Reviewed by: des MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D58483 (cherry picked from commit 24983c4e9f9934282e8d81381095da819ad97c63) M bin/sleep/sleep.1 _____________________________________________________________________________________________________________ Commit: 0fb06da11083bed1ca1cab0332183492e5b665ec URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0fb06da11083bed1ca1cab0332183492e5b665ec Author: Kristofer Peterson (Mon 16 Feb 2026 15:53:47 GMT) Committer: Jilles Tjoelker (Wed 5 Aug 2026 21:44:03 BST) bin/sh: Fix history long line truncation/corruption When reading from standard input with editline history enabled, increase buffer size to accomodate long lines so that history is recorded correctly. Cleanup el_gets() handling avoiding potentially dangerous retention of pointers to editline buffers across calls. Ensure struct parsefile objects are properly zero initialised when created. Remove push argument from setinputstring() and simplify logic as it was always called with a value of one and as was written was potentially dangerous if ever called with a value of zero. This commit does not fix long lines when history is enabled but editing is not (e.g. if there is no terminal). MFC after: 3 weeks Pull Request: https://github.com/freebsd/freebsd-src/pull/2028 Signed-off-by: Kristofer Peterson (cherry picked from commit 95e4fce8f0c4fc6bf828288b1d63faf0f1300198) M bin/sh/eval.c M bin/sh/input.c M bin/sh/input.h M bin/sh/parser.c _____________________________________________________________________________________________________________ Commit: b60835acb9841cdc1df9921bca3f4e1f904680b5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b60835acb9841cdc1df9921bca3f4e1f904680b5 Author: Alexander Ziaee (Tue 30 Jun 2026 15:12:03 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:50:32 BST) ctfmerge.1: Fix uniqlabel typos The flag is -D, but it was written as a second -d. Add a period too. MFC after: 3 days (cherry picked from commit 4f293e32e4529617dd05bd64fd3c22a57a56a355) M cddl/usr.bin/ctfmerge/ctfmerge.1 _____________________________________________________________________________________________________________ Commit: 2b0f4a74e2a1f4eea062d651fe6759c807646ffc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2b0f4a74e2a1f4eea062d651fe6759c807646ffc Author: Wolfram Schneider (Tue 30 Jun 2026 14:20:41 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:50:27 BST) ctfmerge.1: Import ENVIRONMENT from NetBSD Import the ENVIRONMENT section from NetBSD, minus the variable that our ctfmerge does not have. Alphabetize them, polish grammar and alignment, and add the variables to the man database. While here, remove whitespace from the end of some lines to quiet linter. MFC after: 3 days PR: 291186 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291186 ) Co-authored-by: Alexander Ziaee Obtained from: NetBSD (christos , 8a0c0d8) Differential Revision: https://reviews.freebsd.org/D54054 (cherry picked from commit 32cf24b725fdf899fb642c47004b69fcfae9b9db) M cddl/usr.bin/ctfmerge/ctfmerge.1 _____________________________________________________________________________________________________________ Commit: 7f5315a47cd1419e0ac53c0b70ef86e08d4a32b1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7f5315a47cd1419e0ac53c0b70ef86e08d4a32b1 Author: Alexander Ziaee (Mon 6 Oct 2025 19:48:06 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:31:42 BST) iovctl.8: Fix missing xref section number MFC after: 3 days (cherry picked from commit 17085d8eb1207aa925ca5eeda1d5ba132f1dd163) M usr.sbin/iovctl/iovctl.8 _____________________________________________________________________________________________________________ Commit: 2df31b1e3cf1a7850f754155e67369804f59813c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2df31b1e3cf1a7850f754155e67369804f59813c Author: Alexander Ziaee (Sun 5 Oct 2025 00:11:50 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:31:32 BST) ice.4: Zap registered mark from document descr Document descriptions for device drivers always contain registered trademarks of the manufacturers, but this is not a place for the registered mark symbol. While here, remove another useless symbol, the hyphen in the first line comment. MFC after: 3 days (cherry picked from commit 6720975ba0c5b821ea0e889457737a3e2692125a) M share/man/man4/ice.4 _____________________________________________________________________________________________________________ Commit: 655b5bb94cfd10529c6fa0c4274f6558981c0b9f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=655b5bb94cfd10529c6fa0c4274f6558981c0b9f Author: Warner Losh (Fri 3 Oct 2025 15:30:15 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:31:00 BST) nda.4: Add a HARDWARE section, tag SPDX The description likely also needs some love. MFC after: 1 hour Co-authored-by: ziaee (typed up imps suggestion, tagged spdx) Differential Revision: https://reviews.freebsd.org/D52866 (cherry picked from commit f19aea89abd8964bf96d134c2bd6e127464c79f6) M share/man/man4/nda.4 _____________________________________________________________________________________________________________ Commit: b359e5031aa2b8d313cd84d7aa227cdd83dac639 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b359e5031aa2b8d313cd84d7aa227cdd83dac639 Author: Warner Losh (Fri 3 Oct 2025 14:49:32 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:30:54 BST) sdhci.4: Improve HARDWARE for HW Relnotes + SPDX MFC after: 1 hr Discussed with: ivy, olce Co-authored-by: ziaee (typed up imps suggestion, tagged spdx) Differential Revision: https://reviews.freebsd.org/D52860 (cherry picked from commit bc433a0b7b046b0412777e0f3cc8f18a233af8ff) M share/man/man4/sdhci.4 _____________________________________________________________________________________________________________ Commit: bff7d591e85b0cfbfe6169af8f50bb5e1de20d17 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bff7d591e85b0cfbfe6169af8f50bb5e1de20d17 Author: Alexander Ziaee (Mon 29 Sep 2025 23:32:42 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:30:43 BST) ahc.4,ahd.4: Improve HARDWARE + tag SPDX Add some context for the Hardware Relnotes, and tag SPDX while here. MFC after: 3 days (cherry picked from commit 2c2a2b8281be2f4270fd98eda743a3a8c2f36949) M share/man/man4/ahc.4 M share/man/man4/ahd.4 _____________________________________________________________________________________________________________ Commit: 30f26e6b65d30875fcdb90036e1051f18408b64c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=30f26e6b65d30875fcdb90036e1051f18408b64c Author: Alexander Ziaee (Mon 29 Sep 2025 20:58:48 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:30:35 BST) aac.4: Improve HARDWARE introductory sentance For the improvement of the hardware release notes. While here, tag SPDX. MFC after: 3 days (cherry picked from commit 17be686a39a07958f61e42c4b5c797bb1d1e9895) M share/man/man4/aac.4 _____________________________________________________________________________________________________________ Commit: 84c20e2b26a9d4f03be798e5594e9055876ecdcd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=84c20e2b26a9d4f03be798e5594e9055876ecdcd Author: Alexander Ziaee (Mon 29 Sep 2025 14:23:24 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:29:53 BST) mpr.4: Improve HARDWARE introductory sentance Add context for inclusion in Hardware Release Notes. MFC after: 3 days (cherry picked from commit c856f327fa6ccf1c5b9e4f531581fa2a0d83c3e0) M share/man/man4/mpr.4 _____________________________________________________________________________________________________________ Commit: 88129687a8ec51023f294530496c3fbc59fc627b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=88129687a8ec51023f294530496c3fbc59fc627b Author: Alexander Ziaee (Thu 18 Sep 2025 21:14:30 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:29:07 BST) cdceem.4: Clean description for apropos, tag spdx CDCEEM is already defined in the document name, no need to list it in parentheticals a second time in the document description. This brings the apropos listing down to one line on the one true standard console. MFC after: 3 days (cherry picked from commit 89bc43a1ea9b23cac9cb94f0b684d5655c9a90e4) M share/man/man4/cdceem.4 _____________________________________________________________________________________________________________ Commit: 936bb5c85c33a79824e6baadf7c7bf49faa8c499 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=936bb5c85c33a79824e6baadf7c7bf49faa8c499 Author: Quentin Thébault (Tue 16 Sep 2025 03:38:18 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:27:53 BST) vnet.9: Rename vnet.9/vimage.9 to VNET.9/VIMAGE.9 Fix crossreferences to VNET(9) by correcting it's capitalization. MFC after: 3 days Reviewed by: enji, ziaee Closes: https://github.com/freebsd/freebsd-src/pull/1848 (cherry picked from commit 3049b2f5115b3b4aed202274e866f360fa2560d1) (cherry picked from commit 8f7a4d7949d83c13a7451cba7626950d182dfc5d) (cherry picked from commit 08d41d8803d9dd49b709518e8f2ce292b59e9828) M ObsoleteFiles.inc M contrib/kyua/doc/kyuafile.5.in M share/man/man9/Makefile R100 share/man/man9/vnet.9 share/man/man9/VNET.9 _____________________________________________________________________________________________________________ Commit: d79c05acd2d4c567ee35cf997df9fdf3f30c168a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d79c05acd2d4c567ee35cf997df9fdf3f30c168a Author: Alexander Ziaee (Fri 29 Aug 2025 13:46:55 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 19:26:20 BST) man4/Makefile: Add a reminder about architectures MFC after: 3 days Suggested by: emaste Reviewed by: bcr Differential Revision: https://reviews.freebsd.org/D51464 (cherry picked from commit b4a560d34f23b8a8cf86591371579475ab0617e7) M share/man/man4/Makefile _____________________________________________________________________________________________________________ Commit: 6bbe8330cbcc043defabaa65fe5786f7fe8c4dbe URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6bbe8330cbcc043defabaa65fe5786f7fe8c4dbe Author: Alexander Ziaee (Thu 28 Aug 2025 18:12:36 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:19:46 BST) gpio.4: Remove non-existent gpioc from synopsis MFC after: 3 days Reported by: maxfx, kevans (cherry picked from commit 0e17080395e8c5e6990d0c61f709dbab432eb683) M share/man/man4/gpio.4 _____________________________________________________________________________________________________________ Commit: 252ca3f6a82450736236740bc61c5b745872365c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=252ca3f6a82450736236740bc61c5b745872365c Author: Evgenii Ivanov (Wed 27 Aug 2025 22:02:27 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:19:39 BST) VFS.9: Remove obsolete reference to VFS_INIT(9) MFC after: 3 days Reviewed by: ziaee Differential Revision: https://reviews.freebsd.org/D52173 (cherry picked from commit b6a1c91b7177565115691d0cd57b412b615ae3cc) M share/man/man9/VFS.9 _____________________________________________________________________________________________________________ Commit: 152064c3a278fe7c27c06f13ea2191ebc9a62c73 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=152064c3a278fe7c27c06f13ea2191ebc9a62c73 Author: Felix Johnson (Tue 26 Aug 2025 01:06:39 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:17:51 BST) sysdecode_syscallnames.3: s/names/name/ The sysdecode_syscallname function was accidentally documented as being plural. Move it to reflect it's actual name, and adjust all references. PR: 278383 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278383 ) Reviewed by: ziaee Reported by: mhorne (initial commit forgot to remove old) Differential Revision: https://reviews.freebsd.org/D51002 (cherry picked from commit 739c4905dd5a35db8542b91cb46f04cc7b0484af) (cherry picked from commit 4ba91e076ee84101112d8296785098ae31dac35e) M ObsoleteFiles.inc M lib/libsysdecode/Makefile M lib/libsysdecode/sysdecode.3 M lib/libsysdecode/sysdecode_abi_to_freebsd_errno.3 R093 lib/libsysdecode/sysdecode_syscallnames.3 lib/libsysdecode/sysdecode_syscallname.3 _____________________________________________________________________________________________________________ Commit: f76adcd559e6cad4ad5e6e7d611aeacf03501bb4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f76adcd559e6cad4ad5e6e7d611aeacf03501bb4 Author: Alexander Ziaee (Mon 18 Aug 2025 18:06:10 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:13:05 BST) man4: Use arch specifier of Dt consistently Use the mdoc(7) arch specifier in the document title for all remaining manuals reflecting drivers which are only for one architecture. Most are in architecture specific folders, but amd64 only manuals are denoted in `man4/Makefile`. These display at the top of the manual [0] without taking up extra lines and are useful in any case, however I hope to use these in the Hardware Release Notes, where architecture specificity is difficult to maintain. [0] Example: https://man-dev.freebsd.org/boot MFC after: 3 days Reviewed by: 0mp Discussed with: emaste, imp, mhorne Differential Revision: https://reviews.freebsd.org/D51264 (cherry picked from commit 8c9937df84e6cc7f1a98054fe34f01f2810f90a4) M share/man/man4/ioat.4 M share/man/man4/man4.aarch64/armv8crypto.4 M share/man/man4/man4.aarch64/enetc.4 M share/man/man4/man4.aarch64/felix.4 M share/man/man4/man4.aarch64/rk_gpio.4 M share/man/man4/man4.aarch64/rk_grf.4 M share/man/man4/man4.aarch64/rk_i2c.4 M share/man/man4/man4.aarch64/rk_pinctrl.4 M share/man/man4/man4.arm/am335x_dmtpps.4 M share/man/man4/man4.arm/aw_gpio.4 M share/man/man4/man4.arm/aw_mmc.4 M share/man/man4/man4.arm/aw_rtc.4 M share/man/man4/man4.arm/aw_sid.4 M share/man/man4/man4.arm/aw_spi.4 M share/man/man4/man4.arm/aw_syscon.4 M share/man/man4/man4.arm/bcm283x_pwm.4 M share/man/man4/man4.arm/devcfg.4 M share/man/man4/man4.arm/imx6_ahci.4 M share/man/man4/man4.arm/imx6_snvs.4 M share/man/man4/man4.arm/imx_spi.4 M share/man/man4/man4.arm/imx_wdog.4 M share/man/man4/man4.arm/mge.4 M share/man/man4/man4.arm/ti_adc.4 M share/man/man4/man4.powerpc/abtn.4 M share/man/man4/man4.powerpc/adb.4 M share/man/man4/man4.powerpc/akbd.4 M share/man/man4/man4.powerpc/ams.4 M share/man/man4/man4.powerpc/cuda.4 M share/man/man4/man4.powerpc/dtsec.4 M share/man/man4/man4.powerpc/llan.4 M share/man/man4/man4.powerpc/pmu.4 M share/man/man4/man4.powerpc/smu.4 M share/man/man4/man4.powerpc/snd_ai2s.4 M share/man/man4/man4.powerpc/snd_davbus.4 M share/man/man4/man4.powerpc/tsec.4 M share/man/man4/nvdimm.4 M share/man/man4/qlnxe.4 M share/man/man4/qlxgb.4 M share/man/man4/qlxgbe.4 M share/man/man4/qlxge.4 M share/man/man4/sfxge.4 M share/man/man4/smartpqi.4 M share/man/man4/sume.4 _____________________________________________________________________________________________________________ Commit: ddd842ec2a123fa6918f39514c0660d867a5b91f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ddd842ec2a123fa6918f39514c0660d867a5b91f Author: Alexander Ziaee (Thu 17 Jul 2025 16:56:16 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:06:51 BST) snd_uaudio.4: Rework SYNOPSIS, add HARDWARE, SPDX + Rework synopsis for consistency, adding sysctls + Add a HARDWARE section for HW relnotes + tag SPDX MFC after: 3 days Reviewed by: christos, pauamma Differential Revision: https://reviews.freebsd.org/D51240 (cherry picked from commit 701072154af0881ef395736a06d09ffa47cfc096) M share/man/man4/snd_uaudio.4 _____________________________________________________________________________________________________________ Commit: 1093a068eac69844c866a3c535f748f34197e169 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1093a068eac69844c866a3c535f748f34197e169 Author: Alexander Ziaee (Tue 15 Jul 2025 20:24:13 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:06:42 BST) top.1: Document the THR column MFC after: 3 days Fixes: 32efd26355e2 (Add a THR column) Reviewed by: bcr Differential Revision: https://reviews.freebsd.org/D50754 (cherry picked from commit 602e423db1661a316c2e97d229e14cb20c57f835) M usr.bin/top/top.1 _____________________________________________________________________________________________________________ Commit: 9ade902dfef25337c6832eac48ba08a37e5d3f54 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9ade902dfef25337c6832eac48ba08a37e5d3f54 Author: Alexander Ziaee (Sun 15 Jun 2025 03:51:05 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:06:23 BST) sed.1: Adjust examples to fit in one line + SPDX Examples were previously overflowing at MANWIDTH 80. Keep the same complexity but use shorter phrases to make them easier to read. Tag SPDX while here. MFC after: 3 days Reviewed by: bcr Discussed with: emaste Differential Revision: https://reviews.freebsd.org/D50867 (cherry picked from commit 3cb2a7e01e13c866d7c4bb55da8f229233c0cd7c) M usr.bin/sed/sed.1 _____________________________________________________________________________________________________________ Commit: 3fd38a6a10521b1a05cc68918c0a4a15cea93edf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3fd38a6a10521b1a05cc68918c0a4a15cea93edf Author: Alexander Ziaee (Mon 14 Jul 2025 22:21:12 BST) Committer: Alexander Ziaee (Wed 5 Aug 2026 17:04:45 BST) style.Makefile.5: Remove title macros, tag SPDX Title macros are discouraged in mdoc(7) because they are not portable. While here, remove a redundant "file". File is still in the title twice. MFC after: 3 days (cherry picked from commit 8f480d0075263ff354212ce0558ee811ce62ff09) M share/man/man5/style.Makefile.5 _____________________________________________________________________________________________________________ Commit: 66a50afd0491b1f618bd6d5817c6b658ca52f9da URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=66a50afd0491b1f618bd6d5817c6b658ca52f9da Author: Mark Johnston (Wed 8 Jul 2026 19:06:00 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Fix comment typos MFC after: 1 week (cherry picked from commit 3e123be2305a30369f63bcee22ca5e0db527f320) M sys/kern/vfs_inotify.c M sys/sys/inotify.h _____________________________________________________________________________________________________________ Commit: 3136ff55276a7c109066112ab9df6cbd5d00bf13 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3136ff55276a7c109066112ab9df6cbd5d00bf13 Author: Mark Johnston (Wed 8 Jul 2026 18:09:42 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) tests/inotify: Make an error message more useful MFC after: 3 days (cherry picked from commit 836a76ad95be2fcf2cd116d754c5888a731d57aa) M tests/sys/kern/inotify_test.c _____________________________________________________________________________________________________________ Commit: 0b184c120fc4614fc4d43959e7173bd6359d1ce0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0b184c120fc4614fc4d43959e7173bd6359d1ce0 Author: Mark Johnston (Mon 6 Jul 2026 13:50:51 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify.2: Fix formatting and lint MFC after: 1 week (cherry picked from commit 92dfe30ba254b50a74e14f33ad1d2a0c03393960) M lib/libc/sys/inotify.2 _____________________________________________________________________________________________________________ Commit: d0aec16d99af0805b882ba174946996a63869309 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d0aec16d99af0805b882ba174946996a63869309 Author: Mark Johnston (Wed 8 Jul 2026 20:28:43 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Ensure that "allocfail" is initialized in inotify_log_one() Fixes: b70997c8c75a ("inotify: Unconditionally generate IN_IGNORED events for files/dirs") (cherry picked from commit f370bf9fafce82851bedb2b88bc21ec6ca0182df) M sys/kern/vfs_inotify.c _____________________________________________________________________________________________________________ Commit: 95d7a7d17804738f9d7caf848c159792b3bde4c0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=95d7a7d17804738f9d7caf848c159792b3bde4c0 Author: Mark Johnston (Mon 6 Jul 2026 13:50:37 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Unconditionally generate IN_IGNORED events for files/dirs The implementation previously only generated an IN_IGNORED event for a deleted watched file if the watch explicitly requested IN_DELETE_SELF. This is not correct, IN_IGNORED should always be raised when the watched subject is deleted. Adjust the implementation of inotify_log_one() accordingly. This also fixes a problem where a deleted watched file's watch would not be removed if IN_DELETE_SELF was not in the watch's event mask, in which case the unlinked vnode would linger until the inotify descriptor itself is closed. Add a regression test. Reported by: jrtc27 Reviewed by: jrtc27 MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D58050 (cherry picked from commit b70997c8c75adc3ab343c47d5ba7d01c9c774d9e) M sys/kern/vfs_inotify.c M tests/sys/kern/inotify_test.c _____________________________________________________________________________________________________________ Commit: 84235bcd4bde587c134820763c2880fd8e653717 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=84235bcd4bde587c134820763c2880fd8e653717 Author: Mark Johnston (Sun 21 Dec 2025 23:49:26 GMT) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Avoid resetting the cookie The IN_MOVED_FROM and _TO events only apply to names in a watched directory, never to a watched directory itself. So, the cookie value there is always zero, and in particular we should not reset the caller-provided cookie value, as it may be used later. Add a regression test. Reported by: arrowd MFC after: 1 week (cherry picked from commit da8ab13249420e85935b89794f333f0755e56385) M sys/kern/vfs_inotify.c M tests/sys/kern/inotify_test.c _____________________________________________________________________________________________________________ Commit: 6d9339c7b1b60b97ea1e9391af31b7f4e8de0d00 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6d9339c7b1b60b97ea1e9391af31b7f4e8de0d00 Author: Mark Johnston (Sat 15 Nov 2025 18:00:44 GMT) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Work around the vput() bug directly For 15.0, apply a minimal fix which at least ensures that inotify can't trigger the latent race described in commit 99cb3dca4773 ("vnode: Rework vput() to avoid holding the vnode lock after decrementing"). Reviewed by: olce, kib MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D53774 (cherry picked from commit ebc17879f0885ca87644980f6275b9759b311eb3) M sys/kern/vfs_inotify.c _____________________________________________________________________________________________________________ Commit: 00c2ff02342d3f211c97f8b4ace9a5a96d955ea4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=00c2ff02342d3f211c97f8b4ace9a5a96d955ea4 Author: Alexander Leidinger (Sun 19 Jul 2026 08:38:52 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) nullfs: close a race when syncing inotify flags from the lower vnode After a bypassed VOP, nullfs mirrors the lower vnode's inotify state onto the upper vnode. The flags were checked with lockless reads before being updated with the asserting flag set/unset primitives, so two threads syncing the same vnode concurrently (or a sync racing a watch being established) could both decide to make the same change; the loser then trips the "flags already set" assertion on an INVARIANTS kernel. On other kernels the race is harmless. Keep the lockless check as the fast path, but re-make the decision under the vnode interlock before actually changing the flags. Reproduced in a 4-CPU VM with one thread cycling an inotify watch on a lower-filesystem file while several threads stat(2) the same file through a nullfs mount: the unpatched INVARIANTS kernel panics under this load, the patched kernel runs it to completion. Fixes: f1f230439fa4 ("vfs: Initial revision of inotify") MFC after: 2 weeks Differential Revision: D58344 Reviewed by: markj Assisted-by: Claude Code (Fable 5) (cherry picked from commit d6915bffb7b68d9b55fa3db4e5709463549c379e) M sys/fs/nullfs/null_vnops.c _____________________________________________________________________________________________________________ Commit: a1634ec7ec4c3745964d9fc43bd4fc0e1b73a935 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a1634ec7ec4c3745964d9fc43bd4fc0e1b73a935 Author: Mark Johnston (Sun 26 Apr 2026 02:35:37 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) nullfs: Clear inotify flags during reclaim The inotify flags are copied from the lower vnode into the nullfs vnode so that the INOTIFY() macro will invoke VOP_INOTIFY on the nullfs vnode; this is then bypassed to the lower vnode. However, when a nullfs vnode is reclaimed we should clear these flags, as the vnode is now doomed and no longer forwards VOPs to the lower vnode. Add regression tests. Remove a test in vn_inotify_revoke() which is no longer needed after this change. PR: 292495 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292495 ) Reviewed by: kib Reported by: Jed Laundry Fixes: f1f230439fa4 ("vfs: Initial revision of inotify") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56639 (cherry picked from commit a02d794f5acd12ba3cf1de5c204a8dd56af47edd) M sys/fs/nullfs/null_vnops.c M sys/kern/vfs_inotify.c M tests/sys/kern/inotify_test.c _____________________________________________________________________________________________________________ Commit: 59bbde390ebdec2fb55c3f02ef694815930339e3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=59bbde390ebdec2fb55c3f02ef694815930339e3 Author: Mark Johnston (Thu 14 Aug 2025 17:03:00 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Fix a namei path buffer leak Reviewed by: kib Fixes: f1f230439fa4 ("vfs: Initial revision of inotify") Differential Revision: https://reviews.freebsd.org/D51900 (cherry picked from commit e5a2e77352440f23ef8988a934753fd2fba8b821) M sys/kern/vfs_inotify.c _____________________________________________________________________________________________________________ Commit: 9b094ba83a142b85bf4f9292f02749fc9fdb77cd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9b094ba83a142b85bf4f9292f02749fc9fdb77cd Author: Mark Johnston (Fri 1 Aug 2025 19:16:17 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Avoid calling vrele() with a namecache mutex held In cache_vop_inotify(), we call inotify_log() with a namecache hash lock held. inotify_log() looks at all watches registered with the vnode to see if any of them are interested in the event. In some cases, we have to detach and free the watch after logging the event. This means we must vrele() the watched vnode, and this must not be done while a non-sleepable lock held. Previously, I deferred the vrele() to until the inotify softc and vnode pollinfo locks were dropped. However, this is not enough since we may still be holding the aforementioned namecache lock. Go further and use a taskqueue thread to release vnode references. Introduce a set of detached watches, and queue a threaded task which releases the vnode reference. Reported by: syzbot+c128f121cb22df95559b@syzkaller.appspotmail.com Reviewed by: kib Fixes: f1f230439fa4 ("vfs: Initial revision of inotify") Differential Revision: https://reviews.freebsd.org/D51685 (cherry picked from commit c2230ad3b121bd1e57fdb2c466f5b826aad5f730) M sys/kern/vfs_inotify.c _____________________________________________________________________________________________________________ Commit: 9f2c32c1924b524f9e353bee74884d263b273a4f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9f2c32c1924b524f9e353bee74884d263b273a4f Author: Mark Johnston (Fri 18 Jul 2025 15:25:28 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Fix a couple of locking bugs When hooking vop_rename_post(), the preexisting dst vnode will be unlocked. But, we need to invoke VOP_GETATTR on it in vn_inotify() to check its link count. In inotify_unlink_watch_locked(), the vnode interlock is not held, so don't use vn_irflag_unset_locked(). Reviewed by: kib Fixes: f1f230439fa4 ("vfs: Initial revision of inotify") Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D51401 (cherry picked from commit af0ec3fa29cad823d0196538381f1e832f5974a7) M sys/kern/vfs_inotify.c M sys/sys/inotify.h _____________________________________________________________________________________________________________ Commit: e8c54222acdbb977c4164667627b6ee569d2eb90 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e8c54222acdbb977c4164667627b6ee569d2eb90 Author: Konstantin Belousov (Thu 10 Jul 2025 08:15:13 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: do not call into namei() with a locked vnode PR: 288127 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288127 ) Reviewed by: markj Fixes: f1f230439fa48581f40a57f095627f667a9713c3 Sponsored by: The FreeBSD Foundation Differential revision: https://reviews.freebsd.org/D51233 (cherry picked from commit 63389aea24f15fe823c775960d77017f1a35f54b) M sys/kern/vfs_inotify.c _____________________________________________________________________________________________________________ Commit: 3e8d10f256d5b2987370dbfefbca8c3f5f469113 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e8d10f256d5b2987370dbfefbca8c3f5f469113 Author: Mark Johnston (Mon 7 Jul 2025 20:30:35 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:16 BST) inotify: Use memcmp() to compare embedded file names Otherwise gcc warns that strcmp() will read a byte from a zero-length array, though in practice we exclude that case with an explicit length check. Fixes: f1f230439fa4 ("vfs: Initial revision of inotify") (cherry picked from commit bc6b526e2b71cf7e07806db5bc77926ed5c874f7) M sys/kern/vfs_inotify.c _____________________________________________________________________________________________________________ Commit: 7d914975a6ab45c5e1b2a11a864b0bcb136b90ab URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7d914975a6ab45c5e1b2a11a864b0bcb136b90ab Author: Mark Johnston (Mon 9 Jun 2025 21:11:08 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) procstat: Add handling for inotify descriptors MFC after: 3 months Sponsored by: Klara, Inc. (cherry picked from commit f56e0d4755c521b50bf313a85fd399c2b6a7a4bb) M usr.bin/procstat/procstat.1 M usr.bin/procstat/procstat_files.c _____________________________________________________________________________________________________________ Commit: 9e2e70d55ff555b2405f4da3e0136d1209a63005 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9e2e70d55ff555b2405f4da3e0136d1209a63005 Author: Mark Johnston (Mon 9 Jun 2025 21:03:08 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) libprocstat: Add handling for inotify descriptors MFC after: 3 months Sponsored by: Klara, Inc. (cherry picked from commit 79102e108099237b1d702e960706a739c7b071bd) M lib/libprocstat/libprocstat.c M lib/libprocstat/libprocstat.h _____________________________________________________________________________________________________________ Commit: 3b1d0e8b0a2253ef45a7dec9cdcc82a8b698ebc0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3b1d0e8b0a2253ef45a7dec9cdcc82a8b698ebc0 Author: Mark Johnston (Wed 5 Aug 2026 14:34:52 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) linux: Regenerate system call definitions This is a direct commit to stable/14. M sys/amd64/linux/linux_proto.h M sys/amd64/linux/linux_sysent.c M sys/amd64/linux/linux_systrace_args.c M sys/amd64/linux32/linux32_proto.h M sys/amd64/linux32/linux32_sysent.c M sys/amd64/linux32/linux32_systrace_args.c M sys/arm64/linux/linux_proto.h M sys/arm64/linux/linux_sysent.c M sys/arm64/linux/linux_systrace_args.c M sys/i386/linux/linux_proto.h M sys/i386/linux/linux_sysent.c M sys/i386/linux/linux_systrace_args.c _____________________________________________________________________________________________________________ Commit: 64a20dd7034ed6bd46e57bd143d8cc1d4d77f797 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=64a20dd7034ed6bd46e57bd143d8cc1d4d77f797 Author: Mark Johnston (Fri 6 Jun 2025 14:25:09 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) linux: Add inotify support Implement the Linux inotify system calls using the native implementation in vfs_inotify.c. PR: 240874 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240874 ) Reviewed by: brooks MFC after: 3 months Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D50761 (cherry picked from commit 3965de642c29d831649c8307203303de560d721a) M sys/amd64/linux/syscalls.master M sys/amd64/linux32/syscalls.master M sys/arm64/linux/syscalls.master M sys/compat/linux/linux_dummy.c M sys/compat/linux/linux_file.c M sys/compat/linux/linux_file.h M sys/i386/linux/syscalls.master M sys/kern/vfs_inotify.c M sys/sys/inotify.h M sys/x86/linux/linux_dummy_x86.c _____________________________________________________________________________________________________________ Commit: 09dbcd12d5261f826e91944b17f814ce592e2c7f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=09dbcd12d5261f826e91944b17f814ce592e2c7f Author: Enji Cooper (Sat 16 Aug 2025 05:31:58 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) Remove inotify example code when MK_EXAMPLES == no This change adds the needed entries to OLD_DIRS and OLD_FILES to ensure that the paths are properly cleaned up when `make delete-old` is run and MK_EXAMPLES == no. MFC after: 2 months Fixes: 1d8664d69041 ("examples: Add a demo program for inotify") Differential Revision: https://reviews.freebsd.org/D51934 (cherry picked from commit 19c8cc3162aca9fde56581caee743d68d322c909) M tools/build/mk/OptionalObsoleteFiles.inc _____________________________________________________________________________________________________________ Commit: 8e857d9812fa5dc02765d6f0e095269ced84cdf8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8e857d9812fa5dc02765d6f0e095269ced84cdf8 Author: Mark Johnston (Mon 7 Jul 2025 14:51:41 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) examples/inotify: Handle a zero-length name Reported by: jlduran Fixes: 1d8664d69041 ("examples: Add a demo program for inotify") (cherry picked from commit 97452b097a4a35df8ce8cbd44786fb7d95db2a92) M share/examples/inotify/inotify.c _____________________________________________________________________________________________________________ Commit: 03f565116b7d015a479a5c37257cc9e6a38685c7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=03f565116b7d015a479a5c37257cc9e6a38685c7 Author: Mark Johnston (Thu 3 Jul 2025 21:00:55 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) examples: Add a demo program for inotify MFC after: 3 months Sponsored by: Klara, Inc. (cherry picked from commit 1d8664d6904149e0be5dbfa0ee35268de2a83f1e) M etc/mtree/BSD.usr.dist M share/examples/Makefile A share/examples/inotify/Makefile A share/examples/inotify/inotify.c _____________________________________________________________________________________________________________ Commit: f00be56a9ce9290b2df35d53dc249e301705deb3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f00be56a9ce9290b2df35d53dc249e301705deb3 Author: Mark Johnston (Mon 7 Jul 2025 20:14:41 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) inotify tests: Use unsigned integers for event masks Reported by: gcc Fixes: 739fc14938d5 ("tests: Add some regression tests for inotify") (cherry picked from commit 4ea7a920de22d283dd801a38588f35f56cdddcb6) M tests/sys/kern/inotify_test.c _____________________________________________________________________________________________________________ Commit: 4d9701c08106bf3006210ce2a41b1b4f262dda95 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4d9701c08106bf3006210ce2a41b1b4f262dda95 Author: Mark Johnston (Thu 3 Jul 2025 21:00:19 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) tests: Add some regression tests for inotify Reviewed by: kib MFC after: 3 months Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D50315 (cherry picked from commit 739fc14938d58a2ed34c0663bf1f06c83eada685) M tests/sys/kern/Makefile A tests/sys/kern/inotify_test.c _____________________________________________________________________________________________________________ Commit: 2e5f492fe30b329900dd64c8bbb52cf3d14c37f9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2e5f492fe30b329900dd64c8bbb52cf3d14c37f9 Author: Mark Johnston (Thu 3 Jul 2025 21:02:21 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) inotify: Add man pages for the new syscalls and for VOP_INOTIFY Reviewed by: kib MFC after: 3 months Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D50315 (cherry picked from commit 5202cfcf93b19b39f3d2bf80e73a8ca94d7fffd1) M lib/libc/sys/Makefile.inc A lib/libc/sys/inotify.2 M share/man/man9/Makefile A share/man/man9/VOP_INOTIFY.9 _____________________________________________________________________________________________________________ Commit: 04e69f7cc26e71b1e91b44a116a4257a1b679dcf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=04e69f7cc26e71b1e91b44a116a4257a1b679dcf Author: Mark Johnston (Thu 3 Jul 2025 20:53:30 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) kdump: Add support for decoding inotify events These are emitted when reading from an inotify descriptor. MFC after: 3 months Sponsored by: Klara, Inc. (cherry picked from commit e02d4fab54539a5d127c12e9e9f8b0ddd2a1cafa) M usr.bin/kdump/kdump.c _____________________________________________________________________________________________________________ Commit: 97d0086f95410bd05610d305f34894f41b8fcab3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=97d0086f95410bd05610d305f34894f41b8fcab3 Author: Mark Johnston (Thu 3 Jul 2025 20:52:56 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) truss: Add a decoder for inotify_add_watch_at(2) MFC after: 3 months Sponsored by: Klara, Inc. (cherry picked from commit 4d08e7815d6c71c620f19a8abdf0caa26f9c5c57) M usr.bin/truss/syscall.h M usr.bin/truss/syscalls.c _____________________________________________________________________________________________________________ Commit: e478560ba476ea780e2500bafe546e0c36e72065 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e478560ba476ea780e2500bafe546e0c36e72065 Author: Mark Johnston (Thu 3 Jul 2025 20:52:31 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) libsysdecode: Add support for decoding inotify syscall flags MFC after: 3 months Sponsored by: Klara, Inc. (cherry picked from commit b79bd43f9ab3bf0dfd4744dee406782f0329134a) M lib/libsysdecode/Makefile M lib/libsysdecode/flags.c M lib/libsysdecode/mktables M lib/libsysdecode/sysdecode.h _____________________________________________________________________________________________________________ Commit: 333e556683c40ef2d5fe3df3e005397ebca37eb4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=333e556683c40ef2d5fe3df3e005397ebca37eb4 Author: Konstantin Belousov (Mon 7 Jul 2025 13:51:24 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) VOP_WRITE_POST(): correct condition for knote activation Fixes: bc4430dc203ed7b6765fb5df041bf545c50f859b Reported by: dhw, Oleg Nauman Sponsored by: The FreeBSD Foundation (cherry picked from commit 13a21c0c0e3db6e2c1a317031c7d1bf4651bec3d) M sys/sys/vnode.h _____________________________________________________________________________________________________________ Commit: c786bbfa463fb52747d780ed6294500ffa0fc73b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c786bbfa463fb52747d780ed6294500ffa0fc73b Author: Mark Johnston (Thu 3 Jul 2025 21:10:35 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:15 BST) vfs: Add event notification points The INOTIFY macro and its variants check if the vnode is being watched, and if so, calls into a slow path which adds an event to one or more inotify descriptors. Most of these events correspond to EVFILT_VNODE events as well, and are added to VOP *_post hooks. Reviewed by: kib MFC after: 3 months Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D50315 (cherry picked from commit bc4430dc203ed7b6765fb5df041bf545c50f859b) M sys/kern/kern_sendfile.c M sys/kern/vfs_subr.c M sys/kern/vfs_vnops.c M sys/kern/vnode_if.src M sys/sys/vnode.h _____________________________________________________________________________________________________________ Commit: e61884183ed4bbe84dfcc242fecd2bffb943af96 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e61884183ed4bbe84dfcc242fecd2bffb943af96 Author: Mark Johnston (Thu 3 Jul 2025 21:08:59 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) libc: Add inotify support inotify_init() and inotify_init1() are implemented using __specialfd(2). inotify_add_watch() is implemented in terms of inotify_add_watch_at(2). Reviewed by: kib MFC after: 3 months Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D50315 (cherry picked from commit 245ff4c4b2c2728674121a5d9736a5e079bd00b2) M lib/libc/gen/Makefile.inc M lib/libc/gen/Symbol.map A lib/libc/gen/inotify.c M lib/libc/sys/Symbol.map _____________________________________________________________________________________________________________ Commit: acaedbefeb6849ddfec8f1dad36a8087fd2eb72d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=acaedbefeb6849ddfec8f1dad36a8087fd2eb72d Author: Mark Johnston (Wed 5 Aug 2026 14:24:25 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) inotify: Regenerate syscall definitions This is a direct commit to stable/14. M sys/compat/freebsd32/freebsd32_syscall.h M sys/compat/freebsd32/freebsd32_syscalls.c M sys/compat/freebsd32/freebsd32_sysent.c M sys/compat/freebsd32/freebsd32_systrace_args.c M sys/kern/init_sysent.c M sys/kern/syscalls.c M sys/kern/systrace_args.c M sys/sys/syscall.h M sys/sys/syscall.mk M sys/sys/sysproto.h _____________________________________________________________________________________________________________ Commit: 296d7f95aab8d3c948fd6a421eb49513aa48435b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=296d7f95aab8d3c948fd6a421eb49513aa48435b Author: Mark Johnston (Thu 3 Jul 2025 21:07:45 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) vfs: Initial revision of inotify Add an implementation of inotify_init(), inotify_add_watch(), inotify_rm_watch(), source-compatible with Linux. This provides functionality similar to kevent(2)'s EVFILT_VNODE, i.e., it lets applications monitor filesystem files for accesses. Compared to inotify, however, EVFILT_VNODE has the limitation of requiring the application to open the file to be monitored. This means that activity on a newly created file cannot be monitored reliably, and that a file descriptor per file in the hierarchy is required. inotify on the other hand allows a directory and its entries to be monitored at once. It introduces a new file descriptor type to which "watches" can be attached; a watch is a pseudo-file descriptor associated with a file or directory and a set of events to watch for. When a watched vnode is accessed, a description of the event is queued to the inotify descriptor, readable with read(2). Events for files in a watched directory include the file name. A watched vnode has its usecount bumped, so name cache entries originating from a watched directory are not evicted. Name cache entries are used to populate inotify events for files with a link in a watched directory. In particular, if a file is accessed with, say, read(2), an IN_ACCESS event will be generated for any watched hard link of the file. The inotify_add_watch_at() variant is included so that this functionality is available in capability mode; plain inotify_add_watch() is disallowed in capability mode. When a file in a nullfs mount is watched, the watch is attached to the lower vnode, such that accesses via either layer generate inotify events. Many thanks to Gleb Popov for testing this patch and finding lots of bugs. PR: 258010, 215011 Reviewed by: kib Tested by: arrowd MFC after: 3 months Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D50315 (cherry picked from commit f1f230439fa48581f40a57f095627f667a9713c3) M share/man/man4/rights.4 M sys/bsm/audit_kevents.h M sys/conf/files M sys/fs/nullfs/null_subr.c M sys/fs/nullfs/null_vnops.c M sys/kern/kern_resource.c M sys/kern/subr_capability.c M sys/kern/sys_generic.c M sys/kern/syscalls.master M sys/kern/vfs_cache.c M sys/kern/vfs_default.c A sys/kern/vfs_inotify.c M sys/kern/vfs_subr.c M sys/kern/vfs_vnops.c M sys/kern/vnode_if.src M sys/sys/caprights.h M sys/sys/capsicum.h M sys/sys/file.h A sys/sys/inotify.h M sys/sys/resourcevar.h M sys/sys/specialfd.h M sys/sys/user.h M sys/sys/vnode.h M sys/tools/vnode_if.awk _____________________________________________________________________________________________________________ Commit: 011c5e68c95c8ec74b272dd2f2680fb6c6aa7dde URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=011c5e68c95c8ec74b272dd2f2680fb6c6aa7dde Author: Mark Johnston (Wed 29 Jul 2026 14:19:08 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) ipsec: Fix a lock leak in ipsec_chkreplay() Reported by: Chris Jarrett-Davies of the OpenAI Codex Security Team Reviewed by: pouria, kp Fixes: 0361f165f219 ("ipsec: replace SECASVAR mtx by rmlock") MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58521 (cherry picked from commit b6823a973737f06ea6cf0ea5a3083383af2ba5a4) M sys/netipsec/ipsec.c _____________________________________________________________________________________________________________ Commit: 0af1065b3a5721a9e5433622dcc8a7adb96ad2ed URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0af1065b3a5721a9e5433622dcc8a7adb96ad2ed Author: Mark Johnston (Wed 29 Jul 2026 19:45:36 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) ktls: Propagate EPG_FLAG_ANON to mapped mbufs Otherwise ktls_mbuf_crypto_state() will reject mbufs created by _mb_unmapped_to_ext(), which arises when transmitting packets through an interface that doesn't support unmapped mbufs, and the loopback interface in particular. PR: 296498 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296498 ) Fixes: 3444414cb463 ("ktls: Don't attempt to modify non-anonymous mbufs on the receive path") Reviewed by: gallatin, jhb MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57557 (cherry picked from commit 815976ee14121bafe8a8ab002459d32f8928f2de) M sys/kern/kern_mbuf.c M sys/kern/uipc_ktls.c M sys/sys/mbuf.h _____________________________________________________________________________________________________________ Commit: bdc45e43f469459fe2a72ba7025dc1a39b8c769c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bdc45e43f469459fe2a72ba7025dc1a39b8c769c Author: Mark Johnston (Mon 27 Jul 2026 20:00:49 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) rpcinfo: Fix residual warnings and bump WARNS Reviewed by: emaste MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58442 (cherry picked from commit 95a3301ce144aecce5de88fb4e2905c440533fb8) M usr.bin/rpcinfo/Makefile M usr.bin/rpcinfo/rpcinfo.c _____________________________________________________________________________________________________________ Commit: 0a8166023b3da09444f60f7a01a644900cd1f74f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0a8166023b3da09444f60f7a01a644900cd1f74f Author: Mark Johnston (Mon 27 Jul 2026 19:59:08 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) rpcinfo: Fix buffer overflows Several functions were using sprintf() to write RPC server-controlled data to a stack buffer. Adopt some minimal changes from NetBSD to avoid the potential overflows. Security: CVE-2026-16277 Security: CVE-2026-16461 Reviewed by: khorben MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58441 (cherry picked from commit 152ba2d3c5ff00382260a48653855072d524cfb8) M usr.bin/rpcinfo/rpcinfo.c _____________________________________________________________________________________________________________ Commit: 1802e8fa3364dd6c744e0edb2e5815244938032d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1802e8fa3364dd6c744e0edb2e5815244938032d Author: Mark Johnston (Fri 24 Jul 2026 21:05:06 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) netinet6/nd6: Sprinkle missing prefix refcounting When we drop the prefix lock to call nd6_prefix_offlink() or nd6_prefix_onlink(), make sure to keep the correpsonding prefix structure alive. It is possible for a concurrent nd6_timer() to expire the prefix while the lock is dropped. Reported by: Maik Muench of Secfault Security Reviewed by: pouria, zlei MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58423 (cherry picked from commit 76ca489e0f147e9bd90408ea562087e84ed6f479) M sys/netinet6/nd6_rtr.c _____________________________________________________________________________________________________________ Commit: 441885dcfff33d6ca797d54b6bda9dc5fd8eda89 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=441885dcfff33d6ca797d54b6bda9dc5fd8eda89 Author: Mark Johnston (Fri 24 Jul 2026 21:06:05 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) unix: Preserve FD_RESOLVE_BENEATH when passing an fd The FD_RESOLVE_BENEATH flag is supposed to be sticky. It's set when you receive an fd from a different jail and preserved by openat() etc.. However, if you send the fd to yourself, the flag is stripped since SCM_RIGHTS message don't preserve file descriptor flags. Fix this by preserving those flags and checking for UF_RESOLVE_BENEATH in restrict_rights(). Fixes: 350ba9672a7f ("unix: Set O_RESOLVE_BENEATH on fds transferred between jails") Reviewed by: kib MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58317 (cherry picked from commit 586e2b3d89d6e70ab7e4a88497b5f36d78719423) M sys/kern/uipc_usrreq.c M tests/sys/kern/unix_passfd_test.c _____________________________________________________________________________________________________________ Commit: 13979cac4f19741b48f8e597f5ef9a5ee2c63697 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=13979cac4f19741b48f8e597f5ef9a5ee2c63697 Author: Mark Johnston (Fri 24 Jul 2026 21:04:45 BST) Committer: Mark Johnston (Wed 5 Aug 2026 16:15:14 BST) kthread: Fix a thread leak Fixes: 963629923308 ("kthread_add(): do not allow to attach the thread to a dead or dying process") Reviewed by: kib MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58433 (cherry picked from commit c7917e72fe80e2e168b3812718b5fcd497c0e3b8) M sys/kern/kern_kthread.c _____________________________________________________________________________________________________________ Commit: afc31e48e0e4c6062843c8708ce7d835ae1234ed URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=afc31e48e0e4c6062843c8708ce7d835ae1234ed Author: Alan Somers (Tue 23 Jun 2026 21:48:06 BST) Committer: Alan Somers (Wed 5 Aug 2026 16:09:01 BST) fusefs: proofread an error message in the tests Reported by: otis Fixes: 2c1482e3053 ("fusefs: fix a race in the pre-init tests") Sponsored by: ConnectWise (cherry picked from commit 381ebe25f0b9fae5b3470e9c6e0767909e0fa85a) M tests/sys/fs/fusefs/mockfs.cc _____________________________________________________________________________________________________________ Commit: 1fcd8291b9efc99e1d80e8e130f45c66e54d777e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1fcd8291b9efc99e1d80e8e130f45c66e54d777e Author: Alan Somers (Tue 23 Jun 2026 18:12:04 BST) Committer: Alan Somers (Wed 5 Aug 2026 16:08:50 BST) fusefs: fix a race in the pre-init tests These tests allow the user to customize the INIT response. But it's necessary to block the daemon's service loop from running until those expectations have been set. This race has never caused failures before simply due to luck. But now it's failing on slower platforms. PR: 296236 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296236 ) Reported by: siva Sponsored by: ConnectWise Reviewed by: siva Differential Revision: https://reviews.freebsd.org/D57781 (cherry picked from commit 2c1482e305368af182a7bde0e53d0d180b319326) M tests/sys/fs/fusefs/mockfs.cc M tests/sys/fs/fusefs/mockfs.hh M tests/sys/fs/fusefs/pre-init.cc _____________________________________________________________________________________________________________ Commit: 3b0a51cc8731e12c4947cadd612562868639a2c3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3b0a51cc8731e12c4947cadd612562868639a2c3 Author: Mark Johnston (Fri 31 Jul 2026 20:47:20 BST) Committer: Konstantin Belousov (Wed 5 Aug 2026 07:23:21 BST) ptrace: Propagate errors from set_fpregs() (cherry picked from commit 1932bd20ed53f2e695a576cffd183937ed25de3f) M sys/kern/imgact_elf.c _____________________________________________________________________________________________________________ Commit: 2f9a4885ec995e8ea53b42a820fbd9c337a2a907 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2f9a4885ec995e8ea53b42a820fbd9c337a2a907 Author: Konstantin Belousov (Thu 30 Jul 2026 04:57:34 BST) Committer: Konstantin Belousov (Wed 5 Aug 2026 07:23:16 BST) amd64: do not allow to set reserved bits in MXCSR for ptrace(PT_SETFPREGS) (cherry picked from commit cef05c5a62ba63eda222eed083972bfaa1449ac2) M sys/amd64/amd64/exec_machdep.c _____________________________________________________________________________________________________________ Commit: 838878fc632e8defadd45eef33fafed9bf598e13 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=838878fc632e8defadd45eef33fafed9bf598e13 Author: Konstantin Belousov (Wed 22 Jul 2026 10:36:17 BST) Committer: Konstantin Belousov (Wed 5 Aug 2026 07:22:24 BST) getpgrp(2), getsid(2): allow to call on zombies (cherry picked from commit 8f320c2bc473a775ea9a55d17fa61f729e593867) M sys/kern/kern_prot.c _____________________________________________________________________________________________________________ Commit: bdf902719e33d3dbcb91f95619e9b2d7d6a14dd4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bdf902719e33d3dbcb91f95619e9b2d7d6a14dd4 Author: Alan Somers (Sun 14 Jun 2026 18:37:15 BST) Committer: Alan Somers (Wed 5 Aug 2026 04:21:50 BST) fusefs: fix error handling when reading a directory's sticky bit When trying to delete or rename a file, fuse_vnop_lookup must check whether its parent directory's sticky bit is set. Realistically, the parent directory's attributes will almost always be cached. But it's possible that they won't be, and in that case we must send a new FUSE_GETATTR request to the server. If that request fails for some reason, then we must fail the lookup. Prior to this change fusefs would ignore failure of that request. Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu of Tsinghua University Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57588 (cherry picked from commit b4af6a4cccc3b4b0ea461463196c258eb92ad2e5) M sys/fs/fuse/fuse_vnops.c M tests/sys/fs/fusefs/default_permissions.cc _____________________________________________________________________________________________________________ Commit: c77cb022906de74fe69b218638b8776c1095b573 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c77cb022906de74fe69b218638b8776c1095b573 Author: CismonX (Fri 20 Jun 2025 10:41:46 BST) Committer: Alan Somers (Wed 5 Aug 2026 03:36:08 BST) fusefs: only search for FREAD fufh in readdir The extra search for an FEXEC fufh shall be removed, since readdir is only supposed to be called on a directory opened with FREAD. The sole exception is NFS, which will call VOP_READDIR with directories that aren't open at all. fuse already has special code to handle that. Also remove the fuse_filehandle_get_dir() function, since it's not used anywhere else. Signed-off-by: CismonX Reviewed by: asomers Pull Request: https://github.com/freebsd/freebsd-src/pull/1729 (cherry picked from commit 4179f1d9deed83977f159c8afea204293ef4c7d7) M sys/fs/fuse/fuse_vnops.c _____________________________________________________________________________________________________________ Commit: 66c61a685c73aacf92aa0ecdadeff5f38332d669 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=66c61a685c73aacf92aa0ecdadeff5f38332d669 Author: Alan Somers (Tue 28 Apr 2026 00:46:53 BST) Committer: Alan Somers (Wed 5 Aug 2026 03:23:12 BST) Fix LOCAL_PEERCRED in 32-bit compat mode Previously the cr_pid field would be incorrectly copied to userland, due to a size mismatch between the structure as defined in 32-bit vs 64-bit builds. Fix it by converting the structure before copying it to userland. PR: 294833 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294833 ) Sponsored by: ConnectWise Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D56675 (cherry picked from commit 1d24638d3e8875e4b99a4b5e39f4241e37221b3d) linuxulator: fix SO_PEERCRED emulation after 1d24638d3e8 For Linux binaries, sopt->sopt_td may be null. And there's also no need to check it, since struct l_ucred has the same layout on 32-bit systems as on 64-bit ones. PR: 295333 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295333 ) Reported by: Miguel Gomes Fixes: 1d24638d3e8 ("Fix LOCAL_PEERCRED in 32-bit compat mode") Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D57032 (cherry picked from commit 4cee16d471d47f4673e4d2c66f7a96d4e6d86ee9) M sys/kern/uipc_usrreq.c M sys/sys/ucred.h _____________________________________________________________________________________________________________ Commit: c3be3a784c2b16b18ac8322dbf7863587f278bb9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c3be3a784c2b16b18ac8322dbf7863587f278bb9 Author: Alan Somers (Sat 2 May 2026 00:06:35 BST) Committer: Alan Somers (Wed 5 Aug 2026 03:18:14 BST) ping: fix listing test cases when scapy is not installed The ATF-python test program was attempting to list test cases that require scapy. But it attempted to import the scapy module before the test cases had been listed, resulting in an ImportError that kyua interpreted as a test program crash. Fix this behavior by handling that ImportError well enough to list test cases, but not run them. If scapy isn't present, Kyua will refuse to run the test cases. But it needs to be able to list them in order to know to skip them. Sponsored by: ConnectWise Reviewed by: maxim Differential Revision: https://reviews.freebsd.org/D56765 (cherry picked from commit 3e845b1090565912375c5578cf0399d27b7fa70c) M sbin/ping/tests/test_ping.py _____________________________________________________________________________________________________________ Commit: a4ebad0c202f5c2d08381d2ac732729cd386388f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a4ebad0c202f5c2d08381d2ac732729cd386388f Author: Alan Somers (Mon 30 Mar 2026 15:22:07 BST) Committer: Alan Somers (Wed 5 Aug 2026 02:55:00 BST) fusefs: better handling for low-memory conditions Under conditions of low memory, getblk can fail. fusefs was not handling those failures very systematically. It was always using PCATCH, which appears to have been originally copy/pasted from the NFS client code, but isn't always appropriate: * During fuse_vnode_setsize_immediate, which can be called from many different VOPs and from the vn_delayed_setsize mechanism, remove PCATCH. Some of these callers cannot tolerate allocate failure. * In fuse_inval_buf_range, don't assume that getblk will always succeed. * When calling fuse_inval_buf_range from VOP_ALLOCATE, VOP_COPY_FILE_RANGE, or VOP_WRITE (with IO_DIRECT), return EINTR if the allocation fails. * When calling fuse_inval_buf_range from VOP_DEALLOCATE, remove PCATCH. This VOP must not fail with EINTR. No new tests, because I can't force any particular getblk call to fail. PR: 293957 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293957 ) Sponsored by: ConnectWise Reported by: zjk7@wp.pl (cherry picked from commit 374548e930bd9452351059c14e697036d903b1c4) M sys/fs/fuse/fuse_node.c M sys/fs/fuse/fuse_vnops.c _____________________________________________________________________________________________________________ Commit: 3943f7b565da92cf1a63126a14c9d27cc32e6c15 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3943f7b565da92cf1a63126a14c9d27cc32e6c15 Author: Alan Somers (Tue 14 Apr 2026 18:35:54 BST) Committer: Alan Somers (Wed 5 Aug 2026 02:53:35 BST) CTL: add ATF tests for REPORT SUPPORTED OPCODES This includes a regression test for CVE-2024-42416 Sponsored by: ConnectWise Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D46613 (cherry picked from commit 6dd86310e54d3f2dd9f688670913b9176176246c) M tests/sys/cam/ctl/Makefile A tests/sys/cam/ctl/all-supported-opcodes.txt A tests/sys/cam/ctl/opcodes.sh _____________________________________________________________________________________________________________ Commit: 8fa2c020b8d1bfae040a86dca2e8a77c7f74da25 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8fa2c020b8d1bfae040a86dca2e8a77c7f74da25 Author: Alan Somers (Tue 17 Feb 2026 00:27:02 GMT) Committer: Alan Somers (Wed 5 Aug 2026 02:51:15 BST) aio(4) tests: do not rely on (int *)-1 being invalid address Explicitly mmap guard and use it as the invalid address instead. (cherry picked from commit dc9a8d300ba5c4c319589d78231e9d0e76576cbf) M tests/sys/aio/aio_test.c _____________________________________________________________________________________________________________ Commit: 8c15c141db928c42314f2d6d972c022de20df757 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8c15c141db928c42314f2d6d972c022de20df757 Author: Jose Luis Duran (Wed 29 Jul 2026 17:11:53 BST) Committer: Jose Luis Duran (Wed 5 Aug 2026 01:26:04 BST) boot0cfg: Also allow a file as a trailing argument Modify the disk check to allow arbitrary files as the trailing argument instead of requiring a live GEOM disk provider. This enables modifying a boot0 binary file in-place before flashing it to a disk via gpart bootcode, or using it directly as an argument to mkimg's partition specification, as these tools cannot directly adjust the parameters of the boot0 boot manager. Reviewed by: imp, jhb MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D57310 (cherry picked from commit 4007d914e7973bca8ac488ab50aca56964eed90f) M usr.sbin/boot0cfg/boot0cfg.8 M usr.sbin/boot0cfg/boot0cfg.c _____________________________________________________________________________________________________________ Commit: ac134a488a6e50d47df3ec5f45604a8b30ca4021 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ac134a488a6e50d47df3ec5f45604a8b30ca4021 Author: Kevin Bowling (Sat 1 Aug 2026 03:38:54 BST) Committer: Kevin Bowling (Tue 4 Aug 2026 19:41:36 BST) ixl: enforce the assigned VF MAC address When allow-set-mac is disabled, the MAC filter validation condition rejects the assigned VF unicast address while allowing any different unicast address. The equality test was accidentally inverted when this code moved to the boolean address helper. Accept multicast and the assigned unicast address, and reject other unicast addresses as intended. Fixes: 7d4dceec1030 ("ixl(4): Fix VLAN HW filtering") (cherry picked from commit d2309d9d6dc6d5a9141314652d6c96ab46a9a62c) M sys/dev/ixl/ixl_pf_iov.c _____________________________________________________________________________________________________________ Commit: 35d56f200e94336d5f3baac7f124fbe93f82a98e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=35d56f200e94336d5f3baac7f124fbe93f82a98e Author: Olivier Houchard (Fri 24 Jul 2026 00:47:21 BST) Committer: Olivier Houchard (Tue 4 Aug 2026 11:28:40 BST) arm64: Use the fault handler when one is provided In align_abort() and tag_check_abort(), if we got a fault while in kernel, do not panic if a fault handler has been provided. We may get such a fault when trying to read or write userland data, it can at least happen with _umtx_op() if an unaligned pointer is provided. Instead, just let the fault handler deal with it. MFC After: 1 week Approved by: andrew Differential Revision: https://reviews.freebsd.org/D58426 (cherry picked from commit c6f5d8fb269fd67a8206420b4e7d67a93bc80733) Signed-off-by: Olivier Houchard (cherry picked from commit 60dd46db19f473af7aa505c0d8dcf9bb69847019) Signed-off-by: Olivier Houchard M sys/arm64/arm64/trap.c _____________________________________________________________________________________________________________ Commit: aa8ffe6fbac70cccb7bb7519b4f98b7e13af25ee URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=aa8ffe6fbac70cccb7bb7519b4f98b7e13af25ee Author: Olivier Cochard (Tue 28 Jul 2026 20:13:53 BST) Committer: Olivier Cochard (Tue 4 Aug 2026 10:51:25 BST) e1000: report UDP RSS hash type on igb/em {em,igb}_determine_rsstype() mapped only the TCP and bare-IP RSS descriptor types; the UDP types returned M_HASHTYPE_NONE. The hardware does hash UDP, but with a NONE hashtype iflib skips its flowid-based TX queue spread, so all forwarded UDP egressed on a single queue and serialized transmit on one core. Add the three UDP cases (IPV4_UDP, IPV6_UDP, IPV6_UDP_EX) so egress spreads across all TX queues. Reviewed by: kbowling, gallatin Approved by: kbowling MFC after: 1 week MFC to: stable/14, stable/15 Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D58513 (cherry picked from commit 285c749f575ed7f9e60555037f23ac673084c62a) M sys/dev/e1000/em_txrx.c M sys/dev/e1000/igb_txrx.c _____________________________________________________________________________________________________________ Commit: db2dc24da9d6fadd8cae0f36d8458f7ee5ab336b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=db2dc24da9d6fadd8cae0f36d8458f7ee5ab336b Author: Olivier Cochard (Tue 28 Jul 2026 20:06:27 BST) Committer: Olivier Cochard (Tue 4 Aug 2026 10:49:32 BST) hwpmc: fix event allocation on pre-Zen AMD CPUs amd_allocate_pmc() chose the pmu-events code path whenever pmc_cpuid was non-empty, and rejected any allocation lacking PMC_F_EV_PMU. But pmc_cpuid is set for every AMD CPU, while the pmu-events tables only cover Zen and later. On older families (K8, Bobcat, Jaguar/16h, Bulldozer) libpmc finds no pmu-events entry and falls back to the legacy path, which never sets PMC_F_EV_PMU. Reviewed by: mhorne Approved by: mhorne MFC after: 1 week Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D58468 (cherry picked from commit 6c4d9b9af1a3b247bf82a4228c835d106f535613) M sys/dev/hwpmc/hwpmc_amd.c _____________________________________________________________________________________________________________ Commit: f7fd5a57b08c2cf1d243296b953f1f0b7dc8cfd4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f7fd5a57b08c2cf1d243296b953f1f0b7dc8cfd4 Author: Enji Cooper (Wed 22 Jul 2026 20:53:31 BST) Committer: Alexander Leidinger (Mon 3 Aug 2026 18:31:04 BST) tests/sys/pmc: only build if MK_PMC != no This unbreaks the build when pmc support is explicitly disabled via the aforementioned build knob. MFC after: 10 days Fixes: 2cfd82f74 ("hwpmc: add regression tests for ...") Differential Revision: https://reviews.freebsd.org/D58401 (cherry picked from commit a18e773d2776a65c1a2a0418cbec9cf5ef526b53) M tests/sys/Makefile _____________________________________________________________________________________________________________ Commit: 6d85b0a8761fcd8ca838ecf408a796885569ddac URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6d85b0a8761fcd8ca838ecf408a796885569ddac Author: Alexander Leidinger (Sun 19 Jul 2026 13:15:20 BST) Committer: Alexander Leidinger (Mon 3 Aug 2026 18:31:03 BST) hwpmc: add regression tests for detaching a live process-mode PMC Attach a process-mode counting PMC to the current process, start it, then detach and release it while it is still loaded on the hardware - the case that previously leaked the PMC's runcount reference and wedged pmc_wait_for_pmc_idle() at release. A second case does the same from a multi-threaded process so the sibling threads' references have to be drained too. The tests need an allocatable process-mode counting event and skip where none is available (hwpmc(4) not loaded, or a VM without a vPMU). Reviewed by: adrian MFC after: 2 weeks Assisted-by: Claude Code (Fable 5) Differential Revision: https://reviews.freebsd.org/D58343 (cherry picked from commit 3c3f886e4bc7619f7847ad0d0f996088ddf5915a) M tests/sys/pmc/Makefile A tests/sys/pmc/pmc_detach_test.c _____________________________________________________________________________________________________________ Commit: 34afb930b25e9469424166146533f7a32359cfc0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=34afb930b25e9469424166146533f7a32359cfc0 Author: Alexander Leidinger (Sun 19 Jul 2026 12:39:27 BST) Committer: Alexander Leidinger (Mon 3 Aug 2026 18:31:03 BST) hwpmc: drain a process-mode PMC's runcount when a live target detaches A process-mode PMC's runcount tracks how many CPUs currently have it loaded in hardware. It is decremented only by the context-switch-out and process-exit reclaim paths, both of which the scheduler invokes only for processes flagged P_HWPMC. Detaching a target that still has the PMC live in hardware dropped the target and cleared P_HWPMC without taking the PMC off the hardware or dropping the runcount reference, so the reference leaked. A subsequent release then spun in pmc_wait_for_pmc_idle() forever waiting for the runcount to reach zero: on an INVARIANTS kernel this panics ("waiting too long for pmc to be free"), otherwise it is an unkillable loop holding the hwpmc lock. Any process able to allocate a PMC can trigger this by attaching a counting PMC to itself and detaching it before releasing. Take the PMC off the hardware and drop the runcount reference as part of detaching, before P_HWPMC is cleared: reclaim it from the detaching thread's own CPU directly, and, when the detach removes the PMC's last target, wait for any references held by the target's other threads to drain while P_HWPMC is still set (they can no longer reload it). Reviewed by: adrian MFC after: 2 weeks Assisted-by: Claude Code (Fable 5) Differential Revision: https://reviews.freebsd.org/D58342 (cherry picked from commit 86fa065f1862f3b638efa1868523878d9db14ada) M sys/dev/hwpmc/hwpmc_mod.c _____________________________________________________________________________________________________________ Commit: ac3d63e50862b6031feb839932c88b1a4c5a5c1f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ac3d63e50862b6031feb839932c88b1a4c5a5c1f Author: Alexander Leidinger (Sun 19 Jul 2026 09:08:48 BST) Committer: Alexander Leidinger (Mon 3 Aug 2026 18:31:02 BST) hwpmc: add regression tests for counting-PMC counter wraparound Exercise a process-mode counting PMC whose accumulated count crosses, or already exceeds, the range of the underlying hardware counter. Before the previous commit, the first context switch after the hardware counter wrapped panicked INVARIANTS kernels with "negative increment" and silently corrupted the accumulated count on other kernels. The tests need a hardware counting event backed by a counter narrower than 64 bits and skip where none is available (hwpmc(4) not loaded, or a VM without a vPMU). Reviewed by: adrian MFC after: 2 weeks Assisted-by: Claude Code (Fable 5) Differential Revision: https://reviews.freebsd.org/D58341 (cherry picked from commit 2cfd82f747c04f68f679824ba627460e87ab3848) M etc/mtree/BSD.tests.dist M tests/sys/Makefile A tests/sys/pmc/Makefile A tests/sys/pmc/pmc_wrap_test.c _____________________________________________________________________________________________________________ Commit: 4ca8afd1d15c35923b136b0d8e4a3cff49c8417a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4ca8afd1d15c35923b136b0d8e4a3cff49c8417a Author: Alexander Leidinger (Sun 19 Jul 2026 08:38:52 BST) Committer: Alexander Leidinger (Mon 3 Aug 2026 18:31:02 BST) hwpmc: handle counter wraparound for process-mode counting PMCs The accumulated count of a process-mode counting PMC is kept in a 64-bit software counter and seeded into the hardware counter at every context switch in. Hardware counters are narrower than that - each PMC class discovers and records its own counter width, e.g. 48 bits on current x86 (queried from CPUID on Intel, architectural on AMD) - so once the accumulated count approaches the end of the hardware counter range, the counter wraps during a time slice and the value read back at switch out is smaller than the value seeded. The increment was computed assuming a full 64-bit counter: on INVARIANTS kernels a long enough counting run panics with "negative increment" the moment the accumulated count first crosses the hardware counter range, and on other kernels the totals silently lose a full counter range per wrap. Compute the increment modulo the per-class hardware counter width instead, in both places that accumulate switch-out deltas. Reviewed by: adrian MFC after: 2 weeks Assisted-by: Claude Code (Fable 5) Differential Revision: https://reviews.freebsd.org/D58340 (cherry picked from commit e42703f5c4b2d3a869b17e2cb8670f1b6359c8cf) M sys/dev/hwpmc/hwpmc_mod.c _____________________________________________________________________________________________________________ Commit: 58c826d7291813f385ad87107474aa73fb1d938d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=58c826d7291813f385ad87107474aa73fb1d938d Author: Dag-Erling Smørgrav (Mon 27 Jul 2026 19:51:50 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:14 BST) pwait: Fix pwait_normal test case Reported by: markj Fixes: e115066370dc ("pwait: Test the new -r option") (cherry picked from commit 51c0cdb04919f776516a7fac8529e7279ea5efad) M bin/pwait/tests/pwait_reap.c _____________________________________________________________________________________________________________ Commit: 04753df6c7de6f4300a9545b7199ee1bc6ede0d9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=04753df6c7de6f4300a9545b7199ee1bc6ede0d9 Author: Dag-Erling Smørgrav (Mon 27 Jul 2026 11:26:41 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:14 BST) Bump dates Fixes: c8f5e6819d4d ("pwait: Optionally wait until process is reaped") Fixes: eddd8aa99ca8 ("pwait: Add a SIGINFO handler") Fixes: 356d0b79cf6f ("rc.subr: Fix premature return from wait_for_pids") (cherry picked from commit 9d852922f6687ce9a699efe5e09e3634923b2b60) M UPDATING M bin/pwait/pwait.1 M lib/libc/sys/kqueue.2 _____________________________________________________________________________________________________________ Commit: 934fde21fa2b84298cde99649d28454caceebf93 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=934fde21fa2b84298cde99649d28454caceebf93 Author: Dag-Erling Smørgrav (Mon 27 Jul 2026 11:15:47 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:14 BST) rc.subr: Fix premature return from wait_for_pids Use pwait's new -r option to wait until the target processes have not only terminated, but also been reaped. PR: 293183 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293183 ) MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D58391 (cherry picked from commit 356d0b79cf6fc693ed1a5564232e240ce15ccb8a) M UPDATING M libexec/rc/rc.subr M libexec/rc/tests/rc_subr_test.sh _____________________________________________________________________________________________________________ Commit: 4e6679c9c422b0b591a84413181fa4e90beb37a1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4e6679c9c422b0b591a84413181fa4e90beb37a1 Author: Dag-Erling Smørgrav (Mon 27 Jul 2026 11:15:41 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:13 BST) pwait: Test the new -r option Test that pwait without -r reports a process as soon as it terminates, while pwait with -r does not report it until it has been reaped. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D58385 (cherry picked from commit e115066370dcfec410d914362756d09c268a5b4e) M bin/pwait/tests/Makefile A bin/pwait/tests/pwait_reap.c _____________________________________________________________________________________________________________ Commit: 19723c77825e90dd2669ca371250966e5303e83d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=19723c77825e90dd2669ca371250966e5303e83d Author: Dag-Erling Smørgrav (Mon 27 Jul 2026 11:15:36 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:13 BST) pwait: Add a SIGINFO handler On SIGINFO, print a space-separated list or remaining processes to standard error. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: kib, markj Differential Revision: https://reviews.freebsd.org/D58386 (cherry picked from commit eddd8aa99ca84c85faea5761af800b5b089d6ba1) M bin/pwait/pwait.1 M bin/pwait/pwait.c _____________________________________________________________________________________________________________ Commit: ae3c852dfbd883af905f38a6a1c5ebae0224135b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ae3c852dfbd883af905f38a6a1c5ebae0224135b Author: Dag-Erling Smørgrav (Mon 27 Jul 2026 11:15:31 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:13 BST) pwait: Optionally wait until process is reaped If the new -r option is specified, wait until the target process not only terminates but is reaped. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: kib, markj Differential Revision: https://reviews.freebsd.org/D58314 (cherry picked from commit c8f5e6819d4d81906c4a1641b5c9f02d8730481c) M bin/pwait/pwait.1 M bin/pwait/pwait.c _____________________________________________________________________________________________________________ Commit: b58c9e8cf6acef2774ebb87dd79eecfa31618d6a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b58c9e8cf6acef2774ebb87dd79eecfa31618d6a Author: Dag-Erling Smørgrav (Mon 27 Jul 2026 11:15:26 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:13 BST) kqueue: Add NOTE_REAP Add a NOTE_REAP event for EVFILTER_PROC which provides a notification when the process is reaped. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: kib, markj Differential Revision: https://reviews.freebsd.org/D58313 (cherry picked from commit 2bacbbecb165dd761ea7ec2fc35630db61508cdf) M lib/libc/sys/kqueue.2 M lib/libsysdecode/flags.c M sys/kern/kern_event.c M sys/kern/kern_exit.c M sys/kern/sys_procdesc.c M sys/sys/event.h _____________________________________________________________________________________________________________ Commit: c4700dbbf9b56887208e2967eacdc98cba34aab2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c4700dbbf9b56887208e2967eacdc98cba34aab2 Author: Dag-Erling Smørgrav (Sat 25 Jul 2026 13:44:35 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:13 BST) pwait: Don't use init as a target The time_unit test case uses PID 1 as a target for pwait. This doesn't work in a jail. Since all we need is a process that we know won't die while the test is running, we may as well use ourselves. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: ngie Differential Revision: https://reviews.freebsd.org/D58418 (cherry picked from commit 5922e9d7e72bfa8a85b0f37bcfd1a8b5d866ec3b) M bin/pwait/tests/pwait_test.sh _____________________________________________________________________________________________________________ Commit: 70b3d322e5b028e9e098f5cea62164af7d9c6fa3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=70b3d322e5b028e9e098f5cea62164af7d9c6fa3 Author: Dag-Erling Smørgrav (Thu 23 Jul 2026 07:06:32 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:13 BST) kqueue: Fix delivery of unwanted events In both procdesc_kqops_event() and filt_proc(), the event variable can have more than one bit set. This means that: * We cannot compare it directly with NOTE_EXIT; we must binary-and them instead. * We cannot binary-or it with the report mask; we must binary-and it with the request mask first. MFC after: 1 week Fixes: 2a5e58c59694 ("procdesc: add NOTE_PDSIGCHLD") Fixes: b328975b9d7c ("procdesc: report NOTE_PDSIGCHLD for traced and stopped process") Reviewed by: kib, markj Differential Revision: https://reviews.freebsd.org/D58395 (cherry picked from commit 4627fe9e5afc0dce4469f5964f5d4b0e49a24274) M sys/kern/kern_event.c M sys/kern/sys_procdesc.c _____________________________________________________________________________________________________________ Commit: 6bfcca26efbc250998cec5c1109d9a4d1a1b0b6f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6bfcca26efbc250998cec5c1109d9a4d1a1b0b6f Author: Dag-Erling Smørgrav (Wed 22 Jul 2026 13:23:53 BST) Committer: Dag-Erling Smørgrav (Mon 3 Aug 2026 12:32:13 BST) unbound: Update to 1.25.2 Release notes at https://community.nlnetlabs.nl/t/unbound-1-25-2-released Merge commit 'c68e7bcd81d62e9f5364c6da22fd9917976acf85' Security: CVE-2026-14586 Security: CVE-2026-32665 Security: CVE-2026-40691 Security: CVE-2026-41637 Security: CVE-2026-42955 Security: CVE-2026-44621 Security: CVE-2026-44687 Security: CVE-2026-44690 Security: CVE-2026-46582 Security: CVE-2026-50045 Security: CVE-2026-50046 Security: CVE-2026-50243 Security: CVE-2026-50248 Security: CVE-2026-50251 Security: CVE-2026-50252 Security: CVE-2026-52863 Security: CVE-2026-54478 Security: CVE-2026-55708 Security: CVE-2026-55717 Security: CVE-2026-55973 Security: CVE-2026-55990 Security: CVE-2026-55991 Security: CVE-2026-56416 Security: CVE-2026-56444 (cherry picked from commit e27b1cae848219d07f0a12a48990af0558b4cced) M contrib/unbound/config.guess M contrib/unbound/config.sub M contrib/unbound/configure M contrib/unbound/configure.ac M contrib/unbound/daemon/daemon.c M contrib/unbound/daemon/daemon.h M contrib/unbound/daemon/remote.c M contrib/unbound/daemon/worker.c M contrib/unbound/daemon/worker.h M contrib/unbound/dnscrypt/dnscrypt.c M contrib/unbound/dnscrypt/dnscrypt.h M contrib/unbound/dnstap/unbound-dnstap-socket.c M contrib/unbound/doc/README M contrib/unbound/doc/example.conf M contrib/unbound/doc/example.conf.in M contrib/unbound/doc/libunbound.3 M contrib/unbound/doc/libunbound.3.in M contrib/unbound/doc/unbound-anchor.8 M contrib/unbound/doc/unbound-anchor.8.in M contrib/unbound/doc/unbound-checkconf.8 M contrib/unbound/doc/unbound-checkconf.8.in M contrib/unbound/doc/unbound-control.8 M contrib/unbound/doc/unbound-control.8.in M contrib/unbound/doc/unbound-host.1 M contrib/unbound/doc/unbound-host.1.in M contrib/unbound/doc/unbound.8 M contrib/unbound/doc/unbound.8.in M contrib/unbound/doc/unbound.conf.5 M contrib/unbound/doc/unbound.conf.5.in M contrib/unbound/doc/unbound.conf.rst M contrib/unbound/iterator/iter_donotq.c M contrib/unbound/iterator/iterator.c M contrib/unbound/libunbound/libworker.c M contrib/unbound/libunbound/libworker.h M contrib/unbound/respip/respip.c M contrib/unbound/services/authzone.c M contrib/unbound/services/cache/dns.c M contrib/unbound/services/cache/rrset.c M contrib/unbound/services/listen_dnsport.c M contrib/unbound/services/listen_dnsport.h M contrib/unbound/services/localzone.h M contrib/unbound/services/mesh.c M contrib/unbound/services/mesh.h M contrib/unbound/services/outside_network.c M contrib/unbound/services/outside_network.h M contrib/unbound/smallapp/worker_cb.c M contrib/unbound/util/data/msgparse.c M contrib/unbound/util/data/packed_rrset.c M contrib/unbound/util/fptr_wlist.c M contrib/unbound/util/module.h M contrib/unbound/util/netevent.c M contrib/unbound/util/netevent.h M contrib/unbound/validator/val_sigcrypt.c M contrib/unbound/validator/val_utils.c M contrib/unbound/validator/val_utils.h M contrib/unbound/validator/validator.c M lib/libunbound/config.h _____________________________________________________________________________________________________________ Commit: 3393002307adefac3ad21482853c32a53d4a424c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3393002307adefac3ad21482853c32a53d4a424c Author: Rick Macklem (Mon 27 Jul 2026 15:16:29 BST) Committer: Rick Macklem (Mon 3 Aug 2026 02:09:08 BST) nfs_commonkrpc.c: Handle NFSERR_DELAY for Sequence correctly Unlike RFC5661 (the original NFSv4.1 RFC), RFC8881 specifies that a NFS4ERR_DELAY reply to the SEQUENCE operation requires a reply using the same slot/sequence#. This patch fixes handling of this case, so it conforms to RFC8881. (cherry picked from commit 6901cbbd5a2c00d378a7f87426b36d6ee6ce0aa2) M sys/fs/nfs/nfs_commonkrpc.c _____________________________________________________________________________________________________________ Commit: 8a9ae26afca3b69050b8464bebb79011eb76abe5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8a9ae26afca3b69050b8464bebb79011eb76abe5 Author: Dag-Erling Smørgrav (Thu 23 Jul 2026 07:21:08 BST) Committer: Dag-Erling Smørgrav (Sun 2 Aug 2026 21:00:36 BST) cp: Correct description of SIGINFO The manual page claimed that SIGINFO caused information to be printed to stdout, when in fact it is printed to stderr, as one would expect. This has been true ever since the feature was first added in 2003. MFC after: 1 week Fixes: 00d321a2b395 ("Add a SIGINFO handler.") Reviewed by: jilles Differential Revision: https://reviews.freebsd.org/D58392 (cherry picked from commit 5dc400ff452b0259f0c50474255ebe6e5e02edb9) M bin/cp/cp.1 _____________________________________________________________________________________________________________ Commit: 70fffab7460f4c19bd113563bbd7f16708756ae1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=70fffab7460f4c19bd113563bbd7f16708756ae1 Author: Dag-Erling Smørgrav (Thu 30 Jul 2026 17:36:27 BST) Committer: Dag-Erling Smørgrav (Sun 2 Aug 2026 20:55:00 BST) libfetch: Further improve connection polling * Reorganize the connection loop to make it a little more readable * Start the timeout clock earlier * Correctly calculate the poll timeout before calling poll() * Don't leak the socket on failure Fixes: 848f360c8f9a ("libfetch: Apply timeout to connection attempts") Fixes: b02e02958dad ("libfetch: Fix handling of connection failures") MFC after: 3 days Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D58512 (cherry picked from commit 351ed134887fe5b8da39d22fcb267c96ab009ca2) M lib/libfetch/common.c _____________________________________________________________________________________________________________ Commit: b56bd4c444948f6e353c489cf4f17e0c05dbd46b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b56bd4c444948f6e353c489cf4f17e0c05dbd46b Author: Mark Johnston (Mon 27 Jul 2026 19:58:34 BST) Committer: Dag-Erling Smørgrav (Sun 2 Aug 2026 20:55:00 BST) libfetch: Fix handling of connection failures After commit 848f360c8f9a, if one tries to connect to a closed port, fetch reports "Operation now in progress", which is rather confusing. Return a more useful error message, restoring the old behaviour. Fixes: 848f360c8f9a ("libfetch: Apply timeout to connection attempts") Reviewed by: des MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D58481 (cherry picked from commit b02e02958dad2d5ce3675cbc18b9a94635d09e66) M lib/libfetch/common.c _____________________________________________________________________________________________________________ Commit: 094ed249e2a2b285f8144db2255079bafff36ca3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=094ed249e2a2b285f8144db2255079bafff36ca3 Author: Pouria Mousavizadeh Tehrani (Thu 30 Jul 2026 14:41:51 BST) Committer: Pouria Mousavizadeh Tehrani (Sun 2 Aug 2026 14:22:28 BST) if_vxlan(4): Fix panic by validating unused drvspec values Add validation for unused parameter values in the gap between VXLAN_PARAM_WITH_LOCAL_ADDR4 and VXLAN_PARAM_WITH_LOCAL_ADDR6 to prevent panics. PR: 297151 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297151 ) Reported by: Robert Morris Reviewed by: markj MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D58552 (cherry picked from commit c4d7745cd90fc99af3cbccfda7e11798ea7d187b) (cherry picked from commit f923f4739628fc5c80907dad8b69ae9b38269cd0) M sys/net/if_vxlan.c _____________________________________________________________________________________________________________ Commit: c60186322fa77ea119c0d015e343611bfa048dc2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c60186322fa77ea119c0d015e343611bfa048dc2 Author: Kevin Bowling (Sun 26 Jul 2026 01:10:38 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:27:20 BST) igc(4): document adaptive interrupt moderation Describe the disabled, adaptive, and low-latency settings and their interrupt-rate tradeoffs. (cherry picked from commit 297394e995e5ea1ea9bc85e609ca116255d51e97) M share/man/man4/igc.4 _____________________________________________________________________________________________________________ Commit: c303e5a0ac9dafb1bf4cb5c27eda7879d221b381 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c303e5a0ac9dafb1bf4cb5c27eda7879d221b381 Author: Kevin Bowling (Sun 26 Jul 2026 01:01:06 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:27:09 BST) igc: count TSO wire segments in the AIM counters The transmit path bills one packet of ipi_len bytes per request. For TSO that is the whole unsegmented payload, up to 64 KiB, rather than a packet size that appears on the wire. Count the segments the hardware emits and the header carried by each segment. Non-TSO accounting is unchanged. (cherry picked from commit e389a05164ccb1dd41ee8d7f09203b475322dd72) M sys/dev/igc/igc_txrx.c _____________________________________________________________________________________________________________ Commit: 010ed395bf5b7bd246ed3e7200c3fc15afd413a4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=010ed395bf5b7bd246ed3e7200c3fc15afd413a4 Author: Kevin Bowling (Sun 26 Jul 2026 01:00:22 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:26:57 BST) igc: use packet-size AIM Use the packet-size calculation introduced for igb(4) in a69ed8dfb381 and retained there until the iflib conversion in f2d6ace4a684. It derives interrupt holdoff from average packet size, so RSS queue count does not change its behavior. The calculation follows the pre-iflib igb code. Retain igc's normal and low-latency rate caps, and keep the current setting when an interval has no usable sample. (cherry picked from commit 01e7acd38d411c78caba1c4078bb3683f586e1c2) M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h _____________________________________________________________________________________________________________ Commit: a99fd9daa6519d951e3e68d858dd2201e55d6e09 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a99fd9daa6519d951e3e68d858dd2201e55d6e09 Author: Kevin Bowling (Sun 26 Jul 2026 00:58:58 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:26:47 BST) igc: synchronize interrupt moderation state Keep the saved EITR value synchronized with hardware across reinitialization. Correct EITR encoding, decoding, and MSI-X register selection, and reject nonpositive fallback rates. Apply the packet-buffer fallback without permanently disabling AIM. (cherry picked from commit e35533457530bb9db655e6137c2eea790e18b97b) M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h _____________________________________________________________________________________________________________ Commit: 7db1936ca0df93ed2db2fc42e9619e33222202a8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7db1936ca0df93ed2db2fc42e9619e33222202a8 Author: Kevin Bowling (Sun 26 Jul 2026 00:57:42 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:26:34 BST) igc: make AIM counter sampling coherent Sample free-running counters by delta instead of clearing them from the interrupt filter, which can race their producers. Publish byte and packet counts together at the TX and RX doorbells so each sample is coherent. Aggregate every TX ring assigned to the interrupt vector so unequal RX and TX queue counts are safe. Count RX bytes only after a frame is accepted. (cherry picked from commit 2290ea7f4311e899019fe77bf7c7775033af6b24) M sys/dev/igc/if_igc.c M sys/dev/igc/if_igc.h M sys/dev/igc/igc_txrx.c _____________________________________________________________________________________________________________ Commit: d182de314510e3e0cfee05753fb7babe4c01a758 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d182de314510e3e0cfee05753fb7babe4c01a758 Author: Kevin Bowling (Sun 26 Jul 2026 00:56:29 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:26:23 BST) igc: fix RX accounting for multi-descriptor packets The receive path adds the running packet length to rx_bytes for every descriptor. A packet spanning descriptors of length l1, l2, and l3 is therefore counted as 3*l1 + 2*l2 + l3. Add each descriptor length once. Single-descriptor accounting remains unchanged. (cherry picked from commit bbf0372feeb321a5bfeff7b1e79576ab01240441) M sys/dev/igc/igc_txrx.c _____________________________________________________________________________________________________________ Commit: 3edb66a3d6aa5e2c9c58a5f8f972a1a68ea644a3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3edb66a3d6aa5e2c9c58a5f8f972a1a68ea644a3 Author: Kevin Bowling (Sat 25 Jul 2026 23:09:48 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:26:11 BST) em(4): document adaptive interrupt moderation Describe the disabled, adaptive, and low-latency settings and their interrupt-rate tradeoffs. (cherry picked from commit b6b379b94781da5d4328f6f57273fbe7bd9dc687) M share/man/man4/em.4 _____________________________________________________________________________________________________________ Commit: dcf605e6711023feab55ddd6feddcbe682ad4760 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dcf605e6711023feab55ddd6feddcbe682ad4760 Author: Kevin Bowling (Sat 25 Jul 2026 13:33:38 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:26:00 BST) e1000: count TSO wire segments in the AIM counters The transmit paths billed one packet of ipi_len bytes per request. For TSO that is the whole unsegmented payload, up to 64KB, so the average size the moderation calculation sees is not a size that appears on the wire. Count the segments the hardware will put on the wire and the header each of them carries. Non-TSO accounting is unchanged. (cherry picked from commit 072e0983d7bce80356740324973993393e77023a) M sys/dev/e1000/em_txrx.c M sys/dev/e1000/igb_txrx.c _____________________________________________________________________________________________________________ Commit: a1281bfc313eafc275bfda39084e4ccd403e0632 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a1281bfc313eafc275bfda39084e4ccd403e0632 Author: Kevin Bowling (Sun 26 Jul 2026 00:49:31 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:25:49 BST) e1000: restore packet-size AIM Restore the packet-size calculation introduced in a69ed8dfb381 and used by igb(4) until the iflib conversion in f2d6ace4a684. It derives interrupt holdoff from average packet size, so RSS queue count does not change its behavior. The calculation follows the pre-iflib code. Retain the current normal and low-latency rate caps, and keep the current setting when an interval has no usable sample. Fixes: 3e501ef89667 ("e1000: Re-add AIM") (cherry picked from commit dc4a5087b160c1a94d135ab636642defe2c71c20) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: decb309534c796b38a8a279873d0bc509b5f10a4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=decb309534c796b38a8a279873d0bc509b5f10a4 Author: Kevin Bowling (Sun 26 Jul 2026 00:49:03 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:25:38 BST) e1000: synchronize interrupt moderation state Keep the saved EITR and PBA values synchronized with hardware across reinitialization. Correct EITR encoding, decoding, and MSI-X register selection, and reject nonpositive fallback rates. Treat only sub-gigabit links as sub-gigabit and apply the packet-buffer fallback without permanently disabling AIM. (cherry picked from commit 6ef368a29b11ebc769e7929566809b75ae2c1e90) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: 5a6f6e99b88ea0c85d48b70a97d94380bcc706f8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5a6f6e99b88ea0c85d48b70a97d94380bcc706f8 Author: Kevin Bowling (Sun 26 Jul 2026 00:48:15 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:25:22 BST) e1000: make AIM counter sampling coherent Sample free-running counters by delta instead of clearing them from the interrupt filter, which can race their producers. Publish byte and packet counts together at the TX and RX doorbells so each sample is coherent. Aggregate every TX ring assigned to the interrupt vector so unequal RX and TX queue counts are safe. Count RX bytes only after a frame is accepted. (cherry picked from commit bc5e7b0cbbb555ffebc7d73b273c421f9ee24c23) M sys/dev/e1000/em_txrx.c M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h M sys/dev/e1000/igb_txrx.c _____________________________________________________________________________________________________________ Commit: a0f27dcaf9a14c9c6ebbde41e0b82a481b87e77d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a0f27dcaf9a14c9c6ebbde41e0b82a481b87e77d Author: Kevin Bowling (Thu 19 Sep 2024 06:30:24 BST) Committer: Kevin Bowling (Sun 2 Aug 2026 05:24:15 BST) ixl: Increase tx/rx ring size to 8160 I've verified the tx queue (table 8-22) in addition. DPDK commit message net/i40e: increase max descriptor queue length According to the Intel X710/XXV710/XL710 Datasheet, the maximum receive queue descriptor length is 0x1FE0 (8160 in base 10). This is specified as QLEN in table 8-12, page 1083. I've tested this change with an XXV710 NIC and it has positive effect on performance under high load scenarios. Where previously I'd get ~2000 packets/sec miss rate, now I get only ~40 packets/sec miss rate. Signed-off-by: Igor Gutorov Acked-by: Morten Brørup Acked-by: Bruce Richardson Obtained from: DPDK (ce9470f) (cherry picked from commit 14561f1eda85fabfba2d764ca11e064ed871224e) M sys/dev/ixl/ixl.h _____________________________________________________________________________________________________________ Commit: 7acb9aa0af8339ce0272117b6d64eb8a04f35cd6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7acb9aa0af8339ce0272117b6d64eb8a04f35cd6 Author: Arthur Kiyanovski (Tue 14 Jul 2026 20:38:34 BST) Committer: Arthur Kiyanovski (Sat 1 Aug 2026 16:12:05 BST) ena: Update driver version to v2.8.4 Bug Fixes: * Fix false 'missing TX completions' warnings due to timestamp race * Put taskqueues into correct NUMA domain if !RSS Minor Changes: * Batch RX statistics updates * Swap RX/TX completions cleanup order Submitted by: Arthur Kiyanovski MFC after: 2 weeks Sponsored by: Amazon, Inc. Reviewed by: cperciva Differential Revision: https://reviews.freebsd.org/D58242 (cherry picked from commit 605e699cd6ca4feae6c73c5c5ea8337054897116) M sys/dev/ena/ena.h _____________________________________________________________________________________________________________ Commit: 69eb8cae87e6175d22b2392cf913762b7c804624 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=69eb8cae87e6175d22b2392cf913762b7c804624 Author: Gilad Ben Yakov (Sun 21 Jun 2026 13:45:38 BST) Committer: Arthur Kiyanovski (Sat 1 Aug 2026 16:12:05 BST) ena: Fix false 'missing TX completions' warnings due to timestamp race Sporadic 'Found a Tx that wasn't completed on time' warnings appear under sustained TX load, always reporting '1 msecs since last cleanup' despite the 5-second timeout threshold. The per-packet TX timestamp uses struct bintime (128 bits: two 64-bit fields sec and frac) which is read and written non-atomically. A race exists between the missing TX completion check (check_missing_comp_in_tx_queue reading the timestamp) and the TX submit path or cleanup path writing it on another CPU. Since the two fields are not updated atomically, the check can observe a partially written timestamp - one field from the old value and one from the new. This can produce a timestamp with {sec=0, frac=valid}, causing the check to compute a time offset equal to system uptime and falsely exceeding the 5-second timeout. Confirmed by instrumentation showing all occurrences had sec=0 with valid frac/mbuf, cleanup_running=0, and ticks==last_cleanup_ticks. Replace struct bintime with sbintime_t (a single 64-bit value) for tx_buf->timestamp. An aligned 64-bit store/load cannot be torn on 64-bit architectures. Additionally, snapshot the timestamp into a local variable in the check path to prevent a read-then-read race where the timestamp could be zeroed between the zero-check and the offset calculation. Testing: On m6i.large (FreeBSD 15.0-RELEASE-p6 amd64, 2 IO queues), two instances with MTU 1500. Ran iperf -P 20 -u -b 320kpps (CPU saturated at ~7 Gbps aggregate). Without the fix: 8 warnings in 6 hours (first at ~72 min). With the fix: 0 warnings after 20+ hours under identical conditions. Fixes: 9b8d05b8ac78 ("Add support for Amazon Elastic Network Adapter (ENA) NIC") Submitted by: Gilad Ben Yakov MFC after: 2 weeks Sponsored by: Amazon, Inc. Reviewed by: cperciva Differential Revision: https://reviews.freebsd.org/D58241 (cherry picked from commit 74bcb1151bb94279a4269fc842aa2be00800545e) M sys/dev/ena/ena.c M sys/dev/ena/ena.h M sys/dev/ena/ena_datapath.c _____________________________________________________________________________________________________________ Commit: 203735fee058c783a39d7f4441aad29994db493d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=203735fee058c783a39d7f4441aad29994db493d Author: David Arinzon (Thu 16 Apr 2026 12:22:04 BST) Committer: Arthur Kiyanovski (Sat 1 Aug 2026 16:12:05 BST) ena: Batch RX statistics updates Move per-packet counter_enter/counter_exit pairs out of the RX processing loop and batch them into a single update after the loop completes. Previously, each received packet triggered two separate counter_enter/counter_exit blocks -- one for bytes and one for packet count. This commit accumulates totals in local variables and updates all four counters (ring and hw stats for both packets and bytes) in a single counter_enter/counter_exit block after the loop. Also move the stats update to after the refill and LRO flush so that the error path (goto update_stats) and the normal path converge at the same label, avoiding code duplication. Submitted by: David Arinzon MFC after: 2 weeks Sponsored by: Amazon, Inc. Reviewed by: cperciva Differential Revision: https://reviews.freebsd.org/D58240 (cherry picked from commit 3ba01cb4c61cc1e29c4d1d7ea4b73cdffb5ce3c2) M sys/dev/ena/ena_datapath.c _____________________________________________________________________________________________________________ Commit: 9fd4065f4551e886cc09640f6672b4c860cf1d7b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9fd4065f4551e886cc09640f6672b4c860cf1d7b Author: Arthur Kiyanovski (Tue 14 Jul 2026 21:20:06 BST) Committer: Arthur Kiyanovski (Sat 1 Aug 2026 16:12:05 BST) ena: Swap cleanup order As RX processing is heavier than TX completions processing, swap the order and process TX completions first, in order to avoid starving the completions and causing potential missing TX completions. Submitted by: Ofir Tabachnik MFC after: 2 weeks Sponsored by: Amazon, Inc. Reviewed by: cperciva Differential Revision: https://reviews.freebsd.org/D58239 (cherry picked from commit f08def9ed97f45700eb0611a3fd9240210c9303e) M sys/dev/ena/ena_datapath.c _____________________________________________________________________________________________________________ Commit: 3a3937507af534413ff1a6422661e6d112c74579 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3a3937507af534413ff1a6422661e6d112c74579 Author: Kevin Bowling (Sat 25 Jul 2026 12:02:36 BST) Committer: Kevin Bowling (Sat 1 Aug 2026 01:25:17 BST) e1000: fix rx accounting for multi-descriptor packets The receive paths accumulate ri->iri_len across the descriptors making up a packet, then add that running total to rxr->rx_bytes on every iteration of the loop. A packet spanning descriptors of length l1, l2 and l3 thus contributes 3*l1 + 2*l2 + l3 instead of l1 + l2 + l3. Single descriptor packets, the common case, are accounted correctly, so this only shows up on jumbo frames. Add the per descriptor length instead. iflib memsets the if_rxd_info before each isc_rxd_pkt_get() call, so summing len gives the same total as the final iri_len, and the frame error path that returns without incrementing rx_packets keeps counting bytes exactly as before. (cherry picked from commit 41a46c2d46aa4078c597ce3a0d19323cab988277) M sys/dev/e1000/em_txrx.c M sys/dev/e1000/igb_txrx.c _____________________________________________________________________________________________________________ Commit: 7ed93a11014328f7aaea5f4ab8d557b514bf473b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7ed93a11014328f7aaea5f4ab8d557b514bf473b Author: Kevin Bowling (Sat 25 Jul 2026 22:00:10 BST) Committer: Kevin Bowling (Sat 1 Aug 2026 01:25:01 BST) e1000: Defer link-up notification until after TSO reset em_automask_tso() changes the enabled TSO capabilities when the link moves between 10/100 and 1000 Mb/s. A running interface must be reinitialized to apply the new capability set. Do not publish LINK_STATE_UP until the requested iflib reset has completed. Replace link_active with an explicit state machine that distinguishes the physical link, its publication to iflib, and an outstanding reset barrier. Preserve that barrier across a link flap with DOWN_RESET_PENDING, and only publish DOWN if UP was previously published. Only request a reset for a running interface or for an initialization while the interface is administratively up. In other states the next initialization will apply the capability changes, avoiding a reset request that iflib's admin task could discard. Reviewed by: Faraz Vahedi Fixes: 2ddf24f8f525 ("e1000: Automask TSO on lem(4)/em(4) 10/100 Ethernet") (cherry picked from commit 0bd6a167c1561f01c227b1c428a3d8adf0e38833) M sys/dev/e1000/if_em.c M sys/dev/e1000/if_em.h _____________________________________________________________________________________________________________ Commit: a1edeb474b1e67e2bd31d7dc11f488888a28e5c8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a1edeb474b1e67e2bd31d7dc11f488888a28e5c8 Author: Kevin Bowling (Sat 25 Jul 2026 11:43:28 BST) Committer: Kevin Bowling (Fri 31 Jul 2026 01:50:43 BST) e1000: fix 82574 MSI-X interrupt throttling em_newitr() and the per-queue interrupt_rate sysctl both tested que->msix to decide whether an 82574 is running in MSI-X mode. 0 is a valid MSI-X vector so queue 0 was misclassified as legacy/MSI. Test sc->intr_type == IFLIB_INTR_MSIX instead. While here, index the tx EITR read by tque->msix rather than tque->me so it matches the register em_newitr() actually writes; the two differ once tx_num_queues exceeds rx_num_queues. Also seed que->itr_setting in em_initialize_receive_unit() with the rate the hardware was just programmed with. Otherwise an itr_setting left over from AIM across an interface re-init makes the change detection in em_newitr() suppress the write that would restore it, leaving the hardware at the default rate while software believes otherwise. Fixes: 3e501ef89667 ("e1000: Re-add AIM") (cherry picked from commit 941113a0097ea047bd493f7f78b384718249779d) M sys/dev/e1000/if_em.c _____________________________________________________________________________________________________________ Commit: 89a88e4f2ddc34221105a2d82407ce4337322808 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=89a88e4f2ddc34221105a2d82407ce4337322808 Author: Mark Johnston (Mon 27 Jul 2026 16:42:49 BST) Committer: Mark Johnston (Wed 29 Jul 2026 18:48:54 BST) coredump: Don't assume that the number of ELF segments is consistent In an ELF coredump, each dumped vm_map_entry is represented by a segment. __elfN(coredump) first computes the number of segments by looping over the vm_map entries (in each_dumpable_segment()), then allocates a buffer to hold the ELF header and program headers, then loops over the entries again to populate the program headers. each_dumpable_segment() holds the vm_map read lock, but that lock is dropped between the two calls. If the map is shared with another process, via rfork(), then the map can change. cb_put_phdr() did not account for this, and so could write out of bounds. Add a check to prevent this; simply do not write out excess segments. Approved by: so Security: FreeBSD-SA-26:55.elf Security: CVE-2026-58088 Reported by: Maik Muench of Secfault Security Reviewed by: kib, emaste Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58416 M sys/kern/imgact_elf.c _____________________________________________________________________________________________________________ Commit: 8b08ee989506af8706a640e9881c61981a77446b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8b08ee989506af8706a640e9881c61981a77446b Author: Mark Johnston (Mon 27 Jul 2026 16:41:30 BST) Committer: Mark Johnston (Wed 29 Jul 2026 18:48:54 BST) sysvsem: Fix a TOCTOU race in semctl({GET,SET}ALL) These commands take a snapshot of the size of a semaphore set, then drop the lock and malloc an appropriately sized array before reacquiring the lock. A comment explains why this is (probably) safe. Unfortunately, it's wrong; it is indeed possible for a malicious userspace to create and destroy 2^{15} sets in the window where the lock is dropped. This race can lead to out-of-bounds reads and writes, and that can be exploited to elevate privileges. Replace the assertions with runtime checks. Approved by: so Security: FreeBSD-SA-26:54.sysvsem Security: CVE-2026-58087 Reported by: Maik Muench of Secfault Security Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58421 M sys/kern/sysv_sem.c _____________________________________________________________________________________________________________ Commit: 825c6f45b1478a9e4afb0323841597a55199a045 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=825c6f45b1478a9e4afb0323841597a55199a045 Author: John Baldwin (Mon 27 Jul 2026 16:37:43 BST) Committer: Mark Johnston (Wed 29 Jul 2026 18:48:54 BST) wg(4): Add a test that the driver handles a decryption failure The test uses a fail point to inject a decryption error in OCF while sending a ping across the tunnel. The driver should then fail to respond to the ping and increment the input error counter on the interface. Approved by: so Security: FreeBSD-SA-26:52.if_wg Security: CVE-2026-58085 Reviewed by: markj Sponsored by: Chelsio Communications M etc/mtree/BSD.tests.dist M tests/sys/net/Makefile A tests/sys/net/wg/Makefile A tests/sys/net/wg/if_wg_nojail.sh _____________________________________________________________________________________________________________ Commit: 4cb888c9ec4b8704f1789701b27a0901879cdc6d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4cb888c9ec4b8704f1789701b27a0901879cdc6d Author: John Baldwin (Mon 27 Jul 2026 16:36:55 BST) Committer: Mark Johnston (Wed 29 Jul 2026 18:48:54 BST) wg(4): Check for crypto operation errors In particular, handle authentication errors due to bad MACs when decrypting packets. Since the current dispatch code assumes synchronous OCF sessions by design, explicitly reject any created OCF session that is not synchronous. Software sessions are always synchronous in practice, so this should be a nop. Approved by: so Security: FreeBSD-SA-26:52.if_wg Security: CVE-2026-58085 Reviewed by: markj Sponsored by: Chelsio Communications M sys/dev/wg/wg_crypto.c _____________________________________________________________________________________________________________ Commit: 88f1161ab0df54b798a1aba0628b8a610e869729 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=88f1161ab0df54b798a1aba0628b8a610e869729 Author: John Baldwin (Mon 27 Jul 2026 16:36:22 BST) Committer: Mark Johnston (Wed 29 Jul 2026 18:48:54 BST) OCF: Add a fail point to inject EBADMSG decryption errors Approved by: so Security: FreeBSD-SA-26:52.if_wg Security: CVE-2026-58085 Reviewed by: markj Sponsored by: Chelsio Communications M sys/opencrypto/crypto.c _____________________________________________________________________________________________________________ Commit: c8af571bf1f88e6445c8e9a449f600c6fef25252 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c8af571bf1f88e6445c8e9a449f600c6fef25252 Author: Kristof Provost (Tue 21 Jul 2026 14:10:16 BST) Committer: Kristof Provost (Wed 29 Jul 2026 08:29:29 BST) authpf(8) read_config() should chop off trailing white space if administrator mistakenly types into configuration file anchor=authpf_test where 'authpf_test' is followed by white space, the authpf(8) is going to use anchor 'authpf_test ' instead of the 'authpf_test' which is defined in pf.conf(5) as 'anchor authpf_test/*' issue kindly reported and patch submitted by Avinash Duduskar OK sashan@ PR: 296958 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296958 ) MFC after: 1 week Obtained from: OpenBSD, sashan , 2d12a8e44d Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 04f25ef716f74d6bb7941750091c6cb4b51d0b4d) M contrib/pf/authpf/authpf.c _____________________________________________________________________________________________________________ Commit: e35696f0b30507e31c86ad80bd2f4ff770bbbe54 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e35696f0b30507e31c86ad80bd2f4ff770bbbe54 Author: Steve Kargl (Fri 8 May 2026 15:06:08 BST) Committer: Robert Clausecker (Tue 28 Jul 2026 16:44:58 BST) [libm] implementation of rsqrt, rsqrtf, and rsqrtl PR: 295089 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295089 ) (cherry picked from commit 3085fc9d97bd83785ba3ba43e0378d7d67987d1f) (cherry picked from commit 0093bb670537f19e99fff2d46b4831d7b9d44b4c) M lib/msun/Makefile M lib/msun/Symbol.map M lib/msun/man/sqrt.3 M lib/msun/src/math.h M lib/msun/src/math_private.h A lib/msun/src/s_rsqrt.c A lib/msun/src/s_rsqrtf.c A lib/msun/src/s_rsqrtl.c _____________________________________________________________________________________________________________ Commit: 3cdf314238d468126f121a9bcb430b6d7a0d9a87 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3cdf314238d468126f121a9bcb430b6d7a0d9a87 Author: Robert Clausecker (Fri 3 Oct 2025 02:43:48 BST) Committer: Robert Clausecker (Tue 28 Jul 2026 16:44:58 BST) lib/libc: add FBSD-1.9 to Versions.def (cherry picked from commit 969c1191957a9ad689546ddb4e8c4df2217c5052) (cherry picked from commit 36b12ea1fbfb218806751c1befd52ac14c46b2f0) M lib/libc/Versions.def _____________________________________________________________________________________________________________ Commit: 69b3aa35469a2df029a2faaa8c4022af72d8f418 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=69b3aa35469a2df029a2faaa8c4022af72d8f418 Author: Robert Clausecker (Mon 17 Nov 2025 17:09:11 GMT) Committer: Robert Clausecker (Tue 28 Jul 2026 16:44:57 BST) msun: expose the C23 functions we already support in This is the *pi family of trigonometric functions. Quite a few C23 functions are still missing. These seem to be: acospi, acospif, acospil, asinpi, asinpif, asinpil, atan2pi, atan2pif, atan2pil, atanpi, atanpif, atanpil, canonicalize, canonicalizef, canonicalizel, compoundn, compoundnf, compoundnl, daddl, ddivl, dfmal, dmull, dsqrtl, dsubl, exp10, exp10f, exp10l, exp10m1, exp10m1f, exp10m1l, exp2m1, exp2m1f, exp2m1l, fadd, faddl, fdiv, fdivl, ffma, ffmal, fmaximum, fmaximum_mag, fmaximum_mag_num, fmaximum_mag_numf, fmaximum_mag_numl, fmaximum_magf, fmaximum_magl, fmaximum_num, fmaximum_numf, fmaximum_numl, fmaximumf, fmaximuml, fminimum, fminimum_mag, fminimum_mag_num, fminimum_mag_numf, fminimum_mag_numl, fminimum_magf, fminimum_magl, fminimum_num, fminimum_numf, fminimum_numl, fminimumf, fminimuml, fmul, fmull, fromfp, fromfpf, fromfpl, fromfpx, fromfpxf, fromfpxl, fsqrt, fsqrtl, fsub, fsubl, iscanonical, iseqsig, issignaling, issubnormal, iszero, nextdown, nextdownf, nextdownl, nextup, nextupf, nextupl, pown, pownf, pownl, powr, powrf, powrl, rootf, rootl, rootn, roundeven, roundevenf, roundevenl, rsqrt, rsqrtf, rsqrtl, ufromfp, ufromfpf, ufromfpl, ufromfpx, ufromfpxf, ufromfpxl. Reviewed by: imp Approved by: markj (mentor) MFC after: 1 month Relnotes: yes Differential Revision: https://reviews.freebsd.org/D53783 (cherry picked from commit 37fa5b36abb15b322493aba20146709d48359507) (cherry picked from commit 104488641acaf2269d860d8abf142d80a340a5e8) M lib/msun/src/math.h _____________________________________________________________________________________________________________ Commit: 470238401081a097ff43570581bcc8de2efea63f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=470238401081a097ff43570581bcc8de2efea63f Author: Dimitry Andric (Tue 28 Jul 2026 14:05:50 BST) Committer: Dimitry Andric (Tue 28 Jul 2026 14:05:50 BST) Revert "Add a few missed files to ObsoleteFiles.inc" This reverts commit 33175a5059970bf9e888a799d3578e2902d765af, because some of the directories and files are still being installed. M ObsoleteFiles.inc _____________________________________________________________________________________________________________ Commit: 8ba2237332b1f0bf6dcb4f2edd84db76438c8c91 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8ba2237332b1f0bf6dcb4f2edd84db76438c8c91 Author: Dag-Erling Smørgrav (Wed 22 Jul 2026 07:04:18 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:33:02 BST) install: Fix typo MFC after: 1 week Reported by: markj Fixes: d34870708db9 ("install: Allow installing stdin") (cherry picked from commit 0eef3d01c22a5e00cd2cf10c34871eddbfd22aa0) M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: 823e3bbb30804fbe92b4f8ce07721a19f6f6cf54 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=823e3bbb30804fbe92b4f8ce07721a19f6f6cf54 Author: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:03:49 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:33:02 BST) install: Code cleanup This is mainy focused on using bool for booleans but also renames some variables for clarity, adds some explicit comparisons, adds some braces, with miscellanous style fixes thrown in. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D58355 (cherry picked from commit 134ddd372f8213885dd828ab38cec2384fd451db) M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: eaf2b738b99caa531c467acc33ca8813fbd1b89b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=eaf2b738b99caa531c467acc33ca8813fbd1b89b Author: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:03:44 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:33:01 BST) install: Allow installing stdin If from_name is "/dev/stdin" or "-" and the target is not a directory, skip the comparison and copy data from standard input to the target. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D58348 (cherry picked from commit d34870708db9fa1eb8e29b5e085b755de1189b1f) M usr.bin/xinstall/install.1 M usr.bin/xinstall/tests/install_test.sh M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: a1a98dd063f97859e7ff564be008eae11c932074 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a1a98dd063f97859e7ff564be008eae11c932074 Author: Ed Maste (Wed 3 Jun 2026 18:50:51 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:32:02 BST) install.1: Convert link flags to a table The five link flags get lost in prose. Reviewed by: ziaee Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57418 (cherry picked from commit 248dd56d2dea03e4723e8225b890d02fcc10973f) M usr.bin/xinstall/install.1 _____________________________________________________________________________________________________________ Commit: 48e85d9569986d7308bfa895ed6bd3b9c5f44d30 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=48e85d9569986d7308bfa895ed6bd3b9c5f44d30 Author: Ed Maste (Wed 3 Jun 2026 16:35:59 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:32:01 BST) install.1: Document options incompatible with -s Reported by: des Reviewed by: ziaee Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57409 (cherry picked from commit b49021b49a78ca6a9e3a1a59c5aa6f2fec503afb) M usr.bin/xinstall/install.1 _____________________________________________________________________________________________________________ Commit: 44eb447094b7ddd181389f5fcb4fb0cae0fee957 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=44eb447094b7ddd181389f5fcb4fb0cae0fee957 Author: Ed Maste (Wed 3 Jun 2026 02:27:54 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:31:41 BST) xinstall: Do not allow -l and -s together Cannot strip the target if creating a link. Reviewed by: des Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57398 (cherry picked from commit 521afce6a859c1d7ac9674e8f21ff45418becaf5) M usr.bin/xinstall/tests/install_test.sh M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: 23f153a177250f74230a0441e77b283437d6bf31 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=23f153a177250f74230a0441e77b283437d6bf31 Author: Ed Maste (Wed 3 Jun 2026 15:13:45 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:31:41 BST) xinstall: Add test for -d -s not allowed together Reviewed by: des Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57403 (cherry picked from commit 4908bea5b7f5de70032e201e718958ef40bc3b03) M usr.bin/xinstall/tests/install_test.sh _____________________________________________________________________________________________________________ Commit: 81004ee18aa4a2fa31b9834f9e80a9fe7cf10b95 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=81004ee18aa4a2fa31b9834f9e80a9fe7cf10b95 Author: Aleksandr Rybalko (Mon 8 Jun 2026 15:32:05 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:31:16 BST) install: drop obsolete file size limit for -C Removes the file size limit for -C comparisons. The limit was meant to prevent oversized mmap allocations, which is no longer relevant as mmap is no longer used here (removed by a0439a1b820fa0e742c00d095f5f5c06f5f19432, review D44809). Credit to bdrewery. See: https://reviews.freebsd.org/D57230 Reviewed by: bdrewery, glebius, ziaee Approved by: glebius (mentor) Obtained from: Fudo Security MFC after: 2 weeks Sponsored by: Fudo Security Differential Revision: https://reviews.freebsd.org/D57503 (cherry picked from commit 9d10b4d2c9e86d8f6ff1b654f468381a4a4cad6d) M usr.bin/xinstall/Makefile M usr.bin/xinstall/install.1 M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: ce59deaf3540a44f0414bf6deb2288b23f10d02b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ce59deaf3540a44f0414bf6deb2288b23f10d02b Author: Aleksandr Rybalko (Wed 27 May 2026 13:07:47 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:31:16 BST) install: Bump compare size limit (128MB) to support large binaries Preserve metadata and prevent redundant disk writes during builds with the install's -C (compare) flag. The previous historical comparison limit of 16MB is insufficient for modern toolchains, frequently choked or bypassed by a large base components like LLVM/Clang, kernels, Rust apps, and large runtime libraries. By leaving matching files alone, install keeps their modification timestamps intact. make(1) safely ignores those files on subsequent runs. Base examples: 15.0 amd64 GENERIC kernel - 28MB, clang - 105MB, lldb - 97MB, etc. Reviewed by: glebius Approved by: glebius (mentor) Obtained from: Fudo Security MFC after: 2 weeks Sponsored by: Fudo Security Differential Revision: https://reviews.freebsd.org/D57271 (cherry picked from commit 5a8e0e03ae86b449f29626b4f9db25d17c89b273) M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: 25e66327126deb92f95fc2d65c8c7d51c4862e2b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=25e66327126deb92f95fc2d65c8c7d51c4862e2b Author: Aleksandr Rybalko (Mon 25 May 2026 08:53:20 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:31:15 BST) install: add -z option Introduces the -z flag, enabling users to set a custom file size limit for pre-installation change checks and avoiding future hard-coded limit modifications. Reviewed by: glebius Approved by: glebius (mentor) Obtained from: Fudo Security MFC after: 2 weeks Sponsored by: Fudo Security Differential Revision: https://reviews.freebsd.org/D57230 (cherry picked from commit 97cad013a50a4012328e11424ed2350c1efc036c) M usr.bin/xinstall/Makefile M usr.bin/xinstall/install.1 M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: c4d8b894dd5ef27e19926bcb7f4e937e15f443c5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c4d8b894dd5ef27e19926bcb7f4e937e15f443c5 Author: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:03:05 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:22:35 BST) nvme: Explicitly cast caddr_t values Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. MFC after: 1 week Fixes: 6d0001d44490 ("nvme: add support for DIOCGIDENT") Reviewed by: bnovkov, imp Differential Revision: https://reviews.freebsd.org/D58357 (cherry picked from commit bd30d1ad78e152d0a963bc873643a911321cca6e) M sys/dev/nvme/nvme_ns.c _____________________________________________________________________________________________________________ Commit: 1225b47a8e0f2f9eb896ff6099724c8234933c7c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1225b47a8e0f2f9eb896ff6099724c8234933c7c Author: Dag-Erling Smørgrav (Tue 21 Jul 2026 08:59:43 BST) Committer: Dag-Erling Smørgrav (Tue 28 Jul 2026 10:22:35 BST) wpa: Define CONFIG_DEBUG_FILE globally We defined CONFIG_DEBUG_FILE only in libwpautils, not in wpa_supplicant, so all it did was enable code that never got called. Enable it at the top level so it also applies to wpa_supplicant(8), and the -f option mentioned in the manual page now actually works. PR: 281617 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281617 ) MFC after: 1 week Reviewed by: cy Differential Revision: https://reviews.freebsd.org/D57723 (cherry picked from commit 67518c9f565b61bc5eebe33b6a956e2cc9b3f223) M usr.sbin/wpa/Makefile.inc M usr.sbin/wpa/src/utils/Makefile _____________________________________________________________________________________________________________ Commit: 3a51f7b13512b8ca7abd62f44cc404b056cd0c91 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3a51f7b13512b8ca7abd62f44cc404b056cd0c91 Author: Richard Scheffenegger (Tue 21 Jul 2026 15:51:02 BST) Committer: Richard Scheffenegger (Tue 28 Jul 2026 09:26:14 BST) tcp_hostcache: explicitly typecast atomic_load_int to (int) for comparison Sponsored by: NetApp, Inc. MFC after: 1 week Reviewed By: tuexen, #transport, markj Differential Revision: https://reviews.freebsd.org/D58360 (cherry picked from commit f22b08443f6ae3620dd14ade4e2376b8531fd6f3) M sys/netinet/tcp_hostcache.c _____________________________________________________________________________________________________________ Commit: b4bd57d765632abdc770ed1f7089624a9cfa666e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b4bd57d765632abdc770ed1f7089624a9cfa666e Author: Olivier Certner (Tue 3 Feb 2026 22:25:46 GMT) Committer: Mark Johnston (Mon 27 Jul 2026 23:32:00 BST) sysctl(9): Booleans: Fix old value length discovery When calling sysctl(3) with a null 'oldp', i.e., length discovery mode, 'oldix' can be equal to 'oldlen', and we should not fail. More generally, let SYSCTL_OUT() and SYSCTL_IN() handle corner cases, simply removing the comparisons between 'oldidx' and 'oldlen' and 'newidx' and 'newlen' done by hand as the test just after is an equality that does not require to know if 'idx' is smaller than 'len'. PR: 292917 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292917 ) Reported by: cy Fixes: 406da392ef8d ("sysctl(9): Booleans: Accept integers to ease knob conversion") Sponsored by: The FreeBSD Foundation (cherry picked from commit 895e1c6567d9561c86f8d20b47e924911bce989e) M sys/kern/kern_sysctl.c _____________________________________________________________________________________________________________ Commit: e782be2e48012a95b8e9bfdc247c2e8207a825e8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e782be2e48012a95b8e9bfdc247c2e8207a825e8 Author: Mark Johnston (Fri 17 Jul 2026 13:57:06 BST) Committer: Mark Johnston (Mon 27 Jul 2026 20:35:19 BST) vm_page: Fix dequeue on arches with weak ordering A vm_page's a.queue field records the page queue index for the page queue to which the page belongs. The PGA_ENQUEUED flag indicates whether the page is actually enqueued in that queue's TAILQ. When modifying the a.queue field, you need to hold the page queue lock for the queue corresponding to the old value, unless the old value is PQ_NONE. Suppose a managed page is freed. vm_page_free_prep() calls vm_page_dequeue_deferred(), which checks whether the page belongs to a queue; if so it schedules an asynchronous dequeue operation so that page queue lock acquisitions can be batched if possible. The dequeue operation must be completed before the page's plinks.q fields are reused. So, during page allocation, we call vm_page_dequeue() to finish the dequeue operation. Similarly, since the buddy allocator uses the plinks.q fields for its own internal linkage, vm_freelist_add() calls vm_page_dequeue(). _vm_page_pqstate_commit_dequeue() is the function which actually removes the page from its queue. It sets a.queue = PG_NONE and removes the page from its queue. However, the update to the page's atomic state is relaxed, so on systems with store reordering, it may race with a concurrent enqueue of the page into the buddy queues (probably more likely) or a page queue. Fix this: use a release store to update the page's queue state in _vm_page_pqstate_commit_dequeue(), and make sure that vm_page_dequeue() uses an acquire load when comparing m->a.queue == PQ_NONE. PR: 296767 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296767 ) Reported and tested by: pkubaj Reviewed by: alc, kib MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D58261 (cherry picked from commit d809a10218884162ed47c658233746c53a98b1aa) M sys/vm/vm_page.c M sys/vm/vm_page.h _____________________________________________________________________________________________________________ Commit: 2882e256320f0124855a5dce1a99ca0cc8ed9d69 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2882e256320f0124855a5dce1a99ca0cc8ed9d69 Author: Hareshx Sankar Raj (Wed 24 Jun 2026 16:08:16 BST) Committer: Mark Johnston (Mon 27 Jul 2026 20:35:19 BST) qat: driver updates to enhance qat infrastructure - Updated QAT infrastructure FW version/AE mask/num_banks fields to facilitate integration of future QAT products. - Exposed service as sym;asym instead of cy for gen4 - Enhanced cpaGetInstances() for accurate instance retrieval - Added 57-bit virtual address support to lac_lock_free_stack - Minor bug fixes and improvements Signed-off-by: Hareshx Sankar Raj Reviewed by: markj MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D57746 (cherry picked from commit 682f135f5de39cfc24cfd529ea8a161e94c76c8e) M sys/contrib/dev/qat/LICENSE M sys/dev/qat/include/adf_gen4vf_hw_csr_data.h M sys/dev/qat/include/common/adf_accel_devices.h M sys/dev/qat/include/common/adf_common_drv.h M sys/dev/qat/include/common/adf_gen2_hw_data.h M sys/dev/qat/include/common/adf_gen4_hw_data.h M sys/dev/qat/include/common/adf_uio.h M sys/dev/qat/include/common/adf_uio_control.h M sys/dev/qat/qat_api/common/crypto/sym/include/lac_sym_cipher_defs.h M sys/dev/qat/qat_api/common/crypto/sym/lac_sym_alg_chain.c M sys/dev/qat/qat_api/common/crypto/sym/lac_sym_dp.c M sys/dev/qat/qat_api/common/ctrl/sal_get_instances.c M sys/dev/qat/qat_api/common/utils/lac_lock_free_stack.h M sys/dev/qat/qat_api/device/dev_info.c M sys/dev/qat/qat_api/include/icp_sal_versions.h M sys/dev/qat/qat_api/qat_kernel/src/lac_adf_interface_freebsd.c M sys/dev/qat/qat_api/qat_kernel/src/lac_symbols.c M sys/dev/qat/qat_common/adf_accel_engine.c M sys/dev/qat/qat_common/adf_cfg_device.c M sys/dev/qat/qat_common/adf_ctl_drv.c M sys/dev/qat/qat_common/adf_freebsd_admin.c M sys/dev/qat/qat_common/adf_freebsd_cnvnr_ctrs_dbg.c M sys/dev/qat/qat_common/adf_freebsd_uio.c M sys/dev/qat/qat_common/adf_freebsd_ver_dbg.c M sys/dev/qat/qat_common/adf_fw_counters.c M sys/dev/qat/qat_common/adf_gen2_hw_data.c M sys/dev/qat/qat_common/adf_gen4_hw_data.c M sys/dev/qat/qat_common/adf_gen4_timer.c M sys/dev/qat/qat_common/adf_gen4vf_hw_csr_data.c M sys/dev/qat/qat_common/adf_heartbeat.c M sys/dev/qat/qat_common/adf_transport.c M sys/dev/qat/qat_common/qat_hal.c M sys/dev/qat/qat_hw/qat_200xx/adf_200xx_hw_data.c M sys/dev/qat/qat_hw/qat_200xx/adf_drv.c M sys/dev/qat/qat_hw/qat_4xxx/adf_4xxx_hw_data.c M sys/dev/qat/qat_hw/qat_4xxx/adf_drv.c M sys/dev/qat/qat_hw/qat_4xxxvf/adf_4xxxvf_hw_data.c M sys/dev/qat/qat_hw/qat_c3xxx/adf_c3xxx_hw_data.c M sys/dev/qat/qat_hw/qat_c3xxx/adf_drv.c M sys/dev/qat/qat_hw/qat_c4xxx/adf_c4xxx_ae_config.c M sys/dev/qat/qat_hw/qat_c4xxx/adf_c4xxx_hw_data.c M sys/dev/qat/qat_hw/qat_c4xxx/adf_c4xxx_res_part.c M sys/dev/qat/qat_hw/qat_c4xxx/adf_drv.c M sys/dev/qat/qat_hw/qat_c62x/adf_c62x_hw_data.c M sys/dev/qat/qat_hw/qat_c62x/adf_drv.c M sys/dev/qat/qat_hw/qat_dh895xcc/adf_dh895xcc_hw_data.c M sys/dev/qat/qat_hw/qat_dh895xcc/adf_drv.c _____________________________________________________________________________________________________________ Commit: 376b875cf590bcbc0ed34b2d1b5ba9623557db39 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=376b875cf590bcbc0ed34b2d1b5ba9623557db39 Author: Mark Johnston (Wed 8 Jul 2026 18:12:54 BST) Committer: Mark Johnston (Mon 27 Jul 2026 20:35:19 BST) taskqueue: Avoid unbounded epoch read sections The taskqueue thread loop tries to avoid entering and exiting net epoch read sections for every task. This reduces the overhead of net epoch integration, but the implementation wasn't bounding the length of the read section, so a busy taskqueue thread could hold an epoch open for an unbounded period. This is easy to achieve with the epair task, for instance. Bound the number of tasks that we'll execute without observing the global epoch, and provide a sysctl to control it. Let the default bound be eight. Reviewed by: glebius MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D58031 (cherry picked from commit a58590631ccc0fa5bdbbdf88021c6878d644d128) M sys/kern/subr_gtaskqueue.c M sys/kern/subr_taskqueue.c M sys/sys/taskqueue.h _____________________________________________________________________________________________________________ Commit: c49ca3bf0f196b0b2ec84586d761f476603a076b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c49ca3bf0f196b0b2ec84586d761f476603a076b Author: Mark Johnston (Wed 15 Jul 2026 16:04:46 BST) Committer: Mark Johnston (Mon 27 Jul 2026 20:35:19 BST) iflib: Remove an unused field from struct iflib_rxq Reported by: Alexander Sideropoulos MFC after: 1 week (cherry picked from commit fc09c7fee23b3cf3ddc95105ef6ef41d7956232f) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: 3ee1bbd01eb3708c8228f083d026d28ed0e07213 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3ee1bbd01eb3708c8228f083d026d28ed0e07213 Author: Mark Johnston (Mon 6 Jul 2026 14:21:43 BST) Committer: Mark Johnston (Mon 27 Jul 2026 15:05:07 BST) dtrace: Fix DOF section-specific validation The entry size of the probe section is assumed to be at least sizeof(dof_probe_t) by the loop further below. enoff_sec->dofs_entsize was not being validated at all. When multiplying an index by a table entry size, make sure the multiplication can't overflow. Fix an off-by-one when validating the translated probe argument array. Make sure that the probe argument argvs are valid string offsets even if the argument count is zero. Reviewed by: christos MFC after: 2 weeks Sponsored by: CHERI Research Centre Differential Revision: https://reviews.freebsd.org/D57979 (cherry picked from commit 7f5fa76367d78e47d483fdf2cc72e5823d0f7807) M sys/cddl/contrib/opensolaris/uts/common/dtrace/dtrace.c _____________________________________________________________________________________________________________ Commit: 4d30095e28496445761dd65e0b7c37731a61ce25 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4d30095e28496445761dd65e0b7c37731a61ce25 Author: Mark Johnston (Mon 6 Jul 2026 14:21:24 BST) Committer: Mark Johnston (Mon 27 Jul 2026 15:05:07 BST) dtrace: Improve DOF string table validation The check for a nul terminator implicitly assumes that the section size is positive. Make the assumption explicit. Reviewed by: christos MFC after: 2 weeks Sponsored by: CHERI Research Centre Differential Revision: https://reviews.freebsd.org/D57977 (cherry picked from commit b56b601c5ba603031312b9bc7ae895ecb0dcdaec) M sys/cddl/contrib/opensolaris/uts/common/dtrace/dtrace.c _____________________________________________________________________________________________________________ Commit: a8954ff89caa6be06361959cdcbc561d615e0e73 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a8954ff89caa6be06361959cdcbc561d615e0e73 Author: Mark Johnston (Mon 6 Jul 2026 14:21:08 BST) Committer: Mark Johnston (Mon 27 Jul 2026 15:05:07 BST) dtrace: Fix DOF section bounds validation We must ensure that each DOF section does not overlap with the DOF header or section table. Otherwise the relocations processed in the second pass over sections can manipulate DOF metadata, leading to OOB writes. Reviewed by: christos MFC after: 2 weeks Sponsored by: CHERI Research Centre Differential Revision: https://reviews.freebsd.org/D57976 (cherry picked from commit 8dc98f4d25a31a8dfddbcc18eb0ee2e0f005ec15) M sys/cddl/contrib/opensolaris/uts/common/dtrace/dtrace.c _____________________________________________________________________________________________________________ Commit: 8044d00cdda3be5e5681d5a095b1c4a59e9594cd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8044d00cdda3be5e5681d5a095b1c4a59e9594cd Author: Mark Johnston (Mon 6 Jul 2026 14:20:33 BST) Committer: Mark Johnston (Mon 27 Jul 2026 15:05:07 BST) dtrace: Improve DOF section size validation The loop which validates each DOF section assumes that the section header is present, so the section size must be at least as large as the header, otherwise a small OOB access is possible. Reviewed by: christos MFC after: 2 weeks Sponsored by: CHERI Research Centre Differential Revision: https://reviews.freebsd.org/D57975 (cherry picked from commit c1b6ebc2b7584f93cea4d818468b2aee74475674) M sys/cddl/contrib/opensolaris/uts/common/dtrace/dtrace.c _____________________________________________________________________________________________________________ Commit: 6894d9a74aa1c588d77c131568bd87571bd15316 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6894d9a74aa1c588d77c131568bd87571bd15316 Author: Mark Johnston (Wed 8 Jul 2026 18:11:05 BST) Committer: Mark Johnston (Mon 27 Jul 2026 15:05:07 BST) netmap: Don't assume that user-provided strings are nul-terminated MFC after: 1 week Sponsored by: The FreeBSD Foundation (cherry picked from commit e1ab35148dd425340a88a2acaf10b972cb119f8f) M sys/dev/netmap/netmap_bdg.c _____________________________________________________________________________________________________________ Commit: dbe24395879d68feb54d2866b19ba5ebd1542985 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dbe24395879d68feb54d2866b19ba5ebd1542985 Author: Mark Johnston (Wed 8 Jul 2026 18:12:21 BST) Committer: Mark Johnston (Mon 27 Jul 2026 15:05:07 BST) timefd: Correct the required rights for timerfd_gettime() Reviewed by: jfree MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58084 (cherry picked from commit de6193cf7d2c0c31e5ccafd098275a629a5ea49e) M sys/kern/sys_timerfd.c _____________________________________________________________________________________________________________ Commit: 03c71ed44a0480091be9408faf3386879a9ee759 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=03c71ed44a0480091be9408faf3386879a9ee759 Author: Jose Luis Duran (Mon 13 Jul 2026 13:25:30 BST) Committer: Jose Luis Duran (Mon 27 Jul 2026 04:42:48 BST) mkimg: Add ms-basic-data alias for GPT While preparing GPT-schemed RaspberryPi images for the NanoBSD Reimagined GSoC 2026 project, a discrepancy was identified between mkimg(1) and gpart(8) regarding Microsoft Basic Data partitions (GUID !ebd0a0a2-b9e5-4433-87c0-68b6b72699c7). Currently, mkimg(1) relies on the MBR-centric name "ntfs" to identify this partition type under the GPT scheme. Conversely, gpart(8) identifies this type as "ms-basic-data". To allow automation scripts (such as those consuming from gpart backup) to use a common partition type across tools, add ALIAS_MS_BASIC_DATA as a valid alias. This is part of a larger effort to avoid a custom, MBR-based image generation logic for embedded SoCs like the Raspberry Pi, standardizing on GPT layouts across all supported FreeBSD embedded devices. Reviewed by: imp MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D58198 (cherry picked from commit 67f1c082b5ec37e2060b74e6f1f952ed38761468) M usr.bin/mkimg/gpt.c M usr.bin/mkimg/scheme.c M usr.bin/mkimg/scheme.h _____________________________________________________________________________________________________________ Commit: 28c3d544db285c1c198661e6d932cf76c9d68102 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=28c3d544db285c1c198661e6d932cf76c9d68102 Author: Giuseppe Lettieri (Mon 13 Jul 2026 13:24:16 BST) Committer: Jose Luis Duran (Mon 27 Jul 2026 04:42:26 BST) libnetmap: fix extra indirection in nmreq_remove_option Reviewed by: zlei, vmaffione Obtained from: https://github.com/luigirizzo/netmap/commit/7d9177ed9a121e66bf4eaa0acb5d574e408297da MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D58151 (cherry picked from commit 141b6645204966a0e1ae10dd059c670e2a58e6e1) M lib/libnetmap/nmreq.c _____________________________________________________________________________________________________________ Commit: bb8c5e484f5278535154cf93f1f7a8d8c51983f0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bb8c5e484f5278535154cf93f1f7a8d8c51983f0 Author: Jose Luis Duran (Mon 13 Jul 2026 13:23:14 BST) Committer: Jose Luis Duran (Mon 27 Jul 2026 04:42:12 BST) libnetmap: fix error path in nmport_extmem_from_file Reviewed by: zlei, vmaffione Obtained from: https://github.com/luigirizzo/netmap/commit/b52a2bcae35e56548acfb0849b248a1e4b0c0c3b MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D58150 (cherry picked from commit fcaf15e54162fe14483fdf4ac28c67c51e424441) M lib/libnetmap/nmport.c _____________________________________________________________________________________________________________ Commit: 2d39931b5ed3ed1843e04c3afc815109a4532c2d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2d39931b5ed3ed1843e04c3afc815109a4532c2d Author: Dag-Erling Smørgrav (Wed 29 Apr 2026 16:14:13 BST) Committer: Dag-Erling Smørgrav (Sat 25 Jul 2026 18:16:20 BST) bc: Fix tests Stop generating test scripts at build time. The dc test script is broken and simply fixing the code that generates it won't help as there is no reliable way to ensure it gets regenerated if it already exists in the object tree. MFC after: 1 week Reviewed by: se Differential Revision: https://reviews.freebsd.org/D56511 (cherry picked from commit 67a63eae7b2d10d29983c9698894f1bfff4ffc6e) M tools/build/depend-cleanup.sh M usr.bin/gh-bc/tests/Makefile A usr.bin/gh-bc/tests/bc_tests.sh A usr.bin/gh-bc/tests/dc_tests.sh _____________________________________________________________________________________________________________ Commit: 9af47fc3a369792b7ed1633d5c8bc5d5bacf8a32 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9af47fc3a369792b7ed1633d5c8bc5d5bacf8a32 Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:42:40 BST) Committer: Dag-Erling Smørgrav (Sat 25 Jul 2026 18:09:29 BST) tail: Allow repetitive or contraditory options Unlike its GNU counterpart, our tail(1) has always errored out if given repetitive or contradictory options, even prior to Keith Bostic's 1991 reimplementation. There is no good reason to continue to do so, not even tradition, since many other commands (including head(1)) simply apply the rightmost option in cases like this. MFC after: 1 week Reviewed by: allanjude, markj Differential Revision: https://reviews.freebsd.org/D58192 (cherry picked from commit 9fc14dbe4897c4541113b9ba98236fbd7eb75380) M usr.bin/tail/tail.c _____________________________________________________________________________________________________________ Commit: 3ab59366fed8106db57e94ecdb69b6e65741d1c4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3ab59366fed8106db57e94ecdb69b6e65741d1c4 Author: Dag-Erling Smørgrav (Thu 9 Jul 2026 09:22:09 BST) Committer: Dag-Erling Smørgrav (Sat 25 Jul 2026 18:09:29 BST) tzcode: Update to 2026c MFC after: 1 week (cherry picked from commit 28f617de7d9b9c708eacb3c2c13e5287e1b7354d) M contrib/tzcode/Makefile M contrib/tzcode/NEWS M contrib/tzcode/localtime.c M contrib/tzcode/newctime.3 M contrib/tzcode/newstrftime.3 M contrib/tzcode/newtzset.3 M contrib/tzcode/private.h M contrib/tzcode/theory.html M contrib/tzcode/tz-art.html M contrib/tzcode/tz-how-to.html M contrib/tzcode/tz-link.html M contrib/tzcode/version M contrib/tzcode/zdump.c M contrib/tzcode/zic.8 M contrib/tzcode/zic.c _____________________________________________________________________________________________________________ Commit: 8200466be6829ebbafa3ba64f623352e58fb28d3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8200466be6829ebbafa3ba64f623352e58fb28d3 Author: Rick Macklem (Sat 11 Jul 2026 20:30:51 BST) Committer: Rick Macklem (Sat 25 Jul 2026 02:30:40 BST) nfsd: Commit missing patches for c52bcd09c2a6 Oops, I missed the other files for the commit. This should fix the build. Pointy hat goes on me. (cherry picked from commit 30d4d3db431a5df8084048c4d31e98e74d2f225a) M sys/fs/nfs/nfs_var.h M sys/fs/nfsserver/nfs_nfsdsocket.c _____________________________________________________________________________________________________________ Commit: 5d5b759f4cb76884c9c2455dadbc498e6edebe0c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5d5b759f4cb76884c9c2455dadbc498e6edebe0c Author: Rick Macklem (Sat 11 Jul 2026 16:49:12 BST) Committer: Rick Macklem (Sat 25 Jul 2026 02:28:09 BST) nfsd: Garbage collect stray NFSv4 state When a file is deleted on the NFS server by another client, any NFSv4 state related to that file is left stranded. This happens because the NFSv4 operations that free the state use a CFH, which is set by a PutFH operation. However, the PutFH fails with ESTALE because the file has been deleted. This patch adds a function called nfsrv_freestrandedstate() that frees all the NFSv4 state related to a file and calls this function when PutFH will be replying ESTALE. While here, a helper function was defined to handle free'ng of the nfslockfile structure and replaces the two places where nearly identical code does this. (cherry picked from commit c52bcd09c2a6736fe841fd72e3cfb74de5a35b03) M sys/fs/nfsserver/nfs_nfsdstate.c _____________________________________________________________________________________________________________ Commit: 5b5a10e359142b9665face2db52b12c7ebc0f547 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5b5a10e359142b9665face2db52b12c7ebc0f547 Author: Olivier Certner (Fri 24 Jul 2026 05:45:46 BST) Committer: Olivier Certner (Fri 24 Jul 2026 05:45:46 BST) .git-blame-ignore-revs: Fix hash for sys/kern/kern_cpu.c whitespace changes Really fill in the hash of the MFCed commit, removing the placeholder I forgot to update before commit. This is a direct commit to stable/14. Fixes: 83e087e0ea21 (".git-blame-ignore-revs: sys/kern/kern_cpu.c whitespace changes") Sponsored by: The FreeBSD Foundation M .git-blame-ignore-revs _____________________________________________________________________________________________________________ Commit: 0d009397bf482109db4b6ca9350a0cd6060200f4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0d009397bf482109db4b6ca9350a0cd6060200f4 Author: Colin Percival (Fri 24 Jul 2026 01:00:00 BST) Committer: Colin Percival (Fri 24 Jul 2026 01:00:00 BST) 14.5: Update stable/14 to -PRERELEASE This marks the start of the FreeBSD 14.5 release cycle; the stable/14 tree is now in "code slush". Developers are encouraged to prioritize fixing bugs (and/or merging bug fixes from HEAD) over new features at this time. Commit approval from re@ is not required but if new features introduce problems they may be removed from the release. Approved by: re (implicit) Sponsored by: OpenSats Initiative M sys/conf/newvers.sh M usr.bin/yacc/config.h _____________________________________________________________________________________________________________ Commit: fc759cca5090840d1fc1fa3825f0dc32f28669ef URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fc759cca5090840d1fc1fa3825f0dc32f28669ef Author: Olivier Certner (Tue 7 Jul 2026 14:34:21 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:18 BST) acpi_cpu(4): Call ACPI_GET_FEATURES() on a reset 'features' variable This is to prevent child drivers from using the features returned by previous drivers (in an arbitrary order). None of the existing ones do that, so this is purely defensive. MFC after: 2 weeks Sponsored by: The FreeBSD Foundation (cherry picked from commit 664ad9ac4c9047d29d5f37d43174e1b469e2ec80) M sys/dev/acpica/acpi_cpu.c _____________________________________________________________________________________________________________ Commit: 2a3374d999fca981624a97781ef8bfbc404f26f4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2a3374d999fca981624a97781ef8bfbc404f26f4 Author: Olivier Certner (Thu 2 Jul 2026 15:26:21 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:18 BST) x86/local_apic.c: Fiddle with thermal LVT slot only if supported The thermal LVT slot does not necessarily exist. According to Intel's Software Developers Manual, for Intel processors supporting 64-bit operation (amd64), probably even the earliest ones should have a local APIC with such a slot (the slot was introduced with Pentium 4 and Xeon processors according to the manual, and the 64-bit implementation in some later versions of them). AMD's Architecture Programmer's Manual also seems to imply that all AMD processors supporting amd64 should have the slot too. So this change may not be needed when i386's code is dropped, but it does not hurt to have it, and it might ease possible MFCs. Change the signature of lapic_enable_thermal() so that it can report failure (if there is no local APIC or if there is no thermal LVT slot). Reviewed by: bnovkov, kib MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58086 (cherry picked from commit c18ec05395b36bdd12b0129533a553f27eb9b067) M sys/x86/include/apicvar.h M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: de606fe4fd1cbd8e314aca21d8b0b748b2cba2b3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=de606fe4fd1cbd8e314aca21d8b0b748b2cba2b3 Author: Olivier Certner (Wed 8 Jul 2026 13:59:28 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:17 BST) x86/local_apic.c: Factor out version read and max LVT slot computation This makes the code slightly more compact and easier to read. No functional change intended. Reviewed by: bnovkov MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58110 (cherry picked from commit 060ecf296664fd150328ac6dcdc24764a427bc3a) M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: 60d7891a52cdd7e34e60d225a785db2efe33fbb6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=60d7891a52cdd7e34e60d225a785db2efe33fbb6 Author: Konstantin Belousov (Thu 22 Jan 2026 18:00:56 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:17 BST) x86 lapic: Dump LVTs from the ddb show lapic command (cherry picked from commit dfc4186c6dcf2986b510fac108784011a236554d) (cherry picked from commit 854e0e4803789c669edeff7c31e1ed4fd66e64b7) M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: 185d7d4a39f9557060003e6377f650d3a553269a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=185d7d4a39f9557060003e6377f650d3a553269a Author: Konstantin Belousov (Mon 19 Jan 2026 11:55:36 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:17 BST) x86/local_apic.c: Properly calculate the number of LVT entries First, the CMCI entry index is APIC_LVT_MAX, so it was excluded unconditionall [1]. Second, the number of entries is reported by the version register, and we must not access past the last reported entry. Reported by: olivier [1] Fixes: 11f954b021a1aadde1d03d40ed5d6b529e14da98 Reviewed by: markj Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D54773 (cherry picked from commit 709a53c8b20b5770f7e2f117d4799b5617479976) M sys/x86/include/apicreg.h M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: a9e4131375f87c6933f8321adde95d14f6d3764d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a9e4131375f87c6933f8321adde95d14f6d3764d Author: Konstantin Belousov (Mon 19 Jan 2026 12:50:09 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:16 BST) x86/local_apic.c: add lapic_maxlvt() helper that calculates the max index of the present LVT entry from the value of the LAPIC version register. Reviewed by: markj Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D54773 (cherry picked from commit ad5e3cb950344f9822dbbd90f5ac7c256f97fa4c) M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: 73e58edc7caa761d466276cc02fbe0a18f072da5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=73e58edc7caa761d466276cc02fbe0a18f072da5 Author: Konstantin Belousov (Tue 9 Dec 2025 02:18:21 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:16 BST) x86: mask all LAPIC vectors early, before BSP interrupts are enabled (cherry picked from commit 11f954b021a1aadde1d03d40ed5d6b529e14da98) (cherry picked from commit 2079e5864f204c552b82b63809e1b39b13ccfd3c) M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: b26cf7b48230fa6c04dacd944f76b0573c759bb0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b26cf7b48230fa6c04dacd944f76b0573c759bb0 Author: Konstantin Belousov (Tue 9 Dec 2025 03:53:50 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:16 BST) x88/local_apic.c: for each lvt element, add LVT register index Reviewed by: markj Tested by: pho Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D54543 (cherry picked from commit 87ed56a5c43521d97975d936df4fc36184f1b685) M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: 847c60455a9ee7577cd986eb455cc4a855ff8ff0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=847c60455a9ee7577cd986eb455cc4a855ff8ff0 Author: Konstantin Belousov (Tue 9 Dec 2025 01:52:04 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:15 BST) x86/local_apic.c: convert lvts[] and elvts[] arrays to designated initializers Reviewed by: markj Tested by: pho Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D54543 (cherry picked from commit 4938ee8064868f120413405f1b3aa40344a6fabd) M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: 6ea0ce113c50c9a275ce1df10baaa4173da682e4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6ea0ce113c50c9a275ce1df10baaa4173da682e4 Author: Ryan Libby (Sun 19 Jul 2026 04:19:52 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:15 BST) i386: supply thermal interrupt handler This fixes a build break for i386. Reviewed by: kib, olce, Koine Yuusuke Fixes: 87ba088fa310 ("x86/local_apic.c: Add support for installing a thermal interrupt handler") Differential Revision: https://reviews.freebsd.org/D58332 (cherry picked from commit cb325dcedfa291c9bfe350a513694df3776a17a4) M sys/i386/i386/apic_vector.S _____________________________________________________________________________________________________________ Commit: 019f643bc0a7d19dba53ff728e1d458e9dc689a9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=019f643bc0a7d19dba53ff728e1d458e9dc689a9 Author: Olivier Certner (Thu 2 Jul 2026 14:05:09 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:15 BST) x86/local_apic.c: Thermal interrupt support: Additional style fixes Rename handler function type 'lapic_thermal_handle_function' to the shorter 'lapic_thermal_handler_t'. Move it closer to the function declaration block where it is used. Make it a true function type (no pointer) and add explicit pointer marks on usage. Rename 'lapic_thermal_function_value' to the more immediately clear 'lapic_thermal_function_arg'. In lapic_thermal_enable(), use 'func_arg' as the argument name for the handler argument, which at least refers to function 'func', rather than the generic 'value'. Finally, rename the global handler variable from 'lapic_thermal_function_ptr' to the shorter 'lapic_thermal_function' (dynamic functions can be referenced only through a pointer). MFC with: 87ba088fa310 ("x86/local_apic.c: Add support for installing a thermal interrupt handler") Sponsored by: The FreeBSD Foundation (cherry picked from commit e1f4a8cb8656e64a1fe2b1ab519821b14c4985a0) M sys/x86/include/apicvar.h M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: 7b675fe7306db65581b3da800fc07c4cc7def134 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7b675fe7306db65581b3da800fc07c4cc7def134 Author: Koine Yuusuke (Wed 1 Jul 2026 16:28:21 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:14 BST) x86/local_apic.c: Add support for installing a thermal interrupt handler The thermal interrupt is initially masked. Thermal interrupt handling is enabled by calling lapic_enable_thermal(), which installs a (single) handler. [olce: Wrote the commit message.] Reviewed by: kib, olce MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D44454 (cherry picked from commit 87ba088fa3108dd180008a04f25760ec71476c87) M sys/amd64/amd64/apic_vector.S M sys/x86/include/apicvar.h M sys/x86/x86/local_apic.c _____________________________________________________________________________________________________________ Commit: 94ec0a9c183e4801c54b264429bf6ebbe397f71c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=94ec0a9c183e4801c54b264429bf6ebbe397f71c Author: Elliott Mitchell (Tue 1 Oct 2024 20:56:25 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:14 BST) intr/x86: add ioapic_drv_t to reduce number of casts in IO-APIC implementation void * is handy when you truly do not care about the type. Yet there is so much casting back and forth in the IO-APIC code as to be hazardous. Achieve better static checking by the compiler using a typedef. Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/1457 (cherry picked from commit 90fb07edbd7adb653bd8dc1aac09a63b7ff76f89) M sys/x86/include/apicvar.h M sys/x86/x86/io_apic.c M sys/x86/x86/mptable.c _____________________________________________________________________________________________________________ Commit: afd579619956ff69be52cf6a9c4804df1bdd8cb9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=afd579619956ff69be52cf6a9c4804df1bdd8cb9 Author: Artem Bunichev (Sun 5 Jul 2026 20:01:36 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:13 BST) ps.1: Fix broken comment line While here, remove the long-unused dash in the first line. Reviewed by: ziaee, olce Fixes: ddf144a04b53 ("ps.1: Revamp: Explain general principles, update to match reality") MFC after: 1 day Differential Revision: https://reviews.freebsd.org/D58038 (cherry picked from commit 759ce9a2b38e1de70c14c81dee7e245bf0bc6b94) M bin/ps/ps.1 _____________________________________________________________________________________________________________ Commit: 0e4008992fc548edb1354a2ad56f474ae0dc5bc5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0e4008992fc548edb1354a2ad56f474ae0dc5bc5 Author: Olivier Certner (Fri 26 Jun 2026 22:23:57 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:13 BST) files: riscv, arm64: Remove redundant 'ofw_cpu.c' Should have been removed when that line was moved from 'files.arm' to 'files'. Fixes: 14e1a2cd295d ("Move ofw_cpu file to the main files conf file.") MFC after: 2 weeks Event: Halifax Hackathon 202606 Location: Seat 36K in AC667, over Maine near Canadian border Sponsored by: The FreeBSD Foundation (cherry picked from commit 10213f01773f22ab948ec1e87c880b1d19a1fc45) M sys/conf/files.arm64 M sys/conf/files.riscv _____________________________________________________________________________________________________________ Commit: cd289575964eb3b358399ec820ead3a48403465a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cd289575964eb3b358399ec820ead3a48403465a Author: Olivier Certner (Fri 26 Jun 2026 16:21:41 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:13 BST) acpi_timer(4): Remove unused 'acpi_timer_disabled' boolean Same reason as for the previous commit to acpi_cpu(4). This boolean is not used anywhere. Disabling acpi_timer(4) can be done through the regular ACPI disable mechanism (using the 'debug.acpi.disabled' tunable, see acpi_disabled()). Reviewed by: emaste (implicit) Fixes: ac3ede5371af ("x86/xen: remove PVHv1 code") MFC after: 3 days Event: Halifax Hackathon 202606 Location: Dalhousie CS Faculty building Sponsored by: The FreeBSD Foundation (cherry picked from commit ad26a56cf2f55967cc73d04a6ea17c27892d3141) M sys/dev/acpica/acpi_timer.c M sys/x86/include/init.h _____________________________________________________________________________________________________________ Commit: 34c289ede0d8cbbdce0ce64dc5cda7421cb00291 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=34c289ede0d8cbbdce0ce64dc5cda7421cb00291 Author: Olivier Certner (Fri 26 Jun 2026 16:12:58 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:12 BST) acpi_hpet(4): Remove unused 'acpi_hpet_disabled' boolean Same reason as for the previous commit to acpi_cpu(4). This boolean is not used anywhere. Disabling acpi_hpet(4) can be done through the regular ACPI disable mechanism (using the 'debug.acpi.disabled' tunable, see acpi_disabled()). Reviewed by: emaste (implicit) Fixes: ac3ede5371af ("x86/xen: remove PVHv1 code") MFC after: 3 days Event: Halifax Hackathon 202606 Location: Dalhousie CS Faculty building Sponsored by: The FreeBSD Foundation (cherry picked from commit 25df388574ac1d295f4014825de0df1d65cbdc53) M sys/dev/acpica/acpi_hpet.c M sys/x86/include/init.h _____________________________________________________________________________________________________________ Commit: 0841ba990d0863dbc000c82bfd97daaf184b152d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0841ba990d0863dbc000c82bfd97daaf184b152d Author: Olivier Certner (Fri 26 Jun 2026 15:40:50 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:12 BST) acpi_cpu(4): Remove unused 'acpi_cpu_disabled' boolean It is not used anywhere. Disabling acpi_cpu(4) can be done through the regular ACPI disable mechanism (using the 'debug.acpi.disabled' tunable, see acpi_disabled()). Reviewed by: emaste, obiwac Fixes: ac3ede5371af ("x86/xen: remove PVHv1 code") MFC after: 3 days Event: Halifax Hackathon 202606 Location: Dalhousie CS Faculty building Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57888 (cherry picked from commit 98a77972381c6bb5ceda375fd1db7dccb3a1c89e) M sys/dev/acpica/acpi_cpu.c M sys/x86/include/init.h _____________________________________________________________________________________________________________ Commit: 22b6533324517ef422cd1e1d2c6386aff83f94da URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=22b6533324517ef422cd1e1d2c6386aff83f94da Author: Olivier Certner (Fri 19 Jun 2026 02:51:32 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:12 BST) sched_ule: Fix off by one in preempt_thresh definition Since 'preempt_thresh' is set to PRI_MIN_KERN by default, and comparison of the considered thread's priority with that threshold is done with '<=', PRI_MIN_KERN threads actually can preempt other threads, contrary to other non-interrupt kernel ones (between PRI_MIN_KERN + 1 and PRI_MAX_KERN). So, replace the comparison operator '<=' by '<'. The alternative would be to change the default value, but changing the comparison instead has the benefit to be consistent with the 0 setting (which forbids preemption entirely), since allowing only threads with priority 0 to preempt becomes possible. Consequently, we also change the default value for the FULL_PREEMPTION option by adding 1 to PRI_MAX_IDLE (in practice, that does not make any difference in the current setting, since no preemption will happen if the new priority value is not strictly lower than the current one, and PRI_MAX_IDLE is PRI_MAX, the highest possible priority). Reviewed by: markj Fixes: ae7a6b38d53f ("ULE 3.0: Fine grain scheduler locking and affinity improvements. (...)") MFC after: 2 weeks Event: Halifax Hackathon 202606 Location: jrm@'s dining room Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57828 (cherry picked from commit 961f4814286820f242d8d5407b9fd7238e896936) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: 83e087e0ea21b8266ab3a381c2858778df0f2bcb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=83e087e0ea21b8266ab3a381c2858778df0f2bcb Author: Olivier Certner (Thu 25 Jun 2026 02:25:31 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:11 BST) .git-blame-ignore-revs: sys/kern/kern_cpu.c whitespace changes Event: Halifax Hackathon 202606 Location: jrm@'s kitchen Sponsored by: The FreeBSD Foundation (cherry picked from commit 5f43a84d049ec3451c7c5fa5b4f00a299d5f4c34) M .git-blame-ignore-revs _____________________________________________________________________________________________________________ Commit: 55e2f70f6ae1f13279b35497e8bd5cd9f9f0fc97 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=55e2f70f6ae1f13279b35497e8bd5cd9f9f0fc97 Author: ShengYi Hung (Thu 25 Jun 2026 02:13:17 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:11 BST) cpufreq: Fix the incorrect format Event: Halifax Hackathon 202606 Location: jrm@'s dining room Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57275 (cherry picked from commit 35255280e51ca8f7a8f350b944aa6ffe42a7e5b5) M sys/kern/kern_cpu.c _____________________________________________________________________________________________________________ Commit: 905b6396644d7a7fa6ce475cec6475ece26fd486 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=905b6396644d7a7fa6ce475cec6475ece26fd486 Author: Olivier Certner (Tue 16 Jun 2026 17:11:58 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:11 BST) sched_ule: sched_clock(): Remove a superfluous space MFC after: 1 week Event: Halifax Hackathon 202606 Sponsored by: The FreeBSD Foundation (cherry picked from commit 5f376d52f2c86fd19e3f774a02c4b0debeb3f2cf) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: ef7f806e511ffea66f8ecdcbd42f028e048d2cc5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ef7f806e511ffea66f8ecdcbd42f028e048d2cc5 Author: Olivier Certner (Mon 15 Jun 2026 22:07:00 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:10 BST) sched_ule: sched_priority(): More accurate __unused annotation Change a '__unused' to '__diagused', which is more precise for that use. No functional change. MFC after: 1 week Event: Halifax Hackathon 202606 Sponsored by: The FreeBSD Foundation (cherry picked from commit 83a6946595829407c80075f33e49329d1b621522) M sys/kern/sched_ule.c _____________________________________________________________________________________________________________ Commit: 16bab344333183f1578c77b046295ee8df5fcf35 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=16bab344333183f1578c77b046295ee8df5fcf35 Author: Olivier Certner (Thu 4 Jun 2026 08:10:29 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:10 BST) acpi: Suffix acpi_sleep_enable() with '_locked' For clarification. This function assumes that the acpi mutex is held, contrary to acpi_sleep_disable(). No functional change (intended). Reviewed by: obiwac Event: Halifax Hackathon 202606 Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/OlCe2/freebsd-src/pull/8 (cherry picked from commit 3b3911aaf834824f2de0db9fc7d0b9e2b3c089b4) M sys/dev/acpica/acpi.c _____________________________________________________________________________________________________________ Commit: 5850343763cb82096609ac9bd449dd4c3f259ce3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5850343763cb82096609ac9bd449dd4c3f259ce3 Author: Olivier Certner (Thu 4 Jun 2026 11:01:23 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:10 BST) MAC/do: Clarify comments about flags attached per-ID or per-ID-type No functional change. MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 0c2d64ce3da9c042da133c8b6d7391abb177f2c9) M sys/security/mac_do/mac_do.c _____________________________________________________________________________________________________________ Commit: f2d42bc8bf126a22107e729a358d21be5309f620 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f2d42bc8bf126a22107e729a358d21be5309f620 Author: Olivier Certner (Thu 4 Jun 2026 10:49:23 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:09 BST) kern_prot.c: Belatedly add copyright See the commit log for the why. MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 1c0e5c53ff1672a93fc42988020723bb6bc427c1) M sys/kern/kern_prot.c _____________________________________________________________________________________________________________ Commit: b68849a932537d8130ef4f0b64c56ae2320cc777 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b68849a932537d8130ef4f0b64c56ae2320cc777 Author: Olivier Certner (Fri 22 May 2026 15:21:39 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:09 BST) MAC/do: Tests: Quote the source directory In a standard test suite installation, this is not necessary, but be bullet-proof to custom ones, however improbable. Reviewed by: bapt MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/38 (cherry picked from commit 33daea3f862d7fe996602756805a92a600356f94) M tests/sys/mac/do/invalid_configs.sh M tests/sys/mac/do/valid_configs.sh _____________________________________________________________________________________________________________ Commit: 3a9e6cc05ae329f646cfeaea0d499a6a6f4807af URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3a9e6cc05ae329f646cfeaea0d499a6a6f4807af Author: Olivier Certner (Fri 22 May 2026 15:19:57 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:09 BST) MAC/do: Tests: Declare required programs closer to use Reviewed by: bapt MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/38 (cherry picked from commit 6159187329b56a9b550db193796ae4d76c1a306c) M tests/sys/mac/do/Makefile M tests/sys/mac/do/common.sh _____________________________________________________________________________________________________________ Commit: 2974506cd06752e54a23490f7a32f2e7bb6c8287 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2974506cd06752e54a23490f7a32f2e7bb6c8287 Author: Olivier Certner (Tue 26 May 2026 18:06:55 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:08 BST) MAC/do: Tests: Fix copyrights No comma needed after a single year. Add SPDX. Reviewed by: bapt MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/38 (cherry picked from commit b0c948fe92acc8bd295cc53584e25c082c749cd1) M tests/sys/mac/do/common.sh M tests/sys/mac/do/invalid_configs.sh M tests/sys/mac/do/valid_configs.sh _____________________________________________________________________________________________________________ Commit: 0543d619743d0b0d5c40232355252477b84ed567 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0543d619743d0b0d5c40232355252477b84ed567 Author: Olivier Certner (Fri 22 May 2026 17:47:04 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:08 BST) MAC/do: Tests: Remove shebang lines They are automatically added by . Reviewed by: bapt MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/38 (cherry picked from commit 79a987aba154aca5965e4746ec5f867be8f22997) M tests/sys/mac/do/invalid_configs.sh M tests/sys/mac/do/valid_configs.sh _____________________________________________________________________________________________________________ Commit: 5af7d6930bf32a980b99c830e3fe58149771d177 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5af7d6930bf32a980b99c830e3fe58149771d177 Author: Olivier Certner (Mon 25 May 2026 17:01:10 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:08 BST) acpi: On /dev/power suspend, trigger userspace notifications On a suspend request via ioctl(), /dev/acpi (and compatible /dev/apm) both call acpi_ReqSleepState() instead of directly calling acpi_EnterSleepState(). The former does more checks, returns success if the machine is already suspending, and notifies user space (via devd(8)) about the impending suspend. In other words, it seems to have been designed for user consumption more than the latter function. So, use acpi_ReqSleepState() in place of acpi_EnterSleepState() in acpi_pm_func(), which is ultimately called by power_pm_suspend(), itself called by power_ioctl(). Other callers of power_pm_suspend() (such as the console drivers) are also user-facing facilities, so should also benefit from this change. Reviewed by: mhorne, imp Tested by: mhorne MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57239 (cherry picked from commit 44eb2883134e465c28468213f79567c64fe26de1) M sys/dev/acpica/acpi.c _____________________________________________________________________________________________________________ Commit: 8b8b4695197f01e70e9ff082bf28ab0b7f539e75 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8b8b4695197f01e70e9ff082bf28ab0b7f539e75 Author: Olivier Certner (Thu 21 May 2026 21:18:19 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:07 BST) BSD.tests.dist: Add the new sys/mac/do directory Without that, 'make distributeworld' fails ('make buildworld' and 'make installworld' do not need it). Fixes: cba191e291c1 ("MAC/do: Add basic tests on setting rules") MFC after: 1 minute Sponsored by: The FreeBSD Foundation (cherry picked from commit ad3d7666e00bb0261dd2b80f5f2d56ceeb84aba7) M etc/mtree/BSD.tests.dist _____________________________________________________________________________________________________________ Commit: 330833d8c8bb0d5b42020c5dce3a48d100ca71ba URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=330833d8c8bb0d5b42020c5dce3a48d100ca71ba Author: Olivier Certner (Thu 21 May 2026 14:34:14 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:07 BST) MAC/do: Add basic tests on setting rules MFC after: 1 minute Sponsored by: The FreeBSD Foundation (cherry picked from commit cba191e291c17b32247e12d6f94dcde56994bfe6) M tests/sys/mac/Makefile A tests/sys/mac/do/Makefile A tests/sys/mac/do/common.sh A tests/sys/mac/do/invalid_configs.sh A tests/sys/mac/do/valid_configs.sh _____________________________________________________________________________________________________________ Commit: e1f055c6517e194df1bbb37b9f24426aac25b082 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e1f055c6517e194df1bbb37b9f24426aac25b082 Author: Olivier Certner (Thu 21 May 2026 19:52:37 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:07 BST) mac_do.4: Jail parameter takes 'new', not 'enable'; uid_t/gid_t are 32-bit MFC after: 1 minute Sponsored by: The FreeBSD Foundation (cherry picked from commit 21df76d01fce35b0398cf38c31928c6f47111d55) M share/man/man4/mac_do.4 _____________________________________________________________________________________________________________ Commit: e886baa0f1240617e5475e79bd0e762c44b913ce URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e886baa0f1240617e5475e79bd0e762c44b913ce Author: Olivier Certner (Mon 27 Apr 2026 11:16:30 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:06 BST) chroot.2: "filedescriptors" => "file descriptors" "filedescriptors" is the odd one out when looking at other manual pages. MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 4c6d8aa069f2ac22f801fa69add61085631b3356) M lib/libc/sys/chroot.2 _____________________________________________________________________________________________________________ Commit: 58a0b5d619962966408bb05a34b5ecb9e7fd4807 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=58a0b5d619962966408bb05a34b5ecb9e7fd4807 Author: Olivier Certner (Thu 2 Apr 2026 20:13:02 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:06 BST) netstat(1): '-w': Banners to appear before a new statistics line, not after Recurring banners except the first are printed just after the latest interval's statistics line, giving the false impression that the latter are omitted. It is also better to print a new banner only if it is going to be followed by a new line of statistics, in case netstat(1) is interrupted or we have reached the number of iterations specified by '-q'. Fix this by pushing printing these banners inside the loop producing statistics lines, after having waited for the next interval. The first banner is printed before the loop, as we want it to be printed immediately at launch, even if at this point we do not have statistics to display (we have to wait for an interval to compute these, as they are based on a difference). While here, remove the 'goto' spaghetti by putting banner printing into its own private function and using a proper infinite loop in sidewaysintpr(). While here, document the why of the 21 statistics line span between two banners. While here, check for the number of output lines of statistics once such a line has effectively been printed. This allows to remove the internal incrementation performed when reading '-w''s argument, which was a hack to compensate the misplaced check. While here, in the manual page, simplify the description of the '-w' mode and mention that passing 0 to '-q' means "no count limit". Reviewed by: glebius Fixes: 84c1edcbad7d ("Rewrite netstat/if.c to use ...") Fixes: bf10ffe1d3a9 ("Add a new option, -q howmany, ...") MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D56227 (cherry picked from commit 31749859525b2b79634dc7c066c3563be5b1e3fd) M usr.bin/netstat/if.c M usr.bin/netstat/main.c M usr.bin/netstat/netstat.1 _____________________________________________________________________________________________________________ Commit: 9356619327e726ee2e0453c2198102b562aa3a02 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9356619327e726ee2e0453c2198102b562aa3a02 Author: Olivier Certner (Fri 27 Mar 2026 12:43:24 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:05 BST) vfs: Simplify vfs_write_resume()/vn_start_write_refed() The call to vn_start_write_refed() from vfs_write_resume() with 'mplocked' set to 'true' exactly boils down to doing an increment of 'mnt_writeopcount', albeit with lots of unnecessary verifications. Replace it with an inline incrementation. As the original call was the last with 'mplocked' with 'true', remove the 'mplocked' parameter from vfs_write_resume(), simplifying its code accordingly ('mplocked' always false). While here, in vfs_write_resume(), initialize 'error' out of the mount lock. Reviewed by: kib MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D56108 (cherry picked from commit 4deb934c1a1051d7ef41e9309d066742722ce180) M sys/kern/vfs_vnops.c _____________________________________________________________________________________________________________ Commit: 0b81ce7bcbb3cb23e711a682de6fa3d6bfa8c5b9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0b81ce7bcbb3cb23e711a682de6fa3d6bfa8c5b9 Author: Olivier Certner (Fri 27 Mar 2026 14:46:58 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:05 BST) DEVICE_IDENTIFY.9: Fix function call to detect driver in example code Fixes: ccabc7c2e556 ("DEVICE_IDENTIFY.9: Modernize description and use cases") MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit c78937677c973c48fd438ea06cfb51e11cc62851) M share/man/man9/DEVICE_IDENTIFY.9 _____________________________________________________________________________________________________________ Commit: 045b82909cb3c9cb982dc110d72217a42560e299 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=045b82909cb3c9cb982dc110d72217a42560e299 Author: Olivier Certner (Sat 21 Mar 2026 13:39:04 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:05 BST) MAC/do: Comments: Rephrase one, fix a typo in another No functional change. MFC after: 3 days Event: AsiaBSDCon 2026 Sponsored by: The FreeBSD Foundation (cherry picked from commit 954aaf3958e2ea0e9b1811090ddbb9d8b13a3e5a) M sys/security/mac_do/mac_do.c _____________________________________________________________________________________________________________ Commit: 188d88389919da1768145c6e2c10a11b0a47225f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=188d88389919da1768145c6e2c10a11b0a47225f Author: Olivier Certner (Mon 1 Jun 2026 08:23:08 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:04 BST) style.9: Fix a typo (missing word) Fixes: af2c7d9f6452 ("style.9: Encourage style changes when doing significant modifications") MFC after: 1 day Sponsored by: The FreeBSD Foundation (cherry picked from commit 1876f629b97608679f1bd71b9aa88a57b55c4574) M share/man/man9/style.9 _____________________________________________________________________________________________________________ Commit: 90f53c300ac9ddce9a10f9f67e1c22660148fce6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=90f53c300ac9ddce9a10f9f67e1c22660148fce6 Author: Olivier Certner (Fri 3 Oct 2025 13:05:46 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:04 BST) style.9: Encourage style changes when doing significant modifications The rule of allowing style changes when about half or more of a file (or group of files), coupled with the advice of avoiding stylistic changes, could be interpreted as forbidding most style changes, even in heavily modified functions. In order to rule out that interpretation and ease transition towards our prescribed style: 1. Clarify that avoiding stylistic changes concerns only "standalone" ones. 2. Actually encourage changing the style, and extend the cases where it is explicitly allowed to do so to any single logical unit as little as a function, keeping the existing "about half" of modified code as a rule of thumb. When point 2 above applies, encourage to commit pure style changes separately, and to add style-only commits to '.git-blame-ignore-revs'. Add a specific note ruling out "horizontal" style changes spanning unrelated directories in the whole tree, which make the merge (MFC) process more difficult. While here, be slightly more stringent on new kernel code. While here, regroup the paragraphs talking about style, and put them at the end (before the recent C++ section). While here, rephrase the requirement on third-party maintained code to be slightly less stringent. Reviewed by: jhb, imp Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D52885 (cherry picked from commit af2c7d9f6452f2281a832b03375910f99230f924) M share/man/man9/style.9 _____________________________________________________________________________________________________________ Commit: 8b242548a69e0d5f745bdc0b44e2ed76fa898a0d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8b242548a69e0d5f745bdc0b44e2ed76fa898a0d Author: Gordon Bergling (Sun 26 Oct 2025 15:52:11 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:04 BST) style.9: Fix two typos in the manual page - s/signficant/significant/ - s/protoypes/prototypes/ MFC after: 5 days (cherry picked from commit 8eedabfe9ac8b5841662d342c5ba8cbb0ac6e0c5) M share/man/man9/style.9 _____________________________________________________________________________________________________________ Commit: 9798fb6f3b341041836a52dca2259d656d553f45 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9798fb6f3b341041836a52dca2259d656d553f45 Author: Trond Endrestøl (Thu 31 Jul 2025 10:04:10 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:03 BST) style.9: Fix "parantheses" typos in the new C++ section PR: 288564 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288564 ) Fixes: 4b02ad9d5063 ("style.9: Add a C++ section") Sponsored by: The FreeBSD Foundation (commit) (cherry picked from commit 868b5492d184683c4b46927706f7cbd551d0e209) M share/man/man9/style.9 _____________________________________________________________________________________________________________ Commit: e8a09797dd1955a8888c378a6e8ebb92075cf646 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e8a09797dd1955a8888c378a6e8ebb92075cf646 Author: John Baldwin (Mon 28 Jul 2025 19:29:32 BST) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:03 BST) style.9: Add a C++ section This section adds several style guidelines for C++ in FreeBSD's base system both enumerating some differences relative to the C KNF style and addressing some unique C++ idioms not addressed by the existing KNF style. This section is not exhaustive but does include an initial set of guidelines. Reviewed by: ivy, emaste Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D50983 (cherry picked from commit 4b02ad9d506342ae47f722b830e603f5adc86b48) M share/man/man9/style.9 _____________________________________________________________________________________________________________ Commit: a00d53218a0998aa083789af8b37c76af8dbf34c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a00d53218a0998aa083789af8b37c76af8dbf34c Author: Lexi Winter (Thu 27 Mar 2025 14:23:13 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:03 BST) style.9: relax "return (value)" requirement for C++ consider the following C++ code: struct S { int a, b; }; S f() { return {1, 2}; } according to style(9), the return statement should be formatted as: return ({1, 2}); however, this is not valid C++ code and will not compile. add an exception to style(9) to cover this case. Reviewed by: imp, emaste Pull Request: https://github.com/freebsd/freebsd-src/pull/1623 Closes: https://github.com/freebsd/freebsd-src/pull/1623 (cherry picked from commit daf47b9ec9ed360dfdff6769ae4d0c2c16972552) M share/man/man9/style.9 _____________________________________________________________________________________________________________ Commit: b6bbc04fcd0b7b9f6423d7914f554bcca4beec37 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b6bbc04fcd0b7b9f6423d7914f554bcca4beec37 Author: Olivier Certner (Thu 12 Feb 2026 12:33:46 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:02 BST) cpufreq(4): cpufreq_levels_sysctl(): Remove always false NULL test 'sc->levels_buf' is initialized with malloc(M_WAITOK), so can never be NULL. Another sysctl handler function (cpufreq_curr_sysctl()) already relies on that. MFC after: 2 weeks Sponsored by: The FreeBSD Foundation (cherry picked from commit 953b9164c3d93e820a53b4fdebbde7fabb7b7644) M sys/kern/kern_cpu.c _____________________________________________________________________________________________________________ Commit: 304d7fcdf48a8bb89e6c0195db9bb7b0a2a6ea18 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=304d7fcdf48a8bb89e6c0195db9bb7b0a2a6ea18 Author: Olivier Certner (Wed 4 Feb 2026 13:04:20 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:02 BST) kernel dump: dumpsys_gen_pa_next(): Fix "no more chunks" condition detection In the (improbable) cases where either: - All entries in dump_map[] are used, so there is no guard entry filled with zeros. - Some dump region has size 0. We would respectively access dump_map[] out-of-bounds or omit further dump regions when iterating. MFC after: 2 weeks Sponsored by: The FreeBSD Foundation (cherry picked from commit 7e5f4bb3a1c999d1893528faa75559f37365de47) M sys/kern/kern_dump.c _____________________________________________________________________________________________________________ Commit: 1129fecbb722e421c7c379beb8abdadb2c08c12e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1129fecbb722e421c7c379beb8abdadb2c08c12e Author: Olivier Certner (Fri 6 Feb 2026 20:46:48 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:02 BST) sys/sysctl.h: Add missing include Hopefully, 'sys/sysctl.h' is really self-contained now. This fixes the GENERIC-NODEBUG compilation error in 'hwpstate_common.c' after commit 804329587508 (see below). Fixes: 1a446f765d9c ("sys/sysctl.h: Make it self-contained when included from the kernel") Fixes: 804329587508 ("hwpstate{_amd,intel}(4): Move common knobs to a separate file") Sponsored by: The FreeBSD Foundation (cherry picked from commit bfd50a32ff26067552220c6f08e6025be3603962) M sys/sys/sysctl.h _____________________________________________________________________________________________________________ Commit: 3d20f69bdaacf27b93e4496fe0460e8b051c445b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3d20f69bdaacf27b93e4496fe0460e8b051c445b Author: Olivier Certner (Fri 6 Feb 2026 15:02:39 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:01 BST) sys/sysctl.h: Make it self-contained when included from the kernel MFC after: 2 weeks Sponsored by: The FreeBSD Foundation (cherry picked from commit 1a446f765d9cb34e8137ffa6dbb71ce551560cc1) M sys/sys/sysctl.h _____________________________________________________________________________________________________________ Commit: c48111822e5438c7b378b2c93b01314dc024d6f1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c48111822e5438c7b378b2c93b01314dc024d6f1 Author: Olivier Certner (Thu 5 Feb 2026 08:44:28 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:01 BST) i386 minidump: Remove unused macros No functional change (intended). MFC after: 2 weeks Sponsored by: The FreeBSD Foundation (cherry picked from commit 584c4e0abbfdbac355601491a695c7a8fd5d8ab3) M sys/i386/i386/minidump_machdep_base.c _____________________________________________________________________________________________________________ Commit: 4018a762498ab20c6545942faaaefd6371728f48 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4018a762498ab20c6545942faaaefd6371728f48 Author: Olivier Certner (Tue 27 Jan 2026 09:45:03 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:01 BST) sysctl(9): Booleans: Accept integers to ease knob conversion In sysctl_handle_bool(), if the output buffer (for the old value) has room for exactly 4 bytes (sizeof(int)), then output the current boolean value as an integer rather than a 'uint8_t'. Conversely, if 4 bytes exactly remain in the input buffer (for the new value), treat them as an integer and derive the new boolean value from it. Doing so allows to convert existing integer syscstl knobs that are interpreted as a boolean into true boolean ones while staying backwards-compatible. That brings no drawback as no code currently uses sysctl_handle_bool() as part of a series of calls to sysctl_handle_*() functions for (de)serialization of some compound structure. If that case ever materializes, it can be easily solved, e.g., by creating a sysctl_handle_bool_strict() variant. In the future, we might want to go further and generally be more liberal in the external type of integers we accept and output, by tolerating any kind of supported integers (8-bit to 64-bit), enabling integer type changes of knob's internal representations without breaking the ABI for consumers hardcoding the passed integers (instead of relying on sysctl knob type information). Reviewed by: jhb MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54925 (cherry picked from commit 406da392ef8d77b39fe9bfd36bdb440eb3e5ae0a) M sys/kern/kern_sysctl.c _____________________________________________________________________________________________________________ Commit: fbe6a98490f9ef58cdb13f8cabc3177f9757842d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fbe6a98490f9ef58cdb13f8cabc3177f9757842d Author: Olivier Certner (Fri 30 Jan 2026 17:33:12 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:00 BST) amd64: parse_memmap(): Move comment about size at proper place While here, declare 'size' only in the relevant block. No functional change (intended). MFC after: 1 week Sponsored by: The FreeBSD Foundation (cherry picked from commit 53bb02015fce72c79498842b898faefc2da3b0fb) M sys/amd64/amd64/machdep.c _____________________________________________________________________________________________________________ Commit: c4b7e6e3b7f42be1d4617c802f74d8c7026ee603 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c4b7e6e3b7f42be1d4617c802f74d8c7026ee603 Author: Konstantin Belousov (Wed 4 Feb 2026 00:22:08 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:00 BST) x86: provide extended description for x86_msr_op(9) Reviewed by: markj, olce Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55045 (cherry picked from commit cb81a9c18db93a2046c47b0c7dc0bd6adcdd2495) M sys/x86/include/x86_var.h M sys/x86/x86/cpu_machdep.c _____________________________________________________________________________________________________________ Commit: 8b2546469323c72a954d4c0c1202d0845b80c3ee URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8b2546469323c72a954d4c0c1202d0845b80c3ee Author: Konstantin Belousov (Wed 4 Feb 2026 00:24:58 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:59:00 BST) x86_msr_op(9): consistently return the value read from MSR If the operation is executed on more than one CPU, a random instance of the read value is returned. Reviewed by: markj, olce Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55045 (cherry picked from commit 36ceb5509d01ff2e6482a78ca809c344574e9a25) M sys/x86/x86/cpu_machdep.c _____________________________________________________________________________________________________________ Commit: 7ad1f88f6f5db6754d31f2018599c92efb11ab6f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7ad1f88f6f5db6754d31f2018599c92efb11ab6f Author: Konstantin Belousov (Sun 1 Feb 2026 23:43:50 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:58:59 BST) x86: add a safe variant of MSR_OP_SCHED* operations for x86_msr_op(9) The modifier executes the operation using msr{read,write}_safe() functions instead of plain msr reads and writes. Returns EFAULT if any MSR access caused #GP. Reviewed by: markj, olce Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55045 (cherry picked from commit af99e40af1dd4e8b39ca986240ee8b9aea722958) M sys/x86/include/x86_var.h M sys/x86/x86/cpu_machdep.c _____________________________________________________________________________________________________________ Commit: 3f511fa41b3bc846f1af7a6e7a3a5dd0b2dbf0ae URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3f511fa41b3bc846f1af7a6e7a3a5dd0b2dbf0ae Author: Olivier Certner (Fri 23 Jan 2026 20:52:46 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:58:59 BST) x86: x86_msr_op(): MSR_OP_LOCAL: Disable interrupts on atomic ops On MSR_OP_LOCAL and non-naturally-atomic operations (MSR_OP_ANDNOT and MSR_OP_OR), there is no guarantee that we are not interrupted between reading and writing the MSR, and that interruption could actually perform some operation on that MSR, which would be lost. Prevent that problem by temporarily disabling interrupts around MSR manipulation. Reviewed by: kib Discussed with: markj MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54996 (cherry picked from commit e5f8cbb86d58f25b5ff168506b78d09dca266fb6) M sys/x86/include/x86_var.h M sys/x86/x86/cpu_machdep.c _____________________________________________________________________________________________________________ Commit: 3e6bdd3acecb0ff414421dadfc1e3e0e00278d85 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3e6bdd3acecb0ff414421dadfc1e3e0e00278d85 Author: Olivier Certner (Thu 22 Jan 2026 14:37:00 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:58:59 BST) x86: x86_msr_op(): Simplify assertions Simplify them by moving them into more natural places, i.e., default cases of 'switch' statements. No functional change (intended). Reviewed by: kib MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54996 (cherry picked from commit a1a8bcdfde2e616cffeb4bf4e1968ba55cf409e9) M sys/x86/x86/cpu_machdep.c _____________________________________________________________________________________________________________ Commit: 370314d0946e38563b87a6f519e219ece4591395 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=370314d0946e38563b87a6f519e219ece4591395 Author: Olivier Certner (Thu 22 Jan 2026 14:22:01 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:58:58 BST) x86: x86_msr_op(): Move setting mode up, delineate logical blocks No functional changes (intended). Reviewed by: kib MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54996 (cherry picked from commit 7acd7ac6385c783699a64216198d7f2e244cc3b4) M sys/x86/x86/cpu_machdep.c _____________________________________________________________________________________________________________ Commit: eea360993be8d0fddbae1816e890666274488ba8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=eea360993be8d0fddbae1816e890666274488ba8 Author: Olivier Certner (Thu 8 Jan 2026 15:20:38 GMT) Committer: Olivier Certner (Thu 23 Jul 2026 10:58:52 BST) ps(1): Sort headers Found these changes by chance in an old patch file. Should have been committed along with the ps(1) modifications done in March 2025. No functional change (intended). MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 730b3e20069b7115d16f02525103c6c05fa04759) M bin/ps/keyword.c M bin/ps/ps.c _____________________________________________________________________________________________________________ Commit: 6eaa8ed5d203a96c83a0e873ad963dcab181e5de URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6eaa8ed5d203a96c83a0e873ad963dcab181e5de Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:43:56 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 18:04:28 BST) libfetch: Reduce copying Reduce the amount of copying we do when performing buffered reads. MFC after: 1 week Reviewed by: op Differential Revision: https://reviews.freebsd.org/D58113 (cherry picked from commit 60382b4a04fa39e9bf65b964b1b7b4bed6eaa56a) M lib/libfetch/common.c M lib/libfetch/common.h M lib/libfetch/ftp.c M lib/libfetch/http.c _____________________________________________________________________________________________________________ Commit: 2902f7af8c7e19e03274db4599ada46374954b43 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2902f7af8c7e19e03274db4599ada46374954b43 Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:43:51 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 18:04:28 BST) libfetch: Make fetch_ref an inline Make fetch_ref() an inline and provide a fetch_deref(). MFC after: 1 week Reviewed by: op Differential Revision: https://reviews.freebsd.org/D57944 (cherry picked from commit d4e0e1fbc237f0765b9f32b291c087348031c921) M lib/libfetch/common.c M lib/libfetch/common.h M lib/libfetch/ftp.c _____________________________________________________________________________________________________________ Commit: 29564d956bc2e2248d0e10b44471435bb96b7ad9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=29564d956bc2e2248d0e10b44471435bb96b7ad9 Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:43:46 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 18:04:28 BST) fetch: Stop setting an alarm Now that fetchTimeout works reliably, setting an alarm is not only no longer necessary but counterproductive, as it will trigger even if the connection is not actually stalled but merely slow. While here, improve the wording of the manual page's description of the various options for setting a timeout. MFC after: 1 week Reviewed by: op Differential Revision: https://reviews.freebsd.org/D57911 (cherry picked from commit 3dddfe29248c47d1a80dc96a76a308ae910b2a24) M usr.bin/fetch/fetch.1 M usr.bin/fetch/fetch.c _____________________________________________________________________________________________________________ Commit: c83d4ed2b855f379c1af1846b76161fcf83109d9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c83d4ed2b855f379c1af1846b76161fcf83109d9 Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:43:42 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 18:04:27 BST) libfetch: Document fetchTimeout Document the global fetchTimeout variable, now that it works reliably. MFC after: 1 week Reviewed by: op Differential Revision: https://reviews.freebsd.org/D57910 (cherry picked from commit 27b411734c75a7a5abe641d7fbb99dfc622e9aba) M lib/libfetch/fetch.3 _____________________________________________________________________________________________________________ Commit: 74a92173dc614b5f83c12886b014db10c1c19716 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=74a92173dc614b5f83c12886b014db10c1c19716 Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:43:37 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 18:04:27 BST) libfetch: Apply timeout to connection attempts Mark the socket non-blocking before connecting and poll for completion, applying fetchTimeout if set. MFC after: 1 week Reviewed by: op Differential Revision: https://reviews.freebsd.org/D57909 (cherry picked from commit 848f360c8f9ae8d1d97c61f5d63fc624926d5dcd) M lib/libfetch/common.c _____________________________________________________________________________________________________________ Commit: 02e82d417b80a6dfdda59ce602bee5daaf25eba7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=02e82d417b80a6dfdda59ce602bee5daaf25eba7 Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:43:33 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 18:04:27 BST) libfetch: Add read buffering Previously, we would read FTP control connection messages and HTTP reponse headers one character at a time. Now, we read as much as will fit in our buffer and look for a newline. If there is data left over, it will be reused by the next fetch_getln() call. This also requires the addition of a fetch_bufread() which takes the buffer into account, otherwise the start of the HTTP response body will be stuck in the buffer after we read the last line of the header. This should noticeably improve HTTP performance, especially for small transfers. MFC after: 1 week Reviewed by: op Differential Revision: https://reviews.freebsd.org/D57907 (cherry picked from commit a1978277379cf65f1339ab062f335c6f1fa6239f) M lib/libfetch/common.c M lib/libfetch/common.h M lib/libfetch/ftp.c M lib/libfetch/http.c _____________________________________________________________________________________________________________ Commit: edf0ba570acab945bdda0ea8291c0631ca427a21 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=edf0ba570acab945bdda0ea8291c0631ca427a21 Author: Dag-Erling Smørgrav (Mon 13 Jul 2026 07:43:28 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 18:04:27 BST) libfetch: Overhaul socket read / write * Make fetch_ssl_read() and fetch_ssl_write() behave more like read(2) and write(2), and drop fetch_socket_read() in favor of read(2). * Don't request POLLERR, it's implied. * Don't needlessly set errno, it's relatively costly. * Always check for EAGAIN from writev(2), otherwise we will abort on a short write instead of proceeding to poll(2). * Always check for EAGAIN from poll(2) even though it can't happen on FreeBSD; POSIX says it can, and it might in the future. * Rewrite fetch_read() and fetch_writev() to be more similar to each other. The main difference is that a partial read is treated as success while a partial write is treated as failure. PR: 296316 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296316 ) MFC after: 1 week Reviewed by: op Differential Revision: https://reviews.freebsd.org/D57906 (cherry picked from commit 32c341bd1c8b1154128f62fafa6988ed29db564a) M lib/libfetch/common.c M lib/libfetch/common.h _____________________________________________________________________________________________________________ Commit: d860a7333309248b19e30430e85d6dcadba39031 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d860a7333309248b19e30430e85d6dcadba39031 Author: Siva Mahadevan (Tue 23 Jun 2026 18:12:16 BST) Committer: Siva Mahadevan (Tue 21 Jul 2026 16:48:36 BST) awk/tests: xfail inf-nan-torture on riscv64 The fix for this is being tracked upstream here: https://github.com/onetrueawk/awk/issues/269 While here, just cd into $SRCDIR while executing tests, since the test engine isolates every testcase's working directory. This ensures that the xfail actually applies to the next command. Reviewed by: mhorne MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit d0b1a389003b1e6ff5bcf35a7c04654ea7ff87bd) M usr.bin/awk/tests/bugs-fixed/bug_fix_test.sh _____________________________________________________________________________________________________________ Commit: a1413373997814e1f363dad4a276acc160655a1f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a1413373997814e1f363dad4a276acc160655a1f Author: Siva Mahadevan (Thu 9 Jul 2026 16:26:32 BST) Committer: Siva Mahadevan (Tue 21 Jul 2026 16:48:36 BST) bsdinstall/netconfig: use a better heuristic for wlan dev desc For devices like the rtw88, they will show up in `ifconfig -l` as rtw880, rtw881, etc. We want to query the rtw88.0 and rtw88.1 sysctl respectively, not rtw.880. Chances are that there aren't more than 9 wlan devices using the same driver. Use a better heuristic to get the device description. Reviewed by: bz MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit c4b0b13cadac46b7c2cdfeeedeffa596c62568fa) M usr.sbin/bsdinstall/scripts/netconfig _____________________________________________________________________________________________________________ Commit: 19d044be33078fcddb71db1e33e4d683ce310e1e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=19d044be33078fcddb71db1e33e4d683ce310e1e Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:55 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:55:00 BST) libc/resolv: Dead code and style cleanup Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57928 (cherry picked from commit 4805b88edb009e53c4fee159138d2cbe0c848da7) M lib/libc/resolv/res_init.c _____________________________________________________________________________________________________________ Commit: c6030caab61fc64d78b170a16108264916004a5d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c6030caab61fc64d78b170a16108264916004a5d Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:50 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:55:00 BST) resolv.h: Remove unused parts Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57927 (cherry picked from commit 3f15998d25da08677d2c40bc2240de293aec4205) M include/resolv.h _____________________________________________________________________________________________________________ Commit: 345d10427a3c3e4f37d2a9015147305b3d860c86 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=345d10427a3c3e4f37d2a9015147305b3d860c86 Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:43 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:55:00 BST) libc/resolv: Add no-debug and no-rotate options These are simply the reverse of the debug and rotate options. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57926 (cherry picked from commit 60827d7885016861dc02caa45f3ce873ad2a020e) M lib/libc/resolv/res_init.c M share/man/man5/resolver.5 _____________________________________________________________________________________________________________ Commit: fc00e7a18cdec54cc29c522c5cb446c89ea68267 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fc00e7a18cdec54cc29c522c5cb446c89ea68267 Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:37 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:55:00 BST) libc/resolv: Reimplement the sortlist parser When we switched from the BIND4 resolver to the BIND9 resolver, the sortlist parser was inadvertently disabled due to a missing #define, and nobody seemed to notice. The sorting code remained enabled in the resolver, but there was no way to set a sort order. Reimplement the sortlist parser, but correctly, and update the manual accordingly. The new parser accepts IPv4 and IPv6 addresses with or without a mask or prefix length, just like the old one, except IPv6 support was a bit wonky in the original code. Fixes: 5342d17f09a8 ("Update the resolver in libc to BIND9's one.") Relnotes: yes Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57925 (cherry picked from commit fbe0257b5613f457af42f82efb2e3bc9395d0557) M lib/libc/resolv/Makefile.inc M lib/libc/resolv/res_init.c M share/man/man5/resolver.5 _____________________________________________________________________________________________________________ Commit: c817e3ca45276ab945b486325653271be416c8a4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c817e3ca45276ab945b486325653271be416c8a4 Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:33 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:55:00 BST) libc/resolv: Refactor the configuration parser This was previously all a single loop in res_init(), apart from option parsing which we cleaned up in a previous commit. Break it out into separate functions for reading the configuration line by line, setting the default domain, setting the search list, and adding a nameserver to the nameserver list. Sprinkle bounds checks and code comments all around. The sortlist code, which has been disabled for the past 20 years, will be dealt with in a separate commit. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57924 (cherry picked from commit ffeb56905ed6a7ac759367096d6dc0596e82e03f) M lib/libc/resolv/res_init.c _____________________________________________________________________________________________________________ Commit: b52d95bf14945108be077fd621c194d24c1f3118 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b52d95bf14945108be077fd621c194d24c1f3118 Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:29 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:54:59 BST) libc/resolv: Refactor the option parser Start the loop by finding the end of the option name, the name-value separator (if any), and the end of the option. Use those pointers to simplify matching the option name and parsing the option value, and validate option names and values more strictly. This means that: * We no longer accept trailing garbage in an option name or value. For instance, we would previously interpret “edns0123” as “edns0” and “timeout:3xyz” as “timeout:3”. This was actually quite lucky because we also failed to recognize the newline at the end of the option line as a whitespace character. * For options that take a numerical argument, we would previously accept negative values and treat non-numerical arguments as 0, while large numerical arguments would be capped to the option's maximum permitted value. Now, any failure to parse the argument, including overflow, results in the option being left unchanged. MFC after: 1 week Relnotes: yes Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57923 (cherry picked from commit 9bfdfecd27359130aa4ef63fc0aa32f98f9e7b50) M lib/libc/resolv/res_init.c _____________________________________________________________________________________________________________ Commit: 899cf5932678fc5a9572584d64e82e22569bee42 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=899cf5932678fc5a9572584d64e82e22569bee42 Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:24 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:54:59 BST) libc/resolv: Drop Solaris 2 compatibility MFC after: 1 week Reviewed by: kevans, markj Differential Revision: https://reviews.freebsd.org/D57922 (cherry picked from commit aba9fffebf97d631f85e904813ff35ed031a3bac) M lib/libc/nameser/ns_parse.c M lib/libc/resolv/res_comp.c M lib/libc/resolv/res_init.c _____________________________________________________________________________________________________________ Commit: 2bab563336e07e266acc8ae4f399f4bafb5f8896 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2bab563336e07e266acc8ae4f399f4bafb5f8896 Author: Dag-Erling Smørgrav (Mon 6 Jul 2026 13:23:20 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:54:59 BST) resolver(5): Overhaul * Modernize the markup * Describe the comment syntax * Drop obsolete advice * Capitalize sentences * Improve the language * Replace no_tld_query with no-tld-query; both are supported, but all the other multi-word options use hyphens rather than underscores. * Add missing ENVIRONMENT section * Redo the example MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57921 (cherry picked from commit 4319e4bf42f2f5a71ac32cb18cef8f7677fdf7f7) M share/man/man5/resolver.5 _____________________________________________________________________________________________________________ Commit: 3052e1525ceb52fa1a8f0e036815b1281c60667b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3052e1525ceb52fa1a8f0e036815b1281c60667b Author: Christos Longros (Sun 15 Mar 2026 15:17:04 GMT) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:54:59 BST) resolver.5: document six previously undocumented options Document the edns0, inet6, insecure1, insecure2, no-check-names, and rotate options which are parsed by res_init(3) but were not described in the resolver(5) man page. MFC after: 1 week Signed-off-by: Christos Longros Reviewed by: des Differential Revision: https://reviews.freebsd.org/D55864 (cherry picked from commit 462a1f6197fa3de63e0eca2835b1d5b0bc6a3bbb) M share/man/man5/resolver.5 _____________________________________________________________________________________________________________ Commit: b796284f643dc8c658e328e1d53dc3c81471bba8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b796284f643dc8c658e328e1d53dc3c81471bba8 Author: Dag-Erling Smørgrav (Thu 24 Jul 2025 15:01:00 BST) Committer: Dag-Erling Smørgrav (Tue 21 Jul 2026 09:54:59 BST) libc: Disable debugging code in the resolver. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D37319 (cherry picked from commit cd0756cef21079104967969e275c18b84dc45053) M lib/libc/net/gethostbydns.c M lib/libc/net/res_config.h M lib/libc/resolv/res_debug.h M lib/libc/resolv/res_init.c M lib/libc/resolv/res_mkquery.c M lib/libc/resolv/res_mkupdate.c M lib/libc/resolv/res_query.c M lib/libc/resolv/res_send.c _____________________________________________________________________________________________________________ Commit: 381100312788276ef88eb9a409a5babe5d94acc9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=381100312788276ef88eb9a409a5babe5d94acc9 Author: Colin Percival (Sun 28 Jun 2026 00:33:46 BST) Committer: Colin Percival (Tue 21 Jul 2026 04:17:01 BST) ena: Put taskqueues into correct domain if !RSS When compiled without 'options RSS', the ena driver created taskqueues using taskqueue_start_threads_cpuset passing a mask value of NULL, both in the ena_setup_tx_resources path (for enqueues) and in the ena_create_io_queues path (for the completion-processing). In the default configuration, on most EC2 instances, this results in taskqueues running in the right NUMA domain, but only by accident; in non-default configurations (e.g. with with multiple EBS volumes attached and associated NVMe taskqueues) the taskqueues may land in the wrong NUMA domain even on instance types where the one-EBS-one-ENA case produces the desired results. Set (struct ena_que)->domain and use that to inform the choice of CPU sets. On a c8gn.48xlarge EC2 instance this doubles throughput on a 32-TCP-stream benchmark. Reviewed by: akiyano MFC after: 7 days Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D57918 (cherry picked from commit 2e21f7e8140447c2dcbc964ff3482f12f9bd6683) M sys/dev/ena/ena.c _____________________________________________________________________________________________________________ Commit: f6e0e0dab369f346ad825ffbb86ee68cb70b5402 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f6e0e0dab369f346ad825ffbb86ee68cb70b5402 Author: Yusuke Ichiki (Fri 17 Jul 2026 15:58:42 BST) Committer: Cy Schubert (Mon 20 Jul 2026 17:30:10 BST) man: Fix RFC 1918 network prefix lengths According to RFC 1918, the following IP prefixes are reserved for private internets: 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 This PR fixes the prefix lengths in references to private networks ("RFC 1918 networks", "the standard private IP address ranges"). The changes are limited to man pages. Signed-off-by: Yusuke Ichiki Pull Request: https://github.com/freebsd/freebsd-src/pull/2328 (cherry picked from commit 1403ca10189c47ad1de3915eeb030deddc114685) M sbin/ipf/ippool/ippool.5 M sys/netinet/libalias/libalias.3 _____________________________________________________________________________________________________________ Commit: 84eec65ebb271fb820b217583a1e7aef30f7ea0d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=84eec65ebb271fb820b217583a1e7aef30f7ea0d Author: Ka Ho Ng (Mon 13 Jul 2026 01:21:01 BST) Committer: Ka Ho Ng (Mon 20 Jul 2026 04:50:14 BST) Add sbintime.9 manual page sbintime.9 is a manual page that documents the usage of sbintime_t and its helper functions. MFC after: 1 week Reviewed by: ziaee, markj Differential Revision: https://reviews.freebsd.org/D57931 (cherry picked from commit c3f6c655dd155f4c84ce743c86e07d9f0b6b348a) M share/man/man9/Makefile M share/man/man9/callout.9 M share/man/man9/microtime.9 A share/man/man9/sbintime.9 _____________________________________________________________________________________________________________ Commit: a51fdce1b28aba5e857f0d4a27d2e2e59dd0ef7e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a51fdce1b28aba5e857f0d4a27d2e2e59dd0ef7e Author: Rick Macklem (Sat 4 Jul 2026 23:00:02 BST) Committer: Rick Macklem (Sat 18 Jul 2026 02:36:06 BST) nfs_clstate.c: Fix handling of delegation upgrades Commit 016570c4463d modified the client to handle the upgrade of a read delegation to a write delegation, where the server provides the same delegation stateid to the client. However, it failed to check if the delegation structure was currently in use. Without this patch, if the structure was in use, a use after free could occur. This patch handles the "in use" case by copying the necessary fields into the current/old structure and free's the new one instead of the old one that is "in use". PR: 296224 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296224 ) (cherry picked from commit fe6677e7f440d1aa52de036639efc55047ab9a2b) M sys/fs/nfs/nfsclstate.h M sys/fs/nfsclient/nfs_clstate.c _____________________________________________________________________________________________________________ Commit: 8a33b1d98e221905699fa94a93932ef9c88ca692 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8a33b1d98e221905699fa94a93932ef9c88ca692 Author: Enji Cooper (Fri 12 Jun 2026 06:45:28 BST) Committer: Enji Cooper (Fri 17 Jul 2026 03:46:14 BST) Remove `$FreeBSD$` from upstream-provided config file This diff reduces with the content provided by upstream (OpenSSL). MFC after: 1 week (cherry picked from commit 2de6d07e16aa4d902b7b322a869f89a07348e851) M crypto/openssl/apps/openssl.cnf _____________________________________________________________________________________________________________ Commit: 33175a5059970bf9e888a799d3578e2902d765af URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=33175a5059970bf9e888a799d3578e2902d765af Author: Dimitry Andric (Sun 12 Jul 2026 15:15:29 BST) Committer: Dimitry Andric (Thu 16 Jul 2026 19:32:31 BST) Add a few missed files to ObsoleteFiles.inc There were still some left-over files under usr/tests/gnu/usr.bin/diff, causing the directory to not be fully removed. Add these to OLD_FILES. Fixes: 134a4c78d070 (cherry picked from commit f72cfefae99befe47fefc4683cd6957edaaf0e86) M ObsoleteFiles.inc _____________________________________________________________________________________________________________ Commit: 00e880819cc5b8249222792ec82c45444a50eb2d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=00e880819cc5b8249222792ec82c45444a50eb2d Author: Konstantin Belousov (Sun 5 Jul 2026 03:50:27 BST) Committer: Konstantin Belousov (Wed 15 Jul 2026 14:36:50 BST) libc locale/localeconv.c: use release semantic when clearing locale_changed PR: 296410 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296410 ) (cherry picked from commit 4efbcf36a0d49ab142023a767871532f515f1381) M lib/libc/locale/localeconv.c _____________________________________________________________________________________________________________ Commit: 4d07fdc1eb0b8ff9ee3b74ac0bceaf07b1c813f0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4d07fdc1eb0b8ff9ee3b74ac0bceaf07b1c813f0 Author: Mark Johnston (Thu 26 Jun 2025 22:19:14 BST) Committer: Mark Johnston (Wed 15 Jul 2026 00:08:13 BST) fibs_test: Mark same_ip_multiple_ifaces_fib0 as expected to fail The test relies on being able to assign the same interface address to two different tap interfaces; it then removes one of the addresses, which at one point would trigger a kernel panic. Since 361a8395f0b0 it is not possible to assign an address multiple times this way, so the test fails. Just mark it as expected to fail for now: if the kernel's behaviour here changes again, this test might be a useful seatbelt. MFC after: 2 weeks (cherry picked from commit 6bdc9743d8f8c9727e5101d6cb6f2a85a13c5acb) M tests/sys/netinet/fibs_test.sh _____________________________________________________________________________________________________________ Commit: e56cb0b4cc3c48bbf287fc5eba427c66b228acbb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e56cb0b4cc3c48bbf287fc5eba427c66b228acbb Author: Gleb Smirnoff (Wed 24 Apr 2024 01:17:14 BST) Committer: Mark Johnston (Wed 15 Jul 2026 00:08:13 BST) sockets: inherit SO_ACCEPTFILTER from listener to child This is crucial for operation of accept_filter(9). See added comment. Fixes: d29b95ecc0d049406d27a6c11939d40a46658733 (cherry picked from commit a8acc2bf5699556946dda2a37589d3c3bd9762c6) M sys/kern/uipc_socket.c _____________________________________________________________________________________________________________ Commit: 39e1726a20c80c8acef7a45ca1686ac8a4646c6f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=39e1726a20c80c8acef7a45ca1686ac8a4646c6f Author: Gleb Smirnoff (Thu 25 Apr 2024 05:50:58 BST) Committer: Mark Johnston (Wed 15 Jul 2026 00:08:12 BST) accept_filter: return different errors for non-listener and a busy socket The fact that an accept filter needs to be cleared first before setting to a different one isn't properly documented. The requirement that the socket needs already be listening, although trivial, isn't documented either. At least return a more meaningful error than EINVAL for an existing filter. Cover this with a test case. (cherry picked from commit 19307b86d31b7dea4bb5c3f7e233ee0e59049258) M sys/kern/uipc_accf.c M tests/sys/kern/socket_accf.c _____________________________________________________________________________________________________________ Commit: d73ce9d7264a0c7a506fc5f0acfe5fa051dad7f8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d73ce9d7264a0c7a506fc5f0acfe5fa051dad7f8 Author: Gleb Smirnoff (Wed 24 Apr 2024 21:36:43 BST) Committer: Mark Johnston (Wed 15 Jul 2026 00:08:12 BST) accf_tls: accept filter that waits for TLS handshake header (cherry picked from commit c68eed82a3dcadf0c826e9e150f59769f4c44f24) M share/man/man9/Makefile A share/man/man9/accf_tls.9 M sys/conf/NOTES M sys/conf/files M sys/conf/options M sys/modules/Makefile A sys/modules/accf_tls/Makefile A sys/netinet/accf_tls.c M tests/sys/kern/socket_accf.c _____________________________________________________________________________________________________________ Commit: 8cd74424eb6d739c1616b3b7b4545faad8e666f2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=8cd74424eb6d739c1616b3b7b4545faad8e666f2 Author: Hiroki Sato (Thu 12 Jun 2025 19:46:46 BST) Committer: Mark Johnston (Wed 15 Jul 2026 00:08:12 BST) netinet6: Remove ndpr_raf_ra_derived flag This flag was introduced at 8036234c72c9361711e867cc1a0c6a7fe0babd84 to prevent the SIOCSPFXFLUSH_IN6 ioctl from removing manually-added entries. However, this flag did actually not work due to an incomplete implementation making prelist_update() not handle it before calling nd6_prelist_add(). This patch removes the flag because a prefix is derived from an RA always has an entry in the ndpr_advrtrs member in the struct nd_prefix. Having a separate flag is not a good idea because it can cause a mismatch between the flag and the ndpr_advrtrs entry. Testing using LIST_EMPTY() is simpler for the origial goal. This also removes in a prefix check in the ICMPV6CTL_ND6_PRLIST sysctl to exclude manually-added entries. This ioctl is designed to list all entries, and there is no relationship to SIOCSPFXFLUSH_IN6. Differential Revision: https://reviews.freebsd.org/D46441 (cherry picked from commit 0c891822310cebd11c22bb59391f85bc53c94fa3) M sys/netinet6/in6_var.h M sys/netinet6/nd6.c M sys/netinet6/nd6.h M sys/netinet6/nd6_rtr.c _____________________________________________________________________________________________________________ Commit: 49b5356bc3e97ec42709996814b0e4d8a582eafb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=49b5356bc3e97ec42709996814b0e4d8a582eafb Author: Mark Johnston (Tue 7 Jul 2026 23:52:56 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:41 BST) linux/futex: Don't load a timeout when try-locking a mutex linux_sys_futex() does not copyin a timespec for the timeout if the operation is LINUX_FUTEX_TRYLOCK_PI, presumably because it doesn't make sense to specify a timeout for a try-lock operation. However, this means that we pass a userspace timespec pointer to linux_umtx_abs_timeout_init(). Modify linux_futex_lock_pi() to not initialize the timeout if we're try-locking. Reviewed by: kib, dchagin Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.2 from Z.ai MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58061 (cherry picked from commit 407c7c339adb429efcb6658accd16399031c34ca) M sys/compat/linux/linux_futex.c _____________________________________________________________________________________________________________ Commit: 32ae329ac9c24109ec71969deaa00fdb39705844 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=32ae329ac9c24109ec71969deaa00fdb39705844 Author: Mark Johnston (Mon 15 Jun 2026 16:57:01 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:41 BST) udp: Wrap a long line in udp_send() No functional change intended. MFC after: 1 week (cherry picked from commit 3b69c7201fd06b368090f2ee3840d384a949cba8) M sys/netinet/udp_usrreq.c _____________________________________________________________________________________________________________ Commit: f82ee475aaf6489dc1ae5257aa64bc3345bdce16 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f82ee475aaf6489dc1ae5257aa64bc3345bdce16 Author: Mark Johnston (Fri 19 Jun 2026 14:27:04 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:41 BST) tests: Add pjdfstest integration Use ATF to wrap the new reimplementation of pjdfstest that came out of GSOC 2022, now available in the ports tree as filesystems/pjdfstest. So far I added tests for UFS (with several different option combinations), tmpfs and ZFS, plus ZFS+nullfs. All of these create a memory disk, initialize the filesystem, and point the pjdfstest executable at it. In the future it would be good to add tests for at least NFS and p9fs. Reviewed by: asomers MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D56605 (cherry picked from commit 8fd4d1c0fff8441b42dbab767810db7aeaf796c3) M etc/mtree/BSD.tests.dist M tests/sys/fs/Makefile A tests/sys/fs/pjdfstest/Makefile A tests/sys/fs/pjdfstest/tmpfs.sh A tests/sys/fs/pjdfstest/ufs.sh A tests/sys/fs/pjdfstest/zfs.sh _____________________________________________________________________________________________________________ Commit: f815c54425383a7d226cd1a104d403cf6d466026 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f815c54425383a7d226cd1a104d403cf6d466026 Author: Mark Johnston (Mon 22 Jun 2026 21:19:29 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:41 BST) install: Explicitly include sys/param.h for MAXPATHLEN MFC after: 1 week Sponsored by: The FreeBSD Foundation (cherry picked from commit ca89b0fa1a93744a5bbf7a5c949826bbee4e2559) M usr.bin/xinstall/xinstall.c _____________________________________________________________________________________________________________ Commit: 9af7633c6095c4bb09edc95b63401bad621f469c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9af7633c6095c4bb09edc95b63401bad621f469c Author: Mark Johnston (Mon 22 Jun 2026 21:19:32 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:41 BST) makefs/zfs: Explicitly include sys/param.h for nitems() MFC after: 1 week Sponsored by: The FreeBSD Foundation (cherry picked from commit 88deb1cff92cb3620c248f32fa6e7bdbc5301213) M usr.sbin/makefs/zfs/dsl.c _____________________________________________________________________________________________________________ Commit: eba4bf368329eab4609b5b05589ba4f344c4f2a9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=eba4bf368329eab4609b5b05589ba4f344c4f2a9 Author: Jane Smith (Mon 22 Jun 2026 22:40:53 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:40 BST) librpcsec_gss: Fix an off-by-one in rpc_gss_get_principal_name() Include an extra byte for the nul-terminator, otherwise we may end up with an out-of-bounds write. The corresponding bug in the kernel implementation was fixed by commit e3081f7e3e2d ("kgssapi(4): Fix string overrun in Kerberos principal construction"). Reviewed by: markj MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D57738 (cherry picked from commit 635ad6f2ec97e9c6b1f15620cd5ee84eb632082f) M lib/librpcsec_gss/svc_rpcsec_gss.c _____________________________________________________________________________________________________________ Commit: cdd4f32526f5f2b7295164aafa53de2f2e7562ea URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cdd4f32526f5f2b7295164aafa53de2f2e7562ea Author: Mark Johnston (Sat 20 Jun 2026 15:12:19 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:40 BST) if_ovpn: Fix a lock leak in an error path Reviewed by: kp MFC after: 1 week Fixes: 04a7134c1e92 ("if_ovpn: fix use-after-free of mbuf") Differential Revision: https://reviews.freebsd.org/D57696 (cherry picked from commit f7b71f832c990da0bf203095f02405df665529d0) M sys/net/if_ovpn.c _____________________________________________________________________________________________________________ Commit: 085667c5f8ed6d4b3200c86dc7a8c90c48768b7e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=085667c5f8ed6d4b3200c86dc7a8c90c48768b7e Author: Allan Jude (Wed 25 Jun 2025 14:38:50 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:40 BST) Reset kvo_laundry to prevent it being cumulative `sysctl vm.objects`, used by `vmstat -o` was not resetting the laundry counter to 0 inside the loop, causing it to show the sum of the laundry count for all previous objects instead of only the laundry count for the current object. Fixes: a86373bc93ee1c850943e8585d0d426479378145 Reviewed by: markj Sponsored by: Klara, Inc. Sponsored by: Modirum MDPay Differential Revision: https://reviews.freebsd.org/D50907 (cherry picked from commit 32f9c9699a5a56ef8ef1da8e2974a8b34e2b84f5) M sys/vm/vm_object.c _____________________________________________________________________________________________________________ Commit: 7cf84b5c995456ddc3807d918c684438042cb977 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7cf84b5c995456ddc3807d918c684438042cb977 Author: Mark Johnston (Wed 20 May 2026 15:49:28 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:40 BST) kinst/arm64: Fix return values from kinst_invop() After commit 853cd8723494 it became invalid for kinst_invop() to return 0: dtrace_invop_start() would convert this to a sentinel value indicating that it did not consume the breakpoint, and so we'd just call kdb_trap() to handle it. Change kinst_invop() to return NOP_INSTR after handling a matching breakpoint. NOP_INSTR is handled by advancing the ELR, so we have to compensate by subtracting INSTR_SIZE before returning. Reviewed by: christos MFC after: 1 week Fixes: 853cd8723494 ("arm64: Clean up usage of the dtrace invop handler") Differential Revision: https://reviews.freebsd.org/D56987 (cherry picked from commit d6f0e671d0797b56011880f84d12ce5fb20bf099) M sys/cddl/dev/kinst/aarch64/kinst_isa.c _____________________________________________________________________________________________________________ Commit: 60585ee63af6c738bdcc0261da57192a547bfbf6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=60585ee63af6c738bdcc0261da57192a547bfbf6 Author: Mark Johnston (Thu 16 Apr 2026 20:57:36 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:40 BST) so_splice: Fix the KTLS check for the sink socket in so_splice() Reviewed by: gallatin Reported by: Claude Sonnet 4.6 Fixes: 1000cc4a0d39 ("so_splice: Disallow splicing with KTLS-enabled sockets") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56385 (cherry picked from commit d88a159da42a75dbd46ea4f6f9c8059975dab5e8) M sys/kern/uipc_socket.c _____________________________________________________________________________________________________________ Commit: 1d5f1086c4866a5e851be423687d73cb948f3222 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1d5f1086c4866a5e851be423687d73cb948f3222 Author: Mark Johnston (Mon 10 Nov 2025 15:30:50 GMT) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:40 BST) queue.3: Add MLINKs for *_EMPTY_ATOMIC MFC after: 1 week Fixes: d2870b8666f2 ("queue: Add atomic variants for *_EMPTY") (cherry picked from commit 1563da200d4d3d56799267f1bbc58933a6c21331) M share/man/man3/Makefile _____________________________________________________________________________________________________________ Commit: d4b1fe786860c0ab56c14a08b9555816fd44bd52 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d4b1fe786860c0ab56c14a08b9555816fd44bd52 Author: Mark Johnston (Fri 20 Oct 2023 15:05:58 BST) Committer: Mark Johnston (Tue 14 Jul 2026 15:08:40 BST) netinet tests: Fix leaks in ip6_v4mapped_test Reported by: Coverity MFC after: 1 week (cherry picked from commit 6ad6929974e6394d57a40f7d43c899963c6ae5ec) M tests/sys/netinet/ip6_v4mapped_test.c _____________________________________________________________________________________________________________ Commit: f49ca172b70ef22ca0e2b9b4b486f4b537507c76 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f49ca172b70ef22ca0e2b9b4b486f4b537507c76 Author: Mark Johnston (Mon 8 Jun 2026 23:46:08 BST) Committer: Mark Johnston (Tue 14 Jul 2026 14:02:07 BST) iconv.3: Fix formatting of the error section MFC after: 1 week (cherry picked from commit c491c2db2f37399eba7a356c4bfa298d64012101) M lib/libc/iconv/iconv.3 _____________________________________________________________________________________________________________ Commit: 4b539c58e986ad46d2180abba33796511669124f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4b539c58e986ad46d2180abba33796511669124f Author: Mark Johnston (Mon 8 Jun 2026 23:46:32 BST) Committer: Mark Johnston (Tue 14 Jul 2026 14:02:07 BST) libalias: Serialize updates to the global instance list libalias maintains a global list of all libalias handles. The list was updated without any locking, but nothing prevents updates from running concurrently. MFC after: 1 week (cherry picked from commit 2ff705f32a2033201a8f83f1ade5ddbc0460387d) M sys/netinet/libalias/alias_db.c _____________________________________________________________________________________________________________ Commit: 4542cc1d14bfa965c51093b1f1aa5d5ce11be3e0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4542cc1d14bfa965c51093b1f1aa5d5ce11be3e0 Author: Mark Johnston (Fri 22 May 2026 15:45:52 BST) Committer: Mark Johnston (Tue 14 Jul 2026 14:02:07 BST) kernel: Enable -fstack-protector-strong by default This extends stack canary use to all functions which define arrays on the stack, not just those which operate on byte buffers. This option would have made it harder to exploit SA-26:18.setcred and SA-26:08.rpcsec_gss. The change bloats the amd64 kernel text by about 350KB and increases the number of covered functions from ~1500 to ~9000 (within the kernel itself, i.e., not counting kernel modules). Reviewed by: olce, olivier, emaste MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D56870 (cherry picked from commit 8deebce931fa9b469cf28a082038a64caf972602) M sys/conf/kern.mk _____________________________________________________________________________________________________________ Commit: 451325c5e15d3dd0b385c2286984b105d2898d6f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=451325c5e15d3dd0b385c2286984b105d2898d6f Author: Mark Johnston (Wed 27 May 2026 21:41:15 BST) Committer: Mark Johnston (Tue 14 Jul 2026 14:02:07 BST) ucode: ucode_error can be defined with static MFC after: 1 week (cherry picked from commit 96256587b06cfcdbeb1789145f5e427831b3d732) M sys/x86/x86/ucode.c _____________________________________________________________________________________________________________ Commit: 38cbd2588f0b6f677f42287af425ac913da46294 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=38cbd2588f0b6f677f42287af425ac913da46294 Author: Mark Johnston (Wed 27 May 2026 21:18:05 BST) Committer: Mark Johnston (Tue 14 Jul 2026 14:02:07 BST) ucode: Fix validation on Intel platforms The check for the extended signature table was backwards, so we always ignored it. We should verify that the extended signature table fits within the total image size. Reviewed by: jrm, kib MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D57209 (cherry picked from commit 0beb172898499fff51eed4df3d9284cd1094afbb) M sys/x86/x86/ucode.c _____________________________________________________________________________________________________________ Commit: 1e857a99478b77b862380d5f64c127bde0f7c9ac URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1e857a99478b77b862380d5f64c127bde0f7c9ac Author: Chuck Silvers (Tue 13 Feb 2024 16:15:25 GMT) Committer: Mark Johnston (Tue 14 Jul 2026 14:02:07 BST) x86/ucode: add const where appropriate Sponsored by: Netflix Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D43865 (cherry picked from commit fd24a63a38d0d4cb4f5041ef232036abe09d9d4f) M sys/x86/include/ucode.h M sys/x86/x86/ucode.c _____________________________________________________________________________________________________________ Commit: e16857e08feaf2c59f0f6cf83ac8f1d6eddb0b4d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e16857e08feaf2c59f0f6cf83ac8f1d6eddb0b4d Author: Dag-Erling Smørgrav (Thu 2 Jul 2026 16:16:52 BST) Committer: Dag-Erling Smørgrav (Mon 13 Jul 2026 08:38:44 BST) src.conf(5): Suggest using ccache4 We have separate ports for Ccache 3 and 4. Suggest both, rather than only the Ccache 3 port. Rearrange the text somewhat to avoid an excessively ragged edge on a standard 80-column terminal. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D58005 (cherry picked from commit a2545f68f64b4cfcc13ca2d372c8b9fef1c6331e) M share/man/man5/src.conf.5 M tools/build/options/WITH_CCACHE_BUILD _____________________________________________________________________________________________________________ Commit: cd2c1451dc17520fc2cb8939fa8d8b1d3f9508e8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cd2c1451dc17520fc2cb8939fa8d8b1d3f9508e8 Author: SHENGYI HONG (Fri 20 Jun 2025 06:37:23 BST) Committer: Dag-Erling Smørgrav (Mon 13 Jul 2026 08:29:11 BST) share/mk: Add sccache suport for WITH_CCACHE_BUILD option By setting CCACHE_NAME=sccache , sccache can be used as an alternative for ccache. Reviewed by: emaste, jhb Event: Kitchener-Waterloo Hackathon 202506 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D49417 (cherry picked from commit 10cb3979a9bde6c8e441e3ba4aa5fd09963c484f) M share/mk/bsd.compiler.mk M tools/build/options/WITH_CCACHE_BUILD _____________________________________________________________________________________________________________ Commit: 37340348b9a8eee17ade7b732f3d541e592df840 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=37340348b9a8eee17ade7b732f3d541e592df840 Author: Peter Ganzhorn (Mon 20 Apr 2026 17:59:59 BST) Committer: Zhenlei Huang (Mon 13 Jul 2026 02:40:06 BST) iflib: Add a missing CURVNET_RESTORE() in the error path Signed-off-by: Peter Ganzhorn Reviewed by: zlei Fixes: 6d49b41ee84b iflib: Add pfil hooks MFC after: 3 days Pull Request: https://github.com/freebsd/freebsd-src/pull/2150 (cherry picked from commit f49f61f19463c21125bb1215cf8e0530f52953e3) (cherry picked from commit d11419ed37a61a4896381f91fd942c4fff2e66dd) M sys/net/iflib.c _____________________________________________________________________________________________________________ Commit: 819af80de8e8854f5767c20d03cb7362624b0085 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=819af80de8e8854f5767c20d03cb7362624b0085 Author: Philip Paeps (Wed 8 Jul 2026 21:46:28 BST) Committer: Philip Paeps (Sat 11 Jul 2026 10:49:21 BST) contrib/tzdata: import tzdata 2026c Changes: https://github.com/eggert/tz/blob/2026c/NEWS (cherry picked from commit 665bb2d9a440d33e2ec2f9151e45b8cda93433ae) M contrib/tzdata/Makefile M contrib/tzdata/NEWS M contrib/tzdata/africa M contrib/tzdata/australasia M contrib/tzdata/europe M contrib/tzdata/leap-seconds.list M contrib/tzdata/leapseconds M contrib/tzdata/northamerica M contrib/tzdata/theory.html M contrib/tzdata/version M contrib/tzdata/ziguard.awk M contrib/tzdata/zone.tab M contrib/tzdata/zone1970.tab M contrib/tzdata/zonenow.tab _____________________________________________________________________________________________________________ Commit: f28c41843a65c8b70024bd650b8eb2c658e7d116 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f28c41843a65c8b70024bd650b8eb2c658e7d116 Author: Rick Macklem (Sun 28 Jun 2026 00:35:20 BST) Committer: Rick Macklem (Sat 11 Jul 2026 02:05:29 BST) nfs_clstate.c: Fix CB_RECALL handling for NFSv4.1/4.2 Recent testing with a modified NFSv4.1/4.2 client that sometimes ignored CB_RECALL callbacks, identified a few problems when handling the unusual case of CB_RECALL not be performed by the client. - The csa_cachethis argument to CB_SEQUENCE was being ignored. - The CB_SEQUENCE operation would reply NFSERR_DELAY after the first CB_RECALL attempt, making retries ineffective. - The code could return NFSERR_RESOURCE, which is a NFSv4.0 specific error code. This patch fixes the above three problems. The patch only affects the NFSv4.1/4.2 client when delegations are being issued and the client somehow fails to handle a CB_RECALL callback of a delegation, which is an unusual case. (cherry picked from commit 9e1bbfb88e986b209709ea765189a3ebb6581bcd) M sys/fs/nfsclient/nfs_clstate.c _____________________________________________________________________________________________________________ Commit: 15ef9ad2f5f46c4172121f22ba9d051c08365814 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=15ef9ad2f5f46c4172121f22ba9d051c08365814 Author: Krzysztof Galazka (Fri 12 Jun 2026 12:56:15 BST) Committer: Krzysztof Galazka (Fri 10 Jul 2026 20:15:18 BST) ice(4): Fix link speed after changing cable type When interface was connected to a link partner with a cable type limitting maximum supported speed, e.g. SFP+ cable in 25G port, driver incorrectly saved a supported speed as the user configured speed. This prevented interface from using all supported speeds after switching cable to SFP28. Link was established at 10G as supported by previously used SFP+ cable. Don't set user requested speed unless actually configured by an user, to allow automatic selection of highest available speed. Only when user sets custom config using advertise_speed sysctl save it and try to apply after cable is changed. Also don't save initial supported speeds if FW supports reporting default PHY config. Signed-off-by: Krzysztof Galazka Reviewed by: kbowling, erj, mateusz.moga_intel.com Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D53611 (cherry picked from commit 310145642312e1c5fb3d8efa8321cf905d0354c4) M sys/dev/ice/ice_lib.c _____________________________________________________________________________________________________________ Commit: f2436514b25cf883cca4ca70eff31b468109ca04 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f2436514b25cf883cca4ca70eff31b468109ca04 Author: Krzysztof Galazka (Fri 12 Jun 2026 12:37:01 BST) Committer: Krzysztof Galazka (Fri 10 Jul 2026 20:14:04 BST) ice(4): Add support for new E810-XXV-2 adapters Add two new subdevice IDs for E810-XXV-2 and E810-XXV-2 for OCP 3.0. Signed-off-by: Krzysztof Galazka Reviewed by: kbowling, erj, mateusz.moga_intel.com Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D54069 (cherry picked from commit bea6f7d02dfbef8f8209f0ca5f1d76877d549f46) M sys/dev/ice/ice_drv_info.h _____________________________________________________________________________________________________________ Commit: 074ff66d7ac4d631eae3085393d2adefedef4578 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=074ff66d7ac4d631eae3085393d2adefedef4578 Author: Krzysztof Galazka (Fri 5 Dec 2025 22:02:45 GMT) Committer: Krzysztof Galazka (Fri 10 Jul 2026 20:12:41 BST) ice(4): Add support for 40G maximal PMD speed E823 backplane devices may support 40G as maximal PMD speed. Extend port topology reading logic to handle this case. While at that fix indentation according to FreeBSD style(9). Signed-off-by: Krzysztof Galazka Tested by: gowtham.kumar.ks_intel.com Approved by: kbowling (mentor), erj (mentor) Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D53587 (cherry picked from commit c6212b7da110d82b1d0086ec525deb216993021e) M sys/dev/ice/ice_adminq_cmd.h M sys/dev/ice/ice_lib.c _____________________________________________________________________________________________________________ Commit: e33854e4dd553887ca57e7a32148fa6dda44fd7b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e33854e4dd553887ca57e7a32148fa6dda44fd7b Author: Dag-Erling Smørgrav (Mon 29 Jun 2026 20:17:52 BST) Committer: Dag-Erling Smørgrav (Fri 10 Jul 2026 18:10:45 BST) OptionalObsoleteFiles: Add missing headers The header files for dialog, figpar, dpv were never listed. Fixes: bc6c827078b7 ("OptionalObsoleteFiles: Add figpar to dialog section") (cherry picked from commit acf6518a2d6f33fb56c861861cbad0c0cb56817e) M tools/build/mk/OptionalObsoleteFiles.inc _____________________________________________________________________________________________________________ Commit: 4f8ff9954819f3348c1c6b8a2794694b6fda2ee0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4f8ff9954819f3348c1c6b8a2794694b6fda2ee0 Author: Dag-Erling Smørgrav (Thu 2 Jul 2026 13:59:42 BST) Committer: Dag-Erling Smørgrav (Fri 10 Jul 2026 17:59:25 BST) usb/quirks: Sort the USB mass storage quirks MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D57930 (cherry picked from commit 43da0c93ff9da32fda89d58727cd9bbe7beea4c9) usb/quirks: More USB mass storage quirk sorting (cherry picked from commit 0b95429fde2ae83c159ca991458608a97ca6b93a) M sys/dev/usb/quirk/usb_quirk.c _____________________________________________________________________________________________________________ Commit: a97df1387702c05f2ae5c4154ada45922b3dcf47 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a97df1387702c05f2ae5c4154ada45922b3dcf47 Author: Damian Weber (Thu 2 Jul 2026 13:59:36 BST) Committer: Dag-Erling Smørgrav (Fri 10 Jul 2026 17:59:25 BST) usb/quirks: Add entry for Verbatim Store'n'Go PR: 199101 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199101 ) MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D57929 (cherry picked from commit e1a0592ccd8141c609b45dfbe2fba13929ee4d51) M sys/dev/usb/quirk/usb_quirk.c M sys/dev/usb/usbdevs _____________________________________________________________________________________________________________ Commit: c27a27f45d86febae569735ead7f7ebb768a94da URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c27a27f45d86febae569735ead7f7ebb768a94da Author: Bhosale, Yogesh (Thu 9 Apr 2026 19:05:29 BST) Committer: Krzysztof Galazka (Fri 10 Jul 2026 15:31:56 BST) ix(4): Add support for firmware logging for E610 adapters This is part 3 of the support for the new Intel Ethernet E610 family of devices The ix driver now enables firmware logging on Intel E610 devices for debugging with Customer Support. Logs are enabled by default and generated in binary format that requires decoding by support teams. The collected data is firmware and hardware related for debugging purposes only. When the driver loads, it creates a fw_log sysctl node under the debug section. Events are organized into categories (modules) for targeted logging, and users can adjust verbosity levels as needed. This adds sysctl support for the firmware logging feature and updates the ix(4) manual page with documentation. Signed-off-by: Yogesh Bhosale Co-developed-by: Krzysztof Galazka Reviewed by: ziaee, kbowling Tested by: Mateusz Moga Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D53973 (cherry picked from commit 6b58d10fc6d51ddcf5ee81628ead74d3dadb9bf6) M share/man/man4/ix.4 M sys/conf/files M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/ixgbe.h M sys/dev/ixgbe/ixgbe_e610.c M sys/dev/ixgbe/ixgbe_e610.h M sys/dev/ixgbe/ixgbe_features.h A sys/dev/ixgbe/ixgbe_fw_logging.c M sys/dev/ixgbe/ixgbe_osdep.c M sys/dev/ixgbe/ixgbe_osdep.h M sys/modules/ix/Makefile M sys/modules/ixv/Makefile _____________________________________________________________________________________________________________ Commit: 76597c000c7c43462792ac51afa5a8adc8f67d63 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=76597c000c7c43462792ac51afa5a8adc8f67d63 Author: Krzysztof Galazka (Fri 13 Mar 2026 11:48:12 GMT) Committer: Krzysztof Galazka (Fri 10 Jul 2026 15:29:40 BST) ix(4): Add EEE support for E610 adapters The ix driver now supports Energy Efficient Ethernet (EEE) on Intel E610 devices. EEE allows the network interface to enter low-power states during periods of low link utilization, reducing power consumption while maintaining full performance when needed. E610 adapters provide EEE support through BASE-T PHY functionality. Due to this PHY-based implementation, EEE is supported only on 2.5Gb speeds and above. Signed-off-by: Yogesh Bhosale Signed-off-by: Krzysztof Galazka Authored-by: Yogesh Bhosale Approved by: kbowling (mentor) Tested by: Mateusz Moga Sponsored by: Intel Corporation Differential Revision: https://reviews.freebsd.org/D55304 (cherry picked from commit 13ee84c591f8df7553fc8e3dac7e92409046f4d2) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/ixgbe_e610.c M sys/dev/ixgbe/ixgbe_type_e610.h _____________________________________________________________________________________________________________ Commit: fe0d7d6ba549673b58d5ef3bb2bc89dd52e8a9c0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=fe0d7d6ba549673b58d5ef3bb2bc89dd52e8a9c0 Author: Ed Maste (Wed 24 Jun 2026 16:06:51 BST) Committer: Ed Maste (Fri 10 Jul 2026 03:03:06 BST) libcxxrt: Fix diagnostics for derived classes In terminate_with_diagnostics the cast_to arguments were swapped, so it always failed. The diagnostic handler produced output like "Terminating due to uncaught exception 0x24891e08000 of type std::runtime_error". Now, e->what() will actually be included in the output, e.g. "Terminating due to uncaught exception 0x2bba49208000 'Model file doesn't exist' of type std::runtime_error". Reviewed by: dim Event: Halifax Hackathon 202606 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57822 (cherry picked from commit 3a5c2899fc7bd0865b5aacccc3465e46e9bc6df3) (cherry picked from commit ab1af7bd2f425147e658a32f128a56176b1de059) M contrib/libcxxrt/exception.cc _____________________________________________________________________________________________________________ Commit: db1b75d0358761fee916e10c8b11a557b47ae1b2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=db1b75d0358761fee916e10c8b11a557b47ae1b2 Author: Ed Maste (Fri 22 May 2026 19:37:51 BST) Committer: Ed Maste (Fri 10 Jul 2026 03:03:06 BST) vtfontcvt: Return error from write_fnt_source Previously write_fnt_source always returned 0, silently discarding errors. Return rv so that errors set vtfontcvt's shell exit appropriately. Sponsored by: The FreeBSD Foundation (cherry picked from commit f05fb5157ba1291ee5019bacece8d1e98ea95b35) (cherry picked from commit a00f80731213e03bf3d0b9028a93d0be4c0df756) M usr.bin/vtfontcvt/vtfontcvt.c _____________________________________________________________________________________________________________ Commit: 6756f09d73de7d876501a7f24f07fb362aec35f3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6756f09d73de7d876501a7f24f07fb362aec35f3 Author: Ed Maste (Wed 1 Jul 2026 15:35:10 BST) Committer: Ed Maste (Thu 9 Jul 2026 16:19:35 BST) newvers.sh: Avoid spurious -dirty in git revision If git is installed and .git exists but git rev-parse failed to report a hash we previously produced just "-dirty" as the git revision. Gate the git commit count and -dirty check on the rev-parse passing. Reviewed by: jlduran Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57995 (cherry picked from commit 465a3b7adc008c068741594f6c922ede98924f39) (cherry picked from commit 45da2c1e1d202ab190f156dd63403be79fb11e94) M sys/conf/newvers.sh _____________________________________________________________________________________________________________ Commit: 478d81e72eaae3276c4670e0054385b5e4e1f031 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=478d81e72eaae3276c4670e0054385b5e4e1f031 Author: Mark Johnston (Fri 3 Jul 2026 20:28:22 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 08:08:03 BST) tests/aslr: Fix spurious test failures /sbin/ping and /sbin/ping6 are hard-linked, and the vmmap sysctl handler doesn't know which name was used to launch the process. PR: 296116 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296116 ) MFC after: 3 days Fixes: 080a4087014e ("tests: Fix race condition in aslr_setuid") (cherry picked from commit 81cf9a0ca765b48a430da61c221be17c4d0f753a) M tests/sys/kern/aslr.c _____________________________________________________________________________________________________________ Commit: f9f7b3aefab21b77811ac84043adae1cb9f3cb61 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f9f7b3aefab21b77811ac84043adae1cb9f3cb61 Author: Siva Mahadevan (Fri 26 Jun 2026 13:22:57 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 08:07:56 BST) ping: Fix bell char ordering in -A test cases Previously, these tests expected the bell chars to arrive before the initial status line. This appeared to be ok because ping(8) incorrectly mixed unbuffered and buffered writes by using printf(3) calls for the initial status, but direct write(2) calls for the bell chars. 141bb85798 revealed that the test's assertions only passed because the buffered writes did not get flushed before the direct writes in the test runs. 8bda488114f3 fixed ping(8) to use POSIX stdio buffered writes in all cases and guarantee a deterministic output ordering to stdout observers. This patch fixes the test to match the correct ordering. Reviewed by: des Sponsored by: The FreeBSD Foundation (cherry picked from commit 7ac9995a062ff9f78b634fe403e6a313f5637945) (cherry picked from commit 5b8c28adb829b50fb8ac065637fa99f717858bab) (cherry picked from commit f7f916d755fe5b48a2a68a937beea770b7bafa95) M sbin/ping/tests/test_ping.py _____________________________________________________________________________________________________________ Commit: b38b0be29bfdc4b7bf17a4e4ef952fe170fa7567 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b38b0be29bfdc4b7bf17a4e4ef952fe170fa7567 Author: Dag-Erling Smørgrav (Tue 23 Jun 2026 16:20:22 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 08:07:56 BST) ping: Flush stdout after printing initial status MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57765 (cherry picked from commit 141bb8579882f9d1f7e95351573e30f10689f4bf) ping: Don't mix stdio and direct writes POSIX does not allow mixing direct writes to STDOUT_FILENO with stdio operations on stdout like we do here. More importantly, it causes tests to fail randomly (or not-so-randomly after I added an fflush in a previous commit). MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57884 (cherry picked from commit 8bda488114f330d758e6741ff44882bb12b76c0d) M sbin/ping/ping.c M sbin/ping/ping6.c _____________________________________________________________________________________________________________ Commit: 19a4967946855bb3941382a1a1ccf3c7c1d5a1f3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=19a4967946855bb3941382a1a1ccf3c7c1d5a1f3 Author: Dag-Erling Smørgrav (Mon 22 Jun 2026 14:23:31 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 08:07:55 BST) tests: Fix race condition in aslr_setuid Use a cloexec pipe to block the parent until the child is ready. While here, redirect the output from ping to /dev/null, and mark the test as requiring the inet feature since we ping the IPv4 loopback. PR: 296116 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296116 ) MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57734 (cherry picked from commit 080a4087014e1d19136cc77028019d98b5c69e1e) tests: Fix race condition in aslr_setuid, take 2 Instead of a cloexec pipe, ingest ping's stdout and block until it has printed its initial summary, then close the pipe and return to the main test loop. Run ping in quiet mode so it won't mind that stdout is gone. PR: 296116 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296116 ) MFC after: 1 week Fixes: 080a4087014e ("tests: Fix race condition in aslr_setuid") Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57763 (cherry picked from commit 86950cf9ffe89b7978fca019019692b3ea492044) M tests/sys/kern/Makefile M tests/sys/kern/aslr.c _____________________________________________________________________________________________________________ Commit: aad298c8f9cabe53379bea59ce075f2eb0c93898 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=aad298c8f9cabe53379bea59ce075f2eb0c93898 Author: Dag-Erling Smørgrav (Sat 27 Jun 2026 22:15:29 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 07:38:17 BST) openresolv: Trim leading dot from domain name Merge upstream change d9f6b1a2d292 PR: 296305 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296305 ) MFC after: 1 week (cherry picked from commit 4b26ea54713941243b3a0d4263bebbf192ee68c7) M contrib/openresolv/resolvconf.in _____________________________________________________________________________________________________________ Commit: 973d1f2b12aba78d153095640820e865c1d112e1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=973d1f2b12aba78d153095640820e865c1d112e1 Author: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:43:26 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 07:38:16 BST) local-unbound-setup: Support IPv6-only systems * In the server configuration, disable protocols not supported by the kernel. * In resolv.conf, instead of only using 127.0.0.1, use either 127.0.0.1, ::1, or both depending on which protocols the kernel supports. MFC after: 1 week Reviewed by: jlduran Differential Revision: https://reviews.freebsd.org/D57840 (cherry picked from commit f0a861efbafeb81428d5e8c23dac9da73fe14007) M usr.sbin/unbound/setup/local-unbound-setup.sh _____________________________________________________________________________________________________________ Commit: 546b456452375dd27f10e6f7a3b39f6bc7254409 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=546b456452375dd27f10e6f7a3b39f6bc7254409 Author: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:39:03 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 07:38:16 BST) rc.d/tmp: Fix dupe mount check Before mounting a new mfs on /tmp, we check if there already is one. However, the dupe check only takes /dev/md[0-9]* into account, while the default mfs type these days is tmpfs. Rewrite it to look for tmpfs as well. Note that the dupe check is redundant in the tmpmfs=auto case, but we leave moving it for later. PR: 182035 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182035 ) MFC after: 1 week Reviewed by: kevans, allanjude Differential Revision: https://reviews.freebsd.org/D57682 (cherry picked from commit 45efa4e61623e3eeee7fd0a3f4436616e24c8e98) M libexec/rc/rc.d/tmp _____________________________________________________________________________________________________________ Commit: 25a3e5046ebd82c5d0857f73b35ab720be6290a0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=25a3e5046ebd82c5d0857f73b35ab720be6290a0 Author: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:38:58 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 07:38:16 BST) rc.d/ddb: Really silently exit The comment says “silently exit if ddb is not enabled”, but we'd exit with an error message. Note that I switched the sysctl variable used to test for the presence of ddb from debug.ddb.scripting.scripts to d.d.s.script, which has a smaller value if set. While here, drop a pointless fork-exec, and use ${SYSCTL_N} for consistency. PR: 177217 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=177217 ) MFC after: 1 week Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D57686 (cherry picked from commit b0d3a2889a1b8e4b73ad1f396884224e1442b214) M libexec/rc/rc.d/ddb _____________________________________________________________________________________________________________ Commit: 10075baae2c1151945bc13a478560e4d4a1aacf1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=10075baae2c1151945bc13a478560e4d4a1aacf1 Author: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:38:53 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 07:38:16 BST) rc.firewall: Support on-disk lists For firewall_allowservices and firewall_trusted, if an element of the list looks like an absolute path, read the file, skipping comments and blank lines, and treat the first word on each line as an address or subnet to be added to the list. We should probably be using tables instead, but this is still an improvement over the status quo ante. MFC after: 1 week Relnotes: yes Reviewed by: allanjude Differential Revision: https://reviews.freebsd.org/D57679 (cherry picked from commit a71abf38e2b46c02965f3224c62bb6ef1971996e) M libexec/rc/rc.conf M libexec/rc/rc.firewall _____________________________________________________________________________________________________________ Commit: ec02e4a80fc14c1bb69a5e71a004bbab87301991 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ec02e4a80fc14c1bb69a5e71a004bbab87301991 Author: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:38:44 BST) Committer: Dag-Erling Smørgrav (Tue 7 Jul 2026 07:38:16 BST) rc.firewall: Use checkyesno for boolean variables Use the checkyesno function from rc.subr instead of hardcoded checks for boolean variables. Also drop an incorrect comment about the default logamount value; the actual default is zero (unlimited). MFC after: 1 week Reviewed by: kevans, allanjude Differential Revision: https://reviews.freebsd.org/D57678 (cherry picked from commit a3c077c1ccbe57ffad6317879bc1e49291892414) M libexec/rc/rc.firewall _____________________________________________________________________________________________________________ Commit: 266022bf0b6092a0d052c3faa10130755be21ad5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=266022bf0b6092a0d052c3faa10130755be21ad5 Author: Siva Mahadevan (Tue 28 Apr 2026 20:25:49 BST) Committer: Siva Mahadevan (Tue 7 Jul 2026 02:29:01 BST) contrib/openresolv: MFV openresolv 3.17.4 Reviewed by: pfg Approved by: lwhsu (mentor) Differential Revision: https://reviews.freebsd.org/D56269 (cherry picked from commit cb0e3a5fba5fe48607db8c1042bfe6a1164e0db7) M contrib/openresolv/LICENSE M contrib/openresolv/Makefile M contrib/openresolv/README.md A contrib/openresolv/avahi-daemon.in M contrib/openresolv/configure M contrib/openresolv/dnsmasq.in M contrib/openresolv/libc.in A contrib/openresolv/mdnsd.in M contrib/openresolv/named.in M contrib/openresolv/pdns_recursor.in M contrib/openresolv/pdnsd.in M contrib/openresolv/resolvconf.8.in M contrib/openresolv/resolvconf.conf.5.in M contrib/openresolv/resolvconf.in A contrib/openresolv/resolvectl.in A contrib/openresolv/systemd-resolved.in M contrib/openresolv/unbound.in _____________________________________________________________________________________________________________ Commit: 5ba2b4f773c27f139ce840ca93b7c5dad83d1984 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5ba2b4f773c27f139ce840ca93b7c5dad83d1984 Author: Jamie Gritton (Thu 2 Jul 2026 23:48:07 BST) Committer: Jamie Gritton (Sun 5 Jul 2026 06:13:27 BST) jail: prevent a race between jail_attach in different threads Attaching to a jail changes its root directory and its process credentials. These operations both require unlocking the jail, and also need allprison_lock unlocked. That means that if two threads are trying to attach to different jails at the same time, it's possible for the process to end up with one jail's root directory but the other jail's credentials. Solve this by forcing the process into single-threaded mode during system calls that attach to a jail (jail_attach, jail_attach_jd, and sometimes jail_set). Reviewed by: kib, markj Differential Revision: https://reviews.freebsd.org/D57858 (cherry picked from commit d4e0f4dab2d7f4de46bb79db1ca7e6e8a2e34746) M sys/kern/kern_jail.c _____________________________________________________________________________________________________________ Commit: 530ee2980c50d3639e01e21a7fed64eed2741ebf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=530ee2980c50d3639e01e21a7fed64eed2741ebf Author: Jamie Gritton (Thu 25 Jun 2026 04:21:18 BST) Committer: Jamie Gritton (Sun 5 Jul 2026 04:26:04 BST) jail: clean up locking around do_jail_attach jail_attach_jd passed PD_DEREF to do_jail_attach, assuming it would take care of freeing the held prison. This is not true, as do_jail_attach immediately cleared that flag, leaving the jail stock in dying state when it is later removed. Reported by: markj Reviewed by: markj Differential Revision: (cherry picked from commit 3584cde63e416d150214192721cead4b735ca0b5) M sys/kern/kern_jail.c _____________________________________________________________________________________________________________ Commit: 334c8ba7dd9c8dcb2322132cd927f2520126d820 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=334c8ba7dd9c8dcb2322132cd927f2520126d820 Author: Jamie Gritton (Fri 19 Jun 2026 20:45:27 BST) Committer: Jamie Gritton (Sun 5 Jul 2026 04:09:16 BST) jail: call PR_METHOD_ATTACH again (with old jail) if the first call fails jail_attach lets modules do attachment-specific work by calling osd_jail_call(PR_METHOD_ATTACH). If one of the modules returns an error, the call needs to be repeated with the thread's current prison, so possible earlier modules and undo any changes they may have made. (cherry picked from commit e91e8ebefadcce9d57c8ff945ff70050cbbe1ce1) M sys/kern/kern_jail.c _____________________________________________________________________________________________________________ Commit: cb0b277f71b642b6239539a537b94efdae1bfc6d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cb0b277f71b642b6239539a537b94efdae1bfc6d Author: Jamie Gritton (Wed 1 Jul 2026 19:36:08 BST) Committer: Jamie Gritton (Sun 5 Jul 2026 03:49:53 BST) jail: prevent a null derefence on array parameter assignment The same variable was used as a counter for an inner and out loop. Add a new one for the inner loop. PR: 283934 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283934 ) Reported by: crest at rlwinm.de (cherry picked from commit 6d9bc46cd7fc48ece597162d3ca413fc9d67b5f0) M usr.sbin/jail/config.c _____________________________________________________________________________________________________________ Commit: 12b941265ebb01bc6f4683d84551a16580bb5cc6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=12b941265ebb01bc6f4683d84551a16580bb5cc6 Author: Philip Paeps (Thu 25 Jun 2026 15:34:28 BST) Committer: Philip Paeps (Thu 2 Jul 2026 05:15:35 BST) contrib/expat: import expat 2.8.2 Changes: https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/Changes Security: CVE-2026-50219 Security: CVE-2026-56131 Security: CVE-2026-56132 Security: CVE-2026-56403 Security: CVE-2026-56404 Security: CVE-2026-56405 Security: CVE-2026-56406 Security: CVE-2026-56407 Security: CVE-2026-56408 Security: CVE-2026-56409 Security: CVE-2026-56410 Security: CVE-2026-56411 Security: CVE-2026-56412 (cherry picked from commit c82aeee8a6d39371006f5eeb1b51704e7b97e2b7) M contrib/expat/Changes M contrib/expat/README.md M contrib/expat/configure.ac M contrib/expat/doc/reference.html M contrib/expat/doc/xmlwf.1 M contrib/expat/doc/xmlwf.xml M contrib/expat/lib/Makefile.am M contrib/expat/lib/Makefile.in M contrib/expat/lib/expat.h A contrib/expat/lib/fallthrough.h A contrib/expat/lib/memory_sanitizer.h M contrib/expat/lib/random_arc4random_buf.c M contrib/expat/lib/random_dev_urandom.c M contrib/expat/lib/random_getentropy.c M contrib/expat/lib/random_getrandom.c M contrib/expat/lib/siphash.h A contrib/expat/lib/xcsinc.c M contrib/expat/lib/xmlparse.c M contrib/expat/lib/xmltok.c M contrib/expat/lib/xmltok_impl.c M contrib/expat/tests/acc_tests.c M contrib/expat/tests/alloc_tests.c M contrib/expat/tests/basic_tests.c M contrib/expat/tests/chardata.c M contrib/expat/tests/common.c M contrib/expat/tests/handlers.c M contrib/expat/tests/handlers.h M contrib/expat/tests/misc_tests.c M contrib/expat/xmlwf/filemap.h M contrib/expat/xmlwf/win32filemap.c M contrib/expat/xmlwf/xmlfile.c M contrib/expat/xmlwf/xmlwf.c M contrib/expat/xmlwf/xmlwf_helpgen.py M lib/libexpat/expat_config.h M lib/libexpat/libbsdxml.3 _____________________________________________________________________________________________________________ Commit: 0b9f4c6b0a03df1522bba415b67d875a1e73f811 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0b9f4c6b0a03df1522bba415b67d875a1e73f811 Author: Rick Macklem (Thu 18 Jun 2026 16:45:27 BST) Committer: Rick Macklem (Thu 2 Jul 2026 01:19:24 BST) nfs_nfsdserv.c: Fix setting of birthtime for some ZFS pools Some ZFS pools do not support va_birthtime and will return EINVAL when a VOP_SETATTR() of it is attempted. The MacOS NFSv4 client sets va_birthtime (TimeCreate) in the same Setattr with ctime/mtime and other attributes after a new file is created. The EINVAL failure leaves these new files messed up (mode == 0). This patch pretends the setting of TimeCreate succeeded if ctime/mtime were also set in the same Setattr RPC, which resolves the problem for the MacOS client. If this fix is not sufficient, a new pathconf name to detect if a file system supports birthtime may be needed. PR: 296066 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296066 ) (cherry picked from commit b1af05406b5117d76f567056fba0a023a6374465) M sys/fs/nfsserver/nfs_nfsdserv.c _____________________________________________________________________________________________________________ Commit: d62d0b6586a88f64edb706295a4d568f2bde2808 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d62d0b6586a88f64edb706295a4d568f2bde2808 Author: Mark Johnston (Tue 23 Jun 2026 18:45:28 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) iconv: Fix a stack buffer overflow in _ISO2022_sputwchar() In the ISO2022-CN encoding, characters may require at least seven bytes, and MB_LEN_MAX==6 is insufficient. From code inspection, _ISO2022_sputwchar() can emit 10 bytes in the worst case, so use that to size buffers. Add a regression test. Approved by: so Security: FreeBSD-SA-26:49.iconv Security: CVE-2026-58082 Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D57950 M contrib/netbsd-tests/lib/libc/locale/t_iconv.c M lib/libiconv_modules/ISO2022/citrus_iso2022.c _____________________________________________________________________________________________________________ Commit: 298e912b0d8deab54dbd77cea08615e4b146cc03 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=298e912b0d8deab54dbd77cea08615e4b146cc03 Author: Mark Johnston (Tue 23 Jun 2026 17:05:31 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) iconv: Fix a buffer overflow in the HZ encoding wcrtomb may store up to 2 2-byte escape sequences to the state buffer in addition to the character itself. In the worst case, a 3-byte heap overflow is possible. Approved by: so Security: FreeBSD-SA-26:49.iconv Security: CVE-2026-58081 Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D57949 M lib/libiconv_modules/HZ/citrus_hz.c _____________________________________________________________________________________________________________ Commit: 399151130357641c6f66f4d05f66aeed42515afc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=399151130357641c6f66f4d05f66aeed42515afc Author: Taylor R Campbell (Mon 22 Jun 2026 20:44:55 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) iconv(3): Draft some automatic tests. Based on a report by Nick Wellnhofer. Approved by: so Security: FreeBSD-SA-26:49.iconv Reviewed by: markj, kevans Differential Revision: https://reviews.freebsd.org/D57948 A contrib/netbsd-tests/lib/libc/locale/t_iconv.c M lib/libc/tests/locale/Makefile _____________________________________________________________________________________________________________ Commit: 799132497f046c0d449cced38b1c3095e4d89abd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=799132497f046c0d449cced38b1c3095e4d89abd Author: Taylor R Campbell (Mon 22 Jun 2026 22:15:25 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) iconv(3): Fix problems in various encodings Fix null pointer dereference with HZ8 encoding. Fix output buffer overrun in UTF-7, VIQR, ZW encodings. Approved by: so Security: FreeBSD-SA-26:49.iconv Security: CVE-2026-58081 Reviewed by: markj, kevans Differential Revision: https://reviews.freebsd.org/D57947 M lib/libiconv_modules/HZ/citrus_hz.c M lib/libiconv_modules/UTF7/citrus_utf7.c M lib/libiconv_modules/VIQR/citrus_viqr.c M lib/libiconv_modules/ZW/citrus_zw.c _____________________________________________________________________________________________________________ Commit: a7787f9f8b8efcb1873ebaf9830de90ab0eb283b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a7787f9f8b8efcb1873ebaf9830de90ab0eb283b Author: John Baldwin (Wed 24 Jun 2026 02:14:11 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) ktls CBC decrypt: Only increment iovec index when an entry is used If an mbuf in the chain was skipped because it only contained bytes from the header, the iovec index ('i') was incremented even though the entry was not populated. Only increment 'i' when an iovec entry is consumed. Add a new type of KTLS receive test which writes a single TLS record via two separate write(2) calls over a TCP_NODELAY socket to trigger a split in the mbuf chain in the kernel. Test various split locations including after the "plain" TLS header (5 bytes), after the full TLS header, in the middle of the data payload, just before the start of the trailer, and in the middle of the trailer. These tests are also run against all supported ciphers, not just CBC. The 'header' test for CBC ciphersuites was able to trigger the bug. Approved by: so Security: FreeBSD-SA-26:46.ktls Security: CVE-2026-49423 Sponsored by: Chelsio Communications M sys/opencrypto/ktls_ocf.c M tests/sys/kern/ktls_test.c _____________________________________________________________________________________________________________ Commit: 1763deb84ba988d36546cbb6222f08a71d1a1bb0 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1763deb84ba988d36546cbb6222f08a71d1a1bb0 Author: Kyle Evans (Thu 25 Jun 2026 18:02:47 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) kern: fix auditing of ptrace(2) syscall requests `error` here is the return value of syscall_thread_enter() rather than the syscall itself, so the committed audit records do not reflect reality. This is less harmful than them recording an error when the operation actually succeeded, but it could still possibly be used to throw off IDS techniques with things like bsmtrace. Approved by: so Security: FreeBSD-SA-26:45.audit Security: CVE-2026-49426 Reviewed by: des, kib, markj, csjp Differential Revision: https://reviews.freebsd.org/D57847 M sys/kern/kern_sig.c _____________________________________________________________________________________________________________ Commit: f30052c16dba54e63a5e9dcd81f5a58a4eee4684 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f30052c16dba54e63a5e9dcd81f5a58a4eee4684 Author: Mark Johnston (Wed 24 Jun 2026 20:57:00 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) posixshm: Fix handling of sendfile() with largepage objects sendfile(2) can transmit POSIX shared memory objects. Typically it will look up and wire each page before sending it to a socket; once transmission is complete, the page is unwired and typically released back into the page queues. sendfile() has an advisory flag, SF_NOCACHE, which means, "try to free the page once transmission is complete." This is implemented in vm_page_release(), which expects to operate on managed pages. Pages belonging a largepage object are de-facto wired not explicitly so. Thus, vm_page_release() will unwire and, having found no additional references, free the page. Because mappings of largepage objects are unmanaged, userspace can still access the now freed page. Fix the problem by explicitly wiring largepage pages. Make the VM object destructor responsible for unwiring and freeing them. Add a regression test. Approved by: so Security: FreeBSD-SA-26:44.posixshm Security: CVE-2026-49427 Reported by: Chris Jarrett-Davies Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57832 M sys/kern/uipc_shm.c M sys/vm/vm_page.c M tests/sys/posixshm/posixshm_test.c _____________________________________________________________________________________________________________ Commit: 65883818cea03738c1a2b7ffc56ab2fe8041e9c1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=65883818cea03738c1a2b7ffc56ab2fe8041e9c1 Author: Mark Johnston (Tue 23 Jun 2026 23:47:02 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) posixshm: Disallow truncation of largepage objects We correctly handled ftruncate(), but not open(O_TRUNC). Add a regression test. Approved by: so Security: FreeBSD-SA-26:44.posixshm Security: CVE-2026-49428 Reported by: Chris Jarrett-Davies Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57831 M sys/kern/uipc_shm.c M tests/sys/posixshm/posixshm_test.c _____________________________________________________________________________________________________________ Commit: c379639aa4c1612c83c518d173a507618b9bcf17 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c379639aa4c1612c83c518d173a507618b9bcf17 Author: Mark Johnston (Wed 24 Jun 2026 20:56:07 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:22 BST) posixshm: Disallow fspacectl() on largepage objects As with truncation, the operation isn't supported, but nothing prevented it. Add a regression test. Approved by: so Security: FreeBSD-SA-26:44.posixshm Security: CVE-2026-49428 Reported by: Chris Jarrett-Davies Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57830 M sys/kern/uipc_shm.c M tests/sys/posixshm/posixshm_test.c _____________________________________________________________________________________________________________ Commit: df8885512da546e6ba619039625ec43a945b9889 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=df8885512da546e6ba619039625ec43a945b9889 Author: Mark Johnston (Tue 23 Jun 2026 22:46:17 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:21 BST) rack: Reload the TCP stack PCB after reacquiring the inpcb lock Malicious userspace might switch TCP stacks twice while the inpcb lock is dropped. If it does so, the validation of tp->t_fb might succeed, but the saved pointer to the stack PCB might be invalid. Reload it to avoid this problem, as BBR already does. Approved by: so Security: FreeBSD-SA-26:43.tcp Security: CVE-2026-49422 Reported by: Maik Münch Reviewed by: tuexen Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57791 M sys/netinet/tcp_stacks/rack.c _____________________________________________________________________________________________________________ Commit: 7982ae91a51a1f30b6ad7d12c5eedc4b46a37992 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=7982ae91a51a1f30b6ad7d12c5eedc4b46a37992 Author: Mark Johnston (Tue 23 Jun 2026 21:43:53 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:21 BST) unlinkat: Pass flags down to the work functions The unlinkat(2) and funlinkat(2) system calls were ignoring AT_RESOLVE_BENEATH. Also pass pathseg through instead of assuming it's UIO_USERSPACE. Add some tests which make sure that AT_RESOLVE_BENEATH is handled properly by various system calls. Approved by: so Security: FreeBSD-SA-26:42.unlinkat Security: CVE-2026-49421 Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57790 M sys/kern/vfs_syscalls.c M tests/sys/kern/Makefile A tests/sys/kern/resolve_beneath_test.c _____________________________________________________________________________________________________________ Commit: 4c0f47666666be701bbd6b68b21462e5e71b6d28 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4c0f47666666be701bbd6b68b21462e5e71b6d28 Author: Mark Johnston (Mon 22 Jun 2026 18:25:56 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:21 BST) tests/libalias: Add a regression test for an alias_smedia bug Approved by: so Security: FreeBSD-SA-26:41.libalias Security: CVE-2026-49420 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57747 M tests/sys/netinet/libalias/Makefile A tests/sys/netinet/libalias/smedia.c _____________________________________________________________________________________________________________ Commit: 2f84081641aac179be145a7deafec492cada4742 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2f84081641aac179be145a7deafec492cada4742 Author: Dag-Erling Smørgrav (Sun 28 Jun 2026 23:10:40 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:21 BST) libalias: Fix buffer overflow in RTSP aliasing In alias_rtsp_out(), we construct a new packet in a fixed-length buffer before copying it back into the original buffer. We never checked if the data we were writing to this temporary buffer fit in it, nor if the result fit in the original buffer. * Use a dynamically sized allocated buffer instead of a fixed-length stack buffer. * Check for overflow before appending to our temporary buffer. * Check for overflow before copying the data back to the packet buffer. * While here, use size_t for sizes and bool for booleans. Approved by: so Security: FreeBSD-SA-26:41.libalias Security: CVE-2026-49420 MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57753 M sys/netinet/libalias/alias_smedia.c _____________________________________________________________________________________________________________ Commit: 6419ed0df1393433c201d1bc946ee90f46f74e84 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6419ed0df1393433c201d1bc946ee90f46f74e84 Author: Mark Johnston (Sun 28 Jun 2026 23:00:17 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:21 BST) zfs: Roll up several upstream commits This commit squashes the following upstream commits: #18604 63a0ff6cd nvpair: Check for un-terminated strings in packed nvlist #18617 38cd6adcb Extend dataset zfs_ioc_set_prop() secpolicy #18615 738791027 Fix the integer type in zfs_ioc_userspace_many() #18623 06d8cfedb Add additional verification of size fields and strings Approved by: so Security: FreeBSD-SA-26:40.zfs Security: CVE-2026-49429 Security: CVE-2026-49430 Security: CVE-2026-49431 M sys/contrib/openzfs/module/nvpair/nvpair.c M sys/contrib/openzfs/module/zfs/dmu_recv.c M sys/contrib/openzfs/module/zfs/vdev_label.c M sys/contrib/openzfs/module/zfs/zfs_ioctl.c M sys/contrib/openzfs/module/zfs/zfs_quota.c M sys/contrib/openzfs/tests/zfs-tests/cmd/libzfs_input_check.c _____________________________________________________________________________________________________________ Commit: 715831359fa7ac19df7b0e6445a648f8860e084e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=715831359fa7ac19df7b0e6445a648f8860e084e Author: Mark Johnston (Mon 22 Jun 2026 15:40:22 BST) Committer: Mark Johnston (Tue 30 Jun 2026 18:00:21 BST) device_pager: Avoid double-insertion of pages into the pager list Unmanaged device pager objects maintain a linked list of pages that were returned from the fault handler. Initially, such pages are valid, but msync(MS_INVALIDATE) can mark them invalid (and clean). They are not removed from page tables (since they are unmanaged), but a subsequent mlock() call can trigger a page fault that is handled by the pager. dev_pager_getpages() then re-inserts the page into the linked list even though it's already present there. This patch fixes the problem by removing the linked list. OBJ_PG_DTOR is set, so vm_object_terminate_pages() does nothing, and dev_pager_dealloc() instead handles cleanup of the object. Add a regression test case which triggers a queue.h assertion failure in unpatched kernels. Note, in stable branches we should avoid changing the layout of struct vm_object. Approved by: so Security: FreeBSD-SA-26:37.vm Security: CVE-2026-49418 Reported by: slidybat Reviewed by: kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57743 M sys/vm/device_pager.c M sys/vm/vm_object.h M sys/vm/vm_page.c M tests/sys/vm/mmap_test.c _____________________________________________________________________________________________________________ Commit: e37b51957a169fbe600badd42a6e7a08e6e62d61 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e37b51957a169fbe600badd42a6e7a08e6e62d61 Author: Siva Mahadevan (Thu 18 Jun 2026 16:33:00 BST) Committer: Siva Mahadevan (Tue 30 Jun 2026 14:20:33 BST) tests/test_rtsock_l3: fix flaky temporal route addition tests If RTM_DELETE arrives before RTM_ADD, the test will skip the first reply and then timeout after attempting to read another message from the rtsock_fd. See the CI test failure[0] for more details. [0] https://ci.freebsd.org/job/FreeBSD-main-riscv64-test/16628/testReport/sys.net.routing/test_rtsock_l3/rtm_add_v6_temporal1_success/ Reviewed by: pouria Fixes: e02d3fe70c7247027c85d60179c331618554ba34 MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 9e2d8ec2df414a8019d9c31a9a09a5cc728b4c19) M tests/sys/net/routing/test_rtsock_l3.c _____________________________________________________________________________________________________________ Commit: a2e72a2f471fb4f36b95ce032ab35451322f8f5b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a2e72a2f471fb4f36b95ce032ab35451322f8f5b Author: Gordon Bergling (Sat 27 Jun 2026 11:51:19 BST) Committer: Gordon Bergling (Tue 30 Jun 2026 05:53:24 BST) ipfilter(4): Fix a couple of typos in the manual pages - s/heirarchical/hierarchical/ - s/itnerface/interface/ - s/conjuction/conjunction/ (cherry picked from commit 0223ae33ad6dd29215bbb6efd041aa5b6c67dc1f) M sbin/ipf/ippool/ippool.5 M sbin/ipf/ippool/ippool.8 _____________________________________________________________________________________________________________ Commit: 4a70a74168fb6a4af4a4d2fc3231bb20ac10d78a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4a70a74168fb6a4af4a4d2fc3231bb20ac10d78a Author: Gordon Bergling (Sat 27 Jun 2026 11:48:11 BST) Committer: Gordon Bergling (Tue 30 Jun 2026 05:52:45 BST) ps(1): Fix a few typos in the manual page - s/occurence/occurrence/ - s/occurences/occurrences/ - s/ouput/output/ (cherry picked from commit dd2127b54f97fd7445bb4f4187a148e979c9c944) M bin/ps/ps.1 _____________________________________________________________________________________________________________ Commit: f24211ef601aa2fd8fe43b09cdc663cf181e7ff1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f24211ef601aa2fd8fe43b09cdc663cf181e7ff1 Author: Gordon Bergling (Sat 27 Jun 2026 11:49:15 BST) Committer: Gordon Bergling (Tue 30 Jun 2026 05:52:32 BST) bectl(8): Fix a typo in the manual page - s/envionments/environments/ (cherry picked from commit c94302609a5999786f0be77d1bd0b016153b6b11) M sbin/bectl/bectl.8 _____________________________________________________________________________________________________________ Commit: 58a15fe75cc59a73016f00069f2dad001d798edf URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=58a15fe75cc59a73016f00069f2dad001d798edf Author: Piotr Kubaj (Thu 11 Jun 2026 12:41:29 BST) Committer: Robert Clausecker (Mon 29 Jun 2026 09:14:05 BST) sys/arm64: fix return values of freebsd32_{set,swap}context() This patch aligns the return values of freebsd32_{set,swap}context() with their counterparts on amd64 and powerpc64, fixing the setcontext() and swapcontext() calls in armv7 applications running on aarch64. In particular, this fixes random crashes in armv7 Ruby applications running on aarch64 hosts. Tested by: fuz MFC after: 1 week (cherry picked from commit 92ae21e8a155734f73589b7ef9fa19a6bb6d042f) M sys/arm64/arm64/freebsd32_machdep.c _____________________________________________________________________________________________________________ Commit: 59667b7653a36da41a647d279461f8721cd66e6e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=59667b7653a36da41a647d279461f8721cd66e6e Author: Konstantin Belousov (Tue 16 Jun 2026 22:44:00 BST) Committer: Konstantin Belousov (Mon 29 Jun 2026 00:48:26 BST) amd64: do not restore fsbase/gsbase for 32bit processes (cherry picked from commit c7e5802ab6e6230a5782a09c914585d055eb5223) M sys/amd64/amd64/exception.S _____________________________________________________________________________________________________________ Commit: 1807800b7986ad9ba9d517d06d9d77f1797fbbab URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1807800b7986ad9ba9d517d06d9d77f1797fbbab Author: Andre Albsmeier (Fri 19 Jun 2026 14:50:00 BST) Committer: Michael Osipov (Sun 28 Jun 2026 21:21:28 BST) periodic/security: Introduce $security_status_loginfail_ignore for 800.loginfail Introduce a new variable "security_status_loginfail_ignore" to filter unwanted login failure messages from the daily security checks. Co-authored-by: Michael Osipov Co-authored-by: Joseph Mingrone PR: 295191 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295191 ) Reviewed by: jrm MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D57671 (cherry picked from commit 6a7c8c92245562cfd9b900dedacab99a13d5ca86) M share/man/man5/periodic.conf.5 M usr.sbin/periodic/etc/security/800.loginfail _____________________________________________________________________________________________________________ Commit: d4e539bbf0ad21dc8131e0525320b39372b97588 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d4e539bbf0ad21dc8131e0525320b39372b97588 Author: Dag-Erling Smørgrav (Thu 25 Jun 2026 04:05:36 BST) Committer: Dag-Erling Smørgrav (Sun 28 Jun 2026 10:43:44 BST) adduser: Normalize supplemental groups Rather than insist on a space-separated list, normalize the input so that any number of spaces, commas, colons, or semicolons are accepted. Reviewed by: bcr Differential Revision: https://reviews.freebsd.org/D57774 (cherry picked from commit 65fba082f44cb9451d2b12bcd99c3287d0a47acc) M usr.sbin/adduser/adduser.sh _____________________________________________________________________________________________________________ Commit: efd39967528612ec6240737b6405687adc7a359a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=efd39967528612ec6240737b6405687adc7a359a Author: Dag-Erling Smørgrav (Tue 23 Jun 2026 16:23:34 BST) Committer: Dag-Erling Smørgrav (Sun 28 Jun 2026 10:43:43 BST) rc: Make devmatch use load_kld The default behavior of load_kld is now robust enough for devmatch. Switching means settings from /etc/sysctl.kld.d are now properly applied when the corresponding modules are loaded by devmatch. While here, reduce the amount of output produced by devmatch from one line per module to a single line. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D57707 (cherry picked from commit b9f616d031566e94e6967a2c533b8aa7f36123b9) M libexec/rc/rc.d/devmatch _____________________________________________________________________________________________________________ Commit: 10ae3fc0b06af407b31d00778836ae9844b8b0b1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=10ae3fc0b06af407b31d00778836ae9844b8b0b1 Author: Dag-Erling Smørgrav (Tue 23 Jun 2026 16:23:30 BST) Committer: Dag-Erling Smørgrav (Sun 28 Jun 2026 10:43:43 BST) rc: Improve load_kld * Centralize the usage message. * Document and enforce that -e and -m are mutually exclusive; previously, speficying both would result in only -e being applied. * If -e was not specified, and -m was not specified or did not match, fall back to `kldstat -n file` which will always work for modules that aren't built into the kernel. This means the kld and ntpd scripts can now rely on load_kld to dtrt. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D57706 (cherry picked from commit a95d324dd3107afcbc16767d183acca7a57ebca9) M libexec/rc/rc.d/kld M libexec/rc/rc.d/ntpd M libexec/rc/rc.subr _____________________________________________________________________________________________________________ Commit: 19cba66624689b5ed628a641cf5da4b2b76203c9 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=19cba66624689b5ed628a641cf5da4b2b76203c9 Author: Dag-Erling Smørgrav (Tue 23 Jun 2026 16:23:25 BST) Committer: Dag-Erling Smørgrav (Sun 28 Jun 2026 10:43:43 BST) rc: Fix improper use of load_kld Fix scripts that needlessly used -e when the simpler -m would work, or that used -m when the module and file name are the same, or, in one particularly egregious case, used -m with the wrong name when using nothing at all would have worked just fine. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D57705 (cherry picked from commit cfe1962a19259fea8f51673f4da6c96656776486) M libexec/rc/rc.d/bthidd M libexec/rc/rc.d/cfumass M libexec/rc/rc.d/linux M libexec/rc/rc.d/mountcritremote _____________________________________________________________________________________________________________ Commit: bb1154f3ea20291b0c02821743084a6f1a7dd844 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=bb1154f3ea20291b0c02821743084a6f1a7dd844 Author: Konstantin Belousov (Sun 21 Jun 2026 15:17:41 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:05 BST) kern_exec.c: explicitly include sys/limits.h for UINT_MAX (cherry picked from commit f5fce0bcc370a9700249e64901eabf2e0be4ecb0) M sys/kern/kern_exec.c _____________________________________________________________________________________________________________ Commit: 34b95f53e7ac3a055b3d866d101a79e85d0022c4 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=34b95f53e7ac3a055b3d866d101a79e85d0022c4 Author: Konstantin Belousov (Wed 17 Jun 2026 20:07:22 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:04 BST) sys_set*id(9): wait for the execblocks to pass (cherry picked from commit d0384f50dad25d3358d76f7556969ea1d515ba68) M sys/kern/kern_prot.c _____________________________________________________________________________________________________________ Commit: d7d5337291c983ba969e24c95df0bcab46b44621 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d7d5337291c983ba969e24c95df0bcab46b44621 Author: Konstantin Belousov (Sun 7 Jun 2026 19:48:59 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:04 BST) procfs, linprocfs: ensure target process vmspace stability (cherry picked from commit 5db31f1b47b586a5091eb41fc957236f28b78dba) M sys/compat/linprocfs/linprocfs.c M sys/fs/procfs/procfs_map.c M sys/fs/procfs/procfs_mem.c _____________________________________________________________________________________________________________ Commit: ec0d7d01d6c45eff4043cf178addf65d1933d62a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ec0d7d01d6c45eff4043cf178addf65d1933d62a Author: Konstantin Belousov (Sun 7 Jun 2026 20:39:42 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:03 BST) pseudofs: ensure that the target process vmspace is stable for VOP_READ/WRITE (cherry picked from commit a4993bac41350e85bc9affb862d2974a1a09bb5e) M sys/fs/pseudofs/pseudofs_vnops.c _____________________________________________________________________________________________________________ Commit: caa2e5cf7cfb07c115d143023ffb21546a60556a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=caa2e5cf7cfb07c115d143023ffb21546a60556a Author: Konstantin Belousov (Sun 7 Jun 2026 20:32:20 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:02 BST) pfs_readdir(): block the target process from execing (cherry picked from commit 4c0a0909f928baac982b7de4bfa5b5ca7de5291a) M sys/fs/pseudofs/pseudofs_vnops.c _____________________________________________________________________________________________________________ Commit: a11c4f036c1136ba90fbfda5d2025d18116562d8 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a11c4f036c1136ba90fbfda5d2025d18116562d8 Author: Konstantin Belousov (Sun 7 Jun 2026 20:21:40 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:02 BST) linux_prlimit(): block execve for the target (cherry picked from commit e41c28e67fac9cd22a85b160c5c9d0477ed03600) M sys/compat/linux/linux_misc.c _____________________________________________________________________________________________________________ Commit: 23ebf0c97ac5fcd6adb6cda8a8707b99257721a6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=23ebf0c97ac5fcd6adb6cda8a8707b99257721a6 Author: Konstantin Belousov (Mon 15 Jun 2026 14:32:47 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:02 BST) kern_procctl(PROC_WX_MAPPINGS_PERMIT): ensure stability of the target vmspace (cherry picked from commit 6a572920f251ac8ac6a80a55d4d039736ea7dd65) M sys/kern/kern_procctl.c _____________________________________________________________________________________________________________ Commit: 190d6677b11a1deed6bd0ef14fd4f990eea20f5b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=190d6677b11a1deed6bd0ef14fd4f990eea20f5b Author: Konstantin Belousov (Tue 16 Jun 2026 05:34:16 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:01 BST) kern_resource.c: disallow execve around sysctl kern.proc.rlimitusage (cherry picked from commit 836749817036b90b60af0584fa21f2d9dbd60ff7) M sys/kern/kern_resource.c _____________________________________________________________________________________________________________ Commit: adb14791b752cf0f07dce44d840f01340aa6d6cb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=adb14791b752cf0f07dce44d840f01340aa6d6cb Author: Konstantin Belousov (Tue 16 Jun 2026 04:48:29 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:00 BST) kern_event: block the target process from execing for sysctl kern.proc.kqueue (cherry picked from commit 79b384bd8fdff4869ce4799edb0342ff5c25b6fa) M sys/kern/kern_event.c _____________________________________________________________________________________________________________ Commit: 35b95beb06cab0b10a7e3a697931851315fe3dc2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=35b95beb06cab0b10a7e3a697931851315fe3dc2 Author: Konstantin Belousov (Tue 16 Jun 2026 05:30:10 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:00 BST) kern_proc.c: disallow execve around sysctl kern.proc.rlimit (cherry picked from commit 5a91fa5a7656c99e527fe7e6f6bf6bd9e85ab589) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: 197f367cdda7919578d15b1562225d6db462c5ad URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=197f367cdda7919578d15b1562225d6db462c5ad Author: Konstantin Belousov (Mon 15 Jun 2026 18:57:47 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:29:00 BST) kern_proc.c: disallow execve around sysctl kern.proc.kstacks (cherry picked from commit 8b5abd9027b8b1f6290c756730ee3adebed007f4) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: b3f99ce653d456c9c829359b0dc83c4867f044b7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b3f99ce653d456c9c829359b0dc83c4867f044b7 Author: Konstantin Belousov (Mon 15 Jun 2026 18:28:15 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:28:59 BST) kern_proc.c: make kern.proc.osrel atomic (cherry picked from commit 80626f34ee985671bb8c60ee986b89587b7a1511) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: da1398dd6962b458fdcf25799fcb512f4d9c070d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=da1398dd6962b458fdcf25799fcb512f4d9c070d Author: Konstantin Belousov (Mon 15 Jun 2026 00:49:20 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:28:59 BST) kern_proc.c: ensure stability of the vmspace for sysctl kern.proc.vm_layout (cherry picked from commit 31fa677e4af00b795bf671847b4dc72960c90f14) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: e856c10a4d6dfe30a730246b2050d9dd438085db URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e856c10a4d6dfe30a730246b2050d9dd438085db Author: Konstantin Belousov (Mon 15 Jun 2026 00:49:20 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:28:58 BST) kern_proc.c: ensure stability of the vmspace for sysctl kern.proc.vmmap (cherry picked from commit 5fe6e08d2db56b530f0df2903ef24cfabab7b8ea) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: 1f062247ef4e920e7fdd1ebe91b4600d69fe1e91 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1f062247ef4e920e7fdd1ebe91b4600d69fe1e91 Author: Konstantin Belousov (Sun 7 Jun 2026 20:12:54 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:28:58 BST) kern_proc.c: ensure stability of the vmspace we read the strings from (cherry picked from commit a22c044cce41864a32af6b8281a3c416a2664d7f) M sys/kern/kern_proc.c _____________________________________________________________________________________________________________ Commit: e7578e37d832ecf1eee8cd3fed10df0e0cb1aa7e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e7578e37d832ecf1eee8cd3fed10df0e0cb1aa7e Author: Konstantin Belousov (Sun 7 Jun 2026 18:57:06 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:28:57 BST) proc: Allow to make proc_rwmem() operate on a consistent address space (cherry picked from commit e1b0d051bbf7e4e730470cbd6622f71a639834c3) M sys/fs/cuse/cuse.c M sys/fs/procfs/procfs_mem.c M sys/kern/kern_prot.c M sys/kern/sys_process.c M sys/sys/ptrace.h _____________________________________________________________________________________________________________ Commit: dc94d15a7136c4cfe3342c005d8a319f0583ed9a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=dc94d15a7136c4cfe3342c005d8a319f0583ed9a Author: Konstantin Belousov (Tue 26 May 2026 18:36:20 BST) Committer: Konstantin Belousov (Sun 28 Jun 2026 01:28:57 BST) execve_block(): a mechanism for mutual exclusion with execve() on the process (cherry picked from commit e1a84b7708c2514769625c2af6c5034694013b6a) M sys/kern/kern_exec.c M sys/kern/kern_exit.c M sys/kern/kern_fork.c M sys/sys/imgact.h M sys/sys/proc.h _____________________________________________________________________________________________________________ Commit: 62bb16c64737b32b43a2824d158923bc6245b6bc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=62bb16c64737b32b43a2824d158923bc6245b6bc Author: Siva Mahadevan (Mon 15 Jun 2026 23:27:52 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:11:03 BST) lib/msun/tests: re-enable nan_test on riscv Commit 1e25cda7f06923d05e28dac8eb1c1c428a5c92dc fixed it. MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 52ad4f883489f73e7a876f5cf296bb5a7dc696a2) M lib/msun/tests/nan_test.c _____________________________________________________________________________________________________________ Commit: 487e1d061615935c91c0ec71c7be3e6fb60cdeb1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=487e1d061615935c91c0ec71c7be3e6fb60cdeb1 Author: Siva Mahadevan (Wed 17 Jun 2026 18:04:54 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:59 BST) msun/logarithm_test: expect_fail log1p_accuracy_tests in the correct spot While here, remove the conditional on the "ci" config var to ensure that this is reproducible locally as well. This fixes a case where we are expecting a fail before the failing ATF_CHECK_* assertion happens. Found in a CI failure here: https://ci.freebsd.org/job/FreeBSD-main-riscv64-test/16608/testReport/lib.msun/logarithm_test/log1p_accuracy_tests/ PR: 253984 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253984 ) Fixes: 405188aeac540f7666dfde37c2f32d222119f56e MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D57351 (cherry picked from commit 19af9c77acc912e4bf90a667924f5f4ff78a7759) M lib/msun/tests/logarithm_test.c _____________________________________________________________________________________________________________ Commit: f08d5362b0138ad0be532fe339067224e470787d URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f08d5362b0138ad0be532fe339067224e470787d Author: Siva Mahadevan (Wed 8 Oct 2025 21:40:15 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:24 BST) lib/msun/tests: xfail remaining failing tests on non-x86 archs These are the remaining trivial xfail cases where no other test logic changes are necessary. Signed-off-by: Siva Mahadevan PR: 290099 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290099 ) MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1871 (cherry picked from commit 405188aeac540f7666dfde37c2f32d222119f56e) M lib/msun/tests/cexp_test.c M lib/msun/tests/ctrig_test.c M lib/msun/tests/exponential_test.c M lib/msun/tests/fma_test.c M lib/msun/tests/invctrig_test.c M lib/msun/tests/logarithm_test.c M lib/msun/tests/lround_test.c M lib/msun/tests/nan_test.c M lib/msun/tests/nearbyint_test.c M lib/msun/tests/next_test.c M lib/msun/tests/trig_test.c _____________________________________________________________________________________________________________ Commit: a55f9466439b021bb1a2721b2c17fce8c1af4f06 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a55f9466439b021bb1a2721b2c17fce8c1af4f06 Author: Siva Mahadevan (Wed 8 Oct 2025 21:40:15 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:20 BST) lib/msun/tests: xfail failing lrint_test cases on non-x86 archs Replace ATF_CHECK_* with ATF_REQUIRE_* to fail fast and avoid unexpected aborts. Signed-off-by: Siva Mahadevan PR: 290099 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290099 ) MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1871 (cherry picked from commit de601d5bf5c6d2409134abc4638c7a0818cc896e) M lib/msun/tests/lrint_test.c _____________________________________________________________________________________________________________ Commit: 20806e71e00c06969dbcfa2514f32a0787934627 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=20806e71e00c06969dbcfa2514f32a0787934627 Author: Siva Mahadevan (Wed 8 Oct 2025 21:40:15 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:17 BST) lib/msun/tests: xfail failing invtrig_test cases on non-x86 Replace ATF_CHECK_* with ATF_REQUIRE_* to fail fast and avoid unexpected abort. PR: 290099 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290099 ) MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1871 (cherry picked from commit 5a0617454e37c6a3df4106c24bd5ad20b338fe3a) M lib/msun/tests/invtrig_test.c _____________________________________________________________________________________________________________ Commit: 4a07cff871da327ecffffab3015198bd0b40c11a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=4a07cff871da327ecffffab3015198bd0b40c11a Author: Siva Mahadevan (Wed 8 Oct 2025 21:40:15 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:13 BST) lib/msun/tests: xfail fe_round on riscv64 Replace ATF_CHECK_* with ATF_REQUIRE_* to fail fast and avoid unexpected aborts. Signed-off-by: Siva Mahadevan PR: 290099 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290099 ) MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1871 (cherry picked from commit 6c18c40b29fd5ac66230af34726260ce2d47aecd) M contrib/netbsd-tests/lib/libm/t_fe_round.c _____________________________________________________________________________________________________________ Commit: d87110b036ed45c750c547750e427904d742d5cb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d87110b036ed45c750c547750e427904d742d5cb Author: Siva Mahadevan (Wed 8 Oct 2025 21:38:47 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:09 BST) lib/msun/tests: Add REQUIRE_ variants of test-utils macros Signed-off-by: Siva Mahadevan MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1871 (cherry picked from commit a9b1650f90f4dbc62baa52b395082b1714b6cbf3) M lib/msun/tests/test-utils.h _____________________________________________________________________________________________________________ Commit: a90616ce34c4f19903ce04160b0d11ce25721bd5 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a90616ce34c4f19903ce04160b0d11ce25721bd5 Author: Siva Mahadevan (Wed 1 Oct 2025 16:13:08 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:05 BST) lib/msun/tests: Remove newlines in ATF msgs This fixes broken test reports with the following message: lib/msun/fe_round_test:fe_round -> broken: Test result contains multiple lines: expected_failure: /usr/src/contrib/netbsd-tests/lib/libm/t_fe_round.c:95: Didn't get the same rounding mode out!<>(index 0) fed in 64 rounding mode, got 0 out<> [0.079s] Signed-off-by: Siva Mahadevan MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1871 (cherry picked from commit ec640742e30270098f8d982c1c0838f2dfde9ad5) M contrib/netbsd-tests/lib/libm/t_fe_round.c M lib/msun/tests/fmaxmin_test.c _____________________________________________________________________________________________________________ Commit: 548a058c54e3dd89d9585b8562065b9ce80d5a4a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=548a058c54e3dd89d9585b8562065b9ce80d5a4a Author: Siva Mahadevan (Wed 8 Oct 2025 22:04:28 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:10:01 BST) lib/msun/tests: Replace remaining printf() with debug() Signed-off-by: Siva Mahadevan MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1871 (cherry picked from commit d03c9b8f662466537753056608d6a64d8c5513c3) M lib/msun/tests/ctrig_test.c M lib/msun/tests/fma_test.c _____________________________________________________________________________________________________________ Commit: 35f572e7a0df8ff5719e419f14b820f31e595e6b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=35f572e7a0df8ff5719e419f14b820f31e595e6b Author: Siva Mahadevan (Fri 26 Sep 2025 18:46:19 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:09:48 BST) tests/lorder_test: Add require.progs for nm and cc Signed-off-by: Siva Mahadevan Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1858 (cherry picked from commit 66d2816407c32a0da0f039c4edb4f19b280f9bb5) M usr.bin/lorder/tests/Makefile M usr.bin/lorder/tests/lorder_test.sh _____________________________________________________________________________________________________________ Commit: d4459e2df0505573098d2e275566d61edaccf04f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d4459e2df0505573098d2e275566d61edaccf04f Author: Siva Mahadevan (Tue 15 Jul 2025 17:45:24 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:09:16 BST) Unskip test sys.netinet6.frag6.frag6_07.frag6_07 This is now consistently passing with 100+ consecutive runs. Signed-off-by: Siva Mahadevan PR: 244170 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244170 ) MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 681e9d3e391f30a512c523514f69a63c9782a901) M tests/sys/netinet6/frag6/frag6_07.sh _____________________________________________________________________________________________________________ Commit: 73ff854c205a8718d71532b683ea86160b5769be URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=73ff854c205a8718d71532b683ea86160b5769be Author: Siva Mahadevan (Tue 15 Jul 2025 17:45:24 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:09:11 BST) tests/if_lagg_test: unskip 'witness' testcase This testcase passes consistently (in 100+ runs) now. Signed-off-by: Siva Mahadevan PR: 244163, 251726 MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 7a83fedc116d827cc9c6d8e049b785f1d7b68dcd) M tests/sys/net/if_lagg_test.sh _____________________________________________________________________________________________________________ Commit: 77200838f3780aeb6f8d072770680617fd4f6e13 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=77200838f3780aeb6f8d072770680617fd4f6e13 Author: Siva Mahadevan (Tue 15 Jul 2025 17:45:24 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:09:04 BST) tests/fibs_test: unskip udp_dontroute6 testcase This test now consistently passes (300+ consecutive runs). Signed-off-by: Siva Mahadevan PR: 244172 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244172 ) Sponsored by: The FreeBSD Foundation (cherry picked from commit e93e57d3da2ea54598b5db01cc12a3acd656faba) M tests/sys/netinet/fibs_test.sh _____________________________________________________________________________________________________________ Commit: 0bc4bed347ed9e9cf1d396d187c6273316a7c5d2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0bc4bed347ed9e9cf1d396d187c6273316a7c5d2 Author: Siva Mahadevan (Tue 15 Jul 2025 17:45:24 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:08:51 BST) tests/mac_portacl: enable is_exclusive for now Both tests rely on ports 77 and 7777 to be available and thus cannot be run concurrently. This is a temporary measure to ensure that they don't conflict with each other. In the future, these should be rewritten to wait until the necessary ports are available, or deterministically select a free port instead. Signed-off-by: Siva Mahadevan Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1790 (cherry picked from commit 5dadfac51c3876b0ba6fde831cb4417594167fed) M tests/sys/mac/portacl/Makefile _____________________________________________________________________________________________________________ Commit: 2fb507fafbba5d1c9518f2b9d6ee7c9ddbfbde6b URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2fb507fafbba5d1c9518f2b9d6ee7c9ddbfbde6b Author: Siva Mahadevan (Fri 18 Jul 2025 14:20:19 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:08:31 BST) cap_net/net_test: require 'allow_network_access' Signed-off-by: Siva Mahadevan Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1779 (cherry picked from commit df88c711a26c04192761e96dc08a6f3f9e42afed) M lib/libcasper/services/cap_net/tests/net_test.c _____________________________________________________________________________________________________________ Commit: 675eccc6c3962ef905f05a2715f82fab98ff172a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=675eccc6c3962ef905f05a2715f82fab98ff172a Author: Siva Mahadevan (Mon 21 Jul 2025 14:25:26 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:08:15 BST) tests/sys/netpfil: unskip tests that no longer need to be skipped All of these are passing consistently in the latest CI environment in 15 back-to-back test runs. Signed-off-by: Siva Mahadevan PR: 260458, 260459, 260460, 264805 Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1788 (cherry picked from commit 6ff78a63d8cd0dd64ae79cbda5cb03572c1e17f5) M tests/sys/netpfil/common/dummynet.sh M tests/sys/netpfil/pf/forward.sh M tests/sys/netpfil/pf/killstate.sh M tests/sys/netpfil/pf/set_tos.sh _____________________________________________________________________________________________________________ Commit: 0b6f420611fae6a9dbeb07ae6376049bfe2d408c URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0b6f420611fae6a9dbeb07ae6376049bfe2d408c Author: Siva Mahadevan (Mon 15 Jun 2026 23:09:05 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:04:30 BST) tests/sigtramp_test: xfail on non-amd64 This test fail until at least https://reviews.llvm.org/D155066 is rebased and picked up for aarch64 and more work is done for the other archs. PR: 289096 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289096 ) Reviewed by: jlduran Fixes: fef84fd8ae845e19cec0f6b9aac0e6451cca3d7a MFC after: 3 days (cherry picked from commit 0010c4b8a020dbeb81e61b71117d1caae9b044cc) M lib/libexecinfo/tests/sigtramp_test.c _____________________________________________________________________________________________________________ Commit: 97ecf34a94dc2fe2ac69afbb1ae7a3d029dfa04a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=97ecf34a94dc2fe2ac69afbb1ae7a3d029dfa04a Author: Siva Mahadevan (Thu 11 Jun 2026 01:08:37 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:04:25 BST) memfd_test: skip hugetlb testcase when large page requests are not supported Fixes this CI test failure: https://ci.freebsd.org/view/Test/job/FreeBSD-main-riscv64-test/16606/testReport/junit/sys.posixshm/memfd_test/hugetlb/ Reviewed by: kevans MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D57289 (cherry picked from commit 64b053f879a8b3c4aa31e1ab99340dfe0ddfea0c) M tests/sys/posixshm/memfd_test.c _____________________________________________________________________________________________________________ Commit: 83344fec91c1978f35da9e5fd0f205085fd1e2f3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=83344fec91c1978f35da9e5fd0f205085fd1e2f3 Author: Siva Mahadevan (Wed 10 Jun 2026 23:30:14 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 17:03:41 BST) src.opts.mk: enable OPENSSL_KTLS by default on riscv64 1e649491b8567151270095fda3bce8faea394952 enabled KERN_TLS in riscv/conf/GENERIC, but didn't enable OPENSSL_KTLS. This passes all testcases in the sys/kern/ssl_sendfile suite and fixes CI failures seen here: https://ci.freebsd.org/job/FreeBSD-main-riscv64-test/16606/testReport/sys.kern/ssl_sendfile/ PR: 293810 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293810 ) Fixes: 1e649491b8567151270095fda3bce8faea394952 MFC after: 3 days Reviewed by: gallatin, ngie Differential Revision: https://reviews.freebsd.org/D57316 (cherry picked from commit b61ab2d693c04d4be5468e7db4b03d5777228f95) M share/man/man5/src.conf.5 M share/mk/src.opts.mk _____________________________________________________________________________________________________________ Commit: 1ae396e2adaebb4fc71d29628789804ac9b0be44 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1ae396e2adaebb4fc71d29628789804ac9b0be44 Author: Siva Mahadevan (Wed 10 Jun 2026 23:29:02 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 16:59:48 BST) libc: fix strtold NaN representation on riscv Regenerate gd_qnan.h on riscv using the qnan.c config tool found in contrib/gdtoa. This fixes the following tests in CI: lib/libc/stdio/scanfloat_test:infinities_and_nans lib/libc/stdlib/strtod_test:strtold_nan Reviewed by: jrtc27 MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D57405 (cherry picked from commit 1e25cda7f06923d05e28dac8eb1c1c428a5c92dc) M lib/libc/riscv/gd_qnan.h _____________________________________________________________________________________________________________ Commit: 0c4bafd0333f47850d46a96e7deb98a7da387de6 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0c4bafd0333f47850d46a96e7deb98a7da387de6 Author: Siva Mahadevan (Thu 28 May 2026 17:32:24 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 16:56:09 BST) ptrace_test: expect PT_STEP tests to fail on riscv ptrace_single_step currently returns EOPNOTSUPP on riscv. This temporarily fixes the following CI failures: https://ci.freebsd.org/job/FreeBSD-main-riscv64-test/16606/testReport/sys.kern/ptrace_test/ptrace__PT_STEP_with_signal/ https://ci.freebsd.org/job/FreeBSD-main-riscv64-test/16606/testReport/sys.kern/ptrace_test/ptrace__step_siginfo/ Reviewed by: kib Approved by: emaste (mentor) Differential Revision: https://reviews.freebsd.org/D57288 (cherry picked from commit a7df326619ef9caa2ed00bf2d103dd278e7b32ec) M tests/sys/kern/ptrace_test.c _____________________________________________________________________________________________________________ Commit: c8dfb30bc001976b7dfc3a1ee745771e4b75ab67 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=c8dfb30bc001976b7dfc3a1ee745771e4b75ab67 Author: Siva Mahadevan (Thu 21 May 2026 15:08:32 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 16:55:53 BST) universe: emit warning instead of error for bad/missing KERNCONF When doing a large `make universe` build with multiple KERNCONFS, it should not be an error when a particular target has a missing KERNCONF. In this example, ``` $ make universe TARGETS='arm64 riscv' KERNCONFS='QEMU VIRT' ``` Currently, arm64 does not have a QEMU conf, and riscv does not have a VIRT conf. However, this command should still succeed instead of failing with the following message: ``` make[2]: /usr/src/Makefile:767: Target architecture for riscv/conf/VIRT unknown. config(8) likely too old. in .for loop from /usr/src/Makefile:761 with kernel = VIRT in make[2] in directory "/usr/src" make[2]: stopped making "universe_kernels" in /usr/src ``` Since the opposite is true, we should build whatever confs are available from the requested list of KERNCONFS, while making sure to still emit warnings along the way. Reviewed by: imp Approved by: lwhsu (mentor), emaste (mentor) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55571 (cherry picked from commit c170a96dbeeb3b0d36456d21beee6c551957a456) M Makefile _____________________________________________________________________________________________________________ Commit: e6b52cea8044b30718478c16a0ba2de6dadc0fd7 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e6b52cea8044b30718478c16a0ba2de6dadc0fd7 Author: Siva Mahadevan (Wed 20 May 2026 21:05:53 BST) Committer: Siva Mahadevan (Fri 26 Jun 2026 16:55:15 BST) universe: allow moving build logs to UNIVERSE_LOGDIR This allows `make universe` or `make tinderbox` to build from a read-only src tree. Reviewed by: ziaee, imp, delphij Approved by: lwhsu (mentor), emaste (mentor) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55566 (cherry picked from commit 02ef0b6d76e9717b8e3182dd706e23fd2702701d) M Makefile M share/man/man7/build.7 _____________________________________________________________________________________________________________ Commit: ef7724764a1da3d7615528f1ec4a13ff315562d2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ef7724764a1da3d7615528f1ec4a13ff315562d2 Author: Siva Mahadevan (Wed 11 Feb 2026 21:50:00 GMT) Committer: Siva Mahadevan (Fri 26 Jun 2026 16:46:32 BST) mixer/tests: use require.kmods property instead of ad-hoc checks Reviewed by: christos Approved by: lwhsu (mentor) Sponsored by: The FreeBSD Foundation MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55221 (cherry picked from commit 5fa297f4bcd277dca7eef03e68363fb1e721799e) M usr.sbin/mixer/tests/Makefile M usr.sbin/mixer/tests/mixer_test.sh _____________________________________________________________________________________________________________ Commit: ae7241e7d08b2193b0370d16b3d8b6a82423d9ef URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=ae7241e7d08b2193b0370d16b3d8b6a82423d9ef Author: Siva Mahadevan (Thu 22 Jan 2026 19:49:51 GMT) Committer: Siva Mahadevan (Fri 26 Jun 2026 16:28:18 BST) tests/ktest_netlink_message_writer: remove INVARIANTS requirement INVARIANTS is meant to be used to enable extra sanity checking for internal structures, not enable/disable tests in the freebsd kyua test suite. STABLE branches include a GENERIC kernconf without INVARIANTS, so ktest_netlink_message_writer is broken on such branches: https://ci.freebsd.org/job/FreeBSD-stable-15-amd64-test/253/testReport/sys.netlink.test_netlink_message_writer/py/__test_cases_list__/ Reviewed by: lwhsu, imp Approved by: lwhsu (mentor) Pull Request: https://github.com/freebsd/freebsd-src/pull/1889 MFC after: 3 days Signed-off-by: Siva Mahadevan Sponsored by: The FreeBSD Foundation (cherry picked from commit 8352e24d0bc59f9730980986600bde7d8cdce21d) M sys/netlink/ktest_netlink_message_writer.c M sys/netlink/ktest_netlink_message_writer.h _____________________________________________________________________________________________________________ Commit: f523af0e05a5a7e1aa9a872e165d9dcf3b60ad18 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f523af0e05a5a7e1aa9a872e165d9dcf3b60ad18 Author: Dag-Erling Smørgrav (Tue 23 Jun 2026 08:51:01 BST) Committer: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:41:06 BST) x86: Harmonize GENERIC and MINIMAL * Reorder MINIMAL so everything is in the same order as in GENERIC. * Wherever comments diverged, except for the explanatory comment at the top, copy the GENERIC version to MINIMAL. * Add KDTRACE_FRAME to i386 GENERIC; it was already in MINIMAL, and adding it to GENERIC seemed like the more correct move. With these changes, MINIMAL is a strict subset of GENERIC, apart from the identifier and the explanatory comment at the top. Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D57729 (cherry picked from commit 01c8644093c28d09f0d41fb522dc53f1ab696a7e) M sys/amd64/conf/MINIMAL M sys/i386/conf/GENERIC M sys/i386/conf/MINIMAL _____________________________________________________________________________________________________________ Commit: 3c687b75006585168be091add06ae121cbbe334a URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3c687b75006585168be091add06ae121cbbe334a Author: Dag-Erling Smørgrav (Sat 21 Mar 2026 07:21:24 GMT) Committer: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:41:06 BST) kernel: Be clearer about what ZSTDIO is for ZSTDIO is not just for core dumps, and it is now required by ZFS, so move it (and GZIO, which is still just for dumps) to a new “Compression support” section in GENERIC, and add them both to MINIMAL. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55940 (cherry picked from commit 092687a031064dc08ac198648c6393cc50b06cee) M sys/amd64/conf/FIRECRACKER M sys/amd64/conf/GENERIC M sys/amd64/conf/MINIMAL M sys/arm64/conf/std.arm64 M sys/conf/NOTES M sys/i386/conf/GENERIC M sys/i386/conf/MINIMAL M sys/powerpc/conf/GENERIC M sys/powerpc/conf/GENERIC64 M sys/powerpc/conf/GENERIC64LE M sys/riscv/conf/GENERIC _____________________________________________________________________________________________________________ Commit: b53d2de9acd19f572eac6350fb5744726e6841e2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b53d2de9acd19f572eac6350fb5744726e6841e2 Author: Dag-Erling Smørgrav (Mon 12 Jan 2026 16:57:45 GMT) Committer: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:41:06 BST) MINIMAL: Add virtio_scsi This allows a MINIMAL kernel to boot in qemu/kvm. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. (cherry picked from commit 77a6992bf5329e32b0b77608421dafccb125ad37) M sys/amd64/conf/MINIMAL M sys/i386/conf/MINIMAL _____________________________________________________________________________________________________________ Commit: 3377fbc14bb3e9dea44845fa788a20578d07146e URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=3377fbc14bb3e9dea44845fa788a20578d07146e Author: Dag-Erling Smørgrav (Mon 22 Jun 2026 14:23:23 BST) Committer: Dag-Erling Smørgrav (Fri 26 Jun 2026 15:41:05 BST) iconv: Update availability of bool While here, drop duplicate include. MFC after: 1 week Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D57733 (cherry picked from commit 8f750231d4b58ac71cbd3ac3548e1d7eb849f04b) M include/iconv.h _____________________________________________________________________________________________________________ Commit: afc113696ff6652f132e2893e8efacb669860667 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=afc113696ff6652f132e2893e8efacb669860667 Author: Rick Macklem (Thu 4 Jun 2026 23:02:48 BST) Committer: Rick Macklem (Fri 26 Jun 2026 02:35:27 BST) nfs_commonkrpc.c: Improve handling of NFSv4.1/4.2 recovery Commit 4d80d4913e79 fixed a long standing bug in the recovery code. However. glebius@ reported seeing multiple recovery cycles with this patch during an NFSv4.1/4.2 server reboot. This commit should minimize the risk of multiple recovery cycles. PR: 294925 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294925 ) (cherry picked from commit ea4886f2829bf33866c8c0c60b14a9641fc54b40) M sys/fs/nfs/nfs_commonkrpc.c _____________________________________________________________________________________________________________ Commit: 28ae0d8491187bd7c4b244a68d79634dd8f9a698 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=28ae0d8491187bd7c4b244a68d79634dd8f9a698 Author: Rick Macklem (Mon 25 May 2026 20:22:32 BST) Committer: Rick Macklem (Fri 26 Jun 2026 02:33:54 BST) nfs: Fix argument typo to avoid a crash A typo resulted in the wrong argument for a bytewise comparison that could result in a crash if the incorrect argument was not a valid pointer. This patch fixes the argument. While investigating this, I noticed that the correct argument was not being filled in as required, so this patch fixes that, as well. Somehow, recovery from a NFSv4.1/4.2 server crash worked during testing, so this was not detected. The bug/patch only affects NFS client mounts using NFSv4.1/4.2. PR: 294925 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294925 ) (cherry picked from commit 4d80d4913e79c8b5918b1f04c1c7b38e6c76b9b4) M sys/fs/nfs/nfs_commonkrpc.c M sys/fs/nfs/nfs_commonsubs.c _____________________________________________________________________________________________________________ Commit: 222648172b80e27e06ea83d60f50f9d9ed75dfbc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=222648172b80e27e06ea83d60f50f9d9ed75dfbc Author: Dag-Erling Smørgrav (Fri 19 Jun 2026 08:26:20 BST) Committer: Dag-Erling Smørgrav (Wed 24 Jun 2026 18:25:03 BST) ldns: Update to 1.9.2 Merge commit '3750aed65c1f5a610b44d29c92236ca119b62780' (cherry picked from commit 63442ceae5ed31ad45e401f5fe0010b824bc2b38) M contrib/ldns/Changelog M contrib/ldns/configure M contrib/ldns/configure.ac M contrib/ldns/ldns/config.h M contrib/ldns/ldns/util.h _____________________________________________________________________________________________________________ Commit: a878e7b4985f0c178b9d49a6cd80c2eade9b77e3 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=a878e7b4985f0c178b9d49a6cd80c2eade9b77e3 Author: Dag-Erling Smørgrav (Fri 19 Jun 2026 08:24:23 BST) Committer: Dag-Erling Smørgrav (Wed 24 Jun 2026 18:25:00 BST) ldns: Update to 1.9.1 Merge commit '026e5b88eb0cde54d9fc22b9a1ebc79ea0f67aec' (cherry picked from commit 4593470d16714d83ac06a3ccc319f998a02ced07) M contrib/ldns/Changelog M contrib/ldns/config.guess M contrib/ldns/config.sub M contrib/ldns/configure M contrib/ldns/configure.ac M contrib/ldns/ldns/config.h M contrib/ldns/ldns/util.h _____________________________________________________________________________________________________________ Commit: 6a606e7773262ed1e22ea1cf132eb5a87dea5da1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=6a606e7773262ed1e22ea1cf132eb5a87dea5da1 Author: ShengYi Hung (Fri 29 May 2026 16:09:52 BST) Committer: ShengYi Hung (Tue 23 Jun 2026 21:57:03 BST) usb: Add missing unsetup while detaching uchcom Reviewed by: christos MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57329 (cherry picked from commit 2934783fa80de2854d9527ae11db85c47ac65a91) M sys/dev/usb/serial/uchcom.c _____________________________________________________________________________________________________________ Commit: e01b5034a627cec33c0cd2768687c7db6db3cbeb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=e01b5034a627cec33c0cd2768687c7db6db3cbeb Author: ShengYi Hung (Thu 28 May 2026 09:42:11 BST) Committer: ShengYi Hung (Tue 23 Jun 2026 21:56:03 BST) usb: Add missing mtx lock and unlock in pushing dma queue Accessing usb_xfer_queue requires bus lock, we added this missing lock in here to prevent racing issue. Reviewed by: adrian MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57293 (cherry picked from commit df5e9e3da5b9b3fe63ed4aaaa19b824fd18ae0f2) M sys/dev/usb/usb_transfer.c _____________________________________________________________________________________________________________ Commit: 2cf3e6b554b7e0da480880c114d2fa539d2f7570 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=2cf3e6b554b7e0da480880c114d2fa539d2f7570 Author: ShengYi Hung (Thu 21 May 2026 13:49:42 BST) Committer: ShengYi Hung (Tue 23 Jun 2026 21:56:03 BST) xhci: Do not drop and add bits in xhci Drop and Add bits reset the data toggle for high-speed devices in XHCI. The toggle bit represents the sequence number in USB 2.0 transfers. However, a device can only recognize that the toggle bit has been reset while in the HALT state. As a result, the host and device toggle values may become mismatched, causing xHCI to reject the packet. This issue was observed while testing the EZ-USB FX2 device. The transfer may then return to the original value after a bi-directional TD because the toggle field is only one bit wide. This explains the reson that we can only receive packets bi-transfer in some case. Therefore, we do not reset the toggle bit here. Reviewed by: adrian MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D57146 (cherry picked from commit 28d85db46b484589e2ee74cf4b270db066821de1) M sys/dev/usb/controller/xhci.c _____________________________________________________________________________________________________________ Commit: 0603a7459fc1d04a0415af37fd5f45c2ef3f13dc URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=0603a7459fc1d04a0415af37fd5f45c2ef3f13dc Author: John Baldwin (Mon 18 May 2026 19:50:39 BST) Committer: John Baldwin (Tue 23 Jun 2026 17:08:58 BST) pci: Add is_pci_device helper function This returns true if a given device is a PCI device (child of a PCI bus). Reviewed by: bz, kib Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D56996 (cherry picked from commit ffcf5e356644252f2f6c89ba01057af45c216559) M share/man/man9/Makefile M share/man/man9/pci.9 M sys/dev/pci/pci.c M sys/dev/pci/pcivar.h _____________________________________________________________________________________________________________ Commit: 10f33a86038833df9971471960423105325e33f2 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=10f33a86038833df9971471960423105325e33f2 Author: John Baldwin (Mon 18 May 2026 19:44:00 BST) Committer: John Baldwin (Tue 23 Jun 2026 17:08:31 BST) LinuxKPI: Check the devclass of the parent device in dev_is_pci Reviewed by: bz Fixes: c41d83548b6c ("LinuxKPI: pci.h add more defines and functions") Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D57066 (cherry picked from commit 6a043d0814a29e756f5d26e7b59a360e1d6dfa45) M sys/compat/linuxkpi/common/include/linux/pci.h _____________________________________________________________________________________________________________ Commit: b925c93c78596b6ec0bbf99cb56e14404798fd68 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=b925c93c78596b6ec0bbf99cb56e14404798fd68 Author: John Baldwin (Wed 13 May 2026 17:33:29 BST) Committer: John Baldwin (Tue 23 Jun 2026 17:07:25 BST) mandoc: Updating FreeBSD thead library descriptions Remove libkse as it has been obsolete for many years and drop 1:1 from description of libthr. Reviewed by: brooks Sponsored by: AFRL, DARPA Differential Revision: https://reviews.freebsd.org/D56850 (cherry picked from commit 8766e2122ac02ff4d86c254d8ef1c41d4a7f76a0) M contrib/mandoc/lib.in _____________________________________________________________________________________________________________ Commit: 1b0efaa6c6260a1f43cba768fac9c84a865e815f URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=1b0efaa6c6260a1f43cba768fac9c84a865e815f Author: John Baldwin (Wed 6 May 2026 21:53:46 BST) Committer: John Baldwin (Tue 23 Jun 2026 17:06:55 BST) kobj: Use M_WAITOK in kobj_init Blocking allocation is safe in all of the current callers of kobj_init (most of them do a M_WAITOK malloc of the structure passed as the first argument to kobj_init just before calling it). kobj_init doesn't return an error code but instead panics if the nested malloc in kobj_class_compile1 fails, so using M_WAITOK here is more robust. Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D56625 (cherry picked from commit 5df7dae10dc02ade8639b0171e0d3cc8db790e41) M sys/kern/subr_kobj.c _____________________________________________________________________________________________________________ Commit: 9d1baa1a87b070ff96ac01866635a01c5c7bc5ec URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9d1baa1a87b070ff96ac01866635a01c5c7bc5ec Author: John Baldwin (Wed 6 May 2026 21:53:46 BST) Committer: John Baldwin (Tue 23 Jun 2026 17:06:45 BST) kobj: Assert class passed to kobj_init_static is compiled Inspired by discussion in https://github.com/freebsd/freebsd-src/pull/2016 Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D56624 (cherry picked from commit 5a6e5954d14b589bcba0125d10a6c7b62b588f4b) M sys/kern/subr_kobj.c _____________________________________________________________________________________________________________ Commit: d9df9b4d2aff2643e79903feae640b3575afb201 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d9df9b4d2aff2643e79903feae640b3575afb201 Author: John Baldwin (Sat 2 May 2026 17:43:29 BST) Committer: John Baldwin (Tue 23 Jun 2026 17:06:19 BST) ctl_ioctl_frontend: Reject out-of-range initiator IDs Various places in CTL assume that initiator IDs are not larger than CTL_MAX_INIT_PER_PORT. Other IDs such as lun IDs are validated in places such as ctl_scsiio_precheck, but initiator IDs submitted by userland were not previously validated. PR: 291059 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291059 ) Reported by: Hans Rosenfeld Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D56628 (cherry picked from commit 6f8312bdff236ad64d1c15c239051359d8245a68) M sys/cam/ctl/ctl_frontend_ioctl.c _____________________________________________________________________________________________________________ Commit: f4e2f07f0cbc976e5a894ab4f3dbbccb15e06d46 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=f4e2f07f0cbc976e5a894ab4f3dbbccb15e06d46 Author: Kristof Provost (Sat 6 Jun 2026 14:44:17 BST) Committer: Kristof Provost (Tue 23 Jun 2026 07:37:59 BST) pfsync: remove invalid panic When we undefer a packet (when the peer acks the state) it's possible that we don't find a corresponding pfsync_deferral. We panic here, but that's actually something that can happen in normal operation: - if we have too many deferred packets already (in pfsync_defer()) - if the deferral timed out (in pfsync_defer_tmo()) Remove this panic and document the scenarios where it might occur. MFC after: 2 weeks Sponsored by: Orange Business Services (cherry picked from commit 035e87247f845500b4672e10efb8f47fd2c0f2a2) M sys/netpfil/pf/if_pfsync.c _____________________________________________________________________________________________________________ Commit: 65324bdd2c7e3fe16e7e347e810fc9a0b827fddb URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=65324bdd2c7e3fe16e7e347e810fc9a0b827fddb Author: Gordon Bergling (Mon 15 Jun 2026 10:10:52 BST) Committer: Gordon Bergling (Mon 22 Jun 2026 13:53:44 BST) mixer.8: Fix a typo in the manual page - s/thet/the/ (cherry picked from commit 10b1a35d11866462b5e776015a1b79f4f8f704a6) M usr.sbin/mixer/mixer.8 _____________________________________________________________________________________________________________ Commit: 5e050ef3a1381ffe0b489998d2be960174554ce1 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=5e050ef3a1381ffe0b489998d2be960174554ce1 Author: Gordon Bergling (Mon 15 Jun 2026 10:14:20 BST) Committer: Gordon Bergling (Mon 22 Jun 2026 13:52:40 BST) pnfs.4: Fix a typo in the manual page - s/Wihout/Without/ (cherry picked from commit f930d8a6540648423288567ff473123ff5647484) M usr.sbin/nfsd/pnfs.4 _____________________________________________________________________________________________________________ Commit: 9f9f0d3d9e1c9c9416b12625d357dd6f80d5f9be URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=9f9f0d3d9e1c9c9416b12625d357dd6f80d5f9be Author: Yoshihiro Takahashi (Fri 5 Jun 2026 14:14:06 BST) Committer: Yoshihiro Takahashi (Sun 21 Jun 2026 11:51:10 BST) protocols: Update with IANA list - Update /etc/protocols with IANA list updated 2026-03-09. - Document that 240 (pfsync) is not assigned by IANA. - Document deprecated protocols. PR: 295739 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295739 ) Reviewed by: des MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D57445 (cherry picked from commit e3fa020202d8e040242016bda275dde83c058549) M lib/libc/net/protocols _____________________________________________________________________________________________________________ Commit: cee36a5e003c90659f274a2f20699543c73f2d34 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=cee36a5e003c90659f274a2f20699543c73f2d34 Author: Dag-Erling Smørgrav (Tue 16 Jun 2026 21:23:18 BST) Committer: Dag-Erling Smørgrav (Sat 20 Jun 2026 20:02:53 BST) sh: Improve function documentation * Mention that the function body can be in parentheses. It is already implied since the function body can be any valid statement, but it may not be obvious to a reader who has only ever seen functions that used curly brackets and assumes that they are part of the function syntax. * Remove the incorrect claim that a local statement may only occur at the top of a function. * Show that a value may be assigned to a variable in a local statement. * While here, replace unpaired double quotes with \(dq to avoid confusing syntax highlighters. PR: 296050 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296050 ) MFC after: 1 week Reviewed by: ziaee, jilles Differential Revision: https://reviews.freebsd.org/D57596 (cherry picked from commit 556e793d803e12e9ad9361c6c53ed0433151f41e) sh: Belatedly bump manual page date Fixes: 556e793d803e ("sh: Improve function documentation") (cherry picked from commit 09bb0b0d13968163c7394e9168491b16607fc2e7) M bin/sh/sh.1 _____________________________________________________________________________________________________________ Commit: d58218761eeb4e7a2a375b7d2ed80c31a311f3fd URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=d58218761eeb4e7a2a375b7d2ed80c31a311f3fd Author: Xin LI (Wed 3 Jun 2026 05:54:25 BST) Committer: Xin LI (Sat 20 Jun 2026 04:25:44 BST) MFV: file 5.47. (cherry picked from commit e949ce9dc0e6fff26e83904f1008b76d36ba0a37) file: normalize .result files to ensure trailing newline on install Some upstream result files introduced in file 5.47 (e.g., bgcode.result) lack a trailing newline, causing the contrib_file_tests ATF test to fail with "cmp: EOF on bgcode.result". Generate normalized copies of the expected results and install those instead. Fixes: e949ce9dc0e6fff26e83904f1008b76d36ba0a37 (cherry picked from commit f7c0bd206fe4f3a956b3ecb4dc11a7386b85fa22) M contrib/file/ChangeLog M contrib/file/config.sub M contrib/file/configure M contrib/file/configure.ac M contrib/file/doc/file.man M contrib/file/doc/magic.man M contrib/file/magic/Magdir/amigaos M contrib/file/magic/Magdir/animation M contrib/file/magic/Magdir/apache M contrib/file/magic/Magdir/archive M contrib/file/magic/Magdir/audio A contrib/file/magic/Magdir/bgcode M contrib/file/magic/Magdir/blender M contrib/file/magic/Magdir/bytecode M contrib/file/magic/Magdir/c-lang M contrib/file/magic/Magdir/cisco M contrib/file/magic/Magdir/commands M contrib/file/magic/Magdir/console A contrib/file/magic/Magdir/creativeassembly M contrib/file/magic/Magdir/database M contrib/file/magic/Magdir/filesystems M contrib/file/magic/Magdir/firmware M contrib/file/magic/Magdir/fonts M contrib/file/magic/Magdir/games A contrib/file/magic/Magdir/gguf M contrib/file/magic/Magdir/ibm370 M contrib/file/magic/Magdir/images M contrib/file/magic/Magdir/intel M contrib/file/magic/Magdir/linux M contrib/file/magic/Magdir/lua M contrib/file/magic/Magdir/mail.news M contrib/file/magic/Magdir/measure M contrib/file/magic/Magdir/msdos M contrib/file/magic/Magdir/msooxml M contrib/file/magic/Magdir/music M contrib/file/magic/Magdir/os2 M contrib/file/magic/Magdir/pdf M contrib/file/magic/Magdir/pgp M contrib/file/magic/Magdir/python A contrib/file/magic/Magdir/r M contrib/file/magic/Magdir/riff M contrib/file/magic/Magdir/rtf A contrib/file/magic/Magdir/sf3 M contrib/file/magic/Magdir/sgml M contrib/file/magic/Magdir/sniffer M contrib/file/magic/Magdir/sql A contrib/file/magic/Magdir/syd A contrib/file/magic/Magdir/tapebackup M contrib/file/magic/Magdir/tex M contrib/file/magic/Magdir/ti-8x M contrib/file/magic/Magdir/varied.script M contrib/file/magic/Magdir/virtual M contrib/file/magic/Magdir/webassembly M contrib/file/magic/Magdir/windows M contrib/file/magic/Magdir/xilinx M contrib/file/magic/Magdir/xwindows M contrib/file/magic/Magdir/zip M contrib/file/magic/Makefile.am M contrib/file/magic/Makefile.in M contrib/file/python/magic.py M contrib/file/src/apprentice.c M contrib/file/src/apptype.c M contrib/file/src/buffer.c M contrib/file/src/cdf.c M contrib/file/src/cdf.h M contrib/file/src/encoding.c M contrib/file/src/file.h M contrib/file/src/funcs.c M contrib/file/src/is_simh.c M contrib/file/src/magic.c M contrib/file/src/print.c M contrib/file/src/readcdf.c M contrib/file/src/readelf.c M contrib/file/src/seccomp.c M contrib/file/src/softmagic.c M contrib/file/tests/Makefile.am M contrib/file/tests/Makefile.in M contrib/file/tests/arj.result A contrib/file/tests/bgcode.result A contrib/file/tests/bgcode.testfile A contrib/file/tests/efi-signature-list-sha256.result A contrib/file/tests/efi-signature-list-sha256.testfile M lib/libmagic/config.h M usr.bin/file/tests/Makefile _____________________________________________________________________________________________________________ Commit: 94d7f7e47cde29d3dec533d171713505170b4b25 URL: https://git.freebsd.catflap.wales/src/stable-14/commit/?id=94d7f7e47cde29d3dec533d171713505170b4b25 Author: Xin LI (Wed 10 Jun 2026 03:33:03 BST) Committer: Xin LI (Sat 20 Jun 2026 04:11:37 BST) GCE: Apply public-image label on GCE images Update the GCE image creation process to automatically apply the 'public-image=true' label when publishing new images. This aligns with standard labeling expectations for images hosted in public projects. (cherry picked from commit c85542b92acd286d9e4b034b2ab4d6b6cd46c740) M release/Makefile.gce ____________________________________________________________________________________________________________