This URL: https://git.freebsd.catflap.org/src/stable-14/raw-log-html/ ____________________________________________________________________________________________________________ Commit: f956c425d4c6b93efefea357f34cd28a7d749db1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f956c425d4c6b93efefea357f34cd28a7d749db1 Author: Zhenlei Huang (Sun 3 May 2026 12:02:15 BST) Committer: Zhenlei Huang (Sun 10 May 2026 07:25:56 BST) tests/carp: Rework unicast_v4 For unicast tests, it is sufficient to use wait_for_carp() to verify the setup is sane. Additional sanity checks are not necessarily required but can serve purpose for redundancy. For some unclear reason routed(8) is advertising route to carp BACKUP. That makes the test flaky. Also routed(8) is marked deprecated and may be removed from base in the future. Let's just add static route entry manually for additional sanity checks. Other noticeable changes: 1. Add atf_check to configuration steps to prevent potential failure on setup. That helps diagnosing on failure. 2. Shorten the names of jails to improve readability. 3. Prefer `[ifconfig|route|sysctl] -j` over `jexec [ifconfig|route|sysctl]` to make the lines shorter. MFC note: At the time writing, routed(8) does not know carp addresses and does not distinguish carp addresses in MASTER|BACKUP|INIT state, hence insists advertising the wrong addresses. PR: 294817 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294817 ) Reviewed by: glebius (previous version), pouria, markj Fixes: 93fbdef51a13 tests: carp: Update test case unicast_v4 to catch PR 284872 MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56761 (cherry picked from commit 9137c66c2ea6cc09e3a6f8a042ecdc5a62e0f39e) (cherry picked from commit 107ef0c29503e5be2b81d22930ec0c675efba140) M tests/sys/netinet/carp.sh ____________________________________________________________________________________________________________ Commit: 1f8eae9a7a45f3e816b112ae3e7cf19ece1a5b98 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1f8eae9a7a45f3e816b112ae3e7cf19ece1a5b98 Author: Gleb Smirnoff (Thu 4 Dec 2025 18:41:19 GMT) Committer: Zhenlei Huang (Sun 10 May 2026 07:25:56 BST) tests/carp: make a 0.2 second pause before configuring second jail for all scenarios where both jails have same priority/advskew. There is a tiny chance that on both sides carp_master_down() will be executed in parallel and advertisements will also fly through the bridge(4) in parallel, thus both sides will switch to MASTER before receiving the announcement from peer. This makes the test to fail. So far this flakyness was observed for carp:vrrp_v4 only, but in theory it is possible for any of the patched scenarios. Note that this sleep does not prolong execution of the tests, as the first jail is already configured, and if we slept before configuring the second, we would sleep less in wait_for_carp(). (cherry picked from commit 27ff90cd3d8d2ac8198f30cbebeefb15a49d41bc) (cherry picked from commit ad2fff6d6a4d74b6bb9008e447eafc567e8660e0) M tests/sys/netinet/carp.sh ____________________________________________________________________________________________________________ Commit: 19552d9749dd87f296a33ad96cb4f225799fb15d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=19552d9749dd87f296a33ad96cb4f225799fb15d Author: Gleb Smirnoff (Thu 4 Dec 2025 18:40:34 GMT) Committer: Zhenlei Huang (Sun 10 May 2026 07:25:56 BST) tests/carp: make sleep interval in the wait loop smaller Makes tests to finish slightly faster. (cherry picked from commit e353cbffd600ae3c00c8584dddcabf9d0ae1202a) (cherry picked from commit 332485a473724c7532690be34ed1be06d9521448) M tests/sys/netinet/carp.sh ____________________________________________________________________________________________________________ Commit: a08d321948ef172160b0c88d828e8b4b36e96acb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a08d321948ef172160b0c88d828e8b4b36e96acb Author: Gleb Smirnoff (Wed 15 Oct 2025 19:44:54 BST) Committer: Zhenlei Huang (Sun 10 May 2026 07:25:55 BST) tests/carp: kill routed(8) before destroying interfaces Otherwise routed logs a warning: "MCAST_LEAVE_GROUP ALLROUTERS: Can't assign requested address" that may be misinterpreted as a problem. (cherry picked from commit 8596810d02a1e361e0312d116339aa106aca4b19) (cherry picked from commit 89096d660ea8e3f4696abeb6745ffedf15e7aa89) M tests/sys/netinet/carp.sh ____________________________________________________________________________________________________________ Commit: 8fe76a3c1240d2f8f759f9261ac15ec0cff76d32 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8fe76a3c1240d2f8f759f9261ac15ec0cff76d32 Author: Jose Luis Duran (Sun 3 May 2026 06:31:51 BST) Committer: Jose Luis Duran (Sun 10 May 2026 01:58:35 BST) blacklistd: Fix RFC1918 typo This is a direct commit to the stable/14 branch, partially cherry picked from commit 5a6d9479ae2271a97dd23ceee8ad284770302874, as the stable/14 branch only has blacklistd. The address in the configuration file example was intended to be from the 192.168.0.0/16 range of IPv4 private addresses (RFC1918). Reported on mastodon.social at https://mastodon.social/@asmodai/116316630762241486. Fix submitted upstream by emaste@. Fixing locally first. Reported by: asmodai Reviewed by: emaste MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56773 M usr.sbin/blacklistd/blacklistd.conf ____________________________________________________________________________________________________________ Commit: 0cd655f71b46ada2c353c371e2a2f9f0dac29613 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0cd655f71b46ada2c353c371e2a2f9f0dac29613 Author: Kristof Provost (Wed 29 Apr 2026 16:04:44 BST) Committer: Kristof Provost (Sat 9 May 2026 14:29:04 BST) pf: do not reject rules with colliding hashes We insert rules in pf_krule_global solely for the benefit of the 'keepcounters' feature. Failing to insert (beause the rule hash collides, or an identical rule already exists) would be worse than restoring counts to the wrong rule (or failing to restore them at all). PR: 282863, 294860, 294859, 294858 MFC after: 3 days Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D56745 (cherry picked from commit a0e4c65f1814a7a677364dc29bb703f84323d175) M sys/netpfil/pf/pf_ioctl.c M tests/sys/netpfil/pf/match.sh ____________________________________________________________________________________________________________ Commit: cab150feb82ebae3edf59565de28df68be5cf281 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cab150feb82ebae3edf59565de28df68be5cf281 Author: Ryan Libby (Wed 15 Apr 2026 09:08:37 BST) Committer: Ryan Libby (Fri 8 May 2026 16:34:15 BST) sys/time: appease gcc -Wtype-limits In environments where time_t is 32 bits, including the 32-bit library build on amd64, the overflow being tested for cannot happen, and gcc complains with -Wtype-limits, causing the gcc build to fail. Work around this by ifdef'ing out the saturation code on i386. Reviewed by: imp, jfree Discussed with: markj Fixes: e3799530b3ba ("sys/time: Add saturating sbt conversions") Differential Revision: https://reviews.freebsd.org/D56369 (cherry picked from commit 00dccc3164c6dff38350a1baeeea7238acf2efc3) M sys/sys/time.h ____________________________________________________________________________________________________________ Commit: eba1c36898dac1469755914d5839d9fe2d573348 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=eba1c36898dac1469755914d5839d9fe2d573348 Author: Dimitry Andric (Fri 1 May 2026 19:07:11 BST) Committer: Dimitry Andric (Fri 8 May 2026 11:26:59 BST) Define stdint.h macros unconditionally Similar to glibc, define all the stdint.h macros such as `SIZE_MAX`, `UINT64_C`, etc unconditionally. I.e. no longer check whether `__STDC_CONSTANT_MACROS` or `__STDC_LIMIT_MACROS` are defined. See also . This is part of reverting base 00bee6fcd77f, which reverted an upstream libc++ commit that eliminated libc++'s stdint.h wrapper header. Submitted by: Nikolas Klauser MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D56746 (cherry picked from commit 966fb94cb3575ccd39da211165d0858fd0eb0ef2) M sys/arm/include/_stdint.h M sys/arm64/include/_stdint.h M sys/powerpc/include/_stdint.h M sys/riscv/include/_stdint.h M sys/x86/include/_stdint.h ____________________________________________________________________________________________________________ Commit: a4d15ef8aa7a904a67d06e0cf36acd9a51b761df URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a4d15ef8aa7a904a67d06e0cf36acd9a51b761df Author: Dimitry Andric (Fri 1 May 2026 19:08:26 BST) Committer: Dimitry Andric (Fri 8 May 2026 11:26:59 BST) Remove extraneous tab characters at EOL in various _stdint.h files MFC after: 3 days (cherry picked from commit daeab702f9adbbb718ecf48e17de8dd619cfe7b8) M sys/powerpc/include/_stdint.h M sys/riscv/include/_stdint.h M sys/x86/include/_stdint.h ____________________________________________________________________________________________________________ Commit: 6933fdcb547e264f756535e442b23cdf621c3360 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6933fdcb547e264f756535e442b23cdf621c3360 Author: Konstantin Belousov (Tue 28 Apr 2026 03:34:49 BST) Committer: Konstantin Belousov (Fri 8 May 2026 01:30:32 BST) uipc_shm.c: make large page allocation interruptible (cherry picked from commit 839d3266d8c6f6471cb92a3c0ae32eb16d117427) M sys/kern/uipc_shm.c ____________________________________________________________________________________________________________ Commit: 219c49468f55e3aee4fc3fdafeb9d2b9eae34016 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=219c49468f55e3aee4fc3fdafeb9d2b9eae34016 Author: Dag-Erling Smørgrav (Mon 4 May 2026 13:08:10 BST) Committer: Dag-Erling Smørgrav (Thu 7 May 2026 19:54:28 BST) vis.3: Try to better describe VIS_SAFE The current text fails to draw the reader's attention to the fact that VIS_SAFE essentially exempts certain characters from being encoded. While here, fix some markup nits. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D56716 (cherry picked from commit 8acc4c16c6635c3cd8871d0ee1221b62d48d71b9) M contrib/libc-vis/vis.3 ____________________________________________________________________________________________________________ Commit: 187de25ef99e49dd7a6a4bfa630f10ab9571ef17 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=187de25ef99e49dd7a6a4bfa630f10ab9571ef17 Author: Jan Bramkamp (Thu 7 May 2026 00:28:53 BST) Committer: Kyle Evans (Thu 7 May 2026 18:27:03 BST) jail: avoid leaking jail config fds to exec.* hooks The jail(8) command must not leave parsed configuration files open since the file descriptors will be leaked to child processes including the untrusted exec.start or exec.stop hooks. While fopen() doesn't provide direct access to O_CLOEXEC, it does provide access to FD_CLOEXEC via "e" in the mode string which provides the desired defense in depth against leaking file descriptors into exec.* hooks since those always execve() into a shell. Jail configuration is potentially sensitive and some hooks execute from within the jail context, leaving some opening for the jail to exfiltrate information about the host environment. (Commit message wordsmithed by kevans) PR: 295052 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295052 ) Reviewed by: kevans (cherry picked from commit 276d9b88a9e6fd6fd90e57c36444756ad297d2ab) M usr.sbin/jail/config.c ____________________________________________________________________________________________________________ Commit: 48862dc1d8fc03fec7523fe26c7b2e98be9d6bc9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=48862dc1d8fc03fec7523fe26c7b2e98be9d6bc9 Author: Baptiste Daroussin (Wed 6 May 2026 21:45:50 BST) Committer: Baptiste Daroussin (Thu 7 May 2026 16:28:03 BST) nuageninit: modify the test to show the issue fixed inc316ec259011 Ensure the script used is invalid when parsed by libyaml which highlight the issue revealed in PR295062 while at here validate the mode of the file is properly changed PR: 295062 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295062 ) MFC After: 1 day (cherry picked from commit 2a86992ab5019b4997ccadf7427011ba44e33c97) M libexec/nuageinit/tests/nuageinit.sh ____________________________________________________________________________________________________________ Commit: e7913c8c79ec54d2522ca3311bad58ccecb27991 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e7913c8c79ec54d2522ca3311bad58ccecb27991 Author: Baptiste Daroussin (Wed 6 May 2026 21:14:17 BST) Committer: Baptiste Daroussin (Thu 7 May 2026 16:28:03 BST) nuageinit: only parse user_data as yaml when necessary This fixes a regression introduced in cae280931c9e which prevents user_data as a shell script to be used PR: 295062 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295062 ) Reported by: Ross McKelvie MFC After: 1 day (cherry picked from commit c316ec259011e9e22e40eaa72d834f3bfac95c28) M libexec/nuageinit/nuageinit ____________________________________________________________________________________________________________ Commit: 81df9a1045c3e1778c551fcd62125e0b5d2b76f2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=81df9a1045c3e1778c551fcd62125e0b5d2b76f2 Author: Boris Lytochkin (Thu 30 Apr 2026 12:31:34 BST) Committer: Andrey V. Elsukov (Thu 7 May 2026 13:09:41 BST) etcupdate: fix arguments order of diff command Due to misplacement of the second -L argument of diff command, it is treated by getopt_long as an error. Also add -l option for a diff command that alters the way it shows differences. Instead of printing full diff, it reports changed file the same way as added/removed files are reported. Reviewed by: imp Obtained from: Yandex LLC Differential Revision: https://reviews.freebsd.org/D56708 (cherry picked from commit 6d65c91b9a4743bbffc3508bf754e68b65bbd494) M usr.sbin/etcupdate/etcupdate.8 M usr.sbin/etcupdate/etcupdate.sh ____________________________________________________________________________________________________________ Commit: 750f37820d0895dd3d66c3c1d4d5c915fe7d4ccf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=750f37820d0895dd3d66c3c1d4d5c915fe7d4ccf Author: Mateusz Piotrowski <0mp@FreeBSD.org> (Mon 4 May 2026 19:28:36 BST) Committer: Mateusz Piotrowski <0mp@FreeBSD.org> (Thu 7 May 2026 09:35:48 BST) zone.9: Add a missing newline MFC after: 3 days (cherry picked from commit c295f026376035fee1a9e44efa2af30d46b7884a) M share/man/man9/zone.9 ____________________________________________________________________________________________________________ Commit: 5158575d924b911aff759af62de642ed38a7a2b3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5158575d924b911aff759af62de642ed38a7a2b3 Author: Dag-Erling Smørgrav (Sun 3 May 2026 16:35:15 BST) Committer: Dag-Erling Smørgrav (Wed 6 May 2026 06:37:40 BST) lockf: Test that lockf does not spin on fd PR: 294832 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294832 ) MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D56723 (cherry picked from commit 0733afdb4dad58cfe7ad7f5994e26bf148d78199) M usr.bin/lockf/tests/lockf_test.sh ____________________________________________________________________________________________________________ Commit: 4a6c4f0265ac7234cf31a3c4494e3354caf629d3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4a6c4f0265ac7234cf31a3c4494e3354caf629d3 Author: Christian Ullrich (Sun 3 May 2026 16:35:10 BST) Committer: Dag-Erling Smørgrav (Wed 6 May 2026 06:37:39 BST) lockf: Avoid spinning when operating on an fd When operating on a file descriptor, acquire_lock() would ignore the flags argument and always operate in non-blocking mode, resulting in unnecessary busy-looping. PR: 294832 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294832 ) MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D56722 (cherry picked from commit d90513ea85693da0ca5955173609f4e81e38ae16) M usr.bin/lockf/lockf.c ____________________________________________________________________________________________________________ Commit: 9fe189c79a8161380800dcff1d15c4cea7467a7e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9fe189c79a8161380800dcff1d15c4cea7467a7e Author: Kristof Provost (Tue 28 Apr 2026 09:54:24 BST) Committer: Kristof Provost (Tue 5 May 2026 08:34:26 BST) pf: improve ASCONF chunk validation When processing an ASCONF chunk we failed to verify that the chunk length was at least 8 bytes. As a result we might end up passing a negative length to pf_multihome_scan(). Fortunately this merely meant the function did nothing, but we should discard such invalid packets, so explicitly check for this. MFC after: 1 week Reported by: Mark Johnston Sponsored by: Orange Business Services (cherry picked from commit bea1c2fcd7839fd90a8ce96d6dc6a033779bc3c2) M sys/netpfil/pf/pf.c ____________________________________________________________________________________________________________ Commit: 77b8bc06cf73c66ed9a4ebb4d88d072056059ff4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=77b8bc06cf73c66ed9a4ebb4d88d072056059ff4 Author: Zhenlei Huang (Sat 25 Apr 2026 20:56:07 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:43 BST) ifnet: if_detach(): Fix races with vmove operations The rationality is that the driver private data holds a strong reference to the interface, and the detach operation shall never fail. Given the vmove operation, if_vmove_loan(), if_vmove_reclaim() or vnet_if_return() is not atomic and spans multiple steps, acquire ifnet_detach_sxlock only for if_detach_internal() and if_vmove() is not sufficient. It is possible that the thread running if_detach() sees stale vnet, or the vmoving is in progress, then if_unlink_ifnet() will fail. Fix that by extending coverage of ifnet_detach_sxlock a bit to also cover if_unlink_ifnet(), so that the entire detach and vmove operation is serialized. Given it is an error when the if_unlink_ifnet() fails, and if_detach() is a public KPI, prefer panic() over assertion on failure, to indicate explicitly that bad thing happens. That shall also prevent potential corrupted status of the interface, which is a bit hard to diagnose. PR: 292993 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292993 ) Reviewed by: glebius MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D56374 (cherry picked from commit ba7f47d47dc1a177e4d8f115f791ec25f3da0eab) (cherry picked from commit 5c4021ca0abe4e17200f5faa2fd71014ef0a5f09) M sys/net/if.c ____________________________________________________________________________________________________________ Commit: 33da0a256bfc75f72ea789fd71dce0e07515800c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=33da0a256bfc75f72ea789fd71dce0e07515800c Author: Zhenlei Huang (Mon 27 Apr 2026 20:17:22 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:42 BST) tests/netgraph: Add a test for races between if_detach() and vnet_if_return() A ng_eiface(4) or physical interface does not involve the cloner hence the detaching is a bit different with epair(4). Add more tests to cover that. PR: 292993 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292993 ) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56609 (cherry picked from commit 0988abd52352ae0977cd3e5c10316b7d94e1cac8) (cherry picked from commit 3a4c4d61ac2c9f369e55d0ab994c9da78aa4cb74) M tests/sys/netgraph/Makefile A tests/sys/netgraph/eiface_test.sh ____________________________________________________________________________________________________________ Commit: 320805add13ddf8e680d88f5c9b3ae3b6a49f6cf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=320805add13ddf8e680d88f5c9b3ae3b6a49f6cf Author: Zhenlei Huang (Mon 27 Apr 2026 20:17:21 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:42 BST) tests/net/if_clone_test: Add a test for races between if_detach() and if_vmove_reclaim() Ideally we shall have tests for all possible races. It is races between if_detach(), if_vmove_loan(), if_vmove_reclaim() and vnet_if_return(). Well that requires too many tests and it appears to be less valuable to have them all. So focus on potential in future regressions related to recent fixes [1] and [2] only. [1] ee9456ce3753 ifnet: Fix races in if_vmove_reclaim() [2] ba7f47d47dc1 ifnet: if_detach(): Fix races with vmove operations MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56606 (cherry picked from commit f4be16983dea4904f85ac20e921ad2a8c18a0f79) (cherry picked from commit 696d1590697e9d4c0f07ce0a8d76a62bc77bdfd5) M tests/sys/net/if_clone_test.sh ____________________________________________________________________________________________________________ Commit: 9598f7277a1ba4f15e3e2f8ffe7aa6132652cb67 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9598f7277a1ba4f15e3e2f8ffe7aa6132652cb67 Author: Zhenlei Huang (Mon 13 Apr 2026 05:38:44 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:42 BST) if_clone: Make ifnet_detach_sxlock opaque to consumers The change e133271fc1b5e introduced ifnet_detach_sxlock, and change 6d2a10d96fb5 widened its coverage, but there are still consumers, net80211 and tuntap e.g., want it. Instead of sprinkling it everywhere, make it opaque to consumers. Out of tree drivers shall also benefit from this change. Reviewed by: kp MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D56298 (cherry picked from commit e9fc0c538264355bd3fd9120c650078281c2a290) (cherry picked from commit c624e04a0bd0ab147ec64c17e3e53f5ebc769dcf) M sys/net/if.c M sys/net/if_clone.c M sys/netlink/route/iface.c ____________________________________________________________________________________________________________ Commit: 328598079b56bb007d8baa065be603b992b4da6d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=328598079b56bb007d8baa065be603b992b4da6d Author: Zhenlei Huang (Mon 13 Apr 2026 05:38:44 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:41 BST) ifnet: Move SIOCSIFVNET from ifhwioctl() to ifioctl() SIOCSIFVNET is not a hardware ioctl. Move it to where it belongs. Where here, rewrite the logic of checking whether we are moving the interface from and to the same vnet or not, since it is obviously not stable to access the interface's vnet, given the current thread may race with other threads those running if_vmove(). MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D55880 (cherry picked from commit 38bd7ef62f318f791e232e217855307a9d75efa0) (cherry picked from commit 477c3ba3673152e88ec5c50d8f45db24102bdf07) M sys/net/if.c ____________________________________________________________________________________________________________ Commit: e7063f1d8b5db637fdedc6a66abccc0efd76d9c7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e7063f1d8b5db637fdedc6a66abccc0efd76d9c7 Author: Zhenlei Huang (Mon 13 Apr 2026 05:38:43 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:41 BST) ifnet: vnet_if_return(): Avoid unnecessary recursive acquisition of ifnet_detach_sxlock vnet_if_return() will be invocked by vnet_sysuninit() on vnet destructing, while the lock ifnet_detach_sxlock has been acquired in vnet_destroy() already. With this change the order of locking is more clear. There should be no functional change. Reviewed by: pouria Fixes: 868bf82153e8 if: avoid interface destroy race MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56288 (cherry picked from commit f1fae67afbb13a41d488d0e0ec66b1805925019c) (cherry picked from commit ccfc2d91304e88aafc0ca0e13e0f8b5a156d2a01) M sys/net/if.c ____________________________________________________________________________________________________________ Commit: b1dc0bc2cc8658992bed0c0a3148f6a9c67eef8b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b1dc0bc2cc8658992bed0c0a3148f6a9c67eef8b Author: Zhenlei Huang (Tue 7 Apr 2026 05:33:05 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:40 BST) ifnet: Add some sanity checks To be more robust since the checking is now performed where the interface is referenced. While here, remove a redundant check from if_vmove_loan(). Reviewed by: kp, glebius, pouria MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D55875 (cherry picked from commit 00d96da231d007673a1672452748d8ea4f6788ae) (cherry picked from commit 877fa4f2a2d37dcd9e828d12dc9736c5e83ffd8c) M sys/net/if.c ____________________________________________________________________________________________________________ Commit: f7145eff8172cbcaffb36c1d13aae0e438759a7c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f7145eff8172cbcaffb36c1d13aae0e438759a7c Author: Zhenlei Huang (Mon 30 Mar 2026 17:00:01 BST) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:40 BST) ifnet: Fix races in if_vmove_reclaim() The thread running if_vmove_reclaim() may race with other threads those running if_detach(), if_vmove_loan() or if_vmove_reclaim(). In case the current thread loses race, two issues arise, 1. It is unstable and unsafe to access ifp->if_vnet, 2. The interface is removed from "active" list, hence if_unlink_ifnet() can fail. For the first case, check against source prison's vnet instead, given the interface is obtained from that vnet. For the second one, return ENODEV to indicate the interface was on the list but the current thread loses race, to distinguish from ENXIO, which means the interface or child prison is not found. This is the same with if_vmove_loan(). Reviewed by: kp, pouria Fixes: a779388f8bb3 if: Protect V_ifnet in vnet_if_return() MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55997 (cherry picked from commit ee9456ce37539da5b651945eea18502f290eb133) (cherry picked from commit cef2f7b440ffa67271690a6aba532e4c090772db) M sys/net/if.c ____________________________________________________________________________________________________________ Commit: bc73c7f6191211b254f8cc87aab71d5ff853e24d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bc73c7f6191211b254f8cc87aab71d5ff853e24d Author: Zhenlei Huang (Mon 16 Mar 2026 17:03:05 GMT) Committer: Zhenlei Huang (Mon 4 May 2026 17:49:40 BST) ifnet: Remove unreachable code The ioctls SIOCSIFVNET and SIOCSIFRVNET are for userland only. For SIOCSIFVNET, if_vmove_loan(), the interface is obtained from current VNET. For SIOCSIFRVNET, if_vmove_reclaim(), a valid child prison is held before getting the interface. In both cases the VNET of the obtained interfaces is stable, so there's no need to check it. No functional change intended. Reviewed by: glebius, jamie (for #jails) MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D55828 (cherry picked from commit e0731059af912a27d0f842959218946b1daaa7d1) (cherry picked from commit a989b0fbc965b453d97e3d032efb4f9c7592734a) M sys/net/if.c ____________________________________________________________________________________________________________ Commit: fca6c9e8f7474132f30bf836f1c2b8d289bdc14d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fca6c9e8f7474132f30bf836f1c2b8d289bdc14d Author: Philip Paeps (Mon 27 Apr 2026 11:38:10 BST) Committer: Philip Paeps (Mon 4 May 2026 07:00:13 BST) contrib/expat: import expat 2.8.0 Changes: https://github.com/libexpat/libexpat/blob/R_2_8_0/expat/Changes Security: CVE-2026-41080 (cherry picked from commit e3935639d8d8b6556cad18e1c90e419a65f26b40) M contrib/expat/Changes M contrib/expat/README.md M contrib/expat/configure.ac M contrib/expat/doc/reference.html M contrib/expat/doc/xmlwf.1 M contrib/expat/doc/xmlwf.xml M contrib/expat/examples/element_declarations.c M contrib/expat/expat_config.h.in M contrib/expat/lib/Makefile.am M contrib/expat/lib/Makefile.in M contrib/expat/lib/expat.h M contrib/expat/lib/expat_external.h M contrib/expat/lib/internal.h M contrib/expat/lib/libexpat.map.in A contrib/expat/lib/random_arc4random.c R084 contrib/expat/tests/acc_tests_cxx.cpp contrib/expat/lib/random_arc4random.h R081 contrib/expat/tests/runtests_cxx.cpp contrib/expat/lib/random_arc4random_buf.c R083 contrib/expat/tests/alloc_tests_cxx.cpp contrib/expat/lib/random_arc4random_buf.h A contrib/expat/lib/random_dev_urandom.c R082 contrib/expat/tests/chardata_cxx.cpp contrib/expat/lib/random_dev_urandom.h A contrib/expat/lib/random_getentropy.c R083 contrib/expat/tests/basic_tests_cxx.cpp contrib/expat/lib/random_getentropy.h A contrib/expat/lib/random_getrandom.c A contrib/expat/lib/random_getrandom.h A contrib/expat/lib/random_rand_s.c A contrib/expat/lib/random_rand_s.h M contrib/expat/lib/xmlparse.c M contrib/expat/lib/xmlrole.c M contrib/expat/lib/xmltok.c M contrib/expat/lib/xmltok_ns.c M contrib/expat/tests/Makefile.am M contrib/expat/tests/Makefile.in M contrib/expat/tests/basic_tests.c D contrib/expat/tests/common_cxx.cpp D contrib/expat/tests/dummy_cxx.cpp D contrib/expat/tests/handlers_cxx.cpp D contrib/expat/tests/memcheck_cxx.cpp D contrib/expat/tests/minicheck_cxx.cpp M contrib/expat/tests/misc_tests.c D contrib/expat/tests/misc_tests_cxx.cpp D contrib/expat/tests/ns_tests_cxx.cpp M contrib/expat/tests/nsalloc_tests.c D contrib/expat/tests/nsalloc_tests_cxx.cpp D contrib/expat/tests/structdata_cxx.cpp M contrib/expat/xmlwf/xmlfile.c M contrib/expat/xmlwf/xmlwf.c M lib/libexpat/Makefile M lib/libexpat/expat_config.h M lib/libexpat/libbsdxml.3 ____________________________________________________________________________________________________________ Commit: bd065515db4c750ddc1474f14dd86d67e7d63b0a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bd065515db4c750ddc1474f14dd86d67e7d63b0a Author: Michael Osipov (Wed 25 Feb 2026 19:48:34 GMT) Committer: Michael Osipov (Sun 3 May 2026 20:37:15 BST) mfi(4)/mrsas(4): Set sysctl name for driver versions consistently Instead of printing the driver version over and over again if multiple controllers are used, set a sysctl name for the used driver version. Approved by: imp, ziaee MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56110 (cherry picked from commit ea1764e5fcf0fc11680dc104e663ae3d1d0fd7be) M sys/dev/mfi/mfi.c M sys/dev/mrsas/mrsas.c ____________________________________________________________________________________________________________ Commit: e0bf70d5ec12c266e6eaece18bb97994137c2b2a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e0bf70d5ec12c266e6eaece18bb97994137c2b2a Author: Michael Osipov (Sun 21 Dec 2025 17:13:21 GMT) Committer: Michael Osipov (Sun 3 May 2026 20:37:14 BST) mfi(4)/mrsas(4): Print driver versions consistently Reviewed by: ziaee, des MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54519 (cherry picked from commit 93122ead724b3ba0ccdaedadcd371ec53f9a9844) M sys/dev/mfi/mfi.c M sys/dev/mrsas/mrsas.c ____________________________________________________________________________________________________________ Commit: f35e377505110efcc6308567a38894628a16232f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f35e377505110efcc6308567a38894628a16232f Author: Aaron LI (Tue 17 Mar 2026 04:53:49 GMT) Committer: Dag-Erling Smørgrav (Fri 1 May 2026 17:03:12 BST) tail(1): Fix -r (reverse) to work on pseudo filesystems Pseudo filesystems (e.g., procfs) advertise a zero file size. Fix reverse() to handle such a case similarly as forward() so that '-r' works on pseudo filesystems. Signed-off-by: Aaron LI Reviewed by: pouria, Ricardo Branco , des Fixes: 1fb3caee7 ("tail: Do not trust st_size if it equals zero.") Pull-Request: https://github.com/freebsd/freebsd-src/pull/2080 (cherry picked from commit 4feeca3193c316c18472cd40f215446fda3bd739) M usr.bin/tail/reverse.c ____________________________________________________________________________________________________________ Commit: 78a9bd068e1b21554d08b9d2687b357219a151da URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=78a9bd068e1b21554d08b9d2687b357219a151da Author: Ricardo Branco (Thu 6 Feb 2025 21:46:19 GMT) Committer: Dag-Erling Smørgrav (Fri 1 May 2026 16:39:17 BST) linprocfs: Continue on error when reading process limits The process limits may be unavailable due to capsicum. Like other areas of the system, report what we can w/o error. This is what Linux does. PR: 283726 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283726 ) Reviewed by: imp, dchagin Pull Request: https://github.com/freebsd/freebsd-src/pull/1592 (cherry picked from commit ea60d917e5b1943c8638af056dbcdbb3646207f1) M sys/compat/linprocfs/linprocfs.c ____________________________________________________________________________________________________________ Commit: 2f9478ad42c442c49a7eff60227148bf2b90b48c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2f9478ad42c442c49a7eff60227148bf2b90b48c Author: Dag-Erling Smørgrav (Thu 30 Apr 2026 17:45:35 BST) Committer: Dag-Erling Smørgrav (Thu 30 Apr 2026 22:07:05 BST) dhclient: Improve server and filename validation * Don't iterate over each string three times; once is enough. * Reject control characters (anything below space) in addition to the double quote and backslash. * If an unsafe character is encountered, discard the string instead of rejecting the entire lease. * If backslashes are encountered in the file name option, convert them to forward slashes instead of rejecting the option. * Tweak the warning messages a bit. Looking through the rest of the code, it seems to me that notes generally end with a period while warnings generally don't. Fixes: 8008e4b88daf ("dhclient: Check for unexpected characters in some DHCP server options") PR: 294886 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294886 ) MFC after: 1 week Reviewed by: brooks, markj Differential Revision: https://reviews.freebsd.org/D56740 (cherry picked from commit 873a195ba63575e46686cfd6ea9670a0ca340fa0) M sbin/dhclient/dhclient.c ____________________________________________________________________________________________________________ Commit: 69588094a11287d48bea2f9e0ebf1968f35e09c6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=69588094a11287d48bea2f9e0ebf1968f35e09c6 Author: Dag-Erling Smørgrav (Wed 29 Apr 2026 19:41:05 BST) Committer: Dag-Erling Smørgrav (Thu 30 Apr 2026 22:07:05 BST) md5: Encode non-printable filenames Encode filenames in the VIS_CSTYLE | VIS_OCTAL style regardless of output mode. When reading filenames from a checksum file, attempt to decode them, and use the decoded name unless the decoded name does not exist but the undecoded one does. This breaks compatibility with GNU coreutils, which unfortunately uses a non-reversible encoding when outputting filenames containing non-printable characters. While here, drop a sentence about preimage attacks against MD5 and SHA1 from the manual page, as I no longer trust it to be true. MFC after: 1 week Reviewed by: bcr, markj Differential Revision: https://reviews.freebsd.org/D56615 (cherry picked from commit 70fde0ed6bbbb1f84c440190ba1e5435f8c90e13) M sbin/md5/md5.1 M sbin/md5/md5.c ____________________________________________________________________________________________________________ Commit: 9a0e8389269c556cf7ebdeb0cc75681408dd8ab8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9a0e8389269c556cf7ebdeb0cc75681408dd8ab8 Author: Jessica Clarke (Mon 27 Apr 2026 13:53:29 BST) Committer: Jessica Clarke (Thu 30 Apr 2026 18:45:25 BST) arm64: Ditch arm64-specific unsound PCPU optimisation The current arm64 PCPU implementation uses a global register asm variable to use x18, which we reserve with -ffixed-x18, from C. Inside a critical_enter() or sched_pin(), it is vital that any PCPU reads use the right PCPU pointer, as often the whole point of the critical_enter() or sched_pin() is to ensure consistent PCPU use (e.g. for SMR it relies on zpcpu giving the same SMR state). critical_enter() and sched_pin() both include atomic_interrupt_fence(), i.e. asm volatile("" ::: "memory"), barriers to ensure that memory accesses don't get moved by the compiler outside the critical section, which on most architectures will also order the read of the PCPU pointer itself (whether due to the read being another asm volatile statement, or due to using a segment-relative memory access as on x86). However, this approach on arm64 is in no sense a memory access, and therefore the register access is not ordered with respect to the the critical_enter() or sched_pin(), or more specifically the curthread->td_critnest++ / curthread->td_pinned++ within. In practice upstream today this works out ok because the read of x18 is inlined into the actual PCPU_GET/ADD/SET memory accesses (i.e. you will get something like ldr xN, [x18, #imm-or-xM] for PCPU_GET, etc.), and since *that* instruction is ordered properly due to being a memory access, the x18 ends up being read in the right place. However, that is not in any way guaranteed, it just relies on the hope that compiler optimisations will be perfect at inlining the use. Moreover, PCPU_PTR is definitely not a memory access in this world, it's just pointer arithmetic on x18, and so that has nothing ordering it. This can be observed with the following test function compiled into the kernel: void pcpu_test(void) { extern void __weak_symbol use_pcpu_ptr(void *); critical_enter(); use_pcpu_ptr(PCPU_PTR(curthread)); critical_exit(); } Obviously, this is a bit contrived as you could just read curthread directly via its atomic definition that bypasses any worries about PCPU atomicity, but it illustrates the point. With the in-tree LLVM*, this ends up being compiled for me to: paciasp stp x29, x30, [sp, #-0x10]! mov x29, sp ldr x8, [x18] ldr w9, [x8, #0x4fc] mov x0, x18 add w9, w9, #0x1 str w9, [x8, #0x4fc] bl use_pcpu_ptr ... Note that, although the PCPU_PTR was within the critical section in the C source, the read of x18 into x0, the argument register passed to use_pcpu_ptr, has been hoisted to before the str, which is storing the new, incremented, value of td_critnest to curthread, and so there is a window within which we have to hope the thread is not preempted and migrated to a different CPU, otherwise it will pass a pointer to the wrong CPU's pc_curthread PCPU member. Initially it would seem as though the solution to this would be to add an additional barrier to critical_enter() / sched_pin() to ensure the register reads could not be hoisted like this. However, I have not been able to find a sequence that works reliably across both GCC and Clang, independent of optimisation level. Using inline asm with x18 marked as a clobber, using "=r"(pcpup), and using "+r"(pcpup) all run into various issues; some combinations don't actually seem to be a barrier, and for Clang at -O0 some combinations will actually generate writes to x18**, at which point you then have to hope that the kernel is compiled with optimisations, and that the redundant writes are optimised away such that x18 is just passed through. But that just gets us back to hoping optimisation works, which isn't a solution to the problem, it just trades one point of fragility for another. In talking to GCC developers, who seemed rather horrified by the implications of trying to do this (which is effectively "register volatile", a combination that's explicitly forbidden), we could not find a solution to this, and so I have concluded that the only reliable to have a sound PCPU implementation is to ditch this optimisation and follow other non-x86 architectures in using inline asm in one form or another; specifically, this adopts riscv's approach of just calling get_pcpu(), which, curiously, was already implemented in inline asm here on arm64, rather than reading pcpup. Anyone who feels strongly enough about PCPU performance is welcome to try to find a working approach, but such proposals should be heavily scrutinised to be certain that they won't come back to bite us in future. In particular, this caused a lot of problems downstream in CheriBSD's experimental compartmentalised kernel, which is trialling interposing on PCPU accesses in order to restrict access within compartments. As a result, even PCPU_GET/SET/ADD can look like PCPU_PTR, as they pass an opaque PCPU reference to wrapper functions, and so this case gets hit all over the kernel, giving highly-confusing panics with locks that aren't owned by the current thread or SMR use allegedly not within an smr_enter(). The ia64 port encountered the same issue and reached the same conclusion in e31ece45b7a4 ("Fix the PCPU access macros."), though went to the trouble of trying to fold the offset into the inline assembly (assuming it fit, with no fallback if not, since it's using the add pseudo-op that will be expanded to either adds with a 14-bit immediate or, if somehow that doesn't fit, addl with a 22-bit immediate). Curiously though it left pcpup around as a footgun. sparc64 had similar code but was never fixed. It also defined a curpcb in the same manner which was presumably similarly broken, but looks to have been entirely unreferenced from C, only referenced in actual assembly files. Alpha also had the same design, but it was removed whilst critical_enter() was extern rather than static inline so uses of the pointer could not have been hoisted, and whilst sched_pin() didn't have any form of atomic_interrupt_fence() to even try to make PCPU well-ordered. * At time of writing, when that was LLVM 19, not verified at time of commit with LLVM 21. ** For "+r"(pcpup), Clang's initial code generation is to do: mov xTtmp1, x18 mov x18, xTmp1 /* asm (empty) */ mov xTmp2, x18 mov x18, xTmp2 since its interpretation of what that means is "read the value of pcpup, and make sure that value is in x18 for the duration of the assembly due to the asm("x18") on pcpup", and similarly for the output side. Reviewed by: andrew, jhb MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56601 (cherry picked from commit 551d47c5677a5eaf0a1ed2ea3b2b1406b192764d) M sys/arm64/include/pcpu.h ____________________________________________________________________________________________________________ Commit: 8eb9eaa37945b03af9acbb64ad304cea4d0cc936 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8eb9eaa37945b03af9acbb64ad304cea4d0cc936 Author: Jessica Clarke (Fri 17 Apr 2026 15:20:12 BST) Committer: Jessica Clarke (Thu 30 Apr 2026 18:44:58 BST) loader.efi: Defer efi_translate(e_entry) until after bi_load bi_load itself loads various things into the staging area which can cause it to grow, which may result in the staging area moving, including the kernel. Therefore the address we get for the kernel entry point prior to bi_load may not be correct afterwards when we actually call it, and so we must defer the translation. On arm and riscv (but not arm64, which predates both of them in loader.efi and did not gain a copy of arm's added printf when arm support was added) we also printf this entry point to the console, which we can no longer do since bi_load calls ExitBootServices, so remove this printf that, in practice, seems to not be so useful, given nobody ever felt the need to add it to arm64. If anyone really feels this is an important printf to have then bi_load will need to be split so we can call printf after all the loading and potential reallocation of the staging area, but before ExitBootServices is called. We may also want to make this code more uniform and shared between the three architectures here, since there isn't much architecture-specific about this (and something like the RISC-V boot hart protocol could easily be made an MD hook). Reviewed by: imp Fixes: 0cafabf97fae ("Add support for arm64 to loader.efi and boot1.efi") Fixes: ea7796a9ae6b ("EFI: don't call printf after ExitBootServices, since it uses Boot Services") Fixes: 2192efc03bc4 ("RISC-V boot1.efi and loader.efi support") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56431 (cherry picked from commit ab1d659e78e454995b7c2b4566e035269b215e48) M stand/efi/loader/arch/arm/exec.c M stand/efi/loader/arch/arm64/exec.c M stand/efi/loader/arch/riscv/exec.c ____________________________________________________________________________________________________________ Commit: 09bb6a62d00f041079453f5e17a7387e3c0f3503 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=09bb6a62d00f041079453f5e17a7387e3c0f3503 Author: Dag-Erling Smørgrav (Mon 27 Apr 2026 10:32:51 BST) Committer: Dag-Erling Smørgrav (Thu 30 Apr 2026 16:03:10 BST) caroot: Regenerate Regenerate using certificate data from NSS 3.123.1. MFC after: 1 week Reviewed by: kevans (cherry picked from commit 07b52233e8b74c5ac884b9c9a894f57fad8dbd00) M ObsoleteFiles.inc M secure/caroot/Makefile D secure/caroot/trusted/AffirmTrust_Commercial.pem D secure/caroot/trusted/AffirmTrust_Networking.pem D secure/caroot/trusted/AffirmTrust_Premium.pem D secure/caroot/trusted/AffirmTrust_Premium_ECC.pem D secure/caroot/trusted/Baltimore_CyberTrust_Root.pem D secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-01.pem D secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-02.pem D secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-01.pem D secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-02.pem D secure/caroot/trusted/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem D secure/caroot/trusted/GLOBALTRUST_2020.pem A secure/caroot/trusted/OISTE_Server_Root_ECC_G1.pem A secure/caroot/trusted/OISTE_Server_Root_RSA_G1.pem D secure/caroot/trusted/SecureTrust_CA.pem D secure/caroot/trusted/Secure_Global_CA.pem A secure/caroot/trusted/SwissSign_RSA_TLS_Root_CA_2022_-_1.pem D secure/caroot/trusted/TeliaSonera_Root_CA_v1.pem A secure/caroot/trusted/TrustAsia_TLS_ECC_Root_CA.pem A secure/caroot/trusted/TrustAsia_TLS_RSA_Root_CA.pem D secure/caroot/trusted/Trustwave_Global_Certification_Authority.pem D secure/caroot/trusted/Trustwave_Global_ECC_P256_Certification_Authority.pem D secure/caroot/trusted/Trustwave_Global_ECC_P384_Certification_Authority.pem D secure/caroot/trusted/XRamp_Global_CA_Root.pem D secure/caroot/trusted/certSIGN_ROOT_CA.pem A secure/caroot/trusted/e-Szigno_TLS_Root_CA_2023.pem A secure/caroot/untrusted/Atos_TrustedRoot_Root_CA_ECC_G2_2020.pem A secure/caroot/untrusted/Atos_TrustedRoot_Root_CA_RSA_G2_2020.pem R100 secure/caroot/trusted/COMODO_Certification_Authority.pem secure/caroot/untrusted/COMODO_Certification_Authority.pem D secure/caroot/untrusted/Camerfirma_Chambers_of_Commerce_Root.pem D secure/caroot/untrusted/Camerfirma_Global_Chambersign_Root.pem R100 secure/caroot/trusted/Certigna.pem secure/caroot/untrusted/Certigna.pem D secure/caroot/untrusted/Chambers_of_Commerce_Root_-_2008.pem R100 secure/caroot/trusted/Comodo_AAA_Services_root.pem secure/caroot/untrusted/Comodo_AAA_Services_root.pem A secure/caroot/untrusted/D-Trust_SBR_Root_CA_1_2022.pem A secure/caroot/untrusted/D-Trust_SBR_Root_CA_2_2022.pem A secure/caroot/untrusted/DIGITALSIGN_GLOBAL_ROOT_ECDSA_CA.pem A secure/caroot/untrusted/DIGITALSIGN_GLOBAL_ROOT_RSA_CA.pem R100 secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem secure/caroot/untrusted/DigiCert_Assured_ID_Root_CA.pem R100 secure/caroot/trusted/DigiCert_Global_Root_CA.pem secure/caroot/untrusted/DigiCert_Global_Root_CA.pem R100 secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem secure/caroot/untrusted/DigiCert_High_Assurance_EV_Root_CA.pem A secure/caroot/untrusted/DigiCert_SMIME_ECC_P384_Root_G5.pem A secure/caroot/untrusted/DigiCert_SMIME_RSA4096_Root_G5.pem D secure/caroot/untrusted/E-Tugra_Global_Root_CA_ECC_v3.pem D secure/caroot/untrusted/E-Tugra_Global_Root_CA_RSA_v3.pem D secure/caroot/untrusted/EC-ACC.pem D secure/caroot/untrusted/EE_Certification_Centre_Root_CA.pem R100 secure/caroot/trusted/Entrust_Root_Certification_Authority.pem secure/caroot/untrusted/Entrust_Root_Certification_Authority.pem R100 secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem secure/caroot/untrusted/Entrust_Root_Certification_Authority_-_EC1.pem R100 secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem secure/caroot/untrusted/Entrust_Root_Certification_Authority_-_G2.pem R100 secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem secure/caroot/untrusted/Entrust_net_Premium_2048_Secure_Server_CA.pem R100 secure/caroot/trusted/GTS_Root_R2.pem secure/caroot/untrusted/GTS_Root_R2.pem D secure/caroot/untrusted/GeoTrust_Primary_Certification_Authority.pem D secure/caroot/untrusted/GeoTrust_Primary_Certification_Authority_-_G2.pem D secure/caroot/untrusted/GeoTrust_Primary_Certification_Authority_-_G3.pem D secure/caroot/untrusted/GeoTrust_Universal_CA.pem D secure/caroot/untrusted/GeoTrust_Universal_CA_2.pem R100 secure/caroot/trusted/GlobalSign_Root_CA.pem secure/caroot/untrusted/GlobalSign_Root_CA.pem A secure/caroot/untrusted/GlobalSign_Secure_Mail_Root_E45.pem A secure/caroot/untrusted/GlobalSign_Secure_Mail_Root_R45.pem D secure/caroot/untrusted/Global_Chambersign_Root_-_2008.pem R100 secure/caroot/trusted/Go_Daddy_Class_2_CA.pem secure/caroot/untrusted/Go_Daddy_Class_2_CA.pem A secure/caroot/untrusted/HARICA_Client_ECC_Root_CA_2021.pem A secure/caroot/untrusted/HARICA_Client_RSA_Root_CA_2021.pem D secure/caroot/untrusted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem A secure/caroot/untrusted/LAWtrust_Root_CA2__4096_.pem D secure/caroot/untrusted/LuxTrust_Global_Root_2.pem D secure/caroot/untrusted/Network_Solutions_Certificate_Authority.pem A secure/caroot/untrusted/OISTE_Client_Root_ECC_G1.pem A secure/caroot/untrusted/OISTE_Client_Root_RSA_G1.pem R100 secure/caroot/trusted/QuoVadis_Root_CA_2.pem secure/caroot/untrusted/QuoVadis_Root_CA_2.pem R100 secure/caroot/trusted/QuoVadis_Root_CA_3.pem secure/caroot/untrusted/QuoVadis_Root_CA_3.pem A secure/caroot/untrusted/SSL_com_Client_ECC_Root_CA_2022.pem A secure/caroot/untrusted/SSL_com_Client_RSA_Root_CA_2022.pem A secure/caroot/untrusted/Sectigo_Public_Email_Protection_Root_E46.pem A secure/caroot/untrusted/Sectigo_Public_Email_Protection_Root_R46.pem D secure/caroot/untrusted/SecureSign_RootCA11.pem D secure/caroot/untrusted/Security_Communication_RootCA3.pem R100 secure/caroot/trusted/Starfield_Class_2_CA.pem secure/caroot/untrusted/Starfield_Class_2_CA.pem R100 secure/caroot/trusted/SwissSign_Gold_CA_-_G2.pem secure/caroot/untrusted/SwissSign_Gold_CA_-_G2.pem D secure/caroot/untrusted/SwissSign_Platinum_CA_-_G2.pem A secure/caroot/untrusted/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem D secure/caroot/untrusted/SwissSign_Silver_CA_-_G2.pem D secure/caroot/untrusted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G4.pem D secure/caroot/untrusted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem D secure/caroot/untrusted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G4.pem D secure/caroot/untrusted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem A secure/caroot/untrusted/TWCA_Global_Root_CA_G2.pem D secure/caroot/untrusted/Taiwan_GRCA.pem A secure/caroot/untrusted/Telekom_Security_SMIME_ECC_Root_2021.pem A secure/caroot/untrusted/Telekom_Security_SMIME_RSA_Root_2023.pem A secure/caroot/untrusted/TrustAsia_SMIME_ECC_Root_CA.pem A secure/caroot/untrusted/TrustAsia_SMIME_RSA_Root_CA.pem D secure/caroot/untrusted/TrustCor_ECA-1.pem D secure/caroot/untrusted/TrustCor_RootCert_CA-1.pem D secure/caroot/untrusted/TrustCor_RootCert_CA-2.pem D secure/caroot/untrusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem D secure/caroot/untrusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem D secure/caroot/untrusted/VeriSign_Universal_Root_Certification_Authority.pem D secure/caroot/untrusted/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem D secure/caroot/untrusted/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem D secure/caroot/untrusted/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem D secure/caroot/untrusted/thawte_Primary_Root_CA.pem D secure/caroot/untrusted/thawte_Primary_Root_CA_-_G2.pem D secure/caroot/untrusted/thawte_Primary_Root_CA_-_G3.pem ____________________________________________________________________________________________________________ Commit: 7e064a35a7c32988618387d7ad73db7e51b834b4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7e064a35a7c32988618387d7ad73db7e51b834b4 Author: Dag-Erling Smørgrav (Mon 27 Apr 2026 10:32:19 BST) Committer: Dag-Erling Smørgrav (Thu 30 Apr 2026 16:03:10 BST) caroot: Clean up * Get certdata.txt directly from the NSS Mercurial repository, rather than from the Mozilla Firefox repository which imports it from NSS at irregular intervals. * Instead of always fetching the latest certdata.txt, fetch a specific version. For this commit, we set this to the version that was last imported in May 2025. * Add a refrence to the MPL to the generated files. * Regenerate with latest OpenSSL. This is purely cosmetic; mostly, the certificate names now contain less unnecessary whitespace and some elements are quoted. MFC after: 1 week Reviewed by: michaelo, kevans Differential Revision: https://reviews.freebsd.org/D56620 (cherry picked from commit ce33d6396aadb0613f1e74661bdbec571f836a60) M secure/caroot/Makefile M secure/caroot/ca-extract.pl M secure/caroot/trusted/ACCVRAIZ1.pem M secure/caroot/trusted/AC_RAIZ_FNMT-RCM.pem M secure/caroot/trusted/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem M secure/caroot/trusted/ANF_Secure_Server_Root_CA.pem M secure/caroot/trusted/Actalis_Authentication_Root_CA.pem M secure/caroot/trusted/AffirmTrust_Commercial.pem M secure/caroot/trusted/AffirmTrust_Networking.pem M secure/caroot/trusted/AffirmTrust_Premium.pem M secure/caroot/trusted/AffirmTrust_Premium_ECC.pem M secure/caroot/trusted/Amazon_Root_CA_1.pem M secure/caroot/trusted/Amazon_Root_CA_2.pem M secure/caroot/trusted/Amazon_Root_CA_3.pem M secure/caroot/trusted/Amazon_Root_CA_4.pem M secure/caroot/trusted/Atos_TrustedRoot_2011.pem M secure/caroot/trusted/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem M secure/caroot/trusted/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem M secure/caroot/trusted/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem M secure/caroot/trusted/BJCA_Global_Root_CA1.pem M secure/caroot/trusted/BJCA_Global_Root_CA2.pem M secure/caroot/trusted/Baltimore_CyberTrust_Root.pem M secure/caroot/trusted/Buypass_Class_2_Root_CA.pem M secure/caroot/trusted/Buypass_Class_3_Root_CA.pem M secure/caroot/trusted/CA_Disig_Root_R2.pem M secure/caroot/trusted/CFCA_EV_ROOT.pem M secure/caroot/trusted/COMODO_Certification_Authority.pem M secure/caroot/trusted/COMODO_ECC_Certification_Authority.pem M secure/caroot/trusted/COMODO_RSA_Certification_Authority.pem M secure/caroot/trusted/Certainly_Root_E1.pem M secure/caroot/trusted/Certainly_Root_R1.pem M secure/caroot/trusted/Certigna.pem M secure/caroot/trusted/Certigna_Root_CA.pem M secure/caroot/trusted/Certum_EC-384_CA.pem M secure/caroot/trusted/Certum_Trusted_Network_CA.pem M secure/caroot/trusted/Certum_Trusted_Network_CA_2.pem M secure/caroot/trusted/Certum_Trusted_Root_CA.pem M secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-01.pem M secure/caroot/trusted/CommScope_Public_Trust_ECC_Root-02.pem M secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-01.pem M secure/caroot/trusted/CommScope_Public_Trust_RSA_Root-02.pem M secure/caroot/trusted/Comodo_AAA_Services_root.pem M secure/caroot/trusted/D-TRUST_BR_Root_CA_1_2020.pem M secure/caroot/trusted/D-TRUST_BR_Root_CA_2_2023.pem M secure/caroot/trusted/D-TRUST_EV_Root_CA_1_2020.pem M secure/caroot/trusted/D-TRUST_EV_Root_CA_2_2023.pem M secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_2009.pem M secure/caroot/trusted/D-TRUST_Root_Class_3_CA_2_EV_2009.pem M secure/caroot/trusted/DigiCert_Assured_ID_Root_CA.pem M secure/caroot/trusted/DigiCert_Assured_ID_Root_G2.pem M secure/caroot/trusted/DigiCert_Assured_ID_Root_G3.pem M secure/caroot/trusted/DigiCert_Global_Root_CA.pem M secure/caroot/trusted/DigiCert_Global_Root_G2.pem M secure/caroot/trusted/DigiCert_Global_Root_G3.pem M secure/caroot/trusted/DigiCert_High_Assurance_EV_Root_CA.pem M secure/caroot/trusted/DigiCert_TLS_ECC_P384_Root_G5.pem M secure/caroot/trusted/DigiCert_TLS_RSA4096_Root_G5.pem M secure/caroot/trusted/DigiCert_Trusted_Root_G4.pem M secure/caroot/trusted/Entrust_Root_Certification_Authority.pem M secure/caroot/trusted/Entrust_Root_Certification_Authority_-_EC1.pem M secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G2.pem M secure/caroot/trusted/Entrust_net_Premium_2048_Secure_Server_CA.pem M secure/caroot/trusted/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem M secure/caroot/trusted/GDCA_TrustAUTH_R5_ROOT.pem M secure/caroot/trusted/GLOBALTRUST_2020.pem M secure/caroot/trusted/GTS_Root_R1.pem M secure/caroot/trusted/GTS_Root_R2.pem M secure/caroot/trusted/GTS_Root_R3.pem M secure/caroot/trusted/GTS_Root_R4.pem M secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R4.pem M secure/caroot/trusted/GlobalSign_ECC_Root_CA_-_R5.pem M secure/caroot/trusted/GlobalSign_Root_CA.pem M secure/caroot/trusted/GlobalSign_Root_CA_-_R3.pem M secure/caroot/trusted/GlobalSign_Root_CA_-_R6.pem M secure/caroot/trusted/GlobalSign_Root_E46.pem M secure/caroot/trusted/GlobalSign_Root_R46.pem M secure/caroot/trusted/Go_Daddy_Class_2_CA.pem M secure/caroot/trusted/Go_Daddy_Root_Certificate_Authority_-_G2.pem M secure/caroot/trusted/HARICA_TLS_ECC_Root_CA_2021.pem M secure/caroot/trusted/HARICA_TLS_RSA_Root_CA_2021.pem M secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem M secure/caroot/trusted/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem M secure/caroot/trusted/HiPKI_Root_CA_-_G1.pem M secure/caroot/trusted/Hongkong_Post_Root_CA_3.pem M secure/caroot/trusted/ISRG_Root_X1.pem M secure/caroot/trusted/ISRG_Root_X2.pem M secure/caroot/trusted/IdenTrust_Commercial_Root_CA_1.pem M secure/caroot/trusted/IdenTrust_Public_Sector_Root_CA_1.pem M secure/caroot/trusted/Izenpe_com.pem M secure/caroot/trusted/Microsec_e-Szigno_Root_CA_2009.pem M secure/caroot/trusted/Microsoft_ECC_Root_Certificate_Authority_2017.pem M secure/caroot/trusted/Microsoft_RSA_Root_Certificate_Authority_2017.pem M secure/caroot/trusted/NAVER_Global_Root_Certification_Authority.pem M secure/caroot/trusted/NetLock_Arany__Class_Gold__F__tan__s__tv__ny.pem M secure/caroot/trusted/OISTE_WISeKey_Global_Root_GB_CA.pem M secure/caroot/trusted/OISTE_WISeKey_Global_Root_GC_CA.pem M secure/caroot/trusted/QuoVadis_Root_CA_1_G3.pem M secure/caroot/trusted/QuoVadis_Root_CA_2.pem M secure/caroot/trusted/QuoVadis_Root_CA_2_G3.pem M secure/caroot/trusted/QuoVadis_Root_CA_3.pem M secure/caroot/trusted/QuoVadis_Root_CA_3_G3.pem M secure/caroot/trusted/SSL_com_EV_Root_Certification_Authority_ECC.pem M secure/caroot/trusted/SSL_com_EV_Root_Certification_Authority_RSA_R2.pem M secure/caroot/trusted/SSL_com_Root_Certification_Authority_ECC.pem M secure/caroot/trusted/SSL_com_Root_Certification_Authority_RSA.pem M secure/caroot/trusted/SSL_com_TLS_ECC_Root_CA_2022.pem M secure/caroot/trusted/SSL_com_TLS_RSA_Root_CA_2022.pem M secure/caroot/trusted/SZAFIR_ROOT_CA2.pem M secure/caroot/trusted/Sectigo_Public_Server_Authentication_Root_E46.pem M secure/caroot/trusted/Sectigo_Public_Server_Authentication_Root_R46.pem M secure/caroot/trusted/SecureSign_Root_CA12.pem M secure/caroot/trusted/SecureSign_Root_CA14.pem M secure/caroot/trusted/SecureSign_Root_CA15.pem M secure/caroot/trusted/SecureTrust_CA.pem M secure/caroot/trusted/Secure_Global_CA.pem M secure/caroot/trusted/Security_Communication_ECC_RootCA1.pem M secure/caroot/trusted/Security_Communication_RootCA2.pem M secure/caroot/trusted/Starfield_Class_2_CA.pem M secure/caroot/trusted/Starfield_Root_Certificate_Authority_-_G2.pem M secure/caroot/trusted/Starfield_Services_Root_Certificate_Authority_-_G2.pem M secure/caroot/trusted/SwissSign_Gold_CA_-_G2.pem M secure/caroot/trusted/T-TeleSec_GlobalRoot_Class_2.pem M secure/caroot/trusted/T-TeleSec_GlobalRoot_Class_3.pem M secure/caroot/trusted/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem M secure/caroot/trusted/TWCA_CYBER_Root_CA.pem M secure/caroot/trusted/TWCA_Global_Root_CA.pem M secure/caroot/trusted/TWCA_Root_Certification_Authority.pem M secure/caroot/trusted/Telekom_Security_TLS_ECC_Root_2020.pem M secure/caroot/trusted/Telekom_Security_TLS_RSA_Root_2023.pem M secure/caroot/trusted/TeliaSonera_Root_CA_v1.pem M secure/caroot/trusted/Telia_Root_CA_v2.pem M secure/caroot/trusted/TrustAsia_Global_Root_CA_G3.pem M secure/caroot/trusted/TrustAsia_Global_Root_CA_G4.pem M secure/caroot/trusted/Trustwave_Global_Certification_Authority.pem M secure/caroot/trusted/Trustwave_Global_ECC_P256_Certification_Authority.pem M secure/caroot/trusted/Trustwave_Global_ECC_P384_Certification_Authority.pem M secure/caroot/trusted/TunTrust_Root_CA.pem M secure/caroot/trusted/UCA_Extended_Validation_Root.pem M secure/caroot/trusted/UCA_Global_G2_Root.pem M secure/caroot/trusted/USERTrust_ECC_Certification_Authority.pem M secure/caroot/trusted/USERTrust_RSA_Certification_Authority.pem M secure/caroot/trusted/XRamp_Global_CA_Root.pem M secure/caroot/trusted/certSIGN_ROOT_CA.pem M secure/caroot/trusted/certSIGN_Root_CA_G2.pem M secure/caroot/trusted/e-Szigno_Root_CA_2017.pem M secure/caroot/trusted/ePKI_Root_Certification_Authority.pem M secure/caroot/trusted/emSign_ECC_Root_CA_-_C3.pem M secure/caroot/trusted/emSign_ECC_Root_CA_-_G3.pem M secure/caroot/trusted/emSign_Root_CA_-_C1.pem M secure/caroot/trusted/emSign_Root_CA_-_G1.pem M secure/caroot/trusted/vTrus_ECC_Root_CA.pem M secure/caroot/trusted/vTrus_Root_CA.pem M secure/caroot/untrusted/Camerfirma_Chambers_of_Commerce_Root.pem M secure/caroot/untrusted/Camerfirma_Global_Chambersign_Root.pem M secure/caroot/untrusted/Certum_Root_CA.pem M secure/caroot/untrusted/Chambers_of_Commerce_Root_-_2008.pem M secure/caroot/untrusted/D-TRUST_Root_CA_3_2013.pem M secure/caroot/untrusted/E-Tugra_Global_Root_CA_ECC_v3.pem M secure/caroot/untrusted/E-Tugra_Global_Root_CA_RSA_v3.pem M secure/caroot/untrusted/EC-ACC.pem M secure/caroot/untrusted/EE_Certification_Centre_Root_CA.pem M secure/caroot/untrusted/Entrust_Root_Certification_Authority_-_G4.pem M secure/caroot/untrusted/GeoTrust_Primary_Certification_Authority.pem M secure/caroot/untrusted/GeoTrust_Primary_Certification_Authority_-_G2.pem M secure/caroot/untrusted/GeoTrust_Primary_Certification_Authority_-_G3.pem M secure/caroot/untrusted/GeoTrust_Universal_CA.pem M secure/caroot/untrusted/GeoTrust_Universal_CA_2.pem M secure/caroot/untrusted/Global_Chambersign_Root_-_2008.pem M secure/caroot/untrusted/Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem M secure/caroot/untrusted/LuxTrust_Global_Root_2.pem M secure/caroot/untrusted/Network_Solutions_Certificate_Authority.pem M secure/caroot/untrusted/OISTE_WISeKey_Global_Root_GA_CA.pem M secure/caroot/untrusted/SecureSign_RootCA11.pem M secure/caroot/untrusted/Security_Communication_RootCA3.pem M secure/caroot/untrusted/Staat_der_Nederlanden_Root_CA_-_G3.pem M secure/caroot/untrusted/SwissSign_Platinum_CA_-_G2.pem M secure/caroot/untrusted/SwissSign_Silver_CA_-_G2.pem M secure/caroot/untrusted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G4.pem M secure/caroot/untrusted/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem M secure/caroot/untrusted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G4.pem M secure/caroot/untrusted/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem M secure/caroot/untrusted/Taiwan_GRCA.pem M secure/caroot/untrusted/TrustCor_ECA-1.pem M secure/caroot/untrusted/TrustCor_RootCert_CA-1.pem M secure/caroot/untrusted/TrustCor_RootCert_CA-2.pem M secure/caroot/untrusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem M secure/caroot/untrusted/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem M secure/caroot/untrusted/VeriSign_Universal_Root_Certification_Authority.pem M secure/caroot/untrusted/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem M secure/caroot/untrusted/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem M secure/caroot/untrusted/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem M secure/caroot/untrusted/thawte_Primary_Root_CA.pem M secure/caroot/untrusted/thawte_Primary_Root_CA_-_G2.pem M secure/caroot/untrusted/thawte_Primary_Root_CA_-_G3.pem ____________________________________________________________________________________________________________ Commit: dbf17ec890795af131fd9274d38a94be74b7f092 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dbf17ec890795af131fd9274d38a94be74b7f092 Author: Dag-Erling Smørgrav (Mon 25 Aug 2025 22:41:52 BST) Committer: Dag-Erling Smørgrav (Thu 30 Apr 2026 16:03:09 BST) caroot: Rename script and normalize license MFC after: 1 week Reviewed by: mandree, markj Differential Revision: https://reviews.freebsd.org/D51775 (cherry picked from commit 0886019bf853bd30b70aa4b8cdb059830ca6aaad) M secure/caroot/Makefile R076 secure/caroot/MAca-bundle.pl secure/caroot/ca-extract.pl ____________________________________________________________________________________________________________ Commit: ca80ae39e8c64a10a7f42a9b127d7472418c60b3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ca80ae39e8c64a10a7f42a9b127d7472418c60b3 Author: Dag-Erling Smørgrav (Mon 25 Aug 2025 22:41:36 BST) Committer: Dag-Erling Smørgrav (Thu 30 Apr 2026 16:03:09 BST) caroot: Generate both trusted and untrusted Until now, the untrusted directory has been maintained manually. Modify the script used to maintain the trusted directory so it can handle both. While here, clean it up a bit. MFC after: 1 week Reviewed by: mandree, markj Differential Revision: https://reviews.freebsd.org/D51774 (cherry picked from commit b88b0bb784c7fdcfb8174806e822c1f8983c223f) M secure/caroot/MAca-bundle.pl M secure/caroot/Makefile M secure/caroot/trusted/Makefile M secure/caroot/untrusted/Makefile ____________________________________________________________________________________________________________ Commit: af4d6e77f96b3fd9bd6b04ebb8e46128dd83f304 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=af4d6e77f96b3fd9bd6b04ebb8e46128dd83f304 Author: Dag-Erling Smørgrav (Fri 24 Apr 2026 21:07:20 BST) Committer: Dag-Erling Smørgrav (Thu 30 Apr 2026 16:03:08 BST) tzcode: Update to 2026b MFC after: 1 week (cherry picked from commit 76f642310d55b1d3892c1b1626c427d12f97de3a) M contrib/tzcode/NEWS M contrib/tzcode/tz-art.html M contrib/tzcode/tz-link.html M contrib/tzcode/version M contrib/tzcode/zic.c ____________________________________________________________________________________________________________ Commit: 487eeda542a774ba9237d8bda58c9fcb99b2afba URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=487eeda542a774ba9237d8bda58c9fcb99b2afba Author: John W (Mon 28 Jul 2025 06:17:32 BST) Committer: Michael Osipov (Thu 30 Apr 2026 08:52:30 BST) ahci(4): Add another device ID for Marvell 9128 SATA controller: 0x91a3 This was encountered on a Gigabyte GA-P55A-UD4 motherboard identifying itself as: ahci0@pci0:2:0:0: class=0x01018f rev=0x11 hdr=0x00 vendor=0x1b4b device=0x91a3 subvendor=0x1458 subdevice=0xb000 vendor = 'Marvell Technology Group Ltd.' class = mass storage subclass = ATA The physical chip has "88SE9128-NAA2" printed on it. Similar code has been in Linux for a long time: https://github.com/torvalds/linux/commit/50be5e3657cd2851a297dc0b3fd459f25829d29b Co-authored-by: Michael Osipov PR: 288526 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288526 ) Reviewed by: jhb MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56464 (cherry picked from commit c72edc2b2eb283450df8db05cf9321aee7de0bcb) M sys/dev/ahci/ahci_pci.c ____________________________________________________________________________________________________________ Commit: dcf54a11a0efeb340528fd9dc58d01c7a0b867c1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dcf54a11a0efeb340528fd9dc58d01c7a0b867c1 Author: Zhenlei Huang (Mon 20 Apr 2026 17:59:59 BST) Committer: Zhenlei Huang (Thu 30 Apr 2026 06:10:38 BST) geom_part: Restore the human readable format of size Prior to the change 4f809ffec69c, the sizes are formated by humanize_number(3) with the flag HN_DECIMAL, which displays the result using one decimal place when it is less than 10. That is more accurate and useful. Add equivalent field modifier hn-decimal to xo_emit() to restore the previous behavior. Reported by: Mark Millard Reviewed by: js Fixes: 4f809ffec69c gpart: add libxo support for "show" subcommand + man page updates MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56514 (cherry picked from commit 0d16792c6e983005581ed0176ed81e7302582196) (cherry picked from commit d2bf940ec1447ca69ed605395455d07facf4d3ca) M lib/geom/part/geom_part.c ____________________________________________________________________________________________________________ Commit: 6403ef5d2708e8889309c99e33bbd2f296e49990 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6403ef5d2708e8889309c99e33bbd2f296e49990 Author: Jamie Landeg-Jones (Sat 7 Mar 2026 01:18:20 GMT) Committer: Zhenlei Huang (Thu 30 Apr 2026 06:10:38 BST) /bin/ps: Fix display of negative nice values on ARMv7/aarch64 On Arm-based systems (and maybe others), 'char' defaults to unsigned, causing negative nice values to be displayed incorrectly (e.g., 246 instead of -10). Explicitly using 'signed char' ensures consistent behaviour across architectures. [ tested on RPI2 and generic aarch64 qemu install ] Before: # /usr/bin/nice --10 ps -l | awk '(NR == 1 || $(NF-1) == "ps")' UID PID PPID C PRI NI VSZ RSS MWCHAN STAT TT TIME COMMAND 0 23606 22800 2 -32 246 5400 2544 - R<+ 0 0:00.06 ps -l After: # /usr/bin/nice --10 ps -l | awk '(NR == 1 || $(NF-1) == "ps")' UID PID PPID C PRI NI VSZ RSS MWCHAN STAT TT TIME COMMAND 0 23614 22800 3 -32 -10 5400 2544 - R<+ 0 0:00.05 ps -l Signed-off-by: Jamie Landeg-Jones Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/2064 (cherry picked from commit 9006a731bc951c5b62efc4bf75a0c5b42586d279) (cherry picked from commit e7eef56c6982f0f67789365b5e337e5cafb7fe91) M bin/ps/keyword.c M bin/ps/print.c M bin/ps/ps.h ____________________________________________________________________________________________________________ Commit: 1cbd6e148249760df4c07c12f77a336ddad909b9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1cbd6e148249760df4c07c12f77a336ddad909b9 Author: Mariusz Zaborski (Tue 28 Apr 2026 15:36:09 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:05 BST) libnv: fix heap overflow in nvlist_recv() nvlist_check_header() validated nvlh_size for overflow before performing conversion. An mallicous user can set NV_FLAG_BIG_ENDIAN in the header and craft nvlh_size so that the orginall value passes the check, but after the conversion the sizeof(nvlist_header) + size can overflow. This can lead to a heap buffer overflow. Approved by: so Security: FreeBSD-SA-26:17.libnv Security: CVE-2026-35547 Fixes: 36fa90dbde0060aacb5677d0b113ee168e839071 Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D56342 M lib/libnv/tests/nvlist_send_recv_test.c M sys/contrib/libnv/nvlist.c ____________________________________________________________________________________________________________ Commit: 45809b0e1bc1c443b090999a589f0f31049a6484 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=45809b0e1bc1c443b090999a589f0f31049a6484 Author: Mariusz Zaborski (Tue 28 Apr 2026 15:35:10 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:05 BST) libnv: switch fd_wait() from select(2) to poll(2) The previous implementation used FD_SET() on a stack-allocated fd_set, which is an out-of-bounds write whenever the socket fd is >= FD_SETSIZE (1024). Approved by: so Security: FreeBSD-SA-26:16.libnv Security: CVE-2026-39457 Reported by: Joshua Rogers of AISLE Research Team (https://aisle.com/) Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D56689 M lib/libnv/msgio.c M lib/libnv/tests/nvlist_send_recv_test.c ____________________________________________________________________________________________________________ Commit: 07296250c728644cc071fe89344ec9f0705da014 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=07296250c728644cc071fe89344ec9f0705da014 Author: Mariusz Zaborski (Thu 29 Aug 2024 14:46:01 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:05 BST) libnv: add tests to verify potential overflow issues Differential Revision: https://reviews.freebsd.org/D46131 (cherry picked from commit 241a7ddd7112982ed41ccdd047c1dad59ee0256e) M lib/libnv/tests/Makefile M lib/libnv/tests/nvlist_send_recv_test.c M sys/contrib/libnv/nv_impl.h M sys/contrib/libnv/nvlist.c ____________________________________________________________________________________________________________ Commit: 680e97f45b0ff827291a96f24c0d8edf5f7dc0c6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=680e97f45b0ff827291a96f24c0d8edf5f7dc0c6 Author: Mariusz Zaborski (Thu 29 Aug 2024 14:44:03 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:04 BST) libnv: add test to verify null termination of string in array Differential Revision: https://reviews.freebsd.org/D46138 (cherry picked from commit 2981431e044fae3bc87e6fa891b8230b484dc84b) M lib/libnv/tests/nv_array_tests.cc ____________________________________________________________________________________________________________ Commit: ba21845e94dd165c94d8d610d5df49b8954a405e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ba21845e94dd165c94d8d610d5df49b8954a405e Author: Kristof Provost (Sun 26 Apr 2026 10:34:55 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:04 BST) pf: improve SCTP validation As per RFC5061 "4.2. New Parameter Types" the add/delete IP address parameters (0xc001, 0xc002) may not be present in an INIT or INIT-ACK chunk. They are only allowed to be present in an ASCONF chunk. This also prevents unbounded recursion while parsing an SCTP packet. Approved by: so Security: FreeBSD-SA-26:14.pf Security: CVE-2026-7164 PR: 294799 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294799 ) Reported by: Igor Gabriel Sousa e Souza MFC after: 3 days Sponsored by: Orange Business Services M sys/netpfil/pf/pf.c M tests/sys/netpfil/pf/sctp.py ____________________________________________________________________________________________________________ Commit: a813012f4b76444dfde03146487042133c657884 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a813012f4b76444dfde03146487042133c657884 Author: Mark Johnston (Mon 27 Apr 2026 21:56:21 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:04 BST) dhclient: Fix reallocation of dhclient script environments When the number of DHCP options exceeds a threshold, script_set_env() will reallocate the environment, stored as an array of pointers. The calculation of the array size failed to multiply by the pointer size, resulting in a smaller than expected buffer which admits out-of-bounds writes. Approved by: so Security: FreeBSD-SA-26:15.dhclient Security: CVE-2026-42511 Reported by: Joshua Rogers of AISLE Research Team (https://aisle.com/) M sbin/dhclient/dhclient.c ____________________________________________________________________________________________________________ Commit: b3087e05e848405c3b9c8577a86fed173f3a8a42 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b3087e05e848405c3b9c8577a86fed173f3a8a42 Author: Mark Johnston (Mon 27 Apr 2026 21:03:09 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:04 BST) dhclient: Check for unexpected characters in some DHCP server options Some options are written directly to the lease file, which may be parsed by subsequent dhclient invocations. We must make sure that a malicious server can't control the "medium" field of a lease definition, otherwise they can achieve RCE by injecting one into the lease file, whereupon it will be passed to dhclient-script, which passes it through eval. Approved by: so Security: FreeBSD-SA-26:12.dhclient Security: CVE-2026-42511 Reported by: Joshua Rogers of AISLE Research Team (https://aisle.com/) M sbin/dhclient/dhclient.c ____________________________________________________________________________________________________________ Commit: ae00a52921cafcedd04a240d444fec2076ea7771 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ae00a52921cafcedd04a240d444fec2076ea7771 Author: Mark Johnston (Wed 22 Apr 2026 18:58:35 BST) Committer: Mark Johnston (Wed 29 Apr 2026 15:45:04 BST) execve: Fix an operator precedence bug The buggy version allowed userspace to overflow the copy into adjacent execve KVA regions, which enables, among other things, injecting environment variables into privileged processes. Approved by: so Security: FreeBSD-SA-26:13.exec Security: CVE-2026-7270 Reported by: Ryan Austin of Calif.io Reviewed by: brooks, kib Fixes: f373437a01a3 ("Add helper functions to copy strings into struct image_args.") Differential Revision: https://reviews.freebsd.org/D56665 M sys/kern/kern_exec.c ____________________________________________________________________________________________________________ Commit: 14dfca710fd06d02b4a1cfa25e080b7d90d802dc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=14dfca710fd06d02b4a1cfa25e080b7d90d802dc Author: Kyle Evans (Sun 1 Mar 2026 03:42:25 GMT) Committer: Kyle Evans (Wed 29 Apr 2026 05:19:58 BST) mac_seeotheruids: allow specificgid to be a list of groups The specificgid functionality has historically allowed only a single group to be exempt, but in practice one might want a few services to be exempt for reasons. From a security perspective, we probably don't want to encourage unrelated users to be grouped together solely for this purpose, as that creates one point of shared access that could be used for nefarious purposes. Normalize the group list as we do cr_groups to allow for linear matching rather than quadratic, we just need to account for the differences in FreeBSD 15.0+ where cr_groups is entirely supplementary groups vs. earlier versions, where cr_groups[0] is the egid and the rest is sorted. Reviewed by: csjp, des (earlier version) Sponsored by: Klara, Inc. (cherry picked from commit b675ff8eedc9ac93cdf1cfe33185b7a1a027df37) M share/man/man4/mac_seeotheruids.4 M sys/security/mac_seeotheruids/mac_seeotheruids.c ____________________________________________________________________________________________________________ Commit: 09db36421d01dba38a7d857d865773ac96ddacab URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=09db36421d01dba38a7d857d865773ac96ddacab Author: Christian S.J. Peron (Thu 23 Apr 2026 21:26:50 BST) Committer: Kyle Evans (Wed 29 Apr 2026 05:19:58 BST) Fix memory corruption bugs in BSM record parsing fetch_newgroups_tok(3): clamp group count to AUDIT_MAX_GROUPS before the loop to prevent a stack buffer overflow when a crafted record specifies more than 16 groups. fetch_execarg_tok(3), fetch_execenv_tok(3): add a bounds check at the top of the string-walking loop to prevent an out-of-bounds read when the previous string's nul byte is the last byte of the record buffer. fetch_sock_unix_tok(3): clamp the memchr search length to the number of bytes remaining in the buffer to prevent an out-of-bounds read on short tokens. Also clamp slen to sizeof(path) to prevent a one-byte overflow when no nul byte is found within the path data. fetch_socket_tok: fix copy-paste error where the remote address was written into l_addr instead of r_addr. Previously reported by: @haginara Define AU_UNIX_PATH_MAX as 108 (the largest sun_path across all supported platforms) and use it in au_socketunix_t instead of the hardcoded 104. Update fetch_sock_unix_tok to derive its search bound from sizeof(tok->tt.sockunix.path) so cross-platform records from Solaris and Linux with paths up to 108 bytes parse correctly without truncation. REF: https://github.com/openbsm/openbsm/pull/87 Reviewed by: kevans, markj (cherry picked from commit a46205a100b3201a60aaca26e4ac8097e1e136a7) M contrib/openbsm/bsm/libbsm.h M contrib/openbsm/libbsm/bsm_io.c M contrib/openbsm/libbsm/bsm_token.c ____________________________________________________________________________________________________________ Commit: afbda58063048e2ddc47f7fc6fcc34718ccd7dbf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=afbda58063048e2ddc47f7fc6fcc34718ccd7dbf Author: Kristof Provost (Mon 13 Apr 2026 14:48:39 BST) Committer: Kristof Provost (Tue 28 Apr 2026 17:04:49 BST) pf: do not allow flags to be changed with securelevel set With securelevel set (for pf that means >= 3) we're expected to reject rule changes. However, we allowed interface flags to be changed, which would allow 'set skip on X' to be changed. Remove DIOCSETIFFLAG and DIOCCLRIFFLAG from the securelevel whitelist. MFC after: 1 week Reported by: cyberkittens Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit d5ca00f2d8743f0885c17f50c8c011cae285fbdb) M sys/netpfil/pf/pf_ioctl.c ____________________________________________________________________________________________________________ Commit: 4c2563e16b401c31e82917476be1411422d6557e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4c2563e16b401c31e82917476be1411422d6557e Author: Dan Mahoney (Tue 14 Apr 2026 04:53:51 BST) Committer: Cy Schubert (Tue 28 Apr 2026 15:19:48 BST) termcap: fix screen entry standout mode (so/se) capabilities so=\E[3m (italic) is incorrect, should be so=\E[7m (reverse video). se=\E[23m (italic off) is incorrect, should be se=\E[27m (reverse off). mr=\E[7m (reverse video) is correctly defined in the same entry. screen-256color inherits from screen via tc=screen and is fixed transitively. PR: 294499 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294499 ) Pull Request: https://github.com/freebsd/freebsd-src/pull/2139 Signed-off-by: Dan Mahoney (cherry picked from commit 2bff747bb04db6beb19678abc45edd96be0a1347) M share/termcap/termcap ____________________________________________________________________________________________________________ Commit: 2fb72649b5e47f7d2bd4e32822a4b5b2c2f23130 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2fb72649b5e47f7d2bd4e32822a4b5b2c2f23130 Author: Mateusz Piotrowski <0mp@FreeBSD.org> (Sun 22 Mar 2026 07:31:44 GMT) Committer: Mateusz Piotrowski <0mp@FreeBSD.org> (Mon 27 Apr 2026 17:50:32 BST) mdo.1: Cross-reference with security.7 MFC after: 3 days Reviewed by: olce Differential Revision: https://reviews.freebsd.org/D56024 (cherry picked from commit e23f0deceac4fb77c14066d4a76074548ee75fc4) M share/man/man7/security.7 M usr.bin/mdo/mdo.1 ____________________________________________________________________________________________________________ Commit: e1d544c49956cd710d6fbe8929974c66c658fa34 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e1d544c49956cd710d6fbe8929974c66c658fa34 Author: Alice Cariboni (Thu 9 Apr 2026 16:35:47 BST) Committer: Mateusz Piotrowski <0mp@FreeBSD.org> (Mon 27 Apr 2026 17:28:09 BST) tuning.7: Fix suds typo in manual pages MFC after: 3 days Fixes: fc32c802158f Add two new manual pages Differential Revision: https://reviews.freebsd.org/D55814 (cherry picked from commit f9160912415eef078c32317e02695bc0cc775d39) M share/man/man7/tuning.7 ____________________________________________________________________________________________________________ Commit: 4fc1503f86177259c140c42eacb073bd17f9f72e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4fc1503f86177259c140c42eacb073bd17f9f72e Author: Kristof Provost (Thu 9 Apr 2026 17:11:41 BST) Committer: Kristof Provost (Sun 26 Apr 2026 11:12:03 BST) pf: fix duplicate rule detection for automatic tables We should look at the table name for automatic tables as well. These are different tables, so the rules using them are (or can be) different as well. MFC after: 3 days Reported by: Michael Sinatra Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit fb838352751767e756bd45cd2040fa464ed4de20) M tests/sys/netpfil/pf/pass_block.sh ____________________________________________________________________________________________________________ Commit: dd0e6909ca842e98066b108ec7efb0d55951260b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dd0e6909ca842e98066b108ec7efb0d55951260b Author: Michael Tuexen (Fri 17 Apr 2026 08:11:41 BST) Committer: Michael Tuexen (Sun 26 Apr 2026 08:26:06 BST) tcp: use RFC 6191 for connection recycling in TIME-WAIT Implement the criteria specified in RFC 6191 for recycling TCP connections in TIME-WAIT. Reviewed by: rscheff, Marius Halden Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D56321 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 3a54aa3b0911bef15e014b8a8185e116efb0a918) M sys/netinet/tcp_timewait.c ____________________________________________________________________________________________________________ Commit: 68a749fbd49797f1f6bfc59c69360302f1381eb6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=68a749fbd49797f1f6bfc59c69360302f1381eb6 Author: Michael Tuexen (Wed 15 Apr 2026 20:24:05 BST) Committer: Michael Tuexen (Sun 26 Apr 2026 08:24:50 BST) bpf: fix handling the read timeout on ppc64 On platforms other than amd64, BIOCSRTIMEOUT is equal to BIOCSRTIMEOUT32. Therefore, running the COMPAT_FREEBSD32 code basically clears tv_usec on big endian platforms. When tcpdump is used, the timeout requested is 100ms, which gets cleared to 0 on ppc64 platforms. This results in tcpdump showing the packets only when the read buffer is full. Thanks to kib for guiding me to the correct fix. Reported by: ivy Reviewed by: adrian, kib Differential Revision: https://reviews.freebsd.org/D56399 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 04b994d19eec68a6b5d27ff4b0fa223a05f00e1f) M sys/net/bpf.c ____________________________________________________________________________________________________________ Commit: 00bf1bc888bb6d1510c9247611d727444d14110a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=00bf1bc888bb6d1510c9247611d727444d14110a Author: Timo Völker (Sat 4 Apr 2026 15:43:07 BST) Committer: Michael Tuexen (Sun 26 Apr 2026 08:23:16 BST) virtio.4: fix typo Reviewed by: tuexen Fixes: c70755bc0d8f ("virtio: add loader tunables to sysctl") Event: Wiesbaden Hackathon 2026 (cherry picked from commit 39c44fc55f0ed595623fb6d66a4060b7be32fa51) M share/man/man4/virtio.4 ____________________________________________________________________________________________________________ Commit: e4e27b6edcfb4abcafe9999cee913ff6fc8f4416 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e4e27b6edcfb4abcafe9999cee913ff6fc8f4416 Author: Michael Tuexen (Wed 4 Mar 2026 14:18:58 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 08:21:37 BST) tcp: improve NOINET builds Reported by: bz Sponsored by: Netflix, Inc. Event: Wiesbaden Hackathon 2026 (cherry picked from commit 3d69387ece535fc33821d089aab241bfb9551d69) M sys/netinet/tcp_subr.c ____________________________________________________________________________________________________________ Commit: 32f8c7821394b3be2d97641dbe8bf8962e2bb90a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=32f8c7821394b3be2d97641dbe8bf8962e2bb90a Author: Timo Völker (Mon 2 Mar 2026 18:15:37 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 08:20:41 BST) virtio: add loader tunables to sysctl virtio_pci uses two loader tunables that should be more visible. This patch adds these loader tunables to sysctl and describes them in the virtio(4) man page. Reviewed by: imp (erlier version), tuexen Differential Revision: https://reviews.freebsd.org/D55533 Event: Wiesbaden Hackathon 2026 (cherry picked from commit c70755bc0d8f703dbaa1520c15e8213a95847dd5) M share/man/man4/virtio.4 M sys/dev/virtio/pci/virtio_pci.c M sys/dev/virtio/pci/virtio_pci_modern.c M sys/dev/virtio/virtio.c ____________________________________________________________________________________________________________ Commit: 5c6a4b3f8965e861322f295f97a2d4e59fd63afb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5c6a4b3f8965e861322f295f97a2d4e59fd63afb Author: Timo Völker (Mon 2 Mar 2026 17:59:45 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 08:13:24 BST) arm64/pmap: fix pmap_is_valid_memattr() The function pmap_is_valid_memattr(pmap, mode) checks whether the given variable mode is between the two constant values VM_MEMATTR_DEVICE and VM_MEMATTR_WRITE_THROUGH. After the code for this function was written, the value of VM_MEMATTR_DEVICE changed from 0 to 4. Since VM_MEMATTR_WRITE_THROUGH is still 3, the condition is always false. This patch changes the condition to check whether mode is equal to any of the VM_MEMATTR* constants. Reviewed by: andrew, tuexen Differential Revision: https://reviews.freebsd.org/D55534 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 0272359ada144aa540c28fefaf996afa30dc0aa5) M sys/arm64/arm64/pmap.c M sys/arm64/include/vm.h ____________________________________________________________________________________________________________ Commit: 53d8d57fa5e2e9eaa03f44c24afddc1f3d09e26d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=53d8d57fa5e2e9eaa03f44c24afddc1f3d09e26d Author: Michael Tuexen (Wed 25 Feb 2026 13:06:15 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 08:12:28 BST) tcp: improve handling of segments in TIME WAIT The check for excluding duplicate ACKs needs to consider only TH_SYN and TH_FIN. We know that TH_ACK is set and TH_RST is cleared. All other flags, in particular TH_ECE, TH_CWR, and TH_AE needs to be ignored for the check. PR: 292293 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292293 ) Reviewed by: rrs Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D55489 Event: Wiesbaden Hackathon (cherry picked from commit f3364d3c8c876074a9a6f68168e5eb8bd60207de) M sys/netinet/tcp_timewait.c ____________________________________________________________________________________________________________ Commit: 328210f0efc203cc8db503e2cf60333d79227b4b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=328210f0efc203cc8db503e2cf60333d79227b4b Author: Michael Tuexen (Wed 25 Feb 2026 13:01:50 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 08:07:20 BST) tcp: BBLog incoming packets in TCPS_TIME_WAIT PR: 292293 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292293 ) Reviewed by: rrs, rscheff, pouria, Nick Banks, Peter Lei Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D5546 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 8d2f910ceb0f1c366bcf2146a5ba1d1074d07933) M sys/netinet/tcp_timewait.c ____________________________________________________________________________________________________________ Commit: dd4e2803da39fdcc3fc73d2ee710f479568ce3ad URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dd4e2803da39fdcc3fc73d2ee710f479568ce3ad Author: Michael Tuexen (Wed 25 Feb 2026 12:55:54 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 08:00:53 BST) sctp: fix so_proto when peeling off a socket Reported by: glebius Reviewed by: rrs Fixes: d195b3783fa4 ("sctp: fix socket type created by sctp_peeloff()") Differential Revision: https://reviews.freebsd.org/D55454 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 454212b9718b55b43781f81bef252658e20e0fd3) M sys/kern/uipc_socket.c M sys/netinet/sctp_syscalls.c M sys/sys/socketvar.h ____________________________________________________________________________________________________________ Commit: 2c8205002d94697bb164217dcffb3b280729f022 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2c8205002d94697bb164217dcffb3b280729f022 Author: Michael Tuexen (Tue 10 Feb 2026 17:08:07 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 07:29:25 BST) ure: improve receive checksum offloading Let the receive checksum offload for TCP/IPv6 and UDP/IPv6 be controlled by ifconfig rxcsum6 and not by ifconfig rxcsum. While there, make the code more compact and improve stlye.9 conformity. Reviewed by: Timo Völker Differential Revision: https://reviews.freebsd.org/D55188 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 378577393e407fa2cd9677392da2287e37b4dd33) M sys/dev/usb/net/if_ure.c ____________________________________________________________________________________________________________ Commit: 32067a7f49a37a5b1507794df95799ceecc26ad9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=32067a7f49a37a5b1507794df95799ceecc26ad9 Author: Michael Tuexen (Sun 8 Feb 2026 20:11:18 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 07:28:16 BST) ure: improve transmit checksum offloading Apparently, the name of the variable l4off was correct. Providing the offset to the TCP or UDP header allows the transmit checksum offload to work for TCP/IPv4, TCP/IPv6, UDP/IPv4, and UDP/IPv6. Reported by: vishwin Reviewed by: vishwin Differential Revision: https://reviews.freebsd.org/D55187 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 7266121ce985a1a895441357c20b0e9d56b4e5f5) M sys/dev/usb/net/if_ure.c ____________________________________________________________________________________________________________ Commit: d3234683f88d7f4a8c1b72d64184435362728ce3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d3234683f88d7f4a8c1b72d64184435362728ce3 Author: Timo Völker (Sun 8 Feb 2026 20:02:58 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 07:23:47 BST) ifinfo: improve output of hwassist value In addition to print the hexadecimal number hwassist, also print the symbolic names of the corresponding CSUM_* flags. Reviewed by: tuexen Differential Revision: https://reviews.freebsd.org/D55055 Event: Wiesbaden Hackathon 2026 (cherry picked from commit d84870d90bafe75eb87759df0ab41ff0214c866e) M tools/tools/ifinfo/ifinfo.c ____________________________________________________________________________________________________________ Commit: 70cfba4a0462df22ef48b84870e4b4e54079c1ea URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=70cfba4a0462df22ef48b84870e4b4e54079c1ea Author: Michael Tuexen (Sat 31 Jan 2026 18:11:08 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 07:22:42 BST) sctp: fix socket type created by sctp_peeloff() When calling sctp_peeloff() on a SOCK_SEQPACKET socket, the created and returned socket has the type SOCK_STREAM. This is specified in section 9.2 of RFC 6458. Reported by: Xin Long Event: Wiesbaden Hackathon 2026 (cherry picked from commit d195b3783fa4de5c1a95f6d95eb9444abce6778b) M sys/kern/uipc_socket.c ____________________________________________________________________________________________________________ Commit: a0a0fa1dd92289d3b7b5336c409303662a7ec7fa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a0a0fa1dd92289d3b7b5336c409303662a7ec7fa Author: Michael Tuexen (Sat 31 Jan 2026 10:42:10 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 07:21:44 BST) ure: improve checksum offloading This patch fixes three issues: (1) Initially, set the hwassist flags correctly when enabling transmit checksum offload for TCP/IPv6 and UDP/IPv6. (2) Keep the hwassist flags in sync with the capabilities when changing txcsum. (3) Keep the hwasssit flags in sync with the capabilities when changing txcsum6. Without this patch, transmit checksum offloading for TCP/IPv6 and UDP/IPv6 is never used and transmit checksum offloading for IPv4, TCP/IPv4 and UDP/IPv4 is always used, even if disabled via ifconfig ue? -txcsum. Reviewed by: Timo Völker Differential Revision: https://reviews.freebsd.org/D54974 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 7b6e84c9ac5668134ab2d075019ef0b827d90c84) M sys/dev/usb/net/if_ure.c ____________________________________________________________________________________________________________ Commit: acbc8e49ae0fdf22fd9e40e031fa6312a815068a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=acbc8e49ae0fdf22fd9e40e031fa6312a815068a Author: Timo Völker (Fri 30 Jan 2026 10:54:33 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 07:20:49 BST) epair: add VLAN_HWTAGGING Add capability VLAN_HWTAGGING to the epair interface and enable it by default. When sending a packet over a VLAN interface that uses an epair interface, the flag M_VLANTAG and the ether_vtag (which contains the VLAN ID and/or PCP) are set in the mbuf to inform the hardware that the VLAN header has to be added. The sending epair end does not need to actually add a VLAN header. It can just pass the mbuf with this setting to the other epair end, which receives the packet. The receiving epair end can just pass the mbuf with this setting to the upper layer. Due to this setting, the upper layer believes that there was a VLAN header that has been removed by the interface. If the packet later leaves the host, the outgoing physical interface can add the VLAN header in hardware if it supports VLAN_HWTAGGING. If not, the implementation of Ethernet or bridge adds the VLAN header in software. Reviewed by: zlei, tuexen Differential Revision: https://reviews.freebsd.org/D52465 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 574d46b25ab6f42ad97017bb8b72520e9539e36f) M share/man/man4/epair.4 M sys/net/if_epair.c ____________________________________________________________________________________________________________ Commit: 453958b8d8890f707215cb6641df6865d662b9d9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=453958b8d8890f707215cb6641df6865d662b9d9 Author: Timo Völker (Tue 20 Jan 2026 10:30:19 GMT) Committer: Michael Tuexen (Sun 26 Apr 2026 07:14:20 BST) ip: improve deferred computation of checksums This patch adds the same functionality for the IPv4 header checksum as was done erlier for the SCTP/TCP/UDP transport checksum. When the IP implementation sends a packet, it does not compute the corresponding checksum but defers that. It will determine whether the network interface selected for the packet has the requested capability and computes the checksum in software, if the selected network interface does not have the requested capability. Do this not only for packets being sent by the local IP stack, but also when forwarding packets. Furthermore, when such packets are delivered to a local IP stack, do not compute or validate the checksum, since such packets have never been on the wire. This allows to support checksum offloading also in the case of local virtual machines or jails. Support for epair interfaces will be added in a separate commit. Reviewed by: pouria, tuexen Differential Revision: https://reviews.freebsd.org/D54455 Event: Wiesbaden Hackathon 2026 (cherry picked from commit 6f15ba8004c3fdc2fb12f0cd6618d1b3a40aab7d) M share/man/man9/mbuf.9 M sys/netinet/ip_fastfwd.c M sys/netinet/ip_input.c ____________________________________________________________________________________________________________ Commit: 30eb33424e74f467346319876e20a83ff71e00cd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=30eb33424e74f467346319876e20a83ff71e00cd Author: Philip Paeps (Thu 23 Apr 2026 16:44:33 BST) Committer: Philip Paeps (Sun 26 Apr 2026 03:05:49 BST) contrib/tzdata: import tzdata 2026b Changes: https://github.com/eggert/tz/blob/2026b/NEWS (cherry picked from commit 9b95cab0a2927dfe07dbe6dc0056a80d5c730414) M contrib/tzdata/NEWS M contrib/tzdata/northamerica M contrib/tzdata/version M contrib/tzdata/zone.tab M contrib/tzdata/zone1970.tab M contrib/tzdata/zonenow.tab ____________________________________________________________________________________________________________ Commit: 1633c00828ac84fc5f9c08e5445fb6e6ead1939c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1633c00828ac84fc5f9c08e5445fb6e6ead1939c Author: Enji Cooper (Sat 21 Feb 2026 06:14:46 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:50:07 BST) chore: replace {0, 0} with {DEV,KOBJ}METHOD_END Both of the aforementioned macros have been present in FreeBSD for well over a decade: 2009 for `KOBJMETHOD_END`; 2011 for `DEVMETHOD_END`. Adapt all hardcoded references of `{0, 0}` with `DEVMETHOD_END` and `KOBJMETHOD_END` as appropriate. This helps ensure that future adaptations to drivers following patterns documented in driver(9) can be made more easily/without issue. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55414 MFC notes: All conflicts were dropped as they didn't apply to code in branch. Conflicts: sys/dev/flash/w25n.c sys/dev/nvd/nvd.c sys/dev/nvme/nvme_sim.c sys/dev/sound/pci/hdsp-pcm.c sys/dev/sound/pci/hdsp.c sys/dev/ufshci/ufshci_pci.c (cherry picked from commit 0fc6c3f731a2cca3120798806c330a3081c9424b) M sys/dev/aacraid/aacraid_cam.c M sys/dev/aacraid/aacraid_pci.c M sys/dev/acpi_support/acpi_asus.c M sys/dev/acpica/acpi_video.c M sys/dev/adb/adb_bus.c M sys/dev/adb/adb_buttons.c M sys/dev/adb/adb_kbd.c M sys/dev/adb/adb_mouse.c M sys/dev/agp/agp_ali.c M sys/dev/agp/agp_amd.c M sys/dev/agp/agp_amd64.c M sys/dev/agp/agp_apple.c M sys/dev/agp/agp_ati.c M sys/dev/agp/agp_i810.c M sys/dev/agp/agp_intel.c M sys/dev/agp/agp_nvidia.c M sys/dev/agp/agp_sis.c M sys/dev/agp/agp_via.c M sys/dev/aic7xxx/ahc_isa.c M sys/dev/aic7xxx/ahc_pci.c M sys/dev/aic7xxx/ahd_pci.c M sys/dev/al_eth/al_eth.c M sys/dev/alpm/alpm.c M sys/dev/amdpm/amdpm.c M sys/dev/amdsmb/amdsmb.c M sys/dev/asmc/asmc.c M sys/dev/atkbdc/atkbd_atkbdc.c M sys/dev/atkbdc/atkbdc_isa.c M sys/dev/atkbdc/psm.c M sys/dev/axgbe/if_axgbe.c M sys/dev/cfe/cfe_resource.c M sys/dev/cfi/cfi_disk.c M sys/dev/chromebook_platform/chromebook_platform.c M sys/dev/ciss/ciss.c M sys/dev/cxgb/cxgb_main.c M sys/dev/cxgbe/cxgbei/icl_cxgbei.c M sys/dev/cxgbe/t4_main.c M sys/dev/dcons/dcons_crom.c M sys/dev/dpaa/bman_fdt.c M sys/dev/dpaa/fman_fdt.c M sys/dev/dpaa/fman_mdio.c M sys/dev/dpaa/if_dtsec_fdt.c M sys/dev/dpaa/qman_fdt.c M sys/dev/dpms/dpms.c M sys/dev/dwc/if_dwc.c M sys/dev/fb/fbd.c M sys/dev/fdc/fdc.c M sys/dev/fdc/fdc_isa.c M sys/dev/firewire/if_fwe.c M sys/dev/firewire/if_fwip.c M sys/dev/firewire/sbp.c M sys/dev/firewire/sbp_targ.c M sys/dev/flash/cqspi.c M sys/dev/flash/flexspi/flex_spi.c M sys/dev/flash/mx25l.c M sys/dev/flash/n25q.c M sys/dev/ftwd/ftwd.c M sys/dev/fxp/inphy.c M sys/dev/glxiic/glxiic.c M sys/dev/gpio/dwgpio/dwgpio.c M sys/dev/hpt27xx/hpt27xx_osm_bsd.c M sys/dev/hptiop/hptiop.c M sys/dev/hptnr/hptnr_osm_bsd.c M sys/dev/hyperv/input/hv_kbdc.c M sys/dev/hyperv/utilities/hv_kvp.c M sys/dev/hyperv/utilities/hv_snapshot.c M sys/dev/ida/ida_disk.c M sys/dev/iicbus/adc/ad7417.c M sys/dev/iicbus/controller/twsi/a10_twsi.c M sys/dev/iicbus/controller/twsi/twsi.c M sys/dev/iicbus/if_ic.c M sys/dev/iicbus/iic.c M sys/dev/iicbus/iicbb.c M sys/dev/iicbus/pwm/adt746x.c M sys/dev/iicbus/sensor/ds1631.c M sys/dev/iicbus/sensor/ds1775.c M sys/dev/iicbus/sensor/max6690.c M sys/dev/ipmi/ipmi_acpi.c M sys/dev/ipmi/ipmi_isa.c M sys/dev/ipmi/ipmi_pci.c M sys/dev/ipmi/ipmi_smbus.c M sys/dev/ips/ips_disk.c M sys/dev/isci/isci.c M sys/dev/iscsi/icl_soft.c M sys/dev/iser/icl_iser.c M sys/dev/isp/isp_pci.c M sys/dev/itwd/itwd.c M sys/dev/le/if_le_isa.c M sys/dev/le/if_le_pci.c M sys/dev/mfi/mfi_disk.c M sys/dev/mfi/mfi_syspd.c M sys/dev/mge/if_mge.c M sys/dev/mlx/mlx_disk.c M sys/dev/mpi3mr/mpi3mr_pci.c M sys/dev/mpr/mpr_pci.c M sys/dev/mvs/mvs.c M sys/dev/mvs/mvs_pci.c M sys/dev/mvs/mvs_soc.c M sys/dev/ncthwm/ncthwm.c M sys/dev/nfsmb/nfsmb.c M sys/dev/nvme/nvme_ahci.c M sys/dev/nvme/nvme_pci.c M sys/dev/ow/ow.c M sys/dev/ow/ow_temp.c M sys/dev/ow/owc_gpiobus.c M sys/dev/pbio/pbio.c M sys/dev/pcf/pcf_isa.c M sys/dev/pci/fixup_pci.c M sys/dev/pci/hostb_pci.c M sys/dev/pci/ignore_pci.c M sys/dev/pci/vga_pci.c M sys/dev/pms/freebsd/driver/ini/src/agtiapi.c M sys/dev/powermac_nvram/powermac_nvram.c M sys/dev/ppbus/if_plip.c M sys/dev/ppbus/lpt.c M sys/dev/ppbus/pcfclock.c M sys/dev/ppbus/ppbconf.c M sys/dev/ppbus/ppi.c M sys/dev/ppbus/pps.c M sys/dev/ppc/ppc_acpi.c M sys/dev/ppc/ppc_isa.c M sys/dev/ppc/ppc_pci.c M sys/dev/ppc/ppc_puc.c M sys/dev/pst/pst-pci.c M sys/dev/pst/pst-raid.c M sys/dev/qlnx/qlnxe/qlnx_os.c M sys/dev/qlxgb/qla_os.c M sys/dev/qlxgbe/ql_os.c M sys/dev/qlxge/qls_os.c M sys/dev/sbni/if_sbni_isa.c M sys/dev/sbni/if_sbni_pci.c M sys/dev/siis/siis.c M sys/dev/smartpqi/smartpqi_main.c M sys/dev/smbios/smbios.c M sys/dev/smbus/smb.c M sys/dev/smc/if_smc.c M sys/dev/smc/if_smc_acpi.c M sys/dev/smc/if_smc_fdt.c M sys/dev/sound/macio/davbus.c M sys/dev/sound/macio/i2s.c M sys/dev/sound/macio/onyx.c M sys/dev/sound/macio/snapper.c M sys/dev/sound/macio/tumbler.c M sys/dev/sound/pci/als4000.c M sys/dev/sound/pci/atiixp.c M sys/dev/sound/pci/cmi.c M sys/dev/sound/pci/cs4281.c M sys/dev/sound/pci/csapcm.c M sys/dev/sound/pci/envy24.c M sys/dev/sound/pci/envy24ht.c M sys/dev/sound/pci/es137x.c M sys/dev/sound/pci/hdspe-pcm.c M sys/dev/sound/pci/hdspe.c M sys/dev/sound/pci/ich.c M sys/dev/sound/pci/maestro3.c M sys/dev/sound/pci/neomagic.c M sys/dev/sound/pci/solo.c M sys/dev/sound/pci/t4dwave.c M sys/dev/sound/pci/vibes.c M sys/dev/spibus/spigen.c M sys/dev/tdfx/tdfx_pci.c M sys/dev/ti/if_ti.c M sys/dev/tpm/tpm_acpi.c M sys/dev/tpm/tpm_isa.c M sys/dev/uart/uart_bus_acpi.c M sys/dev/uart/uart_bus_fdt.c M sys/dev/uart/uart_bus_isa.c M sys/dev/uart/uart_bus_puc.c M sys/dev/uart/uart_bus_scc.c M sys/dev/uart/uart_dev_imx.c M sys/dev/uart/uart_dev_lowrisc.c M sys/dev/uart/uart_dev_mu.c M sys/dev/uart/uart_dev_mvebu.c M sys/dev/uart/uart_dev_pl011.c M sys/dev/uart/uart_dev_quicc.c M sys/dev/uart/uart_dev_z8530.c M sys/dev/usb/controller/ehci_fsl.c M sys/dev/usb/input/uep.c M sys/dev/usb/net/uhso.c M sys/dev/xilinx/if_xae.c ____________________________________________________________________________________________________________ Commit: ca93c983ab9480264fe867b49b44b03578baeae2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ca93c983ab9480264fe867b49b44b03578baeae2 Author: tslight (Thu 26 Feb 2026 07:44:44 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:43:06 BST) use ASMC_FAN_FUNCS2 to avoid trying to read non-existent keys Signed-off-by: tslight Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/2051 (cherry picked from commit cecd12ac3b4d98bd52dc0e802a4a38bc72f50e2c) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: ae09e4a904e5b6bca9ba2847d2788cd4e5fd19c7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ae09e4a904e5b6bca9ba2847d2788cd4e5fd19c7 Author: tslight (Tue 27 Jan 2026 16:44:40 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:40:45 BST) Add ASMC support for Macbook Pro 8,3 Signed-off-by: tslight Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/1992 (cherry picked from commit 16c82e28404ec959a7335ceae1d4f43881a50d9e) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h ____________________________________________________________________________________________________________ Commit: c8ad757af8c87f15ae6e007c2e6bc65140464c15 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c8ad757af8c87f15ae6e007c2e6bc65140464c15 Author: Enji Cooper (Fri 20 Feb 2026 06:24:38 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:37:08 BST) asmc: use symbolic names with the MacPro3,1 model Use `ASMC_LIGHT_FUNCS_DISABLED` and `ASMC_SMS_FUNCS_DISABLED` instead of the unrolled versions of the macros. This makes it easier to adjust the underlying macros/fields for `struct asmc_model`. No functional change intended. MFC after: 1 week (cherry picked from commit 90edc16166a6fef03d2384247d07d64656f03309) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 0770a765a20415701c42074fdc2f03aa37a908e3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0770a765a20415701c42074fdc2f03aa37a908e3 Author: Enji Cooper (Fri 20 Feb 2026 03:51:13 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:35:58 BST) asmc: code style modernization and minor cleanups - Allow `ASMC_DEBUG` to be treated as a variadic macro. - Add ellipses around `sizeof(..)` calls. - Reindent some of the lines to better follow style(9) with line wrapping. A number of other clang-format changes were not taken as they are not compatible with style(9). MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55394 (cherry picked from commit e20e26e4e271ecb74e40d9a95ed3112ceaf9604f) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 608749ca473de286ff40447510c201cb8579aee2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=608749ca473de286ff40447510c201cb8579aee2 Author: Enji Cooper (Thu 26 Feb 2026 23:06:36 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:33:22 BST) divert: unbreak the LINT-NOIP build Only expose `dcb` when either `INET` or `INET6` is defined. Reported by: clang (`-Wunused`) MFC after: 1 week Fixes 5547a7bb39 ("divert: Use a better source identifier...") Differential Revision: https://reviews.freebsd.org/D55548 (cherry picked from commit bd758ebac3272f720c051570e043e4bc653dcd48) M sys/netinet/ip_divert.c ____________________________________________________________________________________________________________ Commit: 7be895e5003534e51efe37cc63a359219099bf4a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7be895e5003534e51efe37cc63a359219099bf4a Author: Enji Cooper (Fri 20 Feb 2026 20:24:46 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:32:25 BST) libnetbsd: import `__CTASSERT(..)` macros These compile-time assert macros are similar to `Static_assert` on FreeBSD. These macros are in use in newer versions of `contrib/netbsd-tests`. Obtained from: https://github.com/NetBSD/src (c26cc77b3a0b26b95a2) MFC after: 1 week (cherry picked from commit d1f1402dff63dd163d4ba4ac65f7f2ffd00c5e08) M lib/libnetbsd/sys/cdefs.h ____________________________________________________________________________________________________________ Commit: ee828a44e8d16e7bf74c0761bd088024821f1eb6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ee828a44e8d16e7bf74c0761bd088024821f1eb6 Author: Enji Cooper (Thu 26 Feb 2026 02:29:49 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:32:25 BST) lib/libnetbsd: bring in `__type_m{ax,in}*` macro family These macros are used by some of the NetBSD tests which calculate the size of types, e.g., `__type_max(time_t)`. This wraps up the set of macros needed in order to update to the a netbsd-tests snapshot from this past month. Obtained from: https://github.com/netbsd/src (55b4b44) MFC after: 1 week (cherry picked from commit db5344a7445f1a796bc3cacd32a46e88e3e589a7) M lib/libnetbsd/sys/cdefs.h ____________________________________________________________________________________________________________ Commit: 33030906cdd373b92e4a263b2ce0d5d9fe02fade URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=33030906cdd373b92e4a263b2ce0d5d9fe02fade Author: Enji Cooper (Wed 25 Feb 2026 23:19:56 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:32:25 BST) libnetbsd: add math.h and sys/time.h - `math.h`: `isinff(..)` - `sys/time.h`: `timespec*(x)` These two headers are used by tests in newer snapshots of `contrib/netbsd-tests`. MFC after: 1 week (cherry picked from commit 2a6c2d9c38dc421025b6c18cac68fe9965c574c0) A lib/libnetbsd/math.h A lib/libnetbsd/sys/time.h ____________________________________________________________________________________________________________ Commit: 079bfe2a372fb9000e2573f4135537e2b0c3adda URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=079bfe2a372fb9000e2573f4135537e2b0c3adda Author: Enji Cooper (Wed 4 Feb 2026 07:39:03 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:31:33 BST) .gitignore: ignore additional unwanted files Ignore more files generated by toolchains, e.g., `.pico`, etc. Ignore the `.DS_Store` produced by macOS as well because all they provide is additional file metadata that shouldn't be committed to `git`. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55096 (cherry picked from commit 4544f34f2d30ee63ab1eec9fa52c31bd92d457ca) M .gitignore ____________________________________________________________________________________________________________ Commit: 833df8dabb6bb5f6e87ee6ef11110165af298433 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=833df8dabb6bb5f6e87ee6ef11110165af298433 Author: Abdelkader Boudih (Sun 15 Feb 2026 01:44:50 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:29:59 BST) asmc: Add MacPro3,1 temperature sensor support Test and verified with Sonicblue7 Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D54952 (cherry picked from commit 90d79dd549461dac053b34d47ae32968afb2834c) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h ____________________________________________________________________________________________________________ Commit: 4dd720279f867c73c5ddbfbad926f4be1b5f1299 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4dd720279f867c73c5ddbfbad926f4be1b5f1299 Author: Abdelkader Boudih (Fri 13 Feb 2026 03:00:22 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:29:59 BST) asmc: Convert driver to CTLFLAG_MPSAFE Replace CTLFLAG_NEEDGIANT with CTLFLAG_MPSAFE for all sysctls. The driver already uses spin mutexes (sc->sc_mtx) for hardware access protection and does not require the Giant lock. This improves scalability by allowing concurrent sysctl access without Giant serialization. Reviewed by: ngie, adrian Differential Revision: https://reviews.freebsd.org/D54613 (cherry picked from commit 1a6bdd6266e3b53c8b6b597a77a100353b7ae13a) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 41924423f7eb6e84449a37d5273598e665cd138f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=41924423f7eb6e84449a37d5273598e665cd138f Author: Enji Cooper (Fri 20 Feb 2026 05:43:37 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:29:03 BST) asmc: use `ASMC_FAN_FUNCS2` with the Macmini4,1 The Macmini4,1 model does not have "fansafespeed" support. This issue typically manifests with messages like so: ``` asmc0: asmc_key_read for key F0Sf failed 10 times, giving up ``` Swap out `ASMC_FAN_FUNCS` with `ASMC_FAN_FUNCS2` to explicitly drop "fansafespeed" checks in the driver for the model as it doesn't support that hardware feature. MFC after: 1 week Reported by: @probonopd Closes: https://github.com/helloSystem/ISO/issues/357 (cherry picked from commit 7b862cf8a252d80ab1fb90fa5371fd8462c7c16f) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 78e9708c98aa7b1362cdb909f3530592c97ee904 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=78e9708c98aa7b1362cdb909f3530592c97ee904 Author: Enji Cooper (Sun 1 Mar 2026 18:54:56 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:25:43 BST) asmc: output the SMC firmware revision on attach The SMC firmware revision can prove helpful when determining why the behavior of a given controller varies from the maintainers' expected behavior. This should be a sysctl (eventually), but for now dumping out the information via `device_printf(..)` suffices, given that only one asmc(4) compatible device can exist in an Apple platform at any given point in time. This will become a sysctl in the future after additional improvements are incorporated from OpenBSD and NetBSD. MFC after: 1 week Obtained from: https://github.com/openbsd/src/ (sys/dev/acpi/asmc.c @ 142d064) Differential Revision: https://reviews.freebsd.org/D55577 (cherry picked from commit e81e724358e43dcf951e244a9df9df3eaa983fe9) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h ____________________________________________________________________________________________________________ Commit: 9dbe7570c27513c0e5f8ea57c1994740cad10e92 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9dbe7570c27513c0e5f8ea57c1994740cad10e92 Author: Enji Cooper (Fri 20 Feb 2026 06:31:21 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:25:43 BST) chore: asmc: use designated initializers in macros This code cleanup makes it easier for human readers to understand what each of the fields actually represents, as well as makes it easier to modify what the macros actually do under the covers, without introducing potential human errors. No functional change intended. MFC after: 1 week (cherry picked from commit ef1cde51032d395492caae302fedf183c58a482b) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 4c91d2e1a42e0b1be49578e01cf6fde5827abbc0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4c91d2e1a42e0b1be49578e01cf6fde5827abbc0 Author: Enji Cooper (Fri 30 Jan 2026 06:55:08 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:25:43 BST) asmc: resource cleanup simplifications This change makes `asmc_detach(..)` reentrant by setting freed resources to known invalid values when done, and makes `asmc_attach(..)` call `asmc_detach(..)` instead of attempting to the semi-equivalent way of cleaning up the driver resources allocated in `asmc_detach(..)`. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55413 (cherry picked from commit eda36ae09dd1fab78bd377739fc5d6c65c61f5d7) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 1198b0ca9d6d7b579304404bc38ed17d394fc5a4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1198b0ca9d6d7b579304404bc38ed17d394fc5a4 Author: Abdelkader Boudih (Wed 25 Feb 2026 06:32:42 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:25:42 BST) asmc: add Wake-on-LAN control via sysctl Apple Mac systems support Wake-on-LAN from powered-off state (S5/G2) via the AUPO SMC key. This change adds a convenience sysctl, `dev.asmc.0.wol`. This can be disabled if set to 0 and enabled if set to 1. The AUPO key is volatile and resets to 0x00 on every boot, so WoL must be manually enabled before each shutdown to work from powered-off state. Users need to run: `sysctl dev.asmc.0.wol=1` before shutting down the system. The sysctl is best set to persist in `/etc/sysctl.conf`. MFC after: 1 week Reviewed By: markj, ngie Differential Revision: https://reviews.freebsd.org/D54439 (cherry picked from commit 94db365042d35ff7e3ee7365a87a89bab1560030) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h ____________________________________________________________________________________________________________ Commit: 464afc5d0e855b478f7e8260a0ce8a1f7884806d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=464afc5d0e855b478f7e8260a0ce8a1f7884806d Author: Enji Cooper (Fri 20 Feb 2026 06:37:05 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:25:42 BST) asmc: introduce the concept of generic models Having to enter in each of the models for Apple hardware, recompiling, etc, is tedious. Provide generic models so end-users can leverage some of the capabilities provided by the driver, i.e., common features like minimal fans and lights (if present on the generic model) support. The generic models are as follows: - Macmini - MacBookAir - MacBookPro - MacPro This sort of follows the pattern established by the `applesmc` driver in Linux. MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D55395 (cherry picked from commit 3023bb49e115b4149f9fc0683dabde172ecb1336) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: d6faa06d8936cf42accbf98860b9333710deda2c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d6faa06d8936cf42accbf98860b9333710deda2c Author: Enji Cooper (Sun 22 Mar 2026 02:45:57 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:22:18 BST) release.sh: document user-overriddable functions This helps others attempting to customize the behavior of `release.sh`. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55450 (as part of a larger change) (cherry picked from commit b24fc79095c640620a643a11fa2f4f833326bfed) M release/release.sh ____________________________________________________________________________________________________________ Commit: 99b65c8b47724952a22186b7214523fadd012560 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=99b65c8b47724952a22186b7214523fadd012560 Author: Enji Cooper (Sun 22 Mar 2026 02:57:25 GMT) Committer: Enji Cooper (Sat 25 Apr 2026 17:22:18 BST) release.sh: add chroot cleanup routine The chroot_cleanup routine handles any cleanup needed post-chroot_setup, etc. This consists of purely tearing down `${CHROOTDIR}/dev` today, but might involve additional steps, as needed for custom functions. This allows end-users to override the various chroot functions without having to modify code in main() or replicate the unmount procedure in an equivalent routine setup via the trap builtin. This change modifies the /dev unmount process to use `umount -f` instead of `umount`. The latter can result in failures if resources are still mounted or are running post-build, whereas the former will clean up any resources still in use by processes running in the chroot at time of build. Moreover, the `chroot_cleanup` routine is now called when the script is killed with `SIGINT` and `SIGTERM`, as well as at `EXIT`, better ensuring that the script's resources are cleaned up in relatively common scenarios that can be detected/handled. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55450 (as part of a larger change) (cherry picked from commit 60baee1fa4848ac969522e03d2c6f273f334edb7) M release/release.sh ____________________________________________________________________________________________________________ Commit: eb55ca209aa21bc2b274f129bef954d0931ab23c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=eb55ca209aa21bc2b274f129bef954d0931ab23c Author: Michael Osipov (Thu 9 Apr 2026 10:19:36 BST) Committer: Michael Osipov (Sat 25 Apr 2026 15:36:44 BST) mfiutil(8)/mrsasutil(8): "show drives" truncates information Improve mfi_pd_inq_string() by * Reusing buffer sizes from cam/cam.h according to SCSI specification + NULL byte * Don't truncate vendor-specific information by escaping into a too small buffer * Use cam_strvis() from libcam instead of old, outdated local copy * Recaculate size of inq_string based on the reused buffer sizes and format statements PR: 294354 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294354 ) Reviewed by: imp MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D56328 (cherry picked from commit 850eb149e7ab0733fcf9469a607dca223ff467ad) M usr.sbin/mfiutil/Makefile M usr.sbin/mfiutil/mfi_drive.c ____________________________________________________________________________________________________________ Commit: 3639963148722404e92454ffdd4d795fa636a21e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3639963148722404e92454ffdd4d795fa636a21e Author: John Baldwin (Tue 14 Apr 2026 14:25:37 BST) Committer: John Baldwin (Fri 24 Apr 2026 16:49:49 BST) acpi_apm: Don't recurse on ACPI_LOCK in apmreadfilt The lock is already held by the caller since it is used as the knlist lock. PR: 293901 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293901 ) Reported by: Jiaming Zhang Fixes: cc2715cf1f86 ("acpi_apm: Narrow scope of ACPI_LOCK") (cherry picked from commit 8c941e313e3925b17e49b093244c159db7a112f8) M sys/x86/acpica/acpi_apm.c ____________________________________________________________________________________________________________ Commit: 50c4b12485fe1364148c2496ac18946779143ab6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=50c4b12485fe1364148c2496ac18946779143ab6 Author: John Baldwin (Mon 30 Mar 2026 14:38:54 BST) Committer: John Baldwin (Fri 24 Apr 2026 16:48:36 BST) acpi_apm: Narrow scope of ACPI_LOCK This lock doesn't need to be held across seldrain/knlist_destroy. It is also redundant (and a bug) to hold it across knlist_add and knlist_remove since it is the mutex for the knlist. PR: 293901 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293901 ) Reported by: Jiaming Zhang Reviewed by: markj MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55994 (cherry picked from commit cc2715cf1f864345ab175db691d4e152d5fb84af) M sys/x86/acpica/acpi_apm.c ____________________________________________________________________________________________________________ Commit: 35f8e4b961cb2a1ee5b04f8ce14b340b80e57395 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=35f8e4b961cb2a1ee5b04f8ce14b340b80e57395 Author: Michael Tuexen (Fri 30 Jan 2026 09:58:57 GMT) Committer: Michael Tuexen (Fri 24 Apr 2026 12:23:54 BST) dpaa2: add support for several interface counters Add support for IFCOUNTER_IPACKETS, IFCOUNTER_OPACKETS, IFCOUNTER_OBYTES, IFCOUNTER_OMCASTS, IFCOUNTER_OERRORS, and IFCOUNTER_OQDROPS. This allows tools like systat to report the incoming and outgoing bandwidth. Reviewed by: dsl, Timo Völker Differential Revision: https://reviews.freebsd.org/D54893 (cherry picked from commit 33596d92555e5b1632fca14eb9af295e4b8f751c) M sys/dev/dpaa2/dpaa2_ni.c ____________________________________________________________________________________________________________ Commit: e820964dc7c4626a9f51f534434109418caa3acb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e820964dc7c4626a9f51f534434109418caa3acb Author: Michael Tuexen (Fri 23 Jan 2026 07:59:57 GMT) Committer: Michael Tuexen (Fri 24 Apr 2026 12:17:23 BST) dpnaa2: announce transmit checksum support Let the network stack know that the NIC supports checksum offloading for the IPv4 header checksum and the TCP and UDP transport checksum. This avoids the computation in software and therefore provides the expected performance gain. PR: 292006 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292006 ) Reviewed by: dsl, Timo Völker Differential Revision: https://reviews.freebsd.org/D54809 (cherry picked from commit f31336b3e3146fed9cc517fef8e877c17496f9e0) M sys/dev/dpaa2/dpaa2_ni.c ____________________________________________________________________________________________________________ Commit: 074f7743a9aba904db96a866ed9ac87936ac09f4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=074f7743a9aba904db96a866ed9ac87936ac09f4 Author: Michael Tuexen (Wed 21 Jan 2026 07:16:46 GMT) Committer: Michael Tuexen (Fri 24 Apr 2026 12:09:54 BST) dpaa2: cleanup No functional change intended. Reviewed by: bz, dsl Differential Revision: https://reviews.freebsd.org/D54805 (cherry picked from commit d8b8dc776b7ce28bff8939dd185b4d6554b5e351) M sys/dev/dpaa2/dpaa2_ni.c ____________________________________________________________________________________________________________ Commit: 94d944048226a5dac1585a791d9cb5ccb75ee5b4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=94d944048226a5dac1585a791d9cb5ccb75ee5b4 Author: Cy Schubert (Fri 17 Apr 2026 05:05:59 BST) Committer: Cy Schubert (Fri 24 Apr 2026 05:46:49 BST) ippool(5): Correct example in man page The example provided puts the semicolon in the wrong place. It must come after the file:// specification, not in it. (cherry picked from commit f5d0b30e4af1163bdc18a893b17236517b67790a) M sbin/ipf/ippool/ippool.5 ____________________________________________________________________________________________________________ Commit: 2d2f92194f0776c89afcbc1244fcc8e1de69107e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2d2f92194f0776c89afcbc1244fcc8e1de69107e Author: Christos Longros (Fri 17 Apr 2026 19:19:24 BST) Committer: Jose Luis Duran (Fri 24 Apr 2026 01:52:26 BST) ping6: treat setsockopt failures as fatal ping6 needs IPV6_RECVPKTINFO and IPV6_RECVHOPLIMIT to process incoming replies. When these options fail, replies are silently dropped and ping6 appears to hang. Use err(3) instead of warn(3) so the user gets a clear error and immediate exit. Signed-off-by: Christos Longros Reviewed by: pouria, jlduran, glebius MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56237 (cherry picked from commit 9a4a9f623bbaf991b3ba580593d47f2ee9f7b03b) M sbin/ping/ping6.c ____________________________________________________________________________________________________________ Commit: 2ddefc8259ef386bd0c58460e7c44aae93839cfd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2ddefc8259ef386bd0c58460e7c44aae93839cfd Author: Konstantin Belousov (Fri 17 Apr 2026 00:07:43 BST) Committer: Konstantin Belousov (Thu 23 Apr 2026 18:09:46 BST) rtld: fix processing of preloaded z_initfirst objects (cherry picked from commit 9b844b495e8e63439ffe523757ac7444a16317af) M libexec/rtld-elf/rtld.c ____________________________________________________________________________________________________________ Commit: ff11ae166cd9f8ae16a5c384d46aa1218f3ff013 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ff11ae166cd9f8ae16a5c384d46aa1218f3ff013 Author: Kyle Evans (Mon 20 Apr 2026 21:18:17 BST) Committer: Kyle Evans (Thu 23 Apr 2026 14:49:23 BST) amd64: fix INVLPGB range invalidation AMD64 Architecture Programmer's Manual Volume 3 says the following: > ECX[15:0] contains a count of the number of sequential pages to > invalidate in addition to the original virtual address, starting from > the virtual address specified in rAX. A count of 0 invalidates a > single page. ECX[31]=0 indicates to increment the virtual address at > the 4K boundary. ECX[31]=1 indicates to increment the virtual address > at the 2M boundary. The maximum count supported is reported in > CPUID function 8000_0008h, EDX[15:0]. ECX[31] being what we call INVLPGB_2M_CNT, signaling to increment the VA by 2M. > This instruction invalidates the TLB entry or entries, regardless of > the page size (4 Kbytes, 2 Mbytes, 4 Mbytes, or 1 Gbyte). [...] Combined with this, my interpretation of the current code is: if is aligned on a PDE boundary, we'll use INVLPGB_2M_CNT to try and invalidate PDEs with a single call, but that only works if is the start of at least 2M pages. Otherwise, if or any of the subsequent PDEs isn't actually a superpage, then we would actually only invalidate the *first* page within the PDE before skipping to the next PDE, leaving the remainder of the 4K pages in between as they were. The implication would seem to be that we would need to inspect the range that we're trying to invalidate if we're planning on using INVLPGB_2M_CNT at all, so this patch just simplifies it to a series of 4K invalidations. My gut feeling is that we likely still come out on top vs. the TLB shootdown we're avoiding. This seems to explain some issues we've seen lately with fdgrowtable() and kqueue on recent Zen4/Zen5 EPYC hardware, where we'd experience corruption that we can't explain. PR: 293382 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293382 ) Reviewed by: alc, kib, markj (cherry picked from commit 1b8e5c02f5c07521129e06ff8ab7c660238fd75c) M sys/amd64/amd64/mp_machdep.c ____________________________________________________________________________________________________________ Commit: 2e83ec426ee29850efd23f2a0c54dd811d89aa36 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2e83ec426ee29850efd23f2a0c54dd811d89aa36 Author: Dag-Erling Smørgrav (Sat 18 Apr 2026 09:25:35 BST) Committer: Martin Matuska (Thu 23 Apr 2026 10:44:20 BST) libarchive: Staticize some variables This code was not being built due to errors in our libarchive configuration. Now that those have been addressed, staticize some variables that trip a “no previous extern declaration” error. This is a subset of upstream PR 2962. MFC after: 1 week Reviewed by: mm Differential Revision: https://reviews.freebsd.org/D56471 (cherry picked from commit 7e9d974bc023755161742f66c8c77546bab88586) M contrib/libarchive/test_utils/test_main.c ____________________________________________________________________________________________________________ Commit: d763fce2ec97c1654d38fe9ea5e718030cc1fbc0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d763fce2ec97c1654d38fe9ea5e718030cc1fbc0 Author: Dag-Erling Smørgrav (Sat 18 Apr 2026 09:25:31 BST) Committer: Martin Matuska (Thu 23 Apr 2026 10:44:14 BST) libarchive: Update configuration PR: 294577 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294577 ) MFC after: 1 week Reviewed by: mm Differential Revision: https://reviews.freebsd.org/D56468 (cherry picked from commit 05bbe5e3883492dd2afa52039da1fac45c5059a0) M lib/libarchive/config_freebsd.h ____________________________________________________________________________________________________________ Commit: 2dddbb67c6a15317df549538be286e908d11de98 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2dddbb67c6a15317df549538be286e908d11de98 Author: Martin Matuska (Mon 13 Apr 2026 14:47:17 BST) Committer: Martin Matuska (Thu 23 Apr 2026 10:44:04 BST) libarchive: merge from vendor branch libarchive 3.8.7 Important bugfixes: #2871 libarchive: fix handling of option failures #2897 iso9660: fix undefined behavior #2898 RAR: fix LZSS window size mismatch after PPMd block #2900 CAB: fix NULL pointer dereference during skip #2911 libarchive: do not continue with truncated numbers #2919 CAB: Fix Heap OOB Write in CAB LZX decoder #2934 iso9660: fix posibble heap buffer overflow on 32-bit systems #2939 cpio: Fix -R memory leak #2947 libarchive: lzop and grzip filter support Important bugfixes between 3.8.5 and 3.8.6: #2860 bsdunzip: fix ISO week year and Gregorian year confusion #2864 7zip: ix SEGV in check_7zip_header_in_sfx via ELF offset validation #2875 7zip: fix out-of-bounds access on ELF 64-bit header #2877 RAR5 reader: fix infinite loop in rar5 decompression #2878 mtree reader: Fix file descriptor leak in mtree parser cleanup (CWE-775) #2892 RAR5 reader: fix potential memory leak #2893 RAR5: fix SIGSEGV when archive_read_support_format_rar5 is called twice #2895 CAB reader: fix memory leak on repeated calls to archive_read_support_format_cab Obtained from: libarchive Vendor commit: ded82291ab41d5e355831b96b0e1ff49e24d8939 MFC after: 1 week (cherry picked from commit eb5165bb491138f60d9004bc4c781490016d9288) M contrib/libarchive/NEWS M contrib/libarchive/README.md M contrib/libarchive/cpio/cmdline.c M contrib/libarchive/cpio/cpio.c M contrib/libarchive/cpio/cpio.h M contrib/libarchive/cpio/test/test_format_newc.c M contrib/libarchive/libarchive/archive.h M contrib/libarchive/libarchive/archive_acl.c M contrib/libarchive/libarchive/archive_check_magic.c M contrib/libarchive/libarchive/archive_cryptor_private.h M contrib/libarchive/libarchive/archive_entry.h M contrib/libarchive/libarchive/archive_hmac.c M contrib/libarchive/libarchive/archive_options.c M contrib/libarchive/libarchive/archive_pathmatch.c M contrib/libarchive/libarchive/archive_ppmd8.c M contrib/libarchive/libarchive/archive_ppmd8_private.h M contrib/libarchive/libarchive/archive_read.c M contrib/libarchive/libarchive/archive_read_append_filter.c M contrib/libarchive/libarchive/archive_read_disk_posix.c M contrib/libarchive/libarchive/archive_read_open_filename.c M contrib/libarchive/libarchive/archive_read_support_filter_grzip.c M contrib/libarchive/libarchive/archive_read_support_filter_lz4.c M contrib/libarchive/libarchive/archive_read_support_filter_lzop.c M contrib/libarchive/libarchive/archive_read_support_filter_program.c M contrib/libarchive/libarchive/archive_read_support_format_7zip.c M contrib/libarchive/libarchive/archive_read_support_format_cab.c M contrib/libarchive/libarchive/archive_read_support_format_cpio.c M contrib/libarchive/libarchive/archive_read_support_format_iso9660.c M contrib/libarchive/libarchive/archive_read_support_format_lha.c M contrib/libarchive/libarchive/archive_read_support_format_mtree.c M contrib/libarchive/libarchive/archive_read_support_format_rar.c M contrib/libarchive/libarchive/archive_read_support_format_rar5.c M contrib/libarchive/libarchive/archive_read_support_format_tar.c M contrib/libarchive/libarchive/archive_read_support_format_xar.c M contrib/libarchive/libarchive/archive_read_support_format_zip.c M contrib/libarchive/libarchive/archive_string.c M contrib/libarchive/libarchive/archive_write.c M contrib/libarchive/libarchive/archive_write_add_filter_b64encode.c M contrib/libarchive/libarchive/archive_write_add_filter_bzip2.c M contrib/libarchive/libarchive/archive_write_add_filter_gzip.c M contrib/libarchive/libarchive/archive_write_add_filter_lrzip.c M contrib/libarchive/libarchive/archive_write_add_filter_lz4.c M contrib/libarchive/libarchive/archive_write_add_filter_lzop.c M contrib/libarchive/libarchive/archive_write_add_filter_uuencode.c M contrib/libarchive/libarchive/archive_write_add_filter_xz.c M contrib/libarchive/libarchive/archive_write_add_filter_zstd.c M contrib/libarchive/libarchive/archive_write_disk_posix.c M contrib/libarchive/libarchive/archive_write_set_format_7zip.c M contrib/libarchive/libarchive/archive_write_set_format_cpio_binary.c M contrib/libarchive/libarchive/archive_write_set_format_cpio_newc.c M contrib/libarchive/libarchive/archive_write_set_format_cpio_odc.c M contrib/libarchive/libarchive/archive_write_set_format_gnutar.c M contrib/libarchive/libarchive/archive_write_set_format_iso9660.c M contrib/libarchive/libarchive/archive_write_set_format_mtree.c M contrib/libarchive/libarchive/archive_write_set_format_pax.c M contrib/libarchive/libarchive/archive_write_set_format_ustar.c M contrib/libarchive/libarchive/archive_write_set_format_v7tar.c M contrib/libarchive/libarchive/archive_write_set_format_xar.c M contrib/libarchive/libarchive/archive_write_set_format_zip.c M contrib/libarchive/libarchive/test/test_acl_text.c M contrib/libarchive/libarchive/test/test_archive_pathmatch.c M contrib/libarchive/libarchive/test/test_archive_string_conversion.c M contrib/libarchive/libarchive/test/test_gnutar_filename_encoding.c M contrib/libarchive/libarchive/test/test_read_format_7zip.c M contrib/libarchive/libarchive/test/test_read_format_7zip_malformed.c A contrib/libarchive/libarchive/test/test_read_format_7zip_malformed3.7z.uu A contrib/libarchive/libarchive/test/test_read_format_7zip_sfx_elf64trunc.elf.uu A contrib/libarchive/libarchive/test/test_read_format_cab_lzx_oob.c A contrib/libarchive/libarchive/test/test_read_format_cab_lzx_oob.cab.uu A contrib/libarchive/libarchive/test/test_read_format_cab_skip_malformed.c A contrib/libarchive/libarchive/test/test_read_format_cab_skip_malformed.cab.uu A contrib/libarchive/libarchive/test/test_read_format_iso_zisofs_overflow.c A contrib/libarchive/libarchive/test/test_read_format_iso_zisofs_overflow.iso.uu A contrib/libarchive/libarchive/test/test_read_format_lha_oversize_header.c A contrib/libarchive/libarchive/test/test_read_format_lha_oversize_header.lzh.uu A contrib/libarchive/libarchive/test/test_read_format_rar5_loop_bug.c A contrib/libarchive/libarchive/test/test_read_format_rar5_loop_bug.rar.uu M contrib/libarchive/libarchive/test/test_read_set_format.c M contrib/libarchive/libarchive/test/test_ustar_filename_encoding.c A contrib/libarchive/libarchive/test/test_v7tar_filename_encoding.c M contrib/libarchive/libarchive/test/test_warn_missing_hardlink_target.c M contrib/libarchive/libarchive/test/test_write_disk.c M contrib/libarchive/libarchive/test/test_write_disk_perms.c M contrib/libarchive/libarchive/test/test_zip_filename_encoding.c R085 contrib/libarchive/unzip/la_getline.c contrib/libarchive/libarchive_fe/lafe_getline.c R052 contrib/libarchive/unzip/la_getline.h contrib/libarchive/libarchive_fe/lafe_getline.h M contrib/libarchive/tar/bsdtar.c M contrib/libarchive/tar/read.c M contrib/libarchive/tar/util.c M contrib/libarchive/tar/write.c M contrib/libarchive/test_utils/test_common.h M contrib/libarchive/test_utils/test_main.c M contrib/libarchive/unzip/bsdunzip.c M lib/libarchive/tests/Makefile M usr.bin/unzip/Makefile ____________________________________________________________________________________________________________ Commit: 6260b7d09a0c52a823caab4cfabc61ff5503bd11 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6260b7d09a0c52a823caab4cfabc61ff5503bd11 Author: Kyle Evans (Sat 26 Jul 2025 04:13:43 BST) Committer: Kyle Evans (Thu 23 Apr 2026 04:27:47 BST) jls: add a -c mode to check for a jail's existence This is intended to be primarily used in scripts that want to check if a jail exists before taking some action -- for instance, the jail(8) test cleanup functions that want to remove the jail if it still exists. Having a mode that limits its output for their usage is useful both for cleaner scripts and also to avoid masking real problems. Reviewed by: jamie (cherry picked from commit 1d8590371049bb14a6410fa83cd03d9eca32f764) M usr.sbin/jls/jls.8 M usr.sbin/jls/jls.c ____________________________________________________________________________________________________________ Commit: 0985637687dea7edcb58f76c065271a5036927a9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0985637687dea7edcb58f76c065271a5036927a9 Author: Kyle Evans (Sat 26 Jul 2025 04:13:41 BST) Committer: Kyle Evans (Thu 23 Apr 2026 04:27:35 BST) jls: minor simplification to arg handling It's easier to reason about the state of argc/argv if we just augment them by optind after our getopt() loop. No functional change, but this sets the stage for another change to add a `-c` mode to (c)heck for the existence of a jail quietly without the caller having to worry about spurious output. Reviewed by: jamie (cherry picked from commit dbaaadd4373a725950ad11e578dab61537b7c4f2) M usr.sbin/jls/jls.c ____________________________________________________________________________________________________________ Commit: a3af06dd953b0a845125d7caa1e10f10f740821c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a3af06dd953b0a845125d7caa1e10f10f740821c Author: Yan-Hao Wang (Sat 12 Oct 2024 16:14:00 BST) Committer: Kyle Evans (Thu 23 Apr 2026 04:27:17 BST) jls(8): Complete libxo transition Reviewed by: des (cherry picked from commit 20bb77c4b91837837dbccc40c9cc90eb43026131) M usr.sbin/jls/jls.c ____________________________________________________________________________________________________________ Commit: c84d08abf732deacf082c228c5dbba2bd37ccae3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c84d08abf732deacf082c228c5dbba2bd37ccae3 Author: Gleb Smirnoff (Fri 13 Mar 2026 20:21:26 GMT) Committer: Kyle Evans (Thu 23 Apr 2026 04:23:13 BST) jail: fix crash with startup commands on a jail without name Jail name is optional, thus don't try setenv(NULL). Fixes: d8f021add40c321c4578da55dae52fb93c7ccb5f (cherry picked from commit 78c4f821f43d530ba1f2a6308a64a8483208ebe3) M usr.sbin/jail/command.c ____________________________________________________________________________________________________________ Commit: 1a4e4e0d19f5e31b94f5772c33f1edcc3a91d146 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1a4e4e0d19f5e31b94f5772c33f1edcc3a91d146 Author: Kyle Evans (Sat 16 Aug 2025 18:39:47 BST) Committer: Kyle Evans (Thu 23 Apr 2026 04:23:08 BST) jail: fix backfilling the "name" for jid-named jails Using the cfparam variant of add_param() will actually copy the name and flags from the passed-in param, which I hadn't considered. We actually want the name/flags from the "name" param so that we can do variable expansion against it right after that -- otherwise it cannot be found, since variable expansion actually searches by name. While we're here, `jls -e` was the intermediate name for `jls -c` that never saw the light of the day. Fix our existence test. Reviewed by: jamie Fixes: 02944d8c49 ("jail: consistently populate the KP_JID [...]") (cherry picked from commit b81fd3fc8b20eaad64b5c41826432124fd92d6a7) M usr.sbin/jail/config.c M usr.sbin/jail/tests/jail_basic_test.sh ____________________________________________________________________________________________________________ Commit: df670d26ad5bebce71f39fc3bdc3ef11ed0f1ea8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=df670d26ad5bebce71f39fc3bdc3ef11ed0f1ea8 Author: Kyle Evans (Sat 26 Jul 2025 04:13:44 BST) Committer: Kyle Evans (Thu 23 Apr 2026 04:22:59 BST) jail: consistently populate the KP_JID and KP_NAME parameters The gaps here, specifically, were: - When we have to discover a running jail's jid from name, we should populate the missing jid param - When we populate jid/name from the config, if the name is a jid we wouldn't populate the name; now we do both. - When we create a jail, we should populate jid and name with whatever details we have now that we didn't both. As a consequence, we can cleanup a few things: - vnet.interface and zfs.dataset can just always use the jid - Trying to populate JNAME should always work now, where it would be a little crashy before if you create a jail that didn't have a name or jid on the command line - We can simplify the just-prior JID population now that we'll keep a stringified jid in our intparams. This primarily fixes the below, but the issues with vnet.interface and zfs.dataset were pre-existing. Fixes: d8f021add40c3 ("jail: add JID, JNAME and JPATH to env [...]") Reviewed by: jamie (cherry picked from commit 02944d8c4969ffe97fcf84cb2ccb672e828c1d04) M usr.sbin/jail/command.c M usr.sbin/jail/config.c M usr.sbin/jail/jail.c M usr.sbin/jail/tests/jail_basic_test.sh ____________________________________________________________________________________________________________ Commit: 28b8f26beff93c8fdd75b8fa29224938a62b173f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=28b8f26beff93c8fdd75b8fa29224938a62b173f Author: Kyle Evans (Sat 26 Jul 2025 04:13:40 BST) Committer: Kyle Evans (Thu 23 Apr 2026 04:21:43 BST) jail: tests: cleanup the commands test a bit We shouldn't be doing setup in a head() function, as this can cause various problems. For instance, in this case, it caused test listing to fail in some cases if we didn't get to execute the cleanup properly by complaining to stderr if the directory could not be created. Switch to using atf_check for sanity checking stdout; most of these expressions are self-explanatory and will make it clear what the problem is. commands.jail.conf contains a hard-coded path that we can avoid, which is probably good to avoid weird conflicts if other tests try to copy it and do the same. Just make a copy of our jail.conf and add the test's $PWD to it to get a generally unique jail root. Finally, simplify the cleanup handler a bit. Reviewed by: jamie (cherry picked from commit cfc595f4a05ed6fc690b17adee967e652b8636b3) M usr.sbin/jail/tests/commands.jail.conf M usr.sbin/jail/tests/jail_basic_test.sh ____________________________________________________________________________________________________________ Commit: eefbf748bfdac188ef5e92fc0f79d62333473fd7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=eefbf748bfdac188ef5e92fc0f79d62333473fd7 Author: Quentin Thébault (Wed 5 Mar 2025 09:51:06 GMT) Committer: Kyle Evans (Thu 23 Apr 2026 04:21:38 BST) jail: add JID, JNAME and JPATH to environment for exec.* commands Although variable substitution is available in the jail configuration file, the jail identifier is often not since it is dynamically attributed at run time. In order to facilitate scripting of exec.* commands executed on the system, this change sets the JID, JNAME and JPATH environment variables. These variables are not added when using exec.clean. Neither are they for commands executed inside jails, to avoid disclosing information about the host system. Reviewed by: imp (cherry picked from commit d8f021add40c321c4578da55dae52fb93c7ccb5f) M usr.sbin/jail/command.c M usr.sbin/jail/jail.8 M usr.sbin/jail/tests/commands.jail.conf M usr.sbin/jail/tests/jail_basic_test.sh ____________________________________________________________________________________________________________ Commit: 8fe3978146d5b694693bfabd4d72ba02f44eccab URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8fe3978146d5b694693bfabd4d72ba02f44eccab Author: Mark Johnston (Wed 15 Apr 2026 14:33:04 BST) Committer: Mark Johnston (Wed 22 Apr 2026 13:37:34 BST) linuxkpi: Fix an off-by-one error in the kfifo implementation "total" is the number of slots in the array, so wraparound needs to be done when "first" or "last" is greater than or equal to the number of slots. Note that no consumers of the code are currently connected to the kernel build. Reported by: Stanislav Fort Reviewed by: bz, emaste MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56371 (cherry picked from commit 52d2fc702b85d56b35f8828fe7efca3cde0d25b7) M sys/compat/linuxkpi/common/include/linux/kfifo.h ____________________________________________________________________________________________________________ Commit: 12e61434db0792f58bb91f3f4ac28b411513ffae URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=12e61434db0792f58bb91f3f4ac28b411513ffae Author: Mark Johnston (Thu 16 Apr 2026 20:57:57 BST) Committer: Mark Johnston (Wed 22 Apr 2026 13:37:32 BST) in_mcast: Fix a lock leak in inp_set_source_filters() MFC after: 3 days Reported by: Claude Opus 4.6 (cherry picked from commit bebc1a5b09e358b420077a1b5c0f85f8e7f0812f) M sys/netinet/in_mcast.c ____________________________________________________________________________________________________________ Commit: 5131d206877c7926cc8c887d8d91e2dbb65ca1e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5131d206877c7926cc8c887d8d91e2dbb65ca1e5 Author: Michael Osipov (Tue 14 Apr 2026 09:38:59 BST) Committer: Michael Osipov (Wed 22 Apr 2026 10:31:41 BST) glabel(8): Fix debug message for already existing labels Remove the duplicate (incorrect) name. PR: 294542 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294542 ) Reviewed by: markj MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56400 (cherry picked from commit 92c69c791c436eb966fab806393b70e53cde6874) M sys/geom/label/g_label.c ____________________________________________________________________________________________________________ Commit: 5f7148131efc423e09270d93d6f2e36d53b2b293 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5f7148131efc423e09270d93d6f2e36d53b2b293 Author: Gordon Bergling (Sun 19 Apr 2026 09:08:56 BST) Committer: Gordon Bergling (Wed 22 Apr 2026 10:23:33 BST) rpcsec_gss(3): Fix a typo in a source code comment - s/verfier/verifier/ (cherry picked from commit 6323e2be6102e2a152b4420db272f7e880017cf0) M sys/rpc/rpcsec_gss/rpcsec_gss.c ____________________________________________________________________________________________________________ Commit: 3911c2a18aa3cd89732ac1764b9f90f58f23c965 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3911c2a18aa3cd89732ac1764b9f90f58f23c965 Author: Gordon Bergling (Sun 19 Apr 2026 09:06:45 BST) Committer: Gordon Bergling (Wed 22 Apr 2026 10:23:21 BST) msdosfs(4): Fix two typos in source code comments - s/unititialized/uninitialized/ (cherry picked from commit 96246330c1c47ea06b7e781ddd87de45d541494f) M sys/fs/msdosfs/msdosfs_fat.c ____________________________________________________________________________________________________________ Commit: 393ac01945b90183225ccc4bf274008ef6aa5eed URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=393ac01945b90183225ccc4bf274008ef6aa5eed Author: Gordon Bergling (Sun 19 Apr 2026 09:01:18 BST) Committer: Gordon Bergling (Wed 22 Apr 2026 10:23:07 BST) stand/powerpc: Fix a typo in a source code comment - s/limitiations/limitations/ (cherry picked from commit 4177af3b0e2db36238bbd6f973943f830d1ff46f) M stand/powerpc/boot1.chrp/Makefile ____________________________________________________________________________________________________________ Commit: 4b73f0ac8d441ca922b366414be146d46bc2649e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4b73f0ac8d441ca922b366414be146d46bc2649e Author: Gordon Bergling (Sun 19 Apr 2026 08:57:03 BST) Committer: Gordon Bergling (Wed 22 Apr 2026 10:22:57 BST) librpcsec_gss: Fix a typo in a source code comment - s/verfier/verifier/ (cherry picked from commit 59dacd7f008f54a335ec49e747bb8ddac67b0a83) M lib/librpcsec_gss/rpcsec_gss.c ____________________________________________________________________________________________________________ Commit: 10ed7115165eb967b65231d447db52cfce1fb872 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=10ed7115165eb967b65231d447db52cfce1fb872 Author: Dag-Erling Smørgrav (Sat 18 Apr 2026 13:48:04 BST) Committer: Dag-Erling Smørgrav (Wed 22 Apr 2026 09:20:53 BST) du: Set BLOCKSIZE before running tests Several testcases assume BLOCKSIZE=K, so set it at the top of the script. This fixes an issue where the tests would sometimes fail when run under sudo. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D56476 (cherry picked from commit d618ba314d1452c1cb4360e15ae1c80adac48306) M usr.bin/du/tests/du_test.sh ____________________________________________________________________________________________________________ Commit: a1f848a8d9b8f4efdfdf9be47804ac0662ab6372 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a1f848a8d9b8f4efdfdf9be47804ac0662ab6372 Author: Dag-Erling Smørgrav (Wed 15 Apr 2026 15:50:32 BST) Committer: Dag-Erling Smørgrav (Wed 22 Apr 2026 09:20:53 BST) du: Fix t_flag test case MFC after: 1 week Fixes: 3e5550d25c6d ("du: Add regression tests") Sponsored by: Klara, Inc. (cherry picked from commit e99b3f5e318626b45510e29993aabca1d161bfa0) M usr.bin/du/tests/du_test.sh ____________________________________________________________________________________________________________ Commit: e27255a7f9e45dab9935b916d759498a093e36e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e27255a7f9e45dab9935b916d759498a093e36e5 Author: Dmitry Salychev (Mon 13 Apr 2026 13:46:49 BST) Committer: Dmitry Salychev (Wed 22 Apr 2026 09:13:07 BST) dpaa2: Extract checksum statuses on ingress In order to enable RX checksum offloading we need to check the meta-information for the (good) frames to see if the L3/4 checksums were calculated and if there was an error. The way the buffere are setup, the needed frame meta-information is already requested. All we have to do is make sure it is really part of the RX frame, that it is valid, and if the respective bits are set. Also do not forget to set the (dummy) csum_data as otherwise upper layers will just be cranky. An artefact of the past which likely should disappear. PR: 292006 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292006 ) Reviewed by: bz, tuexen Tested by: bz, tuexen Approved by: tuexen Obtained from: bz (initial version, D55320) MFC after: 3 days Sponsored by: Traverse Technologies (providing Ten64 HW for testing) Differential Revision: https://reviews.freebsd.org/D56383 (cherry picked from commit 4a6d7fc1a00b69925b3edc39acef0391487a8e3e) M sys/dev/dpaa2/dpaa2_frame.c M sys/dev/dpaa2/dpaa2_frame.h M sys/dev/dpaa2/dpaa2_ni.c M sys/dev/dpaa2/dpaa2_ni.h ____________________________________________________________________________________________________________ Commit: 2b3799b6608e27e91a123c784c6c88b191892fcc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2b3799b6608e27e91a123c784c6c88b191892fcc Author: Dmitry Salychev (Sun 25 Jan 2026 16:53:57 GMT) Committer: Dmitry Salychev (Wed 22 Apr 2026 09:12:57 BST) dpaa2: Extract frame-specific routines to dpaa2_frame.[h,c] As soon as we need information from the hardware frame annotation to make sure that checksums of the ingress frames were verified by the DPAA2 HW, I've decided to make a preparation and extracted all of the frame related routines into the separate dpaa2_frame.[h,c] along with some clean up and improvements, e.g. no more dpaa2_fa, but dpaa2_swa and dpaa2_hwa structures to describe software and hardware frame annotations respectively, dpaa2_fa_get_swa/dpaa2_fa_get_hwa to obtain those annotations from the frame descriptor. The next step is to implement dpaa2_fa_get_hwa. PR: 292006 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292006 ) Approved by: tuexen MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56315 (cherry picked from commit 8e994533806d8aa0ae4582a52d811ede2b19bb26) M sys/conf/files.arm64 M sys/dev/dpaa2/dpaa2_buf.c M sys/dev/dpaa2/dpaa2_buf.h A sys/dev/dpaa2/dpaa2_frame.c A sys/dev/dpaa2/dpaa2_frame.h M sys/dev/dpaa2/dpaa2_ni.c M sys/dev/dpaa2/dpaa2_ni.h M sys/dev/dpaa2/dpaa2_swp.h M sys/dev/dpaa2/dpaa2_types.h M sys/modules/dpaa2/Makefile ____________________________________________________________________________________________________________ Commit: 4c0e5e3cc441cf7354d15361a0903120cdd23fd9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4c0e5e3cc441cf7354d15361a0903120cdd23fd9 Author: Mark Johnston (Tue 31 Mar 2026 14:37:43 BST) Committer: Mark Johnston (Tue 21 Apr 2026 16:43:09 BST) pkru: Fix handling of 1GB largepage mappings pmap_pkru_update_range() did not handle the case where a PDPE has PG_PS set. More generally, the SET_PKRU and CLEAR_PKRU sysarch implementations did not check whether the request covers a "boundary" vm map entry. Fix this, add the missing PG_PS test, and add some tests. Approved by: so Security: FreeBSD-SA-26:11.amd64 Security: CVE-2026-6386 Reported by: Nicholas Carlini Reviewed by: kib, alc Differential Revision: https://reviews.freebsd.org/D56184 M lib/libc/x86/sys/pkru.3 M sys/amd64/amd64/pmap.c M sys/amd64/amd64/sys_machdep.c M sys/vm/vm_map.c M sys/vm/vm_map.h M tests/sys/posixshm/posixshm_test.c ____________________________________________________________________________________________________________ Commit: f46210a7ab3227e71cd1fee16d2ede88b648a2df URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f46210a7ab3227e71cd1fee16d2ede88b648a2df Author: Mark Johnston (Mon 23 Mar 2026 15:22:48 GMT) Committer: Mark Johnston (Tue 21 Apr 2026 16:43:09 BST) tty: Avoid leaving dangling pointers in tty_drop_ctty() The TIOCNOTTY handler detaches the calling process from its controlling terminal. It clears the link from the session to the tty, but not the pointers from the tty to the session and process group. This means that sess_release() doesn't call tty_rel_sess(), and that pgdelete() doesn't call tty_rel_pgrp(), so the pointers are left dangling. Fix this by clearing pointers in tty_drop_ctty(). Add a standalone regression test. Approved by: so Security: FreeBSD-SA-26:10.tty Security: CVE-2026-5398 Reported by: Nicholas Carlini Reviewed by: kib, kevans Fixes: 1b50b999f9b5 ("tty: implement TIOCNOTTY") Differential Revision: https://reviews.freebsd.org/D56046 M sys/kern/tty.c M tests/sys/kern/tty/Makefile A tests/sys/kern/tty/tiocnotty.c ____________________________________________________________________________________________________________ Commit: 5bb741537b80369ac1d09f72e92803582a6a9ed9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5bb741537b80369ac1d09f72e92803582a6a9ed9 Author: Dimitry Andric (Tue 10 Feb 2026 14:32:52 GMT) Committer: Enji Cooper (Tue 21 Apr 2026 06:20:58 BST) mtree: stop creating /usr/share/doc/ncurses In base 68ad2b0d7af2a the ncurses html documentation was removed, and entries added to ObsoleteFiles.inc to get rid of /usr/share/doc/ncurses, but the directory was still being re-created via BSD.usr.dist. Remove it from there too. Fixes: 68ad2b0d7af2a MFC after: 1 month (cherry picked from commit 212272a43767c3d7be3ddb87605612f6164774c1) M etc/mtree/BSD.usr.dist ____________________________________________________________________________________________________________ Commit: 26b162dd829885701e75b7196ef380d998faeef0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=26b162dd829885701e75b7196ef380d998faeef0 Author: Gordon Bergling (Fri 17 Apr 2026 15:59:26 BST) Committer: Gordon Bergling (Mon 20 Apr 2026 08:27:55 BST) sctp(4): Fix a typo in a source code comment - s/initited/initiated/ Obtained from: NetBSD (cherry picked from commit a154d72775cbf3f0679fb2f989b3d1a035ae41c9) M sys/netinet/sctp_structs.h ____________________________________________________________________________________________________________ Commit: f5e1bc1ca1b1b8d6c096ac65c64f69586d501200 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f5e1bc1ca1b1b8d6c096ac65c64f69586d501200 Author: Jose Luis Duran (Fri 17 Apr 2026 14:55:16 BST) Committer: Jose Luis Duran (Mon 20 Apr 2026 05:43:53 BST) rc.conf: Fix typo in comment The correct path is /etc/defaults/rc.conf (defaults in plural). Reviewed by: netchild Fixes: cc4eb1ea1040 ("Add support for a /etc/defaults/vendor.conf override file") MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56456 (cherry picked from commit 8e08080ee581dfd30c128d032035da7b6ae44463) M libexec/rc/rc.conf ____________________________________________________________________________________________________________ Commit: d1160074500d66d402951e93c35bab7dc4fc4b04 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d1160074500d66d402951e93c35bab7dc4fc4b04 Author: Yuichiro NAITO (Tue 7 Apr 2026 16:25:09 BST) Committer: Kevin Bowling (Sun 19 Apr 2026 11:41:02 BST) ixgbe: Fix MRQC register value. Focus on the MRQE field of the MRQC register, which is 4 bits wide, and we use these 3 types of values. - IXGBE_MRQC_RSSEN 0x1 (non VF mode) - IXGBE_MRQC_VMDQRSS32EN 0xA (less than 33 VFs) - IXGBE_MRQC_VMDQRSS64EN 0xB (less than 65 VFs) If we always take a bitwise OR with IXGBE_MRQC_RSSEN, IXGBE_MRQC_VMDQRSS32EN will never be chosen. Select these 3 types of values for the proper case. Signed-off-by: Yuichiro NAITO Pull Request: https://github.com/freebsd/freebsd-src/pull/2132 (cherry picked from commit 938c076b9b0bc458a3877b52535527d37199fc09) M sys/dev/ixgbe/if_ix.c M sys/dev/ixgbe/if_sriov.c M sys/dev/ixgbe/ixgbe_sriov.h ____________________________________________________________________________________________________________ Commit: 823889aaafa37ba63a6fb2c53b0dafe1373e221b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=823889aaafa37ba63a6fb2c53b0dafe1373e221b Author: Alfredo Dal'Ava Junior (Fri 17 Apr 2026 06:01:54 BST) Committer: Alfredo Dal'Ava Junior (Sat 18 Apr 2026 03:25:29 BST) us.intl.acc.kbd: add it to Makefile This keyboard was implemented but wasn't actually installed to the system. Fixes: a049678039e40bdf523230852f78887a12435def Discussed with: imp MFC after: 1 day Relnotes: yes (cherry picked from commit 3b373d484046a94d050a7901feadc001f35fa97f) M share/vt/keymaps/Makefile ____________________________________________________________________________________________________________ Commit: ca42bd490891011556a9507b10ad205f6e7e5f30 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ca42bd490891011556a9507b10ad205f6e7e5f30 Author: Alfredo Dal'Ava Junior (Fri 17 Apr 2026 04:44:46 BST) Committer: Alfredo Dal'Ava Junior (Sat 18 Apr 2026 03:25:14 BST) br.lenovo.kdb: add it to Makefile This keyboard was implemented but wasn't actually installed to the system. Fixes: 9357c694e8dca627c25b15529e8435b2ab3dd48b MFC after: 1 day Relnotes: yes (cherry picked from commit 6fb5df548e4a581f958f60544b7fa8ba1716c4c6) M share/vt/keymaps/Makefile ____________________________________________________________________________________________________________ Commit: 131a3e980004152a7c9748abe2235bbb7e07901b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=131a3e980004152a7c9748abe2235bbb7e07901b Author: Michael Osipov (Mon 6 Apr 2026 19:21:48 BST) Committer: Michael Osipov (Fri 17 Apr 2026 08:44:18 BST) ciss.4: List all devices supported by ciss(4) PR: 285744 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=285744 ) Reviewed by: ziaee MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56285 (cherry picked from commit 54f5d20492d231b5c2ddc6f1d94dbffa1707d820) M share/man/man4/ciss.4 ____________________________________________________________________________________________________________ Commit: 67a7c5f70986a24a8374146e6bcce2005e767b6d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=67a7c5f70986a24a8374146e6bcce2005e767b6d Author: Pouria Mousavizadeh Tehrani (Tue 14 Apr 2026 10:36:53 BST) Committer: Pouria Mousavizadeh Tehrani (Fri 17 Apr 2026 07:44:34 BST) routing: Fix use-after-free in finalize_nhop FIB_NH_LOG calls the `nhop_get_upper_family(nh)` to read `nh->nh_priv->nh_upper_family` for failure logging. Call FIB_NH_LOG before freeing nh so failures are logged without causing a panic. MFC after: 3 days (cherry picked from commit 7d38eb720a8d8345949986d779e785984ae19ae0) M sys/net/route/nhop_ctl.c ____________________________________________________________________________________________________________ Commit: 40dacfe45eeeec28fa62304e0e75abca90d726dd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=40dacfe45eeeec28fa62304e0e75abca90d726dd Author: Mark Johnston (Wed 1 Apr 2026 13:14:24 BST) Committer: Mark Johnston (Thu 16 Apr 2026 17:48:50 BST) rtadvd: Fix validation of the MTU parameter when parsing config MFC after: 1 week (cherry picked from commit 607f6be6ec19f49ff595226afe1c8aa6515c59a0) M usr.sbin/rtadvd/config.c ____________________________________________________________________________________________________________ Commit: 547d7095fac1395664aaa41ffae032ffe7b6a783 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=547d7095fac1395664aaa41ffae032ffe7b6a783 Author: Mark Johnston (Thu 26 Feb 2026 20:25:35 GMT) Committer: Mark Johnston (Thu 16 Apr 2026 17:48:50 BST) divert: Use a better source identifier for netisr_queue_src() calls These opaque IDs are used by netisr to distribute work among threads. The mapping function is simply SourceID % numthreads, so using socket addresses as source IDs isn't going to distribute packets well due to alignment. Use the divert socket's generation number instead, as that suits this purpose much better. Reviewed by: zlei, glebius MFC after: 1 week Sponsored by: OPNsense Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D55537 (cherry picked from commit 5547a7bb39accd8f151b53e90b41d13b55f84c95) M sys/netinet/ip_divert.c ____________________________________________________________________________________________________________ Commit: 62fbb17e0dd03ece12e3e4baad5d0c65bdbde3da URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=62fbb17e0dd03ece12e3e4baad5d0c65bdbde3da Author: Mark Johnston (Wed 8 Apr 2026 05:19:56 BST) Committer: Mark Johnston (Thu 16 Apr 2026 17:48:20 BST) imgact_elf: Unconditionally initialize a variable in a note handler In the sb == NULL case, we are computing the size of the note using a dummy sbuf drain handler which counts bytes and discards the contents of the buffer, so the fact that "structsize" is uninitialized doesn't matter. But, the compiler may complain about this, so we might as well just initialize it unconditionally to silence the warning, as other handlers already do. PR: 292811 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292811 ) MFC after: 1 week (cherry picked from commit 8a68c2509c00ae0dbeab64064bb600cfac787a73) M sys/kern/imgact_elf.c ____________________________________________________________________________________________________________ Commit: b77bd0e70d2ff3d771a53af82348cdde3f399707 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b77bd0e70d2ff3d771a53af82348cdde3f399707 Author: Weixie Cui (Tue 31 Mar 2026 11:12:32 BST) Committer: Mitchell Horne (Thu 16 Apr 2026 17:35:00 BST) freebsd32: Fix freebsd11_nstat copyout condition freebsd11_freebsd32_nstat() invoked copyout(2) when freebsd11_cvtnstat32() failed and skipped copyout on success. This is backwards. Fix this to match freebsd11_freebsd32_nlstat() and freebsd11_nstat(), and only copy the nstat32 result to userspace when conversion succeeds. Signed-off-by: Weixie Cui Reviewed by: mhorne MFC after: 1 week Pull Request: https://github.com/freebsd/freebsd-src/pull/2109 (cherry picked from commit c6224994ac70b4f71ef9e11903bb2e50ed2b1bfe) M sys/compat/freebsd32/freebsd32_misc.c ____________________________________________________________________________________________________________ Commit: 95d661225dfc032fabf9d1f7b1e885e2bd582bdc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=95d661225dfc032fabf9d1f7b1e885e2bd582bdc Author: Mitchell Horne (Tue 31 Mar 2026 20:42:55 BST) Committer: Mitchell Horne (Thu 16 Apr 2026 17:32:23 BST) malloc.9: adjust flag table indentation The current indentation is shorter than all but one of these flags. This renders much more nicely. MFC after: 3 days (cherry picked from commit be79a42275cad21c6087d8bbd6a328735ea813fa) M share/man/man9/malloc.9 ____________________________________________________________________________________________________________ Commit: 7dfe77679c0a15b2fead422b862bd85905311b8f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7dfe77679c0a15b2fead422b862bd85905311b8f Author: Colin Percival (Sun 22 Feb 2026 04:09:01 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:55 BST) Hyper-V: Detect Extended Destination ID support Hyper-V advertises support for the Extended Destination ID standard via bit 2 of the value returned in the EAX register when the hypervisor stack properties are queried via CPUID. This is based on a commit to the Linux kernel, as there does not seem to be any other documentation of this feature. Reviewed by: Souradeep Chakrabarti MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55432 (cherry picked from commit 7b6be0014a4eb81943491122bae70914b7fd82b6) M sys/dev/hyperv/vmbus/x86/hyperv_reg.h M sys/x86/x86/local_apic.c ____________________________________________________________________________________________________________ Commit: 2b82661c9792949c9cdcc32587e0e1ad37776d48 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2b82661c9792949c9cdcc32587e0e1ad37776d48 Author: Colin Percival (Sun 22 Feb 2026 04:09:00 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:55 BST) Bhyve: Detect Extended Destination ID support Bhyve advertises support for the Extended Destination ID standard via bit 0 (aka CPUID_BHYVE_FEAT_EXT_DEST_ID) of the value returned in the EAX register when Bhyve features are queried via CPUID. MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55431 (cherry picked from commit 8dd9a0d52175fbc5dafed851fb95a289a94fb6cd) M sys/x86/x86/local_apic.c ____________________________________________________________________________________________________________ Commit: 075909e9faed3cc5568a31cc049fba708e2a2d9c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=075909e9faed3cc5568a31cc049fba708e2a2d9c Author: Colin Percival (Sun 22 Feb 2026 04:09:00 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:55 BST) vmm: Move defines from x86.c to x86/bhyve.h The values CPUID_BHYVE_FEATURES and CPUID_BHYVE_FEAT_EXT_DEST_ID are useful for guests, not just hosts; so they belong in a header file in sys/x86/include rather than simply in the .c file implementing the bhyve host side. The original addition of these defines took place without adding a copyright statement, but since I'm moving them into a new file I've added the original author's standard copyright (Amazon). MFC after: 3 weeks Fixes: 313a68ea20b4 ("bhyve: Add CPUID_BHYVE_FEATURES leaf") Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55430 (cherry picked from commit 49b6254b3e09ee741f456617111ecb18803459fb) M sys/amd64/vmm/x86.c A sys/x86/include/bhyve.h ____________________________________________________________________________________________________________ Commit: ce4eff190473b582ab987dcae4ec17e5750ed5c5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ce4eff190473b582ab987dcae4ec17e5750ed5c5 Author: Colin Percival (Sun 22 Feb 2026 04:09:00 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:55 BST) Xen: Detect Extended Destination ID support Xen advertises support for the Extended Destination ID standard via bit 5 (aka XEN_HVM_CPUID_EXT_DEST_ID) of the value returned in the EAX register when Xen features are queried via CPUID. MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55429 (cherry picked from commit 9b18ba2c16a0750e6c78f348845368284ef1a704) M sys/x86/x86/local_apic.c ____________________________________________________________________________________________________________ Commit: f3490b827e051aff60930bc7596b790b24fbb7db URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f3490b827e051aff60930bc7596b790b24fbb7db Author: Roger Pau Monné (Fri 18 Feb 2022 08:17:47 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:55 BST) x86/cpuid: add CPUID flag for Extended Destination ID support Introduce the CPUID flag to be used in order to signal the support for using an extended destination ID in IO-APIC RTEs and MSI address fields. Such format expands the maximum target APIC ID from 255 to 32768 without requiring the usage of interrupt remapping. The design document describing the feature can be found at: http://david.woodhou.se/15-bit-msi.pdf Signed-off-by: Roger Pau Monné Reviewed-by: Jan Beulich (cherry picked from commit 8c986d1645312487adf21a9104d667ac1e19c25f) M sys/contrib/xen/arch-x86/cpuid.h ____________________________________________________________________________________________________________ Commit: fa4faeb0249cf224409bb844d2c814d375dc1435 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fa4faeb0249cf224409bb844d2c814d375dc1435 Author: Colin Percival (Sun 22 Feb 2026 04:09:00 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:55 BST) KVM: Detect Extended Destination ID support KVM advertises support for the Extended Destination ID standard via bit 15 of the value returned in the EAX register when KVM features are queried via CPUID. Tested on: EC2 r8i.96xlarge MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55427 (cherry picked from commit 9ab5aa3d4c7879d5518afc7587a864ba880e7ee9) M sys/x86/include/kvm.h M sys/x86/x86/local_apic.c ____________________________________________________________________________________________________________ Commit: 0ef872c9353e83bfbfe4cba15a1960fa391cb5a4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0ef872c9353e83bfbfe4cba15a1960fa391cb5a4 Author: Colin Percival (Mon 16 Mar 2026 23:45:32 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:54 BST) io_apic: Support APIC Extended Destination IDs If APIC Extended Destination ID support is enabled, use it in APIC RTEs by allowing APIC IDs up to 2^15 - 1 and encoding the high bits into Intel "reserved" bits per the standard. Reviewed by: kib MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55889 (cherry picked from commit b0e1b1069d655f12ab69cf3a1dc1904dd35ad1da) M sys/x86/include/apicvar.h M sys/x86/x86/io_apic.c ____________________________________________________________________________________________________________ Commit: 3007e4a7dd495151df4ef87792f51572cbb52c6b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3007e4a7dd495151df4ef87792f51572cbb52c6b Author: Colin Percival (Sun 22 Feb 2026 04:08:59 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:54 BST) msi: Support APIC Extended Destination IDs If APIC Extended Destination ID support is enabled, use it in MSIs by allowing APIC IDs up to 2^15 - 1 and encoding the high bits into Intel "reserved" bits per the standard. Tested on: EC2 r8i.96xlarge MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55426 (cherry picked from commit 02f29c1324cf5193c3aec181cb409917b541f7fe) M sys/x86/x86/msi.c ____________________________________________________________________________________________________________ Commit: 70be695384d917f3ce2645b383fa9db6ccf8b0ca URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=70be695384d917f3ce2645b383fa9db6ccf8b0ca Author: Colin Percival (Mon 16 Mar 2026 23:37:04 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:54 BST) x86: Add stub for Extended Destination ID support Without an IOMMU, the APIC standard only allows 8 bits of Destination ID for MSI messages, limiting us to 256 CPUs. While IOMMUs can allow for more than 256 CPUs to be supported, they are not necessarily desirable in virtualized environments. The Extended Destination ID standard authored by David Woodhouse uses 7 "Reserved" bits for the high bits of a 15-bit Extended Destination ID in order to address this: http://david.woodhou.se/ExtDestId.pdf Add a loader tunable machdep.apic_ext_dest_id to control the use of this feature; the default value (-1) means "autodetect" while 0 and 1 mean disabled and enabled respectively. Code to detect host support in Xen, Hyper-V, KVM, and Bhyve will come in future commits, as will the code to use this setting in msi_map and ioapic_program_intpin. Tested on: EC2 r8i.96xlarge MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55890 (cherry picked from commit d9db6d759dfcf4a4559e66e777599bb3fa8ca14c) M sys/x86/include/apicvar.h M sys/x86/x86/local_apic.c ____________________________________________________________________________________________________________ Commit: 693ee9fca3bf915a2b82d3da751bcbeaf489094e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=693ee9fca3bf915a2b82d3da751bcbeaf489094e Author: Colin Percival (Sat 14 Mar 2026 05:51:04 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:54 BST) io_apic: Don't route to APIC ID > 255 I/O APIC Redirection Table Entries use 8 bits to encode the Destination ID. Attempting to route an IRQ to a higher APIC ID would result in it being silently routed to the value reduced modulo 256, causing a panic if the IRQ fired since the receiving CPU would not expect that IRQ. Instead, print a warning and mark the interrupt as invalid, resulting in it being forcibly masked. Reviewed by: kib Tested on: EC2 r8i.96xlarge MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55857 (cherry picked from commit 5809c9a77b2d3b83c056ba3ac5ba4e261c0af595) M sys/x86/x86/io_apic.c ____________________________________________________________________________________________________________ Commit: b75a566d1fa800d8307a7faa50ec22c2a93145bf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b75a566d1fa800d8307a7faa50ec22c2a93145bf Author: Colin Percival (Fri 20 Mar 2026 22:02:29 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:54 BST) x86: Add struct ioapic_intsrc.io_valid As of this commit, io_valid is always set to 1; but a future commit will set it to 0, at which point IOART_INTMSET will be set to forcibly disable interrupt sources regardless of whether they are requested to be "masked". Reviewed by: kib MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D56006 (cherry picked from commit 1d0ccd61563d48e914dccf3dd5cf0280d8331ec1) M sys/x86/x86/io_apic.c ____________________________________________________________________________________________________________ Commit: a25f78eafe472cb161d1405f63ad8c4491416a6b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a25f78eafe472cb161d1405f63ad8c4491416a6b Author: Colin Percival (Sat 14 Mar 2026 01:03:44 GMT) Committer: Colin Percival (Thu 16 Apr 2026 16:11:54 BST) clapic_handle_intr: KASSERT isrc != NULL If an interrupt arrives at a CPU which isn't expecting that particular vector, intr_lookup_source will return an isrc of NULL and we'll panic when intr_execute_handlers increments *isrc->is_count. Place a KASSERT a few nanoseconds earlier in order to leave some more breadcrumbs for the next person to trip over this behaviour. Tested on: EC2 r8i.96xlarge MFC after: 3 weeks Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55851 (cherry picked from commit f350063a251c9da0c5ce437eb4c44a2d716b673e) M sys/x86/x86/local_apic.c ____________________________________________________________________________________________________________ Commit: e77e112a3e2084918befee20645e6dcc81dea07b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e77e112a3e2084918befee20645e6dcc81dea07b Author: David Woodhouse (Thu 31 Jul 2025 08:33:54 BST) Committer: Colin Percival (Thu 16 Apr 2026 16:11:41 BST) bhyve: Support and advertise 15-bit MSI Extended Destination ID To support guests with more than 255 vCPUs, allow bits 5-11 of the MSI address to be used as additional destination ID bits. This is compatible with Hyper-V, KVM and Xen's implementation of the same enlightenment, as documented at http://david.woodhou.se/ExtDestId.pdf Reviewed by: kib Pull Request: https://github.com/freebsd/freebsd-src/pull/1797 Signed-off-by: David Woodhouse (cherry picked from commit 4322d597453d63d638675b8612d7aaabd65dcadd) M sys/amd64/vmm/io/vioapic.c M sys/amd64/vmm/vmm_lapic.c M sys/amd64/vmm/x86.c M sys/x86/include/apicreg.h ____________________________________________________________________________________________________________ Commit: 020a2480f55303f757e9683d05213ae3266e7831 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=020a2480f55303f757e9683d05213ae3266e7831 Author: David Woodhouse (Mon 11 Aug 2025 11:44:05 BST) Committer: Colin Percival (Thu 16 Apr 2026 16:11:41 BST) bhyve: Add CPUID_BHYVE_FEATURES leaf This allows the hypervisor to advertise features to the guest. The first such feature is CPUID_BHYVE_EXT_DEST_ID which advertises that 15 bits of target APIC ID are available in MSI (and I/O APIC) interrupts, as documented in http://david.woodhou.se/ExtDestId.pdf This defines the guest ABI. The actual implementation will come in a subsequent commit. Reviewed by: kib Pull Request: https://github.com/freebsd/freebsd-src/pull/1797 Signed-off-by: David Woodhouse (cherry picked from commit 313a68ea20b48629f655cf38987f4a6ff822f1ab) M sys/amd64/vmm/x86.c ____________________________________________________________________________________________________________ Commit: d51d91780b61180fbeae406a29e9a02ec74d56df URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d51d91780b61180fbeae406a29e9a02ec74d56df Author: Lexi Winter (Mon 6 Apr 2026 18:11:22 BST) Committer: Lexi Winter (Thu 16 Apr 2026 00:27:05 BST) packages: Fix build with libucl 0.9.3 In libucl 0.9.3, macros and includes are disabled by default when creating a new UCL parser. This breaks the package build, which relies on includes. Fix this by explicitly passing zero flags to ucl.parser(). MFC after: 3 days Fixes: abda442d92fd ("contrib/libucl: Import libucl 0.9.3") Reviewed by: kevans, bapt Reported by: freebsd@walstatt-de.de Sponsored by: https://www.patreon.com/bsdivy Differential Revision: https://reviews.freebsd.org/D56266 (cherry picked from commit 63d0e3e3aa2483420f828686336d6615616363d5) M release/packages/generate-ucl.lua ____________________________________________________________________________________________________________ Commit: 78bf20d2e2cf7b59752567cea5ed98ad7fd5efc1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=78bf20d2e2cf7b59752567cea5ed98ad7fd5efc1 Author: Robert Clausecker (Sun 22 Mar 2026 21:39:42 GMT) Committer: Robert Clausecker (Wed 15 Apr 2026 11:04:34 BST) libc/tests/string: add a more comprehensive unit test for strrchr() The unit tests are patterned after those for memrchr(). This catches the issue found in 293915. PR: 293915 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293915 ) Reviewed by: strajabot Reported by: safonov.paul@gmail.com MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56037 (cherry picked from commit 8b5d77bbcbd98e684226950be1c779e108059d8d) M lib/libc/tests/string/Makefile A lib/libc/tests/string/strrchr_test.c ____________________________________________________________________________________________________________ Commit: ab57518e50d9b711a65fa6a843dd851ee170aee3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ab57518e50d9b711a65fa6a843dd851ee170aee3 Author: Konstantin Belousov (Wed 15 Apr 2026 10:08:52 BST) Committer: Dag-Erling Smørgrav (Wed 15 Apr 2026 10:10:35 BST) sys/abi_types.h: Stick with 32-bit time32_t This unbreaks zfs on non-x86 64-bit architectures. M sys/sys/abi_types.h ____________________________________________________________________________________________________________ Commit: 2620eb7a3d42c56a0dc681c48475ebd84be18283 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2620eb7a3d42c56a0dc681c48475ebd84be18283 Author: Andre Albsmeier (Sun 12 Apr 2026 17:10:59 BST) Committer: Michael Osipov (Wed 15 Apr 2026 09:46:45 BST) daemon(8): Add "--output-file -o" to list of options enabling supervision mode This is the small internal doc fix from https://reviews.freebsd.org/D46313 Reviewed by: michaelo Approved by: (blanket; comment fix) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55325 (cherry picked from commit e9a69948a8837601d71e556550a272ca85c03e48) M usr.sbin/daemon/daemon.c ____________________________________________________________________________________________________________ Commit: 3b6f570e36efb60e587ce020e67a354c56e8ccf7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3b6f570e36efb60e587ce020e67a354c56e8ccf7 Author: Gordon Bergling (Sat 4 Apr 2026 08:08:25 BST) Committer: Gordon Bergling (Tue 14 Apr 2026 18:32:59 BST) shlib-compat: Fix two typos in error messages - s/implemeted/implemented/ (cherry picked from commit 3957e233dd9cf7b7599dd0a5efc59a78adfa9441) M tools/tools/shlib-compat/shlib-compat.py ____________________________________________________________________________________________________________ Commit: d23e0bc9c4004364b573c03d674cb73588c6c014 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d23e0bc9c4004364b573c03d674cb73588c6c014 Author: Gordon Bergling (Sat 4 Apr 2026 08:06:58 BST) Committer: Gordon Bergling (Tue 14 Apr 2026 18:32:41 BST) ixl(4): Fix a typo in a source code comment - s/seperated/separated/ (cherry picked from commit ef3703a8cd9ade13d0c7a685577100e1fc18ee09) M sys/dev/ixl/ixl_txrx.c ____________________________________________________________________________________________________________ Commit: cbddd425af7da1559275599fb564c98fb80e3450 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cbddd425af7da1559275599fb564c98fb80e3450 Author: Gordon Bergling (Sat 4 Apr 2026 08:03:51 BST) Committer: Gordon Bergling (Tue 14 Apr 2026 18:32:31 BST) bhnd(4): Fix a typo in a source code comment - s/impementations/implementations/ (cherry picked from commit 04be4d04bbcbd061455b4424488b06927487a948) M sys/dev/bhnd/bhnd_bus_if.m ____________________________________________________________________________________________________________ Commit: 82333a559ea8cf793ee55c2001c6bf3f1818061d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=82333a559ea8cf793ee55c2001c6bf3f1818061d Author: Gordon Bergling (Sat 4 Apr 2026 08:09:56 BST) Committer: Gordon Bergling (Tue 14 Apr 2026 18:32:10 BST) bsdconfig(8): Fix a typo in a source code comment - s/THis/This/ (cherry picked from commit b427b661be01e7b112531ba0b1ea27377a963bb8) M usr.sbin/bsdconfig/share/common.subr ____________________________________________________________________________________________________________ Commit: 3bc0114674a590bcec90f74b20115085ff914c8d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3bc0114674a590bcec90f74b20115085ff914c8d Author: Olivier Certner (Fri 13 Feb 2026 17:20:13 GMT) Committer: Dag-Erling Smørgrav (Tue 14 Apr 2026 10:15:35 BST) sys/abi_types.h: time32_t is 64-bit on non-x86 architectures As long as 'sys/compat/freebsd32/freebsd32.h' is used unconditionally on all platforms (in 'kern_umtx.c' at least), the rule of thumb is to ensure that 'struct foo32' on a 32-bit arch is type-compatible with 'struct foo' on the same arch. In practice, this is very simple to achieve: All 'foo32' types should be compatible with 'foo' on 32-bit architectures, which is what we are supposed to do already for compat' structures by design. The recently introduced 'freebsd32_uint64_t' type typically supports that. This change fixes commit 87632ddf67b0 ("openzfs sys/types32.h: use abi_compat.h for time32_t") which was defining 'time32_t' to 'in32_t' for all 32-bit architectures, which is wrong but on i386. By luck, this did not change the size of whole 'struct ffclock_estimate32' (whose size is compile-time asserted) because 'struct bintime32''s one would stay the same, as even if its field 'sec' was incorrectly sized after that commit, the 'frac' one is 64-bit and 64-bit aligned on all non-x86 architectures so its offset in 'struct bintime32' would stay the same. Reviewed by: kib Fixes: 87632ddf67b0 ("openzfs sys/types32.h: use abi_compat.h for time32_t") Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55283 (cherry picked from commit 4ccca2100887943b11187787004bc8efc2a149c6) M sys/sys/abi_types.h ____________________________________________________________________________________________________________ Commit: 55243172c19047530f9377505e8b759caff17925 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=55243172c19047530f9377505e8b759caff17925 Author: Michael Osipov (Thu 9 Apr 2026 12:39:41 BST) Committer: Michael Osipov (Tue 14 Apr 2026 08:27:40 BST) loader.efi.8/efibootmgr.8: Don't use contradicting term 'EFI BIOS' Both (U)EFI and BIOS are completely different things, be precise and don't use them together. Reviewed by: imp MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D56329 (cherry picked from commit 4f684e929de1275b1099b17b2a2cff0d3f4af223) M stand/efi/loader/main.c M stand/man/loader.efi.8 M usr.sbin/efibootmgr/efibootmgr.8 ____________________________________________________________________________________________________________ Commit: 8de7c76ee02fcc7a405d47cc4b816c27de0dc2e4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8de7c76ee02fcc7a405d47cc4b816c27de0dc2e4 Author: Baptiste Daroussin (Wed 14 Jan 2026 13:48:32 GMT) Committer: Enji Cooper (Tue 14 Apr 2026 02:49:17 BST) ncurses: merge update to ncurses 6.6 6.6 is ABI compatible with 6.5 (tested with abidiff) Remove html documentation to ease updates MFC After: 1 month (cherry picked from commit 68ad2b0d7af2a3571c4abac9afa712f9b09b721c) M ObsoleteFiles.inc M contrib/ncurses/AUTHORS M contrib/ncurses/COPYING M contrib/ncurses/INSTALL M contrib/ncurses/MANIFEST M contrib/ncurses/Makefile.in M contrib/ncurses/Makefile.os2 M contrib/ncurses/NEWS M contrib/ncurses/VERSION M contrib/ncurses/aclocal.m4 M contrib/ncurses/announce.html.in M contrib/ncurses/config.guess M contrib/ncurses/config.sub M contrib/ncurses/configure M contrib/ncurses/configure.in M contrib/ncurses/dist.mk D contrib/ncurses/doc/html/hackguide.html D contrib/ncurses/doc/html/ncurses-intro.html M contrib/ncurses/doc/ncurses-intro.doc M contrib/ncurses/form/Makefile.in M contrib/ncurses/form/fld_arg.c M contrib/ncurses/form/fld_attr.c M contrib/ncurses/form/fld_current.c M contrib/ncurses/form/fld_def.c M contrib/ncurses/form/fld_dup.c M contrib/ncurses/form/form.priv.h M contrib/ncurses/form/frm_data.c M contrib/ncurses/form/frm_driver.c M contrib/ncurses/form/frm_post.c M contrib/ncurses/form/frm_req_name.c M contrib/ncurses/form/frm_sub.c M contrib/ncurses/form/frm_win.c M contrib/ncurses/form/fty_enum.c M contrib/ncurses/form/fty_generic.c M contrib/ncurses/form/fty_int.c M contrib/ncurses/form/fty_num.c M contrib/ncurses/form/fty_regex.c M contrib/ncurses/include/Caps M contrib/ncurses/include/Caps.aix4 M contrib/ncurses/include/Caps.hpux11 M contrib/ncurses/include/Caps.keys M contrib/ncurses/include/Caps.osf1r5 M contrib/ncurses/include/Caps.uwin M contrib/ncurses/include/MKkey_defs.sh M contrib/ncurses/include/MKterm.h.awk.in M contrib/ncurses/include/Makefile.in M contrib/ncurses/include/capdefaults.c M contrib/ncurses/include/curses.h.in M contrib/ncurses/include/curses.tail M contrib/ncurses/include/curses.wide M contrib/ncurses/include/headers M contrib/ncurses/include/nc_alloc.h M contrib/ncurses/include/nc_termios.h M contrib/ncurses/include/nc_tparm.h R070 contrib/ncurses/include/nc_win32.h contrib/ncurses/include/nc_win32.h.in M contrib/ncurses/include/ncurses_cfg.hin M contrib/ncurses/include/ncurses_defs D contrib/ncurses/include/ncurses_mingw.h M contrib/ncurses/include/term_entry.h M contrib/ncurses/include/tic.h M contrib/ncurses/include/unctrl.h.in D contrib/ncurses/include/win32_curses.h M contrib/ncurses/install-sh M contrib/ncurses/man/MKada_config.in M contrib/ncurses/man/MKncu_config.in M contrib/ncurses/man/MKterminfo.sh M contrib/ncurses/man/Makefile.in M contrib/ncurses/man/captoinfo.1m M contrib/ncurses/man/clear.1 M contrib/ncurses/man/curs_add_wch.3x M contrib/ncurses/man/curs_add_wchstr.3x M contrib/ncurses/man/curs_addch.3x M contrib/ncurses/man/curs_addchstr.3x M contrib/ncurses/man/curs_addstr.3x M contrib/ncurses/man/curs_addwstr.3x M contrib/ncurses/man/curs_attr.3x M contrib/ncurses/man/curs_beep.3x M contrib/ncurses/man/curs_bkgd.3x M contrib/ncurses/man/curs_bkgrnd.3x M contrib/ncurses/man/curs_border.3x M contrib/ncurses/man/curs_border_set.3x M contrib/ncurses/man/curs_clear.3x M contrib/ncurses/man/curs_color.3x M contrib/ncurses/man/curs_delch.3x M contrib/ncurses/man/curs_deleteln.3x M contrib/ncurses/man/curs_extend.3x M contrib/ncurses/man/curs_get_wch.3x M contrib/ncurses/man/curs_get_wstr.3x M contrib/ncurses/man/curs_getcchar.3x M contrib/ncurses/man/curs_getch.3x M contrib/ncurses/man/curs_getstr.3x M contrib/ncurses/man/curs_getyx.3x M contrib/ncurses/man/curs_in_wch.3x M contrib/ncurses/man/curs_in_wchstr.3x M contrib/ncurses/man/curs_inch.3x M contrib/ncurses/man/curs_inchstr.3x M contrib/ncurses/man/curs_initscr.3x M contrib/ncurses/man/curs_inopts.3x M contrib/ncurses/man/curs_ins_wch.3x M contrib/ncurses/man/curs_ins_wstr.3x M contrib/ncurses/man/curs_insch.3x M contrib/ncurses/man/curs_insstr.3x M contrib/ncurses/man/curs_instr.3x M contrib/ncurses/man/curs_inwstr.3x M contrib/ncurses/man/curs_kernel.3x M contrib/ncurses/man/curs_legacy.3x M contrib/ncurses/man/curs_mouse.3x M contrib/ncurses/man/curs_move.3x M contrib/ncurses/man/curs_opaque.3x M contrib/ncurses/man/curs_outopts.3x M contrib/ncurses/man/curs_overlay.3x M contrib/ncurses/man/curs_pad.3x M contrib/ncurses/man/curs_print.3x M contrib/ncurses/man/curs_printw.3x M contrib/ncurses/man/curs_refresh.3x M contrib/ncurses/man/curs_scanw.3x M contrib/ncurses/man/curs_scr_dump.3x M contrib/ncurses/man/curs_scroll.3x M contrib/ncurses/man/curs_slk.3x M contrib/ncurses/man/curs_sp_funcs.3x M contrib/ncurses/man/curs_termattrs.3x M contrib/ncurses/man/curs_termcap.3x M contrib/ncurses/man/curs_terminfo.3x M contrib/ncurses/man/curs_threads.3x M contrib/ncurses/man/curs_touch.3x M contrib/ncurses/man/curs_trace.3x M contrib/ncurses/man/curs_util.3x M contrib/ncurses/man/curs_variables.3x M contrib/ncurses/man/curs_window.3x M contrib/ncurses/man/define_key.3x M contrib/ncurses/man/form.3x M contrib/ncurses/man/form_driver.3x M contrib/ncurses/man/form_field.3x M contrib/ncurses/man/form_field_buffer.3x M contrib/ncurses/man/form_field_new.3x M contrib/ncurses/man/form_field_opts.3x M contrib/ncurses/man/form_field_userptr.3x M contrib/ncurses/man/form_field_validation.3x M contrib/ncurses/man/form_fieldtype.3x M contrib/ncurses/man/form_hook.3x M contrib/ncurses/man/form_new.3x M contrib/ncurses/man/form_opts.3x M contrib/ncurses/man/form_page.3x M contrib/ncurses/man/form_requestname.3x M contrib/ncurses/man/form_userptr.3x M contrib/ncurses/man/form_win.3x M contrib/ncurses/man/infocmp.1m M contrib/ncurses/man/infotocap.1m M contrib/ncurses/man/key_defined.3x M contrib/ncurses/man/keybound.3x M contrib/ncurses/man/keyok.3x M contrib/ncurses/man/legacy_coding.3x M contrib/ncurses/man/make_sed.sh M contrib/ncurses/man/man_db.renames.in M contrib/ncurses/man/manhtml.aliases M contrib/ncurses/man/manhtml.externs M contrib/ncurses/man/manlinks.sed M contrib/ncurses/man/menu.3x M contrib/ncurses/man/menu_driver.3x M contrib/ncurses/man/menu_hook.3x M contrib/ncurses/man/menu_items.3x M contrib/ncurses/man/menu_mark.3x M contrib/ncurses/man/menu_new.3x M contrib/ncurses/man/menu_opts.3x M contrib/ncurses/man/menu_pattern.3x M contrib/ncurses/man/menu_requestname.3x M contrib/ncurses/man/menu_spacing.3x M contrib/ncurses/man/menu_userptr.3x M contrib/ncurses/man/menu_win.3x M contrib/ncurses/man/mitem_current.3x M contrib/ncurses/man/mitem_name.3x M contrib/ncurses/man/mitem_new.3x M contrib/ncurses/man/mitem_opts.3x M contrib/ncurses/man/mitem_userptr.3x M contrib/ncurses/man/ncurses.3x M contrib/ncurses/man/new_pair.3x M contrib/ncurses/man/panel.3x M contrib/ncurses/man/resizeterm.3x M contrib/ncurses/man/scr_dump.5 M contrib/ncurses/man/tabs.1 M contrib/ncurses/man/term.5 M contrib/ncurses/man/term.7 M contrib/ncurses/man/term_variables.3x M contrib/ncurses/man/terminfo.head M contrib/ncurses/man/terminfo.tail M contrib/ncurses/man/tic.1m M contrib/ncurses/man/toe.1m M contrib/ncurses/man/tput.1 M contrib/ncurses/man/tset.1 M contrib/ncurses/man/user_caps.5 M contrib/ncurses/man/wresize.3x M contrib/ncurses/menu/Makefile.in M contrib/ncurses/menu/m_driver.c M contrib/ncurses/menu/m_global.c M contrib/ncurses/menu/m_item_new.c M contrib/ncurses/menu/m_item_vis.c M contrib/ncurses/menu/m_pattern.c M contrib/ncurses/menu/m_post.c M contrib/ncurses/menu/m_req_name.c M contrib/ncurses/menu/menu.priv.h M contrib/ncurses/menu/mf_common.h M contrib/ncurses/misc/Makefile.in M contrib/ncurses/misc/gen-pkgconfig.in M contrib/ncurses/misc/gen_edit.sh M contrib/ncurses/misc/magic M contrib/ncurses/misc/makellib M contrib/ncurses/misc/ncurses-config.in M contrib/ncurses/misc/run_tic.in M contrib/ncurses/misc/terminfo.src M contrib/ncurses/mk-1st.awk M contrib/ncurses/ncurses/Makefile.in M contrib/ncurses/ncurses/base/MKkeyname.awk M contrib/ncurses/ncurses/base/MKlib_gen.sh M contrib/ncurses/ncurses/base/MKunctrl.awk M contrib/ncurses/ncurses/base/define_key.c M contrib/ncurses/ncurses/base/key_defined.c M contrib/ncurses/ncurses/base/keybound.c M contrib/ncurses/ncurses/base/keyok.c M contrib/ncurses/ncurses/base/legacy_coding.c M contrib/ncurses/ncurses/base/lib_addch.c M contrib/ncurses/ncurses/base/lib_addstr.c M contrib/ncurses/ncurses/base/lib_beep.c M contrib/ncurses/ncurses/base/lib_bkgd.c M contrib/ncurses/ncurses/base/lib_chgat.c M contrib/ncurses/ncurses/base/lib_color.c M contrib/ncurses/ncurses/base/lib_colorset.c M contrib/ncurses/ncurses/base/lib_delch.c M contrib/ncurses/ncurses/base/lib_delwin.c M contrib/ncurses/ncurses/base/lib_dft_fgbg.c M contrib/ncurses/ncurses/base/lib_driver.c M contrib/ncurses/ncurses/base/lib_echo.c M contrib/ncurses/ncurses/base/lib_endwin.c M contrib/ncurses/ncurses/base/lib_erase.c M contrib/ncurses/ncurses/base/lib_flash.c M contrib/ncurses/ncurses/base/lib_freeall.c M contrib/ncurses/ncurses/base/lib_getch.c M contrib/ncurses/ncurses/base/lib_getstr.c M contrib/ncurses/ncurses/base/lib_initscr.c M contrib/ncurses/ncurses/base/lib_insch.c M contrib/ncurses/ncurses/base/lib_insnstr.c M contrib/ncurses/ncurses/base/lib_instr.c M contrib/ncurses/ncurses/base/lib_mouse.c M contrib/ncurses/ncurses/base/lib_mvwin.c M contrib/ncurses/ncurses/base/lib_newterm.c M contrib/ncurses/ncurses/base/lib_newwin.c M contrib/ncurses/ncurses/base/lib_nl.c M contrib/ncurses/ncurses/base/lib_overlay.c M contrib/ncurses/ncurses/base/lib_pad.c M contrib/ncurses/ncurses/base/lib_printw.c M contrib/ncurses/ncurses/base/lib_redrawln.c M contrib/ncurses/ncurses/base/lib_refresh.c M contrib/ncurses/ncurses/base/lib_restart.c M contrib/ncurses/ncurses/base/lib_screen.c M contrib/ncurses/ncurses/base/lib_set_term.c M contrib/ncurses/ncurses/base/lib_slk.c M contrib/ncurses/ncurses/base/lib_slkatr_set.c M contrib/ncurses/ncurses/base/lib_slkatrof.c M contrib/ncurses/ncurses/base/lib_slkatron.c M contrib/ncurses/ncurses/base/lib_slkatrset.c M contrib/ncurses/ncurses/base/lib_slkattr.c M contrib/ncurses/ncurses/base/lib_slkclear.c M contrib/ncurses/ncurses/base/lib_slkcolor.c M contrib/ncurses/ncurses/base/lib_slklab.c M contrib/ncurses/ncurses/base/lib_slkrefr.c M contrib/ncurses/ncurses/base/lib_slkset.c M contrib/ncurses/ncurses/base/lib_slktouch.c M contrib/ncurses/ncurses/base/lib_touch.c M contrib/ncurses/ncurses/base/lib_ungetch.c M contrib/ncurses/ncurses/base/lib_wattron.c M contrib/ncurses/ncurses/base/lib_winch.c M contrib/ncurses/ncurses/base/lib_window.c M contrib/ncurses/ncurses/base/nc_panel.c M contrib/ncurses/ncurses/base/new_pair.c M contrib/ncurses/ncurses/base/resizeterm.c M contrib/ncurses/ncurses/base/safe_sprintf.c M contrib/ncurses/ncurses/base/tries.c M contrib/ncurses/ncurses/base/vsscanf.c M contrib/ncurses/ncurses/base/wresize.c M contrib/ncurses/ncurses/build.priv.h M contrib/ncurses/ncurses/curses.priv.h M contrib/ncurses/ncurses/llib-lncurses M contrib/ncurses/ncurses/llib-lncursest M contrib/ncurses/ncurses/llib-lncursestw M contrib/ncurses/ncurses/llib-lncursesw M contrib/ncurses/ncurses/llib-ltinfo M contrib/ncurses/ncurses/llib-ltinfot M contrib/ncurses/ncurses/llib-ltinfotw M contrib/ncurses/ncurses/llib-ltinfow M contrib/ncurses/ncurses/modules M contrib/ncurses/ncurses/new_pair.h R059 contrib/ncurses/include/nc_mingw.h contrib/ncurses/ncurses/report_ctype.c M contrib/ncurses/ncurses/report_hashing.c M contrib/ncurses/ncurses/report_offsets.c M contrib/ncurses/ncurses/term.priv.h M contrib/ncurses/ncurses/tinfo/MKcaptab.awk M contrib/ncurses/ncurses/tinfo/MKcaptab.sh M contrib/ncurses/ncurses/tinfo/MKcodes.awk M contrib/ncurses/ncurses/tinfo/MKfallback.sh M contrib/ncurses/ncurses/tinfo/MKkeys_list.sh M contrib/ncurses/ncurses/tinfo/MKnames.awk M contrib/ncurses/ncurses/tinfo/MKuserdefs.sh M contrib/ncurses/ncurses/tinfo/access.c M contrib/ncurses/ncurses/tinfo/add_tries.c M contrib/ncurses/ncurses/tinfo/alloc_entry.c M contrib/ncurses/ncurses/tinfo/alloc_ttype.c M contrib/ncurses/ncurses/tinfo/captoinfo.c M contrib/ncurses/ncurses/tinfo/comp_error.c M contrib/ncurses/ncurses/tinfo/comp_expand.c M contrib/ncurses/ncurses/tinfo/comp_hash.c M contrib/ncurses/ncurses/tinfo/comp_parse.c M contrib/ncurses/ncurses/tinfo/comp_scan.c M contrib/ncurses/ncurses/tinfo/db_iterator.c M contrib/ncurses/ncurses/tinfo/doalloc.c M contrib/ncurses/ncurses/tinfo/entries.c M contrib/ncurses/ncurses/tinfo/getenv_num.c M contrib/ncurses/ncurses/tinfo/hashed_db.c M contrib/ncurses/ncurses/tinfo/home_terminfo.c M contrib/ncurses/ncurses/tinfo/init_keytry.c M contrib/ncurses/ncurses/tinfo/lib_acs.c M contrib/ncurses/ncurses/tinfo/lib_baudrate.c M contrib/ncurses/ncurses/tinfo/lib_cur_term.c M contrib/ncurses/ncurses/tinfo/lib_data.c M contrib/ncurses/ncurses/tinfo/lib_has_cap.c M contrib/ncurses/ncurses/tinfo/lib_kernel.c M contrib/ncurses/ncurses/tinfo/lib_napms.c M contrib/ncurses/ncurses/tinfo/lib_options.c M contrib/ncurses/ncurses/tinfo/lib_print.c M contrib/ncurses/ncurses/tinfo/lib_raw.c M contrib/ncurses/ncurses/tinfo/lib_setup.c M contrib/ncurses/ncurses/tinfo/lib_termcap.c M contrib/ncurses/ncurses/tinfo/lib_termname.c M contrib/ncurses/ncurses/tinfo/lib_tgoto.c M contrib/ncurses/ncurses/tinfo/lib_ti.c M contrib/ncurses/ncurses/tinfo/lib_tparm.c M contrib/ncurses/ncurses/tinfo/lib_tputs.c M contrib/ncurses/ncurses/tinfo/lib_ttyflags.c M contrib/ncurses/ncurses/tinfo/lib_win32con.c M contrib/ncurses/ncurses/tinfo/lib_win32util.c M contrib/ncurses/ncurses/tinfo/make_hash.c M contrib/ncurses/ncurses/tinfo/make_keys.c M contrib/ncurses/ncurses/tinfo/name_match.c M contrib/ncurses/ncurses/tinfo/obsolete.c M contrib/ncurses/ncurses/tinfo/parse_entry.c M contrib/ncurses/ncurses/tinfo/read_entry.c M contrib/ncurses/ncurses/tinfo/read_termcap.c M contrib/ncurses/ncurses/tinfo/strings.c M contrib/ncurses/ncurses/tinfo/tinfo_driver.c M contrib/ncurses/ncurses/tinfo/trim_sgr0.c M contrib/ncurses/ncurses/tinfo/write_entry.c M contrib/ncurses/ncurses/trace/lib_trace.c M contrib/ncurses/ncurses/trace/lib_traceatr.c M contrib/ncurses/ncurses/trace/lib_tracebits.c M contrib/ncurses/ncurses/trace/lib_tracechr.c M contrib/ncurses/ncurses/trace/lib_tracedmp.c M contrib/ncurses/ncurses/trace/lib_tracemse.c M contrib/ncurses/ncurses/trace/trace_buf.c M contrib/ncurses/ncurses/trace/trace_tries.c M contrib/ncurses/ncurses/trace/varargs.c M contrib/ncurses/ncurses/trace/visbuf.c M contrib/ncurses/ncurses/tty/MKexpanded.sh M contrib/ncurses/ncurses/tty/hardscroll.c M contrib/ncurses/ncurses/tty/hashmap.c M contrib/ncurses/ncurses/tty/lib_mvcur.c M contrib/ncurses/ncurses/tty/lib_tstp.c M contrib/ncurses/ncurses/tty/lib_twait.c M contrib/ncurses/ncurses/tty/lib_vidattr.c M contrib/ncurses/ncurses/tty/tty_update.c M contrib/ncurses/ncurses/wcwidth.h M contrib/ncurses/ncurses/widechar/charable.c M contrib/ncurses/ncurses/widechar/lib_add_wch.c M contrib/ncurses/ncurses/widechar/lib_box_set.c M contrib/ncurses/ncurses/widechar/lib_cchar.c M contrib/ncurses/ncurses/widechar/lib_get_wch.c M contrib/ncurses/ncurses/widechar/lib_get_wstr.c M contrib/ncurses/ncurses/widechar/lib_hline_set.c M contrib/ncurses/ncurses/widechar/lib_in_wch.c M contrib/ncurses/ncurses/widechar/lib_in_wchnstr.c M contrib/ncurses/ncurses/widechar/lib_ins_wch.c M contrib/ncurses/ncurses/widechar/lib_inwstr.c M contrib/ncurses/ncurses/widechar/lib_key_name.c M contrib/ncurses/ncurses/widechar/lib_pecho_wchar.c M contrib/ncurses/ncurses/widechar/lib_slk_wset.c M contrib/ncurses/ncurses/widechar/lib_unget_wch.c M contrib/ncurses/ncurses/widechar/lib_vid_attr.c M contrib/ncurses/ncurses/widechar/lib_vline_set.c M contrib/ncurses/ncurses/widechar/lib_wacs.c M contrib/ncurses/ncurses/widechar/lib_wunctrl.c M contrib/ncurses/ncurses/widechar/widechars.c M contrib/ncurses/ncurses/win32con/gettimeofday.c M contrib/ncurses/ncurses/win32con/wcwidth.c M contrib/ncurses/ncurses/win32con/win32_driver.c D contrib/ncurses/ncurses/win32con/win_driver.c M contrib/ncurses/panel/Makefile.in M contrib/ncurses/panel/p_above.c M contrib/ncurses/panel/p_below.c M contrib/ncurses/panel/p_new.c M contrib/ncurses/panel/panel.c M contrib/ncurses/panel/panel.priv.h M contrib/ncurses/progs/Makefile.in M contrib/ncurses/progs/capconvert M contrib/ncurses/progs/clear.c M contrib/ncurses/progs/clear_cmd.c M contrib/ncurses/progs/dump_entry.c M contrib/ncurses/progs/infocmp.c M contrib/ncurses/progs/modules M contrib/ncurses/progs/progs.priv.h M contrib/ncurses/progs/reset_cmd.c M contrib/ncurses/progs/tabs.c M contrib/ncurses/progs/tic.c M contrib/ncurses/progs/toe.c M contrib/ncurses/progs/tput.c M contrib/ncurses/progs/tset.c M lib/ncurses/tinfo/Makefile M lib/ncurses/tinfo/ncurses_cfg.h M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: dc61491025091d9e61048cc3cfb18d25ed354a8b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dc61491025091d9e61048cc3cfb18d25ed354a8b Author: Ed Maste (Thu 2 Apr 2026 22:59:42 BST) Committer: Ed Maste (Mon 13 Apr 2026 18:43:05 BST) fmax.3: Add caveat for going beyond C std requirements libm's fmax and fmin family of functions treat +0.0 as greater than -0.0. This is not required by the C standard, so the user may not see this behaviour due to compiler optimization. PR: 294214 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294214 ) Reviewed by: fuz Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D56230 (cherry picked from commit 7764e9ca28a9702aed4ba7391e055ec2fcf35c41) (cherry picked from commit 855507463e0d3903d31aa7c084efbf4f819b5d63) M lib/msun/man/fmax.3 ____________________________________________________________________________________________________________ Commit: c4266d84c56f845945349a83801d99ca9ecf5d3a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c4266d84c56f845945349a83801d99ca9ecf5d3a Author: Dag-Erling Smørgrav (Tue 7 Apr 2026 14:54:28 BST) Committer: Dag-Erling Smørgrav (Mon 13 Apr 2026 18:39:36 BST) tunefs: Better fix for arm64 alignment issues Rather than trust that the compiler will lay out the stack frame the way we expect it to, use a union to force the correct alignment. MFC after: 1 week Fixes: 616f47f176c3 ("tunefs: Fix alignment warning on arm64") Reviewed by: kevans, mckusick Differential Revision: https://reviews.freebsd.org/D56245 (cherry picked from commit 8244dd326265867293b2286efc3d571f06ef0dab) tunefs: Fix pointer arithmetic While here, remove a bogus const which has been there for years. MFC after: 1 week Reported by: ivy@ Fixes: 1b83e8a3f840 ("Constify string pointers.") Fixes: 8244dd326265 ("tunefs: Better fix for arm64 alignment issues") Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D56343 (cherry picked from commit 9d95d806691e4ef1411c6c3b892d8b774754d724) M sbin/tunefs/tunefs.c ____________________________________________________________________________________________________________ Commit: efab056932ede3f1e14cfcc800f5c421f2d78b95 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=efab056932ede3f1e14cfcc800f5c421f2d78b95 Author: Kyle Evans (Thu 9 Apr 2026 03:37:00 BST) Committer: Kyle Evans (Mon 13 Apr 2026 15:43:17 BST) kqueue: slightly clarify the flow in knlist_cleardel() This is purely a cosmetic change to make it a little easier on the eyes, rather than jumping back to the else branch up top. Re-flow it to use another loop on the outside and just inline the re-lock before we repeat after awaking from fluxwait. The !killkn path should maybe issue a wakeup if there's a thread in KQ_SLEEP so that userland can observe the EOF, but this isn't a practical problem today: pretty much every case of knlist_clear is tied to a file descriptor and called in the close(2) path. As a consequence, potentially affected knotes are almost always destroyed before we even get to knlist_clear(). Reviewed by: kib, markj (cherry picked from commit c6dd40f2d35d596ca60a5d87616c3e4a0fd4f676) M sys/kern/kern_event.c ____________________________________________________________________________________________________________ Commit: 64c72d3020f5c0d07219745f658400ca26654d84 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=64c72d3020f5c0d07219745f658400ca26654d84 Author: Kyle Evans (Thu 9 Apr 2026 03:37:00 BST) Committer: Kyle Evans (Mon 13 Apr 2026 15:43:17 BST) kqueue: don't leak file refs on failure to knote_attach() We'll subsequently just knote_free() since the knote is barely constructed, but that bypasses any logic that might release references on owned files/fops. Defer clearing those until the knote actually owns them and update the comment to draw the line more clearly. Reviewed by: kib (cherry picked from commit 0bf4d22c37083170961c31694b90551538901a1c) M sys/kern/kern_event.c ____________________________________________________________________________________________________________ Commit: 6706984194d76b8eaa13508c7b781e817cb76df2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6706984194d76b8eaa13508c7b781e817cb76df2 Author: Kyle Evans (Thu 9 Apr 2026 03:37:00 BST) Committer: Kyle Evans (Mon 13 Apr 2026 15:43:17 BST) libc: fix memfd_create's HUGETLB handling The 'simplification' commit referenced below actually broke one aspect of MFD_HUGETLB: the caller isn't supposed to be required to specify a size. MFD_HUGETLB by itself without a shift mask just requests a large page, so we revert that part of memfd_create() back. While we're here, fix up the related parts of the manpages a little bit, since MFD_HUGETLB is actually supported. The manpage claims that we would return ENOSYS if forced mappings weren't supported, but this was actually not true. However, that seems like a very important distinction to make between ENOSYS and EOPNOTSUPP, so fix the implementation to match the docs. Reviewed by: kib, markj (cherry picked from commit 9a8d333368baef356f0a611b47ec592568dd14f9) M lib/libc/gen/memfd_create.c M lib/libc/sys/shm_open.2 M tests/sys/posixshm/memfd_test.c A tests/sys/posixshm/posixshm.h M tests/sys/posixshm/posixshm_test.c ____________________________________________________________________________________________________________ Commit: 9ef671ef0c6c50e85a35d867ef1c7890f9de91af URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9ef671ef0c6c50e85a35d867ef1c7890f9de91af Author: Kyle Evans (Wed 8 Apr 2026 13:49:18 BST) Committer: Kyle Evans (Mon 13 Apr 2026 15:43:16 BST) lualoader: allow the local module to filter out the BE list This allows something like the following local.lua to install a filter to implement its own notion of hidden BEs using a naming convention of a leading dot to hide them: -- file: /boot/lua/local.lua local core = require("core") local function be_hide(be) if core.isSingleUserBoot() then -- All BEs are accepted for single-user return true end local name = be:match("/([^/]+)$") if not name then -- Accept malformed BEs, for whatever reason return true end return name:match("^%.") == nil end if core.bootenvFilter then -- Just in case we need to be compatible with older versions of -- core.lua without the filtering functionality. core.bootenvFilter(be_hide) end -- EOF Requested by: Marek Zarychta Reviewed by: imp (cherry picked from commit bf0881060ecd75ce79683b82ebcd4809eadf7cf5) M stand/lua/core.lua M stand/lua/core.lua.8 ____________________________________________________________________________________________________________ Commit: 42a8f973cb90fa40025586f083e7b13db7f81926 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=42a8f973cb90fa40025586f083e7b13db7f81926 Author: Kyle Evans (Wed 1 Apr 2026 23:30:48 BST) Committer: Kyle Evans (Mon 13 Apr 2026 15:43:16 BST) kqueue: compare against the size in kqueue_expand This is a cosmetic change, rather than a functional one: comparing the knlistsize against the fd requires a little bit of mental gymnastics to confirm that this is fine and not doing unnecessary work in some cases. Notably, one must consider that kq_knlistsize only grows in KQEXTENT chunks, which means that concurrent threads trying to grow the kqueue to consecutive fds will usually not result in the list being replaced twice. One can also more clearly rule out classes of arithmetic problems in the final `else` branch. Reviewed by: kib, markj (cherry picked from commit 0b4f0e0515d0c7ec855cd654ae5dc562f4931cae) M sys/kern/kern_event.c ____________________________________________________________________________________________________________ Commit: f206751e1280410a8c911283a92ee9194a3f1ac6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f206751e1280410a8c911283a92ee9194a3f1ac6 Author: Kyle Evans (Wed 1 Apr 2026 23:30:48 BST) Committer: Kyle Evans (Mon 13 Apr 2026 15:43:15 BST) kqueue: simplify knote_fdclose() The influx logic in knote_fdclose() is a little misguided, the resulting wakeup() call should always be redundant: knote_drop_detached() will always issue a wakeup before it returns, so anything waiting on *that* knote that had entered fluxwait should have been woken up then. This is the obvious divergence from the other influx/wakeup pattern in the implementation, which will kn_influx-- and then issue the wakeup after it has processed all of the knotes it can make progress on. While we're here, the kq_knlist cannot shrink, so we can avoid that condition in the loop and avoid potentially excessive wakeups from fluxwait on kqueues that we didn't touch. Reviewed by: kib, markj (cherry picked from commit ff1050d2a366bd288a6ebbf63f98003272513f92) M sys/kern/kern_event.c ____________________________________________________________________________________________________________ Commit: cdd2a1d19ad3e9c62a12b78512522ca972bbd0e2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cdd2a1d19ad3e9c62a12b78512522ca972bbd0e2 Author: Kyle Evans (Wed 1 Apr 2026 23:30:48 BST) Committer: Kyle Evans (Mon 13 Apr 2026 15:43:15 BST) kqueue: add some kn_knlist assertions around knlist_(add|remove) We currently assert that kn_status is accurate, but there's more room for error. Neither of these are very likely, but currently we'd blow up in SLIST*() macros instead of providing more obvious diagnostics. It's perhaps only worth testing these because knlist_remove() requires getting logic across both f_attach() and f_detach() correct. Reviewed by: kib, markj (cherry picked from commit 306c9049c642da6a59a5dc088589605a9aa38b87) M sys/kern/kern_event.c ____________________________________________________________________________________________________________ Commit: aaa210987afad8e575088f608a0b85f98186602b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=aaa210987afad8e575088f608a0b85f98186602b Author: Li-Wen Hsu (Thu 9 Apr 2026 05:06:19 BST) Committer: Li-Wen Hsu (Mon 13 Apr 2026 11:24:13 BST) installer: Add download.freebsd.org to mirror list download.freebsd.org is backed by project mirrors and a CDN, which should benefit most users. Sponsored by: The FreeBSD Foundation Reviewed by: delphij (releng) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54849 (cherry picked from commit 45079cdf8b517adf803db7dc7aa85e5728cfeb2f) M usr.sbin/bsdinstall/scripts/mirrorselect ____________________________________________________________________________________________________________ Commit: 0ccb63941591d8b9ec77b95d3a4dff11c784e2ad URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0ccb63941591d8b9ec77b95d3a4dff11c784e2ad Author: Warner Losh (Sun 26 May 2024 18:39:18 BST) Committer: Warner Losh (Mon 13 Apr 2026 06:02:27 BST) cross-build: Define __*int*_t and include sys/cdefs.h FreeBSD assumes that sys/types.h includes sys/cdefs.h, so add it here. FreeBSD also needs __*int*_t defined for software we bootstrap (a lot of it). GLIBC defines these, but musl does not, so we have to define them here, even though it looks backwards. There's no good #define to key off of, so use !defined GLIBC since on Linux defacto there's only two libc implementations. Co-authored-by: Val Packett Sponsored by: Netflix Pull Request: https://github.com/freebsd/freebsd-src/pull/1066 Reviewed by: val_packett.cool Differential Revision: https://reviews.freebsd.org/D45354 (cherry picked from commit 3c5f0da5106bee21ab3726f608b5c377da92a733) M tools/build/cross-build/include/linux/sys/types.h ____________________________________________________________________________________________________________ Commit: 9b7c0f4f81f06424899094d4381dede79669b623 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9b7c0f4f81f06424899094d4381dede79669b623 Author: Mark Johnston (Wed 8 Apr 2026 05:21:09 BST) Committer: Mark Johnston (Mon 13 Apr 2026 03:53:32 BST) vm_fault: Reset m_needs_zeroing properly - When allocating a page, we should only consider the PG_ZERO flag when handling the top-level page. - Unconditionally reset the flag when restarting the fault handler. Previously, vm_fault_busy_sleep() would fail to reset it. PR: 294039 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294039 ) Reviewed by: kib Tested by: Peter Much MFC after: 3 days Fixes: cff67bc43df1 ("vm_fault: only rely on PG_ZERO when the page was newly allocated") Differential Revision: https://reviews.freebsd.org/D56234 (cherry picked from commit 04132e01004316ddd0e0cde6ef15b100b7b1844d) M sys/vm/vm_fault.c ____________________________________________________________________________________________________________ Commit: 88535adba95d019557b4281c52daa9feccade2fe URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=88535adba95d019557b4281c52daa9feccade2fe Author: Mark Johnston (Fri 27 Mar 2026 00:24:18 GMT) Committer: Mark Johnston (Mon 13 Apr 2026 03:53:26 BST) kqueue: Fix a race when adding an fd-based knote to a queue When registering a new kevent backed by a file descriptor, we first look up the file description with fget(), then lock the kqueue, then see if a corresponding knote is already registered. If not, and KN_ADD is specified, we add the knote to the kqueue. closefp_impl() interlocks with this process by calling knote_fdclose(), which locks each kqueue and checks to see if the fd is registered with a knote. But, if userspace closes an fd while a different thread is registering it, i.e., after fget() succeeds but before the kqueue is locked, then we may end up with a mismatch in the knote table, where the knote kn_fp field points to a different file description than the knote ident. Fix the problem by double-checking before registering a knote. Add a new fget_noref_unlocked() helper for this purpose. It is a clone of fget_noref(). We could simply use fget_noref(), but I like having an explicit unlocked variant. PR: 293382 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293382 ) Reviewed by: kib MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D55852 (cherry picked from commit 8f3227f527567aef53da845ab78da8e16d9051c1) M sys/kern/kern_event.c M sys/sys/filedesc.h ____________________________________________________________________________________________________________ Commit: 27ac9d336f715b4ce91bf447f73d5c3621d099ce URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=27ac9d336f715b4ce91bf447f73d5c3621d099ce Author: Enji Cooper (Mon 13 Apr 2026 01:10:02 BST) Committer: Enji Cooper (Mon 13 Apr 2026 01:10:02 BST) crypto/openssl: update from 3.0.16 to 3.0.20 ### Description This particular change contains all functional and security fixes made between 3.0.16 and 3.0.20, with the net-resulting security issues being the ones addressed in 3.0.20 [1] [2]. This is a direct commit to stable/14 as stable/15 and later use OpenSSL 3.5, as of writing, and thus this change could not have been merged through main and stable/15 since the 3.0.17+ was released after :main switched to OpenSSL 3.5. This does not contain any merge commits as any MFV changes are banned unless they go through :main. ### Process used when updating the component 1. Run the subtree merge command in a staging tree. 2. Resolve conflicts. 3. Compare against reference branch. 4. Pull over remaining changes adding new manpages to the build. 5. Take changes from staging tree over to stable/14 . ### Test Plan Tested with sanity checks on 14-STABLE (amd64) and `make tinderbox` on all 14-STABLE supported architectures. 1. https://github.com/openssl/openssl/releases/tag/openssl-3.0.20 2. https://github.com/openssl/openssl/blob/openssl-3.0.20/CHANGES.md M crypto/openssl/ACKNOWLEDGEMENTS.md M crypto/openssl/CHANGES.md M crypto/openssl/Configurations/10-main.conf M crypto/openssl/Configurations/50-nonstop.conf M crypto/openssl/Configurations/unix-Makefile.tmpl M crypto/openssl/Configurations/windows-makefile.tmpl M crypto/openssl/Configure M crypto/openssl/INSTALL.md M crypto/openssl/NEWS.md M crypto/openssl/NOTES-WINDOWS.md M crypto/openssl/README-ENGINES.md M crypto/openssl/README.md M crypto/openssl/VERSION.dat A crypto/openssl/apps/CA.pl M crypto/openssl/apps/CA.pl.in M crypto/openssl/apps/asn1parse.c M crypto/openssl/apps/ca.c M crypto/openssl/apps/ciphers.c M crypto/openssl/apps/cmp.c M crypto/openssl/apps/cms.c M crypto/openssl/apps/crl.c M crypto/openssl/apps/crl2pkcs7.c M crypto/openssl/apps/dgst.c M crypto/openssl/apps/dhparam.c M crypto/openssl/apps/dsa.c M crypto/openssl/apps/dsaparam.c M crypto/openssl/apps/ec.c M crypto/openssl/apps/ecparam.c M crypto/openssl/apps/enc.c M crypto/openssl/apps/engine.c M crypto/openssl/apps/errstr.c M crypto/openssl/apps/fipsinstall.c M crypto/openssl/apps/gendsa.c M crypto/openssl/apps/genpkey.c M crypto/openssl/apps/genrsa.c M crypto/openssl/apps/include/app_libctx.h M crypto/openssl/apps/include/app_params.h M crypto/openssl/apps/include/apps.h M crypto/openssl/apps/include/apps_ui.h M crypto/openssl/apps/include/cmp_mock_srv.h M crypto/openssl/apps/include/engine_loader.h M crypto/openssl/apps/include/fmt.h M crypto/openssl/apps/include/function.h M crypto/openssl/apps/include/http_server.h M crypto/openssl/apps/include/names.h M crypto/openssl/apps/include/opt.h M crypto/openssl/apps/include/platform.h M crypto/openssl/apps/include/s_apps.h M crypto/openssl/apps/include/vms_term_sock.h M crypto/openssl/apps/info.c M crypto/openssl/apps/kdf.c M crypto/openssl/apps/lib/app_libctx.c M crypto/openssl/apps/lib/app_params.c M crypto/openssl/apps/lib/app_provider.c M crypto/openssl/apps/lib/app_rand.c M crypto/openssl/apps/lib/app_x509.c M crypto/openssl/apps/lib/apps.c M crypto/openssl/apps/lib/apps_ui.c M crypto/openssl/apps/lib/cmp_mock_srv.c M crypto/openssl/apps/lib/columns.c M crypto/openssl/apps/lib/engine.c M crypto/openssl/apps/lib/engine_loader.c M crypto/openssl/apps/lib/http_server.c M crypto/openssl/apps/lib/names.c M crypto/openssl/apps/lib/opt.c M crypto/openssl/apps/lib/s_cb.c M crypto/openssl/apps/lib/s_socket.c M crypto/openssl/apps/lib/tlssrp_depr.c M crypto/openssl/apps/lib/vms_decc_argv.c M crypto/openssl/apps/lib/vms_term_sock.c M crypto/openssl/apps/lib/win32_init.c M crypto/openssl/apps/list.c M crypto/openssl/apps/mac.c M crypto/openssl/apps/nseq.c M crypto/openssl/apps/ocsp.c M crypto/openssl/apps/openssl.c M crypto/openssl/apps/passwd.c M crypto/openssl/apps/pkcs12.c M crypto/openssl/apps/pkcs7.c M crypto/openssl/apps/pkcs8.c M crypto/openssl/apps/pkey.c M crypto/openssl/apps/pkeyparam.c M crypto/openssl/apps/pkeyutl.c M crypto/openssl/apps/prime.c M crypto/openssl/apps/progs.pl M crypto/openssl/apps/rand.c M crypto/openssl/apps/rehash.c M crypto/openssl/apps/req.c M crypto/openssl/apps/rsa.c M crypto/openssl/apps/rsautl.c M crypto/openssl/apps/s_client.c M crypto/openssl/apps/s_server.c M crypto/openssl/apps/s_time.c M crypto/openssl/apps/sess_id.c M crypto/openssl/apps/smime.c M crypto/openssl/apps/speed.c M crypto/openssl/apps/spkac.c M crypto/openssl/apps/srp.c M crypto/openssl/apps/storeutl.c M crypto/openssl/apps/testdsa.h M crypto/openssl/apps/testrsa.h M crypto/openssl/apps/timeouts.h M crypto/openssl/apps/ts.c M crypto/openssl/apps/verify.c M crypto/openssl/apps/version.c M crypto/openssl/apps/vms_decc_init.c M crypto/openssl/apps/x509.c M crypto/openssl/configdata.pm.in M crypto/openssl/crypto/LPdir_nyi.c M crypto/openssl/crypto/LPdir_unix.c M crypto/openssl/crypto/LPdir_vms.c M crypto/openssl/crypto/LPdir_win.c M crypto/openssl/crypto/LPdir_win32.c M crypto/openssl/crypto/LPdir_wince.c M crypto/openssl/crypto/aes/aes_cbc.c M crypto/openssl/crypto/aes/aes_cfb.c M crypto/openssl/crypto/aes/aes_core.c M crypto/openssl/crypto/aes/aes_ecb.c M crypto/openssl/crypto/aes/aes_ige.c M crypto/openssl/crypto/aes/aes_local.h M crypto/openssl/crypto/aes/aes_misc.c M crypto/openssl/crypto/aes/aes_ofb.c M crypto/openssl/crypto/aes/aes_wrap.c M crypto/openssl/crypto/aes/aes_x86core.c M crypto/openssl/crypto/aes/asm/aes-s390x.pl M crypto/openssl/crypto/aes/asm/aesv8-armx.pl M crypto/openssl/crypto/aria/aria.c M crypto/openssl/crypto/arm_arch.h M crypto/openssl/crypto/armcap.c M crypto/openssl/crypto/asn1/a_bitstr.c M crypto/openssl/crypto/asn1/a_d2i_fp.c M crypto/openssl/crypto/asn1/a_digest.c M crypto/openssl/crypto/asn1/a_dup.c M crypto/openssl/crypto/asn1/a_gentm.c M crypto/openssl/crypto/asn1/a_i2d_fp.c M crypto/openssl/crypto/asn1/a_int.c M crypto/openssl/crypto/asn1/a_mbstr.c M crypto/openssl/crypto/asn1/a_object.c M crypto/openssl/crypto/asn1/a_octet.c M crypto/openssl/crypto/asn1/a_print.c M crypto/openssl/crypto/asn1/a_sign.c M crypto/openssl/crypto/asn1/a_strex.c M crypto/openssl/crypto/asn1/a_strnid.c M crypto/openssl/crypto/asn1/a_time.c M crypto/openssl/crypto/asn1/a_type.c M crypto/openssl/crypto/asn1/a_utctm.c M crypto/openssl/crypto/asn1/a_utf8.c M crypto/openssl/crypto/asn1/a_verify.c M crypto/openssl/crypto/asn1/ameth_lib.c M crypto/openssl/crypto/asn1/asn1_err.c M crypto/openssl/crypto/asn1/asn1_gen.c M crypto/openssl/crypto/asn1/asn1_item_list.h M crypto/openssl/crypto/asn1/asn1_lib.c M crypto/openssl/crypto/asn1/asn1_local.h M crypto/openssl/crypto/asn1/asn1_parse.c M crypto/openssl/crypto/asn1/asn_mime.c M crypto/openssl/crypto/asn1/asn_mstbl.c M crypto/openssl/crypto/asn1/asn_pack.c M crypto/openssl/crypto/asn1/bio_asn1.c M crypto/openssl/crypto/asn1/bio_ndef.c M crypto/openssl/crypto/asn1/d2i_param.c M crypto/openssl/crypto/asn1/d2i_pr.c M crypto/openssl/crypto/asn1/d2i_pu.c M crypto/openssl/crypto/asn1/evp_asn1.c M crypto/openssl/crypto/asn1/f_int.c M crypto/openssl/crypto/asn1/f_string.c M crypto/openssl/crypto/asn1/i2d_evp.c M crypto/openssl/crypto/asn1/n_pkey.c M crypto/openssl/crypto/asn1/nsseq.c M crypto/openssl/crypto/asn1/p5_pbe.c M crypto/openssl/crypto/asn1/p5_pbev2.c M crypto/openssl/crypto/asn1/p5_scrypt.c M crypto/openssl/crypto/asn1/p8_pkey.c M crypto/openssl/crypto/asn1/standard_methods.h M crypto/openssl/crypto/asn1/t_bitst.c M crypto/openssl/crypto/asn1/t_pkey.c M crypto/openssl/crypto/asn1/t_spki.c M crypto/openssl/crypto/asn1/tasn_dec.c M crypto/openssl/crypto/asn1/tasn_enc.c M crypto/openssl/crypto/asn1/tasn_new.c M crypto/openssl/crypto/asn1/tasn_prn.c M crypto/openssl/crypto/asn1/tasn_scn.c M crypto/openssl/crypto/asn1/tasn_typ.c M crypto/openssl/crypto/asn1/tasn_utl.c M crypto/openssl/crypto/asn1/tbl_standard.h M crypto/openssl/crypto/asn1/x_algor.c M crypto/openssl/crypto/asn1/x_bignum.c M crypto/openssl/crypto/asn1/x_int64.c M crypto/openssl/crypto/asn1/x_long.c M crypto/openssl/crypto/asn1/x_sig.c M crypto/openssl/crypto/asn1/x_spki.c M crypto/openssl/crypto/asn1/x_val.c M crypto/openssl/crypto/asn1_dsa.c M crypto/openssl/crypto/async/arch/async_null.c M crypto/openssl/crypto/async/arch/async_null.h M crypto/openssl/crypto/async/arch/async_posix.c M crypto/openssl/crypto/async/arch/async_posix.h M crypto/openssl/crypto/async/arch/async_win.c M crypto/openssl/crypto/async/arch/async_win.h M crypto/openssl/crypto/async/async.c M crypto/openssl/crypto/async/async_err.c M crypto/openssl/crypto/async/async_local.h M crypto/openssl/crypto/async/async_wait.c M crypto/openssl/crypto/bf/bf_cfb64.c M crypto/openssl/crypto/bf/bf_ecb.c M crypto/openssl/crypto/bf/bf_enc.c M crypto/openssl/crypto/bf/bf_local.h M crypto/openssl/crypto/bf/bf_ofb64.c M crypto/openssl/crypto/bf/bf_pi.h M crypto/openssl/crypto/bio/bf_buff.c M crypto/openssl/crypto/bio/bf_lbuf.c M crypto/openssl/crypto/bio/bf_prefix.c M crypto/openssl/crypto/bio/bf_readbuff.c M crypto/openssl/crypto/bio/bio_addr.c M crypto/openssl/crypto/bio/bio_cb.c M crypto/openssl/crypto/bio/bio_dump.c M crypto/openssl/crypto/bio/bio_err.c M crypto/openssl/crypto/bio/bio_lib.c M crypto/openssl/crypto/bio/bio_local.h M crypto/openssl/crypto/bio/bio_meth.c M crypto/openssl/crypto/bio/bio_print.c M crypto/openssl/crypto/bio/bio_sock.c M crypto/openssl/crypto/bio/bio_sock2.c M crypto/openssl/crypto/bio/bss_acpt.c M crypto/openssl/crypto/bio/bss_bio.c M crypto/openssl/crypto/bio/bss_conn.c M crypto/openssl/crypto/bio/bss_core.c M crypto/openssl/crypto/bio/bss_dgram.c M crypto/openssl/crypto/bio/bss_fd.c M crypto/openssl/crypto/bio/bss_file.c M crypto/openssl/crypto/bio/bss_log.c M crypto/openssl/crypto/bio/bss_mem.c M crypto/openssl/crypto/bio/bss_null.c M crypto/openssl/crypto/bio/bss_sock.c M crypto/openssl/crypto/bio/ossl_core_bio.c M crypto/openssl/crypto/bn/asm/armv4-gf2m.pl M crypto/openssl/crypto/bn/asm/rsaz-avx512.pl M crypto/openssl/crypto/bn/asm/sparcv9-mont.pl M crypto/openssl/crypto/bn/asm/x86_64-gcc.c M crypto/openssl/crypto/bn/bn_add.c M crypto/openssl/crypto/bn/bn_asm.c M crypto/openssl/crypto/bn/bn_blind.c M crypto/openssl/crypto/bn/bn_const.c M crypto/openssl/crypto/bn/bn_conv.c M crypto/openssl/crypto/bn/bn_ctx.c M crypto/openssl/crypto/bn/bn_depr.c M crypto/openssl/crypto/bn/bn_dh.c M crypto/openssl/crypto/bn/bn_div.c M crypto/openssl/crypto/bn/bn_err.c M crypto/openssl/crypto/bn/bn_exp.c M crypto/openssl/crypto/bn/bn_exp2.c M crypto/openssl/crypto/bn/bn_gcd.c M crypto/openssl/crypto/bn/bn_gf2m.c M crypto/openssl/crypto/bn/bn_intern.c M crypto/openssl/crypto/bn/bn_kron.c M crypto/openssl/crypto/bn/bn_lib.c M crypto/openssl/crypto/bn/bn_local.h M crypto/openssl/crypto/bn/bn_mod.c M crypto/openssl/crypto/bn/bn_mont.c M crypto/openssl/crypto/bn/bn_mpi.c M crypto/openssl/crypto/bn/bn_mul.c M crypto/openssl/crypto/bn/bn_nist.c M crypto/openssl/crypto/bn/bn_ppc.c M crypto/openssl/crypto/bn/bn_prime.c M crypto/openssl/crypto/bn/bn_print.c M crypto/openssl/crypto/bn/bn_rand.c M crypto/openssl/crypto/bn/bn_recp.c M crypto/openssl/crypto/bn/bn_rsa_fips186_4.c M crypto/openssl/crypto/bn/bn_shift.c M crypto/openssl/crypto/bn/bn_sparc.c M crypto/openssl/crypto/bn/bn_sqr.c M crypto/openssl/crypto/bn/bn_sqrt.c M crypto/openssl/crypto/bn/bn_srp.c M crypto/openssl/crypto/bn/bn_word.c M crypto/openssl/crypto/bn/bn_x931p.c M crypto/openssl/crypto/bn/rsaz_exp.c M crypto/openssl/crypto/bn/rsaz_exp.h M crypto/openssl/crypto/bn/rsaz_exp_x2.c M crypto/openssl/crypto/bsearch.c M crypto/openssl/crypto/buffer/buf_err.c M crypto/openssl/crypto/camellia/camellia.c M crypto/openssl/crypto/camellia/cmll_cbc.c M crypto/openssl/crypto/camellia/cmll_cfb.c M crypto/openssl/crypto/camellia/cmll_ctr.c M crypto/openssl/crypto/camellia/cmll_ecb.c M crypto/openssl/crypto/camellia/cmll_local.h M crypto/openssl/crypto/camellia/cmll_misc.c M crypto/openssl/crypto/camellia/cmll_ofb.c M crypto/openssl/crypto/cast/c_cfb64.c M crypto/openssl/crypto/cast/c_ecb.c M crypto/openssl/crypto/cast/c_enc.c M crypto/openssl/crypto/cast/c_ofb64.c M crypto/openssl/crypto/cast/c_skey.c M crypto/openssl/crypto/cast/cast_local.h M crypto/openssl/crypto/cast/cast_s.h M crypto/openssl/crypto/chacha/chacha_enc.c M crypto/openssl/crypto/chacha/chacha_ppc.c M crypto/openssl/crypto/cmac/cmac.c M crypto/openssl/crypto/cmp/cmp_asn.c M crypto/openssl/crypto/cmp/cmp_client.c M crypto/openssl/crypto/cmp/cmp_ctx.c M crypto/openssl/crypto/cmp/cmp_err.c M crypto/openssl/crypto/cmp/cmp_hdr.c M crypto/openssl/crypto/cmp/cmp_http.c M crypto/openssl/crypto/cmp/cmp_local.h M crypto/openssl/crypto/cmp/cmp_msg.c M crypto/openssl/crypto/cmp/cmp_protect.c M crypto/openssl/crypto/cmp/cmp_server.c M crypto/openssl/crypto/cmp/cmp_status.c M crypto/openssl/crypto/cmp/cmp_util.c M crypto/openssl/crypto/cmp/cmp_vfy.c M crypto/openssl/crypto/cms/cms_asn1.c M crypto/openssl/crypto/cms/cms_att.c M crypto/openssl/crypto/cms/cms_cd.c M crypto/openssl/crypto/cms/cms_dd.c M crypto/openssl/crypto/cms/cms_dh.c M crypto/openssl/crypto/cms/cms_ec.c M crypto/openssl/crypto/cms/cms_enc.c M crypto/openssl/crypto/cms/cms_env.c M crypto/openssl/crypto/cms/cms_err.c M crypto/openssl/crypto/cms/cms_ess.c M crypto/openssl/crypto/cms/cms_io.c M crypto/openssl/crypto/cms/cms_kari.c M crypto/openssl/crypto/cms/cms_lib.c M crypto/openssl/crypto/cms/cms_local.h M crypto/openssl/crypto/cms/cms_pwri.c M crypto/openssl/crypto/cms/cms_rsa.c M crypto/openssl/crypto/cms/cms_sd.c M crypto/openssl/crypto/cms/cms_smime.c M crypto/openssl/crypto/comp/c_zlib.c M crypto/openssl/crypto/comp/comp_err.c M crypto/openssl/crypto/comp/comp_lib.c M crypto/openssl/crypto/comp/comp_local.h M crypto/openssl/crypto/conf/conf_api.c M crypto/openssl/crypto/conf/conf_def.c M crypto/openssl/crypto/conf/conf_err.c M crypto/openssl/crypto/conf/conf_lib.c M crypto/openssl/crypto/conf/conf_mod.c M crypto/openssl/crypto/conf/conf_sap.c M crypto/openssl/crypto/conf/conf_ssl.c M crypto/openssl/crypto/context.c M crypto/openssl/crypto/core_algorithm.c M crypto/openssl/crypto/core_fetch.c M crypto/openssl/crypto/core_namemap.c M crypto/openssl/crypto/cpt_err.c M crypto/openssl/crypto/cpuid.c M crypto/openssl/crypto/crmf/crmf_asn.c M crypto/openssl/crypto/crmf/crmf_err.c M crypto/openssl/crypto/crmf/crmf_lib.c M crypto/openssl/crypto/crmf/crmf_local.h M crypto/openssl/crypto/crmf/crmf_pbm.c M crypto/openssl/crypto/cryptlib.c M crypto/openssl/crypto/ct/ct_b64.c M crypto/openssl/crypto/ct/ct_err.c M crypto/openssl/crypto/ct/ct_local.h M crypto/openssl/crypto/ct/ct_log.c M crypto/openssl/crypto/ct/ct_oct.c M crypto/openssl/crypto/ct/ct_policy.c M crypto/openssl/crypto/ct/ct_prn.c M crypto/openssl/crypto/ct/ct_sct.c M crypto/openssl/crypto/ct/ct_sct_ctx.c M crypto/openssl/crypto/ct/ct_vfy.c M crypto/openssl/crypto/ct/ct_x509v3.c M crypto/openssl/crypto/ctype.c M crypto/openssl/crypto/der_writer.c M crypto/openssl/crypto/des/cbc_cksm.c M crypto/openssl/crypto/des/cbc_enc.c M crypto/openssl/crypto/des/cfb64ede.c M crypto/openssl/crypto/des/cfb64enc.c M crypto/openssl/crypto/des/cfb_enc.c M crypto/openssl/crypto/des/des_enc.c M crypto/openssl/crypto/des/des_local.h M crypto/openssl/crypto/des/ecb3_enc.c M crypto/openssl/crypto/des/ecb_enc.c M crypto/openssl/crypto/des/fcrypt.c M crypto/openssl/crypto/des/fcrypt_b.c M crypto/openssl/crypto/des/ncbc_enc.c M crypto/openssl/crypto/des/ofb64ede.c M crypto/openssl/crypto/des/ofb64enc.c M crypto/openssl/crypto/des/ofb_enc.c M crypto/openssl/crypto/des/pcbc_enc.c M crypto/openssl/crypto/des/qud_cksm.c M crypto/openssl/crypto/des/set_key.c M crypto/openssl/crypto/des/spr.h M crypto/openssl/crypto/des/xcbc_enc.c M crypto/openssl/crypto/dh/dh_ameth.c M crypto/openssl/crypto/dh/dh_asn1.c M crypto/openssl/crypto/dh/dh_backend.c M crypto/openssl/crypto/dh/dh_check.c M crypto/openssl/crypto/dh/dh_depr.c M crypto/openssl/crypto/dh/dh_err.c M crypto/openssl/crypto/dh/dh_gen.c M crypto/openssl/crypto/dh/dh_group_params.c M crypto/openssl/crypto/dh/dh_kdf.c M crypto/openssl/crypto/dh/dh_key.c M crypto/openssl/crypto/dh/dh_lib.c M crypto/openssl/crypto/dh/dh_local.h M crypto/openssl/crypto/dh/dh_meth.c M crypto/openssl/crypto/dh/dh_pmeth.c M crypto/openssl/crypto/dh/dh_rfc5114.c M crypto/openssl/crypto/dllmain.c M crypto/openssl/crypto/dsa/dsa_ameth.c M crypto/openssl/crypto/dsa/dsa_asn1.c M crypto/openssl/crypto/dsa/dsa_backend.c M crypto/openssl/crypto/dsa/dsa_check.c M crypto/openssl/crypto/dsa/dsa_depr.c M crypto/openssl/crypto/dsa/dsa_err.c M crypto/openssl/crypto/dsa/dsa_gen.c M crypto/openssl/crypto/dsa/dsa_key.c M crypto/openssl/crypto/dsa/dsa_lib.c M crypto/openssl/crypto/dsa/dsa_local.h M crypto/openssl/crypto/dsa/dsa_meth.c M crypto/openssl/crypto/dsa/dsa_ossl.c M crypto/openssl/crypto/dsa/dsa_pmeth.c M crypto/openssl/crypto/dsa/dsa_sign.c M crypto/openssl/crypto/dsa/dsa_vrf.c M crypto/openssl/crypto/dso/dso_dl.c M crypto/openssl/crypto/dso/dso_dlfcn.c M crypto/openssl/crypto/dso/dso_err.c M crypto/openssl/crypto/dso/dso_lib.c M crypto/openssl/crypto/dso/dso_local.h M crypto/openssl/crypto/dso/dso_vms.c M crypto/openssl/crypto/dso/dso_win32.c M crypto/openssl/crypto/ebcdic.c M crypto/openssl/crypto/ec/curve25519.c M crypto/openssl/crypto/ec/curve448/arch_32/arch_intrinsics.h M crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h M crypto/openssl/crypto/ec/curve448/arch_32/f_impl32.c M crypto/openssl/crypto/ec/curve448/arch_64/arch_intrinsics.h M crypto/openssl/crypto/ec/curve448/arch_64/f_impl.h M crypto/openssl/crypto/ec/curve448/arch_64/f_impl64.c M crypto/openssl/crypto/ec/curve448/curve448.c M crypto/openssl/crypto/ec/curve448/curve448_local.h M crypto/openssl/crypto/ec/curve448/curve448_tables.c M crypto/openssl/crypto/ec/curve448/curve448utils.h M crypto/openssl/crypto/ec/curve448/ed448.h M crypto/openssl/crypto/ec/curve448/eddsa.c M crypto/openssl/crypto/ec/curve448/f_generic.c M crypto/openssl/crypto/ec/curve448/field.h M crypto/openssl/crypto/ec/curve448/point_448.h M crypto/openssl/crypto/ec/curve448/scalar.c M crypto/openssl/crypto/ec/curve448/word.h M crypto/openssl/crypto/ec/ec2_oct.c M crypto/openssl/crypto/ec/ec2_smpl.c M crypto/openssl/crypto/ec/ec_ameth.c M crypto/openssl/crypto/ec/ec_asn1.c M crypto/openssl/crypto/ec/ec_backend.c M crypto/openssl/crypto/ec/ec_check.c M crypto/openssl/crypto/ec/ec_curve.c M crypto/openssl/crypto/ec/ec_cvt.c M crypto/openssl/crypto/ec/ec_deprecated.c M crypto/openssl/crypto/ec/ec_err.c M crypto/openssl/crypto/ec/ec_key.c M crypto/openssl/crypto/ec/ec_kmeth.c M crypto/openssl/crypto/ec/ec_lib.c M crypto/openssl/crypto/ec/ec_local.h M crypto/openssl/crypto/ec/ec_mult.c M crypto/openssl/crypto/ec/ec_oct.c M crypto/openssl/crypto/ec/ec_pmeth.c M crypto/openssl/crypto/ec/ec_print.c M crypto/openssl/crypto/ec/ecdh_kdf.c M crypto/openssl/crypto/ec/ecdh_ossl.c M crypto/openssl/crypto/ec/ecdsa_ossl.c M crypto/openssl/crypto/ec/ecdsa_sign.c M crypto/openssl/crypto/ec/ecdsa_vrf.c M crypto/openssl/crypto/ec/eck_prn.c M crypto/openssl/crypto/ec/ecp_mont.c M crypto/openssl/crypto/ec/ecp_nist.c M crypto/openssl/crypto/ec/ecp_nistp224.c M crypto/openssl/crypto/ec/ecp_nistp256.c M crypto/openssl/crypto/ec/ecp_nistp521.c M crypto/openssl/crypto/ec/ecp_nistputil.c M crypto/openssl/crypto/ec/ecp_nistz256.c M crypto/openssl/crypto/ec/ecp_nistz256_table.c M crypto/openssl/crypto/ec/ecp_oct.c M crypto/openssl/crypto/ec/ecp_ppc.c M crypto/openssl/crypto/ec/ecp_s390x_nistp.c M crypto/openssl/crypto/ec/ecp_smpl.c M crypto/openssl/crypto/ec/ecx_backend.c M crypto/openssl/crypto/ec/ecx_backend.h M crypto/openssl/crypto/ec/ecx_key.c M crypto/openssl/crypto/ec/ecx_meth.c M crypto/openssl/crypto/ec/ecx_s390x.c M crypto/openssl/crypto/encode_decode/decoder_err.c M crypto/openssl/crypto/encode_decode/decoder_lib.c M crypto/openssl/crypto/encode_decode/decoder_meth.c M crypto/openssl/crypto/encode_decode/decoder_pkey.c M crypto/openssl/crypto/encode_decode/encoder_err.c M crypto/openssl/crypto/encode_decode/encoder_lib.c M crypto/openssl/crypto/encode_decode/encoder_local.h M crypto/openssl/crypto/encode_decode/encoder_meth.c M crypto/openssl/crypto/encode_decode/encoder_pkey.c M crypto/openssl/crypto/engine/eng_all.c M crypto/openssl/crypto/engine/eng_cnf.c M crypto/openssl/crypto/engine/eng_ctrl.c M crypto/openssl/crypto/engine/eng_dyn.c M crypto/openssl/crypto/engine/eng_err.c M crypto/openssl/crypto/engine/eng_fat.c M crypto/openssl/crypto/engine/eng_lib.c M crypto/openssl/crypto/engine/eng_list.c M crypto/openssl/crypto/engine/eng_local.h M crypto/openssl/crypto/engine/eng_openssl.c M crypto/openssl/crypto/engine/eng_pkey.c M crypto/openssl/crypto/engine/eng_rdrand.c M crypto/openssl/crypto/engine/eng_table.c M crypto/openssl/crypto/engine/tb_asnmth.c M crypto/openssl/crypto/engine/tb_cipher.c M crypto/openssl/crypto/engine/tb_dh.c M crypto/openssl/crypto/engine/tb_digest.c M crypto/openssl/crypto/engine/tb_dsa.c M crypto/openssl/crypto/engine/tb_eckey.c M crypto/openssl/crypto/engine/tb_pkmeth.c M crypto/openssl/crypto/engine/tb_rand.c M crypto/openssl/crypto/engine/tb_rsa.c M crypto/openssl/crypto/err/err.c M crypto/openssl/crypto/err/err_all.c M crypto/openssl/crypto/err/err_all_legacy.c M crypto/openssl/crypto/err/err_local.h M crypto/openssl/crypto/err/err_prn.c M crypto/openssl/crypto/ess/ess_asn1.c M crypto/openssl/crypto/ess/ess_err.c M crypto/openssl/crypto/ess/ess_lib.c M crypto/openssl/crypto/evp/asymcipher.c M crypto/openssl/crypto/evp/bio_b64.c M crypto/openssl/crypto/evp/bio_enc.c M crypto/openssl/crypto/evp/bio_md.c M crypto/openssl/crypto/evp/bio_ok.c M crypto/openssl/crypto/evp/c_allc.c M crypto/openssl/crypto/evp/cmeth_lib.c M crypto/openssl/crypto/evp/ctrl_params_translate.c M crypto/openssl/crypto/evp/dh_ctrl.c M crypto/openssl/crypto/evp/dh_support.c M crypto/openssl/crypto/evp/digest.c M crypto/openssl/crypto/evp/dsa_ctrl.c M crypto/openssl/crypto/evp/e_aes.c M crypto/openssl/crypto/evp/e_aes_cbc_hmac_sha1.c M crypto/openssl/crypto/evp/e_aes_cbc_hmac_sha256.c M crypto/openssl/crypto/evp/e_aria.c M crypto/openssl/crypto/evp/e_bf.c M crypto/openssl/crypto/evp/e_camellia.c M crypto/openssl/crypto/evp/e_cast.c M crypto/openssl/crypto/evp/e_chacha20_poly1305.c M crypto/openssl/crypto/evp/e_des.c M crypto/openssl/crypto/evp/e_des3.c M crypto/openssl/crypto/evp/e_idea.c M crypto/openssl/crypto/evp/e_null.c M crypto/openssl/crypto/evp/e_old.c M crypto/openssl/crypto/evp/e_rc2.c M crypto/openssl/crypto/evp/e_rc4.c M crypto/openssl/crypto/evp/e_rc4_hmac_md5.c M crypto/openssl/crypto/evp/e_rc5.c M crypto/openssl/crypto/evp/e_seed.c M crypto/openssl/crypto/evp/e_sm4.c M crypto/openssl/crypto/evp/e_xcbc_d.c M crypto/openssl/crypto/evp/ec_ctrl.c M crypto/openssl/crypto/evp/ec_support.c M crypto/openssl/crypto/evp/encode.c M crypto/openssl/crypto/evp/evp_cnf.c M crypto/openssl/crypto/evp/evp_enc.c M crypto/openssl/crypto/evp/evp_err.c M crypto/openssl/crypto/evp/evp_fetch.c M crypto/openssl/crypto/evp/evp_key.c M crypto/openssl/crypto/evp/evp_lib.c M crypto/openssl/crypto/evp/evp_local.h M crypto/openssl/crypto/evp/evp_pbe.c M crypto/openssl/crypto/evp/evp_pkey.c M crypto/openssl/crypto/evp/evp_rand.c M crypto/openssl/crypto/evp/evp_utils.c M crypto/openssl/crypto/evp/exchange.c M crypto/openssl/crypto/evp/kdf_lib.c M crypto/openssl/crypto/evp/kdf_meth.c M crypto/openssl/crypto/evp/kem.c M crypto/openssl/crypto/evp/keymgmt_lib.c M crypto/openssl/crypto/evp/keymgmt_meth.c M crypto/openssl/crypto/evp/legacy_blake2.c M crypto/openssl/crypto/evp/legacy_md5_sha1.c M crypto/openssl/crypto/evp/legacy_mdc2.c M crypto/openssl/crypto/evp/legacy_meth.h M crypto/openssl/crypto/evp/legacy_ripemd.c M crypto/openssl/crypto/evp/legacy_sha.c M crypto/openssl/crypto/evp/legacy_wp.c M crypto/openssl/crypto/evp/m_sigver.c M crypto/openssl/crypto/evp/mac_lib.c M crypto/openssl/crypto/evp/mac_meth.c M crypto/openssl/crypto/evp/names.c M crypto/openssl/crypto/evp/p5_crpt.c M crypto/openssl/crypto/evp/p5_crpt2.c M crypto/openssl/crypto/evp/p_dec.c M crypto/openssl/crypto/evp/p_enc.c M crypto/openssl/crypto/evp/p_lib.c M crypto/openssl/crypto/evp/p_open.c M crypto/openssl/crypto/evp/p_seal.c M crypto/openssl/crypto/evp/p_sign.c M crypto/openssl/crypto/evp/p_verify.c M crypto/openssl/crypto/evp/pbe_scrypt.c M crypto/openssl/crypto/evp/pmeth_check.c M crypto/openssl/crypto/evp/pmeth_gn.c M crypto/openssl/crypto/evp/pmeth_lib.c M crypto/openssl/crypto/evp/signature.c M crypto/openssl/crypto/ex_data.c M crypto/openssl/crypto/ffc/ffc_backend.c M crypto/openssl/crypto/ffc/ffc_dh.c M crypto/openssl/crypto/ffc/ffc_key_generate.c M crypto/openssl/crypto/ffc/ffc_key_validate.c M crypto/openssl/crypto/ffc/ffc_params.c M crypto/openssl/crypto/ffc/ffc_params_generate.c M crypto/openssl/crypto/ffc/ffc_params_validate.c M crypto/openssl/crypto/getenv.c M crypto/openssl/crypto/hmac/hmac.c M crypto/openssl/crypto/hmac/hmac_local.h M crypto/openssl/crypto/http/http_client.c M crypto/openssl/crypto/http/http_err.c M crypto/openssl/crypto/http/http_lib.c M crypto/openssl/crypto/idea/i_cbc.c M crypto/openssl/crypto/idea/i_cfb64.c M crypto/openssl/crypto/idea/i_ecb.c M crypto/openssl/crypto/idea/i_ofb64.c M crypto/openssl/crypto/idea/idea_local.h M crypto/openssl/crypto/info.c M crypto/openssl/crypto/init.c M crypto/openssl/crypto/initthread.c M crypto/openssl/crypto/lhash/lh_stats.c M crypto/openssl/crypto/lhash/lhash.c M crypto/openssl/crypto/lhash/lhash_local.h M crypto/openssl/crypto/md2/md2_dgst.c M crypto/openssl/crypto/md4/md4_dgst.c M crypto/openssl/crypto/md4/md4_local.h M crypto/openssl/crypto/md4/md4_one.c M crypto/openssl/crypto/md5/md5_dgst.c M crypto/openssl/crypto/md5/md5_local.h M crypto/openssl/crypto/md5/md5_one.c M crypto/openssl/crypto/mdc2/mdc2dgst.c M crypto/openssl/crypto/mem.c M crypto/openssl/crypto/mem_sec.c M crypto/openssl/crypto/mips_arch.h M crypto/openssl/crypto/modes/asm/ghash-armv4.pl M crypto/openssl/crypto/modes/cbc128.c M crypto/openssl/crypto/modes/ccm128.c M crypto/openssl/crypto/modes/cfb128.c M crypto/openssl/crypto/modes/ctr128.c M crypto/openssl/crypto/modes/cts128.c M crypto/openssl/crypto/modes/gcm128.c M crypto/openssl/crypto/modes/ocb128.c M crypto/openssl/crypto/modes/ofb128.c M crypto/openssl/crypto/modes/siv128.c M crypto/openssl/crypto/modes/wrap128.c M crypto/openssl/crypto/modes/xts128.c M crypto/openssl/crypto/o_dir.c M crypto/openssl/crypto/o_fopen.c M crypto/openssl/crypto/o_str.c M crypto/openssl/crypto/o_time.c M crypto/openssl/crypto/objects/o_names.c M crypto/openssl/crypto/objects/obj_compat.h M crypto/openssl/crypto/objects/obj_dat.c M crypto/openssl/crypto/objects/obj_dat.h M crypto/openssl/crypto/objects/obj_err.c M crypto/openssl/crypto/objects/obj_lib.c M crypto/openssl/crypto/ocsp/ocsp_asn.c M crypto/openssl/crypto/ocsp/ocsp_cl.c M crypto/openssl/crypto/ocsp/ocsp_err.c M crypto/openssl/crypto/ocsp/ocsp_ext.c M crypto/openssl/crypto/ocsp/ocsp_http.c M crypto/openssl/crypto/ocsp/ocsp_lib.c M crypto/openssl/crypto/ocsp/ocsp_local.h M crypto/openssl/crypto/ocsp/ocsp_prn.c M crypto/openssl/crypto/ocsp/ocsp_srv.c M crypto/openssl/crypto/ocsp/ocsp_vfy.c M crypto/openssl/crypto/ocsp/v3_ocsp.c M crypto/openssl/crypto/packet.c M crypto/openssl/crypto/param_build.c M crypto/openssl/crypto/param_build_set.c M crypto/openssl/crypto/params.c M crypto/openssl/crypto/params_dup.c M crypto/openssl/crypto/params_from_text.c M crypto/openssl/crypto/passphrase.c M crypto/openssl/crypto/pem/pem_all.c M crypto/openssl/crypto/pem/pem_err.c M crypto/openssl/crypto/pem/pem_info.c M crypto/openssl/crypto/pem/pem_lib.c M crypto/openssl/crypto/pem/pem_local.h M crypto/openssl/crypto/pem/pem_oth.c M crypto/openssl/crypto/pem/pem_pk8.c M crypto/openssl/crypto/pem/pem_pkey.c M crypto/openssl/crypto/pem/pem_sign.c M crypto/openssl/crypto/pem/pvkfmt.c M crypto/openssl/crypto/perlasm/sparcv9_modes.pl M crypto/openssl/crypto/perlasm/x86_64-xlate.pl M crypto/openssl/crypto/pkcs12/p12_add.c M crypto/openssl/crypto/pkcs12/p12_asn.c M crypto/openssl/crypto/pkcs12/p12_attr.c M crypto/openssl/crypto/pkcs12/p12_crpt.c M crypto/openssl/crypto/pkcs12/p12_crt.c M crypto/openssl/crypto/pkcs12/p12_decr.c M crypto/openssl/crypto/pkcs12/p12_init.c M crypto/openssl/crypto/pkcs12/p12_key.c M crypto/openssl/crypto/pkcs12/p12_kiss.c M crypto/openssl/crypto/pkcs12/p12_local.h M crypto/openssl/crypto/pkcs12/p12_mutl.c M crypto/openssl/crypto/pkcs12/p12_npas.c M crypto/openssl/crypto/pkcs12/p12_p8d.c M crypto/openssl/crypto/pkcs12/p12_p8e.c M crypto/openssl/crypto/pkcs12/p12_sbag.c M crypto/openssl/crypto/pkcs12/p12_utl.c M crypto/openssl/crypto/pkcs12/pk12err.c M crypto/openssl/crypto/pkcs7/bio_pk7.c M crypto/openssl/crypto/pkcs7/pk7_asn1.c M crypto/openssl/crypto/pkcs7/pk7_attr.c M crypto/openssl/crypto/pkcs7/pk7_doit.c M crypto/openssl/crypto/pkcs7/pk7_lib.c M crypto/openssl/crypto/pkcs7/pk7_mime.c M crypto/openssl/crypto/pkcs7/pk7_smime.c M crypto/openssl/crypto/pkcs7/pkcs7err.c M crypto/openssl/crypto/poly1305/poly1305.c M crypto/openssl/crypto/poly1305/poly1305_base2_44.c M crypto/openssl/crypto/poly1305/poly1305_ieee754.c M crypto/openssl/crypto/poly1305/poly1305_ppc.c M crypto/openssl/crypto/ppccap.c M crypto/openssl/crypto/property/defn_cache.c M crypto/openssl/crypto/property/property.c M crypto/openssl/crypto/property/property_err.c M crypto/openssl/crypto/property/property_local.h M crypto/openssl/crypto/property/property_parse.c M crypto/openssl/crypto/property/property_query.c M crypto/openssl/crypto/property/property_string.c M crypto/openssl/crypto/provider.c M crypto/openssl/crypto/provider_child.c M crypto/openssl/crypto/provider_conf.c M crypto/openssl/crypto/provider_core.c M crypto/openssl/crypto/provider_local.h M crypto/openssl/crypto/provider_predefined.c M crypto/openssl/crypto/punycode.c M crypto/openssl/crypto/rand/prov_seed.c M crypto/openssl/crypto/rand/rand_deprecated.c M crypto/openssl/crypto/rand/rand_egd.c M crypto/openssl/crypto/rand/rand_err.c M crypto/openssl/crypto/rand/rand_lib.c M crypto/openssl/crypto/rand/rand_local.h M crypto/openssl/crypto/rand/rand_meth.c M crypto/openssl/crypto/rand/rand_pool.c M crypto/openssl/crypto/rand/randfile.c M crypto/openssl/crypto/rc2/rc2_cbc.c M crypto/openssl/crypto/rc2/rc2_ecb.c M crypto/openssl/crypto/rc2/rc2_local.h M crypto/openssl/crypto/rc2/rc2_skey.c M crypto/openssl/crypto/rc2/rc2cfb64.c M crypto/openssl/crypto/rc2/rc2ofb64.c M crypto/openssl/crypto/rc4/rc4_enc.c M crypto/openssl/crypto/rc4/rc4_local.h M crypto/openssl/crypto/rc4/rc4_skey.c M crypto/openssl/crypto/rc5/rc5_ecb.c M crypto/openssl/crypto/rc5/rc5_enc.c M crypto/openssl/crypto/rc5/rc5_local.h M crypto/openssl/crypto/rc5/rc5_skey.c M crypto/openssl/crypto/rc5/rc5cfb64.c M crypto/openssl/crypto/rc5/rc5ofb64.c M crypto/openssl/crypto/ripemd/rmd_dgst.c M crypto/openssl/crypto/ripemd/rmd_local.h M crypto/openssl/crypto/ripemd/rmdconst.h M crypto/openssl/crypto/rsa/rsa_acvp_test_params.c M crypto/openssl/crypto/rsa/rsa_ameth.c M crypto/openssl/crypto/rsa/rsa_asn1.c M crypto/openssl/crypto/rsa/rsa_backend.c M crypto/openssl/crypto/rsa/rsa_chk.c M crypto/openssl/crypto/rsa/rsa_crpt.c M crypto/openssl/crypto/rsa/rsa_depr.c M crypto/openssl/crypto/rsa/rsa_err.c M crypto/openssl/crypto/rsa/rsa_gen.c M crypto/openssl/crypto/rsa/rsa_lib.c M crypto/openssl/crypto/rsa/rsa_local.h M crypto/openssl/crypto/rsa/rsa_meth.c M crypto/openssl/crypto/rsa/rsa_mp.c M crypto/openssl/crypto/rsa/rsa_none.c M crypto/openssl/crypto/rsa/rsa_oaep.c M crypto/openssl/crypto/rsa/rsa_ossl.c M crypto/openssl/crypto/rsa/rsa_pk1.c M crypto/openssl/crypto/rsa/rsa_pmeth.c M crypto/openssl/crypto/rsa/rsa_pss.c M crypto/openssl/crypto/rsa/rsa_saos.c M crypto/openssl/crypto/rsa/rsa_schemes.c M crypto/openssl/crypto/rsa/rsa_sign.c M crypto/openssl/crypto/rsa/rsa_sp800_56b_check.c M crypto/openssl/crypto/rsa/rsa_sp800_56b_gen.c M crypto/openssl/crypto/rsa/rsa_x931.c M crypto/openssl/crypto/rsa/rsa_x931g.c M crypto/openssl/crypto/s390x_arch.h M crypto/openssl/crypto/s390xcap.c M crypto/openssl/crypto/s390xcpuid.pl M crypto/openssl/crypto/seed/seed.c M crypto/openssl/crypto/seed/seed_cbc.c M crypto/openssl/crypto/seed/seed_cfb.c M crypto/openssl/crypto/seed/seed_ecb.c M crypto/openssl/crypto/seed/seed_local.h M crypto/openssl/crypto/seed/seed_ofb.c M crypto/openssl/crypto/self_test_core.c M crypto/openssl/crypto/sha/asm/keccak1600-s390x.pl M crypto/openssl/crypto/sha/keccak1600.c M crypto/openssl/crypto/sha/sha256.c M crypto/openssl/crypto/sha/sha3.c M crypto/openssl/crypto/sha/sha512.c M crypto/openssl/crypto/sha/sha_local.h M crypto/openssl/crypto/sha/sha_ppc.c M crypto/openssl/crypto/siphash/siphash.c M crypto/openssl/crypto/sm2/sm2_crypt.c M crypto/openssl/crypto/sm2/sm2_err.c M crypto/openssl/crypto/sm2/sm2_key.c M crypto/openssl/crypto/sm2/sm2_sign.c M crypto/openssl/crypto/sm3/legacy_sm3.c M crypto/openssl/crypto/sm3/sm3.c M crypto/openssl/crypto/sm3/sm3_local.h M crypto/openssl/crypto/sm4/sm4.c M crypto/openssl/crypto/sparcv9cap.c M crypto/openssl/crypto/sparse_array.c M crypto/openssl/crypto/srp/srp_lib.c M crypto/openssl/crypto/srp/srp_vfy.c M crypto/openssl/crypto/stack/stack.c M crypto/openssl/crypto/store/store_err.c M crypto/openssl/crypto/store/store_lib.c M crypto/openssl/crypto/store/store_local.h M crypto/openssl/crypto/store/store_meth.c M crypto/openssl/crypto/store/store_register.c M crypto/openssl/crypto/store/store_result.c M crypto/openssl/crypto/store/store_strings.c M crypto/openssl/crypto/threads_none.c M crypto/openssl/crypto/threads_pthread.c M crypto/openssl/crypto/threads_win.c M crypto/openssl/crypto/trace.c M crypto/openssl/crypto/ts/ts_asn1.c M crypto/openssl/crypto/ts/ts_conf.c M crypto/openssl/crypto/ts/ts_err.c M crypto/openssl/crypto/ts/ts_lib.c M crypto/openssl/crypto/ts/ts_local.h M crypto/openssl/crypto/ts/ts_req_print.c M crypto/openssl/crypto/ts/ts_rsp_print.c M crypto/openssl/crypto/ts/ts_rsp_sign.c M crypto/openssl/crypto/ts/ts_rsp_verify.c M crypto/openssl/crypto/ts/ts_verify_ctx.c M crypto/openssl/crypto/txt_db/txt_db.c M crypto/openssl/crypto/ui/ui_err.c M crypto/openssl/crypto/ui/ui_lib.c M crypto/openssl/crypto/ui/ui_local.h M crypto/openssl/crypto/ui/ui_null.c M crypto/openssl/crypto/ui/ui_openssl.c M crypto/openssl/crypto/ui/ui_util.c M crypto/openssl/crypto/uid.c M crypto/openssl/crypto/vms_rms.h M crypto/openssl/crypto/whrlpool/wp_block.c M crypto/openssl/crypto/whrlpool/wp_dgst.c M crypto/openssl/crypto/x509/by_dir.c M crypto/openssl/crypto/x509/by_file.c M crypto/openssl/crypto/x509/by_store.c M crypto/openssl/crypto/x509/pcy_cache.c M crypto/openssl/crypto/x509/pcy_data.c M crypto/openssl/crypto/x509/pcy_lib.c M crypto/openssl/crypto/x509/pcy_local.h M crypto/openssl/crypto/x509/pcy_map.c M crypto/openssl/crypto/x509/pcy_node.c M crypto/openssl/crypto/x509/pcy_tree.c M crypto/openssl/crypto/x509/standard_exts.h M crypto/openssl/crypto/x509/t_crl.c M crypto/openssl/crypto/x509/t_req.c M crypto/openssl/crypto/x509/t_x509.c M crypto/openssl/crypto/x509/v3_addr.c M crypto/openssl/crypto/x509/v3_admis.c M crypto/openssl/crypto/x509/v3_admis.h M crypto/openssl/crypto/x509/v3_akeya.c M crypto/openssl/crypto/x509/v3_akid.c M crypto/openssl/crypto/x509/v3_asid.c M crypto/openssl/crypto/x509/v3_bcons.c M crypto/openssl/crypto/x509/v3_bitst.c M crypto/openssl/crypto/x509/v3_conf.c M crypto/openssl/crypto/x509/v3_cpols.c M crypto/openssl/crypto/x509/v3_crld.c M crypto/openssl/crypto/x509/v3_enum.c M crypto/openssl/crypto/x509/v3_extku.c M crypto/openssl/crypto/x509/v3_genn.c M crypto/openssl/crypto/x509/v3_ia5.c M crypto/openssl/crypto/x509/v3_info.c M crypto/openssl/crypto/x509/v3_int.c M crypto/openssl/crypto/x509/v3_ist.c M crypto/openssl/crypto/x509/v3_lib.c M crypto/openssl/crypto/x509/v3_ncons.c M crypto/openssl/crypto/x509/v3_pci.c M crypto/openssl/crypto/x509/v3_pcia.c M crypto/openssl/crypto/x509/v3_pcons.c M crypto/openssl/crypto/x509/v3_pku.c M crypto/openssl/crypto/x509/v3_pmaps.c M crypto/openssl/crypto/x509/v3_prn.c M crypto/openssl/crypto/x509/v3_purp.c M crypto/openssl/crypto/x509/v3_san.c M crypto/openssl/crypto/x509/v3_skid.c M crypto/openssl/crypto/x509/v3_sxnet.c M crypto/openssl/crypto/x509/v3_tlsf.c M crypto/openssl/crypto/x509/v3_utf8.c M crypto/openssl/crypto/x509/v3_utl.c M crypto/openssl/crypto/x509/v3err.c M crypto/openssl/crypto/x509/x509_att.c M crypto/openssl/crypto/x509/x509_cmp.c M crypto/openssl/crypto/x509/x509_d2.c M crypto/openssl/crypto/x509/x509_err.c M crypto/openssl/crypto/x509/x509_ext.c M crypto/openssl/crypto/x509/x509_local.h M crypto/openssl/crypto/x509/x509_lu.c M crypto/openssl/crypto/x509/x509_meth.c M crypto/openssl/crypto/x509/x509_obj.c M crypto/openssl/crypto/x509/x509_r2x.c M crypto/openssl/crypto/x509/x509_req.c M crypto/openssl/crypto/x509/x509_set.c M crypto/openssl/crypto/x509/x509_trust.c M crypto/openssl/crypto/x509/x509_txt.c M crypto/openssl/crypto/x509/x509_v3.c M crypto/openssl/crypto/x509/x509_vfy.c M crypto/openssl/crypto/x509/x509_vpm.c M crypto/openssl/crypto/x509/x509cset.c M crypto/openssl/crypto/x509/x509name.c M crypto/openssl/crypto/x509/x509type.c M crypto/openssl/crypto/x509/x_all.c M crypto/openssl/crypto/x509/x_attrib.c M crypto/openssl/crypto/x509/x_crl.c M crypto/openssl/crypto/x509/x_exten.c M crypto/openssl/crypto/x509/x_name.c M crypto/openssl/crypto/x509/x_pubkey.c M crypto/openssl/crypto/x509/x_req.c M crypto/openssl/crypto/x509/x_x509.c M crypto/openssl/crypto/x509/x_x509a.c M crypto/openssl/demos/bio/client-arg.c M crypto/openssl/demos/bio/client-conf.c M crypto/openssl/demos/bio/saccept.c M crypto/openssl/demos/bio/sconnect.c M crypto/openssl/demos/bio/server-arg.c M crypto/openssl/demos/bio/server-cmod.c M crypto/openssl/demos/bio/server-conf.c M crypto/openssl/demos/cipher/aesccm.c M crypto/openssl/demos/cipher/aesgcm.c M crypto/openssl/demos/cipher/aeskeywrap.c M crypto/openssl/demos/cipher/ariacbc.c M crypto/openssl/demos/cms/cms_comp.c M crypto/openssl/demos/cms/cms_ddec.c M crypto/openssl/demos/cms/cms_dec.c M crypto/openssl/demos/cms/cms_denc.c M crypto/openssl/demos/cms/cms_enc.c M crypto/openssl/demos/cms/cms_sign.c M crypto/openssl/demos/cms/cms_sign2.c M crypto/openssl/demos/cms/cms_uncomp.c M crypto/openssl/demos/cms/cms_ver.c M crypto/openssl/demos/digest/BIO_f_md.c M crypto/openssl/demos/digest/EVP_MD_demo.c M crypto/openssl/demos/digest/EVP_MD_stdin.c M crypto/openssl/demos/digest/EVP_MD_xof.c M crypto/openssl/demos/encode/ec_encode.c M crypto/openssl/demos/encode/rsa_encode.c M crypto/openssl/demos/kdf/hkdf.c M crypto/openssl/demos/kdf/pbkdf2.c M crypto/openssl/demos/kdf/scrypt.c M crypto/openssl/demos/keyexch/x25519.c M crypto/openssl/demos/mac/cmac-aes256.c M crypto/openssl/demos/mac/gmac.c M crypto/openssl/demos/mac/hmac-sha512.c M crypto/openssl/demos/mac/poly1305.c M crypto/openssl/demos/pkcs12/pkread.c M crypto/openssl/demos/pkey/EVP_PKEY_DSA_keygen.c M crypto/openssl/demos/pkey/EVP_PKEY_DSA_paramfromdata.c M crypto/openssl/demos/pkey/EVP_PKEY_DSA_paramgen.c M crypto/openssl/demos/pkey/EVP_PKEY_DSA_paramvalidate.c M crypto/openssl/demos/pkey/EVP_PKEY_EC_keygen.c M crypto/openssl/demos/pkey/EVP_PKEY_RSA_keygen.c M crypto/openssl/demos/signature/EVP_Signature_demo.c M crypto/openssl/demos/signature/EVP_Signature_demo.h M crypto/openssl/demos/signature/rsa_pss_direct.c M crypto/openssl/demos/signature/rsa_pss_hash.c M crypto/openssl/demos/smime/smdec.c M crypto/openssl/demos/smime/smenc.c M crypto/openssl/demos/smime/smsign.c M crypto/openssl/demos/smime/smsign2.c M crypto/openssl/demos/smime/smver.c M crypto/openssl/doc/README.md M crypto/openssl/doc/build.info A crypto/openssl/doc/internal/man3/bn_mul_words.pod M crypto/openssl/doc/man1/CA.pl.pod M crypto/openssl/doc/man1/openssl-ciphers.pod.in M crypto/openssl/doc/man1/openssl-cmp.pod.in M crypto/openssl/doc/man1/openssl-cms.pod.in M crypto/openssl/doc/man1/openssl-enc.pod.in M crypto/openssl/doc/man1/openssl-format-options.pod M crypto/openssl/doc/man1/openssl-s_client.pod.in M crypto/openssl/doc/man1/openssl-verification-options.pod M crypto/openssl/doc/man1/openssl-verify.pod.in M crypto/openssl/doc/man3/ADMISSIONS.pod M crypto/openssl/doc/man3/BIO_get_data.pod A crypto/openssl/doc/man3/BIO_set_flags.pod M crypto/openssl/doc/man3/BN_generate_prime.pod M crypto/openssl/doc/man3/CMS_EncryptedData_decrypt.pod M crypto/openssl/doc/man3/CMS_EncryptedData_encrypt.pod A crypto/openssl/doc/man3/CMS_EncryptedData_set1_key.pod M crypto/openssl/doc/man3/CMS_sign.pod M crypto/openssl/doc/man3/DTLS_set_timer_cb.pod A crypto/openssl/doc/man3/EVP_CIPHER_CTX_get_app_data.pod M crypto/openssl/doc/man3/EVP_EncryptInit.pod M crypto/openssl/doc/man3/EVP_PKEY_CTX_new.pod M crypto/openssl/doc/man3/EVP_PKEY_keygen.pod M crypto/openssl/doc/man3/EVP_PKEY_new.pod M crypto/openssl/doc/man3/EVP_RAND.pod M crypto/openssl/doc/man3/EVP_aes_128_gcm.pod M crypto/openssl/doc/man3/EVP_aria_128_gcm.pod M crypto/openssl/doc/man3/EVP_chacha20.pod M crypto/openssl/doc/man3/OPENSSL_malloc.pod M crypto/openssl/doc/man3/OPENSSL_secure_malloc.pod M crypto/openssl/doc/man3/OSSL_DECODER_CTX.pod M crypto/openssl/doc/man3/OSSL_DECODER_CTX_new_for_pkey.pod M crypto/openssl/doc/man3/OSSL_ENCODER_CTX.pod M crypto/openssl/doc/man3/OSSL_ENCODER_CTX_new_for_pkey.pod M crypto/openssl/doc/man3/OSSL_PARAM.pod M crypto/openssl/doc/man3/OSSL_PARAM_int.pod M crypto/openssl/doc/man3/OSSL_PROVIDER.pod M crypto/openssl/doc/man3/OpenSSL_version.pod M crypto/openssl/doc/man3/PEM_read_CMS.pod M crypto/openssl/doc/man3/PKCS5_PBE_keyivgen.pod M crypto/openssl/doc/man3/PKCS7_sign.pod M crypto/openssl/doc/man3/RAND_load_file.pod M crypto/openssl/doc/man3/RSA_set_method.pod M crypto/openssl/doc/man3/SSL_CIPHER_get_name.pod M crypto/openssl/doc/man3/SSL_CONF_cmd.pod M crypto/openssl/doc/man3/SSL_CTX_set_cert_verify_callback.pod M crypto/openssl/doc/man3/SSL_CTX_set_client_hello_cb.pod M crypto/openssl/doc/man3/SSL_CTX_set_min_proto_version.pod M crypto/openssl/doc/man3/SSL_CTX_set_options.pod M crypto/openssl/doc/man3/SSL_CTX_set_psk_client_callback.pod M crypto/openssl/doc/man3/SSL_CTX_set_tmp_dh_callback.pod M crypto/openssl/doc/man3/SSL_SESSION_get0_hostname.pod M crypto/openssl/doc/man3/SSL_key_update.pod M crypto/openssl/doc/man3/X509_NAME_print_ex.pod M crypto/openssl/doc/man3/X509_STORE_CTX_new.pod M crypto/openssl/doc/man3/X509_STORE_get0_param.pod M crypto/openssl/doc/man3/X509_VERIFY_PARAM_set_flags.pod M crypto/openssl/doc/man3/d2i_X509.pod M crypto/openssl/doc/man7/EVP_PKEY-DSA.pod M crypto/openssl/doc/man7/EVP_PKEY-FFC.pod M crypto/openssl/doc/man7/OSSL_PROVIDER-FIPS.pod M crypto/openssl/doc/man7/migration_guide.pod M crypto/openssl/doc/man7/openssl-env.pod M crypto/openssl/doc/man7/property.pod M crypto/openssl/doc/man7/provider-base.pod M crypto/openssl/doc/man7/provider-cipher.pod M crypto/openssl/doc/man7/provider-decoder.pod M crypto/openssl/doc/man7/provider-encoder.pod M crypto/openssl/doc/man7/provider-keymgmt.pod M crypto/openssl/doc/man7/provider-signature.pod M crypto/openssl/e_os.h M crypto/openssl/engines/e_afalg.c M crypto/openssl/engines/e_afalg.h M crypto/openssl/engines/e_afalg_err.c M crypto/openssl/engines/e_afalg_err.h M crypto/openssl/engines/e_capi.c M crypto/openssl/engines/e_capi_err.c M crypto/openssl/engines/e_capi_err.h M crypto/openssl/engines/e_dasync.c M crypto/openssl/engines/e_dasync_err.c M crypto/openssl/engines/e_dasync_err.h M crypto/openssl/engines/e_devcrypto.c M crypto/openssl/engines/e_loader_attic.c M crypto/openssl/engines/e_loader_attic_err.c M crypto/openssl/engines/e_loader_attic_err.h M crypto/openssl/engines/e_ossltest.c M crypto/openssl/engines/e_ossltest_err.c M crypto/openssl/engines/e_ossltest_err.h M crypto/openssl/engines/e_padlock.c M crypto/openssl/external/perl/Text-Template-1.56/lib/Text/Template.pm M crypto/openssl/external/perl/Text-Template-1.56/lib/Text/Template/Preprocess.pm M crypto/openssl/fuzz/asn1.c M crypto/openssl/fuzz/bignum.c M crypto/openssl/fuzz/bndiv.c M crypto/openssl/fuzz/client.c M crypto/openssl/fuzz/cmp.c M crypto/openssl/fuzz/driver.c M crypto/openssl/fuzz/fuzz_rand.c M crypto/openssl/fuzz/oids.txt M crypto/openssl/fuzz/server.c M crypto/openssl/fuzz/test-corpus.c M crypto/openssl/fuzz/x509.c M crypto/openssl/include/crypto/aes_platform.h M crypto/openssl/include/crypto/aria.h M crypto/openssl/include/crypto/asn1.h M crypto/openssl/include/crypto/asn1_dsa.h M crypto/openssl/include/crypto/asn1err.h M crypto/openssl/include/crypto/async.h M crypto/openssl/include/crypto/asyncerr.h M crypto/openssl/include/crypto/bioerr.h M crypto/openssl/include/crypto/bn.h M crypto/openssl/include/crypto/bn_conf.h M crypto/openssl/include/crypto/bn_conf.h.in M crypto/openssl/include/crypto/bn_dh.h M crypto/openssl/include/crypto/bnerr.h M crypto/openssl/include/crypto/buffererr.h M crypto/openssl/include/crypto/chacha.h M crypto/openssl/include/crypto/cmll_platform.h M crypto/openssl/include/crypto/cmperr.h M crypto/openssl/include/crypto/cmserr.h M crypto/openssl/include/crypto/comperr.h M crypto/openssl/include/crypto/conferr.h M crypto/openssl/include/crypto/crmferr.h M crypto/openssl/include/crypto/cryptlib.h M crypto/openssl/include/crypto/cryptoerr.h M crypto/openssl/include/crypto/cterr.h M crypto/openssl/include/crypto/ctype.h M crypto/openssl/include/crypto/decoder.h M crypto/openssl/include/crypto/decodererr.h M crypto/openssl/include/crypto/des_platform.h M crypto/openssl/include/crypto/dh.h M crypto/openssl/include/crypto/dherr.h M crypto/openssl/include/crypto/dsa.h M crypto/openssl/include/crypto/dsaerr.h M crypto/openssl/include/crypto/dso_conf.h M crypto/openssl/include/crypto/dso_conf.h.in M crypto/openssl/include/crypto/ec.h M crypto/openssl/include/crypto/ecerr.h M crypto/openssl/include/crypto/ecx.h M crypto/openssl/include/crypto/encoder.h M crypto/openssl/include/crypto/encodererr.h M crypto/openssl/include/crypto/engineerr.h M crypto/openssl/include/crypto/err.h M crypto/openssl/include/crypto/ess.h M crypto/openssl/include/crypto/esserr.h M crypto/openssl/include/crypto/evp.h M crypto/openssl/include/crypto/evperr.h M crypto/openssl/include/crypto/httperr.h M crypto/openssl/include/crypto/lhash.h M crypto/openssl/include/crypto/md32_common.h M crypto/openssl/include/crypto/modes.h M crypto/openssl/include/crypto/objectserr.h M crypto/openssl/include/crypto/ocsperr.h M crypto/openssl/include/crypto/pem.h M crypto/openssl/include/crypto/pemerr.h M crypto/openssl/include/crypto/pkcs12err.h M crypto/openssl/include/crypto/pkcs7.h M crypto/openssl/include/crypto/pkcs7err.h M crypto/openssl/include/crypto/poly1305.h M crypto/openssl/include/crypto/ppc_arch.h M crypto/openssl/include/crypto/punycode.h M crypto/openssl/include/crypto/rand.h M crypto/openssl/include/crypto/rand_pool.h M crypto/openssl/include/crypto/randerr.h M crypto/openssl/include/crypto/rsa.h M crypto/openssl/include/crypto/rsaerr.h M crypto/openssl/include/crypto/security_bits.h M crypto/openssl/include/crypto/sha.h M crypto/openssl/include/crypto/siphash.h M crypto/openssl/include/crypto/siv.h M crypto/openssl/include/crypto/sm2.h M crypto/openssl/include/crypto/sm2err.h M crypto/openssl/include/crypto/sm4.h M crypto/openssl/include/crypto/sparc_arch.h M crypto/openssl/include/crypto/sparse_array.h M crypto/openssl/include/crypto/store.h M crypto/openssl/include/crypto/storeerr.h M crypto/openssl/include/crypto/tserr.h M crypto/openssl/include/crypto/types.h M crypto/openssl/include/crypto/uierr.h M crypto/openssl/include/crypto/x509.h M crypto/openssl/include/crypto/x509err.h M crypto/openssl/include/crypto/x509v3err.h M crypto/openssl/include/internal/asn1.h M crypto/openssl/include/internal/bio.h M crypto/openssl/include/internal/conf.h M crypto/openssl/include/internal/constant_time.h M crypto/openssl/include/internal/core.h M crypto/openssl/include/internal/cryptlib.h M crypto/openssl/include/internal/dane.h M crypto/openssl/include/internal/deprecated.h M crypto/openssl/include/internal/der.h M crypto/openssl/include/internal/dso.h M crypto/openssl/include/internal/dsoerr.h M crypto/openssl/include/internal/endian.h M crypto/openssl/include/internal/err.h M crypto/openssl/include/internal/ffc.h M crypto/openssl/include/internal/ktls.h M crypto/openssl/include/internal/namemap.h M crypto/openssl/include/internal/nelem.h M crypto/openssl/include/internal/numbers.h M crypto/openssl/include/internal/o_dir.h M crypto/openssl/include/internal/packet.h M crypto/openssl/include/internal/param_build_set.h M crypto/openssl/include/internal/passphrase.h M crypto/openssl/include/internal/property.h M crypto/openssl/include/internal/propertyerr.h M crypto/openssl/include/internal/provider.h M crypto/openssl/include/internal/refcount.h M crypto/openssl/include/internal/sha3.h M crypto/openssl/include/internal/sizes.h M crypto/openssl/include/internal/sm3.h M crypto/openssl/include/internal/sockets.h M crypto/openssl/include/internal/sslconf.h M crypto/openssl/include/internal/symhacks.h M crypto/openssl/include/internal/thread_once.h M crypto/openssl/include/internal/tlsgroups.h M crypto/openssl/include/internal/tsan_assist.h M crypto/openssl/include/internal/unicode.h M crypto/openssl/include/openssl/aes.h M crypto/openssl/include/openssl/asn1.h M crypto/openssl/include/openssl/asn1.h.in M crypto/openssl/include/openssl/asn1err.h M crypto/openssl/include/openssl/asn1t.h M crypto/openssl/include/openssl/asn1t.h.in M crypto/openssl/include/openssl/async.h M crypto/openssl/include/openssl/asyncerr.h M crypto/openssl/include/openssl/bio.h M crypto/openssl/include/openssl/bio.h.in M crypto/openssl/include/openssl/bioerr.h M crypto/openssl/include/openssl/blowfish.h M crypto/openssl/include/openssl/bn.h M crypto/openssl/include/openssl/bnerr.h M crypto/openssl/include/openssl/buffer.h M crypto/openssl/include/openssl/buffererr.h M crypto/openssl/include/openssl/camellia.h M crypto/openssl/include/openssl/cast.h M crypto/openssl/include/openssl/cmac.h M crypto/openssl/include/openssl/cmp.h M crypto/openssl/include/openssl/cmp.h.in M crypto/openssl/include/openssl/cmp_util.h M crypto/openssl/include/openssl/cmperr.h M crypto/openssl/include/openssl/cms.h M crypto/openssl/include/openssl/cms.h.in M crypto/openssl/include/openssl/cmserr.h M crypto/openssl/include/openssl/comp.h M crypto/openssl/include/openssl/comperr.h M crypto/openssl/include/openssl/conf.h M crypto/openssl/include/openssl/conf.h.in M crypto/openssl/include/openssl/conf_api.h M crypto/openssl/include/openssl/conferr.h M crypto/openssl/include/openssl/configuration.h M crypto/openssl/include/openssl/configuration.h.in M crypto/openssl/include/openssl/conftypes.h M crypto/openssl/include/openssl/core.h M crypto/openssl/include/openssl/core_dispatch.h M crypto/openssl/include/openssl/core_names.h M crypto/openssl/include/openssl/core_object.h M crypto/openssl/include/openssl/crmf.h M crypto/openssl/include/openssl/crmf.h.in M crypto/openssl/include/openssl/crmferr.h M crypto/openssl/include/openssl/crypto.h M crypto/openssl/include/openssl/crypto.h.in M crypto/openssl/include/openssl/cryptoerr.h M crypto/openssl/include/openssl/cryptoerr_legacy.h M crypto/openssl/include/openssl/ct.h M crypto/openssl/include/openssl/ct.h.in M crypto/openssl/include/openssl/cterr.h M crypto/openssl/include/openssl/decoder.h M crypto/openssl/include/openssl/decodererr.h M crypto/openssl/include/openssl/des.h M crypto/openssl/include/openssl/dh.h M crypto/openssl/include/openssl/dherr.h M crypto/openssl/include/openssl/dsa.h M crypto/openssl/include/openssl/dsaerr.h M crypto/openssl/include/openssl/dtls1.h M crypto/openssl/include/openssl/e_os2.h M crypto/openssl/include/openssl/ebcdic.h M crypto/openssl/include/openssl/ec.h M crypto/openssl/include/openssl/ecerr.h M crypto/openssl/include/openssl/encoder.h M crypto/openssl/include/openssl/encodererr.h M crypto/openssl/include/openssl/engine.h M crypto/openssl/include/openssl/engineerr.h M crypto/openssl/include/openssl/err.h M crypto/openssl/include/openssl/err.h.in M crypto/openssl/include/openssl/ess.h M crypto/openssl/include/openssl/ess.h.in M crypto/openssl/include/openssl/esserr.h M crypto/openssl/include/openssl/evp.h M crypto/openssl/include/openssl/evperr.h M crypto/openssl/include/openssl/fips_names.h M crypto/openssl/include/openssl/fipskey.h M crypto/openssl/include/openssl/fipskey.h.in M crypto/openssl/include/openssl/hmac.h M crypto/openssl/include/openssl/http.h M crypto/openssl/include/openssl/httperr.h M crypto/openssl/include/openssl/idea.h M crypto/openssl/include/openssl/kdf.h M crypto/openssl/include/openssl/kdferr.h M crypto/openssl/include/openssl/lhash.h M crypto/openssl/include/openssl/lhash.h.in M crypto/openssl/include/openssl/macros.h M crypto/openssl/include/openssl/md2.h M crypto/openssl/include/openssl/md4.h M crypto/openssl/include/openssl/md5.h M crypto/openssl/include/openssl/mdc2.h M crypto/openssl/include/openssl/modes.h M crypto/openssl/include/openssl/obj_mac.h M crypto/openssl/include/openssl/objects.h M crypto/openssl/include/openssl/objectserr.h M crypto/openssl/include/openssl/ocsp.h M crypto/openssl/include/openssl/ocsp.h.in M crypto/openssl/include/openssl/ocsperr.h M crypto/openssl/include/openssl/opensslconf.h M crypto/openssl/include/openssl/opensslv.h M crypto/openssl/include/openssl/opensslv.h.in M crypto/openssl/include/openssl/ossl_typ.h M crypto/openssl/include/openssl/param_build.h M crypto/openssl/include/openssl/params.h M crypto/openssl/include/openssl/pem.h M crypto/openssl/include/openssl/pem2.h M crypto/openssl/include/openssl/pemerr.h M crypto/openssl/include/openssl/pkcs12.h M crypto/openssl/include/openssl/pkcs12.h.in M crypto/openssl/include/openssl/pkcs12err.h M crypto/openssl/include/openssl/pkcs7.h M crypto/openssl/include/openssl/pkcs7.h.in M crypto/openssl/include/openssl/pkcs7err.h M crypto/openssl/include/openssl/prov_ssl.h M crypto/openssl/include/openssl/proverr.h M crypto/openssl/include/openssl/provider.h M crypto/openssl/include/openssl/rand.h M crypto/openssl/include/openssl/randerr.h M crypto/openssl/include/openssl/rc2.h M crypto/openssl/include/openssl/rc4.h M crypto/openssl/include/openssl/rc5.h M crypto/openssl/include/openssl/ripemd.h M crypto/openssl/include/openssl/rsa.h M crypto/openssl/include/openssl/rsaerr.h M crypto/openssl/include/openssl/safestack.h M crypto/openssl/include/openssl/safestack.h.in M crypto/openssl/include/openssl/seed.h M crypto/openssl/include/openssl/self_test.h M crypto/openssl/include/openssl/sha.h M crypto/openssl/include/openssl/srp.h M crypto/openssl/include/openssl/srp.h.in M crypto/openssl/include/openssl/srtp.h M crypto/openssl/include/openssl/ssl.h M crypto/openssl/include/openssl/ssl.h.in M crypto/openssl/include/openssl/ssl2.h M crypto/openssl/include/openssl/ssl3.h M crypto/openssl/include/openssl/sslerr.h M crypto/openssl/include/openssl/sslerr_legacy.h M crypto/openssl/include/openssl/stack.h M crypto/openssl/include/openssl/store.h M crypto/openssl/include/openssl/storeerr.h M crypto/openssl/include/openssl/symhacks.h M crypto/openssl/include/openssl/tls1.h M crypto/openssl/include/openssl/trace.h M crypto/openssl/include/openssl/ts.h M crypto/openssl/include/openssl/tserr.h M crypto/openssl/include/openssl/txt_db.h M crypto/openssl/include/openssl/types.h M crypto/openssl/include/openssl/ui.h M crypto/openssl/include/openssl/ui.h.in M crypto/openssl/include/openssl/uierr.h M crypto/openssl/include/openssl/whrlpool.h M crypto/openssl/include/openssl/x509.h M crypto/openssl/include/openssl/x509.h.in M crypto/openssl/include/openssl/x509_vfy.h M crypto/openssl/include/openssl/x509_vfy.h.in M crypto/openssl/include/openssl/x509err.h M crypto/openssl/include/openssl/x509v3.h M crypto/openssl/include/openssl/x509v3.h.in M crypto/openssl/include/openssl/x509v3err.h M crypto/openssl/ms/applink.c M crypto/openssl/ms/uplink.c M crypto/openssl/ms/uplink.h M crypto/openssl/providers/baseprov.c M crypto/openssl/providers/common/bio_prov.c M crypto/openssl/providers/common/capabilities.c M crypto/openssl/providers/common/der/der_digests_gen.c M crypto/openssl/providers/common/der/der_digests_gen.c.in M crypto/openssl/providers/common/der/der_dsa_gen.c M crypto/openssl/providers/common/der/der_dsa_gen.c.in M crypto/openssl/providers/common/der/der_dsa_key.c M crypto/openssl/providers/common/der/der_dsa_sig.c M crypto/openssl/providers/common/der/der_ec_gen.c M crypto/openssl/providers/common/der/der_ec_gen.c.in M crypto/openssl/providers/common/der/der_ec_key.c M crypto/openssl/providers/common/der/der_ec_sig.c M crypto/openssl/providers/common/der/der_ecx_gen.c M crypto/openssl/providers/common/der/der_ecx_gen.c.in M crypto/openssl/providers/common/der/der_ecx_key.c M crypto/openssl/providers/common/der/der_rsa_gen.c M crypto/openssl/providers/common/der/der_rsa_gen.c.in M crypto/openssl/providers/common/der/der_rsa_key.c M crypto/openssl/providers/common/der/der_rsa_sig.c M crypto/openssl/providers/common/der/der_sm2_gen.c.in M crypto/openssl/providers/common/der/der_sm2_key.c M crypto/openssl/providers/common/der/der_sm2_sig.c M crypto/openssl/providers/common/der/der_wrap_gen.c M crypto/openssl/providers/common/der/der_wrap_gen.c.in M crypto/openssl/providers/common/digest_to_nid.c M crypto/openssl/providers/common/include/prov/bio.h M crypto/openssl/providers/common/include/prov/der_digests.h M crypto/openssl/providers/common/include/prov/der_digests.h.in M crypto/openssl/providers/common/include/prov/der_dsa.h M crypto/openssl/providers/common/include/prov/der_dsa.h.in M crypto/openssl/providers/common/include/prov/der_ec.h M crypto/openssl/providers/common/include/prov/der_ec.h.in M crypto/openssl/providers/common/include/prov/der_ecx.h M crypto/openssl/providers/common/include/prov/der_ecx.h.in M crypto/openssl/providers/common/include/prov/der_rsa.h M crypto/openssl/providers/common/include/prov/der_rsa.h.in M crypto/openssl/providers/common/include/prov/der_sm2.h.in M crypto/openssl/providers/common/include/prov/der_wrap.h M crypto/openssl/providers/common/include/prov/der_wrap.h.in M crypto/openssl/providers/common/include/prov/proverr.h M crypto/openssl/providers/common/include/prov/provider_ctx.h M crypto/openssl/providers/common/include/prov/provider_util.h M crypto/openssl/providers/common/include/prov/securitycheck.h M crypto/openssl/providers/common/provider_err.c M crypto/openssl/providers/common/provider_seeding.c M crypto/openssl/providers/common/provider_util.c M crypto/openssl/providers/common/securitycheck.c M crypto/openssl/providers/common/securitycheck_default.c M crypto/openssl/providers/common/securitycheck_fips.c M crypto/openssl/providers/decoders.inc M crypto/openssl/providers/defltprov.c M crypto/openssl/providers/fips-sources.checksums M crypto/openssl/providers/fips.checksum M crypto/openssl/providers/fips/fips_entry.c M crypto/openssl/providers/fips/fipsprov.c M crypto/openssl/providers/fips/self_test.c M crypto/openssl/providers/fips/self_test.h M crypto/openssl/providers/fips/self_test_kats.c M crypto/openssl/providers/implementations/asymciphers/rsa_enc.c M crypto/openssl/providers/implementations/asymciphers/sm2_enc.c M crypto/openssl/providers/implementations/ciphers/cipher_aes.c M crypto/openssl/providers/implementations/ciphers/cipher_aes.h M crypto/openssl/providers/implementations/ciphers/cipher_aes_cbc_hmac_sha.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_cbc_hmac_sha.h M crypto/openssl/providers/implementations/ciphers/cipher_aes_cbc_hmac_sha1_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_cbc_hmac_sha256_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_ccm.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_ccm.h M crypto/openssl/providers/implementations/ciphers/cipher_aes_ccm_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm.h M crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm_hw_armv8.inc M crypto/openssl/providers/implementations/ciphers/cipher_aes_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_ocb.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_ocb.h M crypto/openssl/providers/implementations/ciphers/cipher_aes_ocb_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_siv.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_siv.h M crypto/openssl/providers/implementations/ciphers/cipher_aes_siv_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_wrp.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_xts.c M crypto/openssl/providers/implementations/ciphers/cipher_aes_xts.h M crypto/openssl/providers/implementations/ciphers/cipher_aes_xts_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aria.c M crypto/openssl/providers/implementations/ciphers/cipher_aria.h M crypto/openssl/providers/implementations/ciphers/cipher_aria_ccm.c M crypto/openssl/providers/implementations/ciphers/cipher_aria_ccm.h M crypto/openssl/providers/implementations/ciphers/cipher_aria_ccm_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aria_gcm.c M crypto/openssl/providers/implementations/ciphers/cipher_aria_gcm.h M crypto/openssl/providers/implementations/ciphers/cipher_aria_gcm_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_aria_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_blowfish.c M crypto/openssl/providers/implementations/ciphers/cipher_blowfish.h M crypto/openssl/providers/implementations/ciphers/cipher_blowfish_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_camellia.c M crypto/openssl/providers/implementations/ciphers/cipher_camellia.h M crypto/openssl/providers/implementations/ciphers/cipher_camellia_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_cast.h M crypto/openssl/providers/implementations/ciphers/cipher_cast5.c M crypto/openssl/providers/implementations/ciphers/cipher_cast5_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_chacha20.c M crypto/openssl/providers/implementations/ciphers/cipher_chacha20.h M crypto/openssl/providers/implementations/ciphers/cipher_chacha20_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.c M crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.h M crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_cts.c M crypto/openssl/providers/implementations/ciphers/cipher_cts.h M crypto/openssl/providers/implementations/ciphers/cipher_des.c M crypto/openssl/providers/implementations/ciphers/cipher_des.h M crypto/openssl/providers/implementations/ciphers/cipher_des_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_desx.c M crypto/openssl/providers/implementations/ciphers/cipher_desx_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_idea.c M crypto/openssl/providers/implementations/ciphers/cipher_idea.h M crypto/openssl/providers/implementations/ciphers/cipher_idea_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_null.c M crypto/openssl/providers/implementations/ciphers/cipher_rc2.c M crypto/openssl/providers/implementations/ciphers/cipher_rc2.h M crypto/openssl/providers/implementations/ciphers/cipher_rc2_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_rc4.c M crypto/openssl/providers/implementations/ciphers/cipher_rc4.h M crypto/openssl/providers/implementations/ciphers/cipher_rc4_hmac_md5.c M crypto/openssl/providers/implementations/ciphers/cipher_rc4_hmac_md5.h M crypto/openssl/providers/implementations/ciphers/cipher_rc4_hmac_md5_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_rc4_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_rc5.c M crypto/openssl/providers/implementations/ciphers/cipher_rc5.h M crypto/openssl/providers/implementations/ciphers/cipher_rc5_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_seed.c M crypto/openssl/providers/implementations/ciphers/cipher_seed.h M crypto/openssl/providers/implementations/ciphers/cipher_seed_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_sm4.c M crypto/openssl/providers/implementations/ciphers/cipher_sm4.h M crypto/openssl/providers/implementations/ciphers/cipher_sm4_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_tdes.c M crypto/openssl/providers/implementations/ciphers/cipher_tdes.h M crypto/openssl/providers/implementations/ciphers/cipher_tdes_common.c M crypto/openssl/providers/implementations/ciphers/cipher_tdes_default.c M crypto/openssl/providers/implementations/ciphers/cipher_tdes_default_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_tdes_hw.c M crypto/openssl/providers/implementations/ciphers/cipher_tdes_wrap.c M crypto/openssl/providers/implementations/ciphers/ciphercommon.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_block.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_ccm.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_ccm_hw.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_gcm.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_gcm_hw.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_hw.c M crypto/openssl/providers/implementations/ciphers/ciphercommon_local.h M crypto/openssl/providers/implementations/digests/blake2_impl.h M crypto/openssl/providers/implementations/digests/blake2_prov.c M crypto/openssl/providers/implementations/digests/blake2b_prov.c M crypto/openssl/providers/implementations/digests/blake2s_prov.c M crypto/openssl/providers/implementations/digests/digestcommon.c M crypto/openssl/providers/implementations/digests/md2_prov.c M crypto/openssl/providers/implementations/digests/md4_prov.c M crypto/openssl/providers/implementations/digests/md5_prov.c M crypto/openssl/providers/implementations/digests/md5_sha1_prov.c M crypto/openssl/providers/implementations/digests/mdc2_prov.c M crypto/openssl/providers/implementations/digests/null_prov.c M crypto/openssl/providers/implementations/digests/ripemd_prov.c M crypto/openssl/providers/implementations/digests/sha2_prov.c M crypto/openssl/providers/implementations/digests/sha3_prov.c M crypto/openssl/providers/implementations/digests/sm3_prov.c M crypto/openssl/providers/implementations/digests/wp_prov.c M crypto/openssl/providers/implementations/encode_decode/decode_der2key.c M crypto/openssl/providers/implementations/encode_decode/decode_epki2pki.c M crypto/openssl/providers/implementations/encode_decode/decode_msblob2key.c M crypto/openssl/providers/implementations/encode_decode/decode_pem2der.c M crypto/openssl/providers/implementations/encode_decode/decode_pvk2key.c M crypto/openssl/providers/implementations/encode_decode/decode_spki2typespki.c M crypto/openssl/providers/implementations/encode_decode/encode_key2any.c M crypto/openssl/providers/implementations/encode_decode/encode_key2blob.c M crypto/openssl/providers/implementations/encode_decode/encode_key2ms.c M crypto/openssl/providers/implementations/encode_decode/encode_key2text.c M crypto/openssl/providers/implementations/encode_decode/endecoder_common.c M crypto/openssl/providers/implementations/encode_decode/endecoder_local.h M crypto/openssl/providers/implementations/exchange/dh_exch.c M crypto/openssl/providers/implementations/exchange/ecdh_exch.c M crypto/openssl/providers/implementations/exchange/ecx_exch.c M crypto/openssl/providers/implementations/exchange/kdf_exch.c M crypto/openssl/providers/implementations/include/prov/blake2.h M crypto/openssl/providers/implementations/include/prov/ciphercommon.h M crypto/openssl/providers/implementations/include/prov/ciphercommon_aead.h M crypto/openssl/providers/implementations/include/prov/ciphercommon_ccm.h M crypto/openssl/providers/implementations/include/prov/ciphercommon_gcm.h M crypto/openssl/providers/implementations/include/prov/digestcommon.h M crypto/openssl/providers/implementations/include/prov/implementations.h M crypto/openssl/providers/implementations/include/prov/md5_sha1.h M crypto/openssl/providers/implementations/include/prov/names.h M crypto/openssl/providers/implementations/include/prov/seeding.h M crypto/openssl/providers/implementations/kdfs/hkdf.c M crypto/openssl/providers/implementations/kdfs/kbkdf.c M crypto/openssl/providers/implementations/kdfs/krb5kdf.c M crypto/openssl/providers/implementations/kdfs/pbkdf1.c M crypto/openssl/providers/implementations/kdfs/pbkdf2.c M crypto/openssl/providers/implementations/kdfs/pkcs12kdf.c M crypto/openssl/providers/implementations/kdfs/scrypt.c M crypto/openssl/providers/implementations/kdfs/sshkdf.c M crypto/openssl/providers/implementations/kdfs/sskdf.c M crypto/openssl/providers/implementations/kdfs/tls1_prf.c M crypto/openssl/providers/implementations/kdfs/x942kdf.c M crypto/openssl/providers/implementations/kem/rsa_kem.c M crypto/openssl/providers/implementations/keymgmt/dh_kmgmt.c M crypto/openssl/providers/implementations/keymgmt/dsa_kmgmt.c M crypto/openssl/providers/implementations/keymgmt/ec_kmgmt.c M crypto/openssl/providers/implementations/keymgmt/ecx_kmgmt.c M crypto/openssl/providers/implementations/keymgmt/kdf_legacy_kmgmt.c M crypto/openssl/providers/implementations/keymgmt/mac_legacy_kmgmt.c M crypto/openssl/providers/implementations/keymgmt/rsa_kmgmt.c M crypto/openssl/providers/implementations/macs/blake2_mac_impl.c M crypto/openssl/providers/implementations/macs/blake2b_mac.c M crypto/openssl/providers/implementations/macs/blake2s_mac.c M crypto/openssl/providers/implementations/macs/cmac_prov.c M crypto/openssl/providers/implementations/macs/gmac_prov.c M crypto/openssl/providers/implementations/macs/hmac_prov.c M crypto/openssl/providers/implementations/macs/kmac_prov.c M crypto/openssl/providers/implementations/macs/poly1305_prov.c M crypto/openssl/providers/implementations/macs/siphash_prov.c M crypto/openssl/providers/implementations/rands/crngt.c M crypto/openssl/providers/implementations/rands/drbg.c M crypto/openssl/providers/implementations/rands/drbg_ctr.c M crypto/openssl/providers/implementations/rands/drbg_hash.c M crypto/openssl/providers/implementations/rands/drbg_hmac.c M crypto/openssl/providers/implementations/rands/drbg_local.h M crypto/openssl/providers/implementations/rands/seed_src.c M crypto/openssl/providers/implementations/rands/seeding/rand_cpu_x86.c M crypto/openssl/providers/implementations/rands/seeding/rand_tsc.c M crypto/openssl/providers/implementations/rands/seeding/rand_unix.c M crypto/openssl/providers/implementations/rands/seeding/rand_vms.c M crypto/openssl/providers/implementations/rands/seeding/rand_vxworks.c M crypto/openssl/providers/implementations/rands/seeding/rand_win.c M crypto/openssl/providers/implementations/rands/test_rng.c M crypto/openssl/providers/implementations/signature/dsa_sig.c M crypto/openssl/providers/implementations/signature/ecdsa_sig.c M crypto/openssl/providers/implementations/signature/eddsa_sig.c M crypto/openssl/providers/implementations/signature/mac_legacy_sig.c M crypto/openssl/providers/implementations/signature/rsa_sig.c M crypto/openssl/providers/implementations/signature/sm2_sig.c M crypto/openssl/providers/implementations/storemgmt/file_store.c M crypto/openssl/providers/implementations/storemgmt/file_store_any2obj.c M crypto/openssl/providers/implementations/storemgmt/file_store_local.h M crypto/openssl/providers/legacyprov.c M crypto/openssl/providers/nullprov.c M crypto/openssl/ssl/bio_ssl.c M crypto/openssl/ssl/d1_lib.c M crypto/openssl/ssl/d1_msg.c M crypto/openssl/ssl/d1_srtp.c M crypto/openssl/ssl/ktls.c M crypto/openssl/ssl/methods.c M crypto/openssl/ssl/pqueue.c M crypto/openssl/ssl/record/dtls1_bitmap.c M crypto/openssl/ssl/record/rec_layer_d1.c M crypto/openssl/ssl/record/rec_layer_s3.c M crypto/openssl/ssl/record/record.h M crypto/openssl/ssl/record/record_local.h M crypto/openssl/ssl/record/ssl3_buffer.c M crypto/openssl/ssl/record/ssl3_record.c M crypto/openssl/ssl/record/ssl3_record_tls13.c M crypto/openssl/ssl/record/tls_pad.c M crypto/openssl/ssl/s3_cbc.c M crypto/openssl/ssl/s3_enc.c M crypto/openssl/ssl/s3_lib.c M crypto/openssl/ssl/s3_msg.c M crypto/openssl/ssl/ssl_asn1.c M crypto/openssl/ssl/ssl_cert.c M crypto/openssl/ssl/ssl_cert_table.h M crypto/openssl/ssl/ssl_ciph.c M crypto/openssl/ssl/ssl_conf.c M crypto/openssl/ssl/ssl_err.c M crypto/openssl/ssl/ssl_init.c M crypto/openssl/ssl/ssl_lib.c M crypto/openssl/ssl/ssl_local.h M crypto/openssl/ssl/ssl_mcnf.c M crypto/openssl/ssl/ssl_rsa.c M crypto/openssl/ssl/ssl_rsa_legacy.c M crypto/openssl/ssl/ssl_sess.c M crypto/openssl/ssl/ssl_txt.c M crypto/openssl/ssl/sslerr.h M crypto/openssl/ssl/statem/extensions.c M crypto/openssl/ssl/statem/extensions_clnt.c M crypto/openssl/ssl/statem/extensions_cust.c M crypto/openssl/ssl/statem/extensions_srvr.c M crypto/openssl/ssl/statem/statem.c M crypto/openssl/ssl/statem/statem.h M crypto/openssl/ssl/statem/statem_clnt.c M crypto/openssl/ssl/statem/statem_dtls.c M crypto/openssl/ssl/statem/statem_lib.c M crypto/openssl/ssl/statem/statem_local.h M crypto/openssl/ssl/statem/statem_srvr.c M crypto/openssl/ssl/t1_enc.c M crypto/openssl/ssl/t1_lib.c M crypto/openssl/ssl/t1_trce.c M crypto/openssl/ssl/tls13_enc.c M crypto/openssl/ssl/tls_depr.c M crypto/openssl/ssl/tls_srp.c M crypto/openssl/test/README-external.md M crypto/openssl/test/acvp_test.c M crypto/openssl/test/aesgcmtest.c M crypto/openssl/test/afalgtest.c M crypto/openssl/test/algorithmid_test.c M crypto/openssl/test/asn1_decode_test.c M crypto/openssl/test/asn1_dsa_internal_test.c M crypto/openssl/test/asn1_encode_test.c M crypto/openssl/test/asn1_internal_test.c M crypto/openssl/test/asn1_stable_parse_test.c M crypto/openssl/test/asn1_string_table_test.c M crypto/openssl/test/asn1_time_test.c M crypto/openssl/test/asynciotest.c M crypto/openssl/test/asynctest.c M crypto/openssl/test/bad_dtls_test.c M crypto/openssl/test/bftest.c M crypto/openssl/test/bio_callback_test.c M crypto/openssl/test/bio_core_test.c M crypto/openssl/test/bio_enc_test.c M crypto/openssl/test/bio_memleak_test.c M crypto/openssl/test/bio_prefix_text.c A crypto/openssl/test/bio_pw_callback_test.c M crypto/openssl/test/bio_readbuffer_test.c M crypto/openssl/test/bioprinttest.c M crypto/openssl/test/bn_internal_test.c M crypto/openssl/test/bn_rand_range.h M crypto/openssl/test/bntest.c M crypto/openssl/test/casttest.c A crypto/openssl/test/certs/cve-2026-28388-ca.pem A crypto/openssl/test/certs/cve-2026-28388-crls.pem A crypto/openssl/test/certs/cve-2026-28388-leaf.pem M crypto/openssl/test/certs/mkcert.sh M crypto/openssl/test/cipher_overhead_test.c M crypto/openssl/test/cipherbytes_test.c M crypto/openssl/test/cipherlist_test.c M crypto/openssl/test/ciphername_test.c M crypto/openssl/test/clienthellotest.c M crypto/openssl/test/cmactest.c M crypto/openssl/test/cmp_asn_test.c M crypto/openssl/test/cmp_client_test.c M crypto/openssl/test/cmp_ctx_test.c M crypto/openssl/test/cmp_hdr_test.c M crypto/openssl/test/cmp_msg_test.c M crypto/openssl/test/cmp_protect_test.c M crypto/openssl/test/cmp_server_test.c M crypto/openssl/test/cmp_status_test.c M crypto/openssl/test/cmp_vfy_test.c M crypto/openssl/test/cmsapitest.c M crypto/openssl/test/conf_include_test.c M crypto/openssl/test/constant_time_test.c M crypto/openssl/test/context_internal_test.c M crypto/openssl/test/crltest.c M crypto/openssl/test/ct_test.c M crypto/openssl/test/ctype_internal_test.c M crypto/openssl/test/curve448_internal_test.c M crypto/openssl/test/d2i_test.c M crypto/openssl/test/danetest.c M crypto/openssl/test/defltfips_test.c M crypto/openssl/test/destest.c M crypto/openssl/test/dhtest.c M crypto/openssl/test/drbgtest.c M crypto/openssl/test/dsa_no_digest_size_test.c M crypto/openssl/test/dsatest.c M crypto/openssl/test/dtls_mtu_test.c M crypto/openssl/test/dtlstest.c M crypto/openssl/test/dtlsv1listentest.c M crypto/openssl/test/ec_internal_test.c M crypto/openssl/test/ecdsatest.c M crypto/openssl/test/ecdsatest.h M crypto/openssl/test/ecstresstest.c M crypto/openssl/test/ectest.c M crypto/openssl/test/endecode_test.c M crypto/openssl/test/endecoder_legacy_test.c M crypto/openssl/test/enginetest.c M crypto/openssl/test/errtest.c M crypto/openssl/test/evp_extra_test.c M crypto/openssl/test/evp_extra_test2.c M crypto/openssl/test/evp_fetch_prov_test.c M crypto/openssl/test/evp_kdf_test.c M crypto/openssl/test/evp_libctx_test.c M crypto/openssl/test/evp_pkey_dparams_test.c M crypto/openssl/test/evp_pkey_provided_test.c M crypto/openssl/test/evp_test.c M crypto/openssl/test/exdatatest.c M crypto/openssl/test/exptest.c M crypto/openssl/test/ext_internal_test.c M crypto/openssl/test/fake_rsaprov.c M crypto/openssl/test/fake_rsaprov.h M crypto/openssl/test/fatalerrtest.c M crypto/openssl/test/ffc_internal_test.c M crypto/openssl/test/filterprov.c M crypto/openssl/test/fips_version_test.c M crypto/openssl/test/gmdifftest.c M crypto/openssl/test/helpers/cmp_testlib.c M crypto/openssl/test/helpers/cmp_testlib.h M crypto/openssl/test/helpers/handshake.c M crypto/openssl/test/helpers/handshake.h M crypto/openssl/test/helpers/handshake_srp.c M crypto/openssl/test/helpers/pkcs12.c M crypto/openssl/test/helpers/pkcs12.h M crypto/openssl/test/helpers/predefined_dhparams.c M crypto/openssl/test/helpers/ssl_test_ctx.c M crypto/openssl/test/helpers/ssl_test_ctx.h M crypto/openssl/test/helpers/ssltestlib.c M crypto/openssl/test/helpers/ssltestlib.h M crypto/openssl/test/hexstr_test.c M crypto/openssl/test/hmactest.c M crypto/openssl/test/http_test.c M crypto/openssl/test/ideatest.c M crypto/openssl/test/igetest.c M crypto/openssl/test/keymgmt_internal_test.c M crypto/openssl/test/lhash_test.c M crypto/openssl/test/localetest.c M crypto/openssl/test/mdc2_internal_test.c M crypto/openssl/test/mdc2test.c M crypto/openssl/test/memleaktest.c M crypto/openssl/test/modes_internal_test.c M crypto/openssl/test/namemap_internal_test.c A crypto/openssl/test/nocache-and-default.cnf M crypto/openssl/test/nodefltctxtest.c M crypto/openssl/test/ocspapitest.c M crypto/openssl/test/ossl_store_test.c M crypto/openssl/test/p_minimal.c M crypto/openssl/test/p_test.c M crypto/openssl/test/packettest.c M crypto/openssl/test/param_build_test.c M crypto/openssl/test/params_api_test.c M crypto/openssl/test/params_conversion_test.c M crypto/openssl/test/params_test.c M crypto/openssl/test/pbelutest.c M crypto/openssl/test/pbetest.c M crypto/openssl/test/pem_read_depr_test.c M crypto/openssl/test/pemtest.c M crypto/openssl/test/pkcs12_format_test.c M crypto/openssl/test/pkcs7_test.c M crypto/openssl/test/pkey_meth_kdf_test.c M crypto/openssl/test/pkey_meth_test.c M crypto/openssl/test/poly1305_internal_test.c M crypto/openssl/test/property_test.c M crypto/openssl/test/prov_config_test.c M crypto/openssl/test/provfetchtest.c M crypto/openssl/test/provider_fallback_test.c M crypto/openssl/test/provider_internal_test.c A crypto/openssl/test/provider_internal_test.cnf M crypto/openssl/test/provider_pkey_test.c M crypto/openssl/test/provider_status_test.c M crypto/openssl/test/provider_test.c M crypto/openssl/test/punycode_test.c M crypto/openssl/test/rand_test.c M crypto/openssl/test/rc2test.c M crypto/openssl/test/rc4test.c M crypto/openssl/test/rc5test.c M crypto/openssl/test/rdrand_sanitytest.c M crypto/openssl/test/recipes/04-test_asn1_parse.t M crypto/openssl/test/recipes/10-test_bn_data/bnmod.txt M crypto/openssl/test/recipes/15-test_ec.t M crypto/openssl/test/recipes/15-test_ecparam.t A crypto/openssl/test/recipes/15-test_ecparam_data/valid/sm2-explicit.pem A crypto/openssl/test/recipes/15-test_ecparam_data/valid/sm2-named.pem M crypto/openssl/test/recipes/15-test_gensm2.t A crypto/openssl/test/recipes/20-test_nocache.t M crypto/openssl/test/recipes/25-test_verify.t M crypto/openssl/test/recipes/30-test_evp_data/evpkdf_krb5.txt A crypto/openssl/test/recipes/61-test_bio_pw_callback.t A crypto/openssl/test/recipes/61-test_bio_pw_callback_data/private_key.pem M crypto/openssl/test/recipes/61-test_bio_readbuffer.t M crypto/openssl/test/recipes/70-test_sslrecords.t M crypto/openssl/test/recipes/70-test_tls13alerts.t M crypto/openssl/test/recipes/70-test_tls13downgrade.t M crypto/openssl/test/recipes/80-test_ca.t M crypto/openssl/test/recipes/80-test_cmp_http.t M crypto/openssl/test/recipes/80-test_cmp_http_data/test_connection.csv M crypto/openssl/test/recipes/80-test_cms.t A crypto/openssl/test/recipes/80-test_cms_data/dh-cert.pem A crypto/openssl/test/recipes/80-test_cms_data/dh-key.pem A crypto/openssl/test/recipes/80-test_cms_data/dh-malformed.der A crypto/openssl/test/recipes/80-test_cms_data/ecdh-cert.pem A crypto/openssl/test/recipes/80-test_cms_data/ecdh-key.pem A crypto/openssl/test/recipes/80-test_cms_data/ecdh-malformed.der A crypto/openssl/test/recipes/80-test_cms_data/rsa-malformed.der M crypto/openssl/test/recipes/80-test_cmsapi.t A crypto/openssl/test/recipes/80-test_cmsapi_data/encDataWithTooLongIV.pem M crypto/openssl/test/recipes/80-test_ocsp.t M crypto/openssl/test/recipes/90-test_store_cases.t A crypto/openssl/test/recipes/90-test_store_cases_data/test-BER.p12 M crypto/openssl/test/recipes/90-test_threads.t A crypto/openssl/test/recipes/90-test_threads_data/store/8489a545.0 M crypto/openssl/test/recordlentest.c M crypto/openssl/test/rsa_complex.c M crypto/openssl/test/rsa_mp_test.c M crypto/openssl/test/rsa_sp800_56b_test.c M crypto/openssl/test/rsa_test.c M crypto/openssl/test/sanitytest.c M crypto/openssl/test/secmemtest.c M crypto/openssl/test/servername_test.c M crypto/openssl/test/sha_test.c M crypto/openssl/test/shlibloadtest.c M crypto/openssl/test/simpledynamic.c M crypto/openssl/test/simpledynamic.h M crypto/openssl/test/siphash_internal_test.c M crypto/openssl/test/sm2_internal_test.c M crypto/openssl/test/sm3_internal_test.c M crypto/openssl/test/sm4_internal_test.c M crypto/openssl/test/sparse_array_test.c M crypto/openssl/test/srptest.c M crypto/openssl/test/ssl-tests/28-seclevel.cnf.in M crypto/openssl/test/ssl_cert_table_internal_test.c M crypto/openssl/test/ssl_ctx_test.c M crypto/openssl/test/ssl_old_test.c M crypto/openssl/test/ssl_test.c M crypto/openssl/test/ssl_test_ctx_test.c M crypto/openssl/test/sslapitest.c M crypto/openssl/test/sslbuffertest.c M crypto/openssl/test/sslcorrupttest.c M crypto/openssl/test/stack_test.c M crypto/openssl/test/sysdefaulttest.c A crypto/openssl/test/test_asn1_genconf.cnf M crypto/openssl/test/test_test.c A crypto/openssl/test/testec-sm2.pem M crypto/openssl/test/testutil.h M crypto/openssl/test/testutil/driver.c M crypto/openssl/test/testutil/fake_random.c M crypto/openssl/test/testutil/format_output.c M crypto/openssl/test/testutil/load.c M crypto/openssl/test/testutil/main.c M crypto/openssl/test/testutil/options.c M crypto/openssl/test/testutil/output.h M crypto/openssl/test/testutil/provider.c M crypto/openssl/test/testutil/random.c M crypto/openssl/test/testutil/stanza.c M crypto/openssl/test/testutil/tests.c M crypto/openssl/test/testutil/testutil_init.c M crypto/openssl/test/testutil/tu_local.h M crypto/openssl/test/threadstest.c M crypto/openssl/test/threadstest.h M crypto/openssl/test/threadstest_fips.c M crypto/openssl/test/time_offset_test.c M crypto/openssl/test/tls-provider.c M crypto/openssl/test/tls13ccstest.c M crypto/openssl/test/tls13encryptiontest.c M crypto/openssl/test/tls13secretstest.c M crypto/openssl/test/trace_api_test.c M crypto/openssl/test/uitest.c M crypto/openssl/test/upcallstest.c M crypto/openssl/test/user_property_test.c M crypto/openssl/test/v3ext.c M crypto/openssl/test/v3nametest.c M crypto/openssl/test/verify_extra_test.c M crypto/openssl/test/versions.c M crypto/openssl/test/wpackettest.c M crypto/openssl/test/x509_check_cert_pkey_test.c M crypto/openssl/test/x509_internal_test.c M crypto/openssl/test/x509_time_test.c M crypto/openssl/test/x509aux.c A crypto/openssl/tools/c_rehash M crypto/openssl/tools/c_rehash.in M crypto/openssl/util/add-depends.pl M crypto/openssl/util/missingcrypto.txt M crypto/openssl/util/mkerr.pl M crypto/openssl/util/other.syms A crypto/openssl/util/shlib_wrap.sh M crypto/openssl/util/wrap.pl.in M secure/lib/libcrypto/man/man3/ADMISSIONS.3 M secure/lib/libcrypto/man/man3/ASN1_EXTERN_FUNCS.3 M secure/lib/libcrypto/man/man3/ASN1_INTEGER_get_int64.3 M secure/lib/libcrypto/man/man3/ASN1_INTEGER_new.3 M secure/lib/libcrypto/man/man3/ASN1_ITEM_lookup.3 M secure/lib/libcrypto/man/man3/ASN1_OBJECT_new.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_TABLE_add.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_length.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_new.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_print_ex.3 M secure/lib/libcrypto/man/man3/ASN1_TIME_set.3 M secure/lib/libcrypto/man/man3/ASN1_TYPE_get.3 M secure/lib/libcrypto/man/man3/ASN1_aux_cb.3 M secure/lib/libcrypto/man/man3/ASN1_generate_nconf.3 M secure/lib/libcrypto/man/man3/ASN1_item_d2i_bio.3 M secure/lib/libcrypto/man/man3/ASN1_item_new.3 M secure/lib/libcrypto/man/man3/ASN1_item_sign.3 M secure/lib/libcrypto/man/man3/ASYNC_WAIT_CTX_new.3 M secure/lib/libcrypto/man/man3/ASYNC_start_job.3 M secure/lib/libcrypto/man/man3/BF_encrypt.3 M secure/lib/libcrypto/man/man3/BIO_ADDR.3 M secure/lib/libcrypto/man/man3/BIO_ADDRINFO.3 M secure/lib/libcrypto/man/man3/BIO_connect.3 M secure/lib/libcrypto/man/man3/BIO_ctrl.3 M secure/lib/libcrypto/man/man3/BIO_f_base64.3 M secure/lib/libcrypto/man/man3/BIO_f_buffer.3 M secure/lib/libcrypto/man/man3/BIO_f_cipher.3 M secure/lib/libcrypto/man/man3/BIO_f_md.3 M secure/lib/libcrypto/man/man3/BIO_f_null.3 M secure/lib/libcrypto/man/man3/BIO_f_prefix.3 M secure/lib/libcrypto/man/man3/BIO_f_readbuffer.3 M secure/lib/libcrypto/man/man3/BIO_f_ssl.3 M secure/lib/libcrypto/man/man3/BIO_find_type.3 M secure/lib/libcrypto/man/man3/BIO_get_data.3 M secure/lib/libcrypto/man/man3/BIO_get_ex_new_index.3 M secure/lib/libcrypto/man/man3/BIO_meth_new.3 M secure/lib/libcrypto/man/man3/BIO_new.3 M secure/lib/libcrypto/man/man3/BIO_new_CMS.3 M secure/lib/libcrypto/man/man3/BIO_parse_hostserv.3 M secure/lib/libcrypto/man/man3/BIO_printf.3 M secure/lib/libcrypto/man/man3/BIO_push.3 M secure/lib/libcrypto/man/man3/BIO_read.3 M secure/lib/libcrypto/man/man3/BIO_s_accept.3 M secure/lib/libcrypto/man/man3/BIO_s_bio.3 M secure/lib/libcrypto/man/man3/BIO_s_connect.3 M secure/lib/libcrypto/man/man3/BIO_s_core.3 M secure/lib/libcrypto/man/man3/BIO_s_datagram.3 M secure/lib/libcrypto/man/man3/BIO_s_fd.3 M secure/lib/libcrypto/man/man3/BIO_s_file.3 M secure/lib/libcrypto/man/man3/BIO_s_mem.3 M secure/lib/libcrypto/man/man3/BIO_s_null.3 M secure/lib/libcrypto/man/man3/BIO_s_socket.3 M secure/lib/libcrypto/man/man3/BIO_set_callback.3 A secure/lib/libcrypto/man/man3/BIO_set_flags.3 M secure/lib/libcrypto/man/man3/BIO_should_retry.3 M secure/lib/libcrypto/man/man3/BIO_socket_wait.3 M secure/lib/libcrypto/man/man3/BN_BLINDING_new.3 M secure/lib/libcrypto/man/man3/BN_CTX_new.3 M secure/lib/libcrypto/man/man3/BN_CTX_start.3 M secure/lib/libcrypto/man/man3/BN_add.3 M secure/lib/libcrypto/man/man3/BN_add_word.3 M secure/lib/libcrypto/man/man3/BN_bn2bin.3 M secure/lib/libcrypto/man/man3/BN_cmp.3 M secure/lib/libcrypto/man/man3/BN_copy.3 M secure/lib/libcrypto/man/man3/BN_generate_prime.3 M secure/lib/libcrypto/man/man3/BN_mod_exp_mont.3 M secure/lib/libcrypto/man/man3/BN_mod_inverse.3 M secure/lib/libcrypto/man/man3/BN_mod_mul_montgomery.3 M secure/lib/libcrypto/man/man3/BN_mod_mul_reciprocal.3 M secure/lib/libcrypto/man/man3/BN_new.3 M secure/lib/libcrypto/man/man3/BN_num_bytes.3 M secure/lib/libcrypto/man/man3/BN_rand.3 M secure/lib/libcrypto/man/man3/BN_security_bits.3 M secure/lib/libcrypto/man/man3/BN_set_bit.3 M secure/lib/libcrypto/man/man3/BN_swap.3 M secure/lib/libcrypto/man/man3/BN_zero.3 M secure/lib/libcrypto/man/man3/BUF_MEM_new.3 M secure/lib/libcrypto/man/man3/CMS_EncryptedData_decrypt.3 M secure/lib/libcrypto/man/man3/CMS_EncryptedData_encrypt.3 A secure/lib/libcrypto/man/man3/CMS_EncryptedData_set1_key.3 M secure/lib/libcrypto/man/man3/CMS_EnvelopedData_create.3 M secure/lib/libcrypto/man/man3/CMS_add0_cert.3 M secure/lib/libcrypto/man/man3/CMS_add1_recipient_cert.3 M secure/lib/libcrypto/man/man3/CMS_add1_signer.3 M secure/lib/libcrypto/man/man3/CMS_compress.3 M secure/lib/libcrypto/man/man3/CMS_data_create.3 M secure/lib/libcrypto/man/man3/CMS_decrypt.3 M secure/lib/libcrypto/man/man3/CMS_digest_create.3 M secure/lib/libcrypto/man/man3/CMS_encrypt.3 M secure/lib/libcrypto/man/man3/CMS_final.3 M secure/lib/libcrypto/man/man3/CMS_get0_RecipientInfos.3 M secure/lib/libcrypto/man/man3/CMS_get0_SignerInfos.3 M secure/lib/libcrypto/man/man3/CMS_get0_type.3 M secure/lib/libcrypto/man/man3/CMS_get1_ReceiptRequest.3 M secure/lib/libcrypto/man/man3/CMS_sign.3 M secure/lib/libcrypto/man/man3/CMS_sign_receipt.3 M secure/lib/libcrypto/man/man3/CMS_signed_get_attr.3 M secure/lib/libcrypto/man/man3/CMS_uncompress.3 M secure/lib/libcrypto/man/man3/CMS_verify.3 M secure/lib/libcrypto/man/man3/CMS_verify_receipt.3 M secure/lib/libcrypto/man/man3/CONF_modules_free.3 M secure/lib/libcrypto/man/man3/CONF_modules_load_file.3 M secure/lib/libcrypto/man/man3/CRYPTO_THREAD_run_once.3 M secure/lib/libcrypto/man/man3/CRYPTO_get_ex_new_index.3 M secure/lib/libcrypto/man/man3/CRYPTO_memcmp.3 M secure/lib/libcrypto/man/man3/CTLOG_STORE_get0_log_by_id.3 M secure/lib/libcrypto/man/man3/CTLOG_STORE_new.3 M secure/lib/libcrypto/man/man3/CTLOG_new.3 M secure/lib/libcrypto/man/man3/CT_POLICY_EVAL_CTX_new.3 M secure/lib/libcrypto/man/man3/DEFINE_STACK_OF.3 M secure/lib/libcrypto/man/man3/DES_random_key.3 M secure/lib/libcrypto/man/man3/DH_generate_key.3 M secure/lib/libcrypto/man/man3/DH_generate_parameters.3 M secure/lib/libcrypto/man/man3/DH_get0_pqg.3 M secure/lib/libcrypto/man/man3/DH_get_1024_160.3 M secure/lib/libcrypto/man/man3/DH_meth_new.3 M secure/lib/libcrypto/man/man3/DH_new.3 M secure/lib/libcrypto/man/man3/DH_new_by_nid.3 M secure/lib/libcrypto/man/man3/DH_set_method.3 M secure/lib/libcrypto/man/man3/DH_size.3 M secure/lib/libcrypto/man/man3/DSA_SIG_new.3 M secure/lib/libcrypto/man/man3/DSA_do_sign.3 M secure/lib/libcrypto/man/man3/DSA_dup_DH.3 M secure/lib/libcrypto/man/man3/DSA_generate_key.3 M secure/lib/libcrypto/man/man3/DSA_generate_parameters.3 M secure/lib/libcrypto/man/man3/DSA_get0_pqg.3 M secure/lib/libcrypto/man/man3/DSA_meth_new.3 M secure/lib/libcrypto/man/man3/DSA_new.3 M secure/lib/libcrypto/man/man3/DSA_set_method.3 M secure/lib/libcrypto/man/man3/DSA_sign.3 M secure/lib/libcrypto/man/man3/DSA_size.3 M secure/lib/libcrypto/man/man3/DTLS_get_data_mtu.3 M secure/lib/libcrypto/man/man3/DTLS_set_timer_cb.3 M secure/lib/libcrypto/man/man3/DTLSv1_listen.3 M secure/lib/libcrypto/man/man3/ECDSA_SIG_new.3 M secure/lib/libcrypto/man/man3/ECDSA_sign.3 M secure/lib/libcrypto/man/man3/ECPKParameters_print.3 M secure/lib/libcrypto/man/man3/EC_GFp_simple_method.3 M secure/lib/libcrypto/man/man3/EC_GROUP_copy.3 M secure/lib/libcrypto/man/man3/EC_GROUP_new.3 M secure/lib/libcrypto/man/man3/EC_KEY_get_enc_flags.3 M secure/lib/libcrypto/man/man3/EC_KEY_new.3 M secure/lib/libcrypto/man/man3/EC_POINT_add.3 M secure/lib/libcrypto/man/man3/EC_POINT_new.3 M secure/lib/libcrypto/man/man3/ENGINE_add.3 M secure/lib/libcrypto/man/man3/ERR_GET_LIB.3 M secure/lib/libcrypto/man/man3/ERR_clear_error.3 M secure/lib/libcrypto/man/man3/ERR_error_string.3 M secure/lib/libcrypto/man/man3/ERR_get_error.3 M secure/lib/libcrypto/man/man3/ERR_load_crypto_strings.3 M secure/lib/libcrypto/man/man3/ERR_load_strings.3 M secure/lib/libcrypto/man/man3/ERR_new.3 M secure/lib/libcrypto/man/man3/ERR_print_errors.3 M secure/lib/libcrypto/man/man3/ERR_put_error.3 M secure/lib/libcrypto/man/man3/ERR_remove_state.3 M secure/lib/libcrypto/man/man3/ERR_set_mark.3 M secure/lib/libcrypto/man/man3/EVP_ASYM_CIPHER_free.3 M secure/lib/libcrypto/man/man3/EVP_BytesToKey.3 A secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_app_data.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_cipher_data.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_original_iv.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_DigestInit.3 M secure/lib/libcrypto/man/man3/EVP_DigestSignInit.3 M secure/lib/libcrypto/man/man3/EVP_DigestVerifyInit.3 M secure/lib/libcrypto/man/man3/EVP_EncodeInit.3 M secure/lib/libcrypto/man/man3/EVP_EncryptInit.3 M secure/lib/libcrypto/man/man3/EVP_KDF.3 M secure/lib/libcrypto/man/man3/EVP_KEM_free.3 M secure/lib/libcrypto/man/man3/EVP_KEYEXCH_free.3 M secure/lib/libcrypto/man/man3/EVP_KEYMGMT.3 M secure/lib/libcrypto/man/man3/EVP_MAC.3 M secure/lib/libcrypto/man/man3/EVP_MD_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_OpenInit.3 M secure/lib/libcrypto/man/man3/EVP_PBE_CipherInit.3 M secure/lib/libcrypto/man/man3/EVP_PKEY2PKCS8.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_ASN1_METHOD.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_ctrl.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_get0_libctx.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_get0_pkey.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set1_pbe_pass.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_hkdf_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_scrypt_N.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_asn1_get_count.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_check.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_copy_parameters.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_decapsulate.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_decrypt.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_derive.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_digestsign_supports_digest.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_encapsulate.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_encrypt.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_fromdata.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_attr.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_default_digest_nid.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_field_type.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_group_name.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_size.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_gettable_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_is_a.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_keygen.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_meth_get_count.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_print_private.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set1_RSA.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set1_encoded_public_key.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set_type.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_settable_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_sign.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_todata.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_verify.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_verify_recover.3 M secure/lib/libcrypto/man/man3/EVP_RAND.3 M secure/lib/libcrypto/man/man3/EVP_SIGNATURE.3 M secure/lib/libcrypto/man/man3/EVP_SealInit.3 M secure/lib/libcrypto/man/man3/EVP_SignInit.3 M secure/lib/libcrypto/man/man3/EVP_VerifyInit.3 M secure/lib/libcrypto/man/man3/EVP_aes_128_gcm.3 M secure/lib/libcrypto/man/man3/EVP_aria_128_gcm.3 M secure/lib/libcrypto/man/man3/EVP_bf_cbc.3 M secure/lib/libcrypto/man/man3/EVP_blake2b512.3 M secure/lib/libcrypto/man/man3/EVP_camellia_128_ecb.3 M secure/lib/libcrypto/man/man3/EVP_cast5_cbc.3 M secure/lib/libcrypto/man/man3/EVP_chacha20.3 M secure/lib/libcrypto/man/man3/EVP_des_cbc.3 M secure/lib/libcrypto/man/man3/EVP_desx_cbc.3 M secure/lib/libcrypto/man/man3/EVP_idea_cbc.3 M secure/lib/libcrypto/man/man3/EVP_md2.3 M secure/lib/libcrypto/man/man3/EVP_md4.3 M secure/lib/libcrypto/man/man3/EVP_md5.3 M secure/lib/libcrypto/man/man3/EVP_mdc2.3 M secure/lib/libcrypto/man/man3/EVP_rc2_cbc.3 M secure/lib/libcrypto/man/man3/EVP_rc4.3 M secure/lib/libcrypto/man/man3/EVP_rc5_32_12_16_cbc.3 M secure/lib/libcrypto/man/man3/EVP_ripemd160.3 M secure/lib/libcrypto/man/man3/EVP_seed_cbc.3 M secure/lib/libcrypto/man/man3/EVP_set_default_properties.3 M secure/lib/libcrypto/man/man3/EVP_sha1.3 M secure/lib/libcrypto/man/man3/EVP_sha224.3 M secure/lib/libcrypto/man/man3/EVP_sha3_224.3 M secure/lib/libcrypto/man/man3/EVP_sm3.3 M secure/lib/libcrypto/man/man3/EVP_sm4_cbc.3 M secure/lib/libcrypto/man/man3/EVP_whirlpool.3 M secure/lib/libcrypto/man/man3/HMAC.3 M secure/lib/libcrypto/man/man3/MD5.3 M secure/lib/libcrypto/man/man3/MDC2_Init.3 M secure/lib/libcrypto/man/man3/Makefile M secure/lib/libcrypto/man/man3/NCONF_new_ex.3 M secure/lib/libcrypto/man/man3/OBJ_nid2obj.3 M secure/lib/libcrypto/man/man3/OCSP_REQUEST_new.3 M secure/lib/libcrypto/man/man3/OCSP_cert_to_id.3 M secure/lib/libcrypto/man/man3/OCSP_request_add1_nonce.3 M secure/lib/libcrypto/man/man3/OCSP_resp_find_status.3 M secure/lib/libcrypto/man/man3/OCSP_response_status.3 M secure/lib/libcrypto/man/man3/OCSP_sendreq_new.3 M secure/lib/libcrypto/man/man3/OPENSSL_Applink.3 M secure/lib/libcrypto/man/man3/OPENSSL_FILE.3 M secure/lib/libcrypto/man/man3/OPENSSL_LH_COMPFUNC.3 M secure/lib/libcrypto/man/man3/OPENSSL_LH_stats.3 M secure/lib/libcrypto/man/man3/OPENSSL_config.3 M secure/lib/libcrypto/man/man3/OPENSSL_fork_prepare.3 M secure/lib/libcrypto/man/man3/OPENSSL_gmtime.3 M secure/lib/libcrypto/man/man3/OPENSSL_hexchar2int.3 M secure/lib/libcrypto/man/man3/OPENSSL_ia32cap.3 M secure/lib/libcrypto/man/man3/OPENSSL_init_crypto.3 M secure/lib/libcrypto/man/man3/OPENSSL_init_ssl.3 M secure/lib/libcrypto/man/man3/OPENSSL_instrument_bus.3 M secure/lib/libcrypto/man/man3/OPENSSL_load_builtin_modules.3 M secure/lib/libcrypto/man/man3/OPENSSL_malloc.3 M secure/lib/libcrypto/man/man3/OPENSSL_s390xcap.3 M secure/lib/libcrypto/man/man3/OPENSSL_secure_malloc.3 M secure/lib/libcrypto/man/man3/OPENSSL_strcasecmp.3 M secure/lib/libcrypto/man/man3/OSSL_ALGORITHM.3 M secure/lib/libcrypto/man/man3/OSSL_CALLBACK.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_CTX_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_HDR_get0_transactionID.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_ITAV_set0.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_MSG_get0_header.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_MSG_http_perform.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_SRV_CTX_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_STATUSINFO_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_exec_certreq.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_log_open.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_validate_msg.3 M secure/lib/libcrypto/man/man3/OSSL_CORE_MAKE_FUNC.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_get0_tmpl.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set0_validity.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set1_regCtrl_regToken.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set1_regInfo_certReq.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_pbmp_new.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX_new_for_pkey.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_from_bio.3 M secure/lib/libcrypto/man/man3/OSSL_DISPATCH.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX_new_for_pkey.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_to_bio.3 M secure/lib/libcrypto/man/man3/OSSL_ESS_check_signing_certs.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_REQ_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_parse_url.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_transfer.3 M secure/lib/libcrypto/man/man3/OSSL_ITEM.3 M secure/lib/libcrypto/man/man3/OSSL_LIB_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_BLD.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_allocate_from_text.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_dup.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_int.3 M secure/lib/libcrypto/man/man3/OSSL_PROVIDER.3 M secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_new.3 M secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_set_callback.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_INFO.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_LOADER.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_SEARCH.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_attach.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_expect.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_open.3 M secure/lib/libcrypto/man/man3/OSSL_trace_enabled.3 M secure/lib/libcrypto/man/man3/OSSL_trace_get_category_num.3 M secure/lib/libcrypto/man/man3/OSSL_trace_set_channel.3 M secure/lib/libcrypto/man/man3/OpenSSL_add_all_algorithms.3 M secure/lib/libcrypto/man/man3/OpenSSL_version.3 M secure/lib/libcrypto/man/man3/PEM_X509_INFO_read_bio_ex.3 M secure/lib/libcrypto/man/man3/PEM_bytes_read_bio.3 M secure/lib/libcrypto/man/man3/PEM_read.3 M secure/lib/libcrypto/man/man3/PEM_read_CMS.3 M secure/lib/libcrypto/man/man3/PEM_read_bio_PrivateKey.3 M secure/lib/libcrypto/man/man3/PEM_read_bio_ex.3 M secure/lib/libcrypto/man/man3/PEM_write_bio_CMS_stream.3 M secure/lib/libcrypto/man/man3/PEM_write_bio_PKCS7_stream.3 M secure/lib/libcrypto/man/man3/PKCS12_PBE_keyivgen.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_create_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_get0_attrs.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_get1_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_add1_attr_by_NID.3 M secure/lib/libcrypto/man/man3/PKCS12_add_CSPName_asc.3 M secure/lib/libcrypto/man/man3/PKCS12_add_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_add_friendlyname_asc.3 M secure/lib/libcrypto/man/man3/PKCS12_add_localkeyid.3 M secure/lib/libcrypto/man/man3/PKCS12_add_safe.3 M secure/lib/libcrypto/man/man3/PKCS12_create.3 M secure/lib/libcrypto/man/man3/PKCS12_decrypt_skey.3 M secure/lib/libcrypto/man/man3/PKCS12_gen_mac.3 M secure/lib/libcrypto/man/man3/PKCS12_get_friendlyname.3 M secure/lib/libcrypto/man/man3/PKCS12_init.3 M secure/lib/libcrypto/man/man3/PKCS12_item_decrypt_d2i.3 M secure/lib/libcrypto/man/man3/PKCS12_key_gen_utf8_ex.3 M secure/lib/libcrypto/man/man3/PKCS12_newpass.3 M secure/lib/libcrypto/man/man3/PKCS12_pack_p7encdata.3 M secure/lib/libcrypto/man/man3/PKCS12_parse.3 M secure/lib/libcrypto/man/man3/PKCS5_PBE_keyivgen.3 M secure/lib/libcrypto/man/man3/PKCS5_PBKDF2_HMAC.3 M secure/lib/libcrypto/man/man3/PKCS7_decrypt.3 M secure/lib/libcrypto/man/man3/PKCS7_encrypt.3 M secure/lib/libcrypto/man/man3/PKCS7_get_octet_string.3 M secure/lib/libcrypto/man/man3/PKCS7_sign.3 M secure/lib/libcrypto/man/man3/PKCS7_sign_add_signer.3 M secure/lib/libcrypto/man/man3/PKCS7_type_is_other.3 M secure/lib/libcrypto/man/man3/PKCS7_verify.3 M secure/lib/libcrypto/man/man3/PKCS8_encrypt.3 M secure/lib/libcrypto/man/man3/PKCS8_pkey_add1_attr.3 M secure/lib/libcrypto/man/man3/RAND_add.3 M secure/lib/libcrypto/man/man3/RAND_bytes.3 M secure/lib/libcrypto/man/man3/RAND_cleanup.3 M secure/lib/libcrypto/man/man3/RAND_egd.3 M secure/lib/libcrypto/man/man3/RAND_get0_primary.3 M secure/lib/libcrypto/man/man3/RAND_load_file.3 M secure/lib/libcrypto/man/man3/RAND_set_DRBG_type.3 M secure/lib/libcrypto/man/man3/RAND_set_rand_method.3 M secure/lib/libcrypto/man/man3/RC4_set_key.3 M secure/lib/libcrypto/man/man3/RIPEMD160_Init.3 M secure/lib/libcrypto/man/man3/RSA_blinding_on.3 M secure/lib/libcrypto/man/man3/RSA_check_key.3 M secure/lib/libcrypto/man/man3/RSA_generate_key.3 M secure/lib/libcrypto/man/man3/RSA_get0_key.3 M secure/lib/libcrypto/man/man3/RSA_meth_new.3 M secure/lib/libcrypto/man/man3/RSA_new.3 M secure/lib/libcrypto/man/man3/RSA_padding_add_PKCS1_type_1.3 M secure/lib/libcrypto/man/man3/RSA_print.3 M secure/lib/libcrypto/man/man3/RSA_private_encrypt.3 M secure/lib/libcrypto/man/man3/RSA_public_encrypt.3 M secure/lib/libcrypto/man/man3/RSA_set_method.3 M secure/lib/libcrypto/man/man3/RSA_sign.3 M secure/lib/libcrypto/man/man3/RSA_sign_ASN1_OCTET_STRING.3 M secure/lib/libcrypto/man/man3/RSA_size.3 M secure/lib/libcrypto/man/man3/SCT_new.3 M secure/lib/libcrypto/man/man3/SCT_print.3 M secure/lib/libcrypto/man/man3/SCT_validate.3 M secure/lib/libcrypto/man/man3/SHA256_Init.3 M secure/lib/libcrypto/man/man3/SMIME_read_ASN1.3 M secure/lib/libcrypto/man/man3/SMIME_read_CMS.3 M secure/lib/libcrypto/man/man3/SMIME_read_PKCS7.3 M secure/lib/libcrypto/man/man3/SMIME_write_ASN1.3 M secure/lib/libcrypto/man/man3/SMIME_write_CMS.3 M secure/lib/libcrypto/man/man3/SMIME_write_PKCS7.3 M secure/lib/libcrypto/man/man3/SRP_Calc_B.3 M secure/lib/libcrypto/man/man3/SRP_VBASE_new.3 M secure/lib/libcrypto/man/man3/SRP_create_verifier.3 M secure/lib/libcrypto/man/man3/SRP_user_pwd_new.3 M secure/lib/libcrypto/man/man3/SSL_CIPHER_get_name.3 M secure/lib/libcrypto/man/man3/SSL_COMP_add_compression_method.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_new.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set1_prefix.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set_flags.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set_ssl_ctx.3 M secure/lib/libcrypto/man/man3/SSL_CONF_cmd.3 M secure/lib/libcrypto/man/man3/SSL_CONF_cmd_argv.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add1_chain_cert.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add_extra_chain_cert.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add_session.3 M secure/lib/libcrypto/man/man3/SSL_CTX_config.3 M secure/lib/libcrypto/man/man3/SSL_CTX_ctrl.3 M secure/lib/libcrypto/man/man3/SSL_CTX_dane_enable.3 M secure/lib/libcrypto/man/man3/SSL_CTX_flush_sessions.3 M secure/lib/libcrypto/man/man3/SSL_CTX_free.3 M secure/lib/libcrypto/man/man3/SSL_CTX_get0_param.3 M secure/lib/libcrypto/man/man3/SSL_CTX_get_verify_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_has_client_custom_ext.3 M secure/lib/libcrypto/man/man3/SSL_CTX_load_verify_locations.3 M secure/lib/libcrypto/man/man3/SSL_CTX_new.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_number.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_set_cache_size.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_set_get_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sessions.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set0_CA_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_curves.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_sigalgs.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_verify_cert_store.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_alpn_select_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_store.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_verify_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cipher_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_client_cert_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_client_hello_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ct_validation_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ctlog_list_file.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_default_passwd_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_generate_session_id.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_info_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_keylog_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_max_cert_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_min_proto_version.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_msg_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_num_tickets.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_options.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_psk_client_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_quiet_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_read_ahead.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_record_padding_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_security_level.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_cache_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_id_context.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_ticket_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_split_send_fragment.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_srp_password.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ssl_version.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_stateless_cookie_generate_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_timeout.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_servername_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_status_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_use_srtp.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tmp_dh_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tmp_ecdh.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_verify.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_certificate.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_psk_identity_hint.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_serverinfo.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_free.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_cipher.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_hostname.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_id_context.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_peer.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_compress_id.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_protocol_version.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_time.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_has_ticket.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_is_resumable.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_print.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_set1_id.3 M secure/lib/libcrypto/man/man3/SSL_accept.3 M secure/lib/libcrypto/man/man3/SSL_alert_type_string.3 M secure/lib/libcrypto/man/man3/SSL_alloc_buffers.3 M secure/lib/libcrypto/man/man3/SSL_check_chain.3 M secure/lib/libcrypto/man/man3/SSL_clear.3 M secure/lib/libcrypto/man/man3/SSL_connect.3 M secure/lib/libcrypto/man/man3/SSL_do_handshake.3 M secure/lib/libcrypto/man/man3/SSL_export_keying_material.3 M secure/lib/libcrypto/man/man3/SSL_extension_supported.3 M secure/lib/libcrypto/man/man3/SSL_free.3 M secure/lib/libcrypto/man/man3/SSL_get0_peer_scts.3 M secure/lib/libcrypto/man/man3/SSL_get_SSL_CTX.3 M secure/lib/libcrypto/man/man3/SSL_get_all_async_fds.3 M secure/lib/libcrypto/man/man3/SSL_get_certificate.3 M secure/lib/libcrypto/man/man3/SSL_get_ciphers.3 M secure/lib/libcrypto/man/man3/SSL_get_client_random.3 M secure/lib/libcrypto/man/man3/SSL_get_current_cipher.3 M secure/lib/libcrypto/man/man3/SSL_get_default_timeout.3 M secure/lib/libcrypto/man/man3/SSL_get_error.3 M secure/lib/libcrypto/man/man3/SSL_get_extms_support.3 M secure/lib/libcrypto/man/man3/SSL_get_fd.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_cert_chain.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_certificate.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_signature_nid.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_tmp_key.3 M secure/lib/libcrypto/man/man3/SSL_get_psk_identity.3 M secure/lib/libcrypto/man/man3/SSL_get_rbio.3 M secure/lib/libcrypto/man/man3/SSL_get_session.3 M secure/lib/libcrypto/man/man3/SSL_get_shared_sigalgs.3 M secure/lib/libcrypto/man/man3/SSL_get_verify_result.3 M secure/lib/libcrypto/man/man3/SSL_get_version.3 M secure/lib/libcrypto/man/man3/SSL_group_to_name.3 M secure/lib/libcrypto/man/man3/SSL_in_init.3 M secure/lib/libcrypto/man/man3/SSL_key_update.3 M secure/lib/libcrypto/man/man3/SSL_library_init.3 M secure/lib/libcrypto/man/man3/SSL_load_client_CA_file.3 M secure/lib/libcrypto/man/man3/SSL_new.3 M secure/lib/libcrypto/man/man3/SSL_pending.3 M secure/lib/libcrypto/man/man3/SSL_read.3 M secure/lib/libcrypto/man/man3/SSL_read_early_data.3 M secure/lib/libcrypto/man/man3/SSL_rstate_string.3 M secure/lib/libcrypto/man/man3/SSL_session_reused.3 M secure/lib/libcrypto/man/man3/SSL_set1_host.3 M secure/lib/libcrypto/man/man3/SSL_set_async_callback.3 M secure/lib/libcrypto/man/man3/SSL_set_bio.3 M secure/lib/libcrypto/man/man3/SSL_set_connect_state.3 M secure/lib/libcrypto/man/man3/SSL_set_fd.3 M secure/lib/libcrypto/man/man3/SSL_set_retry_verify.3 M secure/lib/libcrypto/man/man3/SSL_set_session.3 M secure/lib/libcrypto/man/man3/SSL_set_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_set_verify_result.3 M secure/lib/libcrypto/man/man3/SSL_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_state_string.3 M secure/lib/libcrypto/man/man3/SSL_want.3 M secure/lib/libcrypto/man/man3/SSL_write.3 M secure/lib/libcrypto/man/man3/TS_RESP_CTX_new.3 M secure/lib/libcrypto/man/man3/TS_VERIFY_CTX_set_certs.3 M secure/lib/libcrypto/man/man3/UI_STRING.3 M secure/lib/libcrypto/man/man3/UI_UTIL_read_pw.3 M secure/lib/libcrypto/man/man3/UI_create_method.3 M secure/lib/libcrypto/man/man3/UI_new.3 M secure/lib/libcrypto/man/man3/X509V3_get_d2i.3 M secure/lib/libcrypto/man/man3/X509V3_set_ctx.3 M secure/lib/libcrypto/man/man3/X509_ALGOR_dup.3 M secure/lib/libcrypto/man/man3/X509_ATTRIBUTE.3 M secure/lib/libcrypto/man/man3/X509_CRL_get0_by_serial.3 M secure/lib/libcrypto/man/man3/X509_EXTENSION_set_object.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP_hash_dir.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP_meth_new.3 M secure/lib/libcrypto/man/man3/X509_NAME_ENTRY_get_object.3 M secure/lib/libcrypto/man/man3/X509_NAME_add_entry_by_txt.3 M secure/lib/libcrypto/man/man3/X509_NAME_get0_der.3 M secure/lib/libcrypto/man/man3/X509_NAME_get_index_by_NID.3 M secure/lib/libcrypto/man/man3/X509_NAME_print_ex.3 M secure/lib/libcrypto/man/man3/X509_PUBKEY_new.3 M secure/lib/libcrypto/man/man3/X509_REQ_get_attr.3 M secure/lib/libcrypto/man/man3/X509_REQ_get_extensions.3 M secure/lib/libcrypto/man/man3/X509_SIG_get0.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_get_error.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_new.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_set_verify_cb.3 M secure/lib/libcrypto/man/man3/X509_STORE_add_cert.3 M secure/lib/libcrypto/man/man3/X509_STORE_get0_param.3 M secure/lib/libcrypto/man/man3/X509_STORE_new.3 M secure/lib/libcrypto/man/man3/X509_STORE_set_verify_cb_func.3 M secure/lib/libcrypto/man/man3/X509_VERIFY_PARAM_set_flags.3 M secure/lib/libcrypto/man/man3/X509_add_cert.3 M secure/lib/libcrypto/man/man3/X509_check_ca.3 M secure/lib/libcrypto/man/man3/X509_check_host.3 M secure/lib/libcrypto/man/man3/X509_check_issued.3 M secure/lib/libcrypto/man/man3/X509_check_private_key.3 M secure/lib/libcrypto/man/man3/X509_check_purpose.3 M secure/lib/libcrypto/man/man3/X509_cmp.3 M secure/lib/libcrypto/man/man3/X509_cmp_time.3 M secure/lib/libcrypto/man/man3/X509_digest.3 M secure/lib/libcrypto/man/man3/X509_dup.3 M secure/lib/libcrypto/man/man3/X509_get0_distinguishing_id.3 M secure/lib/libcrypto/man/man3/X509_get0_notBefore.3 M secure/lib/libcrypto/man/man3/X509_get0_signature.3 M secure/lib/libcrypto/man/man3/X509_get0_uids.3 M secure/lib/libcrypto/man/man3/X509_get_extension_flags.3 M secure/lib/libcrypto/man/man3/X509_get_pubkey.3 M secure/lib/libcrypto/man/man3/X509_get_serialNumber.3 M secure/lib/libcrypto/man/man3/X509_get_subject_name.3 M secure/lib/libcrypto/man/man3/X509_get_version.3 M secure/lib/libcrypto/man/man3/X509_load_http.3 M secure/lib/libcrypto/man/man3/X509_new.3 M secure/lib/libcrypto/man/man3/X509_sign.3 M secure/lib/libcrypto/man/man3/X509_verify.3 M secure/lib/libcrypto/man/man3/X509_verify_cert.3 M secure/lib/libcrypto/man/man3/X509v3_get_ext_by_NID.3 M secure/lib/libcrypto/man/man3/b2i_PVK_bio_ex.3 M secure/lib/libcrypto/man/man3/d2i_PKCS8PrivateKey_bio.3 M secure/lib/libcrypto/man/man3/d2i_PrivateKey.3 M secure/lib/libcrypto/man/man3/d2i_RSAPrivateKey.3 M secure/lib/libcrypto/man/man3/d2i_SSL_SESSION.3 M secure/lib/libcrypto/man/man3/d2i_X509.3 M secure/lib/libcrypto/man/man3/i2d_CMS_bio_stream.3 M secure/lib/libcrypto/man/man3/i2d_PKCS7_bio_stream.3 M secure/lib/libcrypto/man/man3/i2d_re_X509_tbs.3 M secure/lib/libcrypto/man/man3/o2i_SCT_LIST.3 M secure/lib/libcrypto/man/man3/s2i_ASN1_IA5STRING.3 M secure/lib/libcrypto/man/man5/config.5 M secure/lib/libcrypto/man/man5/fips_config.5 M secure/lib/libcrypto/man/man5/x509v3_config.5 M secure/lib/libcrypto/man/man7/EVP_ASYM_CIPHER-RSA.7 M secure/lib/libcrypto/man/man7/EVP_ASYM_CIPHER-SM2.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-AES.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-ARIA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-BLOWFISH.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CAMELLIA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CAST.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CHACHA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-DES.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-IDEA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-NULL.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC2.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC4.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC5.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-SEED.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-SM4.7 M secure/lib/libcrypto/man/man7/EVP_KDF-HKDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-KB.7 M secure/lib/libcrypto/man/man7/EVP_KDF-KRB5KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF1.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF2.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PKCS12KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SCRYPT.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SS.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SSHKDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-TLS13_KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-TLS1_PRF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X942-ASN1.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X942-CONCAT.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X963.7 M secure/lib/libcrypto/man/man7/EVP_KEM-RSA.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-DH.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-ECDH.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-X25519.7 M secure/lib/libcrypto/man/man7/EVP_MAC-BLAKE2.7 M secure/lib/libcrypto/man/man7/EVP_MAC-CMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-GMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-KMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-Poly1305.7 M secure/lib/libcrypto/man/man7/EVP_MAC-Siphash.7 M secure/lib/libcrypto/man/man7/EVP_MD-BLAKE2.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD2.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD4.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD5-SHA1.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD5.7 M secure/lib/libcrypto/man/man7/EVP_MD-MDC2.7 M secure/lib/libcrypto/man/man7/EVP_MD-NULL.7 M secure/lib/libcrypto/man/man7/EVP_MD-RIPEMD160.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA1.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA2.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA3.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHAKE.7 M secure/lib/libcrypto/man/man7/EVP_MD-SM3.7 M secure/lib/libcrypto/man/man7/EVP_MD-WHIRLPOOL.7 M secure/lib/libcrypto/man/man7/EVP_MD-common.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-DH.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-DSA.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-EC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-FFC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-RSA.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-SM2.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-X25519.7 M secure/lib/libcrypto/man/man7/EVP_RAND-CTR-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-HASH-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-HMAC-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-SEED-SRC.7 M secure/lib/libcrypto/man/man7/EVP_RAND-TEST-RAND.7 M secure/lib/libcrypto/man/man7/EVP_RAND.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-DSA.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-ECDSA.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-ED25519.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-RSA.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-FIPS.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-base.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-default.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-legacy.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-null.7 M secure/lib/libcrypto/man/man7/RAND.7 M secure/lib/libcrypto/man/man7/RSA-PSS.7 M secure/lib/libcrypto/man/man7/X25519.7 M secure/lib/libcrypto/man/man7/bio.7 M secure/lib/libcrypto/man/man7/crypto.7 M secure/lib/libcrypto/man/man7/ct.7 M secure/lib/libcrypto/man/man7/des_modes.7 M secure/lib/libcrypto/man/man7/evp.7 M secure/lib/libcrypto/man/man7/fips_module.7 M secure/lib/libcrypto/man/man7/life_cycle-cipher.7 M secure/lib/libcrypto/man/man7/life_cycle-digest.7 M secure/lib/libcrypto/man/man7/life_cycle-kdf.7 M secure/lib/libcrypto/man/man7/life_cycle-mac.7 M secure/lib/libcrypto/man/man7/life_cycle-pkey.7 M secure/lib/libcrypto/man/man7/life_cycle-rand.7 M secure/lib/libcrypto/man/man7/migration_guide.7 M secure/lib/libcrypto/man/man7/openssl-core.h.7 M secure/lib/libcrypto/man/man7/openssl-core_dispatch.h.7 M secure/lib/libcrypto/man/man7/openssl-core_names.h.7 M secure/lib/libcrypto/man/man7/openssl-env.7 M secure/lib/libcrypto/man/man7/openssl-glossary.7 M secure/lib/libcrypto/man/man7/openssl-threads.7 M secure/lib/libcrypto/man/man7/openssl_user_macros.7 M secure/lib/libcrypto/man/man7/ossl_store-file.7 M secure/lib/libcrypto/man/man7/ossl_store.7 M secure/lib/libcrypto/man/man7/passphrase-encoding.7 M secure/lib/libcrypto/man/man7/property.7 M secure/lib/libcrypto/man/man7/provider-asym_cipher.7 M secure/lib/libcrypto/man/man7/provider-base.7 M secure/lib/libcrypto/man/man7/provider-cipher.7 M secure/lib/libcrypto/man/man7/provider-decoder.7 M secure/lib/libcrypto/man/man7/provider-digest.7 M secure/lib/libcrypto/man/man7/provider-encoder.7 M secure/lib/libcrypto/man/man7/provider-kdf.7 M secure/lib/libcrypto/man/man7/provider-kem.7 M secure/lib/libcrypto/man/man7/provider-keyexch.7 M secure/lib/libcrypto/man/man7/provider-keymgmt.7 M secure/lib/libcrypto/man/man7/provider-mac.7 M secure/lib/libcrypto/man/man7/provider-object.7 M secure/lib/libcrypto/man/man7/provider-rand.7 M secure/lib/libcrypto/man/man7/provider-signature.7 M secure/lib/libcrypto/man/man7/provider-storemgmt.7 M secure/lib/libcrypto/man/man7/provider.7 M secure/lib/libcrypto/man/man7/proxy-certificates.7 M secure/lib/libcrypto/man/man7/ssl.7 M secure/lib/libcrypto/man/man7/x509.7 M secure/usr.bin/openssl/man/CA.pl.1 M secure/usr.bin/openssl/man/openssl-asn1parse.1 M secure/usr.bin/openssl/man/openssl-ca.1 M secure/usr.bin/openssl/man/openssl-ciphers.1 M secure/usr.bin/openssl/man/openssl-cmds.1 M secure/usr.bin/openssl/man/openssl-cmp.1 M secure/usr.bin/openssl/man/openssl-cms.1 M secure/usr.bin/openssl/man/openssl-crl.1 M secure/usr.bin/openssl/man/openssl-crl2pkcs7.1 M secure/usr.bin/openssl/man/openssl-dgst.1 M secure/usr.bin/openssl/man/openssl-dhparam.1 M secure/usr.bin/openssl/man/openssl-dsa.1 M secure/usr.bin/openssl/man/openssl-dsaparam.1 M secure/usr.bin/openssl/man/openssl-ec.1 M secure/usr.bin/openssl/man/openssl-ecparam.1 M secure/usr.bin/openssl/man/openssl-enc.1 M secure/usr.bin/openssl/man/openssl-engine.1 M secure/usr.bin/openssl/man/openssl-errstr.1 M secure/usr.bin/openssl/man/openssl-fipsinstall.1 M secure/usr.bin/openssl/man/openssl-format-options.1 M secure/usr.bin/openssl/man/openssl-gendsa.1 M secure/usr.bin/openssl/man/openssl-genpkey.1 M secure/usr.bin/openssl/man/openssl-genrsa.1 M secure/usr.bin/openssl/man/openssl-info.1 M secure/usr.bin/openssl/man/openssl-kdf.1 M secure/usr.bin/openssl/man/openssl-list.1 M secure/usr.bin/openssl/man/openssl-mac.1 M secure/usr.bin/openssl/man/openssl-namedisplay-options.1 M secure/usr.bin/openssl/man/openssl-nseq.1 M secure/usr.bin/openssl/man/openssl-ocsp.1 M secure/usr.bin/openssl/man/openssl-passphrase-options.1 M secure/usr.bin/openssl/man/openssl-passwd.1 M secure/usr.bin/openssl/man/openssl-pkcs12.1 M secure/usr.bin/openssl/man/openssl-pkcs7.1 M secure/usr.bin/openssl/man/openssl-pkcs8.1 M secure/usr.bin/openssl/man/openssl-pkey.1 M secure/usr.bin/openssl/man/openssl-pkeyparam.1 M secure/usr.bin/openssl/man/openssl-pkeyutl.1 M secure/usr.bin/openssl/man/openssl-prime.1 M secure/usr.bin/openssl/man/openssl-rand.1 M secure/usr.bin/openssl/man/openssl-rehash.1 M secure/usr.bin/openssl/man/openssl-req.1 M secure/usr.bin/openssl/man/openssl-rsa.1 M secure/usr.bin/openssl/man/openssl-rsautl.1 M secure/usr.bin/openssl/man/openssl-s_client.1 M secure/usr.bin/openssl/man/openssl-s_server.1 M secure/usr.bin/openssl/man/openssl-s_time.1 M secure/usr.bin/openssl/man/openssl-sess_id.1 M secure/usr.bin/openssl/man/openssl-smime.1 M secure/usr.bin/openssl/man/openssl-speed.1 M secure/usr.bin/openssl/man/openssl-spkac.1 M secure/usr.bin/openssl/man/openssl-srp.1 M secure/usr.bin/openssl/man/openssl-storeutl.1 M secure/usr.bin/openssl/man/openssl-ts.1 M secure/usr.bin/openssl/man/openssl-verification-options.1 M secure/usr.bin/openssl/man/openssl-verify.1 M secure/usr.bin/openssl/man/openssl-version.1 M secure/usr.bin/openssl/man/openssl-x509.1 M secure/usr.bin/openssl/man/openssl.1 M secure/usr.bin/openssl/man/tsget.1 M sys/crypto/openssl/aarch64/aesv8-armx.S M sys/crypto/openssl/arm_arch.h ____________________________________________________________________________________________________________ Commit: 90c4aec77ca2ead1975be9d0ba0cea29f55e9632 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=90c4aec77ca2ead1975be9d0ba0cea29f55e9632 Author: Warner Losh (Wed 16 Oct 2024 01:03:03 BST) Committer: Warner Losh (Sun 12 Apr 2026 23:08:16 BST) gpart: Add warning when the start sector is too low. Add a warning if the starting sector is too low. The standard requires that at least 16k is reserved for the GPT Partition Array, but some tools produce GPT images with fewer than the required number of reserved sectors. PR: 274312 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274312 ) Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D42247 (cherry picked from commit 2cbda736cea8f82cfc5caab0f6099f0fbfe28537) M sys/geom/part/g_part_gpt.c ____________________________________________________________________________________________________________ Commit: 890adccde0763536189cc1995e49f753e8d00497 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=890adccde0763536189cc1995e49f753e8d00497 Author: Warner Losh (Wed 16 Oct 2024 00:15:17 BST) Committer: Warner Losh (Sun 12 Apr 2026 23:08:16 BST) gpart: More nuance for GPT support A careful reading of the GPT standard shows that one may have fewer than 128 entries in your GPT table. While the standard requires that we reserve enough space (32 512-byte-LBAs or 4 4096-byte-LBAs), it also explicitly allows one to specify fewer actual partitions (since that controls what is in the CRC). It requires that the first LBA to be 32 (512 sectors) or 6 (4k sectors) or larger. That requirement is not enforced (it's not listed as one of validation criteria for the GPT). We should likely do so in the future. To that end, allow a default number of entries to use (defent) on creation to be different (larger) than the minimum number of legal entries. For gpt, these numbers work out to 128 and 1 respectively. For all the others, make minent == defent so this is a nop for those partitioning schemes. Sponsored by: Netflix Reviewed by: zlei, emaste Differential Revision: https://reviews.freebsd.org/D42246 (cherry picked from commit 09c999b1557a8031d2b60435d71a0a5ed4f0f016) M sys/geom/part/g_part.c M sys/geom/part/g_part.h M sys/geom/part/g_part_apm.c M sys/geom/part/g_part_bsd.c M sys/geom/part/g_part_bsd64.c M sys/geom/part/g_part_ebr.c M sys/geom/part/g_part_gpt.c M sys/geom/part/g_part_mbr.c ____________________________________________________________________________________________________________ Commit: 9d87f30b3322c910a2cb68442e5d35daea59df82 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9d87f30b3322c910a2cb68442e5d35daea59df82 Author: Kristofer Peterson (Mon 9 Mar 2026 19:40:34 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:46 BST) kern/amd64/machdep: Replace memset in wrmsr_early_safe_end GENERIC-KASAN kernel failed to boot on a Dell PowerEdge C6615 with an AMD EPYC 8224P CPU; UEFI BIOS caught a #GP exception with %RIP in kasan_memset where %GS relative pointer (curthread->td_pflags2) was dereferenced. Investigation led to wrmsr_early_safe_end which calls memset to clear early #GP IDT entry. Replacing memset with __builtin_memset_inline still resulted in the compiler emitting a call to the memset resolver in GENERIC-KASAN build and the kernel stil faulted during boot. This version which has been successfully tested with both GENERIC and GENERIC-KASAN kernels uses memset_early. Signed-off-by: Kristofer Peterson Reviewed-by: kib (cherry picked from commit 615f1b9eb17c921bbcb0cce2b9ad61910361325b) M sys/amd64/amd64/machdep.c ____________________________________________________________________________________________________________ Commit: 06f98df4b7a3a16e19166e6007c8023dc9098ffd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=06f98df4b7a3a16e19166e6007c8023dc9098ffd Author: Kyle Evans (Mon 9 Mar 2026 21:38:57 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:46 BST) stand: lua: break out a few more dirent types in lfs These are non-standard and specific to the version used in loader. We have some desire to recognize symlinks to avoid filtering out kernel symlinks in the autodetection bits when they would be perfectly fine to `load`. This won't be usable right away, so any impending use will need to be careful to account for nil. Reported by: leres (cherry picked from commit bc531a96c9b28b1cabcd5deb0c9f8f6d815cfebc) M libexec/flua/modules/lfs.c ____________________________________________________________________________________________________________ Commit: c9e676f5f2c114556047d053127b1ee6c4e06ec0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c9e676f5f2c114556047d053127b1ee6c4e06ec0 Author: Kyle Evans (Sun 1 Mar 2026 03:23:59 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:45 BST) bhyveload: simplify cb_open() and eliminate minor TOCTOU It's not at all clear why I wrote it like this, but we can do better. I wouldn't think this really has any meaningful security implications since the hierarchy in question can't really be modified by the guest scripts, but it would seem to make it a little more robust. Reviewed by: bnovkov, markj (cherry picked from commit 6da9d465c54bf2e3496e83db025c5d22f3b3cc17) M usr.sbin/bhyveload/bhyveload.c ____________________________________________________________________________________________________________ Commit: 6c92918fa159e974322c5e09ac6cffa9d807b0f2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6c92918fa159e974322c5e09ac6cffa9d807b0f2 Author: Kyle Evans (Wed 11 Feb 2026 19:55:55 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:45 BST) ls: check fts_children() for errors that may not surface otherwise In particular, if one simply does a non-recursive `ls` on a directory that is not accessible, there are some classes of errors that may cause it to fail that wouldn't be surfaced unless we do an fts_read() that will recurse into the inaccessible directory. Catch those kinds of errors here since we cannot expect to an FTS_ERR/FTS_DNR entry to follow up on them. PR: 287451 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287451 ) Reviewed by: kib Discusssed with: des (cherry picked from commit 7bf81e39d83087dc7f984077b5eed5a48df794d4) M bin/ls/ls.c M bin/ls/tests/ls_tests.sh ____________________________________________________________________________________________________________ Commit: b71d5748b741380cc99e31cffdb5584a3fbc1122 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b71d5748b741380cc99e31cffdb5584a3fbc1122 Author: Pat Maddox (Fri 6 Feb 2026 07:50:20 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:44 BST) release: Pass optional VM_IMAGE_CONFIG to vm-image `make vm-image` calls mk-vmimage.sh, which supports `-c CONFFILE`. This file gets sourced before building the image. One example of how to use it is to define vm_extra_filter_base_packages() to filter the list of packages installed into the VM image: # vm-nodbg32.conf vm_extra_filter_base_packages() { grep -v -E '(-dbg|lib32)' } $ make VM_IMAGE_CONFIG=path/to/vm-nodbg32.conf \ VMFORMATS=raw \ -DWITH_VMIMAGES \ vm-image Signed-off-by: Pat Maddox Reviewed by: cperciva (cherry picked from commit 93f482ab3e6b4577f13e85e216a50bdf3704dda3) M release/Makefile.vm ____________________________________________________________________________________________________________ Commit: f329d69b9176a1d407276a010c2b87a07a2bbc5d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f329d69b9176a1d407276a010c2b87a07a2bbc5d Author: Kyle Evans (Thu 5 Feb 2026 03:35:01 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:44 BST) tpm20: fix suspend/resume and entropy harvesting There were a few problem here: - TPM2_Shutdown results in a response that we need to either process or ignore, otherwise any tpm20_write or tpm20_harvest call will trivially hang on an `sc->pending_data_length != 0` - We should have a matching TPM2_Startup upon resume to restore any state that should have persisted - We must drain the harvest task before we suspend to avoid problems there This commit is sufficient to avoid breaking suspend/resume. Co-authored-by: markj Tested by: garga (cherry picked from commit 38a4995eb52db21116f8b37ed942e66a8c2f050f) M sys/dev/tpm/tpm20.c M sys/dev/tpm/tpm20.h M sys/dev/tpm/tpm_crb.c M sys/dev/tpm/tpm_tis.c ____________________________________________________________________________________________________________ Commit: 4f4669db7040df5d682e2b08ffa9f3f8c8d36a0c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4f4669db7040df5d682e2b08ffa9f3f8c8d36a0c Author: Artem Bunichev (Thu 5 Feb 2026 03:35:01 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:43 BST) OptionalObsoleteFiles: Add etc/zfs/compatibility.d If the world is built and installed with WITHOUT_ZFS, then make -DBATCH_DELETE_OLD_FILES delete-old-dirs will give the error: > rmdir: /etc/zfs: Directory not empty because /etc/zfs/compatibility.d is still there. While we're here, clean out /usr/share/zfs as well. Co-authored-by: kevans (cherry picked from commit 5c9d988d865cc4ce849507173c0a2e2f399d0f62) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 05b84d64027451b298c56025eed11bf047be234d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=05b84d64027451b298c56025eed11bf047be234d Author: Abdelkader Boudih (Tue 3 Feb 2026 03:21:43 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:43 BST) uart: fix sleeping while holding mutex in uart_tty_detach() Move swi_remove() call before acquiring the tty lock. swi_remove() calls intr_event_remove_handler() which may sleep via msleep(), causing a lock order violation when called with the tty mutex held. The software interrupt handler removal operates on the interrupt event structure independently and does not require the tty lock. This matches the pattern used in other drivers such as tcp_hpts.c where swi_remove() is called without holding other locks. Reviewed by: imp, kevans (cherry picked from commit ed3a2469a71e0ef48cf8e636c35e64a011756da3) M sys/dev/uart/uart_tty.c ____________________________________________________________________________________________________________ Commit: b39cac4b834cee6ab76ebab8ad180a99b1249970 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b39cac4b834cee6ab76ebab8ad180a99b1249970 Author: Kyle Evans (Tue 3 Feb 2026 03:21:42 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:42 BST) rc: run the zfs rc script before tmp The tmp rc script has much the same problem that the var does: it wants to test if /tmp is writable, and mount a tmpfs if it's not. This means that we actually want our zfs datasets mounted first, because we might have a /tmp dataset that changes the story. The ordering problem is particularly noticable with a r/o zfs root, since the write test will fail and we'll mount a tmpfs that later gets covered by our /tmp dataset. If that /tmp dataset inherited readonly, then we're still in trouble. This also fixes `tmpmfs=yes`, which would again get covered by a zfs dataset with the existing ordering. Reviewed by: des (cherry picked from commit d3f21856aa72c28408660ed40ce76bbd0716a991) M libexec/rc/rc.d/zfs ____________________________________________________________________________________________________________ Commit: 874d779aa7ddc8216b06e58ff955adf2a54a17d5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=874d779aa7ddc8216b06e58ff955adf2a54a17d5 Author: Abdelkader Boudih (Fri 30 Jan 2026 00:02:47 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:42 BST) firmware: Fix inverted FIRMWARE_GET_NOWARN logic The try_binary_file() function has inverted logic for the FIRMWARE_GET_NOWARN flag. When the flag is set (meaning "don't warn"), the code sets warn=true and makes noise anyway. Invert the assignment to warn to correctly suppress warnings when FIRMWARE_GET_NOWARN is set. Reviewed by: kevans (cherry picked from commit fdcd67be8274d237ae2c87d6475d9d34b440b8d8) M sys/kern/subr_firmware.c ____________________________________________________________________________________________________________ Commit: 605fd428297c464ccb4081af02efdffc6f9a453b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=605fd428297c464ccb4081af02efdffc6f9a453b Author: Kyle Evans (Wed 21 Jan 2026 23:34:27 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:41 BST) truncate: fix a minor nit + add a hole-punching test The struct spacectl_range we use is only really used in these three lines of code, so re-scope it down to just the dealloc branch. This is marginally easier to reason about what might be necessary to replace in porting our truncate(1) to other platforms. While we're here, add a test for the -d flag to be sure it really does punch a hole in the file. The test also tries to confirm that it does not disturb other segments of the file in the process, just to inspire some confidence that it's not corrupting the file somehow. Sponsored by: Klara, Inc. Reviewed by: markj (cherry picked from commit eacc501eff52db16b7b784c89a3a4a03c9a3ef34) M usr.bin/truncate/tests/truncate_test.sh M usr.bin/truncate/truncate.c ____________________________________________________________________________________________________________ Commit: 3f4d641f7e6973e6d544c10ac9c0203333b36ecd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3f4d641f7e6973e6d544c10ac9c0203333b36ecd Author: Quentin Thébault (Wed 14 Jan 2026 00:14:22 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:41 BST) vt(4): allow up to _SIG_MAXSIG (128) for VT_SETMODE VT_SETMODE ioctl currently checks the provided signal numbers with its own ISSIGVALID macro that uses NSIG (32) as a maximum, although the code that will actually send the signal in sys/kern/kern_sig.c uses _SIG_VALID which allows up to _SIG_MAXSIG (128). This change aligns the vt code with the kernel internals and enables the use of higher signal numbers so that applications are not limited to SIGUSR1 and SIGUSR2 for vt release and acquire signals. Signed-off-by: Quentin Thébault Reviewed by: emaste, imp, kevans (cherry picked from commit 5e1c7867e1b9a8abe7307d01087cddc057e39859) M sys/dev/vt/vt.h M sys/dev/vt/vt_core.c ____________________________________________________________________________________________________________ Commit: 6422a2448f29fa87833ae2b5211e78a7e1f00315 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6422a2448f29fa87833ae2b5211e78a7e1f00315 Author: Kyle Evans (Fri 19 Dec 2025 22:17:30 GMT) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:40 BST) files.amd64: remove some lines duplicated from files.x86 These were added to files.x86 because they were duplicated in both files.i386 and files.amd64, but they did not end up removed in the latter. Garbage collect them now. Reviewed by: jhibbits Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. (cherry picked from commit a8c594d27779b95f33c856521ec1039fa552d869) M sys/conf/files.amd64 ____________________________________________________________________________________________________________ Commit: 77196f0ad0de26235e2b0fc90c8c75203878a9ad URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=77196f0ad0de26235e2b0fc90c8c75203878a9ad Author: Kyle Evans (Sat 4 Oct 2025 14:58:00 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:40 BST) nuageinit: require lfs where it's needed nuageinit largely already did this, but one spot was missed -- add the necessary require() in to get the module loaded. (cherry picked from commit bb4167463ac44b47ded4e0223a0abd8381ca6cd8) M libexec/nuageinit/nuageinit ____________________________________________________________________________________________________________ Commit: e1efe20f2a824a1736ee9aaca9cd0bcd9ace9b20 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e1efe20f2a824a1736ee9aaca9cd0bcd9ace9b20 Author: Kyle Evans (Thu 4 Sep 2025 03:08:52 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:39 BST) pseudofs: don't leak the unrhdr on error Reviewed by: des, kib (cherry picked from commit b9746f6185c708ebadc9a8b1e640c1deab52b161) M sys/fs/pseudofs/pseudofs.c ____________________________________________________________________________________________________________ Commit: 675ea9d1d6a5ca8d224f5fdb2d01ef3fee8e6325 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=675ea9d1d6a5ca8d224f5fdb2d01ef3fee8e6325 Author: Kyle Evans (Thu 4 Sep 2025 03:08:51 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:39 BST) vfs: handle vfs_init() failures Most vfs_init implementations will not fail, with the notable current exception that tmpfs_subr_init() can fail to allocate a new swap pager type, in which case we probably do not want to proceed and keep it registered. linsysfs was a potential consumer, but we opted to go a different direction and move pseudofs init/deinit over to first mount and last mount instead. Reviewed by: fuz, kib (cherry picked from commit 6d33507ff9b877f52516df00b012715b55d4e14f) M sys/kern/vfs_init.c ____________________________________________________________________________________________________________ Commit: 6613b91799ce956c5a33ac9415f9bb700d1b5022 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6613b91799ce956c5a33ac9415f9bb700d1b5022 Author: Kyle Evans (Fri 29 Aug 2025 20:24:35 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:38 BST) patch: test for unified diffs with spaces in filenames The older GNU patch that we had in base did not properly handle spaces in filenames in unified diffs, but bsdpatch seems to have handled this fine at least since the version we imported into base initially. Add a test with spaces in the filename specifically to be sure. PR: 181272 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=181272 ) (cherry picked from commit cc36624b2a8be3fbf180c5ae8d310d86486884bc) M usr.bin/patch/tests/unified_patch_test.sh ____________________________________________________________________________________________________________ Commit: b00faab970c0e867b2c8197d7bb14abbb492932e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b00faab970c0e867b2c8197d7bb14abbb492932e Author: Kyle Evans (Fri 22 Aug 2025 04:48:14 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:38 BST) stand: add a mechanism to avoid env var propagation to kenv Our only user of this at the moment is teken.{fg,bg}_color. These are special because teken is a library common to both the kernel and the loader, and we want to avoid having special vars to control the loader vs. the kernel. Ideally, if a user wants a different set of console colors, then they set the appropriate teken variable and it Just Works(TM) everywhere. We can't just avoid setting the env vars, because we specifically want to install a hook to adjust how loader is drawn. This allows us to avoid breaking a kernel config(5) that has some default teken colors set with our defaults. That's a valid configuration, even if it might seem weird that they don't want to set colors in both loader and the kernel -- they may not anticipate spending any time in loader, and thus prefer to just let it do its default behavior. NOKENV is expected to be unset if the value is overwritten, rather than acting as a persistent marker that we do not want the value to persist under any circumstance. We can always add another flag bit later for persistence if we find a use for that, but most variables are fine to carry over. This is mostly needed for environment variables that we really just want to set a hook for. Future work could expand this to break it out to the scripted interfaces. We have discussed some options like a new built-in command, or adding a flag to the existing `set` command, but haven't really come up with a concrete plan to avoid confusion. Reviewed by: imp (cherry picked from commit 510e473ff3a6d4620c603c1b9ba06fb2bf5745fd) M stand/common/gfx_fb.c M stand/common/modinfo.c M stand/libsa/environment.c M stand/libsa/stand.h ____________________________________________________________________________________________________________ Commit: 14c8e003318b3c29f1b9a7a61092c9e3df5f2bc1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=14c8e003318b3c29f1b9a7a61092c9e3df5f2bc1 Author: Kyle Evans (Fri 22 Aug 2025 04:48:14 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:38 BST) stand: split fg/bg handling up a little further These can be setup independently, so we should also check them and initialize each independently. This fixes a pre-existing bug where-in we may not pickup a bg color specified in the environment if a fg color wasn't set. The new version also ensures that we're hooking the color vars properly if we're using a value that was already there, as the console may need to adjust if something wants to switch them up again. Otherwise, a teken.fg_color set in loader could conceivably occur that only changes the color when you get to the kernel, which could be surprising. Reviewed by: imp (cherry picked from commit 95e6fd1fd85a448d2c68473b85a61fba24c9bc4f) M stand/common/gfx_fb.c ____________________________________________________________________________________________________________ Commit: 4bb6ec63dace8fb6d522fe246700ffc30bc79ab5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4bb6ec63dace8fb6d522fe246700ffc30bc79ab5 Author: Kyle Evans (Fri 22 Aug 2025 04:48:14 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:37 BST) stand: use a common function in gfx_fb for setting up teken colors These are basically identical, with exception to the hook installed which is specific to the loader we're building by necessity. Pull these out into common/gfx_fb.c and just parameterize the hooks to make it easier to change the logic. Reviewed by: imp (cherry picked from commit c43de099d0138b369b705b3af2c3254d3f3afc6e) M stand/common/gfx_fb.c M stand/common/gfx_fb.h M stand/efi/libefi/efi_console.c M stand/i386/libi386/vidconsole.c ____________________________________________________________________________________________________________ Commit: fd67a7587c1a187cc162cf02ece94f4142874f35 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fd67a7587c1a187cc162cf02ece94f4142874f35 Author: Kyle Evans (Thu 21 Aug 2025 15:21:41 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:37 BST) if_tuntap: make SIOCIFDESTROY interruptible There's no good justification to permanently hang a thread until the tunnel can be destroyed. Make it interruptible so that the admin can ^C it and remedy the situation if something erroneously has the tunnel open, rather than forcing them to open another shell to resolve it. Reviewed by: markj (cherry picked from commit 274bf7c8ae7e7b51853cd541481985f0e687f10e) M sys/net/if_tuntap.c ____________________________________________________________________________________________________________ Commit: 3c3228a5275a3eda0f73aa24a8f24950f3b4823c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3c3228a5275a3eda0f73aa24a8f24950f3b4823c Author: Kyle Evans (Sat 9 Aug 2025 17:01:57 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:36 BST) ssh: sshd-session: properly save off the privileged gid Current and traditional FreeBSD behavior means that getegid() here is the first element in the prior setgroups() call, if any, so we may inadvertently wipe out our rgid with the unprivileged gid. This is rendered somewhat harmless by the fact that we're losing the privileged gid -- we'll still regain it as the egid in restore_uid() later by way of restoring saved_egroups, rather than by intentionally restoring it from getgid(). This will be promptly reverted if we can get setgroups(2)/getgroups(2) changed in FreeBSD 15.0, but it seemed wise to get this technically correct for previous branches. Reviewed by: jlduran (cherry picked from commit 239e8c98636a7578cc67a6f9d54d14c71b095e36) M crypto/openssh/uidswap.c ____________________________________________________________________________________________________________ Commit: cf7ac61fb5747aed94435a7e0f6fbf4233594945 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cf7ac61fb5747aed94435a7e0f6fbf4233594945 Author: Kyle Evans (Sat 9 Aug 2025 17:00:31 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:36 BST) top: improve sort field storage/lookup Switch up comparator mapping to avoid these kinds of errors, use a simple array of (name, comparator) pairs rather than having to maintain entries in two separate arrays that must have matching indices. Reviewed by: obiwac (cherry picked from commit 5f72125339b1d14d1b04329ac561354f5e8133fe) M usr.bin/top/machine.c M usr.bin/top/machine.h M usr.bin/top/top.c M usr.bin/top/utils.c M usr.bin/top/utils.h ____________________________________________________________________________________________________________ Commit: e2d48181239e99b825862156cd5d6a9756875125 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e2d48181239e99b825862156cd5d6a9756875125 Author: Kyle Evans (Fri 8 Aug 2025 23:34:56 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:36 BST) inetd: don't assume that initgroups(3) will set the egid inetd, in the ident provider, seems to be the only initgroups(3) caller in base that assumes it will set the egid. Everyone else uses it as it's typically used on other platforms: to initialize supplementary groups. (cherry picked from commit 33dd42e632982ba324789f47041d03ceb65f6560) M usr.sbin/inetd/builtins.c ____________________________________________________________________________________________________________ Commit: 41aa44d0b2b658ab9a560fa325a323ed616c7ecf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=41aa44d0b2b658ab9a560fa325a323ed616c7ecf Author: Kyle Evans (Fri 8 Aug 2025 05:52:53 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:35 BST) grep: toss in some explicit fflush() grep|tee of the src/ tree for infrequently-occurring strings is fairly annoying; drop some tactical flushes at line-match boundaries to reduce the long stalls. In the case of `grep -o`, we'll flush after multiple lines if there are multiple matches within a single line of text, while for non`-o` we'll flush generally after every line. (cherry picked from commit 7a7f74dbcc4f41d98218471297eaa629e34326e2) M usr.bin/grep/util.c ____________________________________________________________________________________________________________ Commit: 7db1376bd1519d5ec48153d8c19a5a343fa59019 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7db1376bd1519d5ec48153d8c19a5a343fa59019 Author: Kyle Evans (Thu 31 Jul 2025 05:41:28 BST) Committer: Kyle Evans (Sun 12 Apr 2026 14:43:35 BST) loader: add nvidia modules to the loader blacklist It is known that nvidia modules, like the drm modules that are already present, will panic if loaded in early boot rather than later. Pop them into our list to deny loading them if someone were to add, e.g., nvidia-modeset_load="YES", to their loader.conf. This doesn't prevent them from being loaded if one drops to the loader prompt, but it does prevent the standard user from easy foot-shooting if they find old or inaccurate information out in the wild. Reviewed by: imp, kbowling (cherry picked from commit 763a097c156f36830e774b3cc789f68c5d1ae601) M stand/defaults/loader.conf ____________________________________________________________________________________________________________ Commit: 621b3b8992839c62297350363e7d63866af3978c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=621b3b8992839c62297350363e7d63866af3978c Author: Dag-Erling Smørgrav (Tue 7 Apr 2026 12:04:37 BST) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:59:22 BST) libc: Add missing MLINK for stravis(3) MFC after: 1 week Fixes: 8dfeba04eb36 ("Update to a June 8th snapshot of (un)vis form NetBSD.") Reviewed by: ziaee Differential Revision: https://reviews.freebsd.org/D56260 (cherry picked from commit a09d06bc5bff64baab76220a66c3501b89899134) M lib/libc/gen/Makefile.inc ____________________________________________________________________________________________________________ Commit: b4d3f088760912dd7384d04e43e6200f76c8a8b8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b4d3f088760912dd7384d04e43e6200f76c8a8b8 Author: Dag-Erling Smørgrav (Mon 26 Jan 2026 12:01:39 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:47 BST) devstat: Provide 32-bit compatibility If a 32-bit process running on a 64-bit kernel requests kern.devstat.all, translate each struct devstat to its 32-bit equivalent before copying it out. Also fix a bug where an early error would be ignored if there were no devices to report. MFC after: 1 week Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D54591 (cherry picked from commit a11d132f6c62f32abe44b19f7527d97ddc239058) freebsd32: Fix includes The previous commit added , which isn't actually needed. Conversely, is needed (and has been for a long time) but was not included. MFC after: 1 week Fixes: a11d132f6c62 ("devstat: Provide 32-bit compatibility") Reported by: gallatin@ (cherry picked from commit 0eb2c9d39b5f5cfb68b404bca358aa5fb11ac60c) M sys/compat/freebsd32/freebsd32.h M sys/kern/subr_devstat.c ____________________________________________________________________________________________________________ Commit: de8867882c544bab7de260fbb0504fc8949ca05a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=de8867882c544bab7de260fbb0504fc8949ca05a Author: Olivier Certner (Fri 13 Feb 2026 17:03:31 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:47 BST) sys/compat/freebsd32: FF clock struct: Don't pack, use 'ffcounter32' Packing 'struct ffclock_estimate32', in absence of substitution of 'ffcounter' (some 'uint64_t') by a 32-bit compatible type, was necessary on amd64 since 'uint64_t' is 8-byte aligned, which leaves a padding gap of 4-byte between fields 'update_time' and 'update_ffcount'. This gap does not exist on i386 (or amd64 32-bit mode), as 'uint64_t' there is only 4-byte aligned. Change the type of the 'update_ffcount' and 'leapsec_next' fields to the recently introduced 'freebsd32_uint64_t', and adapt copy-in and copy-out accordingly. Using `CP()` previously worked due to the '__packed__' attribute. Reviewed by: kib MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55282 (cherry picked from commit 7c2fc4419db43a8a7d1886b0b8e08aa97bfa31e4) M sys/compat/freebsd32/freebsd32.h M sys/compat/freebsd32/freebsd32_misc.c ____________________________________________________________________________________________________________ Commit: e324486b9b562f9a1d4a214492766d83299dbb0d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e324486b9b562f9a1d4a214492766d83299dbb0d Author: Olivier Certner (Fri 13 Feb 2026 16:37:21 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:47 BST) sys/compat/freebsd32: Fix i386 compilation The compile assertion now failing is due to the change '__int64_t' => '__int32_t' as the type of 'time32_t' on i386, which is the correct value. The use of 'freebsd32.h' on i386 may seem strange, but it comes from 'kern_umtx.c' including it unconditionally as it needs 'struct umutex32'. Fixes: 87632ddf67b0 ("openzfs sys/types32.h: use abi_compat.h for time32_t") Sponsored by: The FreeBSD Foundation (cherry picked from commit 07c4eb506be45a4b836665e14ad63034ef3d573a) M sys/compat/freebsd32/freebsd32.h ____________________________________________________________________________________________________________ Commit: 55766459e87b5976e9459942f94772808a7de7a4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=55766459e87b5976e9459942f94772808a7de7a4 Author: Konstantin Belousov (Tue 10 Feb 2026 04:17:53 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:47 BST) dev/mfi: include sys/abi_compat.h unconditionally not only for COMPAT_FREEBSD32 case. The driver uses INPTR() for non-compat32 code. Sponsored by: The FreeBSD Foundation MFC after: 1 week (cherry picked from commit bf603dbbb2c9964bba3d5bf2ba2371a75a0cc521) M sys/dev/mfi/mfi.c ____________________________________________________________________________________________________________ Commit: 5b2da23360917537a086d30189edba22e4124c7e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5b2da23360917537a086d30189edba22e4124c7e Author: Konstantin Belousov (Mon 9 Feb 2026 20:13:21 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:47 BST) sys/event.h: reduce namespace pollution from sys/abi_compat.h Split out types definitions into sys/abi_types.h, and only include abi_types.h into sys/event.h. Tested and reviewed by: bz Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55202 (cherry picked from commit ecadac729a1b855fe0d77a682ee424c3da1eb3db) M sys/dev/mfi/mfi.c M sys/sys/abi_compat.h A sys/sys/abi_types.h M sys/sys/event.h ____________________________________________________________________________________________________________ Commit: ac1e0db3e405326c83e34102ce086847acc0f658 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ac1e0db3e405326c83e34102ce086847acc0f658 Author: Konstantin Belousov (Thu 5 Feb 2026 20:19:24 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:47 BST) sys/user.h: remove XXXSKE markers Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit ec6cf0c52698f9056cb17456717849653a03f7e4) M sys/sys/user.h ____________________________________________________________________________________________________________ Commit: 7320170ff210cc1da1f36e73130de7e2e62a867b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7320170ff210cc1da1f36e73130de7e2e62a867b Author: Konstantin Belousov (Fri 6 Feb 2026 23:47:13 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:46 BST) openzfs sys/types32.h: use abi_compat.h for time32_t The time32_t typedef leaks into openzfs compilation environment through sys/event.h. Simultaneously, openzfs provides its own definition that is only correct for amd64 on FreeBSD. Try to fix it by using sys/abi_compat.h directly. Since toolchain build from the make buildworld uses host abi_compat.h, add a preprocessor symbol __HAVE_TIME32_T to signal consumers that time32_t is typedef'ed. If not defined, fall back to old and wrong time32_t, which is enough for bootstraping toolchain. Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit 87632ddf67b01f3d4787d10332afc1eeece52e2d) M sys/contrib/openzfs/include/os/freebsd/spl/sys/types32.h M sys/contrib/openzfs/lib/libspl/include/sys/types32.h M sys/sys/abi_compat.h ____________________________________________________________________________________________________________ Commit: e0c7fcdd1ef18a66cdb1f84ac05695998a917fd7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e0c7fcdd1ef18a66cdb1f84ac05695998a917fd7 Author: Konstantin Belousov (Thu 5 Feb 2026 19:40:55 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:46 BST) sys/compat/freebsd32: use freebsd32_uint64_t for struct kinfo_proc32 Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit 31fab773613b21183fbd5a313fa8c69d37fcb196) M sys/compat/freebsd32/freebsd32.h M sys/kern/kern_proc.c ____________________________________________________________________________________________________________ Commit: b13bba245653e81e35cdcfca7acd05f0065d2b6c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b13bba245653e81e35cdcfca7acd05f0065d2b6c Author: Konstantin Belousov (Thu 5 Feb 2026 20:02:27 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:46 BST) sys/compat/freebsd32: ki_pd is missing from struct kinfo_proc32 This is missed by the sizeof(struct kinfo_proc32) assert due to another bug: namely, the use of uint64_t type that has different alignment on i386 than on amd64 host. Fixes: 85078b8573332c2c83a79adea8a61b519fb3b6af Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit 154778e3585166f613fd3d2978a0cab2262d1611) M sys/compat/freebsd32/freebsd32.h M sys/kern/kern_proc.c ____________________________________________________________________________________________________________ Commit: f381a87145fa4acebd5d2cfd97466c225a8397e1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f381a87145fa4acebd5d2cfd97466c225a8397e1 Author: Konstantin Belousov (Thu 5 Feb 2026 19:39:27 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:46 BST) sys/compat/freebsd32: use freebsd32_uint64_t for several struct stat's Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit beee89472e3e0e3640c9db5c34a6e422830ff00f) M sys/compat/freebsd32/freebsd32.h M sys/compat/freebsd32/freebsd32_misc.c ____________________________________________________________________________________________________________ Commit: 7d8b297d02b6d17cc10a47a37047c1c232c9c3a4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7d8b297d02b6d17cc10a47a37047c1c232c9c3a4 Author: Konstantin Belousov (Thu 5 Feb 2026 19:35:01 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:46 BST) sys/compat/freebsd32: use freebsd32_uint64_t for struct ffclock_estimate32 Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit 3dc72107d29d304ba21f04426ec82077d23cedcd) M sys/compat/freebsd32/freebsd32.h M sys/compat/freebsd32/freebsd32_misc.c ____________________________________________________________________________________________________________ Commit: d94d93b83aec816985632f78eb5c29e0e9c095bf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d94d93b83aec816985632f78eb5c29e0e9c095bf Author: Konstantin Belousov (Thu 5 Feb 2026 19:29:46 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:46 BST) sys/compat/freebsd32: use freebsd32_uint64_t for struct kinfo_knote32 Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit 485e916a67b4e700de5f50873e1e7b64de394b16) M sys/compat/freebsd32/freebsd32.h M sys/compat/freebsd32/freebsd32_misc.c ____________________________________________________________________________________________________________ Commit: fc30c3f43f7f0d31e3a90ba871bd58650482e98e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fc30c3f43f7f0d31e3a90ba871bd58650482e98e Author: Konstantin Belousov (Thu 5 Feb 2026 19:22:44 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:45 BST) sys/event.h: use freebsd32_uint64_t for kevent32 64bit members Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit ad639400dc9f1c5aec470996473bb54edc113dba) M sys/compat/freebsd32/freebsd32_misc.c M sys/sys/event.h M usr.bin/kdump/kdump.c ____________________________________________________________________________________________________________ Commit: 4ebb7c8048aef03d1ab154f1c5ccc30b56376604 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4ebb7c8048aef03d1ab154f1c5ccc30b56376604 Author: Konstantin Belousov (Thu 5 Feb 2026 19:10:00 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:45 BST) sys/abi_compat.h: add Foundation copyright for uint64_t stuff Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit 9ce0c190d8b3570c0a537f84952dca8c6e462ec3) M sys/sys/abi_compat.h ____________________________________________________________________________________________________________ Commit: 3222cb7d213c05787e6a3db0f73caa5778e6ec4a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3222cb7d213c05787e6a3db0f73caa5778e6ec4a Author: Konstantin Belousov (Thu 5 Feb 2026 19:08:06 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:45 BST) sys/abi_compat.h: move freebsd32_uint64_t and FU64_CP() there Use private names for uintXX_t types. Remove conflicting (but equal) PTR_IN() definition from dev/mfi.c. Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit e651c64bcab08c7b12d8ad6e3ad0b1ef3af3b875) M sys/compat/freebsd32/freebsd32.h M sys/dev/mfi/mfi.c M sys/sys/abi_compat.h ____________________________________________________________________________________________________________ Commit: fbc234c51adedfa699f52a89ba60c3e0fd819d88 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fbc234c51adedfa699f52a89ba60c3e0fd819d88 Author: Konstantin Belousov (Thu 5 Feb 2026 19:06:16 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:45 BST) sys/abi_compat.h: normalize include guard name Reviewed by: brooks Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D55135 (cherry picked from commit c3a04a9585ae233c98ee2eef73e6a80d17512578) M sys/sys/abi_compat.h ____________________________________________________________________________________________________________ Commit: 408e20a699006bbe15546052db7b413b21603c2b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=408e20a699006bbe15546052db7b413b21603c2b Author: Konstantin Belousov (Mon 12 Jan 2026 04:46:15 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:45 BST) sys/abi_compat.h: fix UB for bintime32 handling Do not cast and then access potentially unaligned uint64_t in the BT_CP() macro. Use freebsd32_uint64_t type and FU64_CP() for the frac member. Noted by: des Reviewed by: des, emaste Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D54663 (cherry picked from commit be1b2da855cc38531733b5c97891cd4a40a993bc) M sys/compat/freebsd32/freebsd32.h M sys/sys/abi_compat.h ____________________________________________________________________________________________________________ Commit: a60b5778dd043214e9e094f1b7d41adc3b9ee972 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a60b5778dd043214e9e094f1b7d41adc3b9ee972 Author: Konstantin Belousov (Mon 12 Jan 2026 04:45:36 GMT) Committer: Dag-Erling Smørgrav (Sun 12 Apr 2026 06:56:45 BST) compat32: provide a type and a macro for (u)int64_t handling on non-x86 arches uint64_t is 4-byte aligned on i386, but is 8-bytes aligned on all other 32bit arches FreeBSD supports. Provide the freebsd32_uint64_t type and the FU64_CP() macro, which are intended to be used where 32bit ABI uses (u)int64_t type, and do proper layout and copying for the aggregate type. Reviewed by: des, emaste Sponsored by: The FreeBSD Foundation MFC after: 1 week Differential revision: https://reviews.freebsd.org/D54663 (cherry picked from commit 96acaa960023c20e852e04e7cc5c6a5faca36c67) M sys/compat/freebsd32/freebsd32.h M sys/sys/abi_compat.h ____________________________________________________________________________________________________________ Commit: fcec95bca38fb9bd3bd30b94efc4a0fe2bde3034 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fcec95bca38fb9bd3bd30b94efc4a0fe2bde3034 Author: Rick Macklem (Sun 29 Mar 2026 22:41:36 BST) Committer: Rick Macklem (Sun 12 Apr 2026 01:45:40 BST) nfs_nfsdsocket.c: Allow Copy/Clone from a read-only fs For some server file system types, such as ZFS, a Copy/Clone operation can be done across file systems of the same file system type. However, without this patch, the Copy/Clone will fail with EROFS if the input file is on a read-only mounted file system. This happens because Copy/Clone will try to do a VOP_SETATTR() of atime to set the atime. This patch pretends the VOP_SETATTR() of atime worked for read-only file systems. It fixes a problem when copying files from a ZFS snapshot. PR: 294010 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294010 ) (cherry picked from commit b5815ee99a015c6ac118d7e9646d0c95b72e9f2d) M sys/fs/nfsserver/nfs_nfsdserv.c ____________________________________________________________________________________________________________ Commit: 1d4e9d2b5ef5c8055740c949ad4446aed9a4d308 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1d4e9d2b5ef5c8055740c949ad4446aed9a4d308 Author: Rick Macklem (Sat 28 Mar 2026 19:39:10 GMT) Committer: Rick Macklem (Sat 11 Apr 2026 04:33:19 BST) nfs_nfsdsocket.c: Allow Copy across file systems For some server file system types, such as ZFS, a Copy/Clone operation can be done across file systems of the same file system type. As such, this patch allows the Copy/Clone to be attempted when the file handles are for files on different file systems. This fixes a problem for exported ZFS file systems when a copy_files on file_range(2) between file systems in the same NFSv4 mount is attempted. PR: 294010 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294010 ) (cherry picked from commit b65e7b4944cc2f594c9d9e6abc9b8618d3d62ff8) M sys/fs/nfsserver/nfs_nfsdsocket.c ____________________________________________________________________________________________________________ Commit: 4b6de64b99b984bee2f9f16f00364ba7f52a5dc1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4b6de64b99b984bee2f9f16f00364ba7f52a5dc1 Author: Andrey V. Elsukov (Thu 2 Apr 2026 11:14:29 BST) Committer: Andrey V. Elsukov (Thu 9 Apr 2026 09:36:13 BST) ipfw_nptv6: fix handling the ifaddr removal event The result of IN6_ARE_MASKED_ADDR_EQUAL() macro is not an integer, so threat it as a boolean value. PR: 294114 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294114 ) Reported by: Peter Much (cherry picked from commit d9d7b59486499615a5fdce54443ce62aecf557e8) M sys/netpfil/ipfw/nptv6/nptv6.c ____________________________________________________________________________________________________________ Commit: 8a0d626219f1863c79808bdda2175cc136250b07 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8a0d626219f1863c79808bdda2175cc136250b07 Author: Joseph Mingrone (Mon 16 Mar 2026 02:22:18 GMT) Committer: Joseph Mingrone (Wed 8 Apr 2026 20:10:23 BST) tcpdump: Update to 4.99.6 Changes: https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.99/CHANGES Obtained from: https://www.tcpdump.org/release/tcpdump-4.99.6.tar.xz Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55578 Differential Revision: https://reviews.freebsd.org/D55871 (cherry picked from commit e6083790f217ba7f89cd2957922bd45e35466359) M contrib/tcpdump/CHANGES M contrib/tcpdump/CMakeLists.txt M contrib/tcpdump/CONTRIBUTING.md M contrib/tcpdump/INSTALL.md M contrib/tcpdump/Makefile.in M contrib/tcpdump/README.md M contrib/tcpdump/VERSION M contrib/tcpdump/addrtostr.c M contrib/tcpdump/autogen.sh M contrib/tcpdump/checksum.c M contrib/tcpdump/cmake/Modules/FindPCAP.cmake M contrib/tcpdump/cmakeconfig.h.in M contrib/tcpdump/config.h.in M contrib/tcpdump/configure M contrib/tcpdump/configure.ac M contrib/tcpdump/diag-control.h D contrib/tcpdump/doc/README.NetBSD.md D contrib/tcpdump/doc/README.aix.md D contrib/tcpdump/doc/README.haiku.md D contrib/tcpdump/doc/README.solaris.md M contrib/tcpdump/extract.h M contrib/tcpdump/ipproto.c M contrib/tcpdump/ipproto.h M contrib/tcpdump/missing/getopt_long.h D contrib/tcpdump/missing/snprintf.c M contrib/tcpdump/netdissect-stdinc.h M contrib/tcpdump/netdissect.c M contrib/tcpdump/netdissect.h M contrib/tcpdump/nfs.h M contrib/tcpdump/ntp.c M contrib/tcpdump/ntp.h M contrib/tcpdump/parsenfsfh.c M contrib/tcpdump/print-802_11.c M contrib/tcpdump/print-arista.c M contrib/tcpdump/print-ascii.c M contrib/tcpdump/print-bootp.c M contrib/tcpdump/print-domain.c M contrib/tcpdump/print-egp.c M contrib/tcpdump/print-frag6.c M contrib/tcpdump/print-icmp6.c M contrib/tcpdump/print-ip.c M contrib/tcpdump/print-ip6.c M contrib/tcpdump/print-ip6opts.c M contrib/tcpdump/print-isakmp.c M contrib/tcpdump/print-isoclns.c M contrib/tcpdump/print-juniper.c M contrib/tcpdump/print-lspping.c M contrib/tcpdump/print-lwapp.c M contrib/tcpdump/print-mobility.c M contrib/tcpdump/print-msdp.c M contrib/tcpdump/print-ntp.c D contrib/tcpdump/print-otv.c M contrib/tcpdump/print-pflog.c M contrib/tcpdump/print-ppp.c M contrib/tcpdump/print-ptp.c M contrib/tcpdump/print-raw.c M contrib/tcpdump/print-sunrpc.c M contrib/tcpdump/print-tcp.c M contrib/tcpdump/print-udp.c M contrib/tcpdump/print-zep.c M contrib/tcpdump/rpc_auth.h M contrib/tcpdump/rpc_msg.h M contrib/tcpdump/tcpdump.1.in M contrib/tcpdump/tcpdump.c M contrib/tcpdump/timeval-operations.h M contrib/tcpdump/udp.h M contrib/tcpdump/util-print.c M usr.sbin/tcpdump/tcpdump/Makefile M usr.sbin/tcpdump/tcpdump/config.h ____________________________________________________________________________________________________________ Commit: 150048878988717cd5e96718886610d6bfdaf9ac URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=150048878988717cd5e96718886610d6bfdaf9ac Author: Joseph Mingrone (Sun 15 Mar 2026 05:32:01 GMT) Committer: Joseph Mingrone (Wed 8 Apr 2026 20:10:06 BST) ipfwpcap: Fix build after libpcap 1.10.6 update pcap-int.h now references SIZEOF_TIME_T from libpcap's config.h, which is not available to consumers of the internal header outside of the libpcap build. Switch to the public header and replace the direct FILE* casts and ferror()/fflush() calls with pcap_dump_flush(3), which is the correct public API for flushing a pcap dump file. Sponsored by: The FreeBSD Foundation (cherry picked from commit a0b3ef1952603ebf0307ca723b03e5a71598dd5a) M usr.sbin/ipfwpcap/ipfwpcap.c ____________________________________________________________________________________________________________ Commit: 09db15067248b297bf2d419fa77a3b2e39184a64 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=09db15067248b297bf2d419fa77a3b2e39184a64 Author: Joseph Mingrone (Sun 15 Mar 2026 01:42:55 GMT) Committer: Joseph Mingrone (Wed 8 Apr 2026 20:09:25 BST) libpcap: Update to 1.10.6 Changes: https://raw.githubusercontent.com/the-tcpdump-group/libpcap/89e982c37c36ad0bf9f10b7ded421cb42422effa/CHANGES Reviewed by: bms, emaste Obtained from: https://www.tcpdump.org/release/libpcap-1.10.6.tar.gz Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55545 Differential Revision: https://reviews.freebsd.org/D55858 (cherry picked from commit 16cef5f7a65588def71db4fdfa961f959847e3b6) M contrib/libpcap/CHANGES M contrib/libpcap/CMakeLists.txt M contrib/libpcap/CREDITS M contrib/libpcap/INSTALL.md M contrib/libpcap/Makefile.in M contrib/libpcap/VERSION M contrib/libpcap/aclocal.m4 M contrib/libpcap/autogen.sh M contrib/libpcap/cmake/Modules/FindPacket.cmake M contrib/libpcap/cmakeconfig.h.in M contrib/libpcap/config.h.in M contrib/libpcap/configure M contrib/libpcap/configure.ac M contrib/libpcap/dlpisubs.c M contrib/libpcap/dlpisubs.h M contrib/libpcap/doc/README.haiku.md M contrib/libpcap/doc/README.solaris.md M contrib/libpcap/doc/README.windows.md M contrib/libpcap/fad-getad.c M contrib/libpcap/fmtutils.c M contrib/libpcap/gencode.c M contrib/libpcap/grammar.y.in M contrib/libpcap/ieee80211.h A contrib/libpcap/instrument-functions.c M contrib/libpcap/nametoaddr.c M contrib/libpcap/nametoaddr.h M contrib/libpcap/optimize.c M contrib/libpcap/pcap-bpf.c M contrib/libpcap/pcap-common.c M contrib/libpcap/pcap-dag.c M contrib/libpcap/pcap-dbus.c M contrib/libpcap/pcap-dlpi.c M contrib/libpcap/pcap-dpdk.c M contrib/libpcap/pcap-haiku.c M contrib/libpcap/pcap-int.h M contrib/libpcap/pcap-libdlpi.c M contrib/libpcap/pcap-linux.c M contrib/libpcap/pcap-new.c M contrib/libpcap/pcap-npf.c M contrib/libpcap/pcap-rpcap.c M contrib/libpcap/pcap-savefile.manfile.in M contrib/libpcap/pcap-septel.c M contrib/libpcap/pcap-snf.c M contrib/libpcap/pcap.c M contrib/libpcap/pcap/bpf.h M contrib/libpcap/pcap/dlt.h M contrib/libpcap/pcap_close.3pcap M contrib/libpcap/pcap_dump_close.3pcap M contrib/libpcap/pcap_dump_flush.3pcap M contrib/libpcap/pcap_file.3pcap M contrib/libpcap/pcap_loop.3pcap M contrib/libpcap/pcap_next_ex.3pcap M contrib/libpcap/pcap_open_offline.3pcap.in M contrib/libpcap/pflog.h M contrib/libpcap/rpcapd/CMakeLists.txt M contrib/libpcap/rpcapd/rpcapd.c M contrib/libpcap/scanner.l M contrib/libpcap/sf-pcap.c M contrib/libpcap/testprogs/CMakeLists.txt M contrib/libpcap/testprogs/Makefile.in M contrib/libpcap/testprogs/filtertest.c D contrib/libpcap/testprogs/fuzz/CMakeLists.txt D contrib/libpcap/testprogs/fuzz/fuzz_both.c D contrib/libpcap/testprogs/fuzz/fuzz_both.options D contrib/libpcap/testprogs/fuzz/fuzz_filter.c D contrib/libpcap/testprogs/fuzz/fuzz_filter.options D contrib/libpcap/testprogs/fuzz/fuzz_pcap.c D contrib/libpcap/testprogs/fuzz/fuzz_pcap.options D contrib/libpcap/testprogs/fuzz/onefile.c A contrib/libpcap/testprogs/versiontest.c M lib/libpcap/Makefile M lib/libpcap/config.h M sys/net/dlt.h ____________________________________________________________________________________________________________ Commit: 818243722f6ef4e08bff05a7d3f38984fb758506 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=818243722f6ef4e08bff05a7d3f38984fb758506 Author: Dag-Erling Smørgrav (Wed 1 Apr 2026 18:14:16 BST) Committer: Dag-Erling Smørgrav (Tue 7 Apr 2026 16:52:41 BST) cd9660: Add length checks to Rock Ridge parser * cd9660_rrip_slink() did not check that the lengths of individual entries do not exceed the length of the overall record. * cd9660_rrip_altname() did not check that the length of the record was at least 5 before subtracting 5 from it. Note that in both cases, a better solution would be to check the length of the data before calling the handler, or immediately upon entry of the handler, but this would require significant refactoring. MFC after: 1 week Reported by: Calif.io in collaboration with Claude and Anthropic Research Reported by: Adam Crosser, Praetorian Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D56215 (cherry picked from commit d0afead876076f605c363f03d92304d1bd75be1c) M sys/fs/cd9660/cd9660_rrip.c ____________________________________________________________________________________________________________ Commit: 1ac7c32807e5da50b8c61c3ffe93f668eac4ba5f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1ac7c32807e5da50b8c61c3ffe93f668eac4ba5f Author: Philip Paeps (Thu 2 Apr 2026 01:12:18 BST) Committer: Philip Paeps (Sun 5 Apr 2026 05:24:49 BST) contrib/expat: import expat 2.7.5 Changes: https://github.com/libexpat/libexpat/blob/R_2_7_5/expat/Changes https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes Security: CVE-2026-32776 Security: CVE-2026-32777 Security: CVE-2026-32778 Security: CVE-2026-24515 Security: CVE-2026-25210 (cherry picked from commit ae04c7bbf065278687fa930e81a96767e9009d38) M contrib/expat/Changes M contrib/expat/Makefile.am M contrib/expat/Makefile.in M contrib/expat/README.md M contrib/expat/configure.ac M contrib/expat/doc/Makefile.in M contrib/expat/doc/reference.html M contrib/expat/doc/xmlwf.1 M contrib/expat/doc/xmlwf.xml M contrib/expat/examples/Makefile.in M contrib/expat/expat_config.h.in M contrib/expat/fix-xmltest-log.sh M contrib/expat/lib/Makefile.am M contrib/expat/lib/Makefile.in M contrib/expat/lib/expat.h M contrib/expat/lib/expat_external.h M contrib/expat/lib/internal.h A contrib/expat/lib/libexpat.map.in M contrib/expat/lib/xmlparse.c M contrib/expat/lib/xmlrole.c M contrib/expat/lib/xmltok.c M contrib/expat/lib/xmltok_ns.c M contrib/expat/tests/Makefile.in M contrib/expat/tests/basic_tests.c M contrib/expat/tests/benchmark/Makefile.in M contrib/expat/tests/handlers.c M contrib/expat/tests/handlers.h M contrib/expat/tests/misc_tests.c M contrib/expat/tests/nsalloc_tests.c M contrib/expat/xmlwf/Makefile.in M contrib/expat/xmlwf/xmlfile.c M contrib/expat/xmlwf/xmlwf.c M contrib/expat/xmlwf/xmlwf_helpgen.py M lib/libexpat/expat_config.h M lib/libexpat/libbsdxml.3 ____________________________________________________________________________________________________________ Commit: c417ed80fd2fed7ae0561a5bf772408c910f2fec URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c417ed80fd2fed7ae0561a5bf772408c910f2fec Author: Dmitry Salychev (Sat 28 Mar 2026 18:57:45 GMT) Committer: Dmitry Salychev (Sat 4 Apr 2026 10:44:07 BST) dpaa2: Perform bus_dma pre-write sync before enqueue operation Without a proper synchronization payload of the egress TCP segments can be corrupted as tuexen@ described in https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292006#c31. This patch is indirectly related to 292006 because a properly enabled and announced support for the TX checksum offloading hides potentially corrupted frame payload. PR: 292006 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292006 ) Reported by: tuexen@ Reviewed by: tuexen@ Tested by: dsl@, tuexen@ Differential Revision: https://reviews.freebsd.org/D56144 MFC after: 3 days (cherry picked from commit 5812415bee55a9063508b02fda9418b0eadb0bb4) M sys/dev/dpaa2/dpaa2_ni.c ____________________________________________________________________________________________________________ Commit: b78e2b69893ca536b738850dff556808905d07a8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b78e2b69893ca536b738850dff556808905d07a8 Author: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:22:05 BST) Committer: Dag-Erling Smørgrav (Sat 4 Apr 2026 09:59:26 BST) tunefs: Add tests MFC after: 1 week Reviewed by: ngie Differential Revision: https://reviews.freebsd.org/D56034 (cherry picked from commit 6630c3a73688ae3c33df892f6802bea5b8460e17) M etc/mtree/BSD.tests.dist M sbin/tunefs/Makefile A sbin/tunefs/tests/Makefile A sbin/tunefs/tests/tunefs_test.sh ____________________________________________________________________________________________________________ Commit: 83a0bced4ef0e001ad2a0a8c403dbd0703780ce3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=83a0bced4ef0e001ad2a0a8c403dbd0703780ce3 Author: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:21:59 BST) Committer: Dag-Erling Smørgrav (Sat 4 Apr 2026 09:59:25 BST) tunefs: Don't lower WARNS Use casts to silence the alignment warnings instead of potentially suppressing other legitimate warnings. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56033 (cherry picked from commit c5e79c7e93dda07c383be9b99a1a91894652f546) tunefs: Fix alignment warning on arm64 MFC after: 1 week Fixes: c5e79c7e93dd ("tunefs: Don't lower WARNS") Reviewed by: bakul Differential Revision: https://reviews.freebsd.org/D56229 (cherry picked from commit 616f47f176c308a29b1f4a6bba1b1a4dc01c3091) M sbin/tunefs/Makefile M sbin/tunefs/tunefs.c ____________________________________________________________________________________________________________ Commit: c514f8dbeab813c996d426de2aedceb669c4fa2a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c514f8dbeab813c996d426de2aedceb669c4fa2a Author: Dag-Erling Smørgrav (Sat 21 Mar 2026 07:21:33 GMT) Committer: Dag-Erling Smørgrav (Sat 4 Apr 2026 09:59:25 BST) tunefs: Don't combine GEOM journaling with SU GEOM journaling shouldn't be used at the same time as soft updates, so don't enable one if the other is already in use. MFC after: 1 week PR: 293896 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293896 ) Reviewed by: mckusick Differential Revision: https://reviews.freebsd.org/D56002 (cherry picked from commit b1f72dd2a9a5e69a310b9e76b55f16cff433b8da) M sbin/tunefs/tunefs.8 M sbin/tunefs/tunefs.c ____________________________________________________________________________________________________________ Commit: 94c236b7d806d676d485d0c55a1924af417e70d1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=94c236b7d806d676d485d0c55a1924af417e70d1 Author: Dag-Erling Smørgrav (Sat 21 Mar 2026 07:21:28 GMT) Committer: Dag-Erling Smørgrav (Sat 4 Apr 2026 09:59:25 BST) newfs: Don't combine GEOM journaling with SU GEOM journaling shouldn't be used at the same time as soft updates, so don't enable soft updates if GEOM journaling has been requested, and error out if both are explicitly requested. MFC after: 1 week PR: 293896 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293896 ) Reviewed by: mckusick Differential Revision: https://reviews.freebsd.org/D55999 (cherry picked from commit e30fcdaae2e68458da83d5420e6034c5f384e5f2) M sbin/newfs/newfs.8 M sbin/newfs/newfs.c ____________________________________________________________________________________________________________ Commit: 6a13864e02b061b67808f2d1789de51c83aeea90 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6a13864e02b061b67808f2d1789de51c83aeea90 Author: Jake Freeland (Thu 26 Mar 2026 16:40:17 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) timerfd: Guard expected performance failure During the timerfd__periodic_timer_performance test, only expect failures when the expiration count is less than 400000000. This prevents the test from being reported as a true failure in environments where scheduling latency is high enough to delay timerfd wakeups. Fixes: cb692380f1e0 ("timerfd: Expect periodic timer ...") MFC after: 1 week (cherry picked from commit 4b16ff49bf4bf875997fe4c80a0afc0d440b7aac) M tests/sys/kern/timerfd.c ____________________________________________________________________________________________________________ Commit: 6e0d0fe9102d9fe71c01cbe064b6d4e1c2fc0e9b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6e0d0fe9102d9fe71c01cbe064b6d4e1c2fc0e9b Author: Jake Freeland (Wed 25 Mar 2026 22:57:16 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) timerfd: Expect periodic timer performance failures The current timerfd implementation fails to correctly count events on a nanosecond callout interval. The timerfd__periodic_timer_performance test detects this and reports failure. Mark this test as an expected failure so it isn't flagged by CI. A link to the bug report is attached to the test for reference. While we're here, clean up some minor style and Make issues. Fixes: 834c1ba793d9 ("timerfd: Add tests") MFC after: 1 week (cherry picked from commit cb692380f1e05ffc4184877844e93051f24ed302) M tests/sys/kern/Makefile M tests/sys/kern/timerfd.c ____________________________________________________________________________________________________________ Commit: c10591e45071e0f4b2a596b41ea38b1aa3aa0748 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c10591e45071e0f4b2a596b41ea38b1aa3aa0748 Author: Jake Freeland (Fri 20 Mar 2026 06:34:15 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) timerfd: Suppress kqueue readability after jump read Do not report EVFILT_READ after reading a discontinuous clock jump. This makes the kqueue filter consistent with Linux epoll behavior and timerfd_poll(), which already checks tfd_jumped != TFD_READ before reporting POLLIN. MFC after: 2 weeks (cherry picked from commit 33345b8834859cf1ad7f1256f3a34b4a7c83e8e8) M sys/kern/sys_timerfd.c ____________________________________________________________________________________________________________ Commit: f05e8fc76e66f654f9b842dbe83cecb5d41b8c94 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f05e8fc76e66f654f9b842dbe83cecb5d41b8c94 Author: Jake Freeland (Fri 20 Mar 2026 06:33:54 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) timerfd: Wake up on discontinuous jump If a discontinous realtime clock change occurs and sets any TFD_JUMPED bits on the timerfd, then wake up waiting readers. This fixes failures from the timerfd_root__clock_change_notification test case. MFC after: 2 weeks (cherry picked from commit b11fba41265ae132acfb05587a6dbf60334d3279) M sys/kern/sys_timerfd.c ____________________________________________________________________________________________________________ Commit: db0096d573d1c7972960aafb1657a338f2e971e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=db0096d573d1c7972960aafb1657a338f2e971e5 Author: Jake Freeland (Fri 20 Mar 2026 06:33:38 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) timerfd: Use saturating sbintime conversions Some timerfd consumers set expirations with timespec tv_sec components larger than 2^31 - 1. In such cases, converting that timespec to sbintime results in data loss or sign flip, yielding a shorter expiration than desired. To avoid this problem, use saturating timespec-to-sbintime conversion functions. These will clamp the converted sbintime to SBT_MAX under circumstances where the normal conversion functions would overflow. Saturating conversions still result in data loss, but the consequences are less severe, causing problems only after SBT_MAX (~68 years) of system uptime elapses. Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55792 MFC after: 2 weeks (cherry picked from commit 0e8f351be7935729bf67dc1b7aa4d178cf154931) M sys/kern/sys_timerfd.c ____________________________________________________________________________________________________________ Commit: a5a4a2be69f9696953afa6eb586c62ed96611c37 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a5a4a2be69f9696953afa6eb586c62ed96611c37 Author: Jake Freeland (Fri 20 Mar 2026 06:33:20 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) sys/time: Add saturating sbt conversions When converting from timespec to sbintime, the timespec's 64-bit tv_sec component is shifted to the left 32 bits, causing any information in the upper 32 bits to be lost. This data loss during conversion can turn timespecs with very large tv_sec counters into sbintimes that represent much smaller time durations. Add tstosbt_sat() and tvtosbt_sat(), which are saturating versions of tstosbt and tvtosbt. With these routines, any overflow resulting from the conversion is clamped to [-SBT_MAX - 1, SBT_MAX]. Reviewed by: imp, markj Differential Revision: https://reviews.freebsd.org/D55791 MFC after: 2 weeks (cherry picked from commit e3799530b3ba38567f8052b9e107884609fc71ea) M sys/sys/time.h ____________________________________________________________________________________________________________ Commit: 3c00f603a2801fd780666f9e94a26f264a887c90 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3c00f603a2801fd780666f9e94a26f264a887c90 Author: Jake Freeland (Fri 20 Mar 2026 06:33:03 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) timerfd: Fix interval callout scheduling When a timerfd interval callout misses its scheduled activation time, a differential is calculated based on the actual activation time and the scheduled activation time. This differential is divided by the timerfd's interval time and the quotient is added to the timerfd's counter. Before this change, the next callout was scheduled to activate at: scheduled activation time + timerfd interval. This change fixes the scheduling of the next callout to activate at: actual activation time + timerfd interval - remainder. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55790 MFC after: 2 weeks (cherry picked from commit 85c0f1a87da1fd1eb3e646e86f70e630c48da91a) M sys/kern/sys_timerfd.c M tests/sys/kern/timerfd.c ____________________________________________________________________________________________________________ Commit: d24f87da276fe6502fefda11ca99602e9e74357d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d24f87da276fe6502fefda11ca99602e9e74357d Author: Jake Freeland (Fri 20 Mar 2026 06:31:30 GMT) Committer: Jake Freeland (Fri 3 Apr 2026 16:26:56 BST) timerfd: Add tests Take Jan Kokemuller's timerfd tests from the epoll-shim project, stripping out code that isn't directly related to FreeBSD. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55789 MFC after: 2 weeks (cherry picked from commit 834c1ba793d900b791e19ff449b1e0b96fb494a0) M tests/sys/kern/Makefile A tests/sys/kern/timerfd.c ____________________________________________________________________________________________________________ Commit: 92923511ce11999477c104422efe30101fea8d96 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=92923511ce11999477c104422efe30101fea8d96 Author: Arthur Kiyanovski (Sat 14 Feb 2026 01:13:09 GMT) Committer: Arthur Kiyanovski (Thu 2 Apr 2026 23:39:50 BST) ena: Update driver version to v2.8.2 Bug Fixes: * Verify that an ENA ring is in netmap only in native mode Minor Changes: * Move parenthesis to correct place in switch * Add comment * Reorder define Reviewed by: cperciva Differential Revision: https://reviews.freebsd.org/D55698 Sponsored by: Amazon, Inc. (cherry picked from commit 96c5eaf0ac6b98d0832e1037d672064de43a7e00) M sys/dev/ena/ena.h ____________________________________________________________________________________________________________ Commit: b345e18a7b67ac7441c9305ed4193fabb9217c68 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b345e18a7b67ac7441c9305ed4193fabb9217c68 Author: Arthur Kiyanovski (Sat 14 Feb 2026 01:13:00 GMT) Committer: Arthur Kiyanovski (Thu 2 Apr 2026 23:39:50 BST) ena: Verify that an ENA ring is in netmap only in native mode netmap operates in two modes: 1) Emulated - netmap handling is done by the network stack, the NIC driver operates transparently to netmap. 2) Native - netmap management is done by the NIC driver. When checking whether a specific ENA ring is running in netmap mode, only the following checks were done: 1. IFCAP_NETMAP - Check whether netmap capability is enabled on the device. 2. NKR_NETMAP_ON - Check whether netmap is actively using this ring. The above checks implied that the netmap mode is native and the ENA driver needs to handle the netmap logic. The code was missing an explicit check on whether native mode is actually on (NAF_NATIVE). This led to a case where though emulated mode was used and a netmap application was turned on, the ENA driver still managed netmap logic partially and caused missing buffers and lack of refill as part of the datapath. Note: Enabling netmap emulated mode is insufficient and there's a need to load a netmap program in order to trigger this use-case. Add an explicit check of whether NAF_NATIVE mode is set. The issue was reported in [1]. [1]: https://github.com/amzn/amzn-drivers/issues/361 Fixes: 358bcc4c6cde ("Add support for ENA NETMAP partial initialization") Reviewed by: cperciva Differential Revision: https://reviews.freebsd.org/D55697 Sponsored by: Amazon, Inc. (cherry picked from commit 97e84c587d6f86aa883720296449b380adcf6915) M sys/dev/ena/ena_netmap.c ____________________________________________________________________________________________________________ Commit: 4fa6c1f0067e1313cb07cbf6dbb6ac2149d575be URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4fa6c1f0067e1313cb07cbf6dbb6ac2149d575be Author: Arthur Kiyanovski (Sat 14 Feb 2026 01:12:41 GMT) Committer: Arthur Kiyanovski (Thu 2 Apr 2026 23:39:50 BST) ena: Minor changes 1. Move parenthesis to correct place in switch and fix include order 2. Add comment at the end of an ifdef for clarity 3. Change include order. Reviewed by: cperciva Differential Revision: https://reviews.freebsd.org/D55696 Sponsored by: Amazon, Inc. (cherry picked from commit 2667a8454cff5896c7b467c78cd4ace5ad40f5eb) M sys/dev/ena/ena.c M sys/dev/ena/ena_rss.h ____________________________________________________________________________________________________________ Commit: 1a036312c3bb79d52f058b0534c97c8217b159b0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1a036312c3bb79d52f058b0534c97c8217b159b0 Author: Dag-Erling Smørgrav (Wed 11 Mar 2026 03:47:31 GMT) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:01 BST) tzcode: Update to 2026a Many thanks to Paul Eggert for adopting most of our adaptations as optional features upstream in the previous release (2025c). MFC after: 1 week Reviewed by: philip Differential Revision: https://reviews.freebsd.org/D55741 (cherry picked from commit ff2c98b30b57b9763e2a6575f729bab676e6c025) M contrib/tzcode/CONTRIBUTING M contrib/tzcode/Makefile M contrib/tzcode/NEWS M contrib/tzcode/README M contrib/tzcode/SECURITY M contrib/tzcode/calendars M contrib/tzcode/date.1 M contrib/tzcode/date.c M contrib/tzcode/localtime.c M contrib/tzcode/newctime.3 M contrib/tzcode/newstrftime.3 M contrib/tzcode/newtzset.3 M contrib/tzcode/private.h M contrib/tzcode/strftime.c M contrib/tzcode/theory.html M contrib/tzcode/time2posix.3 M contrib/tzcode/tz-art.html M contrib/tzcode/tz-how-to.html M contrib/tzcode/tz-link.html M contrib/tzcode/tzconfig.h M contrib/tzcode/tzfile.5 M contrib/tzcode/tzfile.h M contrib/tzcode/tzselect.ksh M contrib/tzcode/version M contrib/tzcode/workman.sh M contrib/tzcode/zdump.c M contrib/tzcode/zic.8 M contrib/tzcode/zic.c ____________________________________________________________________________________________________________ Commit: ea27af6d3db0bea7db6b344f4ef2848ba09b5091 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ea27af6d3db0bea7db6b344f4ef2848ba09b5091 Author: Dag-Erling Smørgrav (Sun 2 Nov 2025 13:51:42 GMT) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:01 BST) tzcode: Fix early tz change detection Assume tzdata is not fresh if last_checked is zero, as comparing the current time to last_checked less than __tz_change_interval after boot may produce a false negative. While here, invert the return value from tzdata_is_fresh() to better match its new name (it was previously called recheck_tzdata(), so zero for fresh and non-zero for stale made sense, but it doesn't now). PR: 269207 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=269207 ) MFC after: 3 days Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D53502 (cherry picked from commit a38c2f99f81c2fc35c8ca209931c1c46e3e81023) M contrib/tzcode/localtime.c ____________________________________________________________________________________________________________ Commit: 58d09e1737595b28bb3634989c94406d1d793e13 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=58d09e1737595b28bb3634989c94406d1d793e13 Author: Dag-Erling Smørgrav (Mon 29 Sep 2025 13:36:24 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:01 BST) tzcode: Test escape from TZDIR Test a value of TZ that temporarily escapes from TZDIR (which is not permitted when setugid) then reenters it. MFC after: 3 days (cherry picked from commit cf76bfbb235116702ea1689bf984f200a72d2790) M lib/libc/tests/stdtime/detect_tz_changes_test.c ____________________________________________________________________________________________________________ Commit: f792f3d2093ce72ed410b21a180d76be07edcee7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f792f3d2093ce72ed410b21a180d76be07edcee7 Author: Dag-Erling Smørgrav (Sat 27 Sep 2025 18:07:04 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:01 BST) tzcode: Fix issues when TZ is an absolute path * If TZ starts with TZDIR, strip any additional slashes so relname does not end up looking like an absolute path. For instance, TZ=/usr/share/zoneinfo//UTC should result in UTC, not /UTC. * In the setugid case, we were incorrectly passing name rather than relname to fstatat(). * Modify the tz_env and tz_env_setugid test cases to exercise both of these scenarios. * Also add test cases for invalid values of TZ, which I wrote earlier but forgot to include in a5f14e4f9069. Reported by: Paul Eggert MFC after: 3 days Fixes: 967a49a21a27 ("Update tzcode to 2025b") Fixes: a5f14e4f9069 ("tzcode: Use -00 only for invalid time zones") Reviewed by: philip Differential Revision: https://reviews.freebsd.org/D52753 (cherry picked from commit df8bc705eb04aff2f718678fffb9d5d4f5d7c223) tzcode: Really fix issues when TZ is an absolute path This was accidentally left out of the previous commit. Fixes: df8bc705eb04 ("tzcode: Fix issues when TZ is an absolute path") (cherry picked from commit 202b59c35ead5bd2b71331169bdeb4845cb655c1) tzcode: Tweak open flags. Upstream uses a set of flags that reduces to O_RDONLY | O_CLOEXEC when you ignore flags that either don't exist in FreeBSD or have no effect. We were using O_RDONLY | O_BINARY, which reduces to O_RDONLY. Add O_CLOEXEC. Also replace O_RDONLY with the more accurate O_SEARCH when opening TZDIR. MFC after: 3 days Fixes: 967a49a21a27 ("Update tzcode to 2025b") (cherry picked from commit d28e4ce6cb61916b4f6bedcf4205a4da1ae121e1) M contrib/tzcode/localtime.c M lib/libc/gen/sysconf.c M lib/libc/tests/stdtime/Makefile M lib/libc/tests/stdtime/detect_tz_changes_test.c ____________________________________________________________________________________________________________ Commit: 08d1a7ac7002149c51e3e6ea5cc4f4c7d4935b6b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=08d1a7ac7002149c51e3e6ea5cc4f4c7d4935b6b Author: Dag-Erling Smørgrav (Sat 27 Sep 2025 18:06:58 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:01 BST) tzcode: Drop libc namespace This hasn't been needed in years and is a maintenance headache. MFC after: 1 week Reviewed by: philip Differential Revision: https://reviews.freebsd.org/D52694 (cherry picked from commit d58339f398748b50ff84421e9d81f8f6d94cb949) M contrib/tzcode/asctime.c M contrib/tzcode/difftime.c M contrib/tzcode/localtime.c ____________________________________________________________________________________________________________ Commit: 8a26d253594444f7eafe0f98cebd390f95664239 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8a26d253594444f7eafe0f98cebd390f95664239 Author: Dag-Erling Smørgrav (Tue 23 Sep 2025 19:52:10 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:01 BST) tzcode: Expose and document offtime() and offtime_r() Includes diff reduction to upstream version of this patch. MFC after: 3 days Sponsored by: Klara, Inc. Reviewed by: philip Differential Revision: https://reviews.freebsd.org/D39715 (cherry picked from commit 155290b23f0b503b9db675d6a45f85b189ee1926) M contrib/tzcode/localtime.c M contrib/tzcode/private.h M include/time.h M lib/libc/stdtime/ctime.3 ____________________________________________________________________________________________________________ Commit: f1977dc59516fb92a357a6195e0c1c8c6d5e7abc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f1977dc59516fb92a357a6195e0c1c8c6d5e7abc Author: Dag-Erling Smørgrav (Tue 23 Sep 2025 13:56:11 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) tzcode: Use -00 only for invalid time zones As of tzcode 2025a, if we are unable to load a time zone, we set tzname to "-00" to indicate an error. This penalizes users who simply don't set TZ or create /etc/localtime as a faster way of setting the time zone to UTC (pointing /etc/localtime at /usr/share/zoneinfo/UTC forces us to parse it every time for no real benefit). To rectify this, use "-00" only if TZ was set or zoneinit() returned something else than ENOENT. MFC after: 3 days Fixes: 967a49a21a27 ("Update tzcode to 2025b") Reviewed by: philip Differential Revision: https://reviews.freebsd.org/D52680 (cherry picked from commit a5f14e4f9069a8ffed66d923bb0ecf20d8a0e6af) M contrib/tzcode/localtime.c ____________________________________________________________________________________________________________ Commit: cb991fa12e6e22e9d6d50980ad52c4ca92c3649e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cb991fa12e6e22e9d6d50980ad52c4ca92c3649e Author: Dag-Erling Smørgrav (Mon 1 Sep 2025 07:33:37 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) tzcode: Add a test case for plain issetugid case This catches a bug in tzcode which incorrectly considers TZDEFAULT as unsafe as if it came from the environment. Also deduplicate some repeated code, and fix a missing mode in an open(2) call with O_CREAT set. Event: Oslo Hackathon 202508 Reviewed by: philip Differential Revision: https://reviews.freebsd.org/D52241 (cherry picked from commit 016d3ec239b39895cf19aa62552fc316d7d98045) M lib/libc/tests/stdtime/detect_tz_changes_test.c ____________________________________________________________________________________________________________ Commit: 3e8b9c30c5a89ad2d7f8dd965924bdb58e53ef09 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3e8b9c30c5a89ad2d7f8dd965924bdb58e53ef09 Author: Dag-Erling Smørgrav (Mon 1 Sep 2025 07:33:28 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) tzcode: Don't treat TZDEFAULT as tainted tzset() calls zoneinit() with the FROMENV flag set unconditionally, so if TZ is unset and we use TZDEFAULT instead, we were still treating it as if it came from the environment. Unset the FROMENV flag if name is null and we switch to TZDEFAULT, or if, after skipping the optional leading colon, we find that name is identical to TZDEFAULT. This incorporates upstream change d0e0b00f846c ("Avoid unnecessary access, stat calls"). Fixes: b6ea2513f776 ("tzcode: Limit TZ for setugid programs") Event: Oslo Hackathon 202508 Reviewed by: philip Differential Revision: https://reviews.freebsd.org/D52240 (cherry picked from commit ca89e15355097e9b57bf4e17a50506e081fe04b3) M contrib/tzcode/localtime.c ____________________________________________________________________________________________________________ Commit: 2a4e0e0391ea130c3f3f5116106710dee2404399 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2a4e0e0391ea130c3f3f5116106710dee2404399 Author: Dag-Erling Smørgrav (Wed 27 Aug 2025 13:27:29 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) tzcode: Add a test case for thin jails Add a test case for a typical thin jail scenario where TZDIR does not exist and we get our information from /etc/localtime. This is technically already covered by the detect_tz_changes test case, but this new test case is independent of the DETECT_TZ_CHANGES option. (cherry picked from commit b2f394b90062b9f4aee51de4e5fd7513b3db7362) M lib/libc/tests/stdtime/detect_tz_changes_test.c ____________________________________________________________________________________________________________ Commit: f6a30753e66ee67e7dce35dfc2cbae8ffdedc420 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f6a30753e66ee67e7dce35dfc2cbae8ffdedc420 Author: Dag-Erling Smørgrav (Mon 25 Aug 2025 13:06:59 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) Update tzcode to 2025b MFC after: 3 weeks Differential Revision: https://reviews.freebsd.org/D52103 (cherry picked from commit 967a49a21a27380ba1c545c746b4f1badabefd77) M contrib/tzcode/Makefile M contrib/tzcode/NEWS M contrib/tzcode/asctime.c M contrib/tzcode/date.1 M contrib/tzcode/localtime.c M contrib/tzcode/newctime.3 M contrib/tzcode/newstrftime.3 M contrib/tzcode/newtzset.3 M contrib/tzcode/private.h M contrib/tzcode/strftime.c M contrib/tzcode/theory.html M contrib/tzcode/tz-link.html M contrib/tzcode/tzfile.5 M contrib/tzcode/tzfile.h M contrib/tzcode/tzselect.8 M contrib/tzcode/version M contrib/tzcode/zdump.8 M contrib/tzcode/zdump.c M contrib/tzcode/zic.8 M contrib/tzcode/zic.c ____________________________________________________________________________________________________________ Commit: b3f5166ee0d4be78ca6b2e4f958acf788545be8b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b3f5166ee0d4be78ca6b2e4f958acf788545be8b Author: Dag-Erling Smørgrav (Mon 25 Aug 2025 12:56:48 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) tzcode: Add test case for setugid programs Fixes: a6b19979bf13 ("tzcode: Fix TZ for non-setugid programs") Differential Revision: https://reviews.freebsd.org/D52124 (cherry picked from commit c6c7c7ac94636a1f705a6f4d6ea74b1e62ad517d) M lib/libc/tests/stdtime/Makefile M lib/libc/tests/stdtime/detect_tz_changes_test.c ____________________________________________________________________________________________________________ Commit: e58659a5b0d9c5bda3b352166b543fb25cd37c0a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e58659a5b0d9c5bda3b352166b543fb25cd37c0a Author: Dag-Erling Smørgrav (Fri 22 Aug 2025 08:22:17 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) tzcode: Fix TZ for non-setugid programs The previous commit had the desired effect for setugid programs, but broke TZ for everyone else. I didn't notice because my test cases swap out /etc/localtime instead of setting TZ, so add a test case that sets TZ. Fixes: b6ea2513f776 ("tzcode: Limit TZ for setugid programs") Reviewed by: cy Differential Revision: https://reviews.freebsd.org/D52108 (cherry picked from commit a6b19979bf13055da5f24d1f240f2acddb35eeac) M contrib/tzcode/localtime.c M lib/libc/tests/stdtime/detect_tz_changes_test.c ____________________________________________________________________________________________________________ Commit: ec60ca6010ca6d461a8f16c49828ceafb3b730f3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ec60ca6010ca6d461a8f16c49828ceafb3b730f3 Author: Dag-Erling Smørgrav (Thu 21 Aug 2025 17:34:32 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:16:00 BST) tzcode: Limit TZ for setugid programs The zoneinfo parser can be told to read any file the program can access by setting TZ to either an absolute path, or a path relative to the zoneinfo directory. For setugid programs, we previously had a hack from OpenBSD which rejects values of TZ deemed unsafe, but that was rather arbitrary (anything containing a dot, for instance). Leverage openat() with AT_RESOLVE_BENEATH instead. For simplicity, move the TZ change detection code to after we've opened the file, and stat the file descriptor rather than the name. Reviewed by: jhb Differential Revision: https://reviews.freebsd.org/D52029 (cherry picked from commit b6ea2513f7769ea9d9e4d342777111add2c903b0) M contrib/tzcode/localtime.c ____________________________________________________________________________________________________________ Commit: 2ad6daa6b24b6526693db3ddd5c1ecc72d8ea3fe URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2ad6daa6b24b6526693db3ddd5c1ecc72d8ea3fe Author: Dag-Erling Smørgrav (Thu 21 Aug 2025 17:34:27 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:15:59 BST) tzcode: Reduce diff to upstream Reviewed by: imp, jhb, emaste Differential Revision: https://reviews.freebsd.org/D51997 (cherry picked from commit f5efc804294c6bb24bd6d14bf2fb883a7320956c) M contrib/tzcode/localtime.c ____________________________________________________________________________________________________________ Commit: d6bc98af7ab7bc63de2b2f85debd48c30de55468 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d6bc98af7ab7bc63de2b2f85debd48c30de55468 Author: Dag-Erling Smørgrav (Fri 18 Jul 2025 18:49:13 BST) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 12:15:59 BST) libc: Test time zone change detection. While here, clean the detection code up a bit. Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D51343 (cherry picked from commit 57ee56578cc55b3da9a0dee64b385507be2dc80a) M contrib/tzcode/localtime.c M lib/libc/stdtime/Makefile.inc M lib/libc/stdtime/Symbol.map M lib/libc/tests/stdtime/Makefile A lib/libc/tests/stdtime/detect_tz_changes_test.c M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: e510b487f946d478c5cf7c99d8203e98dc20e334 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e510b487f946d478c5cf7c99d8203e98dc20e334 Author: Brooks Davis (Thu 19 Feb 2026 14:43:57 GMT) Committer: Jessica Clarke (Thu 2 Apr 2026 11:11:37 BST) .github: support all stable branches If this eventually poses a problem for unsupported branches we can fix them directly. Sponsored by: Innovate UK Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D53838 (cherry picked from commit 1e189279576497498cafad6f8c0a36a377b786a3) M .github/workflows/cross-bootstrap-tools.yml ____________________________________________________________________________________________________________ Commit: 2bc5bc14a8b218ee876bf43a16ef15abaff83e7b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2bc5bc14a8b218ee876bf43a16ef15abaff83e7b Author: Jessica Clarke (Mon 23 Mar 2026 16:56:09 GMT) Committer: Jessica Clarke (Thu 2 Apr 2026 11:02:16 BST) cross-build: Provide mempcpy when building on macOS We could patch the tzcode config to not use it, but it's simple to provide an implementation of it and avoid spreading cross-build bootstrapping special cases. Fixes: ff2c98b30b57 ("tzcode: Update to 2026a") MFC after: 1 week (cherry picked from commit 47402c9422ec6c9ba76d96414f5a08bd35a9e1fd) M tools/build/Makefile M tools/build/cross-build/include/mac/string.h ____________________________________________________________________________________________________________ Commit: bc249f68c569efee2ba70319e5bcfe942fd7620e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bc249f68c569efee2ba70319e5bcfe942fd7620e Author: Dag-Erling Smørgrav (Tue 24 Mar 2026 10:58:53 GMT) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 10:56:10 BST) syslogd: Allow killing when in foreground Normally, syslogd reacts only to SIGTERM, and ignores SIGINT and SIGQUIT unless in debug mode. Extend that to also apply when running in the foreground. MFC after: 1 week Reviewed by: jfree Differential Revision: https://reviews.freebsd.org/D55886 (cherry picked from commit 828de702ada854b5f09f447ba06e4e08e976ba07) M usr.sbin/syslogd/syslogd.c ____________________________________________________________________________________________________________ Commit: 3396afba986bb8f6cfa334a1c324552b5f355f1a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3396afba986bb8f6cfa334a1c324552b5f355f1a Author: Dag-Erling Smørgrav (Wed 25 Mar 2026 00:41:23 GMT) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 10:47:59 BST) m4: Misc style fixes MFC after: 1 week Reviewed by: fuz Differential Revision: https://reviews.freebsd.org/D55794 (cherry picked from commit 41474e78c493184f023723d1f86539e07bb01b92) M usr.bin/m4/eval.c M usr.bin/m4/expr.c M usr.bin/m4/look.c M usr.bin/m4/main.c M usr.bin/m4/mdef.h M usr.bin/m4/misc.c ____________________________________________________________________________________________________________ Commit: e4755b91837246f1a31c51a3a87104635be80a83 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e4755b91837246f1a31c51a3a87104635be80a83 Author: Marc Espie (Wed 25 Mar 2026 00:41:18 GMT) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 10:47:59 BST) m4: Stop abbreviating builtin names * Stop abbreviating macro names half-randomly to 8 chars, this is no longer 1990. * Likewise for function names (in particular use doindex for a function that is notably different from the classic index function). * Rename a few things for more fidelity: eval is the builtin name, not expr and your maketemp/mkstemp conform to mkstemp semantics for better security. * Rewrap a few comments that were ludicrously short. No functional changes except improved accuracy of some error messages. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55793 (cherry picked from commit f8f6f1cbd576ab5f15cef178cc05251365652f74) M usr.bin/m4/eval.c M usr.bin/m4/extern.h M usr.bin/m4/look.c M usr.bin/m4/main.c M usr.bin/m4/mdef.h M usr.bin/m4/misc.c ____________________________________________________________________________________________________________ Commit: f0ca30b4e500e8ebf95b2d13b20dc37857541059 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f0ca30b4e500e8ebf95b2d13b20dc37857541059 Author: Dag-Erling Smørgrav (Tue 24 Mar 2026 11:02:32 GMT) Committer: Dag-Erling Smørgrav (Thu 2 Apr 2026 10:47:58 BST) file: Parse some UFS2 flags This allows libmagic to recognize the FS_DOSOFTDEP, FS_SUJ, FS_GJOURNAL, FS_ACLS, and FS_NFS4ACLS flags on a UFS2 file system. Accepted upstream as 482259e5e952. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D56010 (cherry picked from commit fa03f93e8829a7689101303fbe9fb06654ca14ed) M contrib/file/magic/Magdir/filesystems ____________________________________________________________________________________________________________ Commit: ed71162cc527d7f6bf5bfe7258f5e1a5cdb4cc71 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ed71162cc527d7f6bf5bfe7258f5e1a5cdb4cc71 Author: Robert Clausecker (Sun 22 Mar 2026 12:37:06 GMT) Committer: Robert Clausecker (Thu 2 Apr 2026 09:00:47 BST) libc/amd64/strrchr.S: rewrite and fix scalar implementation The original scalar implementation of strrchr() had incorrect logic that failed if the character searched for was the NUL character. It was also possibly affected by the issue fixed in 3d8ef251a for strchrnul(). Rewrite the function with logic that actually works. We defer checking for the character until after we have checked for NUL. When we encounter the final NUL byte, we mask out the characters beyond the tail before checking for a match. This bug only affects users running on amd64 with ARCHLEVEL=scalar (cf. simd(7)). The default configuration is not affected. The bug was unfortunately not caught by the unit test inherited from NetBSD. An extended unit test catching the issue is proposed in D56037. PR: 293915 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293915 ) Reported by: safonov.paul@gmail.com Tested by: safonov.paul@gmail.com Fixes: 2ed514a220edbac6ca5ec9f40a3e0b3f2804796d See also: https://reviews.freebsd.org/D56037 MFC after: 1 week (cherry picked from commit 253f15c016ca699906f78b8e522a3f7ed675929b) (cherry picked from commit 23d6516773916d8f324bea51867b0713c476f379) M lib/libc/amd64/string/strrchr.S ____________________________________________________________________________________________________________ Commit: a4a3825d3e1dff1fea1d81443e0d92af6671a0c3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a4a3825d3e1dff1fea1d81443e0d92af6671a0c3 Author: Navdeep Parhar (Fri 20 Mar 2026 00:39:17 GMT) Committer: Navdeep Parhar (Wed 1 Apr 2026 20:04:38 BST) loader(8): embedded MD should be the most preferred currdev A loader built with MD_IMAGE_SIZE is almost always meant for use with its embedded image and should try that as currdev before anything else. Recent changes (d69fc3a9dc71, 784150fd2535) seem to have relaxed the ZFS code's search for a rootfs and exposed this problem. Reviewed by: imp, tsoome Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D55979 (cherry picked from commit 0661997cea165e951e4e215e6aed41596d8b1d52) M stand/efi/loader/main.c ____________________________________________________________________________________________________________ Commit: 7d069d7846519eb015133758647ee343e7d7f20a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7d069d7846519eb015133758647ee343e7d7f20a Author: Bjoern A. Zeeb (Thu 19 Mar 2026 20:29:29 GMT) Committer: Bjoern A. Zeeb (Wed 1 Apr 2026 05:33:47 BST) LinuxKPI: add supporting #includes Compiling drm-kmod on !X86 does not include asm/smp.h which includes preempt.h on FreeBSD. In order to compile drm-kmod on other architectures add the secondary #includes for preempt.h to spinlock.h and hardirq.h (which now also gets included from highmem.h) to connect the #include chain. Sponsored by: The FreeBSD Foundation PR: 279864 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279864 ) Reviewed by: jhibbits, emaste Differential Revision: https://reviews.freebsd.org/D55974 (cherry picked from commit 1d18872c2519d7ca726ddc49735180ab1d8916e0) (cherry picked from commit 29dce45d8c50ea5858dc91a4294e83b8d72a2f80) M sys/compat/linuxkpi/common/include/linux/hardirq.h M sys/compat/linuxkpi/common/include/linux/highmem.h M sys/compat/linuxkpi/common/include/linux/spinlock.h ____________________________________________________________________________________________________________ Commit: d5d08dea844315a0f10d8ffefd1c903b3e871c1b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d5d08dea844315a0f10d8ffefd1c903b3e871c1b Author: Bjoern A. Zeeb (Wed 18 Mar 2026 14:43:15 GMT) Committer: Bjoern A. Zeeb (Wed 1 Apr 2026 05:33:47 BST) sbuf: make assertion message a lot more useable Saying that we are called with an (un)finished or corrupted sbuf is like saying "error" (though [un]finished is an extra hint). Add the pointer to the sbuf so one could easily check it, add the flags we are checking so one could see quickly about a possible state mismatch. Given we already dereference the pointer in the KASSERT there is no extra harm adding it to the message. Found while: testing lindebugfs changes Sponsored by: The FreeBSD Foundation Reviewed by: jhb Differential Revision: https://reviews.freebsd.org/D55919 (cherry picked from commit 2ce06d25431a6c96ef5719165cb73e138a0ed89c) (cherry picked from commit 40be04834308e3aa1e1cf411f87f16a34f4ff130) M sys/kern/subr_sbuf.c ____________________________________________________________________________________________________________ Commit: f4e018e9a49b7bf4ddced51ad1ffc4415182cb45 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f4e018e9a49b7bf4ddced51ad1ffc4415182cb45 Author: Bjoern A. Zeeb (Sun 8 Mar 2026 00:57:33 GMT) Committer: Bjoern A. Zeeb (Wed 1 Apr 2026 05:33:47 BST) net80211: fix VHT160/80P80/80 chanwidth selection in the "40-" case Depending on the base channel ni_vht_chan2 - ni_vht_chan1 can be negative. Apply abs() as indicated in the comments right above | CCFS1 - CCFS0 | = 8 or > 16 in order to fix the channel width selection. Sponsored by: The FreeBSD Foundation PR: 293645 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293645 ) Fixes: 4bf049bfeefd9 Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D55717 (cherry picked from commit 6cfd2b93e68061c7831016b91c2e308d01658764) (cherry picked from commit 68fcf0b94c5167f89481052f358064c9b6732553) M sys/net80211/ieee80211_ht.c ____________________________________________________________________________________________________________ Commit: e32e126c136de28783ac732fe3cd8a5224559ac5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e32e126c136de28783ac732fe3cd8a5224559ac5 Author: Xin LI (Wed 1 Apr 2026 02:45:14 BST) Committer: Xin LI (Wed 1 Apr 2026 03:20:09 BST) MFV: xz 5.8.3. Security: CVE-2026-34743 (cherry picked from commit f81c1f4339cd20ea89dad51c0f7d96e0e34313a9) M contrib/xz/ChangeLog M contrib/xz/THANKS M contrib/xz/src/common/tuklib_gettext.h M contrib/xz/src/common/tuklib_integer.h M contrib/xz/src/common/tuklib_mbstr_wrap.h M contrib/xz/src/common/tuklib_open_stdxxx.h M contrib/xz/src/liblzma/api/lzma/version.h M contrib/xz/src/liblzma/check/crc32_fast.c M contrib/xz/src/liblzma/check/crc_x86_clmul.h M contrib/xz/src/liblzma/common/index.c M contrib/xz/src/liblzma/liblzma.pc.in M contrib/xz/src/liblzma/rangecoder/range_decoder.h M contrib/xz/src/xz/file_io.c M contrib/xz/src/xz/main.c M lib/liblzma/config.h ____________________________________________________________________________________________________________ Commit: c5e1dde24dacdeb9d47684d981e17178fd7e8acf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c5e1dde24dacdeb9d47684d981e17178fd7e8acf Author: Kristof Provost (Sun 22 Mar 2026 02:50:47 GMT) Committer: Kristof Provost (Mon 30 Mar 2026 15:32:00 BST) pfctl: parser must not ignore error from pfctl_optimize_ruleset() Ignoring the error may cause pfctl(8) to load inconsistent ruleset preventing pf(4) to enforce desired policy. Issue reported and fix suggested by berts _from_ fastmail _dot_ com 'Looks good.' @deraadt MFC after: 1 week Obtained from: OpenBSD, sashan , 9fd28a8cca Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 343ace42f82a629374af4dc3a72da5f46f2c3feb) M sbin/pfctl/pfctl.c ____________________________________________________________________________________________________________ Commit: 41f69bfb5a25539a2a5baf25979a5d59e2702bfe URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=41f69bfb5a25539a2a5baf25979a5d59e2702bfe Author: Gordon Bergling (Fri 27 Mar 2026 06:59:19 GMT) Committer: Gordon Bergling (Mon 30 Mar 2026 12:27:25 BST) ofed: Fix a typo in a source code comment - s/refereced/referenced/ (cherry picked from commit aed3bc80fe033ab28e8f01cad49e73deb761516b) M sys/ofed/include/rdma/ib_mad.h ____________________________________________________________________________________________________________ Commit: 71ca167e36915865d1bdbb672652491a6934b1cc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=71ca167e36915865d1bdbb672652491a6934b1cc Author: Gordon Bergling (Fri 27 Mar 2026 06:57:49 GMT) Committer: Gordon Bergling (Mon 30 Mar 2026 12:27:14 BST) if_types: Fix a typo in a source code comment - s/Circiut/Circuit/ Obtained from: OpenBSD (cherry picked from commit 8bc31c88d65ad99cd510fbe511958799d3531477) M sys/net/if_types.h ____________________________________________________________________________________________________________ Commit: 97934f737548d1979aadd4acc54cc4de88d05dd2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=97934f737548d1979aadd4acc54cc4de88d05dd2 Author: Olivier Certner (Fri 27 Mar 2026 08:46:51 GMT) Committer: Olivier Certner (Fri 27 Mar 2026 11:14:19 GMT) Revert superfluous mis-MFC of "Add ASMC_DEBUG make option" Revert commit 12e1ab887d58 ("Add ASMC_DEBUG make option, 2026-01-04"), as the original commit it intended to MFC has already been MFCed as ab3eaa6ea29d846d on 2026/02/22 (UTC). The reverted commit introduced some (superfluous) duplicate lines and an unrelated change. This is a direct commit to stable/14. Fixes: 12e1ab887d58 ("Add ASMC_DEBUG make option, 2026-01-04") Sponsored by: The FreeBSD Foundation M sys/amd64/conf/NOTES M sys/conf/options.amd64 ____________________________________________________________________________________________________________ Commit: 557f50263905ffa68d748048753ac84658b1bca8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=557f50263905ffa68d748048753ac84658b1bca8 Author: Olivier Certner (Mon 12 Jan 2026 09:28:54 GMT) Committer: Warner Losh (Thu 26 Mar 2026 15:55:49 GMT) sys: vt_efifb: EFI not supported on i386; move it back to amd64/NOTES We do not support EFI boot on i386. Thus: 1. Move (back) 'device vt_efifb' from x86/NOTES to amd64/NOTES. 2. Remove 'device vt_efifb' from i386/MINIMAL. Reported by: jhb Fixes: f224591746bd ("Add ASMC_DEBUG make option") Fixes: 67599eef01f5 ("sys/x86/NOTES: Add vt_efifb") Sponsored by: The FreeBSD Foundation (cherry picked from commit 9c25620e57f01d8227f0d53c6b2134ab37a49fdf) M sys/amd64/conf/NOTES M sys/i386/conf/MINIMAL ____________________________________________________________________________________________________________ Commit: e5ed09ffd5927040a789b4333a856279181cef4a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e5ed09ffd5927040a789b4333a856279181cef4a Author: Mark Johnston (Tue 24 Mar 2026 02:12:42 GMT) Committer: Gordon Tetlow (Thu 26 Mar 2026 01:28:31 GMT) rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate() svc_rpc_gss_validate() copies the input message into a stack buffer without ensuring that the buffer is large enough. Sure enough, oa_length may be up to 400 bytes, much larger than the provided space. This enables an unauthenticated user to trigger an overflow and obtain remote code execution. Add a runtime check which verifies that the copy won't overflow. Approved by: so Security: FreeBSD-SA-26:08.rpcsec_gss Security: CVE-2026-4747 Reported by: Nicholas Carlini Reviewed by: rmacklem Fixes: a9148abd9da5d (cherry picked from commit 143293c14f8de00c6d3de88cd23fc224e7014206) M lib/librpcsec_gss/svc_rpcsec_gss.c M sys/rpc/rpcsec_gss/svc_rpcsec_gss.c ____________________________________________________________________________________________________________ Commit: b45e7530ffb92fbaa24ad25c368479d4eb80dbf4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b45e7530ffb92fbaa24ad25c368479d4eb80dbf4 Author: Michael Tuexen (Wed 25 Mar 2026 05:53:56 GMT) Committer: Gordon Tetlow (Thu 26 Mar 2026 01:28:29 GMT) tcp: plug an mbuf leak When a challenge ACK should be sent via tcp_send_challenge_ack(), but the rate limiter suppresses the sending, free the mbuf chain. The caller of tcp_send_challenge_ack() expects this similar to the callers of tcp_respond(). Approved by: so Security: FreeBSD-SA-26:06.tcp Security: CVE-2026-4247 Reviewed by: lstewart Tested by: lstewart Sponsored by: Netflix, Inc. (cherry picked from commit 6b2d6ccad2552e46a5c9c3ba70b2d0ed27c70ca8) M sys/netinet/tcp_subr.c ____________________________________________________________________________________________________________ Commit: 12e1ab887d58d18069554e0b5311d43d4ca50df0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=12e1ab887d58d18069554e0b5311d43d4ca50df0 Author: Enji Cooper (Sun 4 Jan 2026 08:27:57 GMT) Committer: Warner Losh (Wed 25 Mar 2026 20:36:34 GMT) Add ASMC_DEBUG make option This allows folks to enable debug statements in asmc(4) using kernel configs via the `options ASMC_DEBUG` directive. While here, remove a duplicate `device vt_efifb` directive in `NOTES` as it's already handled in the `GENERIC` config MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54511 (cherry picked from commit f224591746bdaf14ad5f63de4738a3146cc2f55f) M sys/amd64/conf/NOTES M sys/conf/options.amd64 ____________________________________________________________________________________________________________ Commit: 432c95c57bb5edba6593f48a17092577e293bc05 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=432c95c57bb5edba6593f48a17092577e293bc05 Author: Enji Cooper (Mon 5 Jan 2026 03:36:55 GMT) Committer: Warner Losh (Wed 25 Mar 2026 20:34:43 GMT) asmc(4): pull 32-bit support for the driver The asmc(4) driver should work for 32-bit Intel-based Macs, in theory, if the model details were added to the detection list. That being said, 32-bit Intel Macs were only released and available to the general public for 8 months [1], so the value in maintaining i386 support in the driver is reduced due to limited hardware access. Remove 32-bit support for the driver officially to make it clear its use is not supported. This should fix building `NOTES.i386` by proxy as well. Relnotes: yes MFC after: 2 weeks Fixes: f224591746b ("Add ASMC_DEBUG make option") Fixes: 8342d9f7b5f ("asmc(4): Stop building it on i386, as...") Differential Revision: https://reviews.freebsd.org/D55544 (cherry picked from commit 1f2f5eba24aa53e180a4eb46b772410e5a782469) M sys/x86/conf/NOTES ____________________________________________________________________________________________________________ Commit: 9ac7e0362a2490f5de0e23507cc5159cc03a3334 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9ac7e0362a2490f5de0e23507cc5159cc03a3334 Author: Marek Zarychta (Thu 29 May 2025 17:36:57 BST) Committer: Warner Losh (Wed 25 Mar 2026 19:22:52 GMT) loader: Fix beastie and fbsdbw logo positions Fix the beaste, beastiebw and fbsdbw postions broken after ee233742a569 PR: 285044, 286356 Fixes: 1b4e11713153 Reviewed by: imp MFC After: 2 days (14.3 candiate) Sponsored by: PANS Jarosław (cherry picked from commit 9486d6d57d14844972ee63382045e2ed7a300963) M stand/lua/gfx-beastie.lua M stand/lua/gfx-beastiebw.lua M stand/lua/gfx-fbsdbw.lua ____________________________________________________________________________________________________________ Commit: e3b801edded92c1ccef67f9aef8653e996493460 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e3b801edded92c1ccef67f9aef8653e996493460 Author: Kristof Provost (Thu 19 Mar 2026 07:21:51 GMT) Committer: Kristof Provost (Wed 25 Mar 2026 09:58:28 GMT) pf: include all elements when hashing rules MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit c6bcf6e6fd507d952a48226b51cc161b8ef972a2) M sys/netpfil/pf/pf_ioctl.c ____________________________________________________________________________________________________________ Commit: e79818ec36efafc994d8c5a912dcb94986c038c5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e79818ec36efafc994d8c5a912dcb94986c038c5 Author: Kristof Provost (Thu 12 Mar 2026 14:24:42 GMT) Committer: Kristof Provost (Wed 25 Mar 2026 09:58:28 GMT) pfctl: always warn if a duplicate rule was detected MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 66d66dd0f6f83926980fc1d68dd366c0057350c5) M sbin/pfctl/pfctl.c ____________________________________________________________________________________________________________ Commit: 958dbc87e9c59a2e9f83d84115ce03fb96e9b249 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=958dbc87e9c59a2e9f83d84115ce03fb96e9b249 Author: Kristof Provost (Thu 12 Mar 2026 14:23:32 GMT) Committer: Kristof Provost (Wed 25 Mar 2026 09:58:27 GMT) pf tests: verify that we handle address range rules correctly There's been a problem where rules which differed only in address ranges were considered duplicates and not added. Test for this. MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit ab74151e8d097b263237942c0b12277098bc9533) M tests/sys/netpfil/pf/pass_block.sh ____________________________________________________________________________________________________________ Commit: ac6bb58a715eaf0afb7a80dc87083f9819e10ac1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ac6bb58a715eaf0afb7a80dc87083f9819e10ac1 Author: Michael Gmelin (Thu 12 Mar 2026 14:18:09 GMT) Committer: Kristof Provost (Wed 25 Mar 2026 09:58:27 GMT) pf: Fix hashing of IP address ranges This corrects the false detection of duplicate rules. MFC after: 1 week Reviewed by: kp (cherry picked from commit 1fa873c93c8b08561c53107c7b90c53dfad30ddc) M sys/netpfil/pf/pf_ioctl.c ____________________________________________________________________________________________________________ Commit: f5b8309b9f634f1ca0aaeb69823470db93048208 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f5b8309b9f634f1ca0aaeb69823470db93048208 Author: Dag-Erling Smørgrav (Thu 19 Mar 2026 01:26:21 GMT) Committer: Dag-Erling Smørgrav (Wed 25 Mar 2026 00:47:45 GMT) realpath: Improve manual page * Try to make the RETURN VALUES section flow better. * Add basename(3), dirname(3), free(3) to the SEE ALSO section. * Drop the CAVEATS section, which was obsolete the moment realpath(3) was added to the Single Unix Specification in 1994. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55928 (cherry picked from commit 1aecb32021ce46d812db36b9037cdc6f423575f9) M lib/libc/stdlib/realpath.3 ____________________________________________________________________________________________________________ Commit: 151ae090159eb2c179926de84cf2fc40d687d2cf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=151ae090159eb2c179926de84cf2fc40d687d2cf Author: Dag-Erling Smørgrav (Thu 19 Mar 2026 01:26:16 GMT) Committer: Dag-Erling Smørgrav (Wed 25 Mar 2026 00:47:45 GMT) realpath: Improve prev_len logic * Save prev_len after having checked for and appended a trailing slash, not before. This requires us to back up if we end up returning a partial result, but previously we would sometimes return a partial result with a trailing slash and sometimes without. * Replace strlcat() with a faster strlcpy() since we know exactly how far into the buffer we are. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55914 (cherry picked from commit 99d295e471bc362a7927047c89472e1ee2d0da6b) M lib/libc/stdlib/realpath.c ____________________________________________________________________________________________________________ Commit: d288383b4d80e4b5e1bac09722e63d27074f4244 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d288383b4d80e4b5e1bac09722e63d27074f4244 Author: Rick Macklem (Sun 8 Mar 2026 21:09:36 GMT) Committer: Rick Macklem (Sun 22 Mar 2026 00:53:32 GMT) nfs_clstate.c: Handle the same stateid case correctly When an NFSv4.1/4.2 sarver upgrades a read delegation to a write delegation, it does not need to change the delegation's stateid. Without this patch, a DELEGRETURN of the stateid was done for the case where the delegation stateid had not changed. This return was bogus, since the delegation stateid now represents the new write delegation. This patch fixes the priblem by checking for "same stateid" and only doing the DELEGRETURN when it is not the same. PR: 289711 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289711 ) (cherry picked from commit 016570c4463d5908953355ee1cf9a385ad9601b4) M sys/fs/nfsclient/nfs_clstate.c ____________________________________________________________________________________________________________ Commit: a347e6e20e75ad6224afefcf650ef738c3de094d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a347e6e20e75ad6224afefcf650ef738c3de094d Author: Ed Maste (Tue 10 Mar 2026 13:53:46 GMT) Committer: Ed Maste (Fri 20 Mar 2026 13:37:14 GMT) compat/linux: Avoid waitid() kernel stack disclosure Reported by: Adam Crosser, Praetorian Reviewed by: philip Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55812 (cherry picked from commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd) (cherry picked from commit 9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9) M sys/compat/linux/linux_misc.c ____________________________________________________________________________________________________________ Commit: 6a808cd7534802d30010fb0a7f46381ff9f6ef3f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6a808cd7534802d30010fb0a7f46381ff9f6ef3f Author: Ed Maste (Wed 11 Mar 2026 15:02:18 GMT) Committer: Ed Maste (Fri 20 Mar 2026 13:37:14 GMT) compat32: Zero struct to avoid stack disclosure Reported by: Adam Crosser, Praetorian Reviewed by: philip Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55811 (cherry picked from commit 097cb4e9f0432c543c704cec712ce1cd3302335c) (cherry picked from commit 4551ea3b3f04650cd5300a9eae8994bdb080db91) M sys/compat/freebsd32/freebsd32_misc.c ____________________________________________________________________________________________________________ Commit: e61804ae6380c8d1db4b8c43bf7821e5d31ca04e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e61804ae6380c8d1db4b8c43bf7821e5d31ca04e Author: Ed Maste (Wed 11 Mar 2026 01:59:07 GMT) Committer: Ed Maste (Fri 20 Mar 2026 13:37:14 GMT) shm: Zero struct kinfo_file in sysctl handler Reported by: Calif.io in collaboration with Claude and Anthropic Research Reviewed by: jhb Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55806 (cherry picked from commit 25cc459286a02b646751541ccde5a33319471c73) (cherry picked from commit 6348a5fd0d4792e752cb714f2a536c3287b8d580) M sys/kern/uipc_shm.c ____________________________________________________________________________________________________________ Commit: 47339e4a9209c1d1323f58d792e277792990e060 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=47339e4a9209c1d1323f58d792e277792990e060 Author: Zhenlei Huang (Mon 16 Mar 2026 16:20:08 GMT) Committer: Zhenlei Huang (Fri 20 Mar 2026 10:02:19 GMT) ifnet: Fix decreasing the vnet interface count It should be decreased only when the interface has been successfully removed from the "active" list. This prevents vnet_if_return() from potential OOB writes to the allocated memory "pending". Reviewed by: kp, pouria Fixes: a779388f8bb3 if: Protect V_ifnet in vnet_if_return() MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55873 (cherry picked from commit 8065ff63c0e5c3bb4abb02f55b20cb47bb51d1a7) (cherry picked from commit 1b7687f053afcf251ee7643ee5a4f22a225f4a02) M sys/net/if.c ____________________________________________________________________________________________________________ Commit: fa5f0d95be25f670f9752e4785f55cbdeb830bab URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fa5f0d95be25f670f9752e4785f55cbdeb830bab Author: Zhenlei Huang (Thu 12 Mar 2026 04:24:59 GMT) Committer: Zhenlei Huang (Fri 20 Mar 2026 10:02:19 GMT) amd64: Make start_all_aps() static It is not used elsewhere since the change [1]. [1] ac3ede5371af x86/xen: remove PVHv1 code MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D55668 (cherry picked from commit 5f0ab9d9e965225c4af0c6ed481e01eee0ffab8f) (cherry picked from commit f521487cd935a0a547a9d7b54eeadebb200f5148) M sys/amd64/amd64/mp_machdep.c M sys/amd64/include/smp.h ____________________________________________________________________________________________________________ Commit: 2fd7680a6c8194ef3fe51fa9ec472b8f831e86c1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2fd7680a6c8194ef3fe51fa9ec472b8f831e86c1 Author: Ed Maste (Tue 24 Feb 2026 14:26:55 GMT) Committer: Ed Maste (Thu 19 Mar 2026 16:12:28 GMT) elf_common.h: Sort SHT_ entries Reviewed by: jrtc27 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55488 (cherry picked from commit 0ff08b8c402b3c555125e4c72df0b80b4d084d56) (cherry picked from commit acf90e2e337572737e73567eacf655e44df760c0) M sys/sys/elf_common.h ____________________________________________________________________________________________________________ Commit: f31a6686ba85edb1e49b0a55c50d084608631c0e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f31a6686ba85edb1e49b0a55c50d084608631c0e Author: Jessica Clarke (Tue 24 Feb 2026 13:52:21 GMT) Committer: Ed Maste (Thu 19 Mar 2026 16:12:27 GMT) sys: Restore sorting in sys/elf_common.h These various definitions are meant to be kept sorted by machine prefix. Fixes: 2bb61497ca76 ("elf_common.h: Add definitions for LoongArch ELF files") (cherry picked from commit b7ef4f4b230f01968473269f280bd7e4e86a3ec9) (cherry picked from commit 2b6ba65cee4e2e4f0cddfb32c4e21b6e20fa89e6) M sys/sys/elf_common.h ____________________________________________________________________________________________________________ Commit: 1acf5071506ee0b5db16800069eaef861b4a2e12 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1acf5071506ee0b5db16800069eaef861b4a2e12 Author: Colin Percival (Fri 13 Mar 2026 20:45:05 GMT) Committer: Colin Percival (Wed 18 Mar 2026 19:10:48 GMT) EC2: Don't use unicode in boot loader The boot loader menu is disabled by default in EC2, but if it is ever turned on, the default (unicode) output breaks EC2's web interface to the serial console. Set loader_menu_frame="ascii" instead. MFC after: 3 days Sponsored by: Amazon (cherry picked from commit 277830b4d3ae9999c80bf915b5491850e91c6516) (cherry picked from commit 251907ca480eff7f6177f52959b71a6cfce45579) M release/tools/ec2.conf ____________________________________________________________________________________________________________ Commit: c25839cda69f5c207b7685ec25a32a67914b0708 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c25839cda69f5c207b7685ec25a32a67914b0708 Author: Colin Percival (Sat 14 Feb 2026 00:35:26 GMT) Committer: Colin Percival (Wed 18 Mar 2026 19:10:42 GMT) intrng: Shuffle unhandled interrupts too When interrupt vectors are first allocated, they get assigned to CPU #0; at SI_SUB_SMP / SI_ORDER_SECOND (aka once we have multiple CPUs), the intr_irq_shuffle SYSINIT clears their CPU sets with the effect of forcing them to be assigned to new CPUs later. In case where interrupt vectors were allocated *but not yet bound* this code did not run, with the effect that those interrupts would remain pinned to CPU #0 forever. This affected the ena(4) driver, which allocates interrupts for I/O when the device is attached but doesn't set them up until the interface is brought up much later in the boot process (and, crucially, long after intr_irq_shuffle runs). Adjust intr_irq_shuffle to clear the CPU set for an interrupt source even if it currently has no handlers, so that it will be properly assigned to a CPU when it is used later. Reviewed by: andrew, mhorne MFC after: 1 month Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55284 (cherry picked from commit b2ba4131b9b08d6231392c0b798d0ff35809f600) M sys/kern/subr_intr.c ____________________________________________________________________________________________________________ Commit: b0b6364eadf498c985f8312195e37eed5780347c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b0b6364eadf498c985f8312195e37eed5780347c Author: Siva Mahadevan (Sat 14 Mar 2026 03:54:46 GMT) Committer: Siva Mahadevan (Wed 18 Mar 2026 14:15:47 GMT) tarfs: swap deprecated ZSTD_resetDStream() with ZSTD_DCtx_reset() ZSTD_resetDStream() is deprecated since 1.5.4: https://github.com/facebook/zstd/commit/5d8cfa6b96a6442ab1251f9de3b47a0eb12561a0 This change is needed to MFV zstd 1.5.7. Approved by: emaste (mentor) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55835 (cherry picked from commit 922d73540d2d9897e5e8160c445cefa13581564e) M sys/fs/tarfs/tarfs_io.c ____________________________________________________________________________________________________________ Commit: 5f55c59cbab5b06a2fcb272b345ce94c48c01c1c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5f55c59cbab5b06a2fcb272b345ce94c48c01c1c Author: Kenneth D. Merry (Mon 2 Mar 2026 19:13:47 GMT) Committer: Kenneth D. Merry (Wed 11 Mar 2026 18:36:26 GMT) mt(1)/libmt: Add LTO-10 density codes and specs. These were obtained from IBM specs and actual tapes/drives. Standard LTO-10 cartriges hold 30TB raw, 75TB with 2.5:1 compression. Premium LTO-10 cartridges hold 40TB raw, 100TB with 2.5:1 compression. LTO-10 tape drives are not backward compatible with previous generation LTO tapes. (This is a change from older generation drives.) Since the Premium tape is a new thing for LTO, we'll call this density code LTO-10P vs. the standard LTO-10. The barcode identifier for LTO-10 tapes is "LA"; the barcode identifier for LTO-10P tapes is "PA". LTO-10 cartridges contain 1035m of tape, while LTO-10 Premium cartridges contain 1337m of tape and have slightly higher density. (Obtained from MAM data on actual tape cartridges and the density report, obtained via 'mt getdensity'.) LTO-10 cartridges use a polyethylene naphthalate (PEN) film substrate. LTO-10 Premium cartridges use an Aramid (aromatic polyamide) substrate that is thinner and stronger, allowing a longer tape to fit in the same cartridge form factor. usr.bin/mt/mt.1: Add density codes and specs for LTO-10 and LTO-10P. lib/libmt/mtlib.c: Add density codes for LTO-10 and LTO-10P. Sponsored by: Spectra Logic (cherry picked from commit 930486f9be5c884d1d2f0aae9f81a3f5af1f2718) M lib/libmt/mtlib.c M usr.bin/mt/mt.1 ____________________________________________________________________________________________________________ Commit: b9c0e0c77036a83b2d1b6993224370b686446d6a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b9c0e0c77036a83b2d1b6993224370b686446d6a Author: Siva Mahadevan (Tue 3 Mar 2026 19:09:35 GMT) Committer: Siva Mahadevan (Wed 11 Mar 2026 16:45:36 GMT) LinuxKPI: avoid -Werror=unused-value in sort() from BUILD_BUG_ON_ZERO() The BUILD_BUG_ON_ZERO() macro returns an (int)0 if it does not fail at build time. LinuxKPI sort() has it as a guard for an unsupported argument but ignores the return value. This leads to gcc complaining: /usr/src/sys/compat/linuxkpi/common/include/linux/build_bug.h:60:33: error: statement with no effect [-Werror=unused-value] 60 | #define BUILD_BUG_ON_ZERO(x) ((int)sizeof(struct { int:-((x) != 0); })) | ^ /usr/src/sys/compat/linuxkpi/common/include/linux/sort.h:37:9: note: in expansion of macro 'BUILD_BUG_ON_ZERO' 37 | BUILD_BUG_ON_ZERO(swap); \ | ^~~~~~~~~~~~~~~~~ /usr/src/sys/contrib/dev/rtw89/core.c:2575:9: note: in expansion of macro 'sort' 2575 | sort(drift, RTW89_BCN_TRACK_STAT_NR, sizeof(*drift), cmp_u16, NULL); Change to BUILD_BUG_ON() for the statement version. Reported by: CI Co-authored-by: bz Approved by: emaste (mentor) MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55634 (cherry picked from commit f26cb4757eb74ceace39144933ae198ebf1b4f28) M sys/compat/linuxkpi/common/include/linux/sort.h ____________________________________________________________________________________________________________ Commit: 51ffffe9be917a001dd61be91464aa4aad8f7d84 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=51ffffe9be917a001dd61be91464aa4aad8f7d84 Author: Eugene Grosbein (Wed 4 Mar 2026 07:29:26 GMT) Committer: Eugene Grosbein (Wed 11 Mar 2026 07:21:45 GMT) me.4: MFC: link if_me kernel module to its manual page. (cherry picked from commit 46ba263d6eeb1c6029841b4c42f54912ad61de5c) M share/man/man4/Makefile ____________________________________________________________________________________________________________ Commit: 1fd1b699bda2ec32be3e0c7afa894c615113afc2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1fd1b699bda2ec32be3e0c7afa894c615113afc2 Author: Nathaniel Braun (Sat 17 Jan 2026 17:14:42 GMT) Committer: Ed Maste (Mon 9 Mar 2026 13:25:55 GMT) vt: Fix handling of backtab PR: 292463 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292463 ) Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/2002 (cherry picked from commit 5fec99caff3ac4f476bb88078ebf85fbecf6afb3) (cherry picked from commit 3ca02a70f7f94f7479ffcd3ed7ca6d83ec58af10) M sys/dev/vt/vt_core.c M sys/teken/teken.c M sys/teken/teken.h ____________________________________________________________________________________________________________ Commit: 7fd8a2028034968b8dc7984e83046f4b7c1696ff URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7fd8a2028034968b8dc7984e83046f4b7c1696ff Author: John Baldwin (Tue 27 Jan 2026 18:34:58 GMT) Committer: Ed Maste (Mon 9 Mar 2026 13:25:54 GMT) Merge commit 81b20e110b3f from llvm git (by Roland McGrath): [libc++] Work around new GCC 15 type_traits builtins that can't be used as Clang's can (#137871) GCC 15 has added builtins for various C++ type traits that Clang already had. Since `__has_builtin(...)` now finds these, the #if branches previously only used for Clang are now used for GCC 15. However, GCC 15 requires that these builtins only be used in type aliases, not in template aliases. For now, just don't use the `__has_builtin(...)` branches under newer GCC versions, so both 14 and 15 work during the transition. This can be cleaned up later to use all the GCC 15 builtins available. Fixed: #137704 Fixed: #117319 Reviewed by: dim Differential Revision: https://reviews.freebsd.org/D54865 (cherry picked from commit bfc6e56f6327621171cef4fe29290c63edfc4d9c) (cherry picked from commit 897711b7bd4ba8f34bab9e0b79495ce107cfef35) M contrib/llvm-project/libcxx/include/__type_traits/add_lvalue_reference.h M contrib/llvm-project/libcxx/include/__type_traits/add_pointer.h M contrib/llvm-project/libcxx/include/__type_traits/add_rvalue_reference.h M contrib/llvm-project/libcxx/include/__type_traits/decay.h M contrib/llvm-project/libcxx/include/__type_traits/remove_all_extents.h M contrib/llvm-project/libcxx/include/__type_traits/remove_extent.h ____________________________________________________________________________________________________________ Commit: 969c436a6c918be0f000bd317f06985a7dd92809 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=969c436a6c918be0f000bd317f06985a7dd92809 Author: Mark Johnston (Tue 24 Feb 2026 15:14:39 GMT) Committer: Ed Maste (Thu 5 Mar 2026 23:57:56 GMT) bhyve: Fix truncate_iov() The implementation was simply wrong. It would always just return the first entry in the iovec, even if the requested length is larger than that first entry. Note, this function will be removed soon, see D53468. Reported by: Vinod p n Reviewed by: des, emaste, Hans Rosenfeld MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55438 (cherry picked from commit d7d4da91de201841c57a6b8f89b450754b9b8696) (cherry picked from commit 119bdea35792006cd0cce3c864d5007f092a10c1) M usr.sbin/bhyve/iov.c ____________________________________________________________________________________________________________ Commit: b971d4a17a9525362c51602b0c4a6cf4b5013b24 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b971d4a17a9525362c51602b0c4a6cf4b5013b24 Author: Brooks Davis (Mon 15 Dec 2025 13:52:34 GMT) Committer: Ed Maste (Thu 5 Mar 2026 23:57:56 GMT) src.conf.5: regen documenting WITH_IPFILTER_IPFS (cherry picked from commit b9b1262a8ef95857101e538145703894e3b880b7) (cherry picked from commit 5d6dfa5110488605c25d97f3513fc1ace30a32e5) M share/man/man5/src.conf.5 ____________________________________________________________________________________________________________ Commit: cf37f9ed8271817d94254ece45c82ee52db3ff2b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cf37f9ed8271817d94254ece45c82ee52db3ff2b Author: Brooks Davis (Mon 15 Dec 2025 13:50:56 GMT) Committer: Ed Maste (Thu 5 Mar 2026 23:57:55 GMT) options: describe WITH_IPFILTER_IPFS Add a description for WITH_IPFILTER_IPFS. Fixes: 0ff0c19e7f70 ("ipfilter: Disable ipfs(8) by default") (cherry picked from commit c112ad75605ccdfcb8bbce2f57b0e7a077f057f8) (cherry picked from commit f981908926a88357ca6b53aed5566fca4c05a850) A tools/build/options/WITH_IPFILTER_IPFS ____________________________________________________________________________________________________________ Commit: b302ca6801dd6a3de0133c51c21609cb96a889c9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b302ca6801dd6a3de0133c51c21609cb96a889c9 Author: Ed Maste (Wed 4 Feb 2026 16:56:37 GMT) Committer: Ed Maste (Thu 5 Mar 2026 23:57:55 GMT) lesspipe: Allow zstd to operate on a symlink By default zstd refuses to operate on symlinks, so for example `zless /var/crash/vmcore.last.zst` failed to view the uncompressed core file. Add -f to the zstd command line to allow operation on symlinks. Reviewed by: delphij Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55101 (cherry picked from commit b4305c90a3be7e1a40b76545b8b761fdbda5c309) (cherry picked from commit 68125692efacbce537e14ba16ecedff750cccc36) M usr.bin/less/lesspipe.sh ____________________________________________________________________________________________________________ Commit: baee504b868b9417c815c0de6474a0d6e5d6b4ac URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=baee504b868b9417c815c0de6474a0d6e5d6b4ac Author: Zhenlei Huang (Sat 28 Feb 2026 11:35:42 GMT) Committer: Zhenlei Huang (Thu 5 Mar 2026 11:04:20 GMT) vnet: Ensure the space allocated by vnet_data_alloc() is sufficent aligned Some 32-bit architectures, e.g., armv7, require strict 8-byte alignment while doing atomic 64-bit access. Hence aligning to the pointer type (4-byte alignment) does not meet the requirement on those architectures. Make the space allocated by vnet_data_alloc() sufficent aligned to avoid unaligned access. PR: 265639 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265639 ) Diagnosed by: markj Reviewed by: jhb, markj Co-authored-by: jhb MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D55560 (cherry picked from commit 32beb3ae71cb320dbe4190a01c036943d99083b3) (cherry picked from commit 973d607b284ba68e63f0386af44c28bfde15add2) M sys/net/vnet.c ____________________________________________________________________________________________________________ Commit: 64faa2bd8f597cb57356094006e3405debd5d734 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=64faa2bd8f597cb57356094006e3405debd5d734 Author: Dag-Erling Smørgrav (Sat 28 Feb 2026 18:11:10 GMT) Committer: Dag-Erling Smørgrav (Thu 5 Mar 2026 08:06:36 GMT) libiscsiutil: Record dependency on libmd MFC after: 3 days Fixes: 6378393308bc ("Add an internal libiscsiutil library.") Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55596 (cherry picked from commit 05ca4837a3e9a413aabcf005abb14fff35088476) M lib/libiscsiutil/Makefile M share/mk/src.libnames.mk M usr.sbin/ctld/Makefile M usr.sbin/iscsid/Makefile ____________________________________________________________________________________________________________ Commit: 4830cb713ed8ae377f7143c4be204b5994c178c2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4830cb713ed8ae377f7143c4be204b5994c178c2 Author: Philip Paeps (Mon 2 Mar 2026 20:34:06 GMT) Committer: Philip Paeps (Thu 5 Mar 2026 01:33:16 GMT) contrib/tzdata: import tzdata 2026a Changes: https://github.com/eggert/tz/blob/2026a/NEWS (cherry picked from commit 6becc3dff922476d667c15f029e520da496d4295) M contrib/tzdata/Makefile M contrib/tzdata/NEWS M contrib/tzdata/backzone M contrib/tzdata/etcetera M contrib/tzdata/europe M contrib/tzdata/leap-seconds.list M contrib/tzdata/leapseconds M contrib/tzdata/theory.html M contrib/tzdata/version M contrib/tzdata/zonenow.tab ____________________________________________________________________________________________________________ Commit: 8e61067dab49470e61f59be2836fa89f17b99c4e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8e61067dab49470e61f59be2836fa89f17b99c4e Author: ShengYi Hung (Wed 10 Sep 2025 17:33:33 BST) Committer: ShengYi Hung (Wed 4 Mar 2026 15:08:34 GMT) ichwd: address unused function warning by marking as __unused Reported by: markj, bz Approved by: markj (mentor) Fixes: 2b74ff5fceb6 ("ichwd: introduce i6300esbwd watch dog driver") Differential Revision: https://reviews.freebsd.org/D52476 (cherry picked from commit 3449a3abab892a0a1124ee4edbc10d6d28b87af3) M sys/dev/ichwd/i6300esbwd.c ____________________________________________________________________________________________________________ Commit: 041065e59eae8af5fa3ae676416eff65d90158e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=041065e59eae8af5fa3ae676416eff65d90158e5 Author: Dag-Erling Smørgrav (Thu 26 Feb 2026 06:15:14 GMT) Committer: Dag-Erling Smørgrav (Wed 4 Mar 2026 14:45:09 GMT) lpd: Add timeout option Set a 120-second receive timeout on all client connections, and add a command-line option to change that value. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55400 (cherry picked from commit 56fbfd1ecdc78fc99b3a2e381c355ce8980de39d) M usr.sbin/lpr/lpd/lpd.8 M usr.sbin/lpr/lpd/lpd.c ____________________________________________________________________________________________________________ Commit: 60f5fc36e46a6381e8ddc6d28ee792a6ec5089fc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=60f5fc36e46a6381e8ddc6d28ee792a6ec5089fc Author: Dag-Erling Smørgrav (Thu 26 Feb 2026 06:15:06 GMT) Committer: Dag-Erling Smørgrav (Wed 4 Mar 2026 14:45:09 GMT) lpd: Improve robustness * Check for integer overflow when receiving file sizes. * Check for buffer overflow when receiving file names, and fully validate the names. * Check for integer overflow when checking for available disk space. * Check for I/O errors when sending status codes. * Enforce one job per connection and one control file per job (see code comments for additional details). * Simplify readfile(), avoiding constructs vulnerable to integer overflow. * Don't delete files we didn't create. * Rename read_number() to read_minfree() since that's all it's used for, and move all the minfree logic into it. * Fix a few style issues. PR: 293278 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293278 ) MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55399 (cherry picked from commit 9065be0a5902e058d25a42bd9b3fbe9dc28b189d) M usr.sbin/lpr/lpd/recvjob.c ____________________________________________________________________________________________________________ Commit: 83280570ea1fdc288bacdbabf7580c50fcc39355 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=83280570ea1fdc288bacdbabf7580c50fcc39355 Author: Dag-Erling Smørgrav (Wed 25 Feb 2026 21:12:36 GMT) Committer: Dag-Erling Smørgrav (Wed 4 Mar 2026 14:45:08 GMT) system(3): Clarify return values Our manual page currently states that system() will return 127 if it fails to execute the shell. The actual return value is, to quote POSIX, “as if the command language interpreter had terminated using exit(127) or _exit(127)”. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: bnovkov, kevans Differential Revision: https://reviews.freebsd.org/D55483 (cherry picked from commit 7305604b29d3db29c9bb5de6e7a25829fb541d1e) M lib/libc/stdlib/system.3 ____________________________________________________________________________________________________________ Commit: a34f42b083dd323314d385bc7b00323d336ea28b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a34f42b083dd323314d385bc7b00323d336ea28b Author: ShengYi Hung (Fri 11 Jul 2025 09:52:01 BST) Committer: ShengYi Hung (Wed 4 Mar 2026 14:35:40 GMT) vmm: Support INOUT manual decode. The inout instruction in AMD SVM requires DecodeAssist feature to decode the segment override prefix. However, without that feature, we are still able to decode by fetching the instruction directly. Approved by: markj (mentor) MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D51256 (cherry picked from commit c18c521c79b6160ce43bb2ca4c2eb42ccf7e6e57) M sys/amd64/include/vmm.h M sys/amd64/include/vmm_instruction_emul.h M sys/amd64/vmm/amd/svm.c M sys/amd64/vmm/intel/vmx.c M sys/amd64/vmm/vmm_instruction_emul.c M sys/amd64/vmm/vmm_ioport.c ____________________________________________________________________________________________________________ Commit: 4bac18002ab418131a2c0bc41fba089700f1ba85 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4bac18002ab418131a2c0bc41fba089700f1ba85 Author: ShengYi Hung (Sat 3 Jan 2026 16:32:50 GMT) Committer: ShengYi Hung (Wed 4 Mar 2026 14:21:13 GMT) smp: Use bitwise operation to count cpu number Previously, we iterated over all CPUs using CPU_FOREACH and checked individual bits to count valid CPUs. Refactor this to use a bitwise AND and popcount to count the number of enabled bits directly. Approved by: markj (mentor) MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D54474 (cherry picked from commit e387d9438ba0258b88ebe03ef139bc6fd70b5a46) M sys/kern/subr_smp.c ____________________________________________________________________________________________________________ Commit: 241ed8bba288d3d7eb569d3297724ee509be6469 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=241ed8bba288d3d7eb569d3297724ee509be6469 Author: ShengYi Hung (Mon 8 Sep 2025 12:15:14 BST) Committer: ShengYi Hung (Wed 4 Mar 2026 14:16:34 GMT) snd_hda: Add patch for Framework 16 AMD Ryzen AI 300 Series The new Framework 16 with ALC285 exhibits the same issue as the previous model. Therefore, we apply the same fix to the new model. Reviewed by: emaste, Daniel Schaefer Approved by: lwhsu (mentor) MFC after: 3 days Sponsored by: The FreeBSD Foundation Sponsored by: Framework Computer Inc Differential Revision: https://reviews.freebsd.org/D52423 (cherry picked from commit 7f81b2519aebcf90d7e027122ca99b628ca81ed9) M sys/dev/sound/pci/hda/hdaa_patches.c M sys/dev/sound/pci/hda/hdac.h ____________________________________________________________________________________________________________ Commit: e099cd40ba6c3977c3d41ee7e44ea2bf1609be10 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e099cd40ba6c3977c3d41ee7e44ea2bf1609be10 Author: ShengYi Hung (Fri 22 Aug 2025 15:55:45 BST) Committer: ShengYi Hung (Wed 4 Mar 2026 14:16:26 GMT) ichwd: introduce i6300esbwd watch dog driver The intel 6300ESB watchdog is a special ICH-based watchdog device with a different interface. QEMU implements this watchdog for x86 systems. This change enables watchdog mode (rather than free-running mode) and introduces 1 sysctl: - hw.i6300esbwd.0.locked: locks the watchdog register after the event is triggered, preventing it from being disabled until a hard reset. This feature has been tested on a Vultr AMD guest machine and local qemu machine. PR: 259673 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259673 ) Approved by: markj (mentor), lwhsu (mentor) MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D52049 (cherry picked from commit 2b74ff5fceb6623f6114ce39baee9f6ec5f79277) M sys/conf/files.x86 A sys/dev/ichwd/i6300esbwd.c A sys/dev/ichwd/i6300esbwd.h M sys/dev/ichwd/ichwd.c M sys/dev/ichwd/ichwd.h M sys/modules/ichwd/Makefile ____________________________________________________________________________________________________________ Commit: 0dd289fe0b806503227638340b22bf7b38586271 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0dd289fe0b806503227638340b22bf7b38586271 Author: ShengYi Hung (Thu 15 May 2025 11:54:09 BST) Committer: ShengYi Hung (Wed 4 Mar 2026 14:11:18 GMT) ipheth(4): Add CDC-NCM support for RX The CDC-NCM (USB Communications Device Class – Network Control Model) protocol allows multiple Ethernet frames to be encapsulated into a single USB transfer. On iOS, CDC-NCM is currently implemented for RX only and uses a fixed number of entries (16). To maintain compatibility with older iOS versions, we attempt to enable NCM on the USB device first; if this fails, we fall back to the original behavior. Approved by: lwhsu (mentor), markj (mentor) MFC after: 2 weeks Sponsored by: The FreeBSD Foundation (cherry picked from commit c992ac6213276f54d868f317cc5092f8aed4ff54) M sys/dev/usb/net/if_ipheth.c M sys/dev/usb/net/if_iphethvar.h ____________________________________________________________________________________________________________ Commit: e0e1e9e083097383bcebf0b6cf65af46653e2f73 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e0e1e9e083097383bcebf0b6cf65af46653e2f73 Author: Baptiste Daroussin (Sun 15 Feb 2026 18:07:07 GMT) Committer: Baptiste Daroussin (Mon 2 Mar 2026 12:49:01 GMT) libusb: dequeue next transfer on completion to prevent stalls The transfer proxy callbacks (bulk/interrupt, control, isochronous) only called libusb10_submit_transfer_sub() in the START path to pipeline the second kernel transfer slot. On completion or error, no attempt was made to dequeue the next pending transfer from tr_head onto the now-free slot. When more than two async transfers were submitted on the same endpoint, the third (and subsequent) transfers would remain stuck on tr_head indefinitely, since no completion ever triggered their submission. This caused a protocol-level deadlock in applications like adb that submit header + payload + zero-length terminator as three separate bulk transfers in sequence. Fix by calling libusb10_submit_transfer_sub() after every libusb10_complete_transfer() in all three proxy callbacks. MFC After: 2 weeks Reviewed by: adrian Differential Revision: https://reviews.freebsd.org/D55289 (cherry picked from commit 38c18332642500fdfe075a82f88e033f6673a53f) M lib/libusb/libusb10.c ____________________________________________________________________________________________________________ Commit: 2244269424ae439f0234d238c2674a95c0b459a3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2244269424ae439f0234d238c2674a95c0b459a3 Author: Kevin Bowling (Fri 13 Feb 2026 06:30:22 GMT) Committer: Kevin Bowling (Fri 27 Feb 2026 23:10:13 GMT) e1000: Increase FC pause/refresh time on PCH2 and newer This corresponds to Linux f74dc880098b4a29f76d756b888fb31d81ad9a0c That commit does not provide any public background detail, but it's been in use for over 5 years and corresponds to previous chip bugs w.r.t. automatic generation of PAUSE frames. Reviewed by: kgalazka Differential Revision: https://reviews.freebsd.org/D54555 (cherry picked from commit 2bdec2ee73be7dbafce9982b0dc5c273918a5443) M sys/dev/e1000/if_em.c ____________________________________________________________________________________________________________ Commit: 31f3640c4aa859f2e3a78a51f3c43e0e6e7239f9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=31f3640c4aa859f2e3a78a51f3c43e0e6e7239f9 Author: Dag-Erling Smørgrav (Sat 21 Feb 2026 01:18:18 GMT) Committer: Dag-Erling Smørgrav (Thu 26 Feb 2026 04:03:43 GMT) libfetch: Gracefully skip unsupported protocols If socket() fails because the address family or protocol is unsupported, just continue with the next address. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55407 (cherry picked from commit b5d570e711da1dad303312bebaf1bd2fb720f0dc) M lib/libfetch/common.c ____________________________________________________________________________________________________________ Commit: cca6f5eadb796b03379eb21f38c74ca46a64e45b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cca6f5eadb796b03379eb21f38c74ca46a64e45b Author: Dag-Erling Smørgrav (Sat 21 Feb 2026 01:18:15 GMT) Committer: Dag-Erling Smørgrav (Thu 26 Feb 2026 04:03:43 GMT) libfetch: Fail hard if interrupted while connecting This fixes an issue where the first address that DNS returns is blocked by a packet filter, so we hang for a while, then the user hits Ctrl-C, interrupting connect(2), whereupon we move on to the next address, get a connection, request the file, and return to fetch(1), which sees that SIGINT was caught and bails. Note that we make no attempt to enforce fetchTimeout in the connection phase, and never have. It's feasible, but non-trivial, so we'll leave it as an exercise for future us. PR: 293312 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293312 ) MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55406 (cherry picked from commit afbdcd402bb439bd3d487baaad63b68e95929265) M lib/libfetch/common.c ____________________________________________________________________________________________________________ Commit: 5c80cdb120b6189b2a1b4f846cd21a3a98570af1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5c80cdb120b6189b2a1b4f846cd21a3a98570af1 Author: Dag-Erling Smørgrav (Sat 21 Feb 2026 01:18:11 GMT) Committer: Dag-Erling Smørgrav (Thu 26 Feb 2026 04:03:42 GMT) libfetch: Clean up fetch_info usage * Provide a wrapper for the common if (verbose) fetch_info(...) idiom. * Replace remaining instances of fprintf(stderr, ...) with fetch_info(). * Fix a few style nits. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55405 (cherry picked from commit 1b7c4d29fdfc975facdc43f6da50947cf3bb8e4a) M lib/libfetch/common.c ____________________________________________________________________________________________________________ Commit: 15717dd5c628ce57d8b73b6b8a8ea7e9d8f5e52a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=15717dd5c628ce57d8b73b6b8a8ea7e9d8f5e52a Author: Dag-Erling Smørgrav (Tue 17 Feb 2026 14:01:34 GMT) Committer: Dag-Erling Smørgrav (Thu 26 Feb 2026 04:03:42 GMT) m4: Fix eval output width According to POSIX, the optional third argument is the minimum number of digits to print regardless of sign. We interpreted it as the minimum width of the output including the sign. Additionally, the variable used to hold this value was confusingly named “maxdigits”. PR: 293214 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293214 ) MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55311 (cherry picked from commit 507c611aeac7ca9aed12353b1044bb21ab00afae) M usr.bin/m4/eval.c M usr.bin/m4/misc.c M usr.bin/m4/tests/eval.m4 M usr.bin/m4/tests/regress.eval.out ____________________________________________________________________________________________________________ Commit: cfdd90abab51581120da75b45018a79237228b33 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cfdd90abab51581120da75b45018a79237228b33 Author: Ahmad Khalifa (Tue 24 Feb 2026 20:11:32 GMT) Committer: Ahmad Khalifa (Thu 26 Feb 2026 03:13:15 GMT) bsdinstall: fix EFI boot entry creation update_uefi_bootentry assumes that the caller sets FREEBSD_BOOTNAME and mntpt, which isn't the case anymore. The result is that there is no "FreeBSD" boot entry created/updated after install. Most machines manage to boot from the removable media path (if the loader is installed there too), but some don't. Take the loader's path as an argument and rename the variable used in the ZFS mirror loop so mntpt can be reused below. Also mark nentries as a local variable so it doesn't leak out of the function. PR: 293385 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293385 ) Fixes: 494de51bc0074472d1b01604f085daea0844f240 MFC after: 2 days Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55469 (cherry picked from commit 0fd91c489134643ac9e38c0f55ba7464fe892c5e) M usr.sbin/bsdinstall/scripts/bootconfig ____________________________________________________________________________________________________________ Commit: 0f5900bf663b980c88546711077110aef88972a7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0f5900bf663b980c88546711077110aef88972a7 Author: Ahmad Khalifa (Tue 24 Feb 2026 20:11:26 GMT) Committer: Ahmad Khalifa (Thu 26 Feb 2026 03:13:15 GMT) efibootmgr.8: capitalize examples section header MFC after: 3 days (cherry picked from commit fac9ae3db4e6a28dfd467369e262f636e10a3b01) M usr.sbin/efibootmgr/efibootmgr.8 ____________________________________________________________________________________________________________ Commit: 6ed373227680b016b4cfa5af1b802ef23a121513 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6ed373227680b016b4cfa5af1b802ef23a121513 Author: Mark Johnston (Wed 25 Feb 2026 15:31:30 GMT) Committer: Mark Johnston (Thu 26 Feb 2026 02:54:34 GMT) nullfs: Fix handling of doomed vnodes in nullfs_unlink_lowervp() nullfs_unlink_lowervp() is called with the lower vnode locked, so the nullfs vnode is locked too. The following can occur: 1. the vunref() call decrements the usecount 2->1, 2. a different thread calls vrele() on the vnode, decrements the usecount 0->1, then blocks on the vnode lock, 3. the first thread tests vp->v_usecount == 0 and observes that it is true, 4. the first thread incorrectly unlocks the lower vnode. Fix this by testing VN_IS_DOOMED directly. Since nullfs_unlink_lowervp() holds the vnode lock, the value of the VIRF_DOOMED flag is stable. Thanks to leres@ for patiently helping to track this down. PR: 288345 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288345 ) MFC after: 1 week Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D55446 (cherry picked from commit 8b64d46fab87af3ae062901312187f3a04ad2d67) M sys/fs/nullfs/null_vfsops.c ____________________________________________________________________________________________________________ Commit: a2c2de82c053ba7596f90ebf7d7ea6cb41938587 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a2c2de82c053ba7596f90ebf7d7ea6cb41938587 Author: Colin Percival (Sun 22 Feb 2026 00:38:01 GMT) Committer: Colin Percival (Wed 25 Feb 2026 02:47:29 GMT) pkg-stage.sh: Add ext2 and ntfs Having these packages available on release media may help users who need to sneakernet other packages (e.g. firmware) from systems running Linux or Windows. Suggested by: vladlen, ziaee MFC after: 3 days (cherry picked from commit 6881fd278d80ac63b4d511fc130a79ff16d1bb48) M release/scripts/pkg-stage.sh ____________________________________________________________________________________________________________ Commit: 5153ca331b4448e062cebad987773756c0aff2dc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5153ca331b4448e062cebad987773756c0aff2dc Author: Rick Macklem (Tue 17 Feb 2026 22:57:42 GMT) Committer: Rick Macklem (Tue 24 Feb 2026 22:05:42 GMT) vfs_mount.c: Don't call VFS_MOUNT() if only exports are being updated PR#293198 reports a hang within ZFS when exports are being updated concurrently with a VOP_SETEXTATTR(). The hang appears to be caused by mishandling of the z_teardown_lock, but fixing handling of this lock appears to be a major effort. Since the hang occurs when VFS_MOUNT() acquires a write/exclusive z_teardown_lock, which rarely occurs, except when exports are being updated, this patch avoids the VFS_MOUNT() call for this case. Avoiding a VFS_MOUNT() call fixes the hang for the case reported by PR#293198 and is also an optimization. As such, this patch avoids the VFS_MOUNT() call when only exports are being updated similar to what was already being done within vnet prisons. PR: 293198 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293198 ) (cherry picked from commit 935cf3284f520c90a63baaadb762caaa30084f5c) M sys/kern/vfs_mount.c ____________________________________________________________________________________________________________ Commit: aabd5243fb97979d33a7eece4f7cca18ffd82a95 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=aabd5243fb97979d33a7eece4f7cca18ffd82a95 Author: Alexander Motin (Mon 9 Feb 2026 19:23:26 GMT) Committer: Alexander Motin (Tue 24 Feb 2026 21:43:36 GMT) ahci: Restrict NVMe redirection by BAR size Attempts to access vendor-specific registers on emulator of older Intel hardware was reported to confuse one. Since the redirection obviously require BAR size bigger than normal 2KB of AHCI, add the condition, similar to what Linux is doing. Requested by: kib MFC after: 2 weeks (cherry picked from commit b9d3945831fc7a60f2065c7a0afc747dc5653c9f) M sys/dev/ahci/ahci_pci.c ____________________________________________________________________________________________________________ Commit: 1eb2beb3686c50a870ed7688f753f89dd0f0ab3e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1eb2beb3686c50a870ed7688f753f89dd0f0ab3e Author: Mark Johnston (Mon 23 Feb 2026 15:52:50 GMT) Committer: Mark Johnston (Tue 24 Feb 2026 16:00:52 GMT) rtsock: Fix stack overflow Approved by: so Security: FreeBSD-SA-26:05.route Security: CVE-2026-3038 Fixes: 92be2847e845 ("rtsock: Avoid copying uninitialized padding bytes") (cherry picked from commit f3be7df50f01d9a6ead9f27b55bb4dfd7dc4f9d2) M sys/net/rtsock.c ____________________________________________________________________________________________________________ Commit: 1ce195ddf8a6f92da597b400905a233deffa2cf4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1ce195ddf8a6f92da597b400905a233deffa2cf4 Author: John Baldwin (Mon 2 Feb 2026 17:18:11 GMT) Committer: Cy Schubert (Tue 24 Feb 2026 03:17:35 GMT) heimdal: Pass the correct pointer to realloc when growing a string buffer The realloc in my_fgetln was trying to grow the pointer to the string buffer, not the string buffer itself. In function 'my_fgetln', inlined from 'mit_prop_dump' at crypto/heimdal/kdc/mit_dump.c:156:19: crypto/heimdal/kdc/mit_dump.c:119:13: error: 'realloc' called on unallocated object 'line' [-Werror=free-nonheap-object] 119 | n = realloc(buf, *sz + (*sz >> 1)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ crypto/heimdal/kdc/mit_dump.c: In function 'mit_prop_dump': crypto/heimdal/kdc/mit_dump.c:139:11: note: declared here 139 | char *line = NULL; | ^~~~ Reviewed by: rmacklem, cy Fixes: a93e1b731ae4 ("heimdal-kadmin: Add support for the -f dump option") Differential Revision: https://reviews.freebsd.org/D54933 (cherry picked from commit 03d8ac948b1ad9c419b294c3129b7da58d818363) M crypto/heimdal/kdc/mit_dump.c ____________________________________________________________________________________________________________ Commit: 51bb8e49cf7e0d6e42cbae980c3b57d8a71af07b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=51bb8e49cf7e0d6e42cbae980c3b57d8a71af07b Author: John Baldwin (Sat 31 Jan 2026 17:00:44 GMT) Committer: Cy Schubert (Tue 24 Feb 2026 03:17:34 GMT) heimdal: Pass the correct pointer to free in an error case This fixes a warning reported by GCC 14 on stable/14: crypto/heimdal/lib/hdb/keys.c:241:13: warning: 'free' called on pointer 'ext' with nonzero offset 16 [-Wfree-nonheap-object] 241 | free(hist_keys); | ^~~~~~~~~~~~~~~ crypto/heimdal/lib/hdb/keys.c:234:15: note: returned from 'calloc' 234 | ext = calloc(1, sizeof (*ext)); | ^~~~~~~~~~~~~~~~~~~~~~~~ Reviewed by: rmacklem, cy Fixes: 5000d023a446 ("heimdal-kadmin: Add support for the -f dump option") Differential Revision: https://reviews.freebsd.org/D54932 (cherry picked from commit b26a7af438f36dcde86f39a681123cc2140affb2) M crypto/heimdal/lib/hdb/keys.c ____________________________________________________________________________________________________________ Commit: 97b7f7325d8defd88a00ad82d1895b63bc84d0e6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=97b7f7325d8defd88a00ad82d1895b63bc84d0e6 Author: Siva Mahadevan (Thu 19 Feb 2026 17:37:44 GMT) Committer: Siva Mahadevan (Mon 23 Feb 2026 20:22:54 GMT) riscv: GENERIC: enable KERN_TLS This unskips 585 sys/kern/ktls_test testcases[0] in CI. All 585 tests currently pass. [0] https://ci.freebsd.org/view/Test/job/FreeBSD-main-riscv64-test/16514/testReport/sys.kern/ Approved by: emaste (mentor) MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55376 (cherry picked from commit 1e649491b8567151270095fda3bce8faea394952) M sys/riscv/conf/GENERIC ____________________________________________________________________________________________________________ Commit: 259506ff38863e084398766af198c5de813f9ce7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=259506ff38863e084398766af198c5de813f9ce7 Author: George V. Neville-Neil (Thu 8 Jan 2026 04:13:04 GMT) Committer: George V. Neville-Neil (Mon 23 Feb 2026 13:33:31 GMT) Extend the script to collect gprof data While we're at it, switch to simple waiting from communicate() calls. (cherry picked from commit e2bedc7d69926426a710d035df51e0a0812d38b1) M tools/test/hwpmc/pmctest.py ____________________________________________________________________________________________________________ Commit: 21b4ec51c215fb6aff5e29c33639b5095fcb022c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=21b4ec51c215fb6aff5e29c33639b5095fcb022c Author: George V. Neville-Neil (Tue 6 Jan 2026 08:55:14 GMT) Committer: George V. Neville-Neil (Mon 23 Feb 2026 13:33:31 GMT) Split counting from sampling. (cherry picked from commit 77153a491e3b31475f5faddb21271a0a8e0d4a9b) M tools/test/hwpmc/pmctest.py ____________________________________________________________________________________________________________ Commit: 329655d89d9fdb03eac1dc0fda0aae3de61c0b93 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=329655d89d9fdb03eac1dc0fda0aae3de61c0b93 Author: George V. Neville-Neil (Tue 6 Jan 2026 08:17:38 GMT) Committer: George V. Neville-Neil (Mon 23 Feb 2026 13:33:31 GMT) Correct the data collection arguments. Add proper tempdirs. (cherry picked from commit e018fedef0a6389240322da9fa4b9fa9971f6e59) M tools/test/hwpmc/pmctest.py ____________________________________________________________________________________________________________ Commit: 711ab199b51aae8fa4eaddfd6a3ff1e63205375b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=711ab199b51aae8fa4eaddfd6a3ff1e63205375b Author: George V. Neville-Neil (Mon 5 Jan 2026 12:30:22 GMT) Committer: George V. Neville-Neil (Mon 23 Feb 2026 13:33:31 GMT) Start adding an exercise mode for programs under test. In exercise mode we collect data for every available counter on a program and keep all of that in a directory in /tmp. (cherry picked from commit 4a1b69ade6b5e8665dfb4d0cb683854705192a68) M tools/test/hwpmc/pmctest.py ____________________________________________________________________________________________________________ Commit: 9f80b89c5a4ee66c9428f0d240899d77f442079f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9f80b89c5a4ee66c9428f0d240899d77f442079f Author: George V. Neville-Neil (Mon 5 Jan 2026 11:40:12 GMT) Committer: George V. Neville-Neil (Mon 23 Feb 2026 13:33:27 GMT) Convert fully to Python 3. Remove licence text, only keep SPDX. Update to use argparse rather than OptionParser (now deprecated). (cherry picked from commit eb1c0d74cbb99f329767b3d565ae57a3ec032bee) M tools/test/hwpmc/pmctest.py ____________________________________________________________________________________________________________ Commit: f0a6e0a8dcf5a49b9df1f5c9314cb2755c97f5e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f0a6e0a8dcf5a49b9df1f5c9314cb2755c97f5e5 Author: Eugene Grosbein (Sun 20 Jul 2025 11:36:33 BST) Committer: Eugene Grosbein (Mon 23 Feb 2026 07:09:24 GMT) trim(8): minor output correction "trim /dev/da*" would print the following line multiple times when given multiple agruments: dry run: add -f to actually perform the operation Print it once before looping over arguments. Also, note possible suffixes P and E after offset/length as per expand_number(3). (cherry picked from commit 5d5848648013a189fc766e4ee3a121362905b836) (cherry picked from commit f1b934c8138cfd98a70e305d54b2b431c842ec21) M usr.sbin/trim/trim.8 M usr.sbin/trim/trim.c ____________________________________________________________________________________________________________ Commit: 8df05ce54e12860111445e4ad98a791d4235be9e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8df05ce54e12860111445e4ad98a791d4235be9e Author: Eugene Grosbein (Mon 9 Feb 2026 09:47:01 GMT) Committer: Eugene Grosbein (Mon 23 Feb 2026 06:42:20 GMT) traceroute: MFC: graceful recover after networking errors with as_server Currently, the traceroute[6] utility does not check for possible networking errors while talking to as_server in case of "traceroute -a". Meantime, there is a common case when trace is long and it has many non-responding hops (shown as '* * *'), so as_server aborts our connection, hence no AS numbers shown for the rest of trace. Somewhat artifical way to reproduce the problem: traceroute to 57.144.244.1 (57.144.244.1), 80 hops max, 48 byte packets 5 [AS174] be2950.ccr42.fra05.atlas.cogentco.com (154.54.72.42) 74.277 ms 9.605 ms 9.599 ms 6 [AS174] 149.11.228.19 (149.11.228.19) 9.506 ms 9.466 ms 9.420 ms 7 [AS33182] po172.asw02.fra5.tfbnw.net (129.134.108.146) 9.725 ms 9.874 ms 9.696 ms 8 [AS32934] psw04.fra5.tfbnw.net (157.240.59.85) 8.718 ms 8.691 ms 8.618 ms 9 * * * 10 [AS0] edge-star-mini-shv-01-fra5.facebook.com (57.144.244.1) 9.747 ms 9.815 ms 9.699 ms Note what due to increased timeout (-w10) we get [AS0] for 10th hop because as_server closed our connection. Same problem occurs with default -w3 when there are lots of '* * *' hops in a trace. Fix it with some additional error checking and a reconnection. This patch was in my use for many years and after traceroute(8) moved from contrib/ to usr.sbin/ it's nice to have it in the tree. (cherry picked from commit 60a6ebaf73719ef7aa15768c3906626fb106b2b3) M usr.sbin/traceroute/as.c M usr.sbin/traceroute/as.h M usr.sbin/traceroute/traceroute.c M usr.sbin/traceroute6/traceroute6.c ____________________________________________________________________________________________________________ Commit: 64633a533e712882d86a1afbbe49ff7b8990f525 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=64633a533e712882d86a1afbbe49ff7b8990f525 Author: Anagh Verma (Tue 6 Jan 2026 07:42:56 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 20:23:16 GMT) kern_syscall_deregister: document syscall 0 no-op logic Document syscall #0 being handled specially in `kern_syscall_deregister(..)`: it's a reserved syscall and not dynamically registered, and hence does not need to be deregistered in the function. Co-authored-by: ngie@ MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D54326 (cherry picked from commit f384784289dba13b90138a89d3df3a8ea063aff9) M sys/kern/kern_syscalls.c ____________________________________________________________________________________________________________ Commit: b49d30adb87ba1442812e80efae1f9ab297f204b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b49d30adb87ba1442812e80efae1f9ab297f204b Author: Enji Cooper (Sun 8 Feb 2026 23:51:51 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 18:51:17 GMT) asmc: unbreak build: add missing curly brace Fixes: d76bb14e022 ("chore: asmc: additional style(9) cleanup") (cherry picked from commit 9ccdf3f36e014f0060ea192ffed91a7679003355) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 3b57acd89410235cce444948c2135e6fbfc9cb83 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3b57acd89410235cce444948c2135e6fbfc9cb83 Author: Gordon Bergling (Sun 8 Feb 2026 12:02:40 GMT) Committer: Gordon Bergling (Sun 22 Feb 2026 12:14:12 GMT) nfsserver: Fix a typo in a source code comment - s/preceeded/preceded/ (cherry picked from commit afe666a8db82c42fe0b8d55d3142c9d305d1bc28) M sys/fs/nfsserver/nfs_nfsdstate.c ____________________________________________________________________________________________________________ Commit: 01667ffeeba441b26cef27535f10ba5d488ba0ed URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=01667ffeeba441b26cef27535f10ba5d488ba0ed Author: Gordon Bergling (Sun 8 Feb 2026 11:58:39 GMT) Committer: Gordon Bergling (Sun 22 Feb 2026 12:13:29 GMT) arm/broadcom: Fix a typo in a source code comment - s/preceeded/preceded/ (cherry picked from commit 8aa4fa7bf9b36a873aa2fd3cc22e8e15b97ea81e) M sys/arm/broadcom/bcm2835/bcm2835_bsc.c ____________________________________________________________________________________________________________ Commit: bec15cbae4e9ec0abda7452af454b075674a8ccc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bec15cbae4e9ec0abda7452af454b075674a8ccc Author: Gordon Bergling (Sun 8 Feb 2026 11:59:37 GMT) Committer: Gordon Bergling (Sun 22 Feb 2026 12:12:44 GMT) kern: Fix a typo in a source code comment - s/segement/segment/ (cherry picked from commit f87ab066722f3ffb19885ed501a7a136355340a2) M sys/kern/imgact_elf.c ____________________________________________________________________________________________________________ Commit: 1bada46ec13c2dd899e0a29515a6e0db41d20c4f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1bada46ec13c2dd899e0a29515a6e0db41d20c4f Author: Gordon Bergling (Sun 8 Feb 2026 12:00:39 GMT) Committer: Gordon Bergling (Sun 22 Feb 2026 12:12:00 GMT) qlnxe(4): Fix a typo in a source code comment - s/segement/segment/ (cherry picked from commit ff08ad36c2acb3553b9f585a9bd01fd1306bfd7e) M sys/dev/qlnx/qlnxe/ecore_cxt.c ____________________________________________________________________________________________________________ Commit: a8947e2256b8420e8498ff89f8ea16a7b68bfec5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a8947e2256b8420e8498ff89f8ea16a7b68bfec5 Author: Gordon Bergling (Sun 8 Feb 2026 12:01:27 GMT) Committer: Gordon Bergling (Sun 22 Feb 2026 12:11:21 GMT) mlx(4): Fix a typo in a source code comment - s/segements/segments/ (cherry picked from commit 3e46676638ac089c71e8424961449895c0babcfb) M sys/dev/mlx4/mlx4_core/mlx4_main.c ____________________________________________________________________________________________________________ Commit: 1550f85824c23a135b1effc90fbfd6e67763eb7f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1550f85824c23a135b1effc90fbfd6e67763eb7f Author: Gordon Bergling (Sat 7 Feb 2026 05:20:16 GMT) Committer: Gordon Bergling (Sun 22 Feb 2026 12:10:42 GMT) libsa/geli: Fix a typo in an error message - s/crypo/crypto/ (cherry picked from commit fa567fe7c537950fe48e35fa3b0827af4a45ec57) M stand/libsa/geli/geliboot_crypto.c ____________________________________________________________________________________________________________ Commit: 14a7a135d7ac32670c3656ebcf1f56f28e29c8f5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=14a7a135d7ac32670c3656ebcf1f56f28e29c8f5 Author: Olivier Certner (Mon 12 Jan 2026 09:37:24 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 06:21:10 GMT) asmc(4): Stop building it on i386, as it supports only 64-bit chipsets Reported by: ngie Fixes: fde9fe18219f ("i386: Fix kernel compilation after introduction of ASMC_DEBUG option") Sponsored by: The FreeBSD Foundation (cherry picked from commit 8342d9f7b5f13d0623861cb8b88caf10a15571f6) M sys/conf/files.amd64 M sys/conf/files.x86 M sys/modules/Makefile ____________________________________________________________________________________________________________ Commit: 887f0f125fd1282c8054b402ad72af371a9f5dec URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=887f0f125fd1282c8054b402ad72af371a9f5dec Author: Enji Cooper (Sun 22 Feb 2026 05:17:40 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 05:17:40 GMT) Revert "GoogleTest: import 1.17.0" This reverts commit 227baf32d26360137492b108aba06c6a54c0949b. A contrib/googletest/.github/workflows/gtest-ci.yml M contrib/googletest/.gitignore A contrib/googletest/.travis.yml M contrib/googletest/BUILD.bazel M contrib/googletest/CMakeLists.txt M contrib/googletest/MODULE.bazel M contrib/googletest/README.md M contrib/googletest/WORKSPACE M contrib/googletest/ci/linux-presubmit.sh M contrib/googletest/ci/macos-presubmit.sh M contrib/googletest/ci/windows-presubmit.bat M contrib/googletest/docs/advanced.md M contrib/googletest/docs/faq.md M contrib/googletest/docs/gmock_cook_book.md M contrib/googletest/docs/primer.md M contrib/googletest/docs/quickstart-bazel.md M contrib/googletest/docs/reference/actions.md M contrib/googletest/docs/reference/assertions.md M contrib/googletest/docs/reference/matchers.md M contrib/googletest/docs/reference/testing.md M contrib/googletest/fake_fuchsia_sdk.bzl M contrib/googletest/googlemock/include/gmock/gmock-actions.h M contrib/googletest/googlemock/include/gmock/gmock-matchers.h M contrib/googletest/googlemock/include/gmock/gmock-more-actions.h M contrib/googletest/googlemock/include/gmock/gmock-spec-builders.h M contrib/googletest/googlemock/include/gmock/internal/gmock-internal-utils.h M contrib/googletest/googlemock/include/gmock/internal/gmock-port.h M contrib/googletest/googlemock/src/gmock-cardinalities.cc M contrib/googletest/googlemock/test/gmock-actions_test.cc M contrib/googletest/googlemock/test/gmock-function-mocker_test.cc M contrib/googletest/googlemock/test/gmock-matchers-arithmetic_test.cc M contrib/googletest/googlemock/test/gmock-matchers-comparisons_test.cc M contrib/googletest/googlemock/test/gmock-matchers-containers_test.cc M contrib/googletest/googlemock/test/gmock-matchers-misc_test.cc M contrib/googletest/googlemock/test/gmock-more-actions_test.cc M contrib/googletest/googlemock/test/gmock-pp_test.cc M contrib/googletest/googlemock/test/gmock-spec-builders_test.cc M contrib/googletest/googlemock/test/gmock_link_test.h M contrib/googletest/googletest/README.md M contrib/googletest/googletest/cmake/internal_utils.cmake M contrib/googletest/googletest/include/gtest/gtest-assertion-result.h M contrib/googletest/googletest/include/gtest/gtest-matchers.h M contrib/googletest/googletest/include/gtest/gtest-param-test.h M contrib/googletest/googletest/include/gtest/gtest-printers.h M contrib/googletest/googletest/include/gtest/gtest-typed-test.h M contrib/googletest/googletest/include/gtest/gtest.h M contrib/googletest/googletest/include/gtest/internal/gtest-internal.h M contrib/googletest/googletest/include/gtest/internal/gtest-param-util.h M contrib/googletest/googletest/include/gtest/internal/gtest-port.h M contrib/googletest/googletest/src/gtest-internal-inl.h M contrib/googletest/googletest/src/gtest.cc M contrib/googletest/googletest/test/BUILD.bazel M contrib/googletest/googletest/test/googletest-filter-unittest.py M contrib/googletest/googletest/test/googletest-json-output-unittest.py M contrib/googletest/googletest/test/googletest-param-test-test.cc M contrib/googletest/googletest/test/googletest-printers-test.cc M contrib/googletest/googletest/test/googletest-setuptestsuite-test_.cc M contrib/googletest/googletest/test/gtest_unittest.cc M contrib/googletest/googletest/test/gtest_xml_output_unittest.py M contrib/googletest/googletest/test/gtest_xml_output_unittest_.cc M contrib/googletest/googletest_deps.bzl ____________________________________________________________________________________________________________ Commit: d1a607d8f008e64928a0525353c43be4bf08f476 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d1a607d8f008e64928a0525353c43be4bf08f476 Author: Enji Cooper (Sun 22 Feb 2026 05:17:39 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 05:17:39 GMT) Revert "gtest.cc: declare fail_if_no_test_linked flag" This reverts commit 5a9164c4539dfea8e1120673b5da038c65b53958. M contrib/googletest/googletest/src/gtest.cc ____________________________________________________________________________________________________________ Commit: 1a0002e608ff799696247d98ef70d7874dc4e91b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1a0002e608ff799696247d98ef70d7874dc4e91b Author: Enji Cooper (Sun 22 Feb 2026 05:17:37 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 05:17:37 GMT) Revert "Bump CXXSTD to C++17 with GoogleTest tests" This reverts commit 1bebef5c953a007244e16a9ba58a10e6137442b8. M share/mk/googletest.test.inc.mk ____________________________________________________________________________________________________________ Commit: cc5c8b61ad1e2443efc4aaca232245de11c2ea5a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cc5c8b61ad1e2443efc4aaca232245de11c2ea5a Author: Enji Cooper (Sun 8 Feb 2026 23:40:56 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:37:14 GMT) t_ptrace_wait.c: clean up trailing whitespace This is being done to aid with future potential updates of this file. MFC after: 1 week (cherry picked from commit fa3519d068d95f87e773d27f96e9f1e18f70075a) M contrib/netbsd-tests/kernel/t_ptrace_wait.c ____________________________________________________________________________________________________________ Commit: 38917c4f5eabda8f20391b3d84e1cd12f0e5734d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=38917c4f5eabda8f20391b3d84e1cd12f0e5734d Author: Enji Cooper (Thu 1 Jan 2026 06:43:05 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:32:07 GMT) chore: asmc: minor code cleanup - Use symbolic names in Mac definitions in lieu of the unrolled values they represent. - Delete trailing whitespace. - Fix indentation. No functional change intended. MFC after: 1 week (cherry picked from commit a8f3c3b5d4d9dac1dafe4094fe35b30ffdf26178) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: dbeb51347afaf910d1962d263da7a0e54d6343f3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dbeb51347afaf910d1962d263da7a0e54d6343f3 Author: Hrant Dadivanyan (Sun 20 Apr 2025 16:07:34 BST) Committer: Enji Cooper (Sun 22 Feb 2026 04:31:33 GMT) asmc: Add support for macmini 6,1 and 6,2 (late 2012) models This adds the ASMC support for the macmini 6,1 and 6,2. PR: kern/268141 Differential Revision: https://reviews.freebsd.org/D49929 (cherry picked from commit 93ca9e44b752e6a9aeb0f761a022d14281d1a4e3) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h ____________________________________________________________________________________________________________ Commit: c20013933af90ed377497769bf66eaf276b5c6c2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c20013933af90ed377497769bf66eaf276b5c6c2 Author: Enji Cooper (Sun 8 Feb 2026 20:04:32 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:30:04 GMT) chore: asmc: additional style(9) cleanup Pick out non-gratuitous style(9) changes suggested by `clang-format` on the driver. This helps eliminate minor stylistic issues with spaces, braces, line lengths, etc, so future functional changes in the driver will be easier to pick out. Many of the other `clang-format` suggested changes were not taken because they were considerably more gratuitous. No functional change intended. MFC after: 1 week (cherry picked from commit d76bb14e0224e235209d8c07ec132d602b18648b) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: ab3eaa6ea29d846d3beb7dd90dbe0c7e0cea26c4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ab3eaa6ea29d846d3beb7dd90dbe0c7e0cea26c4 Author: Enji Cooper (Sun 4 Jan 2026 08:27:57 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:29:53 GMT) Add ASMC_DEBUG make option This allows folks to enable debug statements in asmc(4) using kernel configs via the `options ASMC_DEBUG` directive. While here, remove a duplicate `device vt_efifb` directive in `NOTES` as it's already handled in the `GENERIC` config MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54511 (cherry picked from commit f224591746bdaf14ad5f63de4738a3146cc2f55f) M sys/amd64/conf/NOTES M sys/conf/options.amd64 M sys/dev/asmc/asmc.c M sys/modules/asmc/Makefile ____________________________________________________________________________________________________________ Commit: a38f44fc83d07baf03947ac32b8c57cc7790b3b4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a38f44fc83d07baf03947ac32b8c57cc7790b3b4 Author: Enji Cooper (Thu 5 Feb 2026 04:38:31 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:19:49 GMT) Unbreak the build Add the missing comma in the `device_printf` statement. MFC after: 1 week MFC with: 9c666de5b Fixes: 9c666de5b ("Make message added for Darwin OSI quirk more terse") (cherry picked from commit cc702c78f70f972cf2f8ea008752d96df1989988) M sys/dev/acpica/acpi.c ____________________________________________________________________________________________________________ Commit: da481c5e3d9d6e420169ad9262b9358a5192e8d1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=da481c5e3d9d6e420169ad9262b9358a5192e8d1 Author: Enji Cooper (Thu 5 Feb 2026 02:57:22 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:19:49 GMT) Make message added for Darwin OSI quirk more terse The verbose message was way too verbose. Make it terse. MFC after: 1 week MFC with: 052a791b00 ("acpi: add Darwin OSI quirk for Apple Mac hardware") Requested by: kib (cherry picked from commit 9c666de5b339d3c8f9bf3963691e4310e7d159cb) M sys/dev/acpica/acpi.c ____________________________________________________________________________________________________________ Commit: 964c97aa80ec301478dead9b67f0a1fe18d5479b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=964c97aa80ec301478dead9b67f0a1fe18d5479b Author: Abdelkader Boudih (Tue 3 Feb 2026 01:43:00 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:19:49 GMT) acpi: add Darwin OSI quirk for Apple Mac hardware Mac firmware hides the Intel integrated GPU (iGPU) on dual GPU x86 systems, i.e., with AMD/NVIDIA dGPUs, when the Darwin OSI is not installed via ACPI. Prior to this change, FreeBSD always used the dGPU. This is fine in practice, but consumed more power than when the iGPU is used, resulting in reduced battery life. Linux handles this in `drivers/acpi/osi.c` by detecting Apple hardware via DMI, disabling all Windows OSI strings, and by explicitly installing the Darwin OSI ACPI handler. This change applies equivalent logic to the acpi(4) driver on FreeBSD. This feature can be enabled/disabled using the `hw.acpi.apple_darwin_osi` tunable. Setting this tunable to `0` restores the previous behavior by explicitly disabling the added support. Reviewed by: obiwac, ngie, adrian Differential Revision: https://reviews.freebsd.org/D54762 (cherry picked from commit 052a791b00555805f19ccc38a04d42d48b54104b) M sys/dev/acpica/acpi.c ____________________________________________________________________________________________________________ Commit: fca1e5d1ef1853a823825407223cc7ff7d85a111 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fca1e5d1ef1853a823825407223cc7ff7d85a111 Author: Enji Cooper (Sun 1 Feb 2026 17:12:44 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:09:49 GMT) Remove example tests when MK_EXAMPLES=no This change cleans up example tests for atf, googletest, plain, and TAP when MK_EXAMPLES=no. Not having this in results `kyua test -k /usr/tests/share/examples/Kyuafile` being broken on a host where the content in that directory tree is stale. I ran into that case because at some point in time in the past I had specified `MK_GOOGLETEST=no` one of my dev instances. MFC after: 1 week (cherry picked from commit cea2683bb691d6cbcfb7e342c497d018bba712c2) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 5c361eb2c0852b7a5fc59044c08f24db3cb9df52 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5c361eb2c0852b7a5fc59044c08f24db3cb9df52 Author: Enji Cooper (Sat 11 Oct 2025 21:45:20 BST) Committer: Enji Cooper (Sun 22 Feb 2026 04:08:44 GMT) openssl: add a simple smoke test for the legacy provider This change adds a simple smoke test for the legacy provider to ensure that the provider doesn't break in the future when performing updates. This is not a functional or system test; the OpenSSL test suite does a much better job at doing this than we can. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D53045 (cherry picked from commit 3b6442370a17c57c4c290b9a8e1e8328da820705) M etc/mtree/BSD.tests.dist M secure/lib/libcrypto/Makefile A secure/lib/libcrypto/tests/Makefile A secure/lib/libcrypto/tests/libcrypto_test.sh ____________________________________________________________________________________________________________ Commit: 75045de2ba9ceb5a0aac534f477e5e9fc49d3e2b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=75045de2ba9ceb5a0aac534f477e5e9fc49d3e2b Author: Abdelkader Boudih (Wed 14 Jan 2026 03:13:46 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:04:50 GMT) asmc: Add support for MacBookPro11,5 Add support for the MacBookPro11,5 (Mid 2015, 15-inch with AMD Radeon R9 M370X GPU) to the Apple SMC driver. Debug testing revealed this model lacks several SMC keys present on MacBookPro11,4 (IBLC, ICMC, IC2C), that model-specific sensor definitions. Differential Revision: https://reviews.freebsd.org/D54665 Reviewed by: adrian (cherry picked from commit c498eaa2f9090d7bdc6456181d8bf74869288bbb) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h ____________________________________________________________________________________________________________ Commit: f0d2b37997227cd580abadefbb1cd71fcaef9c6e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f0d2b37997227cd580abadefbb1cd71fcaef9c6e Author: Abdelkader Boudih (Mon 5 Jan 2026 18:03:23 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:04:06 GMT) asmc: add per-fan manual mode control via sysctl Add per-fan manual mode control via dev.asmc.0.fan.N.manual sysctl. Apple SMCs support manual fan control via the FS! SMC key, a 16-bit bitmask where each bit controls one fan (0=auto, 1=manual). This change adds a new sysctl per fan: dev.asmc.0.fan.N.manual (0=auto, 1=manual) When set to manual mode (1), the fan runs at the speed set via dev.asmc.0.fan.N.targetspeed instead of automatic thermal control. When set to auto mode (0), the SMC controls fan speed automatically. The FS! key was already defined in asmcvar.h but not accessible. This exposes it for debugging, testing, and advanced fan control. Implementation uses read-modify-write to allow independent control of each fan without affecting others. Reviewed by: adrian, markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D54437 (cherry picked from commit 1ecac45cfc5f0886907c34ec0da2c1b32618665d) M sys/dev/asmc/asmc.c ____________________________________________________________________________________________________________ Commit: 26f41f8e5ebee7faf2fb9a65baa18bb41ad63564 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=26f41f8e5ebee7faf2fb9a65baa18bb41ad63564 Author: Abdelkader Boudih (Sat 3 Jan 2026 18:33:11 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 04:04:06 GMT) asmc: improve asmc_dumpall to read actual SMC key count The asmc_dumpall debug function previously used a hardcoded loop limit of 0x100 (256) keys with a "XXX magic number" comment. This change improves asmc_dumpall to: * Read the actual number of keys from the ASMC_NKEYS SMC key * Print the key count being dumped for better debugging output * Loop only up to the actual key count (e.g., 297 on Mac Mini 5,1) This provides more accurate debug output and removes the magic number. Tested on Mac Mini 5,1 (FreeBSD 16.0-CURRENT): * Rebuild kernel with DEBUG enabled in asmc driver * Boot with new kernel * Verify dmesg shows "asmc_dumpall: dumping 297 keys" (or actual count) * Verify all 297 keys are dumped Differential Revision: https://reviews.freebsd.org/D54436 Reviewed by: markj, adrian (cherry picked from commit 2a7c4685b7693bfa15e2bd4d5e82905a368b0030) M sys/dev/asmc/asmc.c M sys/dev/asmc/asmcvar.h ____________________________________________________________________________________________________________ Commit: 1bebef5c953a007244e16a9ba58a10e6137442b8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1bebef5c953a007244e16a9ba58a10e6137442b8 Author: Enji Cooper (Sun 22 Feb 2026 03:51:59 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:53:27 GMT) Bump CXXSTD to C++17 with GoogleTest tests This change bumps the CXXSTD to C++17 with GoogleTest 1.17.0 requires C++17 to function and 6527682ab7058e5023a was never MFCed. This unbreaks the build on stable/14. This is a direct commit to stable/14. Fixes: 227baf32d ("GoogleTest: import 1.17.0") M share/mk/googletest.test.inc.mk ____________________________________________________________________________________________________________ Commit: 5a9164c4539dfea8e1120673b5da038c65b53958 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5a9164c4539dfea8e1120673b5da038c65b53958 Author: Enji Cooper (Thu 29 Jan 2026 01:22:42 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:45:57 GMT) gtest.cc: declare fail_if_no_test_linked flag Clang's -Wmissing-variable-declarations flags this as an issue since the flag is only used in `gtest.cc`. Declare the flag beforehand to ensure that the variable scope is properly limited to `gtest.cc`. MFC after: 1 week MFC with: 46333229c6a0187ebf231805682ee0bceed704d1 Ref: https://github.com/google/googletest/pull/4898 (cherry picked from commit 3926ae98adfe4b2f1dd957cab353ba7ca11ce709) M contrib/googletest/googletest/src/gtest.cc ____________________________________________________________________________________________________________ Commit: 227baf32d26360137492b108aba06c6a54c0949b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=227baf32d26360137492b108aba06c6a54c0949b Author: Enji Cooper (Thu 29 Jan 2026 01:24:01 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:45:57 GMT) GoogleTest: import 1.17.0 The changes between the two versions can be found in this diff of the two release tags: https://github.com/google/googletest/compare/v1.15.2...v1.17.0 One notable change is that GoogleTest 1.17.0 now requires C++-17 to build. MFC after: 1 week Merge commit '3a4c29b5bed4ea20266ad9371fbfdc6bca088f92' (cherry picked from commit 46333229c6a0187ebf231805682ee0bceed704d1) D contrib/googletest/.github/workflows/gtest-ci.yml M contrib/googletest/.gitignore D contrib/googletest/.travis.yml M contrib/googletest/BUILD.bazel M contrib/googletest/CMakeLists.txt M contrib/googletest/MODULE.bazel M contrib/googletest/README.md M contrib/googletest/WORKSPACE M contrib/googletest/ci/linux-presubmit.sh M contrib/googletest/ci/macos-presubmit.sh M contrib/googletest/ci/windows-presubmit.bat M contrib/googletest/docs/advanced.md M contrib/googletest/docs/faq.md M contrib/googletest/docs/gmock_cook_book.md M contrib/googletest/docs/primer.md M contrib/googletest/docs/quickstart-bazel.md M contrib/googletest/docs/reference/actions.md M contrib/googletest/docs/reference/assertions.md M contrib/googletest/docs/reference/matchers.md M contrib/googletest/docs/reference/testing.md M contrib/googletest/fake_fuchsia_sdk.bzl M contrib/googletest/googlemock/include/gmock/gmock-actions.h M contrib/googletest/googlemock/include/gmock/gmock-matchers.h M contrib/googletest/googlemock/include/gmock/gmock-more-actions.h M contrib/googletest/googlemock/include/gmock/gmock-spec-builders.h M contrib/googletest/googlemock/include/gmock/internal/gmock-internal-utils.h M contrib/googletest/googlemock/include/gmock/internal/gmock-port.h M contrib/googletest/googlemock/src/gmock-cardinalities.cc M contrib/googletest/googlemock/test/gmock-actions_test.cc M contrib/googletest/googlemock/test/gmock-function-mocker_test.cc M contrib/googletest/googlemock/test/gmock-matchers-arithmetic_test.cc M contrib/googletest/googlemock/test/gmock-matchers-comparisons_test.cc M contrib/googletest/googlemock/test/gmock-matchers-containers_test.cc M contrib/googletest/googlemock/test/gmock-matchers-misc_test.cc M contrib/googletest/googlemock/test/gmock-more-actions_test.cc M contrib/googletest/googlemock/test/gmock-pp_test.cc M contrib/googletest/googlemock/test/gmock-spec-builders_test.cc M contrib/googletest/googlemock/test/gmock_link_test.h M contrib/googletest/googletest/README.md M contrib/googletest/googletest/cmake/internal_utils.cmake M contrib/googletest/googletest/include/gtest/gtest-assertion-result.h M contrib/googletest/googletest/include/gtest/gtest-matchers.h M contrib/googletest/googletest/include/gtest/gtest-param-test.h M contrib/googletest/googletest/include/gtest/gtest-printers.h M contrib/googletest/googletest/include/gtest/gtest-typed-test.h M contrib/googletest/googletest/include/gtest/gtest.h M contrib/googletest/googletest/include/gtest/internal/gtest-internal.h M contrib/googletest/googletest/include/gtest/internal/gtest-param-util.h M contrib/googletest/googletest/include/gtest/internal/gtest-port.h M contrib/googletest/googletest/src/gtest-internal-inl.h M contrib/googletest/googletest/src/gtest.cc M contrib/googletest/googletest/test/BUILD.bazel M contrib/googletest/googletest/test/googletest-filter-unittest.py M contrib/googletest/googletest/test/googletest-json-output-unittest.py M contrib/googletest/googletest/test/googletest-param-test-test.cc M contrib/googletest/googletest/test/googletest-printers-test.cc M contrib/googletest/googletest/test/googletest-setuptestsuite-test_.cc M contrib/googletest/googletest/test/gtest_unittest.cc M contrib/googletest/googletest/test/gtest_xml_output_unittest.py M contrib/googletest/googletest/test/gtest_xml_output_unittest_.cc M contrib/googletest/googletest_deps.bzl ____________________________________________________________________________________________________________ Commit: c9aaf2032da826f704ed88460e44b71a4fa5c22e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c9aaf2032da826f704ed88460e44b71a4fa5c22e Author: Enji Cooper (Sat 31 Jan 2026 04:14:07 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:44:47 GMT) clang-format: adjust to sort C++ headers per style(9) Many standard C++ headers do not have the .h file extension: some, such as `iostream`, lack it; others have a .hpp file extension. Moreover, some projects (like ATF/Kyua) also contain .ipp files, which are C++ "interface" files. Relax the regular expression to ensure that non-traditional C "system" headers, C++ headers, etc, with angle brackets are sorted before "local" headers. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D54401 (cherry picked from commit ab9b04736945537743eb0624ead7a4fa4b960783) M .clang-format ____________________________________________________________________________________________________________ Commit: 2033efe8bd023bfdfe7b1354ea3f2151b2de864c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2033efe8bd023bfdfe7b1354ea3f2151b2de864c Author: Enji Cooper (Tue 3 Feb 2026 05:40:50 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:43:07 GMT) usr.bin/factor: remove tests when MK_GAMES=no factor(1) is only installed when MK_GAMES != no. Ergo, remove the tests when that's not true. MFC after: 1 week (cherry picked from commit 7baa76c30c833750007e8d8823c9f5d94f5b2925) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 3c69641a756c93888c6c30ab109f8816d7a965f8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3c69641a756c93888c6c30ab109f8816d7a965f8 Author: Enji Cooper (Tue 3 Feb 2026 05:44:47 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:40:16 GMT) usr.bin/tftp: remove tests when MK_TFTP=no These tests require the tftp client, which is not installed when `MK_TFTP=no`. Remove them when that's not true. MFC after: 1 week (cherry picked from commit e1f36b9db9220cf51c6c3d2d2ad230fb9490bc3e) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 05ce2ae289c7b8e2c04fb3d234a99a8e131a618a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=05ce2ae289c7b8e2c04fb3d234a99a8e131a618a Author: Enji Cooper (Tue 3 Feb 2026 05:24:33 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:40:16 GMT) tftpd: remove tests when MK_TFTP=no MFC after: 1 week (cherry picked from commit 1ccee516edb681b33182f0a57531752eb98ec838) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 68fd588532b855598c538e3858ae392022324a66 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=68fd588532b855598c538e3858ae392022324a66 Author: Enji Cooper (Tue 3 Feb 2026 05:12:25 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:38:26 GMT) Remove bsnmpd tests when MK_BSNMP == no MFC after: 1 week (cherry picked from commit 51509500acdc5d23285a962e9c55dd9e38d2b30a) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 02d896af3bca3e2bf0432ca751ed3d4ec1ee543b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=02d896af3bca3e2bf0432ca751ed3d4ec1ee543b Author: Enji Cooper (Sun 15 Feb 2026 18:26:52 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:35:31 GMT) t_create.sh: use `ATF_TESTS_SH_SED` & remove local mods This particular change replaces all local modifications to the test script like so: - Use `ATF_TESTS_SH_SED_test` with a sed(1) statement in the Makefile, instead of the equivalent local modifications. - Remove the need for expecting the output of newfs_msdos to be empty. There isn't much to gain from deviating from the upstream NetBSD test--it's just another local modification that would need to be carried forward. If it's worth testing this FreeBSD-specific behavior, it should be in a FreeBSD-specific test. This makes moving new modifications to the script easier moving forward. MFC after: 1 week (cherry picked from commit 411a566d565277e47c9644d19a5efa0fe5b00179) M contrib/netbsd-tests/sbin/newfs_msdos/t_create.sh M sbin/newfs_msdos/tests/Makefile ____________________________________________________________________________________________________________ Commit: d8cd8a45c5d839266b6e8f9efabc009d8e87d103 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d8cd8a45c5d839266b6e8f9efabc009d8e87d103 Author: Enji Cooper (Sun 15 Feb 2026 19:39:10 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:34:36 GMT) t_access.c: remove unnecessary local modification FreeBSD 11.x is no longer supported; there's no reason why the `FreeBSD_version__` check is still required (now). MFC after: 1 week (cherry picked from commit 35237ff9871478a92b34ced28a75487afd3562ff) M contrib/netbsd-tests/lib/libc/sys/t_access.c ____________________________________________________________________________________________________________ Commit: 175920c9d0f71bf9b7beb4854836e340c0c563da URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=175920c9d0f71bf9b7beb4854836e340c0c563da Author: Enji Cooper (Sun 15 Feb 2026 18:41:43 GMT) Committer: Enji Cooper (Sun 22 Feb 2026 03:34:11 GMT) libnetbsd: import the `__nothing` macro This macro is widely used in new NetBSD tests. Please see the comment next to the imported macro for more details on its use. Obtained from: NetBSD (c26cc77b3a0b2) MFC after: 1 week (cherry picked from commit faaeb6e62ae2f7371ac3ed37aae102f8e066a4b9) M lib/libnetbsd/sys/cdefs.h ____________________________________________________________________________________________________________ Commit: d982b7bd4ebfa483a8fa03411fa798add225e6f5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d982b7bd4ebfa483a8fa03411fa798add225e6f5 Author: Colin Percival (Sun 22 Feb 2026 00:33:27 GMT) Committer: Colin Percival (Sun 22 Feb 2026 00:36:45 GMT) pkg-stage.sh: Add emacs@nox and vim We have a bit of space left on the 14.4 DVDs; add packages for two editors, one of which is useful. Direct commit to stable/14: These packages were added to 15.0 but at the same time as removing kde, because shipping distribution sets *and* a pkgbase repository on 15 significantly cuts into the space available. On 14 we can keep kde and still add these packages. With hat: re MFC after: 3 days M release/scripts/pkg-stage.sh ____________________________________________________________________________________________________________ Commit: 8f8a9adb14c764d4fdfc6f43363a8f58451aec70 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8f8a9adb14c764d4fdfc6f43363a8f58451aec70 Author: Maxim Konovalov (Wed 11 Feb 2026 21:03:11 GMT) Committer: Dmitry Morozovsky (Sat 21 Feb 2026 10:50:37 GMT) pw.8: spell (cherry picked from commit 66797b469ee3e303c5e228bea1e244f433e666e1) M usr.sbin/pw/pw.8 ____________________________________________________________________________________________________________ Commit: 60043137c50c635a5ad25428d1d99d22fcd4d226 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=60043137c50c635a5ad25428d1d99d22fcd4d226 Author: Cy Schubert (Thu 8 Jan 2026 17:41:53 GMT) Committer: Cy Schubert (Fri 20 Feb 2026 02:24:08 GMT) ipfilter: Interface name must not extend beyond end of buffer sifpidx (an interface name) cannot extend beyond the end of the fr_names buffer. We do the validation for fr_sifpidx here because it is a union that contains an offset only when fr_sifpidx points to an interface name, an offset into fr_names. The union is an offset into fr_names in this case only. interr_tbl now becomes a static variable outside a function to facilitate its use by two functions within fil.c Note that sifpidx is only used in ipf_sync() which implments ipf -y. Reported by: Ilja Van Sprundel MFC after: 1 week (cherry picked from commit 47fb51847fdea3f1cce841b5f2bbbcd6f8a04ee0) M sys/netpfil/ipfilter/netinet/fil.c ____________________________________________________________________________________________________________ Commit: 53e1019c8494e560a4ea121ef9e0c4b3ff4ac016 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=53e1019c8494e560a4ea121ef9e0c4b3ff4ac016 Author: Cy Schubert (Wed 4 Feb 2026 17:27:23 GMT) Committer: Cy Schubert (Fri 20 Feb 2026 02:24:08 GMT) ipfilter: Fix possible overrun The destination buffer is FR_GROUPLEN (16 bytes) in length. When gname is created, the userspace utilities correctly use FR_GROUPLEN as the buffer length. The kernel should also limit its copy operation to FR_GROUPLEN bytes to avoid any user written code from exploiting this vulnerability. Reported by: Ilja Van Sprundel (cherry picked from commit e40817302ebdf89df2f3bcd679fb7f2a18c244dc) M sys/netpfil/ipfilter/netinet/fil.c ____________________________________________________________________________________________________________ Commit: 0a87ae18331d5c52dde1e5a4f13ee577e8e5e188 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0a87ae18331d5c52dde1e5a4f13ee577e8e5e188 Author: Timo Völker (Thu 19 Feb 2026 14:15:10 GMT) Committer: Michael Tuexen (Thu 19 Feb 2026 17:42:05 GMT) icmp6: clear csum_flags on mbuf reuse When icmp6 sends an ICMPv6 message, it reuses the mbuf of the packet that triggered the ICMPv6 message and prepends an IPv6 and ICMPv6 header. For a locally generated packet with checksum offloading, the mbuf still has csum_flags set indicating that a SCTP/TCP/UDP checksum has to be computed and inserted. Since this not the case anymore, csum_flags need to be cleared. PR: 293227 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293227 ) Reviewed by: kp, zlei, tuexen MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D55367 (cherry picked from commit ada4dc77577f7162353e8c2916ba5c258b6210f0) M sys/netinet6/icmp6.c ____________________________________________________________________________________________________________ Commit: 2c9398c5a976a4a5bfd32aeea39d589f809033e4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2c9398c5a976a4a5bfd32aeea39d589f809033e4 Author: Dag-Erling Smørgrav (Tue 17 Feb 2026 22:58:36 GMT) Committer: Dag-Erling Smørgrav (Thu 19 Feb 2026 13:46:03 GMT) OptionalObsoleteFiles: Add figpar to dialog section MFC after: 3 days Fixes: 15d781b53233 ("lib: Gate libfigpar under MK_DIALOG") Reviewed by: jhb, emaste Differential Revision: https://reviews.freebsd.org/D55330 (cherry picked from commit bc6c827078b7ab62271ce7ac1c4439b82fd2f98c) OptionalObsoleteFiles: Add missing figpar MLINKS MFC after: 3 days Fixes: bc6c827078b7 ("OptionalObsoleteFiles: Add figpar to dialog section") (cherry picked from commit efcfba9b31ad11ec901085c38b79e40289b9e7bc) OptionalObsoleteFiles: Add missing dpv MLINK MFC after: 3 days (cherry picked from commit 32ec8e29a6c3025a864f85678db63a8568c8fc86) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 45d84c2f06fa72e405f09e2468b10bdf10b806cf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=45d84c2f06fa72e405f09e2468b10bdf10b806cf Author: Baptiste Daroussin (Sat 14 Feb 2026 05:54:08 GMT) Committer: Baptiste Daroussin (Thu 19 Feb 2026 09:14:42 GMT) tr: fix class handling in unicode world toupper/tolower logic was only handled for CCLASS_TOUPPER and CCLASS_TOLOWER, add support for CCLASS ([:alpha:]) PR: 219900 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219900 ) MFC After: 1 week (cherry picked from commit 625dc44832cd760be3d7242d8e21a530c7e32bfc) M usr.bin/tr/tr.c ____________________________________________________________________________________________________________ Commit: 2f866e0547bd85e4fc66cf5468e8349931e365be URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2f866e0547bd85e4fc66cf5468e8349931e365be Author: Baptiste Daroussin (Tue 10 Feb 2026 13:38:37 GMT) Committer: Baptiste Daroussin (Thu 19 Feb 2026 09:14:42 GMT) usb_vendors: update to 2025.12.13 (cherry picked from commit 8d4c1043bb0630710cbea9f744cdaef499c0ed79) M share/misc/usb_vendors ____________________________________________________________________________________________________________ Commit: b28b6c6d33ac7a015c55184b162e060cedeed4f6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b28b6c6d33ac7a015c55184b162e060cedeed4f6 Author: Baptiste Daroussin (Tue 10 Feb 2026 13:33:11 GMT) Committer: Baptiste Daroussin (Thu 19 Feb 2026 09:14:41 GMT) pci_vendors: update to 2026-02-10 (cherry picked from commit 1acfc913e6b936dec3effc7d1e902a50e5432406) M share/misc/pci_vendors ____________________________________________________________________________________________________________ Commit: dae0d86844de55b3289c27baa3d32c7499ecefd4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dae0d86844de55b3289c27baa3d32c7499ecefd4 Author: Dmitry Morozovsky (Thu 12 Feb 2026 06:08:30 GMT) Committer: Dmitry Morozovsky (Thu 19 Feb 2026 07:30:04 GMT) committers-ports: add andy Following up ziaee's pattern, and add andy's line. I'm not sure whether the original commit bit creation date should be used, and use commit bit re-activation date for now. MFC after: 1 week (cherry picked from commit 0d9b5db9fc652e79e4eb08a2f583e9b825a50b92) M share/misc/committers-doc.dot ____________________________________________________________________________________________________________ Commit: 354cc5e142634afbc967ede56572b939fbdb5d38 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=354cc5e142634afbc967ede56572b939fbdb5d38 Author: Jessica Clarke (Wed 18 Feb 2026 18:45:26 GMT) Committer: Jessica Clarke (Wed 18 Feb 2026 18:48:46 GMT) Merge commit bfb276e55c76 from upstream OpenZFS (by Jessica Clarke) Once upon a time, 32-bit PowerPC did indeed have a 32-bit time_t, but FreeBSD 12.0 switched to a 64-bit time_t for PowerPC as an ABI break, which predates the addition of FreeBSD support to OpenZFS. Moreover, 64-bit PowerPC has existed since FreeBSD 9.0, where __powerpc__ is also defined (alongside __powerpc64__ to disambiguate), which has always had a 64-bit time_t. This code has therefore always been wrong for all PowerPC variants. Fix this by limiting the 32-bit case to just i386, which is the only architecture in FreeBSD to have a 32-bit time_t and not have broken ABI, due to its special legacy compatibility status. Reviewed-by: Brian Behlendorf Reviewed-by: Alexander Motin Signed-off-by: Jessica Clarke Closes #18217 Closes #18218 Reported by: fuz MFC after: 1 day (cherry picked from commit 45c1e44779e3d365f5e31f75546d48ce34e4ee05) M sys/contrib/openzfs/include/os/freebsd/spl/sys/time.h ____________________________________________________________________________________________________________ Commit: d97c824f5b4c9e7e3a1400699022cba146e450fa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d97c824f5b4c9e7e3a1400699022cba146e450fa Author: Dag-Erling Smørgrav (Wed 18 Feb 2026 15:10:47 GMT) Committer: Dag-Erling Smørgrav (Wed 18 Feb 2026 18:39:23 GMT) libfetch: Restore timeout functionality PR: 293124 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293124 ) MFC after: 1 week Fixes: 792ef1ae7b94 ("Refactor fetch_connect() and fetch_bind() to improve readability and avoid repeating the same DNS lookups.") Reverts: 8f8a7f6fffd7 ("libfetch: apply timeout to SSL_read()") Reviewed by: eugen, imp Differential Revision: https://reviews.freebsd.org/D55293 (cherry picked from commit 73b82d1b0a2f09224e6d0f7a13dd73c66d740207) (insta-mfc requested by re@) M lib/libfetch/common.c ____________________________________________________________________________________________________________ Commit: 4dc38e71ccd522bc5460f3ded3977baa35dad4b9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4dc38e71ccd522bc5460f3ded3977baa35dad4b9 Author: Gleb Smirnoff (Sat 23 Mar 2024 05:44:16 GMT) Committer: Pouria Mousavizadeh Tehrani (Wed 18 Feb 2026 17:45:18 GMT) ng_ksocket: use new macros to lock socket buffers PR: 292885 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292885 ) Reported by: Walker R. Thompson (cherry picked from commit 1a3d1be4965afddded0b2582b9c4969c1e6a4129) M sys/netgraph/ng_ksocket.c ____________________________________________________________________________________________________________ Commit: 8a2d04cf8c866ff3a6f358257d7aeeefbdd84455 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8a2d04cf8c866ff3a6f358257d7aeeefbdd84455 Author: Dmitry Morozovsky (Wed 11 Feb 2026 19:34:00 GMT) Committer: Dmitry Morozovsky (Wed 18 Feb 2026 09:47:48 GMT) pw: make manual page more friendly for uid/gid search pw.8 structure is quite different from usual manual page, especially in describing -o option usage. Specifically, these paragraphs do not contain "uid/gid" terms, and have "user id"/"group id" instead, making searching for "override duplicate safety belt" difficult. Try to simplify such searches. Also, clarify uid/gid space between 100 and 1000 as "somewhat special", as it actually is. Discussed on: russian telegram FreeBSD group Reviewed by: eugen, novel MFC after: 1 week (cherry picked from commit e89454417b2bfecce9daee10dece2f49632640d3) M usr.sbin/pw/pw.8 ____________________________________________________________________________________________________________ Commit: f10da155fafad0fc450f974e3ae1421d7f78f123 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f10da155fafad0fc450f974e3ae1421d7f78f123 Author: Dag-Erling Smørgrav (Fri 13 Feb 2026 20:18:30 GMT) Committer: Dag-Erling Smørgrav (Wed 18 Feb 2026 00:18:38 GMT) diff: Tweak recursion tests The -r flag is not required to compare two directories; it is only required to compare them recursively, i.e. descend into their common subdirectories. Adjust tests that use -r needlessly, and adjust the dirloop test to verify that these two cases remain distinct. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55262 (cherry picked from commit b2532432971fbd9339a9a49eca1b532978bb6d48) M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: ce4f512dc004bae5b4b9ec22b449c785e1bf5297 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ce4f512dc004bae5b4b9ec22b449c785e1bf5297 Author: Dag-Erling Smørgrav (Fri 13 Feb 2026 20:18:24 GMT) Committer: Dag-Erling Smørgrav (Wed 18 Feb 2026 00:18:37 GMT) diff: Tweak range of -C and -U arguments POSIX uses the terms “positive decimal integer” for -C and “non-negative decimal integer” for -U, which translates into lower bounds of 1 for -C and 0 for -U. POSIX does not specify a minimum upper bound for either mode, but as of 5fc739eb5949 both our backends support context sizes up to and including INT_MAX, so use that. Having had the opportunity to consult the Unix System Test Suite, the diff test cases found therein happen to precisely match these bounds. While here, switch to using strtonum() to parse numerical arguments, and try to be more consistent in how we report usage errors. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55261 (cherry picked from commit 790f1d1cc5fa892ba59fd7f239b22064c8ab14c7) M usr.bin/diff/diff.c M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: e5bf728058da2b9cdc056e49bd82b57310588b3e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e5bf728058da2b9cdc056e49bd82b57310588b3e Author: Dag-Erling Smørgrav (Fri 13 Feb 2026 15:57:50 GMT) Committer: Dag-Erling Smørgrav (Tue 17 Feb 2026 23:12:02 GMT) ngctl: Fix buffer overflow in config command Keep track of our buffer length when assembling the argument list. PR: 293075 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293075 ) MFC after: 1 week Reviewed by: zlei, markj Differential Revision: https://reviews.freebsd.org/D55259 (cherry picked from commit 59906a163e474c8d00bdebe226c4d47332b91bad) M usr.sbin/ngctl/config.c ____________________________________________________________________________________________________________ Commit: 71c0f48ab19fbac3d93e29d8964db2f215ddf722 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=71c0f48ab19fbac3d93e29d8964db2f215ddf722 Author: Dag-Erling Smørgrav (Fri 13 Feb 2026 15:57:46 GMT) Committer: Dag-Erling Smørgrav (Tue 17 Feb 2026 23:12:02 GMT) ngctl: Check hook name length Check the length of the hook name when copying it into the sockaddr. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55258 (cherry picked from commit 585190dff436eeea3be97300e36c82559028d3dd) M usr.sbin/ngctl/write.c ____________________________________________________________________________________________________________ Commit: 0280fef4ba5e3baeac7511deea50b91466a69e95 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0280fef4ba5e3baeac7511deea50b91466a69e95 Author: Vladimir Kondratyev (Tue 10 Feb 2026 22:59:06 GMT) Committer: Vladimir Kondratyev (Tue 17 Feb 2026 20:40:16 GMT) evdev: Drop comments from input-event-codes.h They were copied intact from the Linux GPL-only file. Requested by: imp, glebius MFC after: 1 week (cherry picked from commit 89aa8a94053fdd22ed716fdf424a2d10e70b3188) M sys/dev/evdev/input-event-codes.h ____________________________________________________________________________________________________________ Commit: 4291d770fd8a9190f06910a91fb6bd6e77ded9ef URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4291d770fd8a9190f06910a91fb6bd6e77ded9ef Author: Vladimir Kondratyev (Mon 1 Dec 2025 20:42:15 GMT) Committer: Vladimir Kondratyev (Tue 17 Feb 2026 20:40:09 GMT) evdev: Sync event codes with Linux kernel 6.18 MFC after: 1 month (cherry picked from commit 8d9a5d44b155af7123893a6948ad7e86b48c57b3) M sys/dev/evdev/input-event-codes.h M sys/dev/evdev/input.h ____________________________________________________________________________________________________________ Commit: b4c9b7d8c7eaf297981b6197f4d3f15631703e36 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b4c9b7d8c7eaf297981b6197f4d3f15631703e36 Author: Siva Mahadevan (Tue 15 Jul 2025 17:45:24 BST) Committer: Mark Johnston (Mon 16 Feb 2026 19:41:59 GMT) tests/mac_portacl: restore sysctls after modification While here, use 'required_kmods' instead of ad-hoc checks. Signed-off-by: Siva Mahadevan Reviewed by: markj MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull Request: https://github.com/freebsd/freebsd-src/pull/1855 (cherry picked from commit 170aac93479467334062813c1175a80200400b79) M tests/sys/mac/portacl/Makefile M tests/sys/mac/portacl/misc.sh M tests/sys/mac/portacl/nobody_test.sh M tests/sys/mac/portacl/root_test.sh ____________________________________________________________________________________________________________ Commit: 30aaec7a23cb580fe7a1e953340e8ae03d340f80 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=30aaec7a23cb580fe7a1e953340e8ae03d340f80 Author: Siva Mahadevan (Tue 15 Jul 2025 17:45:24 BST) Committer: Mark Johnston (Mon 16 Feb 2026 18:41:12 GMT) tests/mac_ipacl: restore sysctls after modification While here, use 'required_kmods' instead of ad-hoc checks. Signed-off-by: Siva Mahadevan Reviewed by: markj MFC after: 3 days Sponsored by: The FreeBSD Foundation Pull request: https://github.com/freebsd/freebsd-src/pull/1856 (cherry picked from commit 79042fd7ed4187d2a74e37618f6fd77f448ca353) M tests/sys/mac/ipacl/Makefile M tests/sys/mac/ipacl/ipacl_test.sh M tests/sys/mac/ipacl/utils.subr ____________________________________________________________________________________________________________ Commit: 21fe380f2d83fdbbebd3a97aff801476e24e4a16 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=21fe380f2d83fdbbebd3a97aff801476e24e4a16 Author: Mark Johnston (Mon 2 Feb 2026 14:57:49 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ip6_mroute: Fix the UPCALL_TIMING build MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. (cherry picked from commit 5bb953b095461b488b102ab3025f42cd2ef61f9d) M sys/netinet6/ip6_mroute.c ____________________________________________________________________________________________________________ Commit: 80e444f1f92670d88bad35e227427c19b98800bc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=80e444f1f92670d88bad35e227427c19b98800bc Author: Mark Johnston (Mon 2 Feb 2026 14:59:20 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ip6_mroute: Remove an unhelpful comment ifnets already track if_allmulti() calls in the if_amcount field. That field is older than the comment, so I'm not exactly sure what the intent was; let's just remove it. MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. (cherry picked from commit a45fb94801dffd414bdb1981def0e977ef0c774f) M sys/netinet6/ip6_mroute.c ____________________________________________________________________________________________________________ Commit: 20f81dcba99874bef290745e39abb53f94a8474f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=20f81dcba99874bef290745e39abb53f94a8474f Author: Mark Johnston (Mon 2 Feb 2026 14:57:20 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ip6_mroute: Make MF6CFIND a regular function This is more natural and corresponds more closely to the v4 multicast routing code. No functional change intended. Reviewed by: glebius MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54983 (cherry picked from commit b370fcc716b9cfd4d08e291f0009f02452c84d64) M sys/netinet6/ip6_mroute.c ____________________________________________________________________________________________________________ Commit: 2e8f0a46d391c43f22c8deaa88e2c03cf205b8a4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2e8f0a46d391c43f22c8deaa88e2c03cf205b8a4 Author: Mark Johnston (Mon 2 Feb 2026 14:53:35 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ip_mroute: Make privilege checking more consistent - The v6 socket option and ioctl handlers had no privilege checks at all. The socket options, I believe, can only be reached via a raw socket, but a jailed root user with a raw socket shouldn't be able to configure multicast routing in a non-VNET jail. The ioctls can only be used to fetch stats. - Delete a bogus comment in X_mrt_ioctl(), one can issue multicast routing ioctls against any socket. Note that the call path is soo_ioctl()->rtioctl_fib()->mrt_ioctl(). I think all of the mroute privilege checks should be done within the ip(6)_mroute code, but let's first make the v4 and v6 modules consistent. Reviewed by: glebius MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54982 (cherry picked from commit 74839871be363c5c2ac7ccd3396f36bdb58d19de) M sys/netinet/ip_mroute.c M sys/netinet6/ip6_mroute.c M sys/netinet6/raw_ip6.c ____________________________________________________________________________________________________________ Commit: 85250c12e509582048b4a80d10a996cee0eab3a2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=85250c12e509582048b4a80d10a996cee0eab3a2 Author: Mark Johnston (Mon 2 Feb 2026 14:58:38 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ip6_mroute: Remove an unused constant No functional change intended. MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. (cherry picked from commit b320e89e6909c0c3f29542976df0381990866988) M sys/netinet6/ip6_mroute.c ____________________________________________________________________________________________________________ Commit: cd784bf4d0010085cd029ed76d0a55b1c57a8e9e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cd784bf4d0010085cd029ed76d0a55b1c57a8e9e Author: Mark Johnston (Tue 27 Jan 2026 14:58:02 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ip_mroute: Convert to using a regular mutex The multicast routing code was using spin mutexes for packet counting, but there is no reason to use them instead of regular mutexes, given that none of this code runs in an interrupt context. Convert to using default mutexes. Reviewed by: glebius MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54603 (cherry picked from commit a265c8b4a5a7c8fdd33e27b8f74bd2a514f82c70) M sys/netinet/ip_mroute.c M sys/netinet/ip_mroute.h ____________________________________________________________________________________________________________ Commit: 289fadef716377b06f02988beaaa2d78aecb7bc6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=289fadef716377b06f02988beaaa2d78aecb7bc6 Author: Mark Johnston (Tue 27 Jan 2026 14:57:31 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) atf_python: Fix a typo in a type annotation No functional change intended. MFC after: 1 week Sponsored by: Stormshield Sponsored by: Klara, Inc. (cherry picked from commit ef389b7f581b2500c0e18c0989a54465712cd175) M tests/atf_python/atf_pytest.py ____________________________________________________________________________________________________________ Commit: 8845df6a4caa08a0ae52eedfcf177b1b53a1057a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8845df6a4caa08a0ae52eedfcf177b1b53a1057a Author: Mark Johnston (Mon 2 Feb 2026 14:52:43 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) atf_python: Run vnet handlers in $HOME When kyua runs a test, it creates a temp directory and sets $HOME to point to it. Tests are run with the cwd set to that temp directory. When a process attaches to a jail, its cwd is set to the root of the jail. Modify atf_python to cd to $HOME instead, so that it's easier for tests to share files. Reviewed by: zlei, ngie MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54971 (cherry picked from commit 07940d1d85eb338853fcba0697c6b9a96412a7f2) M tests/atf_python/sys/net/vnet.py ____________________________________________________________________________________________________________ Commit: 49dbd7670300e015a217ffb00a3110db5ef28c7d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=49dbd7670300e015a217ffb00a3110db5ef28c7d Author: Mark Johnston (Fri 30 Jan 2026 20:30:58 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) netstat: Fix whitespace in libxo output for multicast routes Also fix some bogus libxo format strings in mroute6.c, and close a couple of lists instead of opening them twice. Fixes: ade9ccfe211a ("Convert netstat to use libxo.") MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. (cherry picked from commit 34c3e1d718a86436f863b2ae8b91bcf406b37f0e) (cherry picked from commit d2b595debaf2ff82a402c9226a77cd43cc97bb50) M usr.bin/netstat/mroute.c M usr.bin/netstat/mroute6.c ____________________________________________________________________________________________________________ Commit: 0e0455aaa799a27bd359468cb32b6a390aebb144 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0e0455aaa799a27bd359468cb32b6a390aebb144 Author: Mark Johnston (Fri 30 Jan 2026 15:25:52 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ip6_mroute: Mark functions as static No functional change intended. MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. (cherry picked from commit a03eabfebbce15d8ce028168969812d3ca2be206) (cherry picked from commit ebc9a98c1b7d0a47359dae34509e1d9c02767a88) M sys/netinet6/ip6_mroute.c ____________________________________________________________________________________________________________ Commit: d4763c1fe5bcb803ad32645f6e316efce9e21571 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d4763c1fe5bcb803ad32645f6e316efce9e21571 Author: Mark Johnston (Wed 28 Jan 2026 16:11:47 GMT) Committer: Mark Johnston (Mon 16 Feb 2026 16:09:28 GMT) ifconfig: Exit with a non-zero status when SIOCSIFFIB fails Previously, setting an interface FIB to some invalid value would result in a warning being printed, but the ifconfig command would exit with status 0, but this is wrong. Add a little regression test. Reviewed by: pouria, zlei, melifaro MFC after: 2 weeks Sponsored by: Stormshield Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54918 (cherry picked from commit 2ea85a622bcba92a7b58901d6a6e945df3022c4e) M sbin/ifconfig/iffib.c M sbin/ifconfig/tests/Makefile A sbin/ifconfig/tests/ifconfig.sh ____________________________________________________________________________________________________________ Commit: 00095a089604aba93ef265fb0a52e170bcb77da7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=00095a089604aba93ef265fb0a52e170bcb77da7 Author: Konstantin Belousov (Mon 9 Feb 2026 03:11:15 GMT) Committer: Konstantin Belousov (Mon 16 Feb 2026 06:22:25 GMT) kern/vfs_unmount.c: promote flags to uint64_t (cherry picked from commit 8066b8923ebfd438dc8cb840d2f57066f4daa45d) M sys/compat/linux/linux_file.c M sys/kern/vfs_mount.c M sys/sys/syscallsubr.h ____________________________________________________________________________________________________________ Commit: a893e8463ab2741204debd17901539708ec3a970 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a893e8463ab2741204debd17901539708ec3a970 Author: Konstantin Belousov (Mon 2 Feb 2026 22:38:32 GMT) Committer: Konstantin Belousov (Mon 16 Feb 2026 06:20:18 GMT) unmount(2): do not allow MNT_DEFERRED or MNT_RECURSE flags from userspace (cherry picked from commit cd8d44173adc375b59a24b1363476c086a7c86b4) M sys/kern/vfs_mount.c ____________________________________________________________________________________________________________ Commit: cf941029dd0291c8b685aa3f6d7872371e6136b9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cf941029dd0291c8b685aa3f6d7872371e6136b9 Author: Konstantin Belousov (Fri 13 Feb 2026 15:32:40 GMT) Committer: Konstantin Belousov (Mon 16 Feb 2026 06:19:30 GMT) kqtimer_proc_continue(): correct calculation of 'now' PR: 293141 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293141 ) (cherry picked from commit e7f86f8b1383d278fff1d973230972325072ead6) M sys/kern/kern_event.c ____________________________________________________________________________________________________________ Commit: 119af90d483aee79bf549b3d63e1093bb59e1092 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=119af90d483aee79bf549b3d63e1093bb59e1092 Author: Konstantin Belousov (Thu 12 Feb 2026 20:24:13 GMT) Committer: Konstantin Belousov (Mon 16 Feb 2026 06:19:30 GMT) filt_timerexpire_l(): re-insert restarted timer into head instead of tail PR: 293141 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293141 ) (cherry picked from commit 75a30ea09f4e75480743fae5c2369d50a6d8526c) M sys/kern/kern_event.c ____________________________________________________________________________________________________________ Commit: 17da2d24b7af843739be6b3d9ce244f511cde2ee URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=17da2d24b7af843739be6b3d9ce244f511cde2ee Author: Alexander Ziaee (Thu 12 Feb 2026 14:14:47 GMT) Committer: Alexander Ziaee (Mon 16 Feb 2026 01:03:29 GMT) newsyslog.conf.5: Add a CAVEAT PR: 282639 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=282639 ) MFC after: 3 days (resolved merge conflicts) Reviewed by: michaelo Differential Revision: https://reviews.freebsd.org/D55122 (cherry picked from commit 64e612b46290617ec753b4ee6ec633a3724940e3) M usr.sbin/newsyslog/newsyslog.conf.5 ____________________________________________________________________________________________________________ Commit: cc35db95eb9ed1c62bb2eb7251e4c2ab67907d62 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cc35db95eb9ed1c62bb2eb7251e4c2ab67907d62 Author: Michael Osipov (Wed 28 Jan 2026 18:49:26 GMT) Committer: Michael Osipov (Sun 15 Feb 2026 11:08:12 GMT) daemon: Add option for output file mode The daemon utility has always created its output file with a fixed mode of 0600. This causes issues for log collection setups where the collector does not run as root but instead relies on group access to the watched daemon’s log file. Introduce a new option that allows specifying the output file mode using install(1)-style semantics. This enables non-root log collectors to access the file as intended and improves compatibility with log rotation tools. Reviewed by: kevans MFC after: 1 week Relnotes: yes Differential Revision: https://reviews.freebsd.org/D54930 (cherry picked from commit a3b90a1f008365d9f62773998f89f9c872e2bed5) M usr.sbin/daemon/daemon.8 M usr.sbin/daemon/daemon.c ____________________________________________________________________________________________________________ Commit: 0c5c50353026bd9d7dca862b6033bcc9cbd8cea1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0c5c50353026bd9d7dca862b6033bcc9cbd8cea1 Author: Dag-Erling Smørgrav (Wed 11 Feb 2026 16:24:54 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:35 GMT) diff: Improve directory loop detection When we're done processing a directory, remove its entry from the tree of visited inodes, ensuring that we only report a loop when we encounter a descendant-to-ancestor link, not when we encounter a cousin-to-cousin or sibling-to-sibling link. MFC after: 1 week Reported by: Bakul Shah Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55248 (cherry picked from commit 71569594d860a59d8362770a56d806e1d31fb946) M usr.bin/diff/diffdir.c M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: cd24bdb92c1012760016a32cf5eb29143808a18f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cd24bdb92c1012760016a32cf5eb29143808a18f Author: Dag-Erling Smørgrav (Wed 11 Feb 2026 16:24:50 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:35 GMT) install: Expect EINTR while copying Both copy_file_range() and read() / write() in our fallback loop can be interrupted before copying anything at all, in which case it returns -1 and sets errno to EINTR. If that happens, we should retry, not fail. While here, drop the size argument from copy() (we always want to copy the entire file anyway) and add test cases which exercise the metalog and digest functionality. PR: 293028 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293028 ) MFC after: 1 week Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55168 (cherry picked from commit 0fb940fd63dd9b6d6b848421c53b1e9ac8387265) M usr.bin/xinstall/tests/install_test.sh M usr.bin/xinstall/xinstall.c ____________________________________________________________________________________________________________ Commit: a9ac7da4c0c3907e21a5634a2338878eb9b33453 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a9ac7da4c0c3907e21a5634a2338878eb9b33453 Author: Dag-Erling Smørgrav (Wed 11 Feb 2026 16:24:46 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:34 GMT) cp: Expect EINTR while copying Both copy_file_range() and copy_fallback() can be interrupted before they have read anything at all, in which case they return -1 and set errno to EINTR. If that happens, we should retry, not fail. PR: 293028 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293028 ) MFC after: 1 week Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55167 (cherry picked from commit 7aa30669d6e04444b8ad1e4863a6e674fcac4afc) M bin/cp/utils.c ____________________________________________________________________________________________________________ Commit: 84090186db732c299fd58f45d1396df1ff866920 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=84090186db732c299fd58f45d1396df1ff866920 Author: Dag-Erling Smørgrav (Wed 11 Feb 2026 02:06:41 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:34 GMT) pwd: Error out if writing to stdout failed POSIX requires us to print a diagnostic and return a non-zero exit code if writing to stdout failed. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55227 (cherry picked from commit 5b398611607b0dab2f2550ef73f62d41dab6fac5) M bin/pwd/pwd.c M bin/pwd/tests/pwd_test.sh ____________________________________________________________________________________________________________ Commit: 11a22ea28ecf942c20db092ce99de34f2121f44a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=11a22ea28ecf942c20db092ce99de34f2121f44a Author: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:29:08 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:34 GMT) pwd: Add tests MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55153 (cherry picked from commit 36ec2b1c104f9e5383a160e21109e1308fce0364) M bin/pwd/Makefile A bin/pwd/tests/Makefile A bin/pwd/tests/pwd_test.sh M etc/mtree/BSD.tests.dist ____________________________________________________________________________________________________________ Commit: ae75d4bdc12bcdd30099bf35ce72f3452972b59f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ae75d4bdc12bcdd30099bf35ce72f3452972b59f Author: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:29:04 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:34 GMT) pwd: Clean up and adopt POSIX semantics According to POSIX, the default should be -L. Based on code history, whoever first wrote BSD pwd(1) could not figure out how to implement -L and therefore made -P the default (and only) option. Support for -L was later added, but the default was never changed. Clean up the code, make -L the default, and rewrite getcwd_logical() to reject paths that contain dot or dot-dot, as required by POSIX. MFC after: 1 week Reviewed by: olce Differential Revision: https://reviews.freebsd.org/D55146 (cherry picked from commit 2df923c5d2d02350abc29f61b603c5b9615b225c) M bin/pwd/pwd.1 M bin/pwd/pwd.c ____________________________________________________________________________________________________________ Commit: e661c4c4a3a3aef6645dee66e3c34859766b39be URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e661c4c4a3a3aef6645dee66e3c34859766b39be Author: Dag-Erling Smørgrav (Sat 7 Feb 2026 18:16:21 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:34 GMT) m4: Change defn processing order Currently, defn pushes its arguments on the stack in order, which means they are then processed in reverse order. POSIX does not specify what order they are processed in, which arguably suggests that they should be processed in the order they are listed. Push them in reverse order so they will be processed in their original order. This matches GNU m4. PR: 292937 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292937 ) MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: obiwac, imp Differential Revision: https://reviews.freebsd.org/D55116 (cherry picked from commit 25a8168f86a1222388475ce858da405e4d06c1c3) M usr.bin/m4/eval.c M usr.bin/m4/tests/Makefile A usr.bin/m4/tests/defn.m4 M usr.bin/m4/tests/m4_test.sh A usr.bin/m4/tests/regress.defn.out ____________________________________________________________________________________________________________ Commit: f207a5cf02264545d8a9a22ef85bb471aef99911 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f207a5cf02264545d8a9a22ef85bb471aef99911 Author: Dag-Erling Smørgrav (Sat 7 Feb 2026 18:16:17 GMT) Committer: Dag-Erling Smørgrav (Sun 15 Feb 2026 08:58:33 GMT) m4: Convert tests to ATF MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D55115 (cherry picked from commit 16e073df4a33646fa0e0fba5b41ddc6b44df3605) M ObsoleteFiles.inc M usr.bin/m4/tests/Makefile D usr.bin/m4/tests/legacy_test.sh A usr.bin/m4/tests/m4_test.sh A usr.bin/m4/tests/regress.gnuprefix.err M usr.bin/m4/tests/regress.gnuprefix.out A usr.bin/m4/tests/regress.gnusofterror.err M usr.bin/m4/tests/regress.gnusofterror.out A usr.bin/m4/tests/regress.quotes.err M usr.bin/m4/tests/regress.quotes.out D usr.bin/m4/tests/regress.sh ____________________________________________________________________________________________________________ Commit: 4cf6925e9a18cf0e21cf0d4e16b162cfd1f1a5e9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4cf6925e9a18cf0e21cf0d4e16b162cfd1f1a5e9 Author: Konstantin Belousov (Tue 20 Jan 2026 15:01:08 GMT) Committer: Konstantin Belousov (Fri 13 Feb 2026 18:19:36 GMT) ktrace: do not enqueue request if the process' ktrioparams are freed (cherry picked from commit 6bb3f208617b58a54e2204eb31bae3f9a86117a7) M sys/kern/kern_ktrace.c ____________________________________________________________________________________________________________ Commit: c44a4859c3c00aa87d5bead34d8646e13c86ea85 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c44a4859c3c00aa87d5bead34d8646e13c86ea85 Author: Dimitry Andric (Sun 7 Sep 2025 15:37:48 BST) Committer: Dag-Erling Smørgrav (Fri 13 Feb 2026 18:01:58 GMT) BSD.usr.dist: remove obsolete usr/share/examples/drivers entry In base 8f0a6a9aadb1f, usr/share/examples/drivers was cleaned up, because it contained unmaintained scripts. The directory itself is cleaned up by ObsoleteFiles.inc, but there was still an entry in BSD.usr.dist that re-created the directory. Remove it. Fixes: 8f0a6a9aadb1 MFC after: 3 days (cherry picked from commit ac2f284258e4c6d5867aa6a411bd44df349fe416) M etc/mtree/BSD.usr.dist ____________________________________________________________________________________________________________ Commit: c779717b6d09248f7f407364f088ed8b7382a00a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c779717b6d09248f7f407364f088ed8b7382a00a Author: John Hall (Thu 12 Feb 2026 22:00:01 GMT) Committer: John Hall (Thu 12 Feb 2026 22:00:01 GMT) RELNOTES: Add entry for 8accd4d99f81 M RELNOTES ____________________________________________________________________________________________________________ Commit: 8accd4d99f813f0a1e37f14dd0a9f9deb47e5fe7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8accd4d99f813f0a1e37f14dd0a9f9deb47e5fe7 Author: John Hall (Mon 2 Feb 2026 15:44:23 GMT) Committer: John Hall (Thu 12 Feb 2026 21:08:35 GMT) smartpqi: Update to vendor version 14.4690.0.2008 - 15.2.0.2008 Update to versions: FreeBSD14 14.4690.2008 FreeBSD15 15.2.0.2008 Included in this update are: - Support for new controllers - Add code that utilizes the new BIG_IOCTL_Command_struct and allows the I/O buffer size for a single passthrough ioctl to be stored as a 32 bit integer instead of the original 16 bit integer. - Update occurrences of Microsemi to Microchip - Some format changes including converting comments from C++ to C style, remove instances of /* $FreeBSD$ */, and updating copyright dates. Update to versions: FreeBSD14 14.4690.2008 FreeBSD15 15.2.0.2008 Included in this update are: - Support for new controllers _ Add code that utilizes the new BIG_IOCTL_Command_struct and allows the I/O buffer size for a single passthrough ioctl to be stored as a 32 bit integer instead of the original 16 bit integer. - Update occurrences of Microsemi to Microchip - Some format changes including converting comments from C++ to C style, remove instances of /* $FreeBSD$ */, and updating copyright dates. Reviewed by: imp Approved by: imp MFC after: 1 week Sponsored by: Microchip Technology Inc. Differential Revision: https://reviews.freebsd.org/D54787 (cherry picked from commit 7f54c65abc67f50363bbd2a68a980d23e69c9ef0) M sys/dev/smartpqi/smartpqi_cam.c M sys/dev/smartpqi/smartpqi_controllers.h M sys/dev/smartpqi/smartpqi_defines.h M sys/dev/smartpqi/smartpqi_event.c M sys/dev/smartpqi/smartpqi_features.c M sys/dev/smartpqi/smartpqi_helper.c M sys/dev/smartpqi/smartpqi_helper.h M sys/dev/smartpqi/smartpqi_includes.h M sys/dev/smartpqi/smartpqi_ioctl.c M sys/dev/smartpqi/smartpqi_ioctl.h M sys/dev/smartpqi/smartpqi_main.c M sys/dev/smartpqi/smartpqi_mem.c M sys/dev/smartpqi/smartpqi_prototypes.h M sys/dev/smartpqi/smartpqi_queue.c M sys/dev/smartpqi/smartpqi_request.c M sys/dev/smartpqi/smartpqi_tag.c ____________________________________________________________________________________________________________ Commit: c92c3852a9741a04d84a205eb457dd2af6b4a203 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c92c3852a9741a04d84a205eb457dd2af6b4a203 Author: Alexander Ziaee (Thu 30 Oct 2025 15:06:30 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:26:08 GMT) bhyve.8: Correct description for -c flag, tag spdx The examples only show the usage of `-c `, as did the flag description, however the -c flag supports more complex cpu topology specifiers. These were documented correctly in SYNOPSIS, add them to the body of the DESCRIPTION as well. Someone could go further and do and example with using them. MFC after: 3 days Event: OpenZFS Developer Summit '25 Reported by: Levi Worley (cherry picked from commit 205af037e302fbd50dabc485a89e2222cd063b9e) M usr.sbin/bhyve/bhyve.8 ____________________________________________________________________________________________________________ Commit: 8e02e1c37d8464816f807efd73d4c9284118bdee URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8e02e1c37d8464816f807efd73d4c9284118bdee Author: Alexander Ziaee (Tue 23 Dec 2025 14:35:37 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:15:28 GMT) udl.4: Consolidate HARDWARE and add HISTORY Some of the information needed for the HARDWARE section was the entire DESCRIPTION section, so merge the two. While here, add the HISTORY of this driver, add "driver" to the document description matching other drivers, and tag the SPDX license identifier for mechanical parsing. MFC after: 3 days (cherry picked from commit 97fa62708f67ce189bde22c98d9102da026b448c) M share/man/man4/udl.4 ____________________________________________________________________________________________________________ Commit: fdbaa2565596be10628f5ee9484599fd18b91c22 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fdbaa2565596be10628f5ee9484599fd18b91c22 Author: Rob Nichols (Tue 16 Dec 2025 03:26:26 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:15:10 GMT) jail.conf.5: Fix mandoc typos MFC after: 3 days Reviewed by: ziaee Signed-off-by: Rob Nichols Closes: https://github.com/freebsd/freebsd-src/pull/1928 (cherry picked from commit d1d88b6e8c31b1e472d66471ff1e666e5310709e) M usr.sbin/jail/jail.conf.5 ____________________________________________________________________________________________________________ Commit: c0523030a207a0f3917a0ca6db1d657bd1d25d8b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c0523030a207a0f3917a0ca6db1d657bd1d25d8b Author: Alexander Ziaee (Mon 29 Dec 2025 17:17:09 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:14:21 GMT) cpuctl.4: Formatting nits + Align ioctl list + Pad code examples + Tag spdx license identifier MFC after: 3 days (cherry picked from commit c6bd2aa8353c6c34dbff487132a7f7372752d0ad) M share/man/man4/cpuctl.4 ____________________________________________________________________________________________________________ Commit: 5cc6280205bbb1cf51adc8c905b820349c0aeef1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5cc6280205bbb1cf51adc8c905b820349c0aeef1 Author: Alexander Ziaee (Mon 29 Dec 2025 17:16:37 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:14:13 GMT) genet.4: Only for AArch64 + tag spdx MFC after: 3 days (cherry picked from commit c4bd487da73a28887f86750a5dc5832303592c5a) M share/man/man4/genet.4 ____________________________________________________________________________________________________________ Commit: a5ab42a46c803c5ec6404d0073cd93a3d362802d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a5ab42a46c803c5ec6404d0073cd93a3d362802d Author: Felix Johnson (Thu 5 Feb 2026 15:46:49 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:12:32 GMT) wpa_supplicant.conf.5: Remove removed variables 2005-09-25 - wpa_supplicant v0.4.5 removed "server_nai" 2008-02-22 - wpa_supplicant v0.6.3 removed "eappsk" and "nai" PR: 284126 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284126 ) MFC after: 3 days Reviewed by: carlavilla, ziaee Reported by: J.R. Oldroyd Differential Revision: https://reviews.freebsd.org/D49010 (cherry picked from commit c5ee920c3f35c5f0f485a7a274d87ebd91469892) M usr.sbin/wpa/wpa_supplicant/wpa_supplicant.conf.5 ____________________________________________________________________________________________________________ Commit: 0b71c76ff11e0ddd2aec8b39c1b91293464d9210 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0b71c76ff11e0ddd2aec8b39c1b91293464d9210 Author: Alexander Ziaee (Thu 5 Feb 2026 14:12:29 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:12:31 GMT) committers-ports: Belatedly add jwb PR: 292962 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292962 ) MFC after: 3 days (cherry picked from commit 8c40c7bb361f0c8b595bfee9dc6f8790e0eb6d68) M share/misc/committers-ports.dot ____________________________________________________________________________________________________________ Commit: b8d3541f146944355560de6832d40791d247d8cd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b8d3541f146944355560de6832d40791d247d8cd Author: Alexander Ziaee (Tue 6 Jan 2026 22:45:42 GMT) Committer: Alexander Ziaee (Thu 12 Feb 2026 05:12:24 GMT) pxeboot.8: Fix mdoc typo for emails, tag spdx Fixes: a37825313f62 (Fix mdoc typos for emails, tag spdx) MFC after: 3 days (cherry picked from commit 1961785e35484a89e49672c5ac7f9da6a7f56b3c) M stand/i386/pxeldr/pxeboot.8 ____________________________________________________________________________________________________________ Commit: 4781aeb5b9cb564a53fee8128f6827402deaf9df URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4781aeb5b9cb564a53fee8128f6827402deaf9df Author: Dag-Erling Smørgrav (Sat 7 Feb 2026 14:24:40 GMT) Committer: Dag-Erling Smørgrav (Wed 11 Feb 2026 13:54:41 GMT) libfetch: Check for failure to create SSL context * Drop the ssl_meth member, there is no reason to hang on to it. * Replace deprecated SSLv23_client_method() with TLS_client_method(). * Check the return value from SSL_CTX_new(). MFC after: 1 week PR: 292903 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292903 ) Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55098 (cherry picked from commit 4e160c6197f75fda3d5d5997ce893087058cf718) M lib/libfetch/common.c M lib/libfetch/common.h ____________________________________________________________________________________________________________ Commit: 87942d7f8fc58e8b4af90ec1050b263005c3d64e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=87942d7f8fc58e8b4af90ec1050b263005c3d64e Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:55 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:09 GMT) qlnxe: Overhaul setting the multicast MAC filters When operating the multicast MAC filters, the current usage of ECORE_FILTER_ADD and ECORE_FILTER_REMOVE are rather misleading. ECORE_FILTER_ADD reads "adding new filter", but it actually removes any existing filters and then addes a new one. ECORE_FILTER_REMOVE reads "removing a filter", but it actually removes all filters. Let's use ECORE_FILTER_REPLACE and ECORE_FILTER_FLUSH instead to avoid confusion. In the current implementation, only one MAC address is passed to ecore_sp_eth_filter_mcast() and any previously installed filters are removed, hence it breaks the multicast function. That can be observed via either assigning new IPv6 addresses to the interface or putting the interface as a member of lagg(4) interface with LACP aggregation protocol. Fix that by calculating the multicast filter bins directly from multicast MAC addresses and replace the filters every time the bins changes. Due to the nature of the multicast filter, which is hash based, a full 1's multicast filter bin means all multicast packets are to be accepted. Thus there's no need to make the vport into allmulti mode when the number of multicast MAC addresses exceeds the limit (ECORE_MAX_MC_ADDRS, 64). Tested with a FastLinQ QL41212HLCU 25GbE adapter, both MFW_Version 8.35.23.0 and 8.59.16.0 are tested. Note: Currently the VF port is set to promiscuous mode unconditionally, and the setting of the multicast MAC filters for VF ports is short-circuited, so the VF port functions as it did. PR: 265857 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265857 ) PR: 290973 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290973 ) Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54892 (cherry picked from commit 70256d2b86d95a678a63c65b157b9c635f1f4c6a) (cherry picked from commit 0cfc1145cdfc2a7beeeb7f39ad2722c7053681c0) M sys/dev/qlnx/qlnxe/ecore_l2.c M sys/dev/qlnx/qlnxe/ecore_l2_api.h M sys/dev/qlnx/qlnxe/ecore_vf.c M sys/dev/qlnx/qlnxe/qlnx_def.h M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: ddfe98e8ccb120a0a5c42b2288694ecd2b70c80c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ddfe98e8ccb120a0a5c42b2288694ecd2b70c80c Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:54 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:09 GMT) qlnxe: Allow tapping the TX packets Currently only the packets in the RX path can be captured by tcpdump as the ETHER_BPF_MTAP call in the TX path is missing. Add it so that packets in both directions can be captured. PR: 290973 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290973 ) Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54891 (cherry picked from commit 968647502ec21464ad3aecc7577ff0e8dfd41693) (cherry picked from commit 425b9cec0b8ce15a6e67d54a73f4f38dc66a4ccc) M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: 00ab0df79364f4567ad61f6a66eba1b2f0a7d507 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=00ab0df79364f4567ad61f6a66eba1b2f0a7d507 Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:54 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:08 GMT) qlnxe: Refactor setting the promiscuous and allmulti mode There are two entry points to set the promiscuous and allmulti mode. One is ioctl, and another is the init routine. Given they share almost the identical logic, refactor a little to make the code more clear. While here, for the ioctl, translate the error to EINVAL to avoid confusing the net stack. Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54890 (cherry picked from commit 45b1718fadae7d56051ba04ef9d7a175a602a226) (cherry picked from commit b8d2c1c367465506b66a1696483caec1d04b2ea0) M sys/dev/qlnx/qlnxe/qlnx_def.h M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: e1a051fd53a026ce6902c5d1df9d99e14e8675d1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e1a051fd53a026ce6902c5d1df9d99e14e8675d1 Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:54 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:08 GMT) qlnxev: Remove now unneeded include for opt_inet.h Since the change [1], this is not required anymore. This change partially reverts commit 8a847947153e. [1] 4012b63889e4 qlnxe: Let ether_ioctl() handle SIOCSIFADDR ioctl Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54889 (cherry picked from commit ec7950fe42344900567cb72c83845ea4dc5a7114) (cherry picked from commit 926e44b4983408dd8a4f5d7eb695de75b373548d) M sys/modules/qlnx/qlnxev/Makefile ____________________________________________________________________________________________________________ Commit: 20ffe22fcfe13b48a8e993cbf565f9cd9229a4b3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=20ffe22fcfe13b48a8e993cbf565f9cd9229a4b3 Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:54 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:08 GMT) qlnxe: Let ether_ioctl() handle SIOCSIFADDR ioctl Since the change [1], the init routine qlnx_init() works as intended. Let ether_ioctl() handle SIOCSIFADDR to simplify the code. Combined with the change [1], this shall be a better fix for PR 287445. [1] c10e6bc0f007 qlnxe: Avoid reinitializing the interface when it is already initialized PR: 287445 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287445 ) Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54888 (cherry picked from commit 4012b63889e40bb877bc0e4c8da1792bce472c08) (cherry picked from commit 0f383f74b7398161c12a290e50b060baf45d2800) M sys/dev/qlnx/qlnxe/qlnx_os.c M sys/modules/qlnx/qlnxe/Makefile ____________________________________________________________________________________________________________ Commit: ee6495580925b337f5851b6ee0f1188f81d7a6c8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ee6495580925b337f5851b6ee0f1188f81d7a6c8 Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:54 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:08 GMT) qlnxe: Avoid reinitializing the interface when it is already initialized qlnx_init_locked() unconditionally uninitialize the interface thus is actually reinitializing the interface. Well the init routine qlnx_init() is to initialize the interface by net stack when assigned with the first inet or inet6 address. The ioctl SIOCSIFADDR for the first inet6 address is handled by ether_ioctl() thus the interface is reinitialized no matter it was initialized or not. Add a driver status check for that to avoid reinitializing. Further plan is removing SIOCSIFADDR ioctl from the driver and let ether_ioctl() handle it. Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54887 (cherry picked from commit c10e6bc0f0079e90cb484323ad71d437f1882422) (cherry picked from commit 8731ff4871d5397bae65bf184c44629a52c0e97b) M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: 6e5b12acb66a9e269801b8d88c8f9838044d631c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6e5b12acb66a9e269801b8d88c8f9838044d631c Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:53 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:07 GMT) qlnxe: Prevent potential concurrency between ioctls The driver-managed status flags should be lock protected to be touched. Also this can serialize ioctls those check the IFF_DRV_RUNNING status. Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54886 (cherry picked from commit 0df8a998a9fe28af659cb401c537c6d785e55f81) (cherry picked from commit 285b25c080faf71c60de36e834ef31cf70e6b50d) M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: 93719f8c8348a5d13c9037352072ce67f530288b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=93719f8c8348a5d13c9037352072ce67f530288b Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:53 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:07 GMT) qlnxe: Fix setting the unicast MAC filter of RX path When an Ethernet interface is added to lagg(4) as a child interface, its type, aka if_type, is changed from IFT_ETHER to IFT_IEEE8023ADLAG. Well changing the link-layer address of the lagg(4) interface will be propagated to all child interfaces, hence the drivers of child interfaces shall not presume the type of the interface will not be changed. Meanwhile, on initializing, an ifnet has been fully attached and it is guaranteed to have non-null link-layer address so stop NULL checking for it. Reviewed by: kbowling Fixes: 792226e53023 qlnxe: Allow MAC address override MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54885 (cherry picked from commit f250852c9a0c1021c3be4b498e27cfc7b42a81db) (cherry picked from commit 6d138e958ffb318595eec29b910cada414e2f86d) M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: ea1143bddbc3671f49219a6b2a054965deea0c63 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ea1143bddbc3671f49219a6b2a054965deea0c63 Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:53 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:07 GMT) qlnxe: Avoid memcpy with same source and destination In case the device is VF, qlnx_get_mac_addr() returns ha->primary_mac hence it ends up memcpy with same source and destination. Refactor slightly to avoid that. Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54884 (cherry picked from commit 3aeeedc7e0dc231c16406ff64f4a08a716964c40) (cherry picked from commit 6462189595047800337aaf052e397d1aade3f9a7) M sys/dev/qlnx/qlnxe/qlnx_def.h M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: 7d7cee09b9a4ac5cbcbac79cb7ccfef5d6db1e0f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7d7cee09b9a4ac5cbcbac79cb7ccfef5d6db1e0f Author: Zhenlei Huang (Fri 6 Feb 2026 17:52:53 GMT) Committer: Zhenlei Huang (Wed 11 Feb 2026 13:48:07 GMT) qlnxe: Remove a pointless copy back from the link-layer address On ifnet attaching, ether_ifattach() makes the link-layer address by shadow copying the ha->primary_mac. Well, the link-layer address will not be altered during attaching, thus it is pointless to copy it back. No functional change intended. Reviewed by: kbowling MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54883 (cherry picked from commit 4ac3081b282800158df7abe93f307d76e1b5b808) (cherry picked from commit 23ffd1650cc431e762387d384ede99ae085bc130) M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: 721dfa7e5a34e04c463f5afec91df80ba755cdbc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=721dfa7e5a34e04c463f5afec91df80ba755cdbc Author: Colin Percival (Fri 6 Feb 2026 21:03:11 GMT) Committer: Colin Percival (Wed 11 Feb 2026 07:46:20 GMT) release: Turn off debugging in pkg(8) Running `pkg -d` in pkg-stage.sh results in multiple GB of network traffic being written into the log files, which is less than helpful when it comes to tracking down build failures. Remove the -d flag. MFC after: 5 days X-MFC-note: The code in 15 has diverged from 14, but the flag is there, just in a different place. (cherry picked from commit 18721be356043f6749a6e2470bc9f7351c450c6e) M release/scripts/pkg-stage.sh ____________________________________________________________________________________________________________ Commit: 37ceb8794c22d88a41e261d23d347bc7ac08b2c8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=37ceb8794c22d88a41e261d23d347bc7ac08b2c8 Author: Dag-Erling Smørgrav (Thu 5 Feb 2026 17:41:56 GMT) Committer: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:24:20 GMT) diff: Report I/O errors in Stone algorithm In the legacy Stone algorithm, we do a first pass over the files to check if they're identical before we start diffing them. That code would correctly set the exit status if an I/O error was encountered, but would not emit an error message. Do so. PR: 292198 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292198 ) MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: thj Differential Revision: https://reviews.freebsd.org/D55125 (cherry picked from commit f8c12e6e3874cdd353fb16785da6f4e7eb134cd9) M usr.bin/diff/diffreg.c ____________________________________________________________________________________________________________ Commit: b8bcf04d6dd37308834ee258230082ae6875b1f3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b8bcf04d6dd37308834ee258230082ae6875b1f3 Author: Dag-Erling Smørgrav (Thu 5 Feb 2026 16:21:22 GMT) Committer: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:24:19 GMT) diff: Correctly declare tests Sponsored by: Klara, Inc. Fixes: 5fc739eb5949 ("diff: Fix integer overflows in Stone algorithm") Fixes: 270492602b9b ("diff: Add test case for pagination resource leak") Fixes: 590126789c84 ("diff: Don't compare a file or directory to itself") (cherry picked from commit 157d6664aeb815db3b758bd3038fd1512a0f4e2c) M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: 7f412c6f88edc3aafb53a83f1743ad49da4679a9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7f412c6f88edc3aafb53a83f1743ad49da4679a9 Author: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:39:57 GMT) Committer: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:24:19 GMT) diff: Don't compare a file or directory to itself While here, stop abusing struct dirent for something we don't even need to store. PR: 254455 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254455 ) MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: thj, kevans Differential Revision: https://reviews.freebsd.org/D55113 (cherry picked from commit 590126789c841d80655869bc075c8980c173dd1c) diff: Fix build rc must be defined first. Fixes: 590126789c84 MFC after: 1 week X-MFC with: 590126789c84 (cherry picked from commit ee44ab936e84bacaa49847d36aabdf280f9fecce) M usr.bin/diff/diffdir.c M usr.bin/diff/diffreg.c M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: 144455c333dc0d3db369596038de2e3dd6113b46 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=144455c333dc0d3db369596038de2e3dd6113b46 Author: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:39:53 GMT) Committer: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:24:19 GMT) diff: Fix pagination leak * Drop an unnecessary variable and rename pidfd to procd. * Rewinding stdout serves no purpose, so stop doing it. * Don't bother freeing memory or setting the global status right before erroring out. * Error out if dup(2) or dup2(2) fail. * In the unlikely case that our pipe is equal to stdout, we need to record that information so we don't close it when cleaning up. * Don't bother closing a descriptor before dup2(2)ing to it. * Don't forget to close the the process descriptor after reaping the child process. PR: 266592 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=266592 ) MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: kevans, markj Differential Revision: https://reviews.freebsd.org/D55112 (cherry picked from commit c3904a7de78ca1ca15fcdf4c09f9d4be7f6fe6f5) M usr.bin/diff/pr.c M usr.bin/diff/pr.h M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: 51c2384ce049ec92e07901cf8a84c171e5d72104 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=51c2384ce049ec92e07901cf8a84c171e5d72104 Author: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:39:47 GMT) Committer: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:24:19 GMT) diff: Add test case for pagination resource leak The pagination code leaks either processes or descriptors or both, depending on the exact version of the code you have. Add a test case which exercises this leak to facilitate fixing it. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: thj, kevans Differential Revision: https://reviews.freebsd.org/D55111 (cherry picked from commit 270492602b9bd8b8fce4f021f055804978bf3f23) M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: 237fd8dd96979412dd65ce95032aa9957463d069 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=237fd8dd96979412dd65ce95032aa9957463d069 Author: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:39:43 GMT) Committer: Dag-Erling Smørgrav (Tue 10 Feb 2026 14:24:19 GMT) diff: Fix integer overflows in Stone algorithm Fix integer overflows that may occur when the context window is very large and add tests to exercise those conditions. PR: 267032 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=267032 ) MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: thj, kevans Differential Revision: https://reviews.freebsd.org/D55110 (cherry picked from commit 5fc739eb5949620da911db2f87ca8faedc549d3a) M usr.bin/diff/diffreg.c M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: 704ec5e68c44f08d83f3b0daa315c6143338863f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=704ec5e68c44f08d83f3b0daa315c6143338863f Author: Boris Lytochkin (Tue 10 Feb 2026 11:50:20 GMT) Committer: Andrey V. Elsukov (Tue 10 Feb 2026 11:50:20 GMT) ipfw: add ability to run ipfw(8) binary with 15.0+ kernel module After D46183 the KBI was changed and this made the upgrade procedure to 15.0+ version a bit difficult, because the old binary can not load firewall rules when the new kernel is loaded. This commit adds the sbin/ipfw15 binary that uses new KBI, and then original sbin/ipfw can detect new KBI and run the new binary instead. PR: 291562 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291562 ) Reviewed by: jhb, glebius Fixes: 4a77657cbc01 MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54763 M sbin/Makefile M sbin/ipfw/main.c A sbin/ipfw15/Makefile A sbin/ipfw15/Makefile.depend A sbin/ipfw15/altq.c A sbin/ipfw15/dummynet.c A sbin/ipfw15/include15/alias15.h A sbin/ipfw15/include15/netinet/ip_dummynet15.h A sbin/ipfw15/include15/netinet/ip_fw15.h A sbin/ipfw15/include15/netinet6/ip_fw_nat64_15.h A sbin/ipfw15/include15/netinet6/ip_fw_nptv6_15.h A sbin/ipfw15/ip_fw15.h A sbin/ipfw15/ipfw.8 A sbin/ipfw15/ipfw2.c A sbin/ipfw15/ipfw2.h A sbin/ipfw15/ipv6.c A sbin/ipfw15/main.c A sbin/ipfw15/nat.c A sbin/ipfw15/nat64clat.c A sbin/ipfw15/nat64lsn.c A sbin/ipfw15/nat64stl.c A sbin/ipfw15/nptv6.c A sbin/ipfw15/tables.c ____________________________________________________________________________________________________________ Commit: 30c04399f2e81b8e71045fc410837461abeb2d8b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=30c04399f2e81b8e71045fc410837461abeb2d8b Author: Jose Luis Duran (Tue 10 Feb 2026 02:05:42 GMT) Committer: Jose Luis Duran (Tue 10 Feb 2026 02:26:13 GMT) Adapt changes from blocklist 2026-02-07 (10a907f) Also apply the fix from PR 258411. This is a direct commit to stable/14, as blacklist has been renamed to blocklist upstream. M contrib/blocklist/bin/blacklistd.c M contrib/blocklist/bin/blacklistd.conf.5 M contrib/blocklist/bin/run.c M contrib/blocklist/bin/support.c M contrib/blocklist/port/popenve.c ____________________________________________________________________________________________________________ Commit: 302120bcb934ea150555362326c812353fb72eaa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=302120bcb934ea150555362326c812353fb72eaa Author: Mark Johnston (Wed 25 Jun 2025 13:50:50 BST) Committer: Mark Johnston (Mon 9 Feb 2026 20:19:12 GMT) amd64/conf: Remove a config committed by accident Reported by: kib, kp Fixes: 350ba9672a7f ("unix: Set O_RESOLVE_BENEATH on fds transferred between jails") (cherry picked from commit 3ef39f58e5d63a78fd1c37e6c62d599bc68d5e1e) D sys/amd64/conf/SYZKALLER ____________________________________________________________________________________________________________ Commit: 2f91ff89c56eb18c0979ba6050f66bfd50c9aef5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2f91ff89c56eb18c0979ba6050f66bfd50c9aef5 Author: Yogesh Bhosale (Sun 1 Feb 2026 17:27:36 GMT) Committer: Kevin Bowling (Mon 9 Feb 2026 06:57:05 GMT) ice(4): Handle allmulti flag in ice_if_promisc_set function In the ice_if_promisc_set function, the driver currently disables the IFF_ALLMULTI flag, thereby preventing the activation of multicast mode. To address this issue, implement appropriate handling to ensure the flag is managed correctly. Signed-off-by: Yogesh Bhosale Tested by: Gowthamkumar K S Differential Revision: https://reviews.freebsd.org/D54186 (cherry picked from commit 98bdf63f6e94be42a1787de73608de15bcb3419a) M sys/dev/ice/if_ice_iflib.c ____________________________________________________________________________________________________________ Commit: cd8a5000b398b022f044cf8811131ca7d4187fd6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cd8a5000b398b022f044cf8811131ca7d4187fd6 Author: Colin Percival (Sun 2 Nov 2025 04:22:26 GMT) Committer: Colin Percival (Mon 9 Feb 2026 01:30:16 GMT) Makefile.incl1: .WAIT before distribute in etc In order to make sure that man pages are all installed before we run makewhatis to generate mandoc.db files, we have long placed etc at the end of the list of subdirectories being recursed into by the build. In order to support installworld -jN, a .WAIT was more recently added here. With the recent adoption by the release engineering team of parallel *release* builds (aka 'make release -jN') it is now also necessary to add the same .WAIT before recursing for the 'distribute' target, as we otherwise end up with distribution sets containing incomplete mandoc.db files. Reviewed by: bdrewery PR: 289683 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289683 ) MFC after: 3 days Sponsored by: https://www.patreon.com/cperciva Differential Revision: https://reviews.freebsd.org/D53533 (cherry picked from commit dcb6706ba494f34e2a2ce97e5c5f2867b9e1f5ef) M Makefile.inc1 ____________________________________________________________________________________________________________ Commit: 1dd5b197b72357dfe50d6da2c9cb5b34bf4bf64b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1dd5b197b72357dfe50d6da2c9cb5b34bf4bf64b Author: Colin Percival (Sun 8 Feb 2026 00:42:03 GMT) Committer: Colin Percival (Sun 8 Feb 2026 20:24:17 GMT) uart: Add ns8250 ACPI entry for SPCR rev 2 This is an MFC "in spirit" of a685a263b803; the code in this area has been significantly restructured between 14.x and 15.x, but the general concept of adding ACPI_DBG2_16550_WITH_GAS (aka 0x12) as a recognized flavour of ns8250 UART which can be configured via SPCR remains. Reviewed by: imp Tested by: David Woodhouse Sponsored by: Amazon Differential Revision: https://reviews.freebsd.org/D55173 M sys/dev/uart/uart_dev_ns8250.c ____________________________________________________________________________________________________________ Commit: fadcbc631eea172e64328fb1a12b843e4d6eb821 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fadcbc631eea172e64328fb1a12b843e4d6eb821 Author: kitkat1424 (Wed 31 Dec 2025 19:41:08 GMT) Committer: Warner Losh (Sun 8 Feb 2026 16:50:11 GMT) loader.efi(8): clarify UEFI boot path and boot1.efi usage Reorganise and clarify the legacy role of boot1.efi in DESCRIPTION to improve clarity. Add a minor missing word in the BUGS section ["...caution is required*..."]. See also - PR: 290794 Signed-off-by: Aaditya Singh Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/1939 (cherry picked from commit 7b3fb3caef9495cdfcc1c8ec39907defb65ce860) M stand/man/loader.efi.8 ____________________________________________________________________________________________________________ Commit: b043ee53a64381f818ec3098bbe8659fda30462c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b043ee53a64381f818ec3098bbe8659fda30462c Author: Wolfram Schneider (Mon 19 Jan 2026 10:47:53 GMT) Committer: Wolfram Schneider (Sun 8 Feb 2026 14:12:10 GMT) symlink.7: add a new section "mount options" Add a new section "mount options" to explain the mount option nosymfollow in more details. Differential Revision: https://reviews.freebsd.org/D54530 (cherry picked from commit a2c87d4f88e1bfe3b7007fa7148ebc7d37fc54cc) M bin/ln/symlink.7 ____________________________________________________________________________________________________________ Commit: 03c8e3e77114530f61e0dd9f2b1757eeea033d0e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=03c8e3e77114530f61e0dd9f2b1757eeea033d0e Author: Michael Osipov (Fri 26 Dec 2025 17:27:12 GMT) Committer: Michael Osipov (Sat 7 Feb 2026 12:17:08 GMT) sockstat: Surround explicit IPv6 addresses with brackets PR: 254611 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254611 ) Approved by: otis, tuexen, des MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54375 (cherry picked from commit fe81e3944c085e765c83c4f78941d7529ceb556e) M usr.bin/sockstat/sockstat.c ____________________________________________________________________________________________________________ Commit: 625ed651833e76a439a7010aa28c93bc83013168 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=625ed651833e76a439a7010aa28c93bc83013168 Author: Bojan Novković (Mon 2 Feb 2026 10:13:12 GMT) Committer: Bojan Novković (Fri 6 Feb 2026 15:19:30 GMT) pmc: Import Intel Granite Rapids events Reviewed by: mhorne Sponsored by: Klara, Inc. Obtained from: Intel perfmon (JSON event definitions) Differential Revision: https://reviews.freebsd.org/D55081 MFC after: 2 days (cherry picked from commit a3ff85e11925ba1e25465c8ba633356f405f9214) A lib/libpmc/pmu-events/arch/x86/graniterapids/cache.json A lib/libpmc/pmu-events/arch/x86/graniterapids/floating-point.json A lib/libpmc/pmu-events/arch/x86/graniterapids/frontend.json A lib/libpmc/pmu-events/arch/x86/graniterapids/memory.json A lib/libpmc/pmu-events/arch/x86/graniterapids/other.json A lib/libpmc/pmu-events/arch/x86/graniterapids/pipeline.json A lib/libpmc/pmu-events/arch/x86/graniterapids/uncore-cache.json A lib/libpmc/pmu-events/arch/x86/graniterapids/uncore-cxl.json A lib/libpmc/pmu-events/arch/x86/graniterapids/uncore-interconnect.json A lib/libpmc/pmu-events/arch/x86/graniterapids/uncore-io.json A lib/libpmc/pmu-events/arch/x86/graniterapids/uncore-memory.json A lib/libpmc/pmu-events/arch/x86/graniterapids/uncore-power.json A lib/libpmc/pmu-events/arch/x86/graniterapids/virtual-memory.json M lib/libpmc/pmu-events/arch/x86/mapfile.csv M sys/dev/hwpmc/hwpmc_intel.c M sys/sys/pmc.h ____________________________________________________________________________________________________________ Commit: d7207388cc58243bd4a3cf69a24dd1e0054f10d3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d7207388cc58243bd4a3cf69a24dd1e0054f10d3 Author: Alexander Ziaee (Tue 13 May 2025 01:37:38 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:41:39 GMT) cxgbetool.8: Fix some minor mechanical issues + Tag SPDX + Macros should not appear in titles, write a hopefully better title + Nm needs to be on it's own line in SYNOPSIS, fold it so this page does not appear in unrelated search results (test case `apropos fw`) + Remove Ns's that do nothing and generate linter errors + Move list initializers to where they render, correcting linter errors Unresolved: This page produces an error when rendered due to the macros table. I don't know how to fix that yet, but I'm interested in learning! Reviewed by: mhorne Approved by: mhorne (mentor) Differential Revision: https://reviews.freebsd.org/D50320 (cherry picked from commit 8f25fac9ce2339ab5599e3af0ef7c6a1ea098aab) M usr.sbin/cxgbetool/cxgbetool.8 ____________________________________________________________________________________________________________ Commit: fe2e293a4c4fdf14d7b815ee28529efaeb29f70e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fe2e293a4c4fdf14d7b815ee28529efaeb29f70e Author: Artem Bunichev (Thu 24 Jul 2025 21:03:34 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:39:37 GMT) top.1: Fix incorrect default value for -s option The default delay between screen updates was incorrectly transfered from roff(7) register that was used in previous version of man page. Reviewed by: ziaee Fixes: 9d6cce02a78c (initial pass to freebsdize) Differential Revision: https://reviews.freebsd.org/D51503 (cherry picked from commit 6a41fd466701db71da443e1b87b31d463d99d056) M usr.bin/top/top.1 ____________________________________________________________________________________________________________ Commit: 42bbc08948fddc9982ab34531298f504471eb7c1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=42bbc08948fddc9982ab34531298f504471eb7c1 Author: Alexander Ziaee (Tue 22 Jul 2025 21:02:14 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:39:08 GMT) efitable.8: Nits + tag spdx + uncapitalize beginning of Nd, these should not be capitalized + add bars to show that long options XOR short options + remove stray paragraph marker for linter complaints (cherry picked from commit 65e8951711934cbb2fa1d0d836705c59770039c0) M usr.sbin/efitable/efitable.8 ____________________________________________________________________________________________________________ Commit: 33cc7492d0440c37f6034dc24ed77e23ee14fc55 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=33cc7492d0440c37f6034dc24ed77e23ee14fc55 Author: Alexander Ziaee (Fri 22 Aug 2025 21:12:43 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:38:20 GMT) watch.8: Align option list (cherry picked from commit 9187f64a74698736a5686971b3cfbcb226cb098c) M usr.sbin/watch/watch.8 ____________________________________________________________________________________________________________ Commit: 9b5fbee391685effc9828e74535532f6beb31145 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9b5fbee391685effc9828e74535532f6beb31145 Author: Alexander Ziaee (Wed 27 Aug 2025 17:17:42 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:34:53 GMT) uuidgen.1: Correct SYNOPSIS, alphabetize options Group options that can be used together accordingly in SYNOPSIS. While here, tag SPDX and fix a parenthetical typo in EXAMPLES. MFC after: 3 days (cherry picked from commit abed9ab6eaad625ab9059d9799694876a4ae5b07) M bin/uuidgen/uuidgen.1 ____________________________________________________________________________________________________________ Commit: e3009524178c73831495bb97b4c284b69b0916e8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e3009524178c73831495bb97b4c284b69b0916e8 Author: Fernando Apesteguía (Thu 7 Sep 2023 16:17:38 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:34:36 GMT) uuidgen(1): Add EXAMPLES to manual page Approved by: manpages@ (gbe@) Reviewed by: gbe@, pauamma Differential Revision: https://reviews.freebsd.org/D43494 (cherry picked from commit 6e74b603fc021761c0a20e08f58b674f45ad5f04) M bin/uuidgen/uuidgen.1 ____________________________________________________________________________________________________________ Commit: 090fd9fd3975fc7b1ff97ebd3caf2a21683fb877 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=090fd9fd3975fc7b1ff97ebd3caf2a21683fb877 Author: Alexander Ziaee (Tue 9 Sep 2025 18:06:29 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:32:44 GMT) rmuser.sh: Improve prompt consistency with adduser While here, improve userlist error message. PR: 289399 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289399 ) MFC after: 3 days Reviewed by: kbowling, rgrimes Approved by: kbowling, rgrimes (src) Reported by: michaeldexter, rgrimes Differential Revision: https://reviews.freebsd.org/D52464 (cherry picked from commit fc68f8aac623b5494484adfa41ac600415609870) M usr.sbin/adduser/rmuser.sh ____________________________________________________________________________________________________________ Commit: f763f12ed5eba2c95385dd2f93fc47a66dfa927c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f763f12ed5eba2c95385dd2f93fc47a66dfa927c Author: Alexander Ziaee (Mon 29 Sep 2025 18:31:38 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:31:23 GMT) mandoc: Vendor import of upstream at 2025-09-26 Interesting changes: + mandoc db: Improve case sorting, found by our very own markj + history: Add macros for version 8 and 10 AT&T Unix + linter: Warn on blank lines in man(7) like mdoc(7) + manuals: Improve precision, man(7) syntax table, and roff(7) specifics + manuals: Fix PDF/PS footer regression detailed in our PR: 289786 PR: 289786 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289786 ) MFC after: 3 days (cherry picked from commit 59fc2b0166f71c791113379d16b8cef7039f289d) M contrib/mandoc/Makefile M contrib/mandoc/dba.c M contrib/mandoc/main.c M contrib/mandoc/man.c M contrib/mandoc/man.options.1 M contrib/mandoc/mandoc.1 M contrib/mandoc/mdoc.7 M contrib/mandoc/roff_term.c M contrib/mandoc/term_ps.c ____________________________________________________________________________________________________________ Commit: 0d066d21668172aa7fc9bc38f9a0725ae31f0deb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0d066d21668172aa7fc9bc38f9a0725ae31f0deb Author: Ingo Schwarze (Mon 25 Aug 2025 23:58:48 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:31:06 GMT) mandoc: Improve width calculation for GCC compat Avoid implicitly converting a potentially negative page offset to size_t and then back to int. While this was not a bug and the end result was portably correct, Alexander Ziaee@ privately reported to me that the GCC 14 in the FreeBSD Jenkins CI felt uneasy about it. For clarity and readability, rewrite the truncation statement to not mix signed and unsigned types, to not use explicit casts, and make handling of the lower and upper cutoff more similar to each other. Fixes: 6410c1b51637 (mandoc: vendor import of upstream at 2025-07-27) MFC after: 3 days Reported by: ivy Reviewed by: ivy Differential Revision: https://reviews.freebsd.org/D52127 (cherry picked from commit 93bc3d83a11a1dbebd264616d63af3dd32cc1c8c) M contrib/mandoc/roff_term.c ____________________________________________________________________________________________________________ Commit: a1f4ccd6c79470eb0180f4d9a012b24c267d2574 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a1f4ccd6c79470eb0180f4d9a012b24c267d2574 Author: Alexander Ziaee (Fri 15 Aug 2025 20:03:22 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:30:48 GMT) mandoc: Vendor import of upstream at 2025-07-27 Groff Compat Edition -- Interesting changes: + italics in section/subsection headers are now also bold, like groff + display "LOCAL" in response to invalid section numbers, like groff + tbl(7) rendering has been tweaked to be more like groff + scaling has been improved to better render poorly generated manuals + display "UNTITLED" in response to invalid man(7) titles, like groff + improve mandocd error handling of broken pipes + manual footers now always show NAME(SECTION) on the right, like groff MFC after: 3 days (cherry picked from commit 06410c1b51637e5e1f392d553b5008948af58014) M contrib/mandoc/Makefile M contrib/mandoc/TODO M contrib/mandoc/catman.8 M contrib/mandoc/catman.c M contrib/mandoc/gmdiff M contrib/mandoc/man.7 M contrib/mandoc/man.options.1 M contrib/mandoc/man_html.c M contrib/mandoc/man_term.c M contrib/mandoc/man_validate.c M contrib/mandoc/mandoc.1 M contrib/mandoc/mandoc.css M contrib/mandoc/mandocd.8 M contrib/mandoc/mandocd.c M contrib/mandoc/manpath.c M contrib/mandoc/mdoc_html.c M contrib/mandoc/mdoc_man.c M contrib/mandoc/mdoc_markdown.c M contrib/mandoc/mdoc_term.c M contrib/mandoc/mdoc_validate.c M contrib/mandoc/out.c M contrib/mandoc/out.h M contrib/mandoc/roff.7 M contrib/mandoc/roff_term.c M contrib/mandoc/tbl.h M contrib/mandoc/tbl_html.c M contrib/mandoc/tbl_layout.c M contrib/mandoc/tbl_term.c M contrib/mandoc/term.c M contrib/mandoc/term.h M contrib/mandoc/term_ascii.c M contrib/mandoc/term_ps.c M contrib/mandoc/term_tab.c ____________________________________________________________________________________________________________ Commit: a8ac0e63011dda7f974543e9a87b61a2f8ea476c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a8ac0e63011dda7f974543e9a87b61a2f8ea476c Author: Alexander Ziaee (Thu 2 Oct 2025 15:55:18 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:28:45 GMT) mmcsd.4: s/DESCRIPTION/HARDWARE + HISTORY + SPDX This manual only describes a tiny amount suitable for the HW Relnotes. Remove the description section and replace it with a hardware section which will appear there. MFC after: 3 minutes Reported by: ivy History Ref: 5bcb64f20afff21be511cc5 (Add mmc and mmcsd) (cherry picked from commit 0c1c81c479bef8d3e67f93ea00fc5d34ccf5af33) M share/man/man4/mmcsd.4 ____________________________________________________________________________________________________________ Commit: 0dec63d3777254b37aac93e36a35044ff10e5f5f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0dec63d3777254b37aac93e36a35044ff10e5f5f Author: Alexander Ziaee (Fri 3 Oct 2025 23:26:05 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:25:02 GMT) bsdinstall.8: Minor maintenance Replace CD-ROMs with "discs, USBs, or network boot environments" to both modernize aesthetic and also nudge youths to think at scale. Since I'm disrupting the flow of these lines anyway, expand the VM acronym because I think this is one of the first manuals people will be looking at. Reset list alignment to seven characters. It was at 19 characters, and that was not enough to align them all, wasting many extra lines by crunching all the words over. Seven actually bought us some lines from six due to avg item size. Tag SPDX. MFC after: 3 days Discussed with: ivy, zi (cherry picked from commit 81d9e08a4df42079d5e163b5991d5d6f3a28d4f0) M usr.sbin/bsdinstall/bsdinstall.8 ____________________________________________________________________________________________________________ Commit: 875445a25401f67b62cc6e73db9f03dd2f9db8bb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=875445a25401f67b62cc6e73db9f03dd2f9db8bb Author: Alexander Ziaee (Wed 8 Oct 2025 17:45:33 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:23:47 GMT) aacraid.4: Improve HARDWARE introductory sentance To improve HW relnotes MFC after: 3 days (cherry picked from commit 20a8d06034791c8bb2cc733e4fe4fa1bc60273ec) M share/man/man4/aacraid.4 ____________________________________________________________________________________________________________ Commit: d01001fddfe8ebb685e8f6d4a0266065e52a3846 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d01001fddfe8ebb685e8f6d4a0266065e52a3846 Author: Alexander Ziaee (Wed 8 Oct 2025 17:48:19 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:23:06 GMT) aacraid.4: Fix document description + tag SPDX The document description previously just stated the name of the driver. Replace this with the name of the controller families and specs that it supports, in a similar fashion to other RAID drivers. MFC after: 3 days (cherry picked from commit d5d1e05efbedf67f1ef8e8428f9107401e369a0b) M share/man/man4/aacraid.4 ____________________________________________________________________________________________________________ Commit: f1fe71222acab989f7a49c0f66a2fb2455b8d0d0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f1fe71222acab989f7a49c0f66a2fb2455b8d0d0 Author: Warner Losh (Fri 28 Nov 2025 20:49:16 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:22:46 GMT) umass(4): Update to include pointers to quirks umass(4), while much improved, still sometimes need quirks. Add a pointer to usb_quirk(4) and usbconfig(8). Sponsored by: Netflix (cherry picked from commit 687ab0dc54a926092548310d71afdbe386150838) M share/man/man4/umass.4 ____________________________________________________________________________________________________________ Commit: 3cdb401480a17618ac4bac5dd2281006efaf614e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3cdb401480a17618ac4bac5dd2281006efaf614e Author: Alexander Ziaee (Thu 9 Oct 2025 15:55:14 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:22:10 GMT) umass.4: Modernize driver loading instructions + consolidate kernel configuration in SYNOPSIS + explain driver autoloading in DESCRIPTION + s/port/interface/ because of internal USBs + fix flow of remaining example MFC after: 1 day (cherry picked from commit d8a4843cb76ec1b7da8d5defafb7eef9a6cc1c21) M share/man/man4/umass.4 ____________________________________________________________________________________________________________ Commit: 8094ef1d81099b53ed3e24440b8105213f72e912 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8094ef1d81099b53ed3e24440b8105213f72e912 Author: Alexander Ziaee (Thu 2 Oct 2025 19:02:01 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:21:52 GMT) umass.4: Remove some extra lines which snuck in Fixes: 70993c2fbe1ac (umass.4: Add HISTORY, HARDWARE, and SPDX) MFC with: 70993c2fbe1ac (umass.4: Add HISTORY, HARDWARE, and SPDX) (cherry picked from commit 34a2b5b09afe2a2fa3672f448d522b4665db9272) M share/man/man4/umass.4 ____________________________________________________________________________________________________________ Commit: 220d2e590eda32487e9526d77e0a3752b1e74f33 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=220d2e590eda32487e9526d77e0a3752b1e74f33 Author: Alexander Ziaee (Thu 2 Oct 2025 18:37:27 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:21:35 GMT) umass.4: Add HISTORY, HARDWARE, and SPDX While here, break a long line that agitates the linter. Fixes: cc16f1b9d9261f18 (Add umass.c) MFC after: 1 hour Discussed with: imp, ivy diff --git a/sys/dev/usb/FILES b/sys/dev/usb/FILES (cherry picked from commit 70993c2fbe1acb68f45bea5fc5fa086650876e23) M share/man/man4/umass.4 ____________________________________________________________________________________________________________ Commit: 5f6144238c540b72291b9595c89193034eb6a004 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5f6144238c540b72291b9595c89193034eb6a004 Author: Alexander Ziaee (Thu 9 Oct 2025 22:13:54 BST) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:20:17 GMT) cli.lua.8: Reflow literal comments Reflow comments in literal text blocks so this manual is legible at MANWIDTH 78. MFC after: 1 day (cherry picked from commit de36d0dbaeaf05e9bf949fdf22b560c34b2c0d74) M stand/lua/cli.lua.8 ____________________________________________________________________________________________________________ Commit: d31dc797db78d5ff2b4bc571cffc0ee36fde5f9a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d31dc797db78d5ff2b4bc571cffc0ee36fde5f9a Author: Alexander Ziaee (Thu 30 Oct 2025 15:49:31 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:19:55 GMT) gshsec.8: Fix list alignment, tag spdx MFC after: 3 days (cherry picked from commit 05d48584607221922539bb6917c9c118236d78d5) M lib/geom/shsec/gshsec.8 ____________________________________________________________________________________________________________ Commit: e71477916c62d65baf17200cfb3f85ec7de0aa65 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e71477916c62d65baf17200cfb3f85ec7de0aa65 Author: William Carrel (Thu 30 Oct 2025 18:39:29 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:19:40 GMT) ifconfig.8: Mention max name length PR: 289113 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289113 ) MFC after: 3 days (cherry picked from commit 832cd05905980d0f6547bf02745b054c1f4af1eb) M sbin/ifconfig/ifconfig.8 ____________________________________________________________________________________________________________ Commit: 6b1ae329e2a2559b90233ac9718bb39aba9a0221 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6b1ae329e2a2559b90233ac9718bb39aba9a0221 Author: Alexander Ziaee (Mon 3 Nov 2025 23:21:10 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:19:32 GMT) cut.1: Align option list and tag spdx MFC after: 3 days (cherry picked from commit 16f37d97b9500a4fe2d0719161025515d477a5cd) M usr.bin/cut/cut.1 ____________________________________________________________________________________________________________ Commit: ac567c2908ad37bed0beb6d736ff7e7ca22f2900 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ac567c2908ad37bed0beb6d736ff7e7ca22f2900 Author: Alexander Ziaee (Tue 11 Nov 2025 18:38:04 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:19:11 GMT) sbp.4: Add a hardware section, fix markup nits + tag SPDX + add sysctl to apropos database + fix markup of examples and reflow a overly long line + add a hardware section for hw relnotes MFC after: 3 days (cherry picked from commit dee8e38f52266d9b2fa837607ff3a78f240a806d) M share/man/man4/sbp.4 ____________________________________________________________________________________________________________ Commit: 7cc574cefbcfda26044330cec58fd5130dbffd5b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7cc574cefbcfda26044330cec58fd5130dbffd5b Author: Alexander Ziaee (Tue 11 Nov 2025 18:58:19 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:18:54 GMT) mx25l.4: Add n25q64 to hardware list MFC after: 3 days Fixes: 76735c74398923a (flash: Add "n25q64" to mx25l driver) (cherry picked from commit 595fcd71a89e8c2d9039528d58b073f5ca712b68) M share/man/man4/mx25l.4 ____________________________________________________________________________________________________________ Commit: 36a902c39c876c4fa4706acd0baf63422874f250 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=36a902c39c876c4fa4706acd0baf63422874f250 Author: Alexander Ziaee (Tue 11 Nov 2025 18:56:40 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:18:54 GMT) mx25l.4: Describe better and tag spdx MFC after: 3 days (cherry picked from commit 6f73950475ce6b56974b7cd08cdf0ea771165c50) M share/man/man4/mx25l.4 ____________________________________________________________________________________________________________ Commit: 7812565e2ceb1a0337ceeb2322ae122563fa8334 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7812565e2ceb1a0337ceeb2322ae122563fa8334 Author: Alexander Ziaee (Fri 14 Nov 2025 14:59:09 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:18:00 GMT) loader.8: Document module commands Begin documenting module loader commands in loader(8), where the reader would look for them. Segregate them by their availability in individual loader implementations, like build(7) targets. These details were graciously donated by kevans. MFC after: 3 days Reviewed by: kevans Co-authored-by: Kyle Evans Differential Revision: https://reviews.freebsd.org/D50727 (cherry picked from commit 6fb0d67819f730e8def56e139f780eff3c0cab0f) M stand/man/loader.8 ____________________________________________________________________________________________________________ Commit: 9f0e2b6e318304b2dd6ded00d2f0d0f70f32ee7c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9f0e2b6e318304b2dd6ded00d2f0d0f70f32ee7c Author: Alexander Ziaee (Fri 14 Nov 2025 14:41:57 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:17:50 GMT) loader manuals: Clarify console and boot_serial console=comconsole is for the loader and boot_serial is for the kernel. I think we should centralize documentation on the loader settings in one manual, such a loader.8. The current proliferation is not obvious where to find the documentation. To the user, these are all set in loader.conf or at the loader prompt. MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D53695 (cherry picked from commit 09ffaa4e07d749c83cc1db13829505f21b025f29) M stand/defaults/loader.conf.5 M stand/man/loader_simp.8 ____________________________________________________________________________________________________________ Commit: 89f9f9def715c115d6a244b53cad24a6ca9353be URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=89f9f9def715c115d6a244b53cad24a6ca9353be Author: Alexander Ziaee (Tue 23 Dec 2025 13:52:13 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:17:06 GMT) cdce.4: Minor polish + Tag spdx license identifier + Fix "e.g.,"s to quiet linter + Remove useless Nd quoting + Put example in EXAMPLES MFC after: 3 days (cherry picked from commit 03752041e41b57af622f3649929789575a48258e) M share/man/man4/cdce.4 ____________________________________________________________________________________________________________ Commit: 11a0cf32a23259caff9f6a2c1489947170dfd8b2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=11a0cf32a23259caff9f6a2c1489947170dfd8b2 Author: Rick Parrish (Thu 18 Dec 2025 22:12:32 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:16:45 GMT) librt/mq_getfd_np.3: Initial manual page The mq_getfd_np function appeared in FreeBSD 11 with no documentation. This function dereferences the mqd_t as a pointer to an int. Relnotes: yes MFC after: 3 days Reviewed by: kib (previous), markj, ziaee Differential Revision: https://reviews.freebsd.org/D43947 (cherry picked from commit ca2413d216197fd55f9363d6f65c641ff1aa3ec5) M lib/librt/Makefile A lib/librt/mq_getfd_np.3 ____________________________________________________________________________________________________________ Commit: e11d172209e2c7406ff934d64503ac4ea64b8d31 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e11d172209e2c7406ff934d64503ac4ea64b8d31 Author: Alexander Ziaee (Tue 6 Jan 2026 16:02:24 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:15:31 GMT) manuals: Correct some sysctl markup This enables additional searching the manual by sysctl variable. This syntax is standardized in style.mdoc(5). Reported by: bapt MFC after: 3 days (cherry picked from commit 75866d71e8d93fe1a1ff469b8a9c6c6c9908a6c8) M lib/libc/sys/chroot.2 M lib/libc/sys/ptrace.2 M share/man/man7/security.7 M usr.sbin/chroot/chroot.8 ____________________________________________________________________________________________________________ Commit: 0b90b2f0903d025373e15daf70b8343ff1616e6d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0b90b2f0903d025373e15daf70b8343ff1616e6d Author: Jose Luis Duran (Thu 28 Dec 2023 03:17:16 GMT) Committer: Alexander Ziaee (Fri 6 Feb 2026 00:15:31 GMT) security.7: Fix typo (triple S) Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/955 (cherry picked from commit 2d3d29c29c123803278978a1b9dfc62be39339e1) M share/man/man7/security.7 ____________________________________________________________________________________________________________ Commit: 567cb65a378f36caba79672fd72c961b2c99a132 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=567cb65a378f36caba79672fd72c961b2c99a132 Author: Colin Percival (Fri 6 Feb 2026 00:00:00 GMT) Committer: Colin Percival (Fri 6 Feb 2026 00:00:00 GMT) Post-14.4-branch updates Rename stable/14 to -STABLE Bump __FreeBSD_version Approved by: re (implicit) Sponsored by: OpenSats Initiative M sys/conf/newvers.sh M sys/sys/param.h ____________________________________________________________________________________________________________ Commit: 2f5bea924d08a6528dc6c25b2932105f7f235a3a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2f5bea924d08a6528dc6c25b2932105f7f235a3a Author: Alexander Ziaee (Thu 18 Sep 2025 18:12:19 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:09:13 GMT) stand/man: Fix mdoc typos for emails, tag spdx MFC after: 3 days (cherry picked from commit a37825313f624121c6f07bc03f9cf655c300885b) M stand/man/boot1.efi.8 M stand/man/loader.8 M stand/man/loader_4th.8 M stand/man/loader_lua.8 M stand/man/loader_simp.8 ____________________________________________________________________________________________________________ Commit: 9bdba7081f83ee25a00f5f1216306b40be29636c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9bdba7081f83ee25a00f5f1216306b40be29636c Author: Minsoo Choo (Thu 25 Sep 2025 03:12:37 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:09:02 GMT) kerneldocs: Update latex package MFC after: 3 days Reviewed by: ziaee Signed-off-by: Minsoo Choo Closes: https://github.com/freebsd/freebsd-src/pull/1853 (cherry picked from commit cd813380ad832a0bfa5b99f22012092cc9d373b1) M tools/kerneldoc/subsys/README ____________________________________________________________________________________________________________ Commit: e829846c2f59fd7c7aa7652cb6ca9d9303e0d382 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e829846c2f59fd7c7aa7652cb6ca9d9303e0d382 Author: Alexander Ziaee (Wed 24 Sep 2025 13:26:14 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:08:48 GMT) blackhole.4: Describe even better, take two I meant to change this to tuexen's suggestion upon commit but failed. MFC after: 3 days Fixes: 9e02de4ad6c3 (blackhole.4: Describe even better) (cherry picked from commit 1a9ec72022ddce0cacb9aedda3d69aa95cd45ed0) M share/man/man4/blackhole.4 ____________________________________________________________________________________________________________ Commit: e5f941466b58ea05d703bab940e3ae85eb3f0f98 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e5f941466b58ea05d703bab940e3ae85eb3f0f98 Author: Alexander Ziaee (Wed 24 Sep 2025 13:22:47 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:08:48 GMT) blackhole.4: Describe even better Rewrite the document description to omit ficticious "UDP connections". Fixes: 38f6a4467419 (blackhole.4: Describe better) MFC after: 3 days Reviewed by: tuexen Reported by: tuexen, zi Differential Revision: https://reviews.freebsd.org/D52696 (cherry picked from commit f9a71840d8ee0cfff4ec983a589be53648e7017d) M share/man/man4/blackhole.4 ____________________________________________________________________________________________________________ Commit: 1a7efb781f9d6e40ab266ca3722242cd143f4aaf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1a7efb781f9d6e40ab266ca3722242cd143f4aaf Author: Alexander Ziaee (Tue 23 Sep 2025 20:05:18 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:08:34 GMT) blackhole.4: Describe better Rewrite the document description to fit cleanly on one line and omit crossreferences, to clean up apropos results. MFC after: 3 days Reviewed by: tuexen, cperciva Differential Revision: https://reviews.freebsd.org/D52695 (cherry picked from commit 38f6a4467419f5b2344d184baa454c126e2919a9) M share/man/man4/blackhole.4 ____________________________________________________________________________________________________________ Commit: a0cb72d141ff4d2aada1620c898a9236535a945c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a0cb72d141ff4d2aada1620c898a9236535a945c Author: Alexander Ziaee (Wed 17 Dec 2025 17:15:53 GMT) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:06:17 GMT) examples/mdoc: Remove document description quotes Quotes in roff do not work the way quotes in shell do, remove them from the examples to hopefully lead less people astray. MFC after: 3 days (cherry picked from commit 067b62bd5834484c927038aff28d36da6c5d6cca) M share/examples/mdoc/example.1 M share/examples/mdoc/example.3 M share/examples/mdoc/example.4 M share/examples/mdoc/example.9 ____________________________________________________________________________________________________________ Commit: aad7091822965f8a23f7922a5ab3ce2ef1881f55 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=aad7091822965f8a23f7922a5ab3ce2ef1881f55 Author: Alexander Ziaee (Sun 1 Feb 2026 00:24:22 GMT) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:05:29 GMT) INDEX.fonts: Minor maintenance + Mention relevance of this file in the vt manual screen.font entry + The vidfont manual is in section one, not eight + Remove leftover blank line from freebsd tag removal MFC after: 3 days (cherry picked from commit 1f5795b6422a1c6e4b71fd7e93717522ccb822f9) M share/man/man4/vt.4 M share/syscons/fonts/INDEX.fonts M share/vt/fonts/INDEX.fonts M stand/fonts/INDEX.fonts ____________________________________________________________________________________________________________ Commit: c44ec96b471e1c5dc6b0d12c7db693c58527522e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c44ec96b471e1c5dc6b0d12c7db693c58527522e Author: Alexander Ziaee (Sun 1 Feb 2026 15:25:11 GMT) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:05:14 GMT) contrib/spleen: Update to 2.2.O This release adds several new characters critical to the manual pages that were previously missing on high-dpi displays: em-dash, en-dash, hyphen, angle brackets, white square, dagger, and double dagger. It also features improved alignment for numerous characters in different sizes. Thanks: Fredric Cambus MFC after: 3 days Discussed with: emaste (cherry picked from commit 0d602f923ed8a889c3a848ab9f19aa52f917f6ee) M contrib/spleen/ChangeLog M contrib/spleen/LICENSE M contrib/spleen/README.md M contrib/spleen/spleen-12x24.bdf M contrib/spleen/spleen-16x32.bdf M contrib/spleen/spleen-32x64.bdf M contrib/spleen/spleen-5x8.bdf M contrib/spleen/spleen-6x12.bdf M contrib/spleen/spleen-8x16.bdf ____________________________________________________________________________________________________________ Commit: 1eb2efcdd5524b4cb993794124299bd15f4dd65d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1eb2efcdd5524b4cb993794124299bd15f4dd65d Author: Alexander Ziaee (Mon 26 May 2025 02:23:38 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:04:30 GMT) ata.4: Cleanup HARDWARE for HW Relnotes MFC after: 3 days Reported by: ivy (ata is for ide interface) (cherry picked from commit b03f765f076c6b6170f01681bfcc4dbc3df846c3) M share/man/man4/ata.4 ____________________________________________________________________________________________________________ Commit: 822afa2bc93c715f5b7d16c2d465762bcf04d634 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=822afa2bc93c715f5b7d16c2d465762bcf04d634 Author: Alexander Ziaee (Fri 15 Aug 2025 17:40:30 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:04:04 GMT) hv_netvsc.4: Fix hn(4) mlink typo MFC after: 3 days Fixes: e47939b3b1106 (hn: fix build on !x86) (cherry picked from commit 429152cb04e4efdb37437fb2b76fbcfd1ad043ab) M share/man/man4/Makefile ____________________________________________________________________________________________________________ Commit: bfa2d8e6ba22870dc2f0363962c7788e43bdb497 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bfa2d8e6ba22870dc2f0363962c7788e43bdb497 Author: Alexander Ziaee (Wed 6 Aug 2025 15:57:31 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:03:41 GMT) man bluetooth/fwdownloaders: Clarify descriptions s/download/load/ to clarify the difference between these and fwget, our utility to install firmware packages, in apropos results. Also, include rtlbtfw, I missed that one last time. MFC after: 3 days Reviewed by: bz, pauamma Fixes: 2c901189bb65 (terse descriptions) Differential Revision: https://reviews.freebsd.org/D51333 (cherry picked from commit 0790d99e0b951cfee5be0e1db4bc6fae972aeacb) M usr.sbin/bluetooth/ath3kfw/ath3kfw.8 M usr.sbin/bluetooth/bcmfw/bcmfw.8 M usr.sbin/bluetooth/iwmbtfw/iwmbtfw.8 M usr.sbin/bluetooth/rtlbtfw/rtlbtfw.8 M usr.sbin/uathload/uathload.8 ____________________________________________________________________________________________________________ Commit: a15c821b8416cd7103fb25632eff0e6f28c345a2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a15c821b8416cd7103fb25632eff0e6f28c345a2 Author: Alexander Ziaee (Mon 14 Jul 2025 22:14:40 BST) Committer: Alexander Ziaee (Thu 5 Feb 2026 22:02:36 GMT) nanobsd.8: Shorten title for apropos, tag SPDX MFC after: 3 days (cherry picked from commit fbc4e90c5ca6186ade53d29bf3e69aab6ad1cbc3) M share/man/man8/nanobsd.8 ____________________________________________________________________________________________________________ Commit: 79da80d56a427c4c6fe7e35f2d866b84db979a25 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=79da80d56a427c4c6fe7e35f2d866b84db979a25 Author: Marius Strobl (Mon 2 Feb 2026 21:30:42 GMT) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:07 GMT) sym(4): Map HCB memory as uncacheable also on x86 As part of making the chip-specific mix and match of different accesses (DMA/bus space) work as desired, the intent is to map the HCB memory as uncacheable. Prior to VM_MEMATTR_*, the !x86 way of indicating this to bus_dmamem_alloc(9) was BUS_DMA_COHERENT. Then later on in 2db99100a4, BUS_DMA_NOCACHE was hooked up to VM_MEMATTR_UNCACHEABLE for x86. As it turns out, still as of today bus_dmamem_alloc(9) differs in this regard across architectures. On arm, it still supports BUS_DMA_COHERENT only for requesting uncacheable DMA and x86 still uses BUS_DMA_NOCACHE only. On arm64 and riscv, BUS_DMA_COHERENT seems to effectively be an alias for BUS_DMA_NOCACHE. Thus, allocate the HCB memory with BUS_DMA_COHERENT | BUS_DMA_NOCACHE, so we get uncacheable memory on all architectures including x86 and so loads and stores from/to HCB won't get reordered. However, even on x86 we still need to use at least compiler barriers to achieve the desired program order. This change should also fix panics due to out-of-sync data seen with FreeBSD VMs on top of OpenStack and HBAs of type lsiLogic as a result of loads and stores getting reordered. [1] While at it: - Nuke the unused SYM_DRIVER_NAME macro. - Remove unused/redundant HCB members and correct a comment typo. PR: 270816 [1] MFC after: 3 days (cherry picked from commit b941d1c64e58708c93621cc07ed1c8e5e709cd48) M sys/dev/sym/sym_hipd.c ____________________________________________________________________________________________________________ Commit: 5d546e86517d8052ffb33fccf55f9c5f7438153f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5d546e86517d8052ffb33fccf55f9c5f7438153f Author: Marius Strobl (Thu 22 Jan 2026 09:05:38 GMT) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:07 GMT) sym(4): Provide a DEVICE_DETACH(9) method This also fixes sym_cam_free() to tear things down correctly, i. e. in opposite order of setup, as well as sym_cam_attach() to not free devq and SIM twice in the failure case. (cherry picked from commit 518c01b31e96bbe8353a551885a61e7da6aed5f6) M sys/dev/sym/sym_hipd.c ____________________________________________________________________________________________________________ Commit: b5a7c25c4e19ad57a0b0b23c16ba8523ec60f923 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b5a7c25c4e19ad57a0b0b23c16ba8523ec60f923 Author: Marius Strobl (Wed 21 Jan 2026 16:47:50 GMT) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:06 GMT) sym(4): Use memcpy(9) instead of bcopy(9) The overlap handling of bcopy(9) is not required in these cases. Obtained from: BSD-licensed Linux sym53c8xx driver (cherry picked from commit c8e9479c74a2af0f6c665e930091c163bf760fd5) M sys/dev/sym/sym_hipd.c ____________________________________________________________________________________________________________ Commit: b56ce48c0f7ff675f9a09ef98e13dc2bcdea1ce3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b56ce48c0f7ff675f9a09ef98e13dc2bcdea1ce3 Author: Marius Strobl (Wed 21 Jan 2026 17:29:35 GMT) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:06 GMT) sym(4): Consistently use device_printf(9) where applicable (cherry picked from commit 48eee744b540ef0413fa1cb543dde6e49e7f2ac4) M sys/dev/sym/sym_hipd.c ____________________________________________________________________________________________________________ Commit: b149250d344eed15178ad9a151425426823d5bd1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b149250d344eed15178ad9a151425426823d5bd1 Author: David E. O'Brien (Wed 15 Oct 2025 06:22:00 BST) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:06 GMT) style(9): white space after ; and around binary operators in for() loops. Also, use 'while', where only the conditional test of 'for' was used. Reviewed by: sjg (cherry picked from commit 0050289464fa56ec79e060b8d8378b9ff7145a0e) M sys/arm/allwinner/aw_sid.c M sys/cam/scsi/scsi_all.c M sys/cam/scsi/scsi_enc_ses.c M sys/crypto/chacha20/chacha.c M sys/crypto/openssl/ossl_sha256.c M sys/dev/aic7xxx/aic79xx.c M sys/dev/aic7xxx/aic7xxx.c M sys/dev/enetc/if_enetc.c M sys/dev/hptmv/entry.c M sys/dev/hptmv/gui_lib.c M sys/dev/hptmv/hptproc.c M sys/dev/mps/mps_sas.c M sys/dev/mpt/mpt_raid.c M sys/dev/nfe/if_nfe.c M sys/dev/ocs_fc/ocs_mgmt.c M sys/dev/ppc/ppc.c M sys/dev/smartpqi/smartpqi_event.c M sys/dev/smartpqi/smartpqi_queue.c M sys/dev/sym/sym_hipd.c M sys/dev/tws/tws.c M sys/dev/tws/tws_services.c M sys/fs/devfs/devfs_dir.c M sys/fs/udf/osta.c M sys/i386/i386/in_cksum_machdep.c M sys/kern/kern_exit.c M sys/kern/kern_malloc.c M sys/kern/subr_devstat.c M sys/kern/subr_prf.c M sys/netinet/siftr.c M sys/netpfil/ipfw/ip_dummynet.c ____________________________________________________________________________________________________________ Commit: 81f577d79d8dff70428ec1719b440da90f119cf1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=81f577d79d8dff70428ec1719b440da90f119cf1 Author: Alexander Motin (Wed 22 Nov 2023 22:27:17 GMT) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:06 GMT) Replace random sbuf_printf() with cheaper cat/putc. (cherry picked from commit 0a7139485ccb8192e7c7c6d93653da92bfcdc196) M sys/kern/kern_cons.c M sys/kern/kern_exit.c M sys/kern/kern_fail.c M sys/kern/kern_rctl.c M sys/kern/kern_sig.c M sys/kern/kern_sysctl.c M sys/kern/kern_tslog.c M sys/kern/sched_ule.c M sys/kern/subr_blist.c M sys/kern/subr_bus.c M sys/kern/subr_prf.c M sys/kern/subr_sleepqueue.c M sys/kern/subr_stats.c M sys/kern/subr_witness.c M sys/kern/tty_info.c M sys/kern/vfs_mountroot.c ____________________________________________________________________________________________________________ Commit: 55204a088b3b23a19b008780d8f9c3cbb1b09721 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=55204a088b3b23a19b008780d8f9c3cbb1b09721 Author: Richard Scheffenegger (Thu 7 Dec 2023 13:43:03 GMT) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:06 GMT) siftr: refactor batch log processing Refactoring to perform the batch processing of log messaged in two phases. First cycling through a limited number of collected packets, and only thereafter freeing the processed packets. This prevents any chance of calling free while in a critical / spinlocked section. Reviewed By: tuexen Sponsored by: NetApp, Inc. Differential Revision: https://reviews.freebsd.org/D42949 (cherry picked from commit a95cd6e4870b79178860e03366c4327e533ecf1e) M sys/netinet/siftr.c ____________________________________________________________________________________________________________ Commit: a327d997f5a106d8ec2fe5255aaf63127bfe6a69 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a327d997f5a106d8ec2fe5255aaf63127bfe6a69 Author: Cheng Cui (Tue 25 Jul 2023 14:53:55 BST) Committer: Marius Strobl (Thu 5 Feb 2026 21:54:06 GMT) siftr: flush pkt_nodes to the log file in batch Reviewed by: rscheff, tuexen Differential Revision: https://reviews.freebsd.org/D41175 (cherry picked from commit fafb03ab4254ab0d3927bc8ec22e4ba432efdbeb) M sys/netinet/siftr.c ____________________________________________________________________________________________________________ Commit: e1eb82fb18446995359cffcb66162ec1f462ed88 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e1eb82fb18446995359cffcb66162ec1f462ed88 Author: Alexander Ziaee (Mon 12 Jan 2026 21:04:54 GMT) Committer: Alexander Ziaee (Thu 5 Feb 2026 21:53:35 GMT) wc: Fix usage and manual SYNOPSIS + nits The -c and -m flags are mututally exclusive. Also minor manual fixes: + Angle quotes do not work in prose, use double quote matching extant + Align manual page options list + Tag SPDX license identifier for manual PR: 292408 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292408 ) MFC after: 3 days (cherry picked from commit 4cb65fde79a2412558d10fdbf3427fc0e4536d80) M usr.bin/wc/wc.1 M usr.bin/wc/wc.c ____________________________________________________________________________________________________________ Commit: 0ff1f587ffcde595010dcab31fbbd6bb4a4e6563 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0ff1f587ffcde595010dcab31fbbd6bb4a4e6563 Author: Mark Johnston (Tue 27 Jan 2026 14:56:55 GMT) Committer: Mark Johnston (Thu 5 Feb 2026 18:36:43 GMT) ip_mroute: EVENTHANDLER_REGISTER does not fail No functional change intended. MFC after: 1 week Sponsored by: Stormshield Sponsored by: Klara, Inc. (cherry picked from commit 0f1e1350704af555a4b30136f5f3d16db6f2dc51) M sys/netinet/ip_mroute.c ____________________________________________________________________________________________________________ Commit: b0037260b73f405d7ae5140f50cd279c0a9a30cd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b0037260b73f405d7ae5140f50cd279c0a9a30cd Author: Mark Johnston (Mon 12 Jan 2026 13:49:54 GMT) Committer: Mark Johnston (Thu 5 Feb 2026 18:36:43 GMT) in6: Modify address prefix lifetimes when updating address lifetimes When one uses SIOCAIFADDR_IN6 to add a v6 address, it's possible to set the preferred and valid lifetimes of the address. If the address already exists, this ioctl will recalculate and update the expiry times based on the provided timestamps. When adding a new address, the lifetimes are inherited by the prefix as well, but only if we create a new prefix. If the prefix already exists, as it will in the case where an address is being updated rather than being added, we do not touch the prefix lifetimes at all. This means that the original address lifetime still applies to the route associated with that prefix, so when the prefix expires, the route goes away. This behaviour doesn't make a lot of sense: if the admin updates an address lifetime, we should ensure that the prefix lifetime is updated too. Make that change, ensuring that we do not shorten the prefix lifetime, as the prefix might be shared among multiple interface addresses. Add a regression test. Co-authored by: Franco Fichtner Reviewed by: pouria, zlei, ae MFC after: 2 weeks Sponsored by: OPNsense Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54562 (cherry picked from commit 74999aac5effb9b32d12f413ef51e87b15c8a0d8) M sys/netinet6/in6.c M tests/sys/netinet6/ndp.sh ____________________________________________________________________________________________________________ Commit: e676efa58239aee11cac81f041afed2f9e9ee928 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e676efa58239aee11cac81f041afed2f9e9ee928 Author: Mark Johnston (Mon 12 Jan 2026 13:49:34 GMT) Committer: Mark Johnston (Thu 5 Feb 2026 18:36:43 GMT) in6: Add a helper function to compute expiry times Tidy up a bunch of places that have the same duplicated logic. Simplify callers of in6_init_prefix_ltimes(). No functional change intended. Reviewed by: pouria, zlei, tuexen, glebius MFC after: 2 weeks Sponsored by: OPNsense Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54561 (cherry picked from commit fb08f80eaf90eb7ace202d8604634fc181be8980) M sys/netinet6/in6.c M sys/netinet6/in6.h M sys/netinet6/nd6_rtr.c ____________________________________________________________________________________________________________ Commit: 8c1de31097763ce1d918a3f82c61fd8d30edbe75 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8c1de31097763ce1d918a3f82c61fd8d30edbe75 Author: Colin Percival (Tue 16 Sep 2025 19:43:36 BST) Committer: Colin Percival (Thu 5 Feb 2026 18:21:17 GMT) release: Ship firmware from kmods repo on DVD The packages for X.Y-RELEASE are a snapshot of the quarterly branch for stable/X, i.e. typically built on X.(Y-1)-RELEASE. (The case of Y=0 is an exception for obvious reasons.) This works for most ports but not for kernel modules, which may need to be built on the release in question; this is why we have a separate "kmods" repository. Make sure that we put the packages from the kmods repository onto the mini-pkg-repo on the DVD rather than shipping unusable firmware. Reviewed by: bz MFC after: 1 week Sponsored by: https://www.patreon.com/cperciva Differential Revision: https://reviews.freebsd.org/D52581 (cherry picked from commit bda8028146694ee490543b35e3349e060936fde4) M release/pkg_repos/release-dvd.conf M release/scripts/pkg-stage.sh ____________________________________________________________________________________________________________ Commit: 0e82cd099e2ab5ad8aa67f98fa4b8b430c23947c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0e82cd099e2ab5ad8aa67f98fa4b8b430c23947c Author: Kristof Provost (Tue 29 Jul 2025 10:50:11 BST) Committer: Zhenlei Huang (Thu 5 Feb 2026 18:10:36 GMT) ifconfig: fix removing IPv6 addresses Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit da50f49977cc4e6aae55cb2379313599249a8dd2) M sbin/ifconfig/af_inet6.c M sbin/ifconfig/tests/inet6.sh ____________________________________________________________________________________________________________ Commit: 52ebb8a7d4f8c77b9dacdeef1dff3caec1394bea URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=52ebb8a7d4f8c77b9dacdeef1dff3caec1394bea Author: Gleb Smirnoff (Fri 25 Aug 2023 18:31:55 BST) Committer: Zhenlei Huang (Thu 5 Feb 2026 18:10:36 GMT) ifconfig: fix 'ifconfig -l link' The rtnetlink(4) RTM_GETADDR does not list link level addresses, thus the correct match for interfaces that have a link level address should be based on what was returned by RTM_GETLINK. Reviewed by: melifaro Differential Revision: https://reviews.freebsd.org/D41586 (cherry picked from commit 6f3947be2aff9350514b5a414104d0afaeb53cdf) M sbin/ifconfig/ifconfig_netlink.c ____________________________________________________________________________________________________________ Commit: 151dcad51394e841f1cf3e798e5cdb4dd8131949 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=151dcad51394e841f1cf3e798e5cdb4dd8131949 Author: Gleb Smirnoff (Fri 25 Aug 2023 18:31:26 BST) Committer: Zhenlei Huang (Thu 5 Feb 2026 18:10:35 GMT) ifconfig: fix 'ifconfig -l ether' When matching interfaces for being Ethernet, use same trick that the link module does - pass if_type through convert_iftype(). That restores historicaly behaviour of listing lagg(4) ports. Reviewed by: melifaro Differential Revision: https://reviews.freebsd.org/D41585 (cherry picked from commit 31016aa0be6dbf7556a91dda14cfe1ff0dcf933b) M sbin/ifconfig/af_link.c M sbin/ifconfig/ifconfig.h M sbin/ifconfig/ifconfig_netlink.c ____________________________________________________________________________________________________________ Commit: 7bdf066ad2123709cd190dc7610c21c8bb4df5e4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7bdf066ad2123709cd190dc7610c21c8bb4df5e4 Author: Gleb Smirnoff (Fri 25 Aug 2023 18:30:25 BST) Committer: Zhenlei Huang (Thu 5 Feb 2026 18:10:35 GMT) ifconfig: fix logical error in interface matching for '-l ether' This affects only ifconfig(8) compiled WITHOUT_NETLINK_SUPPORT, which is not the default. Reviewed by: melifaro Differential Revision: https://reviews.freebsd.org/D41584 Fixes: d1cd0344f7b7d81beda04c3cb8cfee99351c3eb8 (cherry picked from commit 24a81a968d21b3eef1a0a2d786859b274546bd34) M sbin/ifconfig/ifconfig.c ____________________________________________________________________________________________________________ Commit: 0018cfdb91c399342a0facd04dfe72cb689d86ea URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0018cfdb91c399342a0facd04dfe72cb689d86ea Author: Dag-Erling Smørgrav (Tue 3 Feb 2026 14:39:21 GMT) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:50:01 GMT) libc/tests: Clean up *dir() tests Mainly, avoid reusing the name of one of the functions we should be testing (but aren't) for local variables. Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55054 (cherry picked from commit d70b9eb74fc4aa430bd2ff4bca37e6a9b6c8004f) M lib/libc/tests/gen/dir2_test.c ____________________________________________________________________________________________________________ Commit: 77dedead8539c76d1f452c2c0073ee13ed7cf54a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=77dedead8539c76d1f452c2c0073ee13ed7cf54a Author: Dag-Erling Smørgrav (Mon 2 Feb 2026 15:46:57 GMT) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:48:36 GMT) libc: Improve POSIX conformance of dirfd() POSIX states that dirfd() should set errno to EINVAL and return -1 if dirp does not refer to a valid directory stream. Our interpretation is that this applies if dirp is null or the file descriptor associated with it is negative. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55025 (cherry picked from commit 5074d5c9845e142883cdbb9ad212be66e57615d0) libc: Fix missing include Although not needed on FreeBSD due to namespace pollution, we should technically #include to secure a definition of NULL. Fixes: 5074d5c9845e ("libc: Improve POSIX conformance of dirfd()") (cherry picked from commit 1c00d5a3b234ef937d848956027e9de5ea8010f9) M lib/libc/gen/directory.3 M lib/libc/gen/dirfd.c ____________________________________________________________________________________________________________ Commit: b614c9893fa38771075d1f329763a0151b53b86d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b614c9893fa38771075d1f329763a0151b53b86d Author: Dag-Erling Smørgrav (Mon 2 Feb 2026 15:46:53 GMT) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:48:36 GMT) libc: Clean up *dir() code Fix style nits (mostly whitespace issues) and clean up the manual page. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D55024 (cherry picked from commit 387ae6390534b6e9b48931840e7bc76eeb0b258d) M lib/libc/gen/closedir.c M lib/libc/gen/directory.3 M lib/libc/gen/dirfd.c M lib/libc/gen/fdopendir.c M lib/libc/gen/opendir.c M lib/libc/gen/opendir2.c M lib/libc/gen/rewinddir.c M lib/libc/gen/scandir.c M lib/libc/gen/telldir.c ____________________________________________________________________________________________________________ Commit: 98b041239c252d0c2433e5d412d74f90a235d0f2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=98b041239c252d0c2433e5d412d74f90a235d0f2 Author: Dag-Erling Smørgrav (Wed 9 Jul 2025 21:34:22 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:48:34 GMT) opendir, readdir, telldir: Use the correct types. Use either size_t or off_t (as appropriate) instead of long. Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D51210 (cherry picked from commit 42e613018da50ee6877d24815c7626d79629e707) readdir: Fix error check. Now that dd_size is unsigned, we need to check if the return value from getdirentries() was negative before assigning it to dd_size. While here, simplify the scandir_error test case slightly, and verify that calling readdir() again after EOF still returns NULL. Fixes: 42e613018da5 Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D51266 (cherry picked from commit 920b2183919e430cf85c4aa1fa337bfded12aee5) M lib/libc/gen/gen-private.h M lib/libc/gen/opendir2.c M lib/libc/gen/readdir.c M lib/libc/gen/telldir.c M lib/libc/gen/telldir.h M lib/libc/tests/gen/opendir_test.c M lib/libc/tests/gen/scandir_test.c ____________________________________________________________________________________________________________ Commit: 9d7a0f817cef4c7d94fe584f3f85754996678ed4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9d7a0f817cef4c7d94fe584f3f85754996678ed4 Author: Dag-Erling Smørgrav (Tue 8 Jul 2025 20:40:55 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:47 GMT) opendir, fdopendir: Add tests, clean up. * Add test cases for opendir() and fdopendir(). * Drop O_NONBLOCK from opendir(); it was added a long time ago to avoid blocking if given a closed named pipe, but now we use O_DIRECTORY, which ensures that we get ENOTDIR in that case. * While here, remove unused #includes left over from the split. Sponsored by: Klara, Inc. Reviewed by: kevans, markj Differential Revision: https://reviews.freebsd.org/D51126 (cherry picked from commit c08e019c6ce4fc637b195f1bb0878763c3fefe9e) M lib/libc/gen/fdopendir.c M lib/libc/gen/opendir.c M lib/libc/gen/opendir2.c M lib/libc/tests/gen/Makefile A lib/libc/tests/gen/opendir_test.c ____________________________________________________________________________________________________________ Commit: b10a31f4e0f43857f63390a451857fb3c733e26f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b10a31f4e0f43857f63390a451857fb3c733e26f Author: Dag-Erling Smørgrav (Wed 2 Jul 2025 11:22:21 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:47 GMT) opendir: Simplify is_unionstack(). Sponsored by: Klara, Inc. Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D51118 (cherry picked from commit 5e96f4006d2e5f165531a53b6c1393a1c7604f42) M lib/libc/gen/opendir2.c ____________________________________________________________________________________________________________ Commit: d2f8f53385b3f2b42e38c387cb1ccba4518167e9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d2f8f53385b3f2b42e38c387cb1ccba4518167e9 Author: Dag-Erling Smørgrav (Thu 26 Jun 2025 08:37:06 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:46 GMT) scandir: Code cleanup. Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D51050 (cherry picked from commit 8ebc0768663b0ea9f78a0b8cffb93ee1684a9b08) M lib/libc/gen/scandir.c ____________________________________________________________________________________________________________ Commit: 1a3c32bac0f029b0186bb856373fe3bcd2d5e18f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1a3c32bac0f029b0186bb856373fe3bcd2d5e18f Author: Dag-Erling Smørgrav (Thu 26 Jun 2025 08:37:00 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:46 GMT) scandir: Propagate errors from readdir(). Currently, if `readdir()` fails, `scandir()` simply returns a partial result (or a null result if it fails before any entries were selected). There is no way within the current API design to return both a partial result and an error indicator, so err on the side of caution: if an error occurs, discard any partial result and return the error instead. MFC after: 1 week Reported by: Maxim Suhanov Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D51046 (cherry picked from commit 62e0f12f5104585b7346fee183e5c667b39ddbad) M lib/libc/gen/scandir.3 M lib/libc/gen/scandir.c M lib/libc/tests/gen/scandir_test.c ____________________________________________________________________________________________________________ Commit: 35f8b56a41230f5c0853c2e096af72e9e65fa0e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=35f8b56a41230f5c0853c2e096af72e9e65fa0e5 Author: Dag-Erling Smørgrav (Mon 23 Jun 2025 14:02:53 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:46 GMT) libc: Rename fscandir{,_b}() to fdscandir{,_b}(). This seems to fit the pattern better (e.g. fdopendir()). I've added weak references to ease the transition, but since it's only been a few days, we can remove them (and the ObsoleteFiles entries for the manual pages) before we branch stable/15. Fixes: deeebfdecab5 Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D50980 (cherry picked from commit 0a5b763d98b921f921243525ff25a70bbe00cfaa) libc: Finish removing fscandir{,_b}(). These only existed for a few days before being renamed, so there's no reason to continue to carry compatibility shims for them. Fixes: deeebfdecab5 Sponsored by: Klara, Inc. Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D50981 (cherry picked from commit ccf937320a1a7383a2c33698007b7244f66dc022) M include/dirent.h M lib/libc/gen/Makefile.inc M lib/libc/gen/Symbol.map M lib/libc/gen/scandir.3 M lib/libc/gen/scandir.c M lib/libc/tests/gen/scandir_blocks_test.c M lib/libc/tests/gen/scandir_test.c M usr.bin/diff/diffdir.c ____________________________________________________________________________________________________________ Commit: c7582d56d29f072b4b18c90569b596d2b37f6b12 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c7582d56d29f072b4b18c90569b596d2b37f6b12 Author: Dag-Erling Smørgrav (Fri 20 Jun 2025 16:30:03 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:46 GMT) diff: Fix gcc build. Sponsored by: Klara, Inc. (cherry picked from commit 28d9586cde8dc783f7b698b10c2b564fde14ae74) M usr.bin/diff/diffdir.c ____________________________________________________________________________________________________________ Commit: e8009e02e967618c58a033ace838561ba3400d38 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e8009e02e967618c58a033ace838561ba3400d38 Author: Dag-Erling Smørgrav (Fri 20 Jun 2025 12:10:35 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:46 GMT) diff: Detect loops when diffing directories. Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D50936 (cherry picked from commit 42092e1b6625b8226de5f34d22b9a96c713626cb) M usr.bin/diff/diffdir.c M usr.bin/diff/tests/diff_test.sh ____________________________________________________________________________________________________________ Commit: 90c5d1b5f4238823414a82b72e7f80d9e83a3de6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=90c5d1b5f4238823414a82b72e7f80d9e83a3de6 Author: Dag-Erling Smørgrav (Fri 20 Jun 2025 17:13:48 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:46 GMT) scandir: Fix behavior when no entries match. In the previous commit, I removed the initial initialization of the `names` array, not realizing that `scandir()` is expected to return a non-null (but empty) array of entries if no entries matched. Restore the historical behavior, document it, and add a test. Fixes: deeebfdecab5 Sponsored by: Klara, Inc. Reviewed by: kevans, allanjude, markj Differential Revision: https://reviews.freebsd.org/D50949 (cherry picked from commit c187b673bb79905b5d5db1eb34d5a893c4464eeb) M lib/libc/gen/scandir.3 M lib/libc/gen/scandir.c M lib/libc/tests/gen/scandir_test.c ____________________________________________________________________________________________________________ Commit: 8b2062419c33c0f5b9b5d83f831bc7f54aff42a7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8b2062419c33c0f5b9b5d83f831bc7f54aff42a7 Author: Dag-Erling Smørgrav (Fri 20 Jun 2025 12:10:23 BST) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:47:46 GMT) libc: Add fscandir(), fscandir_b(), scandirat_b(). While here, clean up scandir() a bit and improve the documentation. MFC after: never Sponsored by: Klara, Inc. Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D50935 (cherry picked from commit deeebfdecab56729fa898271ae53d01c8e156302) M include/dirent.h M lib/libc/gen/Makefile.inc M lib/libc/gen/Symbol.map M lib/libc/gen/scandir.3 M lib/libc/gen/scandir.c M lib/libc/tests/gen/Makefile A lib/libc/tests/gen/scandir_blocks_test.c A lib/libc/tests/gen/scandir_test.c ____________________________________________________________________________________________________________ Commit: 6b0a4d67a952e999c39ee21a5e50122b13a6d391 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6b0a4d67a952e999c39ee21a5e50122b13a6d391 Author: Dag-Erling Smørgrav (Sat 31 Jan 2026 17:52:53 GMT) Committer: Dag-Erling Smørgrav (Thu 5 Feb 2026 14:36:49 GMT) libc/resolv: Switch default to loopback address If no resolver configuration was found, we would fall back to INADDR_ANY and IN6ADDR_ANY. This made sense when it was first written thirty or forty years ago but not today, especially since connecting to INADDR_ANY or IN6ADDR_ANY is no longer supported. Switch to the loopback address and simplify the code. Note that (as the pre-existing comment in the code states) running without a resolver configuration is not really supported. Still, if we're going to have a hardcoded fallback, it might as well work. PR: 291790 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291790 ) MFC after: 1 week Reviewed by: kevans Differential Revision: https://reviews.freebsd.org/D55011 (cherry picked from commit 1538284a5fddfce546db678cb873b7edc6adb9ed) M lib/libc/resolv/res_init.c ____________________________________________________________________________________________________________ Commit: f2f6f1467b8530cb6fa454e86f94277bb18a7829 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f2f6f1467b8530cb6fa454e86f94277bb18a7829 Author: Baptiste Daroussin (Thu 29 Jan 2026 09:56:33 GMT) Committer: Baptiste Daroussin (Thu 5 Feb 2026 14:10:08 GMT) nuageinit: support fetching configuration on multiple iface On some environement a VM can be connected to multiple ifaces but only one will respond to dhcp and able to fetch the metadata. Launch the early dhclient on all available ifaces and as soon as one dhcp has successfully configured an iface, proceed with fetching the metadata. MFC After: 1 week Reported by: mateusz.klejn@ovhcloud.com Tested by: mateusz.klejn@ovhcloud.com Sponsored by: OVHcloud (cherry picked from commit 90a7728cd8905cd26b90d06f7873df8bad43ae9a) M libexec/rc/rc.d/nuageinit ____________________________________________________________________________________________________________ Commit: 6415be5503dbfae1dbd8a954c6a52a225fbfc284 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6415be5503dbfae1dbd8a954c6a52a225fbfc284 Author: Gordon Bergling (Sat 31 Jan 2026 15:22:00 GMT) Committer: Gordon Bergling (Thu 5 Feb 2026 13:53:30 GMT) cpufreq(4): Fix a typo in a source code comment - s/transcation/transaction/ (cherry picked from commit 0a3e7ba466376b46672b56c991c09cde528b9729) M sys/powerpc/cpufreq/pcr.c ____________________________________________________________________________________________________________ Commit: c36e2278f4caaf22e55946f908927dcd46c479e4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c36e2278f4caaf22e55946f908927dcd46c479e4 Author: Gordon Bergling (Sat 31 Jan 2026 15:20:32 GMT) Committer: Gordon Bergling (Thu 5 Feb 2026 13:53:21 GMT) ath_hal(4): Fix a typo in a source code comment - s/arithmatic/arithmetic/ (cherry picked from commit a17659fe260ce16c1e373b543ca9f13cc14340ea) M sys/dev/ath/ath_hal/ar5211/ar5211_reset.c ____________________________________________________________________________________________________________ Commit: 484bf5a664c40a92b4f3acf9c81c57c62624c0c0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=484bf5a664c40a92b4f3acf9c81c57c62624c0c0 Author: Pouria Mousavizadeh Tehrani (Wed 4 Feb 2026 11:03:22 GMT) Committer: Pouria Mousavizadeh Tehrani (Thu 5 Feb 2026 09:55:59 GMT) ifconfig: fix gre(4) status Set `ifr->ifr_name` to display gre options for the interface. Reviewed by: glebius, zlei Approved by: glebius (mentor) MFC after: 1 day Differential Revision: https://reviews.freebsd.org/D55099 (cherry picked from commit c2ba906fa63982d7aa799466d83716d39fe91d2b) M sbin/ifconfig/ifgre.c ____________________________________________________________________________________________________________ Commit: edde7a7a9313c0590d8a371d9336ae2cc7369e62 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=edde7a7a9313c0590d8a371d9336ae2cc7369e62 Author: Michael Osipov (Wed 28 Jan 2026 09:02:33 GMT) Committer: Michael Osipov (Thu 5 Feb 2026 08:47:13 GMT) loader: Prefer comma-separated list of values for "console" PR: 292595 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292595 ) Reviewed by: imp MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54923 (cherry picked from commit 56970c3c4b0bc61d972837661a31cc2b9e8e8d7c) M release/tools/azure.conf M release/tools/openstack.conf M stand/efi/loader/main.c M stand/i386/loader/main.c ____________________________________________________________________________________________________________ Commit: 3cfe90545f016fa190158aa4830f3256e01a7cb2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3cfe90545f016fa190158aa4830f3256e01a7cb2 Author: Zhenlei Huang (Mon 2 Feb 2026 12:26:31 GMT) Committer: Zhenlei Huang (Thu 5 Feb 2026 05:14:43 GMT) e1000: Fix setting the promiscuous mode The variable reg_rctl stores the value read from reg E1000_RCTL. It may contain bits E1000_RCTL_VFE and E1000_RCTL_CFIEN which control VLAN hardware filter feature. The promiscuous mode implies all tagged or untagged packets should be accepted, so the VLAN hardware filter feature should be disabled when enabling the promiscuous mode. Calling em_if_vlan_filter_disable() did the task, but later writing the value of reg_rctl back to the reg E1000_RCTL may restore the feature. Move the calling of em_if_vlan_filter_disable() after writing the reg to fix that. PR: 292759 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292759 ) Reviewed by: kbowling Tested by: vova@zote.me Fixes: 2796f7cab107 e1000: Fix up HW vlan ops MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54973 (cherry picked from commit e63ee5fedb8dab51f1bd6d24cc650b68d9663db5) (cherry picked from commit 8880678b7a47ccfdcc14d3e7cad7f137862dccea) M sys/dev/e1000/if_em.c ____________________________________________________________________________________________________________ Commit: b5e328b194561a50a6991e0a506a2532eec32ecc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b5e328b194561a50a6991e0a506a2532eec32ecc Author: Xin LI (Mon 29 Dec 2025 09:32:24 GMT) Committer: Xin LI (Wed 4 Feb 2026 03:56:22 GMT) cron: Implement full PAM session lifecycle for user jobs Extend PAM integration beyond account checks to include credential establishment and session management, allowing PAM modules to configure the execution environment for user cron jobs. Previously, cron only called pam_acct_mgmt() to verify account validity but immediately terminated the PAM handle before job execution. This prevented PAM modules from establishing sessions, setting credentials (e.g., Kerberos tickets), or exporting environment variables needed by jobs. The PAM handle now persists in the intermediate process throughout the job execution, enabling proper session open/close pairing. Credentials are established and sessions opened while still running as root, before dropping privileges in the grandchild. PAM environment variables are exported in the job process with user crontab variables taking precedence. A session rule (pam_permit.so) is added to /etc/pam.d/cron to enable session support without changing default behavior. Administrators can replace this with other modules as needed. System crontab entries continue to bypass all PAM operations. PR: bin/244844 Reviewed by: des Differential Revision: https://reviews.freebsd.org/D54415 (cherry picked from commit 12444a4da514e91fdf984b31e1691d042d5f88d2) M lib/libpam/pam.d/cron M usr.sbin/cron/cron/do_command.c ____________________________________________________________________________________________________________ Commit: 2255b09a75b73d32a8ef27d3935e8fa2c492d872 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2255b09a75b73d32a8ef27d3935e8fa2c492d872 Author: John Baldwin (Sat 31 Jan 2026 17:00:15 GMT) Committer: Enji Cooper (Tue 3 Feb 2026 19:08:34 GMT) heimdal: Add missing function prototypes This fixes the build with GCC 14 on stable/14 which raises fatal -Wimplicit-function-declaration warnings. Reviewed by: rmacklem, cy Fixes: 5000d023a446 ("heimdal-kadmin: Add support for the -f dump option") Differential Revision: https://reviews.freebsd.org/D54931 (cherry picked from commit 8a8dc73ef87b538c369abc1b642e2a40b52c53c2) M crypto/heimdal/lib/hdb/hdb-private.h ____________________________________________________________________________________________________________ Commit: 9a64f277bf5b422d1ebb3d960f8f6a5920dc3131 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9a64f277bf5b422d1ebb3d960f8f6a5920dc3131 Author: Enji Cooper (Sat 11 Oct 2025 21:47:20 BST) Committer: Enji Cooper (Tue 3 Feb 2026 07:54:20 GMT) OpenSSL: install .pc files from the exporters subdir The .pc files generated in the root directory are used as part of the build; they should never be installed. Use the versions from the exporters subdirectory--which should be installed--as the .pc files which are distributed with FreeBSD. This avoids the need for "fixing up" these files after the fact (see `crypto/openssl/BSDmakefile` for more details as part of this change). Garbage collect `secure/lib/libcrypto/Makefile.version`, et al, as they're orphaned files. They were technically unused prior to this change as the vendor process properly embeds the version numbers in various files, but this commit formalizes the removal. This correction/clarification on the .pc files will be made in an upcoming release of OpenSSL [1]. References: 1. https://github.com/openssl/openssl/issues/28803 Suggested by: Richard Levitte (OpenSSL project) MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D53043 (cherry picked from commit 97388e7215e080f2cb9fd446f4be4e46a9aeb114) M crypto/openssl/BSDmakefile D crypto/openssl/freebsd/dump_version_from_configdata.pl M secure/lib/libcrypto/Makefile.inc D secure/lib/libcrypto/Makefile.version ____________________________________________________________________________________________________________ Commit: aed5a47b3a8a105f1452554a176a7d6c0a750854 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=aed5a47b3a8a105f1452554a176a7d6c0a750854 Author: Enji Cooper (Tue 3 Feb 2026 07:35:24 GMT) Committer: Enji Cooper (Tue 3 Feb 2026 07:35:24 GMT) OpenSSL: update build artifacts to match 3.0.16 release The files committed match the output of the new vendor process. Much of this involves regenerating manpages to catch up to content from the initial 3.0 import. This is a direct commit to stable/14. M crypto/openssl/apps/progs.c M crypto/openssl/apps/progs.h M crypto/openssl/include/crypto/bn_conf.h M crypto/openssl/include/crypto/dso_conf.h M crypto/openssl/include/openssl/bio.h M crypto/openssl/include/openssl/configuration.h M crypto/openssl/include/openssl/pkcs7.h M secure/lib/libcrypto/Makefile.version M secure/lib/libcrypto/man/man3/ADMISSIONS.3 M secure/lib/libcrypto/man/man3/ASN1_EXTERN_FUNCS.3 M secure/lib/libcrypto/man/man3/ASN1_INTEGER_get_int64.3 M secure/lib/libcrypto/man/man3/ASN1_INTEGER_new.3 M secure/lib/libcrypto/man/man3/ASN1_ITEM_lookup.3 M secure/lib/libcrypto/man/man3/ASN1_OBJECT_new.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_TABLE_add.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_length.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_new.3 M secure/lib/libcrypto/man/man3/ASN1_STRING_print_ex.3 M secure/lib/libcrypto/man/man3/ASN1_TIME_set.3 M secure/lib/libcrypto/man/man3/ASN1_TYPE_get.3 M secure/lib/libcrypto/man/man3/ASN1_aux_cb.3 M secure/lib/libcrypto/man/man3/ASN1_generate_nconf.3 M secure/lib/libcrypto/man/man3/ASN1_item_d2i_bio.3 M secure/lib/libcrypto/man/man3/ASN1_item_new.3 M secure/lib/libcrypto/man/man3/ASN1_item_sign.3 M secure/lib/libcrypto/man/man3/ASYNC_WAIT_CTX_new.3 M secure/lib/libcrypto/man/man3/ASYNC_start_job.3 M secure/lib/libcrypto/man/man3/BF_encrypt.3 M secure/lib/libcrypto/man/man3/BIO_ADDR.3 M secure/lib/libcrypto/man/man3/BIO_ADDRINFO.3 M secure/lib/libcrypto/man/man3/BIO_connect.3 M secure/lib/libcrypto/man/man3/BIO_ctrl.3 M secure/lib/libcrypto/man/man3/BIO_f_base64.3 M secure/lib/libcrypto/man/man3/BIO_f_buffer.3 M secure/lib/libcrypto/man/man3/BIO_f_cipher.3 M secure/lib/libcrypto/man/man3/BIO_f_md.3 M secure/lib/libcrypto/man/man3/BIO_f_null.3 M secure/lib/libcrypto/man/man3/BIO_f_prefix.3 M secure/lib/libcrypto/man/man3/BIO_f_readbuffer.3 M secure/lib/libcrypto/man/man3/BIO_f_ssl.3 M secure/lib/libcrypto/man/man3/BIO_find_type.3 M secure/lib/libcrypto/man/man3/BIO_get_data.3 M secure/lib/libcrypto/man/man3/BIO_get_ex_new_index.3 M secure/lib/libcrypto/man/man3/BIO_meth_new.3 M secure/lib/libcrypto/man/man3/BIO_new.3 M secure/lib/libcrypto/man/man3/BIO_new_CMS.3 M secure/lib/libcrypto/man/man3/BIO_parse_hostserv.3 M secure/lib/libcrypto/man/man3/BIO_printf.3 M secure/lib/libcrypto/man/man3/BIO_push.3 M secure/lib/libcrypto/man/man3/BIO_read.3 M secure/lib/libcrypto/man/man3/BIO_s_accept.3 M secure/lib/libcrypto/man/man3/BIO_s_bio.3 M secure/lib/libcrypto/man/man3/BIO_s_connect.3 M secure/lib/libcrypto/man/man3/BIO_s_core.3 M secure/lib/libcrypto/man/man3/BIO_s_datagram.3 M secure/lib/libcrypto/man/man3/BIO_s_fd.3 M secure/lib/libcrypto/man/man3/BIO_s_file.3 M secure/lib/libcrypto/man/man3/BIO_s_mem.3 M secure/lib/libcrypto/man/man3/BIO_s_null.3 M secure/lib/libcrypto/man/man3/BIO_s_socket.3 M secure/lib/libcrypto/man/man3/BIO_set_callback.3 M secure/lib/libcrypto/man/man3/BIO_should_retry.3 M secure/lib/libcrypto/man/man3/BIO_socket_wait.3 M secure/lib/libcrypto/man/man3/BN_BLINDING_new.3 M secure/lib/libcrypto/man/man3/BN_CTX_new.3 M secure/lib/libcrypto/man/man3/BN_CTX_start.3 M secure/lib/libcrypto/man/man3/BN_add.3 M secure/lib/libcrypto/man/man3/BN_add_word.3 M secure/lib/libcrypto/man/man3/BN_bn2bin.3 M secure/lib/libcrypto/man/man3/BN_cmp.3 M secure/lib/libcrypto/man/man3/BN_copy.3 M secure/lib/libcrypto/man/man3/BN_generate_prime.3 M secure/lib/libcrypto/man/man3/BN_mod_exp_mont.3 M secure/lib/libcrypto/man/man3/BN_mod_inverse.3 M secure/lib/libcrypto/man/man3/BN_mod_mul_montgomery.3 M secure/lib/libcrypto/man/man3/BN_mod_mul_reciprocal.3 M secure/lib/libcrypto/man/man3/BN_new.3 M secure/lib/libcrypto/man/man3/BN_num_bytes.3 M secure/lib/libcrypto/man/man3/BN_rand.3 M secure/lib/libcrypto/man/man3/BN_security_bits.3 M secure/lib/libcrypto/man/man3/BN_set_bit.3 M secure/lib/libcrypto/man/man3/BN_swap.3 M secure/lib/libcrypto/man/man3/BN_zero.3 M secure/lib/libcrypto/man/man3/BUF_MEM_new.3 M secure/lib/libcrypto/man/man3/CMS_EncryptedData_decrypt.3 M secure/lib/libcrypto/man/man3/CMS_EncryptedData_encrypt.3 M secure/lib/libcrypto/man/man3/CMS_EnvelopedData_create.3 M secure/lib/libcrypto/man/man3/CMS_add0_cert.3 M secure/lib/libcrypto/man/man3/CMS_add1_recipient_cert.3 M secure/lib/libcrypto/man/man3/CMS_add1_signer.3 M secure/lib/libcrypto/man/man3/CMS_compress.3 M secure/lib/libcrypto/man/man3/CMS_data_create.3 M secure/lib/libcrypto/man/man3/CMS_decrypt.3 M secure/lib/libcrypto/man/man3/CMS_digest_create.3 M secure/lib/libcrypto/man/man3/CMS_encrypt.3 M secure/lib/libcrypto/man/man3/CMS_final.3 M secure/lib/libcrypto/man/man3/CMS_get0_RecipientInfos.3 M secure/lib/libcrypto/man/man3/CMS_get0_SignerInfos.3 M secure/lib/libcrypto/man/man3/CMS_get0_type.3 M secure/lib/libcrypto/man/man3/CMS_get1_ReceiptRequest.3 M secure/lib/libcrypto/man/man3/CMS_sign.3 M secure/lib/libcrypto/man/man3/CMS_sign_receipt.3 A secure/lib/libcrypto/man/man3/CMS_signed_get_attr.3 M secure/lib/libcrypto/man/man3/CMS_uncompress.3 M secure/lib/libcrypto/man/man3/CMS_verify.3 M secure/lib/libcrypto/man/man3/CMS_verify_receipt.3 M secure/lib/libcrypto/man/man3/CONF_modules_free.3 M secure/lib/libcrypto/man/man3/CONF_modules_load_file.3 M secure/lib/libcrypto/man/man3/CRYPTO_THREAD_run_once.3 M secure/lib/libcrypto/man/man3/CRYPTO_get_ex_new_index.3 M secure/lib/libcrypto/man/man3/CRYPTO_memcmp.3 M secure/lib/libcrypto/man/man3/CTLOG_STORE_get0_log_by_id.3 M secure/lib/libcrypto/man/man3/CTLOG_STORE_new.3 M secure/lib/libcrypto/man/man3/CTLOG_new.3 M secure/lib/libcrypto/man/man3/CT_POLICY_EVAL_CTX_new.3 M secure/lib/libcrypto/man/man3/DEFINE_STACK_OF.3 M secure/lib/libcrypto/man/man3/DES_random_key.3 M secure/lib/libcrypto/man/man3/DH_generate_key.3 M secure/lib/libcrypto/man/man3/DH_generate_parameters.3 M secure/lib/libcrypto/man/man3/DH_get0_pqg.3 M secure/lib/libcrypto/man/man3/DH_get_1024_160.3 M secure/lib/libcrypto/man/man3/DH_meth_new.3 M secure/lib/libcrypto/man/man3/DH_new.3 M secure/lib/libcrypto/man/man3/DH_new_by_nid.3 M secure/lib/libcrypto/man/man3/DH_set_method.3 M secure/lib/libcrypto/man/man3/DH_size.3 M secure/lib/libcrypto/man/man3/DSA_SIG_new.3 M secure/lib/libcrypto/man/man3/DSA_do_sign.3 M secure/lib/libcrypto/man/man3/DSA_dup_DH.3 M secure/lib/libcrypto/man/man3/DSA_generate_key.3 M secure/lib/libcrypto/man/man3/DSA_generate_parameters.3 M secure/lib/libcrypto/man/man3/DSA_get0_pqg.3 M secure/lib/libcrypto/man/man3/DSA_meth_new.3 M secure/lib/libcrypto/man/man3/DSA_new.3 M secure/lib/libcrypto/man/man3/DSA_set_method.3 M secure/lib/libcrypto/man/man3/DSA_sign.3 M secure/lib/libcrypto/man/man3/DSA_size.3 M secure/lib/libcrypto/man/man3/DTLS_get_data_mtu.3 M secure/lib/libcrypto/man/man3/DTLS_set_timer_cb.3 M secure/lib/libcrypto/man/man3/DTLSv1_listen.3 M secure/lib/libcrypto/man/man3/ECDSA_SIG_new.3 M secure/lib/libcrypto/man/man3/ECDSA_sign.3 M secure/lib/libcrypto/man/man3/ECPKParameters_print.3 M secure/lib/libcrypto/man/man3/EC_GFp_simple_method.3 M secure/lib/libcrypto/man/man3/EC_GROUP_copy.3 M secure/lib/libcrypto/man/man3/EC_GROUP_new.3 M secure/lib/libcrypto/man/man3/EC_KEY_get_enc_flags.3 M secure/lib/libcrypto/man/man3/EC_KEY_new.3 M secure/lib/libcrypto/man/man3/EC_POINT_add.3 M secure/lib/libcrypto/man/man3/EC_POINT_new.3 M secure/lib/libcrypto/man/man3/ENGINE_add.3 M secure/lib/libcrypto/man/man3/ERR_GET_LIB.3 M secure/lib/libcrypto/man/man3/ERR_clear_error.3 M secure/lib/libcrypto/man/man3/ERR_error_string.3 M secure/lib/libcrypto/man/man3/ERR_get_error.3 M secure/lib/libcrypto/man/man3/ERR_load_crypto_strings.3 M secure/lib/libcrypto/man/man3/ERR_load_strings.3 M secure/lib/libcrypto/man/man3/ERR_new.3 M secure/lib/libcrypto/man/man3/ERR_print_errors.3 M secure/lib/libcrypto/man/man3/ERR_put_error.3 M secure/lib/libcrypto/man/man3/ERR_remove_state.3 M secure/lib/libcrypto/man/man3/ERR_set_mark.3 M secure/lib/libcrypto/man/man3/EVP_ASYM_CIPHER_free.3 M secure/lib/libcrypto/man/man3/EVP_BytesToKey.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_cipher_data.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_CTX_get_original_iv.3 M secure/lib/libcrypto/man/man3/EVP_CIPHER_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_DigestInit.3 M secure/lib/libcrypto/man/man3/EVP_DigestSignInit.3 M secure/lib/libcrypto/man/man3/EVP_DigestVerifyInit.3 M secure/lib/libcrypto/man/man3/EVP_EncodeInit.3 M secure/lib/libcrypto/man/man3/EVP_EncryptInit.3 M secure/lib/libcrypto/man/man3/EVP_KDF.3 M secure/lib/libcrypto/man/man3/EVP_KEM_free.3 M secure/lib/libcrypto/man/man3/EVP_KEYEXCH_free.3 M secure/lib/libcrypto/man/man3/EVP_KEYMGMT.3 M secure/lib/libcrypto/man/man3/EVP_MAC.3 M secure/lib/libcrypto/man/man3/EVP_MD_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_OpenInit.3 M secure/lib/libcrypto/man/man3/EVP_PBE_CipherInit.3 M secure/lib/libcrypto/man/man3/EVP_PKEY2PKCS8.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_ASN1_METHOD.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_ctrl.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_get0_libctx.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_get0_pkey.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set1_pbe_pass.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_hkdf_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_scrypt_N.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_asn1_get_count.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_check.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_copy_parameters.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_decapsulate.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_decrypt.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_derive.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_digestsign_supports_digest.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_encapsulate.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_encrypt.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_fromdata.3 A secure/lib/libcrypto/man/man3/EVP_PKEY_get_attr.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_default_digest_nid.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_field_type.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_group_name.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_get_size.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_gettable_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_is_a.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_keygen.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_meth_get_count.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_meth_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_new.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_print_private.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set1_RSA.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set1_encoded_public_key.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_set_type.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_settable_params.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_sign.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_todata.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_verify.3 M secure/lib/libcrypto/man/man3/EVP_PKEY_verify_recover.3 M secure/lib/libcrypto/man/man3/EVP_RAND.3 M secure/lib/libcrypto/man/man3/EVP_SIGNATURE.3 M secure/lib/libcrypto/man/man3/EVP_SealInit.3 M secure/lib/libcrypto/man/man3/EVP_SignInit.3 M secure/lib/libcrypto/man/man3/EVP_VerifyInit.3 M secure/lib/libcrypto/man/man3/EVP_aes_128_gcm.3 M secure/lib/libcrypto/man/man3/EVP_aria_128_gcm.3 M secure/lib/libcrypto/man/man3/EVP_bf_cbc.3 M secure/lib/libcrypto/man/man3/EVP_blake2b512.3 M secure/lib/libcrypto/man/man3/EVP_camellia_128_ecb.3 M secure/lib/libcrypto/man/man3/EVP_cast5_cbc.3 M secure/lib/libcrypto/man/man3/EVP_chacha20.3 M secure/lib/libcrypto/man/man3/EVP_des_cbc.3 M secure/lib/libcrypto/man/man3/EVP_desx_cbc.3 M secure/lib/libcrypto/man/man3/EVP_idea_cbc.3 M secure/lib/libcrypto/man/man3/EVP_md2.3 M secure/lib/libcrypto/man/man3/EVP_md4.3 M secure/lib/libcrypto/man/man3/EVP_md5.3 M secure/lib/libcrypto/man/man3/EVP_mdc2.3 M secure/lib/libcrypto/man/man3/EVP_rc2_cbc.3 M secure/lib/libcrypto/man/man3/EVP_rc4.3 M secure/lib/libcrypto/man/man3/EVP_rc5_32_12_16_cbc.3 M secure/lib/libcrypto/man/man3/EVP_ripemd160.3 M secure/lib/libcrypto/man/man3/EVP_seed_cbc.3 M secure/lib/libcrypto/man/man3/EVP_set_default_properties.3 M secure/lib/libcrypto/man/man3/EVP_sha1.3 M secure/lib/libcrypto/man/man3/EVP_sha224.3 M secure/lib/libcrypto/man/man3/EVP_sha3_224.3 M secure/lib/libcrypto/man/man3/EVP_sm3.3 M secure/lib/libcrypto/man/man3/EVP_sm4_cbc.3 M secure/lib/libcrypto/man/man3/EVP_whirlpool.3 M secure/lib/libcrypto/man/man3/HMAC.3 M secure/lib/libcrypto/man/man3/MD5.3 M secure/lib/libcrypto/man/man3/MDC2_Init.3 M secure/lib/libcrypto/man/man3/Makefile M secure/lib/libcrypto/man/man3/NCONF_new_ex.3 M secure/lib/libcrypto/man/man3/OBJ_nid2obj.3 M secure/lib/libcrypto/man/man3/OCSP_REQUEST_new.3 M secure/lib/libcrypto/man/man3/OCSP_cert_to_id.3 M secure/lib/libcrypto/man/man3/OCSP_request_add1_nonce.3 M secure/lib/libcrypto/man/man3/OCSP_resp_find_status.3 M secure/lib/libcrypto/man/man3/OCSP_response_status.3 M secure/lib/libcrypto/man/man3/OCSP_sendreq_new.3 M secure/lib/libcrypto/man/man3/OPENSSL_Applink.3 M secure/lib/libcrypto/man/man3/OPENSSL_FILE.3 M secure/lib/libcrypto/man/man3/OPENSSL_LH_COMPFUNC.3 M secure/lib/libcrypto/man/man3/OPENSSL_LH_stats.3 M secure/lib/libcrypto/man/man3/OPENSSL_config.3 M secure/lib/libcrypto/man/man3/OPENSSL_fork_prepare.3 M secure/lib/libcrypto/man/man3/OPENSSL_gmtime.3 M secure/lib/libcrypto/man/man3/OPENSSL_hexchar2int.3 M secure/lib/libcrypto/man/man3/OPENSSL_ia32cap.3 M secure/lib/libcrypto/man/man3/OPENSSL_init_crypto.3 M secure/lib/libcrypto/man/man3/OPENSSL_init_ssl.3 M secure/lib/libcrypto/man/man3/OPENSSL_instrument_bus.3 M secure/lib/libcrypto/man/man3/OPENSSL_load_builtin_modules.3 M secure/lib/libcrypto/man/man3/OPENSSL_malloc.3 M secure/lib/libcrypto/man/man3/OPENSSL_s390xcap.3 M secure/lib/libcrypto/man/man3/OPENSSL_secure_malloc.3 M secure/lib/libcrypto/man/man3/OPENSSL_strcasecmp.3 M secure/lib/libcrypto/man/man3/OSSL_ALGORITHM.3 M secure/lib/libcrypto/man/man3/OSSL_CALLBACK.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_CTX_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_HDR_get0_transactionID.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_ITAV_set0.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_MSG_get0_header.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_MSG_http_perform.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_SRV_CTX_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_STATUSINFO_new.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_exec_certreq.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_log_open.3 M secure/lib/libcrypto/man/man3/OSSL_CMP_validate_msg.3 M secure/lib/libcrypto/man/man3/OSSL_CORE_MAKE_FUNC.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_get0_tmpl.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set0_validity.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set1_regCtrl_regToken.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_MSG_set1_regInfo_certReq.3 M secure/lib/libcrypto/man/man3/OSSL_CRMF_pbmp_new.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX_new_for_pkey.3 M secure/lib/libcrypto/man/man3/OSSL_DECODER_from_bio.3 M secure/lib/libcrypto/man/man3/OSSL_DISPATCH.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX_new_for_pkey.3 M secure/lib/libcrypto/man/man3/OSSL_ENCODER_to_bio.3 M secure/lib/libcrypto/man/man3/OSSL_ESS_check_signing_certs.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_REQ_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_parse_url.3 M secure/lib/libcrypto/man/man3/OSSL_HTTP_transfer.3 M secure/lib/libcrypto/man/man3/OSSL_ITEM.3 M secure/lib/libcrypto/man/man3/OSSL_LIB_CTX.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_BLD.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_allocate_from_text.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_dup.3 M secure/lib/libcrypto/man/man3/OSSL_PARAM_int.3 M secure/lib/libcrypto/man/man3/OSSL_PROVIDER.3 M secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_new.3 M secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_set_callback.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_INFO.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_LOADER.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_SEARCH.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_attach.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_expect.3 M secure/lib/libcrypto/man/man3/OSSL_STORE_open.3 M secure/lib/libcrypto/man/man3/OSSL_trace_enabled.3 M secure/lib/libcrypto/man/man3/OSSL_trace_get_category_num.3 M secure/lib/libcrypto/man/man3/OSSL_trace_set_channel.3 M secure/lib/libcrypto/man/man3/OpenSSL_add_all_algorithms.3 M secure/lib/libcrypto/man/man3/OpenSSL_version.3 M secure/lib/libcrypto/man/man3/PEM_X509_INFO_read_bio_ex.3 M secure/lib/libcrypto/man/man3/PEM_bytes_read_bio.3 M secure/lib/libcrypto/man/man3/PEM_read.3 M secure/lib/libcrypto/man/man3/PEM_read_CMS.3 M secure/lib/libcrypto/man/man3/PEM_read_bio_PrivateKey.3 M secure/lib/libcrypto/man/man3/PEM_read_bio_ex.3 M secure/lib/libcrypto/man/man3/PEM_write_bio_CMS_stream.3 M secure/lib/libcrypto/man/man3/PEM_write_bio_PKCS7_stream.3 M secure/lib/libcrypto/man/man3/PKCS12_PBE_keyivgen.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_create_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_get0_attrs.3 M secure/lib/libcrypto/man/man3/PKCS12_SAFEBAG_get1_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_add1_attr_by_NID.3 M secure/lib/libcrypto/man/man3/PKCS12_add_CSPName_asc.3 M secure/lib/libcrypto/man/man3/PKCS12_add_cert.3 M secure/lib/libcrypto/man/man3/PKCS12_add_friendlyname_asc.3 M secure/lib/libcrypto/man/man3/PKCS12_add_localkeyid.3 M secure/lib/libcrypto/man/man3/PKCS12_add_safe.3 M secure/lib/libcrypto/man/man3/PKCS12_create.3 M secure/lib/libcrypto/man/man3/PKCS12_decrypt_skey.3 M secure/lib/libcrypto/man/man3/PKCS12_gen_mac.3 M secure/lib/libcrypto/man/man3/PKCS12_get_friendlyname.3 M secure/lib/libcrypto/man/man3/PKCS12_init.3 M secure/lib/libcrypto/man/man3/PKCS12_item_decrypt_d2i.3 M secure/lib/libcrypto/man/man3/PKCS12_key_gen_utf8_ex.3 M secure/lib/libcrypto/man/man3/PKCS12_newpass.3 M secure/lib/libcrypto/man/man3/PKCS12_pack_p7encdata.3 M secure/lib/libcrypto/man/man3/PKCS12_parse.3 M secure/lib/libcrypto/man/man3/PKCS5_PBE_keyivgen.3 M secure/lib/libcrypto/man/man3/PKCS5_PBKDF2_HMAC.3 M secure/lib/libcrypto/man/man3/PKCS7_decrypt.3 M secure/lib/libcrypto/man/man3/PKCS7_encrypt.3 M secure/lib/libcrypto/man/man3/PKCS7_get_octet_string.3 M secure/lib/libcrypto/man/man3/PKCS7_sign.3 M secure/lib/libcrypto/man/man3/PKCS7_sign_add_signer.3 M secure/lib/libcrypto/man/man3/PKCS7_type_is_other.3 M secure/lib/libcrypto/man/man3/PKCS7_verify.3 M secure/lib/libcrypto/man/man3/PKCS8_encrypt.3 M secure/lib/libcrypto/man/man3/PKCS8_pkey_add1_attr.3 M secure/lib/libcrypto/man/man3/RAND_add.3 M secure/lib/libcrypto/man/man3/RAND_bytes.3 M secure/lib/libcrypto/man/man3/RAND_cleanup.3 M secure/lib/libcrypto/man/man3/RAND_egd.3 M secure/lib/libcrypto/man/man3/RAND_get0_primary.3 M secure/lib/libcrypto/man/man3/RAND_load_file.3 M secure/lib/libcrypto/man/man3/RAND_set_DRBG_type.3 M secure/lib/libcrypto/man/man3/RAND_set_rand_method.3 M secure/lib/libcrypto/man/man3/RC4_set_key.3 M secure/lib/libcrypto/man/man3/RIPEMD160_Init.3 M secure/lib/libcrypto/man/man3/RSA_blinding_on.3 M secure/lib/libcrypto/man/man3/RSA_check_key.3 M secure/lib/libcrypto/man/man3/RSA_generate_key.3 M secure/lib/libcrypto/man/man3/RSA_get0_key.3 M secure/lib/libcrypto/man/man3/RSA_meth_new.3 M secure/lib/libcrypto/man/man3/RSA_new.3 M secure/lib/libcrypto/man/man3/RSA_padding_add_PKCS1_type_1.3 M secure/lib/libcrypto/man/man3/RSA_print.3 M secure/lib/libcrypto/man/man3/RSA_private_encrypt.3 M secure/lib/libcrypto/man/man3/RSA_public_encrypt.3 M secure/lib/libcrypto/man/man3/RSA_set_method.3 M secure/lib/libcrypto/man/man3/RSA_sign.3 M secure/lib/libcrypto/man/man3/RSA_sign_ASN1_OCTET_STRING.3 M secure/lib/libcrypto/man/man3/RSA_size.3 M secure/lib/libcrypto/man/man3/SCT_new.3 M secure/lib/libcrypto/man/man3/SCT_print.3 M secure/lib/libcrypto/man/man3/SCT_validate.3 M secure/lib/libcrypto/man/man3/SHA256_Init.3 M secure/lib/libcrypto/man/man3/SMIME_read_ASN1.3 M secure/lib/libcrypto/man/man3/SMIME_read_CMS.3 M secure/lib/libcrypto/man/man3/SMIME_read_PKCS7.3 M secure/lib/libcrypto/man/man3/SMIME_write_ASN1.3 M secure/lib/libcrypto/man/man3/SMIME_write_CMS.3 M secure/lib/libcrypto/man/man3/SMIME_write_PKCS7.3 M secure/lib/libcrypto/man/man3/SRP_Calc_B.3 M secure/lib/libcrypto/man/man3/SRP_VBASE_new.3 M secure/lib/libcrypto/man/man3/SRP_create_verifier.3 M secure/lib/libcrypto/man/man3/SRP_user_pwd_new.3 M secure/lib/libcrypto/man/man3/SSL_CIPHER_get_name.3 M secure/lib/libcrypto/man/man3/SSL_COMP_add_compression_method.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_new.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set1_prefix.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set_flags.3 M secure/lib/libcrypto/man/man3/SSL_CONF_CTX_set_ssl_ctx.3 M secure/lib/libcrypto/man/man3/SSL_CONF_cmd.3 M secure/lib/libcrypto/man/man3/SSL_CONF_cmd_argv.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add1_chain_cert.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add_extra_chain_cert.3 M secure/lib/libcrypto/man/man3/SSL_CTX_add_session.3 M secure/lib/libcrypto/man/man3/SSL_CTX_config.3 M secure/lib/libcrypto/man/man3/SSL_CTX_ctrl.3 M secure/lib/libcrypto/man/man3/SSL_CTX_dane_enable.3 M secure/lib/libcrypto/man/man3/SSL_CTX_flush_sessions.3 M secure/lib/libcrypto/man/man3/SSL_CTX_free.3 M secure/lib/libcrypto/man/man3/SSL_CTX_get0_param.3 M secure/lib/libcrypto/man/man3/SSL_CTX_get_verify_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_has_client_custom_ext.3 M secure/lib/libcrypto/man/man3/SSL_CTX_load_verify_locations.3 M secure/lib/libcrypto/man/man3/SSL_CTX_new.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_number.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_set_cache_size.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sess_set_get_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_sessions.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set0_CA_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_curves.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_sigalgs.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set1_verify_cert_store.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_alpn_select_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_store.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cert_verify_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_cipher_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_client_cert_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_client_hello_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ct_validation_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ctlog_list_file.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_default_passwd_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_generate_session_id.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_info_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_keylog_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_max_cert_list.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_min_proto_version.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_msg_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_num_tickets.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_options.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_psk_client_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_quiet_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_read_ahead.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_record_padding_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_security_level.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_cache_mode.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_id_context.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_session_ticket_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_split_send_fragment.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_srp_password.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_ssl_version.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_stateless_cookie_generate_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_timeout.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_servername_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_status_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tlsext_use_srtp.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tmp_dh_callback.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_tmp_ecdh.3 M secure/lib/libcrypto/man/man3/SSL_CTX_set_verify.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_certificate.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_psk_identity_hint.3 M secure/lib/libcrypto/man/man3/SSL_CTX_use_serverinfo.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_free.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_cipher.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_hostname.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_id_context.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get0_peer.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_compress_id.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_protocol_version.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_get_time.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_has_ticket.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_is_resumable.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_print.3 M secure/lib/libcrypto/man/man3/SSL_SESSION_set1_id.3 M secure/lib/libcrypto/man/man3/SSL_accept.3 M secure/lib/libcrypto/man/man3/SSL_alert_type_string.3 M secure/lib/libcrypto/man/man3/SSL_alloc_buffers.3 M secure/lib/libcrypto/man/man3/SSL_check_chain.3 M secure/lib/libcrypto/man/man3/SSL_clear.3 M secure/lib/libcrypto/man/man3/SSL_connect.3 M secure/lib/libcrypto/man/man3/SSL_do_handshake.3 M secure/lib/libcrypto/man/man3/SSL_export_keying_material.3 M secure/lib/libcrypto/man/man3/SSL_extension_supported.3 M secure/lib/libcrypto/man/man3/SSL_free.3 M secure/lib/libcrypto/man/man3/SSL_get0_peer_scts.3 M secure/lib/libcrypto/man/man3/SSL_get_SSL_CTX.3 M secure/lib/libcrypto/man/man3/SSL_get_all_async_fds.3 M secure/lib/libcrypto/man/man3/SSL_get_certificate.3 M secure/lib/libcrypto/man/man3/SSL_get_ciphers.3 M secure/lib/libcrypto/man/man3/SSL_get_client_random.3 M secure/lib/libcrypto/man/man3/SSL_get_current_cipher.3 M secure/lib/libcrypto/man/man3/SSL_get_default_timeout.3 M secure/lib/libcrypto/man/man3/SSL_get_error.3 M secure/lib/libcrypto/man/man3/SSL_get_extms_support.3 M secure/lib/libcrypto/man/man3/SSL_get_fd.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_cert_chain.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_certificate.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_signature_nid.3 M secure/lib/libcrypto/man/man3/SSL_get_peer_tmp_key.3 M secure/lib/libcrypto/man/man3/SSL_get_psk_identity.3 M secure/lib/libcrypto/man/man3/SSL_get_rbio.3 M secure/lib/libcrypto/man/man3/SSL_get_session.3 M secure/lib/libcrypto/man/man3/SSL_get_shared_sigalgs.3 M secure/lib/libcrypto/man/man3/SSL_get_verify_result.3 M secure/lib/libcrypto/man/man3/SSL_get_version.3 M secure/lib/libcrypto/man/man3/SSL_group_to_name.3 M secure/lib/libcrypto/man/man3/SSL_in_init.3 M secure/lib/libcrypto/man/man3/SSL_key_update.3 M secure/lib/libcrypto/man/man3/SSL_library_init.3 M secure/lib/libcrypto/man/man3/SSL_load_client_CA_file.3 M secure/lib/libcrypto/man/man3/SSL_new.3 M secure/lib/libcrypto/man/man3/SSL_pending.3 M secure/lib/libcrypto/man/man3/SSL_read.3 M secure/lib/libcrypto/man/man3/SSL_read_early_data.3 M secure/lib/libcrypto/man/man3/SSL_rstate_string.3 M secure/lib/libcrypto/man/man3/SSL_session_reused.3 M secure/lib/libcrypto/man/man3/SSL_set1_host.3 M secure/lib/libcrypto/man/man3/SSL_set_async_callback.3 M secure/lib/libcrypto/man/man3/SSL_set_bio.3 M secure/lib/libcrypto/man/man3/SSL_set_connect_state.3 M secure/lib/libcrypto/man/man3/SSL_set_fd.3 M secure/lib/libcrypto/man/man3/SSL_set_retry_verify.3 M secure/lib/libcrypto/man/man3/SSL_set_session.3 M secure/lib/libcrypto/man/man3/SSL_set_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_set_verify_result.3 M secure/lib/libcrypto/man/man3/SSL_shutdown.3 M secure/lib/libcrypto/man/man3/SSL_state_string.3 M secure/lib/libcrypto/man/man3/SSL_want.3 M secure/lib/libcrypto/man/man3/SSL_write.3 M secure/lib/libcrypto/man/man3/TS_RESP_CTX_new.3 M secure/lib/libcrypto/man/man3/TS_VERIFY_CTX_set_certs.3 M secure/lib/libcrypto/man/man3/UI_STRING.3 M secure/lib/libcrypto/man/man3/UI_UTIL_read_pw.3 M secure/lib/libcrypto/man/man3/UI_create_method.3 M secure/lib/libcrypto/man/man3/UI_new.3 M secure/lib/libcrypto/man/man3/X509V3_get_d2i.3 M secure/lib/libcrypto/man/man3/X509V3_set_ctx.3 M secure/lib/libcrypto/man/man3/X509_ALGOR_dup.3 A secure/lib/libcrypto/man/man3/X509_ATTRIBUTE.3 M secure/lib/libcrypto/man/man3/X509_CRL_get0_by_serial.3 M secure/lib/libcrypto/man/man3/X509_EXTENSION_set_object.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP_hash_dir.3 M secure/lib/libcrypto/man/man3/X509_LOOKUP_meth_new.3 M secure/lib/libcrypto/man/man3/X509_NAME_ENTRY_get_object.3 M secure/lib/libcrypto/man/man3/X509_NAME_add_entry_by_txt.3 M secure/lib/libcrypto/man/man3/X509_NAME_get0_der.3 M secure/lib/libcrypto/man/man3/X509_NAME_get_index_by_NID.3 M secure/lib/libcrypto/man/man3/X509_NAME_print_ex.3 M secure/lib/libcrypto/man/man3/X509_PUBKEY_new.3 A secure/lib/libcrypto/man/man3/X509_REQ_get_attr.3 A secure/lib/libcrypto/man/man3/X509_REQ_get_extensions.3 M secure/lib/libcrypto/man/man3/X509_SIG_get0.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_get_error.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_new.3 M secure/lib/libcrypto/man/man3/X509_STORE_CTX_set_verify_cb.3 M secure/lib/libcrypto/man/man3/X509_STORE_add_cert.3 M secure/lib/libcrypto/man/man3/X509_STORE_get0_param.3 M secure/lib/libcrypto/man/man3/X509_STORE_new.3 M secure/lib/libcrypto/man/man3/X509_STORE_set_verify_cb_func.3 M secure/lib/libcrypto/man/man3/X509_VERIFY_PARAM_set_flags.3 M secure/lib/libcrypto/man/man3/X509_add_cert.3 M secure/lib/libcrypto/man/man3/X509_check_ca.3 M secure/lib/libcrypto/man/man3/X509_check_host.3 M secure/lib/libcrypto/man/man3/X509_check_issued.3 M secure/lib/libcrypto/man/man3/X509_check_private_key.3 M secure/lib/libcrypto/man/man3/X509_check_purpose.3 M secure/lib/libcrypto/man/man3/X509_cmp.3 M secure/lib/libcrypto/man/man3/X509_cmp_time.3 M secure/lib/libcrypto/man/man3/X509_digest.3 M secure/lib/libcrypto/man/man3/X509_dup.3 M secure/lib/libcrypto/man/man3/X509_get0_distinguishing_id.3 M secure/lib/libcrypto/man/man3/X509_get0_notBefore.3 M secure/lib/libcrypto/man/man3/X509_get0_signature.3 M secure/lib/libcrypto/man/man3/X509_get0_uids.3 M secure/lib/libcrypto/man/man3/X509_get_extension_flags.3 M secure/lib/libcrypto/man/man3/X509_get_pubkey.3 M secure/lib/libcrypto/man/man3/X509_get_serialNumber.3 M secure/lib/libcrypto/man/man3/X509_get_subject_name.3 M secure/lib/libcrypto/man/man3/X509_get_version.3 M secure/lib/libcrypto/man/man3/X509_load_http.3 M secure/lib/libcrypto/man/man3/X509_new.3 M secure/lib/libcrypto/man/man3/X509_sign.3 M secure/lib/libcrypto/man/man3/X509_verify.3 M secure/lib/libcrypto/man/man3/X509_verify_cert.3 M secure/lib/libcrypto/man/man3/X509v3_get_ext_by_NID.3 M secure/lib/libcrypto/man/man3/b2i_PVK_bio_ex.3 M secure/lib/libcrypto/man/man3/d2i_PKCS8PrivateKey_bio.3 M secure/lib/libcrypto/man/man3/d2i_PrivateKey.3 M secure/lib/libcrypto/man/man3/d2i_RSAPrivateKey.3 M secure/lib/libcrypto/man/man3/d2i_SSL_SESSION.3 M secure/lib/libcrypto/man/man3/d2i_X509.3 M secure/lib/libcrypto/man/man3/i2d_CMS_bio_stream.3 M secure/lib/libcrypto/man/man3/i2d_PKCS7_bio_stream.3 M secure/lib/libcrypto/man/man3/i2d_re_X509_tbs.3 M secure/lib/libcrypto/man/man3/o2i_SCT_LIST.3 M secure/lib/libcrypto/man/man3/s2i_ASN1_IA5STRING.3 M secure/lib/libcrypto/man/man5/config.5 M secure/lib/libcrypto/man/man5/fips_config.5 M secure/lib/libcrypto/man/man5/x509v3_config.5 M secure/lib/libcrypto/man/man7/EVP_ASYM_CIPHER-RSA.7 M secure/lib/libcrypto/man/man7/EVP_ASYM_CIPHER-SM2.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-AES.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-ARIA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-BLOWFISH.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CAMELLIA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CAST.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-CHACHA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-DES.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-IDEA.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-NULL.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC2.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC4.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-RC5.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-SEED.7 M secure/lib/libcrypto/man/man7/EVP_CIPHER-SM4.7 M secure/lib/libcrypto/man/man7/EVP_KDF-HKDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-KB.7 M secure/lib/libcrypto/man/man7/EVP_KDF-KRB5KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF1.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF2.7 M secure/lib/libcrypto/man/man7/EVP_KDF-PKCS12KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SCRYPT.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SS.7 M secure/lib/libcrypto/man/man7/EVP_KDF-SSHKDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-TLS13_KDF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-TLS1_PRF.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X942-ASN1.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X942-CONCAT.7 M secure/lib/libcrypto/man/man7/EVP_KDF-X963.7 M secure/lib/libcrypto/man/man7/EVP_KEM-RSA.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-DH.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-ECDH.7 M secure/lib/libcrypto/man/man7/EVP_KEYEXCH-X25519.7 M secure/lib/libcrypto/man/man7/EVP_MAC-BLAKE2.7 M secure/lib/libcrypto/man/man7/EVP_MAC-CMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-GMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-KMAC.7 M secure/lib/libcrypto/man/man7/EVP_MAC-Poly1305.7 M secure/lib/libcrypto/man/man7/EVP_MAC-Siphash.7 M secure/lib/libcrypto/man/man7/EVP_MD-BLAKE2.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD2.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD4.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD5-SHA1.7 M secure/lib/libcrypto/man/man7/EVP_MD-MD5.7 M secure/lib/libcrypto/man/man7/EVP_MD-MDC2.7 M secure/lib/libcrypto/man/man7/EVP_MD-NULL.7 M secure/lib/libcrypto/man/man7/EVP_MD-RIPEMD160.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA1.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA2.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHA3.7 M secure/lib/libcrypto/man/man7/EVP_MD-SHAKE.7 M secure/lib/libcrypto/man/man7/EVP_MD-SM3.7 M secure/lib/libcrypto/man/man7/EVP_MD-WHIRLPOOL.7 M secure/lib/libcrypto/man/man7/EVP_MD-common.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-DH.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-DSA.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-EC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-FFC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-RSA.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-SM2.7 M secure/lib/libcrypto/man/man7/EVP_PKEY-X25519.7 M secure/lib/libcrypto/man/man7/EVP_RAND-CTR-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-HASH-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-HMAC-DRBG.7 M secure/lib/libcrypto/man/man7/EVP_RAND-SEED-SRC.7 M secure/lib/libcrypto/man/man7/EVP_RAND-TEST-RAND.7 M secure/lib/libcrypto/man/man7/EVP_RAND.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-DSA.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-ECDSA.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-ED25519.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-HMAC.7 M secure/lib/libcrypto/man/man7/EVP_SIGNATURE-RSA.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-FIPS.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-base.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-default.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-legacy.7 M secure/lib/libcrypto/man/man7/OSSL_PROVIDER-null.7 M secure/lib/libcrypto/man/man7/RAND.7 M secure/lib/libcrypto/man/man7/RSA-PSS.7 M secure/lib/libcrypto/man/man7/X25519.7 M secure/lib/libcrypto/man/man7/bio.7 M secure/lib/libcrypto/man/man7/crypto.7 M secure/lib/libcrypto/man/man7/ct.7 M secure/lib/libcrypto/man/man7/des_modes.7 M secure/lib/libcrypto/man/man7/evp.7 M secure/lib/libcrypto/man/man7/fips_module.7 M secure/lib/libcrypto/man/man7/life_cycle-cipher.7 M secure/lib/libcrypto/man/man7/life_cycle-digest.7 M secure/lib/libcrypto/man/man7/life_cycle-kdf.7 M secure/lib/libcrypto/man/man7/life_cycle-mac.7 M secure/lib/libcrypto/man/man7/life_cycle-pkey.7 M secure/lib/libcrypto/man/man7/life_cycle-rand.7 M secure/lib/libcrypto/man/man7/migration_guide.7 M secure/lib/libcrypto/man/man7/openssl-core.h.7 M secure/lib/libcrypto/man/man7/openssl-core_dispatch.h.7 M secure/lib/libcrypto/man/man7/openssl-core_names.h.7 M secure/lib/libcrypto/man/man7/openssl-env.7 M secure/lib/libcrypto/man/man7/openssl-glossary.7 M secure/lib/libcrypto/man/man7/openssl-threads.7 M secure/lib/libcrypto/man/man7/openssl_user_macros.7 M secure/lib/libcrypto/man/man7/ossl_store-file.7 M secure/lib/libcrypto/man/man7/ossl_store.7 M secure/lib/libcrypto/man/man7/passphrase-encoding.7 M secure/lib/libcrypto/man/man7/property.7 M secure/lib/libcrypto/man/man7/provider-asym_cipher.7 M secure/lib/libcrypto/man/man7/provider-base.7 M secure/lib/libcrypto/man/man7/provider-cipher.7 M secure/lib/libcrypto/man/man7/provider-decoder.7 M secure/lib/libcrypto/man/man7/provider-digest.7 M secure/lib/libcrypto/man/man7/provider-encoder.7 M secure/lib/libcrypto/man/man7/provider-kdf.7 M secure/lib/libcrypto/man/man7/provider-kem.7 M secure/lib/libcrypto/man/man7/provider-keyexch.7 M secure/lib/libcrypto/man/man7/provider-keymgmt.7 M secure/lib/libcrypto/man/man7/provider-mac.7 M secure/lib/libcrypto/man/man7/provider-object.7 M secure/lib/libcrypto/man/man7/provider-rand.7 M secure/lib/libcrypto/man/man7/provider-signature.7 M secure/lib/libcrypto/man/man7/provider-storemgmt.7 M secure/lib/libcrypto/man/man7/provider.7 M secure/lib/libcrypto/man/man7/proxy-certificates.7 M secure/lib/libcrypto/man/man7/ssl.7 M secure/lib/libcrypto/man/man7/x509.7 M secure/usr.bin/openssl/man/CA.pl.1 M secure/usr.bin/openssl/man/openssl-asn1parse.1 M secure/usr.bin/openssl/man/openssl-ca.1 M secure/usr.bin/openssl/man/openssl-ciphers.1 M secure/usr.bin/openssl/man/openssl-cmds.1 M secure/usr.bin/openssl/man/openssl-cmp.1 M secure/usr.bin/openssl/man/openssl-cms.1 M secure/usr.bin/openssl/man/openssl-crl.1 M secure/usr.bin/openssl/man/openssl-crl2pkcs7.1 M secure/usr.bin/openssl/man/openssl-dgst.1 M secure/usr.bin/openssl/man/openssl-dhparam.1 M secure/usr.bin/openssl/man/openssl-dsa.1 M secure/usr.bin/openssl/man/openssl-dsaparam.1 M secure/usr.bin/openssl/man/openssl-ec.1 M secure/usr.bin/openssl/man/openssl-ecparam.1 M secure/usr.bin/openssl/man/openssl-enc.1 M secure/usr.bin/openssl/man/openssl-engine.1 M secure/usr.bin/openssl/man/openssl-errstr.1 M secure/usr.bin/openssl/man/openssl-fipsinstall.1 M secure/usr.bin/openssl/man/openssl-format-options.1 M secure/usr.bin/openssl/man/openssl-gendsa.1 M secure/usr.bin/openssl/man/openssl-genpkey.1 M secure/usr.bin/openssl/man/openssl-genrsa.1 M secure/usr.bin/openssl/man/openssl-info.1 M secure/usr.bin/openssl/man/openssl-kdf.1 M secure/usr.bin/openssl/man/openssl-list.1 M secure/usr.bin/openssl/man/openssl-mac.1 M secure/usr.bin/openssl/man/openssl-namedisplay-options.1 M secure/usr.bin/openssl/man/openssl-nseq.1 M secure/usr.bin/openssl/man/openssl-ocsp.1 M secure/usr.bin/openssl/man/openssl-passphrase-options.1 M secure/usr.bin/openssl/man/openssl-passwd.1 M secure/usr.bin/openssl/man/openssl-pkcs12.1 M secure/usr.bin/openssl/man/openssl-pkcs7.1 M secure/usr.bin/openssl/man/openssl-pkcs8.1 M secure/usr.bin/openssl/man/openssl-pkey.1 M secure/usr.bin/openssl/man/openssl-pkeyparam.1 M secure/usr.bin/openssl/man/openssl-pkeyutl.1 M secure/usr.bin/openssl/man/openssl-prime.1 M secure/usr.bin/openssl/man/openssl-rand.1 M secure/usr.bin/openssl/man/openssl-rehash.1 M secure/usr.bin/openssl/man/openssl-req.1 M secure/usr.bin/openssl/man/openssl-rsa.1 M secure/usr.bin/openssl/man/openssl-rsautl.1 M secure/usr.bin/openssl/man/openssl-s_client.1 M secure/usr.bin/openssl/man/openssl-s_server.1 M secure/usr.bin/openssl/man/openssl-s_time.1 M secure/usr.bin/openssl/man/openssl-sess_id.1 M secure/usr.bin/openssl/man/openssl-smime.1 M secure/usr.bin/openssl/man/openssl-speed.1 M secure/usr.bin/openssl/man/openssl-spkac.1 M secure/usr.bin/openssl/man/openssl-srp.1 M secure/usr.bin/openssl/man/openssl-storeutl.1 M secure/usr.bin/openssl/man/openssl-ts.1 M secure/usr.bin/openssl/man/openssl-verification-options.1 M secure/usr.bin/openssl/man/openssl-verify.1 M secure/usr.bin/openssl/man/openssl-version.1 M secure/usr.bin/openssl/man/openssl-x509.1 M secure/usr.bin/openssl/man/openssl.1 M secure/usr.bin/openssl/man/tsget.1 ____________________________________________________________________________________________________________ Commit: 7752bb84c45d39a266910f98f5cc097aa017a19c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7752bb84c45d39a266910f98f5cc097aa017a19c Author: Enji Cooper (Sat 11 Oct 2025 22:12:55 BST) Committer: Enji Cooper (Tue 3 Feb 2026 06:25:44 GMT) crypto/openssl: update vendor update instructions This change fills out the requirements for doing vendor updates, documents the new vendor update process, and guides whoever needs to do the next version update a bit better than the documentation did prior to this change so everyone can pitch in with version updates a bit better. Convert the document to Markdown while here to make it easier to render/print out the directions in a structured format. MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53190 Conflicts: crypto/openssl/FREEBSD-upgrade (cherry picked from commit 08cdcff58acb2aec881e42c7f097d6492d864898) D crypto/openssl/FREEBSD-upgrade A crypto/openssl/FREEBSD-upgrade.md ____________________________________________________________________________________________________________ Commit: 913d1916e3e265098fdd87d9b9f6c12a930c71bc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=913d1916e3e265098fdd87d9b9f6c12a930c71bc Author: Enji Cooper (Sat 11 Oct 2025 17:48:10 BST) Committer: Enji Cooper (Tue 3 Feb 2026 06:24:14 GMT) crypto/openssl: remove autogenerated files These files contain build host paths and other configuration details that can be regenerated via the standard vendor import process. Don't clutter up the FreeBSD tree with these files. Add the paths to .gitignore to prevent them from accidentally being added in a future update. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D53044 Conflicts: crypto/openssl/libcrypto.pc crypto/openssl/libssl.pc crypto/openssl/openssl.pc (cherry picked from commit d271d2ce152435b14e309bd8b25f47a0f4a2040f) A crypto/.gitignore D crypto/openssl/libcrypto.pc D crypto/openssl/libssl.pc D crypto/openssl/openssl.pc ____________________________________________________________________________________________________________ Commit: 026e3d12ba24188fbe84207e55195defb31bf81a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=026e3d12ba24188fbe84207e55195defb31bf81a Author: Enji Cooper (Wed 17 Sep 2025 06:57:32 BST) Committer: Enji Cooper (Tue 3 Feb 2026 06:23:58 GMT) crypto/openssl: fix importing new versions from pristine trees Prior to this change, CC was not being passed through to Configure, which was resulting in failures when Configure was running compiler checks. Pass through CC via `WRK_ENV` to Configure so the compiler is defined properly as part of the initial build. MFC after: 1 month Fixes: d18058b7b850 ("crypto/openssl: apply polish to new vendor import process") Differential Revision: https://reviews.freebsd.org/D52595 (cherry picked from commit 52c4b76d1dd385fbe33b78172e39a10749b83d13) M crypto/openssl/BSDmakefile ____________________________________________________________________________________________________________ Commit: 79f62601c73d875123b9c800e688f3c4b70e0b73 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=79f62601c73d875123b9c800e688f3c4b70e0b73 Author: Enji Cooper (Fri 22 Aug 2025 01:19:25 BST) Committer: Enji Cooper (Tue 3 Feb 2026 06:23:58 GMT) crypto/openssl: apply polish to new vendor import process This change does the following 2 things: - Makes the build more repeatable by isolating the environment. This prevents bmake from leaking variables into gmake and makes the overall process a bit more robust. - Add debug printouts to make the process more straightforward to the reader and whoever is executing doing the current vendor import. MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D52420 (cherry picked from commit d18058b7b850c78f2ca1be746ab411c0bed5acc9) M crypto/openssl/BSDmakefile ____________________________________________________________________________________________________________ Commit: d03be8cf3346dae1e438ded3aae4453045b77486 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d03be8cf3346dae1e438ded3aae4453045b77486 Author: Enji Cooper (Fri 1 Aug 2025 05:03:33 BST) Committer: Enji Cooper (Tue 3 Feb 2026 06:23:29 GMT) crypto/openssl: make vendor imports easier/less error prone This change adds a custom BSD makefile containing multiple high-level PHONY targets, similar to targets provided by the ports framework. The Makefile does the following: - Reruns Configure with a deterministic set of arguments to ensure that all appropriate features have been enabled/disabled in OpenSSL. - Preens the pkgconfig files to remove duplicate paths in their `CFLAGS` and `includedir` variables. - Rebuilds all ASM files to ensure that the content contained is fresh. - Rebuilds all manpages to ensure that the content contained in the manpages is fresh. Some additional work needs to be done to make the manpage regeneration "operation" reproducible (the date the manpages were generated is embedded in the files). All dynamic configuration previously captured in `include/openssl/configuration.h` and `include/crypto/bn_conf.h` has been moved to `freebsd/include/dynamic_freebsd_configuration.h` and `freebsd/include/crypto/bn_conf.h`, respectively. This helps ensure that future updates don't wipe out FreeBSD customizations to these files, which tune behavior on a per-target architecture basis, e.g., ARM vs x86, 32-bit vs 64-bit, etc. MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D51663 Conflicts: crypto/openssl/apps/CA.pl crypto/openssl/configdata.pm crypto/openssl/include/openssl/configuration.h crypto/openssl/include/openssl/fipskey.h crypto/openssl/tools/c_rehash crypto/openssl/util/shlib_wrap.sh crypto/openssl/util/wrap.pl secure/lib/libcrypto/Makefile.inc (cherry picked from commit 267f8c1f4b09431b335d5f48d84586047471f978) A crypto/openssl/BSDmakefile M crypto/openssl/apps/progs.c M crypto/openssl/apps/progs.h A crypto/openssl/exporters/libcrypto.pc A crypto/openssl/exporters/libssl.pc A crypto/openssl/exporters/openssl.pc A crypto/openssl/freebsd/dump_version_from_configdata.pl A crypto/openssl/freebsd/include/crypto/bn_conf.h A crypto/openssl/freebsd/include/openssl/configuration.h M crypto/openssl/include/crypto/bn_conf.h A crypto/openssl/libcrypto.pc A crypto/openssl/libssl.pc A crypto/openssl/openssl.pc M secure/lib/libcrypto/Makefile.inc A secure/lib/libcrypto/Makefile.version ____________________________________________________________________________________________________________ Commit: 5c6949e12ee6143505a200b37f2d0bbaf2611656 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5c6949e12ee6143505a200b37f2d0bbaf2611656 Author: Kyle Evans (Tue 3 Feb 2026 04:37:23 GMT) Committer: Kyle Evans (Tue 3 Feb 2026 04:37:23 GMT) kern: disallow user scheduling/debugging/signalling of jailed procs Currently, jails are generally ignored when determining whether the current process/thread can take action upon another, except to determine if the target's jail is somewhere in the source's hierarchy. Notably, uid 1001 in a jail (including prison0) can take action upon a process run by uid 1001 inside of a subordinate jail by default. While this could be considered a feature at times, it is a scenario that really should be deliberately crafted; there is no guarantee that uid 1001 in the parent jail is at all related to uid 1001 in a subordinate. This changes introduces three new privileges that grant a process this kind of insight into other jails: - PRIV_DEBUG_DIFFJAIL - PRIV_SCHED_DIFFJAIl - PRIV_SIGNAL_DIFFJAIL These can be granted independently or in conjunction with the accompanying *_DIFFCRED privileges, i.e.: - PRIV_DEBUG_DIFFCRED alone will let uid 1001 debug uid 1002, but PRIV_DEBUG_DIFFJAIL is additionally needed to let it debug uid 1002 in a jail. - PRIV_DEBUG_DIFFJAIL alone will let uid 1001 debug uid 1001 in a jail, but will not allow it to debug uid 1002 in a jail. Note that security.bsd.see_jail_proc can be used for similar effects, but does not prevent a user from learning the pid of a jailed process with matching creds and signalling it or rescheduling it (e.g., cpuset). Debugging is restricted by visibility in all cases, so that one is less of a concern. This change adds a new jail(8) parameter for the parent to indicate on a per-jail basis if its users are open to being tampered with by the parent's unprivileged users: allow.unprivileged_parent_tampering. This is enabled by default in 14.x, but may be disabled to honor the new priv(9) checks for earlier testing of the new behavior in FreeBSD 15.x. Development setups that involve regularly debugging jailed processes from outside the jail, will want to consider adding a default `allow.unprivileged_parent_tampering;` to your /etc/jail.conf before transitioning to 15.x. Reviewed by: jamie Relnotes: yes (added, off by default) (cherry picked from commit 8a5ceebece0311bc41180b3ca0ce7237def1e253) (cherry picked from commit bd21c672a868f039edb109b73757ad560252ca0f) M sys/kern/kern_jail.c M sys/kern/kern_prot.c M sys/sys/jail.h M sys/sys/priv.h M usr.sbin/jail/jail.8 ____________________________________________________________________________________________________________ Commit: 56b9de5484bc035304290d83fb2dc92d55b98eb4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=56b9de5484bc035304290d83fb2dc92d55b98eb4 Author: Kyle Evans (Tue 3 Feb 2026 04:37:23 GMT) Committer: Kyle Evans (Tue 3 Feb 2026 04:37:23 GMT) jail: separate "statically valid allow flags" from "prison0 allow flags" The current setup means that we can't add an allow flag in sys/jail.h that's disabled by default without removing it from the pr_flags assignment in kern_jail.c. That's technically fine, but I think it's better to make it more prevalent at the PR_ALLOW_* definition site so that it's top-of-mind when adding a new flag. This is a preparatory change for adding an allow flag that prison0 will also have disabled by default, but with an allow.* knob and sysctl to enable it. Reviewed by: jamie (cherry picked from commit 58c92776d1580717934e29ca2c0ef9bf2fbb7397) M sys/kern/kern_jail.c M sys/sys/jail.h ____________________________________________________________________________________________________________ Commit: 1cd151e7bdff43a5fcf560aeb8ec66b1793de4ce URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1cd151e7bdff43a5fcf560aeb8ec66b1793de4ce Author: Jose Luis Duran (Mon 26 Jan 2026 20:19:44 GMT) Committer: Jose Luis Duran (Tue 3 Feb 2026 02:30:22 GMT) METALOG: Order keyword entries To facilitate comparison with mtree -C generated output, keep the keywords ordered. No functional change intended. Reviewed by: imp MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54872 (cherry picked from commit fe962e33d86f888b496b17251c8bedebf92be8ee) M lib/libc/gen/Makefile.inc M sys/conf/kmod.mk M sys/modules/Makefile M usr.sbin/services_mkdb/Makefile ____________________________________________________________________________________________________________ Commit: 04911babef1b22cb4ff9cff08a34ec1e6bf80d45 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=04911babef1b22cb4ff9cff08a34ec1e6bf80d45 Author: Jamie Gritton (Sat 30 Aug 2025 00:02:14 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:16 GMT) netgraph: teach ngctl to attach and run itself in a jail Add -j flag to ngctl to allow ngctl to attach and run inside a jail. This allow parent to manipulate netgraph nodes in the jail even if ngctl is not available. Submitted by: David Marker Reviewed by: kevans, zlei, jamie Relnotes: yes Differential Revision: https://reviews.freebsd.org/D50241 (cherry picked from commit 72d01e62b082de39ecf1ff3ced67dcf7259e5084) ngctl: Fix build without JAIL Reported by: Michael Dexter Fixes: 72d01e62b082 netgraph: teach ngctl to attach and run itself in a jail MFC after: 1 day (cherry picked from commit 685e60e860d61f6e1bcf981f5c30647e0c025702) (cherry picked from commit ab7858d90eba6d8b5829ad974da91ee30dcf92f4) M usr.sbin/ngctl/Makefile M usr.sbin/ngctl/main.c M usr.sbin/ngctl/ngctl.8 ____________________________________________________________________________________________________________ Commit: 7621b6eded126daae08d356a19457a069fc274e2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7621b6eded126daae08d356a19457a069fc274e2 Author: Zhenlei Huang (Mon 20 Oct 2025 05:28:43 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:16 GMT) mrsas: Migrate to use macro LINUX_IOCTL_SET to register linux ioctl handler Reviewed by: markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53158 (cherry picked from commit 0a2fb63b4954c540686d387254b65cc6878bd19e) (cherry picked from commit 3aa4ae2006b50018d9dfa660bcbba1041c104ee1) M sys/dev/mrsas/mrsas_linux.c ____________________________________________________________________________________________________________ Commit: 44dfede815d802a7cda74939719263da31c35bf1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=44dfede815d802a7cda74939719263da31c35bf1 Author: Zhenlei Huang (Mon 20 Oct 2025 05:28:42 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:16 GMT) mfi: Migrate to use macro LINUX_IOCTL_SET to register linux ioctl handler Reviewed by: markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53158 (cherry picked from commit d12ce84b0d338958b26f6eec86b4967fca8d3bd6) (cherry picked from commit 270b9f2a4888b19b8434a831effa3c8426dbb934) M sys/dev/mfi/mfi_linux.c ____________________________________________________________________________________________________________ Commit: 9280324325f3a84d66257b8a43141b3db515d071 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9280324325f3a84d66257b8a43141b3db515d071 Author: Zhenlei Huang (Mon 20 Oct 2025 05:28:42 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:16 GMT) ipmi: Migrate to use macro LINUX_IOCTL_SET to register linux ioctl handler Reviewed by: markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53158 (cherry picked from commit cb0116af7ac794238b0fa569f2722607924fcad6) (cherry picked from commit 0b0ddadf39f6499e4b8ef250023b6d7e68c7e2b0) M sys/dev/ipmi/ipmi_linux.c ____________________________________________________________________________________________________________ Commit: 352c1e0f172a4393fa56733e15f7be2ad62c1a84 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=352c1e0f172a4393fa56733e15f7be2ad62c1a84 Author: Zhenlei Huang (Mon 20 Oct 2025 05:28:42 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:16 GMT) aacraid: Migrate to use macro LINUX_IOCTL_SET to register linux ioctl handler Reviewed by: markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53158 (cherry picked from commit ff29e5bc53e6fafc49d1caceed88cbc9e9223189) (cherry picked from commit e5d4314fce5a8c1dcc8a01f41858fa115d4f2fb6) M sys/dev/aacraid/aacraid_linux.c ____________________________________________________________________________________________________________ Commit: d6bc614eac5a10b7e157892d84f52599b373db38 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d6bc614eac5a10b7e157892d84f52599b373db38 Author: Zhenlei Huang (Mon 20 Oct 2025 05:28:42 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:15 GMT) aac: Migrate to use macro LINUX_IOCTL_SET to register linux ioctl handler Reviewed by: markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53158 (cherry picked from commit db1844a0e1bcafeb974215033ed682e7fa18cac8) (cherry picked from commit 7e9fe8e6a1966f559b7985caca7e7c0e19a3f10e) M sys/dev/aac/aac_linux.c ____________________________________________________________________________________________________________ Commit: e36e17552cdf374353b0c09c0ccdece2a7f614e0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e36e17552cdf374353b0c09c0ccdece2a7f614e0 Author: Zhenlei Huang (Mon 20 Oct 2025 05:28:41 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:15 GMT) sgx: Migrate to use macro LINUX_IOCTL_SET to register linux ioctl handler Reviewed by: markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53158 (cherry picked from commit 8350f46d9808e6183d5f6bd4aa73d4d4e563b574) (cherry picked from commit 957babc65d9f9a5d44fefb0c1169682ae599954b) M sys/amd64/sgx/sgx_linux.c ____________________________________________________________________________________________________________ Commit: 5004b384a6571c7abbcd0bc64bbc60a08ac72557 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5004b384a6571c7abbcd0bc64bbc60a08ac72557 Author: Zhenlei Huang (Mon 20 Oct 2025 05:28:41 BST) Committer: Zhenlei Huang (Mon 2 Feb 2026 17:19:15 GMT) linux: Make the macro LINUX_IOCTL_SET public There're some other drivers want to register and unregister linux ioctl handler. Move the macro LINUX_IOCTL_SET from tdfx_linux.h to linux_ioctl.h so that they can also benefit it. While here, rename the declaration of linux ioctl function to be consistent with the name of the handler. Meanwhile, drop a comment about the macro, since its function is obvious. Reviewed by: markj MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D53158 (cherry picked from commit 790c27317ec1a997a4e5c2bdee9e4acc610c8e3c) (cherry picked from commit 087e77b52399b8a64bb7a12979322d6027bf550b) M sys/compat/linux/linux_ioctl.h M sys/dev/tdfx/tdfx_linux.c M sys/dev/tdfx/tdfx_linux.h ____________________________________________________________________________________________________________ Commit: ea2d344362867b22a1a13b2af984570d93a49687 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ea2d344362867b22a1a13b2af984570d93a49687 Author: Mitchell Horne (Mon 26 Jan 2026 14:58:55 GMT) Committer: Mitchell Horne (Mon 2 Feb 2026 15:43:13 GMT) native-xtools: use static LLVM libraries Set the MK_LLVM_LINK_STATIC_LIBRARIES knob to "yes" when building the native-xtools target. This reverts to the behaviour prior to 2e47f35be5dc. This avoids a build failure that occurs otherwise, where compilation fails looking for a libllvmprivate.so that was not built. It is unclear if this addresses the issue in all instances---some replies in the PRs indicate otherwise. Still, some report success, and in my own testing this fixed creation of a cross-compiled poudriere jail. Commit this while we continue to investigate... PR: 286710, 291409 Tested by: marck, rdunkle@smallcatbrain.com Reviewed by: emaste MFC after: 3 days Fixes: 2e47f35be5dc ("Convert libllvm, libclang and liblldb into private shared libraries"). Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54815 (cherry picked from commit 38e5564ecef53064c984d086a040c01100023f40) M Makefile.inc1 ____________________________________________________________________________________________________________ Commit: 201f968de84dad8c28bfa5262854608e7001f49d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=201f968de84dad8c28bfa5262854608e7001f49d Author: Bjoern A. Zeeb (Sat 31 Jan 2026 22:43:14 GMT) Committer: Bjoern A. Zeeb (Sun 1 Feb 2026 16:44:52 GMT) LinuxKPI: timer KPI *_timer -> timer_* (restore symbols) In c84bfaa2531870a023fa9b267a765b9518ed3350 the symbols for the old timer KPI were removed and replaced by inline functions as backup. This breaks kernel modules (such as drm-kmod, though for that there should be a rebuild in the package repo given a __FreeBSD_version bump) as symbols are missing now. Restore the symbols for the stable branch. This is a direct commit for the fix. Reported by: nyan Reviewed by: nyan Fixes: c84bfaa25318 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D55027 M sys/compat/linuxkpi/common/include/linux/timer.h M sys/compat/linuxkpi/common/src/linux_compat.c ____________________________________________________________________________________________________________ Commit: 21d665d7dd9e50e3975b117a4f3c0f50ed7bd642 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=21d665d7dd9e50e3975b117a4f3c0f50ed7bd642 Author: Jilles Tjoelker (Mon 17 Nov 2025 17:42:01 GMT) Committer: Jilles Tjoelker (Sun 1 Feb 2026 14:33:50 GMT) sh: Fix job pointer invalidation with trapsasync Calling dotrap() can do almost anything, including reallocating the jobtab array. Convert the job pointer to an index before calling dotrap() and then restore a proper job pointer afterwards. PR: 290330 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290330 ) Reported by: bdrewery Reviewed by: bdrewery Differential Revision: https://reviews.freebsd.org/D53793 (cherry picked from commit f44ac8cc9c10d7305223a10b8dbd8e234388cc73) M bin/sh/jobs.c M bin/sh/tests/execution/Makefile A bin/sh/tests/execution/bg14.0 ____________________________________________________________________________________________________________ Commit: c0dcdc3decb413af6188da624b22aa6b45126317 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c0dcdc3decb413af6188da624b22aa6b45126317 Author: Jilles Tjoelker (Sat 15 Nov 2025 16:43:03 GMT) Committer: Jilles Tjoelker (Sun 1 Feb 2026 14:33:50 GMT) sh: Fix a double free in a rare scenario with pipes The command sh -c 'sleep 3 | sleep 2 & sleep 3 & kill %1; wait %1' crashes (with appropriate sanitization such as putting MALLOC_CONF=abort:true,junk:true in the environment or compiling with -fsanitize=address). What happens here is that waitcmdloop() calls dowait() with a NULL job pointer, instructing dowait() to freejob() if it's a non-interactive shell and $! was not and cannot be referenced for it. However, waitcmdloop() then uses fields possibly freed by freejob() and calls freejob() again. This only occurs if the job being waited for is identified via % syntax ($! has never been referenced for it), it is a pipeline with two or more elements and another background job has been started before the wait command. That seems special enough for a bug to remain. Test scripts written by Jilles would almost always use $! and not % syntax. We can instead make waitcmdloop() pass its job pointer to dowait(), fixing up things for that (waitcmdloop() will have to call deljob() if it does not call freejob()). The crash from https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290330#c2 appears to be the same bug. PR: 290330 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290330 ) Reported by: bdrewery Reviewed by: bdrewery Differential Revision: https://reviews.freebsd.org/D53773 (cherry picked from commit 75a6c38e4d5c651b7398bf2bea5baa41a0939e92) M bin/sh/jobs.c M bin/sh/tests/builtins/Makefile A bin/sh/tests/builtins/wait11.0 ____________________________________________________________________________________________________________ Commit: fdbb6759aa4f45e884f4c8af7c965ab8f33cf4d3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fdbb6759aa4f45e884f4c8af7c965ab8f33cf4d3 Author: Enji Cooper (Sun 25 Jan 2026 00:17:06 GMT) Committer: Enji Cooper (Sun 1 Feb 2026 01:19:10 GMT) Account for the ctl test needing the ctl(4) module This testcase does not function unless the /dev/ctl/... node exists, which is created by the ctl(4) module. Require the ctl(4) module to be loaded so the test can be executed. MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54518 (cherry picked from commit da59b3147b01203bb18bcd03cce7a6d5916e87c3) M tests/sys/fs/fusefs/Makefile ____________________________________________________________________________________________________________ Commit: 490474e84f7d9b1e190b6dc60ad0bb8b030d6caf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=490474e84f7d9b1e190b6dc60ad0bb8b030d6caf Author: Enji Cooper (Tue 9 Sep 2025 20:11:13 BST) Committer: Enji Cooper (Sat 31 Jan 2026 23:08:48 GMT) freebsd-update: sort options alphabetically This helps future developers when adding additional options handlers in the surrounding blocks. This is effectively a no-op. MFC after: 1 month (cherry picked from commit 0adec3d7ec96105c402ff2286e402ad63c845066) M usr.sbin/freebsd-update/freebsd-update.sh ____________________________________________________________________________________________________________ Commit: 58cf2a2840532208ab1442fc421ca6c985274c2c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=58cf2a2840532208ab1442fc421ca6c985274c2c Author: Kirill Kochnev (Thu 6 Nov 2025 18:22:30 GMT) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:08 GMT) sys/net/sff8436.h: Fix the register address of link length of copper or active cable The register address of link length of copper or active cable is 146 as per the SFF-8436 specification [1]. [1] 7.6.2 Upper Memory Map Page 00h SFF-8436 Specification (pdf): https://members.snia.org/document/dl/25896 Reviewed by: imp, zlei MFC after: 1 week Pull Request: https://github.com/freebsd/freebsd-src/pull/1885 Closes: https://github.com/freebsd/freebsd-src/pull/1885 (cherry picked from commit a537694b49f719d84e3a69a2b8a3098f603da7d7) (cherry picked from commit fdd23fc3d0aacd1c80d0565d736591521b2421fc) M sys/net/sff8436.h ____________________________________________________________________________________________________________ Commit: a1828b1226fe8de1325a0e46ec5732268ba4525a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a1828b1226fe8de1325a0e46ec5732268ba4525a Author: Zhenlei Huang (Mon 29 Dec 2025 14:20:12 GMT) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:08 GMT) qlnxe: Avoid out-of-bounds reading the multicast ethernet address The correct length of an ethernet address is ETHER_ADDR_LEN but not ETHER_HDR_LEN. MFC after: 1 week (cherry picked from commit 85f499be90c15a3de02d1c62ce03b99fab52f925) (cherry picked from commit 2b01cc15447251862f5e25332fcbf41516f22a3e) M sys/dev/qlnx/qlnxe/qlnx_os.c ____________________________________________________________________________________________________________ Commit: c4e33387d079266cd6cd8ba03047579da536330a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c4e33387d079266cd6cd8ba03047579da536330a Author: Zhenlei Huang (Sun 28 Dec 2025 15:57:51 GMT) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:07 GMT) locking.9: Tweak the table column width to fit 80 characters While here, add some white spaces to improve the readability of source code. Reviewed by: ziaee, #manpages MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54121 (cherry picked from commit 176075e661fc657845d788ab3451e690c4e9bac6) (cherry picked from commit 14484cdb997c152def089c64a012b5a4596e1bfa) M share/man/man9/locking.9 ____________________________________________________________________________________________________________ Commit: e8de565f6bb8d91e2882ae5422b8a4a0337e4ca4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e8de565f6bb8d91e2882ae5422b8a4a0337e4ca4 Author: Zhenlei Huang (Tue 16 Dec 2025 04:41:02 GMT) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:07 GMT) lio: Avoid out-of-bounds read or write MAC address While here, replace loop copying the MAC address with memcpy() for better readability. Reviewed by: markj MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54177 (cherry picked from commit 094626d3a5009a56bf1b763dbdfc681ce371dc99) (cherry picked from commit c162d7febbc83c1d877876b18ee864213dceca51) M sys/dev/liquidio/lio_ioctl.c M sys/dev/liquidio/lio_main.c ____________________________________________________________________________________________________________ Commit: d88ccbddc7c7426b8956b27d9335ce503815d24e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d88ccbddc7c7426b8956b27d9335ce503815d24e Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:37 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:07 GMT) x86/xen: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit c8e077e57b2535b840d391f3217d00465b0514c4) (cherry picked from commit 871a335f3e7dcc8edcada353664ca6b40ae491a1) M sys/x86/xen/xen_apic.c ____________________________________________________________________________________________________________ Commit: db22431755f73cfd8597a929a04e3b9301170bfa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=db22431755f73cfd8597a929a04e3b9301170bfa Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:37 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:07 GMT) tsc: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit bf8f6545f6ca41e080cc3bc42009bdf253f596b4) (cherry picked from commit 81676635bad7e4cec1fee8ab52f1401f37de3d69) M sys/x86/x86/tsc.c ____________________________________________________________________________________________________________ Commit: db80c07267892c7d74e395c171ccfb64f61963e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=db80c07267892c7d74e395c171ccfb64f61963e5 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:37 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:07 GMT) powerpc: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 9caa16bd028746af7bee01c6bcc6394de91265db) (cherry picked from commit 4ccfafac43d398653574e36082fef15083ba6a35) M sys/powerpc/aim/mmu_oea64.c M sys/powerpc/cpufreq/pmcr.c ____________________________________________________________________________________________________________ Commit: 8b07da3ba41d71fece01e2ef5d578b2a1bc078f9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8b07da3ba41d71fece01e2ef5d578b2a1bc078f9 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:36 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:06 GMT) i386: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 0039721e3bab22446413fb62532e622345770ffb) (cherry picked from commit adc937e06f69b2fd21c44e27b5c33bf2c96e7c4d) M sys/i386/i386/machdep.c M sys/i386/i386/pmap.c ____________________________________________________________________________________________________________ Commit: 13a9caf59ac385a8f465c32437dd981af18bf076 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=13a9caf59ac385a8f465c32437dd981af18bf076 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:36 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:06 GMT) arm64 coresight: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 5d5ba0c0fa9e2eaeda9d41508bb0f83d5a55f367) (cherry picked from commit bac2bad0615ac64960f1ae93c0e7c3d9277b1a6b) M sys/arm64/coresight/coresight.c ____________________________________________________________________________________________________________ Commit: 9ddec7bde2b1f65e8347d8b1b550d4e7f80037ba URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9ddec7bde2b1f65e8347d8b1b550d4e7f80037ba Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:35 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:06 GMT) arm: Use proper prototype for SYSINIT functions The only possible return value of function module_info_init() is 0. Make it return void to match the prototype of SYSINIT. MFC after: 1 week (cherry picked from commit 0b9c12fa976446705635a94984f45232f034eecf) (cherry picked from commit fcdc37febbb6b6c4efb7f4f42162466992f90523) M sys/arm/arm/pmap-v6.c M sys/arm/arm/unwind.c ____________________________________________________________________________________________________________ Commit: 2a87a2c911e1f1e8c4d94f929a662bf93979d587 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2a87a2c911e1f1e8c4d94f929a662bf93979d587 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:35 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:06 GMT) vm: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit a5d5851c86ebba87f580e4f9bada495ebeedc465) (cherry picked from commit 27b24359656a3d30828595ade1b824be3fac4f83) M sys/vm/vm_meter.c M sys/vm/vm_pageout.c ____________________________________________________________________________________________________________ Commit: 8f6cd5b69a10df72b7749531bc9bcb684931233c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8f6cd5b69a10df72b7749531bc9bcb684931233c Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:35 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:06 GMT) sys/sysent.h: Remove an unneeded type cast The function exec_sysvec_init() already has the right prototype. While here, remove an extra semicolon from the macro INIT_SYSENTVEC. MFC after: 1 week (cherry picked from commit 296db8c72dca1c17d9a4ce94cc8881e48df8187b) (cherry picked from commit 64771eeaf82f06c2af4e0f20f40baa9d5103f0dd) M sys/sys/sysent.h ____________________________________________________________________________________________________________ Commit: bddd70611a0fceb6a89acaa7955cb46755107a33 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bddd70611a0fceb6a89acaa7955cb46755107a33 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:35 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:05 GMT) MAC: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 12ac59a0d1f6ae2065e8e2cb36c53c00771bfc74) (cherry picked from commit 2e5a55c7af56022fb38e3d528b2e8b1257de891d) M sys/security/mac/mac_framework.c ____________________________________________________________________________________________________________ Commit: 139a9451b9105cad9ccb0b8e4eda91d9cbc40b69 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=139a9451b9105cad9ccb0b8e4eda91d9cbc40b69 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:34 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:05 GMT) audit: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 32c1e940e07c48ab80427efd3d6ff2091407d577) (cherry picked from commit c48a31e3508555606b4399d33000cf60fe98e207) M sys/security/audit/audit.c ____________________________________________________________________________________________________________ Commit: 01af376bd00cb7d367e1c1ec8fc45a6fb8a6f812 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=01af376bd00cb7d367e1c1ec8fc45a6fb8a6f812 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:34 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:05 GMT) nfs: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit a06ecc4f70c296f62f666421c3cf9643d40bdca2) (cherry picked from commit 0e001bef1593c1bcc6c020b0f7a31ce9589ba59e) M sys/nfs/nfs_diskless.c ____________________________________________________________________________________________________________ Commit: a60c8710de4f7e1f752b8640734871efe3fde65a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a60c8710de4f7e1f752b8640734871efe3fde65a Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:34 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:05 GMT) pf: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 0ce8c20fcd44c1595b42fcb540913d3802edd438) (cherry picked from commit 34462748d79a6e2ea8215564286f97e93670dfbb) M sys/netpfil/pf/pf_ioctl.c ____________________________________________________________________________________________________________ Commit: 846393be8cf83081b56ca77dd6c4a3c3ddbbe5c5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=846393be8cf83081b56ca77dd6c4a3c3ddbbe5c5 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:33 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:05 GMT) ipfw: Use proper prototype for SYSINIT functions The only possible return value of function ipfw_init() is 0. Make it return void to match the prototype of SYSINIT. MFC after: 1 week (cherry picked from commit 1bba2194c8a960235f8eae36e7d3e96f347ce779) (cherry picked from commit 745b6ca4ed933f9f4c1d314dc7b0aa31e8e9e0de) M sys/netpfil/ipfw/ip_fw2.c M sys/netpfil/ipfw/ip_fw_nat.c ____________________________________________________________________________________________________________ Commit: db75edf2b61e76425b69a997b8d0445a92cb76f1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=db75edf2b61e76425b69a997b8d0445a92cb76f1 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:33 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:04 GMT) netipsec: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 360bb45690d918fac5bae78ab44f45d11327067a) (cherry picked from commit a32ee2897f8eed4a03976be65020912f03f7228e) M sys/netipsec/xform_ipcomp.c ____________________________________________________________________________________________________________ Commit: 0871d691e3894bc8862ce8a8e94cc8b878bed77d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0871d691e3894bc8862ce8a8e94cc8b878bed77d Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:33 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:04 GMT) netinet6: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit d4a80fa271b148b269869e5ca34e1861d9fcdfb0) (cherry picked from commit cfc237162c248d0488e264bf1fdae0186c5a13c1) M sys/netinet6/in6_fib_algo.c ____________________________________________________________________________________________________________ Commit: 72bf99e08beaade47ff4a748c8c54644446cb979 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=72bf99e08beaade47ff4a748c8c54644446cb979 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:33 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:04 GMT) netinet: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 6613b6ad1ecc5384c119018b9b27c18bd7516e3f) (cherry picked from commit 5b41be5cc0666372840d798507e85544d8a3e7c3) M sys/netinet/cc/cc.c M sys/netinet/in_fib_algo.c ____________________________________________________________________________________________________________ Commit: a7334aec0762c349fdab7e74ffd4b9ba25d4095d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a7334aec0762c349fdab7e74ffd4b9ba25d4095d Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:32 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:04 GMT) net80211: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 7449e59110b8abbb3d647c3565ca3de1d21b2c84) (cherry picked from commit 0270d3dfa75a462019d7d8555c4249b3e8790604) M sys/net80211/ieee80211_ht.c M sys/net80211/ieee80211_hwmp.c M sys/net80211/ieee80211_mesh.c M sys/net80211/ieee80211_phy.c M sys/net80211/ieee80211_proto.c M sys/net80211/ieee80211_vht.c ____________________________________________________________________________________________________________ Commit: ea3567e3bf79a859418b8127db8707a6e8c6130c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ea3567e3bf79a859418b8127db8707a6e8c6130c Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:32 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:03 GMT) net: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 6f8259eae61981d7e5d049be7eed9235f0e8172e) (cherry picked from commit fa80382b99f934ab46b9365d1081c6425ed58026) M sys/net/route.c M sys/net/route/route_tables.c M sys/net/rtsock.c ____________________________________________________________________________________________________________ Commit: 5d1cf19810bb46afe3ed487a71971a2163f710d8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5d1cf19810bb46afe3ed487a71971a2163f710d8 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:31 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:03 GMT) libkern: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 850a88e8db761c55b9aa56c2cf4da258dc61dec5) (cherry picked from commit 2b27541988072b3c1e5f2f901e622f38af0be4c9) M sys/libkern/arc4random.c M sys/libkern/x86/crc32_sse42.c ____________________________________________________________________________________________________________ Commit: 5f6c2ab28f6c3aa2fde2f77e3769e28e2a40e5ed URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5f6c2ab28f6c3aa2fde2f77e3769e28e2a40e5ed Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:31 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:03 GMT) jail: Use proper prototype for SYSINIT functions The only possible return value of function jm_sysinit() and jm_sysuninit() is 0. Make them return void to match the prototype of SYSINIT. MFC after: 1 week (cherry picked from commit a988393b469be58ff87f4d044af61fd2251b490c) (cherry picked from commit 20af9193776df39331d5287a4a8b22de6d665c8f) M sys/kern/kern_jailmeta.c ____________________________________________________________________________________________________________ Commit: cc6e893745521279e09356cf517a3f57f7125b53 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cc6e893745521279e09356cf517a3f57f7125b53 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:31 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:03 GMT) kern_sharedpage.c: Remove an unneeded type cast The function shared_page_init() already has the right prototype. MFC after: 1 week (cherry picked from commit 141b44e0afc2912a0a1c7bbb4116921ead1d58d4) (cherry picked from commit 6e8b07298065f0f6354779de9b787e7a5ecb09cd) M sys/kern/kern_sharedpage.c ____________________________________________________________________________________________________________ Commit: bec38564142e5a3d357c7405831c1145ff610842 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bec38564142e5a3d357c7405831c1145ff610842 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:31 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:03 GMT) kern: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 9c35c4470ad131c748efba7f64ad2fff7d21060f) (cherry picked from commit 5b8848866f2f709a6bda8c50306a663100157b42) M sys/kern/kern_boottrace.c M sys/kern/kern_devctl.c M sys/kern/kern_event.c M sys/kern/kern_linker.c M sys/kern/kern_malloc.c M sys/kern/kern_racct.c M sys/kern/kern_rangelock.c M sys/kern/kern_rctl.c M sys/kern/kern_sig.c M sys/kern/kern_time.c M sys/kern/subr_pcpu.c M sys/kern/sys_socket.c ____________________________________________________________________________________________________________ Commit: 70150f0cb7b2e5f8fdcf39338c160cd2aa95f979 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=70150f0cb7b2e5f8fdcf39338c160cd2aa95f979 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:30 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:02 GMT) p9fs: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 11cfa861e3ff83649c54e5781b541166dc73e80b) (cherry picked from commit 618c7cffeb28a89475ee001827e53049e45715ed) M sys/fs/p9fs/p9_transport.c ____________________________________________________________________________________________________________ Commit: 65b07ecacc58b69a32d6421caa138daead009eaf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=65b07ecacc58b69a32d6421caa138daead009eaf Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:30 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:02 GMT) xen: Use proper prototype for SYSINIT functions The only possible return value of function xen_intr_init() is 0. Make it return void to match the prototype of SYSINIT. MFC after: 1 week (cherry picked from commit 19061a898ac809c8e9a30839b7200ff13a6eb9c0) (cherry picked from commit a1efb352f24f2e86c99a4ca94b64384cd991bc09) M sys/dev/xen/bus/xen_intr.c ____________________________________________________________________________________________________________ Commit: f67ece8b30cf86493649796a07e3304873050553 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f67ece8b30cf86493649796a07e3304873050553 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:29 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:02 GMT) xdma: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit ef56b9188937eec1ceef458d02c71c6b890b398a) (cherry picked from commit 0a30ce95a74e753c6963bc11a461f66ded536d50) M sys/dev/xdma/xdma.c ____________________________________________________________________________________________________________ Commit: 3b697f765d11535783f01c4e325c822374dce76d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3b697f765d11535783f01c4e325c822374dce76d Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:29 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:02 GMT) nvme: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit dd256c3fa738b6941f58355c077224c9a227b169) (cherry picked from commit 6edef6b6364162932379bd172930d82b067177cf) M sys/dev/nvme/nvme.c M sys/dev/nvme/nvme_sim.c ____________________________________________________________________________________________________________ Commit: 8c800d39080a217b410a44f9b04e3ea1e7154689 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8c800d39080a217b410a44f9b04e3ea1e7154689 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:29 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:02 GMT) iommu_gas: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 05c313cd2cbcc6c0a6ffa97363b70232d02542f3) (cherry picked from commit 9336f20f89e8b819c8f07125fd6d305d78afd546) M sys/dev/iommu/iommu_gas.c ____________________________________________________________________________________________________________ Commit: e40461251825f961702a05eb0eacd72f4d335a09 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e40461251825f961702a05eb0eacd72f4d335a09 Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:28 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:01 GMT) dev/fdt: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit d82653aee7e357916403147dc21d342e6b543106) (cherry picked from commit d23e3b6e562faee8035f86f099e3319a167daa91) M sys/dev/fdt/fdt_slicer.c ____________________________________________________________________________________________________________ Commit: 93da73e85a719625b1c3f99d89e05a1d56f1f4df URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=93da73e85a719625b1c3f99d89e05a1d56f1f4df Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:28 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:01 GMT) opensolaris: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit 41c0b64f021ecda09c0d42bfc539dba69ec51e4c) (cherry picked from commit 198d5a629706742a82e35b44f982f37aaa028e21) M sys/cddl/compat/opensolaris/kern/opensolaris.c ____________________________________________________________________________________________________________ Commit: a0d353904a7e1e2f1c6e633cc8b12d2ec4789b1e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a0d353904a7e1e2f1c6e633cc8b12d2ec4789b1e Author: Zhenlei Huang (Mon 13 Oct 2025 11:12:28 BST) Committer: Zhenlei Huang (Sat 31 Jan 2026 18:25:01 GMT) scsi: Use proper prototype for SYSINIT functions MFC after: 1 week (cherry picked from commit f94b1a8ca6e016aeff09e2053dc293b83c3aa912) (cherry picked from commit 52b3cb8918e38ccd0f2e763fe3120bfb7858b6e1) M sys/cam/scsi/scsi_all.c ____________________________________________________________________________________________________________ Commit: 8a3223b62a15016ad9d17baed393b5c2e8d4bdd4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8a3223b62a15016ad9d17baed393b5c2e8d4bdd4 Author: Dag-Erling Smørgrav (Thu 22 Jan 2026 18:16:37 GMT) Committer: Dag-Erling Smørgrav (Sat 31 Jan 2026 17:50:03 GMT) mdmfs: Fix soft updates logic Now that newfs(8) has a command-line argument to disable soft updates, use that instead of running tunefs(8) after the fact to turn them off. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: mckusick, imp Differential Revision: https://reviews.freebsd.org/D54783 (cherry picked from commit 4b9620433855b75989164c1a8a8a2e1a9b5fbff2) M sbin/mdmfs/mdmfs.c ____________________________________________________________________________________________________________ Commit: 929ef0d36c6c80981c11dae0f51f6ab839a58c06 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=929ef0d36c6c80981c11dae0f51f6ab839a58c06 Author: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:34:00 GMT) Committer: Dag-Erling Smørgrav (Sat 31 Jan 2026 17:50:03 GMT) newfs: Add an option to disable soft updates A previous commit turned soft updates on by default for UFS2 without providing a way to turn them off. This corrects that by adding a new -u flag which forces soft updates (and soft updates journaling) off. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Fixes: 61dece6d27fb ("Enable soft updates by default for UFS2 filesystems.") Reviewed by: mckusick Differential Revision: https://reviews.freebsd.org/D54576 (cherry picked from commit 68562f8145e8154e7e276897a546995f0d8f3428) newfs: Add -u to getopt string Fixes: 68562f8145e8 ("newfs: Add an option to disable soft updates") (cherry picked from commit 717ae163919e48f000b94f85dc188e0d92261929) M sbin/newfs/newfs.8 M sbin/newfs/newfs.c ____________________________________________________________________________________________________________ Commit: e58f90157c9b947c13e205fb0062411168fdab11 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e58f90157c9b947c13e205fb0062411168fdab11 Author: Michael Osipov (Fri 23 Jan 2026 20:26:24 GMT) Committer: Michael Osipov (Sat 31 Jan 2026 17:30:27 GMT) loader.conf.5: "console" setting does not document multi-value possiblity PR: 292595 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292595 ) Approved by: ziaee, dab, imp, tsoome MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54843 (cherry picked from commit 240c614d48cb0484bfe7876decdf6bbdcc99ba73) M stand/defaults/loader.conf M stand/defaults/loader.conf.5 ____________________________________________________________________________________________________________ Commit: 139f620c0c9056ddec81fce3738396b145bd69b7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=139f620c0c9056ddec81fce3738396b145bd69b7 Author: Roman Bogorodskiy (Mon 26 Jan 2026 18:24:15 GMT) Committer: Roman Bogorodskiy (Sat 31 Jan 2026 13:24:33 GMT) bhyve: make BHYVE_SNAPSHOT amd64-only Build fails with BHYVE_SNAPSHOT enabled on non-amd64, so add it to BROKEN_OPTIONS for these arches. PR: 292686 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292686 ) Reviewed by: emaste, markj MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54873 (cherry picked from commit b01763b2b2ab2d87f7d3c6ae57783c731ce548dd) M share/mk/src.opts.mk ____________________________________________________________________________________________________________ Commit: 3ab15ea66043b7be87914c151ced6c3ccf7d7c0b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3ab15ea66043b7be87914c151ced6c3ccf7d7c0b Author: Colin Percival (Mon 13 Oct 2025 16:58:10 BST) Committer: Colin Percival (Fri 30 Jan 2026 21:00:35 GMT) Ping: Make build reproducible As recently fixed in sockstat (9934558460e4), having tests/Makefile include files from the parent directory with SRCS= ../foo.c results in a race condition as the parent build and the tests build try to produce the same object file but contain different paths. Use .PATH to tell make to find sockstat.c in the parent directory but place the object file in the current object directory. Reviewed by: emaste, jrtc27, kevans MFC after: 3 days Sponsored by: https://www.patreon.com/cperciva Differential Revision: https://reviews.freebsd.org/D53075 (cherry picked from commit 3c9a2f383fc25cdffa80c1348cb5388290e0f283) M sbin/ping/tests/Makefile ____________________________________________________________________________________________________________ Commit: d76b8a928d6663501211fdb82b32c1403a81a48f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d76b8a928d6663501211fdb82b32c1403a81a48f Author: Adrian Chadd (Fri 30 Jan 2026 06:36:33 GMT) Committer: Adrian Chadd (Fri 30 Jan 2026 06:38:36 GMT) powerpc: explicitly cast the timebase printfs This is causing compilation issues on powerpc:powerpc GENERIC. (cherry picked from commit 03e4cc9fdeb2a6445f13cd41b471927a0f722fff) M sys/powerpc/powermac/platform_powermac.c ____________________________________________________________________________________________________________ Commit: efd7c55bade8654ab894669e1ab46a4cc54d4676 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=efd7c55bade8654ab894669e1ab46a4cc54d4676 Author: Adrian Chadd (Fri 23 Jan 2026 07:36:00 GMT) Committer: Adrian Chadd (Fri 30 Jan 2026 05:06:26 GMT) powerpc: disable the TLBIE lock, it's not needed for POWER8 According to POWER8_UM_v1.3_16MAR2016 3.8.3 Translation Lookaside Buffer (TLB), POWER8 supports lockless TLBIE operations. Locally Tested: * IBM POWER8 Revision 2.0, dual socket, 160 threads Differential Revision: https://reviews.freebsd.org/D54855 Approved by: jhibbits (cherry picked from commit 9a5baa9c585652fb7bd4ccd45d567204caf349f2) M sys/powerpc/aim/moea64_native.c ____________________________________________________________________________________________________________ Commit: f7358bc0363fc1860cea64da972e590c9053919d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f7358bc0363fc1860cea64da972e590c9053919d Author: Adrian Chadd (Tue 20 Jan 2026 02:38:43 GMT) Committer: Adrian Chadd (Fri 30 Jan 2026 05:06:18 GMT) powerpc: add a best-effort SMP time base sync for G5's that need it There's no timebase freeze platform routine registered on my dual 2.3GHz G5 PPC970FX Apple PowerMac. For platforms without an explicit timebase freeze/unfreeze, we'll have to make do with what we have - which for now is an explicit hand-crafted spinlock/rendezvous method. * For existing platforms, they'll still continue to clock freeze / rendezvous; albeit with some stronger atomic bits now (from jhibbits@.) * Instead of the fallback being "no timesync", implement a best-effort one which does a similar rendezvous barrier between BSP and APs, but instead of freeze/unfreeze the first instruction after the CPUs all register they're ready is to set the timebase. This has resulted in many reboots of my Powermac G5 dual-socket device correctly starting and running in SMP mode. Differential Revision: https://reviews.freebsd.org/D54821 Reviewed by: jhibbits (cherry picked from commit 422c8719eab2b8a01b49f748a88dd372db25f888) M sys/powerpc/powermac/platform_powermac.c ____________________________________________________________________________________________________________ Commit: 8baa4e9647192e476a0a14a796e36aef6ea4607e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8baa4e9647192e476a0a14a796e36aef6ea4607e Author: Adrian Chadd (Sun 11 Jan 2026 03:59:41 GMT) Committer: Adrian Chadd (Fri 30 Jan 2026 05:06:09 GMT) powerpc: fix release image building for Apple partitions awk changed somewhere between 14 and 15 and it stopped accepting a hexadecimal number as its input - it will always return 0. This results in a very badly written apple boot block. So just remove it; do the math in shell. PR: kern/292341 Differential Revision: https://reviews.freebsd.org/D54639 Reviewed by: imp MFC after: 1 week (cherry picked from commit 7afa03963c448a14b1735a10eaf84941b0b74862) M release/powerpc/mkisoimages.sh ____________________________________________________________________________________________________________ Commit: 666599639cf6bd1c4ae1ff4adad8150a44d7a8d4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=666599639cf6bd1c4ae1ff4adad8150a44d7a8d4 Author: Adrian Chadd (Sat 3 Jan 2026 22:52:14 GMT) Committer: Adrian Chadd (Fri 30 Jan 2026 05:05:53 GMT) powerpc: put the isync inside the TD_LOCK() checking loop Fix a narrow window where the lock is unlocked but the checking CPU hasn't flushed things appropriately. Inside this window the CPU inside cpu_switch() will loop forever thinking the destination thread is still blocked/locked even though it is not. This manifests as the system hanging after starting all APs. I've seen this reliably trigger in qemu-system-ppc64 running power9 pseries guests; the more CPUs the more likely it triggers at boot. PR: kern/292167 Differential Revision: https://reviews.freebsd.org/D54478 Reviewed by: jhibbits MFC after: 1 week Relnotes: yes (cherry picked from commit 8df2e542146801fd01675e56724eaa567d04c209) M sys/powerpc/powerpc/swtch32.S M sys/powerpc/powerpc/swtch64.S ____________________________________________________________________________________________________________ Commit: d499239dc57b7faf34e02e874606ba0016ca07b5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d499239dc57b7faf34e02e874606ba0016ca07b5 Author: Jessica Clarke (Tue 27 Jan 2026 21:44:39 GMT) Committer: Jessica Clarke (Fri 30 Jan 2026 01:19:18 GMT) libc: Don't use uninitialised string for getnetbyaddr[_r](0) DNS lookup If net is all-zero, the loop to extract all leading non-zero octets will iterate zero times and leave nn with the value 4, which the following switch statement to initialise qbuf does not handle. As a result, _dns_getnetbyaddr will look up the PTR record for this uninitialised string, which will leak the pre-existing contents of that stack memory to the DNS resolver and, if remote and not otherwise protected, network. Note that _dns_getnetbyaddr is only used if nsswitch.conf is configured to enable the "dns" source for the "networks" database, which is not the default configuration in FreeBSD. For glibc this same bug, in code also derived from BIND's, was issued CVE-2026-0915. This commit adopts the same behaviour as glibc's fix, which is to regard a net of 0 as being for 0.0.0.0. Apparently NetBSD will return NS_UNAVAIL instead, which may or may not make more sense, but in general glibc compatibility tends to cause less friction when there's not a good reason to avoid it. Reviewed by: markj (secteam) Fixes: 1363f04ce1b8 ("get* rework and new bind code") MFC after: 1 day Security: Same bug as glibc's CVE-2026-0915 (cherry picked from commit 331316b073505e4794754af1cd0c5ccc578a2bde) M lib/libc/net/getnetbydns.c ____________________________________________________________________________________________________________ Commit: afedf568e111b5b6093e8465c1e22ab3895c6162 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=afedf568e111b5b6093e8465c1e22ab3895c6162 Author: Jessica Clarke (Wed 31 Dec 2025 17:14:55 GMT) Committer: Jessica Clarke (Fri 30 Jan 2026 01:19:18 GMT) Merge commit faa5141b9be4 from file git (by Christos Zoulas): PR/656: harry.sintonen: Fix bug in byte swapping that was caused by the change to make flags uint16_t and cont_level uint8_t. This fixes using a magic.mgc built with a different endianness than file(1) itself, e.g. when building powerpc64 on amd64. PR: 292079 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292079 ) Fixes: ae316d1d1cff ("MFV: file 5.46.") MFC after: 3 days (cherry picked from commit 39047538cf5d8f26112f7b08b3c56967f70f7f94) M contrib/file/src/apprentice.c ____________________________________________________________________________________________________________ Commit: d203bd96bb253981ca8767caf36ee9d7771bbce3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d203bd96bb253981ca8767caf36ee9d7771bbce3 Author: John Baldwin (Mon 24 Nov 2025 15:49:09 GMT) Committer: John Baldwin (Thu 29 Jan 2026 15:30:48 GMT) freebsd32_setcred: Copy all of the setcred fields individually This is the more typical style used in compat syscalls. Modern compilers are smart enough to coalesce multiple member assignments into a bulk copy. Reviewed by: olce, brooks Obtained from: CheriBSD Sponsored by: AFRL, DARPA Differential Revision: https://reviews.freebsd.org/D53757 (cherry picked from commit f7ab908244e50c8c8edf314424c860e34ea3d7e9) M sys/compat/freebsd32/freebsd32_misc.c M sys/sys/ucred.h ____________________________________________________________________________________________________________ Commit: 52864a411a6fb5bbb599ef6d15d727b782abf104 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=52864a411a6fb5bbb599ef6d15d727b782abf104 Author: John Baldwin (Mon 24 Nov 2025 15:48:48 GMT) Committer: John Baldwin (Thu 29 Jan 2026 15:30:22 GMT) setcred: Move initial copyin of struct setcred out to per-ABI syscall This is the more typical approach used in the tree for system calls with per-ABI structure layouts. Reviewed by: olce, brooks Obtained from: CheriBSD Sponsored by: AFRL, DARPA Differential Revision: https://reviews.freebsd.org/D53756 (cherry picked from commit 6292eecfd95c78abc1ab14f20ceaa507ab9c636a) M sys/compat/freebsd32/freebsd32_misc.c M sys/kern/kern_prot.c M sys/sys/ucred.h ____________________________________________________________________________________________________________ Commit: 7a1a4f10a64d51f877422da6d4833cc4e2a95265 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7a1a4f10a64d51f877422da6d4833cc4e2a95265 Author: John Baldwin (Mon 24 Nov 2025 15:47:20 GMT) Committer: John Baldwin (Thu 29 Jan 2026 15:28:48 GMT) MAC: Use the current thread's user ABI to determine the layout of struct mac This removes mac_label_copyin32() as mac_label_copyin() can now handle both native and 32-bit struct mac objects. Reviewed by: olce, brooks Obtained from: CheriBSD Sponsored by: AFRL, DARPA Differential Revision: https://reviews.freebsd.org/D53755 (cherry picked from commit 134d00bd2c910cc7cc21c11fba093ff82bbb9344) M sys/kern/kern_prot.c M sys/security/mac/mac_syscalls.c M sys/security/mac/mac_syscalls.h ____________________________________________________________________________________________________________ Commit: 2fc26b2f3fefc6f4384a3ef2f5781b54ee81b8b7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2fc26b2f3fefc6f4384a3ef2f5781b54ee81b8b7 Author: John Baldwin (Thu 11 Sep 2025 22:10:40 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:27:46 GMT) cxgbe tom: Send auxiliary TLS work requests as raw WR mbufs In particular, the work request to update the TCB state when switching from plain TCP to TLS is now queued on the connection's offload transmit queue rather than over the per-port control queue. This also handles an unlikely edge case that a connection does not have sufficient credits to transmit other work requests synchronously such as programming the key in on-card memory or altering TCB fields. Reviewed by: np Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D47763 (cherry picked from commit d869395ac4bd248da7c5bdc67afb19ca89fbeeee) M sys/dev/cxgbe/tom/t4_cpl_io.c M sys/dev/cxgbe/tom/t4_tls.c M sys/dev/cxgbe/tom/t4_tom.h ____________________________________________________________________________________________________________ Commit: 507dc6c1c810c6cd038a11291571f3aabfcc6731 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=507dc6c1c810c6cd038a11291571f3aabfcc6731 Author: John Baldwin (Thu 11 Sep 2025 22:10:40 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:27:41 GMT) cxgbe tom: Export alloc_raw_mbuf for use in other TOE drivers Reviewed by: np Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D47762 (cherry picked from commit a7aab22d2bf36191baa646fc136ca020dad209f3) M sys/dev/cxgbe/tom/t4_ddp.c M sys/dev/cxgbe/tom/t4_tom.h ____________________________________________________________________________________________________________ Commit: bde291c654c21d58534cef5b49965901971708b8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bde291c654c21d58534cef5b49965901971708b8 Author: John Baldwin (Thu 11 Sep 2025 22:10:39 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:27:34 GMT) cxgbe tom: Support sending "raw" WR mbufs on plain TCP and TLS sockets This is intended to support control work requests that manipulate connection state but do not transmit data. Raw WRs are transmitted immediately if possible, otherwise they are queued to an mbufq in the toe pcb until sufficient credits are available. Raw WRs take precendence over transmitting socket data. Reviewed by: np Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D47761 (cherry picked from commit e2a2a7581c9663a08b8d92a34040d6fcdfc20816) M sys/dev/cxgbe/tom/t4_cpl_io.c M sys/dev/cxgbe/tom/t4_tls.c M sys/dev/cxgbe/tom/t4_tom.h ____________________________________________________________________________________________________________ Commit: 4df8a30e54b6a0c5b27f3119429d2bb044cd3e27 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4df8a30e54b6a0c5b27f3119429d2bb044cd3e27 Author: John Baldwin (Thu 11 Sep 2025 22:10:39 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:27:29 GMT) cxgbe tom: Halve the size of offload transmit software descriptors Use bitfields to pack tx_credits and plen into a single 32-bit word. Reviewed by: np Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D47759 (cherry picked from commit 5a38857684907c52982787dbac2c5e5c8abfd4f8) M sys/dev/cxgbe/cxgbei/icl_cxgbei.c M sys/dev/cxgbe/iw_cxgbe/qp.c M sys/dev/cxgbe/tom/t4_cpl_io.c M sys/dev/cxgbe/tom/t4_tls.c M sys/dev/cxgbe/tom/t4_tom.c M sys/dev/cxgbe/tom/t4_tom.h ____________________________________________________________________________________________________________ Commit: 4af3e6cfd7c48b402d737f7a01835d2dc61ea567 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4af3e6cfd7c48b402d737f7a01835d2dc61ea567 Author: John Baldwin (Wed 6 Aug 2025 21:14:01 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:23:38 GMT) cross-build make.py: Permit specifying cross toolchains by a package name Add a --cross-toolchain option whose value is a package name. This is currently only supported with brew on macOS. A sample invocation is `--cross-toolchain=llvm@19`. Differential Revision: https://reviews.freebsd.org/D51741 (cherry picked from commit 81fc74fd26da2f75c3010595db7a706c3e28d95b) M tools/build/make.py ____________________________________________________________________________________________________________ Commit: 244f79497737cd358c832c849d2d98e01dc37fb7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=244f79497737cd358c832c849d2d98e01dc37fb7 Author: John Baldwin (Wed 6 Aug 2025 21:13:13 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:23:35 GMT) cross-build make.py: Handle lld brew packages on macOS Homebrew uses separate packages for llvm and lld starting with llvm19. To handle this case automatically, pass the binary_name to default_cross_toolchain() and only use the automatic path for a given binary if the binary is found in the path (not just if the directory exists). Add a second clause for ld.lld that looks for a lld package if lld wasn't found in the llvm directory. Note that manually specifying the path cannot use a single --cross-bindir option. Instead, XLD must be manually set in addition to --cross-bindir when requesting a specific version. Reviewed by: arichardson Differential Revision: https://reviews.freebsd.org/D51653 (cherry picked from commit e68d702b3a1fc52145e70d861db89a0f20bfc3a0) M tools/build/make.py ____________________________________________________________________________________________________________ Commit: f3ab9690c2ffaed003a9e196d3501efb25890917 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f3ab9690c2ffaed003a9e196d3501efb25890917 Author: Chandrakanth Patil (Tue 29 Jul 2025 01:28:51 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:22:37 GMT) pci_iov: Support dynamic subordinate bus growth during VF creation Certain SR-IOV devices enumerate Virtual Functions (VFs) on a different PCIe bus than their parent Physical Function (PF). In such cases, the default subordinate bus range assigned by BIOS may be insufficient to cover all VFs. This patch dynamically expands the subordinate bus range by: - Allocating additional bus numbers using bus_alloc_resource() when VFs are initialized - Releasing the reserved bus range during VF deletion via bus_release_resource() Reviewed by: jhb (cherry picked from commit f7951799877c16cb901be1acc8d6643f0693cec4) M sys/dev/pci/pci_iov.c M sys/dev/pci/pci_iov_private.h ____________________________________________________________________________________________________________ Commit: fa8f3d3053b6d84b284ca31296d276773a1de88c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fa8f3d3053b6d84b284ca31296d276773a1de88c Author: John Baldwin (Mon 28 Jul 2025 15:55:07 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:20:36 GMT) tools/boot/rootgen: Remove stray zfsboot1 from ZFS + MBR + UEFI function This was copy-pasted from the ZFS + MBF + BIOS function, but without the corresponding code to extract zfsboot1 from /boot/zfsboot via dd(1). It's also not necessary since UEFI booting doesn't make use of BSD label boot blocks (note the lack of any -b option to mkimg when generating the BSD partition in mk_nogeli_mbr_ufs_uefi()). Reviewed by: imp, emaste Differential Revision: https://reviews.freebsd.org/D51544 (cherry picked from commit e958bc1c13377767d9b2cf87d072d923aa3d482a) M tools/boot/rootgen.sh ____________________________________________________________________________________________________________ Commit: 5fce28c2f81d070c6321c9c5dc8d03831f32b242 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5fce28c2f81d070c6321c9c5dc8d03831f32b242 Author: John Baldwin (Sat 31 May 2025 00:17:45 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:18:17 GMT) cxgbe nic TLS: Correct IPv6 payload length Sponsored by: Chelsio Communications (cherry picked from commit 54f8c44ecf4a28a649d75ad6d0daaf3206ae9247) M sys/dev/cxgbe/crypto/t6_kern_tls.c ____________________________________________________________________________________________________________ Commit: aee8d42a37ac34e20af6b4b4a890e7221d200330 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=aee8d42a37ac34e20af6b4b4a890e7221d200330 Author: John Baldwin (Tue 13 May 2025 14:57:18 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:17:47 GMT) cxgbe nic TLS: Fix requests with 8 bytes of immediate data padding Requests whose immediate data do not end on a 16-byte boundary are padded with zeroes before the next WR command. Since ULP commands are 8 byte aligned, if there are more than 8 bytes of padding, the immediate data is padded with zeroes up to an 8 byte boundary and the last 8 bytes contain a ULP NOOP command. In the case of exactly 8 bytes of padding, the result should be that no zeroes are inserted, only the ULP NOOP. However, the code was actually inserting 8 bytes of zero padding followed by the ULP NOOP causing the following real command to be misaligned. Fix this by skipping the zero padding if there exactly 8 padding bytes. Reported by: Sony Arpita Das @ Chelsio Sponsored by: Chelsio Communications (cherry picked from commit 2befd06588325c541d400fcc4915a1adfd1c7d17) M sys/dev/cxgbe/crypto/t6_kern_tls.c ____________________________________________________________________________________________________________ Commit: d0e6d7538189108a33c0ea84a502cff832f49fab URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d0e6d7538189108a33c0ea84a502cff832f49fab Author: John Baldwin (Sat 3 May 2025 16:59:02 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:17:37 GMT) kyua: Don't pass NULL to std::unique_ptr<>::reset() No functional change, this is simply more idiomatic. Reviewed by: olce, emaste Differential Revision: https://reviews.freebsd.org/D50091 (cherry picked from commit d61c8bca8648fa6dfa89bd5c7dc75726a2740c15) M contrib/kyua/utils/fs/directory.cpp M contrib/kyua/utils/logging/operations.cpp M contrib/kyua/utils/process/child.cpp M contrib/kyua/utils/process/executor.cpp M contrib/kyua/utils/signals/interrupts.cpp M contrib/kyua/utils/signals/timer.cpp ____________________________________________________________________________________________________________ Commit: 7982c36da11c94ac8ece46b23fadcf607d0e8396 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7982c36da11c94ac8ece46b23fadcf607d0e8396 Author: John Baldwin (Sat 3 May 2025 16:58:47 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:17:28 GMT) kyua: Don't pass NULL to unique_ptr constructors This is ambiguous when NULL is defined to an integral constant. Instead, use the more iodiomatic pattern of {} to construct a default pointer. Reviewed by: olce Differential Revision: https://reviews.freebsd.org/D50090 (cherry picked from commit 26d4ac7a2725c0ab2d536c402fc0185fe7afed85) M contrib/kyua/utils/process/child.cpp ____________________________________________________________________________________________________________ Commit: 09d09e2a4b4393eb69ae09813ef3d086f657150c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=09d09e2a4b4393eb69ae09813ef3d086f657150c Author: John Baldwin (Mon 28 Apr 2025 18:01:32 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:17:18 GMT) kyua: Switch from std::auto_ptr<> to std::unique_ptr<> A few places were assigning auto_ptr<>s depending on the ownership handoff. These now use an explicit std::move() as required by unique_ptr<>. Reviewed by: ngie, emaste Differential Revision: https://reviews.freebsd.org/D49790 (cherry picked from commit b392a90ba4e5ea07d8a88a834fd102191d1967bf) M contrib/kyua/cli/cmd_report.cpp M contrib/kyua/cli/cmd_report_junit.cpp M contrib/kyua/cli/common.hpp M contrib/kyua/cli/main.cpp M contrib/kyua/engine/config.cpp M contrib/kyua/engine/scheduler.cpp M contrib/kyua/model/metadata.cpp M contrib/kyua/model/metadata.hpp M contrib/kyua/model/test_program.hpp M contrib/kyua/os/freebsd/utils/jail.cpp M contrib/kyua/utils/auto_array.hpp M contrib/kyua/utils/cmdline/commands_map.hpp M contrib/kyua/utils/config/lua_module_test.cpp M contrib/kyua/utils/config/nodes.cpp M contrib/kyua/utils/config/parser.hpp M contrib/kyua/utils/config/tree_test.cpp M contrib/kyua/utils/format/formatter.cpp M contrib/kyua/utils/fs/directory.cpp M contrib/kyua/utils/logging/operations.cpp M contrib/kyua/utils/process/child.cpp M contrib/kyua/utils/process/child.hpp M contrib/kyua/utils/process/child.ipp M contrib/kyua/utils/process/child_test.cpp M contrib/kyua/utils/process/deadline_killer_test.cpp M contrib/kyua/utils/process/executor.cpp M contrib/kyua/utils/process/executor.hpp M contrib/kyua/utils/process/executor.ipp M contrib/kyua/utils/process/fdstream.hpp M contrib/kyua/utils/process/isolation_test.cpp M contrib/kyua/utils/process/operations_test.cpp M contrib/kyua/utils/process/systembuf.hpp M contrib/kyua/utils/signals/interrupts.cpp M contrib/kyua/utils/signals/interrupts_test.cpp M contrib/kyua/utils/signals/misc_test.cpp M contrib/kyua/utils/signals/programmer.hpp M contrib/kyua/utils/signals/timer.cpp M contrib/kyua/utils/signals/timer.hpp M contrib/kyua/utils/stream.cpp M contrib/kyua/utils/stream.hpp M contrib/kyua/utils/stream_test.cpp M usr.bin/kyua/Makefile ____________________________________________________________________________________________________________ Commit: f4973f97daab7222eedfb0a5f1d30e5d122d3d1d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f4973f97daab7222eedfb0a5f1d30e5d122d3d1d Author: John Baldwin (Wed 16 Apr 2025 15:10:35 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:15:39 GMT) atf: Switch from std::auto_ptr<> to std::unique_ptr<> This mirrors upstream commit f053ab687f6e27aa264f599ecbfc5ef27ad4e2d3. Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D49789 (cherry picked from commit 5e6befdaca5194a8fb91b48d5f678942f22fa8f1) M contrib/atf/atf-c++/check.cpp M contrib/atf/atf-c++/check.hpp M contrib/atf/atf-c++/check_test.cpp M contrib/atf/atf-c++/detail/process_test.cpp M contrib/atf/atf-sh/atf-check.cpp M lib/atf/Makefile.inc M lib/atf/libatf-c++/Makefile M libexec/atf/atf-check/Makefile M libexec/atf/atf-sh/Makefile M share/mk/atf.test.mk ____________________________________________________________________________________________________________ Commit: 82e034370621d7fdb52a6a282458474aa9af66c6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=82e034370621d7fdb52a6a282458474aa9af66c6 Author: John Baldwin (Wed 16 Apr 2025 15:09:18 BST) Committer: John Baldwin (Thu 29 Jan 2026 15:15:29 GMT) lutok: Switch from std::auto_ptr<> to std::unique_ptr<> This mirrors upstream commit bd5904144c9778a07685f3e4efa6ef011a5480ec. Reviewed by: igoro, imp, emaste Differential Revision: https://reviews.freebsd.org/D49788 (cherry picked from commit 25f2634a1f4b27c9804b705e85bc104a2eac67b9) M contrib/lutok/stack_cleaner.hpp M lib/liblutok/Makefile ____________________________________________________________________________________________________________ Commit: 239fd18c6ce457d854f8c0739734820d439f1350 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=239fd18c6ce457d854f8c0739734820d439f1350 Author: John Baldwin (Thu 20 Feb 2025 15:39:50 GMT) Committer: John Baldwin (Thu 29 Jan 2026 15:14:41 GMT) ctladm: portlist -i lists target and initiator names rather than addresses Sponsored by: Chelsio Communications (cherry picked from commit 8206fcc5ef82a0e0518ed5e3a011ef38893b3eb6) M usr.sbin/ctladm/ctladm.8 M usr.sbin/ctladm/ctladm.c ____________________________________________________________________________________________________________ Commit: 3b622bdf474bc2100be99f29fa1c69d96ec13c38 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3b622bdf474bc2100be99f29fa1c69d96ec13c38 Author: John Baldwin (Wed 5 Feb 2025 19:54:47 GMT) Committer: John Baldwin (Thu 29 Jan 2026 15:14:10 GMT) ctladm: Use nvlist instead of home-rolled name-value lists Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48774 (cherry picked from commit 4dfc2553c3732b142fd6122f223971419e359799) M usr.sbin/ctladm/ctladm.c ____________________________________________________________________________________________________________ Commit: 18d4fcf53fa2df1923d664790db662e331ef04b2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=18d4fcf53fa2df1923d664790db662e331ef04b2 Author: John Baldwin (Tue 20 Jan 2026 17:07:21 GMT) Committer: John Baldwin (Thu 29 Jan 2026 00:07:08 GMT) OptionalObsoleteFiles.inc: Treat compat runtime loaders as libraries Binaries require the runtime loader to use shared libraries, and removing the runtime loader in `make delete-old` while leaving the libraries around makes it impossible to use those shared libraries. Treat rtld as a de facto dependency of shared libraries to ensure it is not removed until the corresponding shared libraries are removed. Differential Revision: https://reviews.freebsd.org/D52210 (cherry picked from commit 8e1c85f03260ff9d214fcd99c7ad1a848e3ac23b) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: c8553cad48cb91e23a98865efa6336418b8a8130 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c8553cad48cb91e23a98865efa6336418b8a8130 Author: Mark Johnston (Fri 16 Jan 2026 19:49:22 GMT) Committer: John Baldwin (Thu 29 Jan 2026 00:02:20 GMT) smartpqi: Avoid declaring extern inline functions Each C file is compiled separately so these functions can't be inlined except in the file where they are defined. Since these functions aren't used outside smartpqi_request.c, just do the simple thing and make them private to that file. Reported by: gcc Reviewed by: jrhall Fixes: c558eca47970 ("smartpqi: update to version 4660.0.2002") Differential Revision: https://reviews.freebsd.org/D54732 (cherry picked from commit 75c591b26723711d7a38f2a5df7aecc28198cd83) M sys/dev/smartpqi/smartpqi_prototypes.h M sys/dev/smartpqi/smartpqi_request.c ____________________________________________________________________________________________________________ Commit: dfc0c1cdcfe7fdd25acacc4295b636a1f4dc1bc8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dfc0c1cdcfe7fdd25acacc4295b636a1f4dc1bc8 Author: John Baldwin (Fri 3 May 2024 00:31:02 BST) Committer: John Baldwin (Thu 29 Jan 2026 00:01:15 GMT) nvme: Add constants for the Fused Operation (FUSE) field in commands Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D44845 (cherry picked from commit 5e3e4442305d9e5af9862fac73feb0d7f37d4b56) M sys/dev/nvme/nvme.h ____________________________________________________________________________________________________________ Commit: 8a2b0aa31beaaa01b33034551e6dbd5cd6dc9786 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8a2b0aa31beaaa01b33034551e6dbd5cd6dc9786 Author: John Baldwin (Fri 3 May 2024 00:30:44 BST) Committer: John Baldwin (Thu 29 Jan 2026 00:01:15 GMT) ctl: Add CTL_IO_ASSERT wrapper macro Currently, this pattern is commonly used to assert that a union ctl_io is a SCSI request. In the future it will be used to assert other types. Suggested by: imp Reviewed by: imp Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D44844 (cherry picked from commit ac7a514e20f394ffed0126c0c356aa9107821880) M sys/cam/ctl/ctl.c M sys/cam/ctl/ctl_backend_block.c M sys/cam/ctl/ctl_io.h M sys/cam/ctl/scsi_ctl.c ____________________________________________________________________________________________________________ Commit: 2d8562860eca7eff835ca71e2fdde073e2df806b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2d8562860eca7eff835ca71e2fdde073e2df806b Author: John Baldwin (Fri 3 May 2024 00:30:20 BST) Committer: John Baldwin (Thu 29 Jan 2026 00:01:15 GMT) ctl: Avoid an upcast for calling ctl_scsi_path_string Change the first argument of ctl_scsi_path_string to be the embedded header structure instead of the union. Currently union ctl_io and struct ctl_scsiio have the same alignment, but this changes on i386 if a new union member is added that contains a uint64_t member (such as an embedded struct nvme_command for NVMeoF). In that case, union ctl_io requires stronger alignment, so the upcast from struct ctl_scsiio to union ctl_io in ctl_scsi_sense_sbuf raises an increasing alignment warning on i386. Avoid the warning by passing struct ctl_io_hdr as the first argument to ctl_scsi_path_string instead. Reviewed by: imp Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D44716 (cherry picked from commit 352cf4a64adf117a8a0cf23a20b8de4990b2ba22) M sys/cam/ctl/ctl.c M sys/cam/ctl/ctl_scsi_all.c M sys/cam/ctl/ctl_scsi_all.h M sys/cam/ctl/ctl_util.c M usr.sbin/ctladm/ctladm.c ____________________________________________________________________________________________________________ Commit: 03094f3700be5c339443fc6372c5e0be9e4ff908 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=03094f3700be5c339443fc6372c5e0be9e4ff908 Author: Kristof Provost (Thu 15 Jan 2026 14:15:12 GMT) Committer: Kristof Provost (Wed 28 Jan 2026 09:09:07 GMT) if_ovpn: add interface counters Count input/output packets and bytes on the interface as well, not just in openvpn-specific counters. PR: 292464 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292464 ) MFC after: 2 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 21d666a19331f31fb6dfa1e370de5a84a1a5cb46) M sys/net/if_ovpn.c M tests/sys/net/if_ovpn/if_ovpn.sh ____________________________________________________________________________________________________________ Commit: d2d25d8fde2e19fb880c913dcc53871ef0588b55 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d2d25d8fde2e19fb880c913dcc53871ef0588b55 Author: Kristof Provost (Wed 14 Jan 2026 06:18:27 GMT) Committer: Kristof Provost (Wed 28 Jan 2026 09:08:59 GMT) pfctl: allow new page character (^L) in pf.conf PF configuration files can contains many things. Using the new page characters (i.e. ^L, \014) to mark the beginning of parts is useful because many editors such as emacs and vim has facilities to jump next/previous ones. PR: 86635 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=86635 ) MFC after: 2 weeks Submitted by: MOROHOSHI Akihiko Submitted by: Simon Wollwage Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit fc353e5e61fadd6ef618948f417f96381c08239c) M sbin/pfctl/parse.y A sbin/pfctl/tests/files/pf1078.in A sbin/pfctl/tests/files/pf1078.ok M sbin/pfctl/tests/pfctl_test_list.inc ____________________________________________________________________________________________________________ Commit: 300a68afe0947923ef0f09ff46a5d572e4ec86b2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=300a68afe0947923ef0f09ff46a5d572e4ec86b2 Author: Xin LI (Wed 21 Jan 2026 06:28:39 GMT) Committer: Xin LI (Wed 28 Jan 2026 05:54:34 GMT) cron.8: clarify system crontab format PR: 234504 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234504 ) (cherry picked from commit 53d6b23765ca27ac7eca4096b2a83e84631c4ec8) M usr.sbin/cron/cron/cron.8 ____________________________________________________________________________________________________________ Commit: 7aee235907f3d9ca512a5803e43da4d070afbf21 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7aee235907f3d9ca512a5803e43da4d070afbf21 Author: Joseph Mingrone (Thu 8 Jan 2026 19:22:58 GMT) Committer: Joseph Mingrone (Wed 28 Jan 2026 01:03:36 GMT) periodic: Support RFC 5424 syslog timestamps This is based on an initial implementation by michaelo in https://reviews.freebsd.org/D54361. PR: 270497 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270497 ) Reported by: michaelo Reviewed by: michaelo Tested by: michaelo MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54606 (cherry picked from commit 8ac6427b1bb95470f6c755202d1c0391ed8eefbd) M usr.sbin/periodic/etc/daily/460.status-mail-rejects M usr.sbin/periodic/etc/security/800.loginfail M usr.sbin/periodic/etc/security/900.tcpwrap ____________________________________________________________________________________________________________ Commit: 9f0b953443b7dd7f33b8a461651c9d9ed2912d46 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9f0b953443b7dd7f33b8a461651c9d9ed2912d46 Author: Joseph Mingrone (Mon 23 Jun 2025 21:47:20 BST) Committer: Joseph Mingrone (Wed 28 Jan 2026 01:03:36 GMT) lualoader: Add distinct brand for installer Make it obvious to users that the system is booting into the installer. Reviewed by: kevans, manu Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D51001 (cherry picked from commit ac7a19d41ee5eb1271c46fbc620b2f98dffa2230) M release/Makefile M stand/images/Makefile A stand/images/freebsd-install-brand-rev.png M stand/lua/Makefile A stand/lua/gfx-install.lua ____________________________________________________________________________________________________________ Commit: 1b3972ac0f75c659afcd05574878cadaab4d61da URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1b3972ac0f75c659afcd05574878cadaab4d61da Author: Joseph Mingrone (Thu 15 May 2025 15:42:14 BST) Committer: Joseph Mingrone (Wed 28 Jan 2026 01:03:36 GMT) sh: Avoid referencing uninitialized memory in alias If run as alias '' uninitialized memory could be referenced. This is based on a fix from NetBSD. For more information, refer to https://github.com/NetBSD/src/commit/10cfed82c28 . Obtained from: NetBSD (Robert Elz , 10cfed82c28) MFC after: 3 days Reported by: mckusick, Robert Elz Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D50364 (cherry picked from commit 9d29fc2e4bfba9fcd3b0944e683458a3f1fa0c47) M bin/sh/alias.c ____________________________________________________________________________________________________________ Commit: ee8d50bfd59e7619db618bf63e48e108997db8bd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ee8d50bfd59e7619db618bf63e48e108997db8bd Author: Gordon Tetlow (Mon 26 Jan 2026 18:42:20 GMT) Committer: Mark Johnston (Tue 27 Jan 2026 19:15:07 GMT) openssl: Fix multiple vulnerabilities This is a rollup commit from upstream to fix: Stack buffer overflow in CMS AuthEnvelopedData parsing (CVE-2025-15467) Heap out-of-bounds write in BIO_f_linebuffer on short writes (CVE-2025-68160) Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (CVE-2025-69418) Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (CVE-2025-69419) Missing ASN1_TYPE validation in TS_RESP_verify_response() function (CVE-2025-69420) NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (CVE-2025-69421) Missing ASN1_TYPE validation in PKCS#12 parsing (CVE-2026-22795) ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (CVE-2026-22796) See https://openssl-library.org/news/secadv/ for additional details. Approved by: so Obtained from: OpenSSL Security: FreeBSD-SA-26:01.openssl Security: CVE-2025-15467 Security: CVE-2025-68160 Security: CVE-2025-69418 Security: CVE-2025-69419 Security: CVE-2025-69420 Security: CVE-2025-69421 Security: CVE-2026-22795 Security: CVE-2026-22796 M crypto/openssl/apps/s_client.c M crypto/openssl/crypto/asn1/a_strex.c M crypto/openssl/crypto/asn1/evp_asn1.c M crypto/openssl/crypto/bio/bf_lbuf.c M crypto/openssl/crypto/evp/evp_lib.c M crypto/openssl/crypto/modes/ocb128.c M crypto/openssl/crypto/pkcs12/p12_decr.c M crypto/openssl/crypto/pkcs12/p12_kiss.c M crypto/openssl/crypto/pkcs12/p12_utl.c M crypto/openssl/crypto/pkcs7/pk7_doit.c M crypto/openssl/crypto/ts/ts_rsp_verify.c ____________________________________________________________________________________________________________ Commit: 4ecaa02a8797347f4b85a70902430a4f9f45ef76 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4ecaa02a8797347f4b85a70902430a4f9f45ef76 Author: John Baldwin (Mon 4 Aug 2025 20:38:06 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Rename {ctld,isns}.h to {ctld,isns}.hh Subsequent commits will use C++ in these headers rather than only C. conf.h remains as a C-only header since it is intended for use by the C code generated from parse.y. Sponsored by: Chelsio Communications Pull Request: https://github.com/freebsd/freebsd-src/pull/1794 (cherry picked from commit 34e8d66412cd81d020f0e75d078a4404ec39cf5a) M usr.sbin/ctld/conf.cc M usr.sbin/ctld/ctld.cc R099 usr.sbin/ctld/ctld.h usr.sbin/ctld/ctld.hh M usr.sbin/ctld/discovery.cc M usr.sbin/ctld/isns.cc R098 usr.sbin/ctld/isns.h usr.sbin/ctld/isns.hh M usr.sbin/ctld/kernel.cc M usr.sbin/ctld/login.cc M usr.sbin/ctld/uclparse.cc ____________________________________________________________________________________________________________ Commit: 0b418dea7182f168bb881633a2dc40a9f244a297 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0b418dea7182f168bb881633a2dc40a9f244a297 Author: John Baldwin (Mon 4 Aug 2025 20:38:06 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Permit valid integer LUN device types Fixes: 2e0caa7c7e14 ("libutil: Really fix expand_number(3)") Sponsored by: Chelsio Communications (cherry picked from commit 14f2cd78042372d27138a91dcb4f4845fe2e8194) M usr.sbin/ctld/conf.cc ____________________________________________________________________________________________________________ Commit: ac930fe19978684a99f1f077d93ea71e0a1c9513 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ac930fe19978684a99f1f077d93ea71e0a1c9513 Author: Dag-Erling Smørgrav (Sat 2 Aug 2025 15:05:36 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Use strtonum in lun_set_device_type This is a direct commit to stable of part of commit 2e0caa7c7e14d7bdc89ec43be9bc848abe1ca264. The full commit is not merged as it changes the API/ABI of expand_number(3). M usr.sbin/ctld/conf.cc ____________________________________________________________________________________________________________ Commit: 4054439b47f2b58fa038c3fed8efc6b0be7b624c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4054439b47f2b58fa038c3fed8efc6b0be7b624c Author: John Baldwin (Fri 11 Apr 2025 15:02:48 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Do not remove item from an nvlist while iterating it While here, make use of cnvlist_* to simplify this code. Fixes: d42a73fb6a85 ("ctld: Add a dedicated API between parse.y and the rest of the program") Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49650 (cherry picked from commit 30020689fb1e5c9549e430bd23600c88e1257697) M usr.sbin/ctld/kernel.cc ____________________________________________________________________________________________________________ Commit: e11dec7e54e239c490343a275573348b0c826aa0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e11dec7e54e239c490343a275573348b0c826aa0 Author: John Baldwin (Fri 11 Apr 2025 15:02:29 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Remove dead logging code Portal discovery auth groups are always named auth groups Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49649 (cherry picked from commit ce8cfd998b4fc01cfd47e009b0f6dead404841b4) M usr.sbin/ctld/login.cc ____________________________________________________________________________________________________________ Commit: 8c211a00d3b45b46b00e3fb99d803b65e7aadeee URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8c211a00d3b45b46b00e3fb99d803b65e7aadeee Author: John Baldwin (Fri 11 Apr 2025 15:02:09 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Require a mask if / is specified in an initiator portal If the / separator in a portal string is the last character in the string, treat the portal as invalid. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49648 (cherry picked from commit 4449cf28a3152cf6e87a45176ae15ae250e543de) M usr.sbin/ctld/ctld.cc ____________________________________________________________________________________________________________ Commit: 541c6c9d75c15d94e60e944ee9fe70de3e5d6811 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=541c6c9d75c15d94e60e944ee9fe70de3e5d6811 Author: John Baldwin (Fri 11 Apr 2025 15:01:48 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Tighten parsing of IPv6 addresses for initiator-portal If an address starts with a [ character, require that it ends with a ] character. Also, if an address starts with a [ character, assume it is an IPv6 address. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49647 (cherry picked from commit f3eb1514ce44aea5d288a74f34a0c6925ecd43ea) M usr.sbin/ctld/ctld.cc ____________________________________________________________________________________________________________ Commit: 8f799d4b1c7185d4b63310e86312c1867a8d7cb2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8f799d4b1c7185d4b63310e86312c1867a8d7cb2 Author: John Baldwin (Fri 11 Apr 2025 15:01:29 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Drop commented-out code to print the configuration This code is incomplete (it does not handle some of the options that can be set) and easily rots since it is not enabled by default or hooked up to anything that calls it. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49646 (cherry picked from commit 0708eb01f28040a50693f40833562ab14fbfe2ad) M usr.sbin/ctld/ctld.cc ____________________________________________________________________________________________________________ Commit: 88b3dab8d0ec099ac47d5314c2244ae283623143 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=88b3dab8d0ec099ac47d5314c2244ae283623143 Author: John Baldwin (Fri 11 Apr 2025 15:01:06 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Properly validate mutual user/secret for CHAP-MUTUAL in the UCL parser The code was checking the non-mutual UCL objects twice instead. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49645 (cherry picked from commit bf41156712929460aaf968e9d38ddc3847f90f6a) M usr.sbin/ctld/uclparse.cc ____________________________________________________________________________________________________________ Commit: a8ab78a0785f5e988179a6f15c1eecff7086d9b3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a8ab78a0785f5e988179a6f15c1eecff7086d9b3 Author: John Baldwin (Fri 11 Apr 2025 15:00:39 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:58 GMT) ctld: Remove dead code in UCL parsing of hex DSCP values libucl treats strings starting with "0x" as an integer if they do not contain invalid characters. The code also looks broken as it only calls strtol if the string exactly matches "0x" without any trailing characters. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49644 (cherry picked from commit 251439f1a06867a6baccb274c671b2169c9959fd) M usr.sbin/ctld/uclparse.cc ____________________________________________________________________________________________________________ Commit: e87f835bf13bcc514a54f224b8b4d5f85befb213 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e87f835bf13bcc514a54f224b8b4d5f85befb213 Author: John Baldwin (Fri 11 Apr 2025 15:00:14 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Add a label string to auth_groups This holds the abstract name of an auth-group for use in warning messages. For anonymous groups associated with a target, the label includes the target name. Abstracting this out removes a lot of code duplication of nearly-identical warning messages. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49643 (cherry picked from commit 2736dc8c28a33ba911fd59f87b587a3d9722e975) M usr.sbin/ctld/conf.cc M usr.sbin/ctld/ctld.cc M usr.sbin/ctld/ctld.h ____________________________________________________________________________________________________________ Commit: 80888d8610ee6d0c3553ca22fa684117e186f70a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=80888d8610ee6d0c3553ca22fa684117e186f70a Author: John Baldwin (Fri 11 Apr 2025 14:59:52 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Reduce code duplication in auth_check_secret_length Only check a single secret length in the function and call it twice for the CHAP-MUTUAL case. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49642 (cherry picked from commit 4214775235ebc01e0d22da5f09a2e4cff16bfa74) M usr.sbin/ctld/ctld.cc ____________________________________________________________________________________________________________ Commit: 9cdd58d51d49503e1066875470014c992937471b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9cdd58d51d49503e1066875470014c992937471b Author: John Baldwin (Fri 11 Apr 2025 14:59:24 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Fix sign bug validating kernel ports when reloading config When I switched new_pports_from_conf to return bool instead of an inverted int, I missed updating the call after reloading the config file due to SIGHUP. Fixes: 450a84c292ae ("ctld: Some bool-related cleanups") Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49641 (cherry picked from commit e7611b7531c4fc6d26d36faad79088f277af78f0) M usr.sbin/ctld/ctld.cc ____________________________________________________________________________________________________________ Commit: bce1250309302f66165a536c2834c7fc515ebc74 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bce1250309302f66165a536c2834c7fc515ebc74 Author: John Baldwin (Fri 11 Apr 2025 14:34:36 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Disable -Wshadow for GCC GCC raises shadow warnings in C++ when a global function shadows a structure type name (since it shadows the constructors for that type). System headers are full of such cases (and some such as struct sigaction vs sigaction() are mandated by POSIX), so just disable the warning. For example: In file included from usr.sbin/ctld/ctld.cc:33: sys/sys/event.h:366:20: error: 'int kqueue()' hides constructor for 'struct kqueue' [-Werror=shadow] 366 | int kqueue(void); | ^ sys/sys/event.h:371:43: error: 'int kevent(int, const kevent*, int, kevent*, int, const timespec*)' hides constructor for 'struct kevent' [-Werror=shadow] 371 | const struct timespec *timeout); | ^ In file included from usr.sbin/ctld/ctld.cc:37: sys/sys/stat.h:396:63: error: 'int stat(const char*, stat*)' hides constructor for 'struct stat' [-Werror=shadow] 396 | int stat(const char * __restrict, struct stat * __restrict); | ^ Reported by: bz (cherry picked from commit 75a24e7f9afb128138c3b3462b80731cab0f5bdd) M usr.sbin/ctld/Makefile ____________________________________________________________________________________________________________ Commit: be8bf6c2beda16c2d75e9790baf5e81e75b60851 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=be8bf6c2beda16c2d75e9790baf5e81e75b60851 Author: John Baldwin (Wed 2 Apr 2025 19:42:08 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) depend-cleanup: Handle ctld moving from C to C++ Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49140 (cherry picked from commit 7feee915ace1adcbbeca6bdbaf68ac27dee13ce5) M tools/build/depend-cleanup.sh ____________________________________________________________________________________________________________ Commit: 6bb9cb02c84b6d64124ae47dd158b6c0bd32f844 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6bb9cb02c84b6d64124ae47dd158b6c0bd32f844 Author: John Baldwin (Wed 2 Apr 2025 19:41:35 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Convert to C++ This is the minimal set of changes need to compile as C++ so git can handle the rename correctly. Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49139 (cherry picked from commit 839d0755fea8ef761698b50fa5f293546ae832a8) M usr.sbin/ctld/Makefile R100 usr.sbin/ctld/conf.c usr.sbin/ctld/conf.cc M usr.sbin/ctld/conf.h R098 usr.sbin/ctld/ctld.c usr.sbin/ctld/ctld.cc R100 usr.sbin/ctld/discovery.c usr.sbin/ctld/discovery.cc R096 usr.sbin/ctld/isns.c usr.sbin/ctld/isns.cc R098 usr.sbin/ctld/kernel.c usr.sbin/ctld/kernel.cc R099 usr.sbin/ctld/login.c usr.sbin/ctld/login.cc R100 usr.sbin/ctld/uclparse.c usr.sbin/ctld/uclparse.cc ____________________________________________________________________________________________________________ Commit: 8ac917c7ce6c6b85511cb3d392b809357bad5ec8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8ac917c7ce6c6b85511cb3d392b809357bad5ec8 Author: John Baldwin (Wed 2 Apr 2025 19:40:54 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctl_ioctl.h: Do not use enums for bit fields of flags C++ does not permit treating enum values as individual bits used with the bitwise operators. For types that are a mask of flags, switch the typedef to an unsigned int and use preprocessor macros for flag constants. Reviewed by: imp, asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49138 (cherry picked from commit 48000952260469477346c8a89e927af69ebc00e2) M sys/cam/ctl/ctl_ioctl.h ____________________________________________________________________________________________________________ Commit: 48438ab6cf0459e20e0586c31de0376d2ee65ee5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=48438ab6cf0459e20e0586c31de0376d2ee65ee5 Author: John Baldwin (Wed 2 Apr 2025 19:40:32 BST) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) libiscsiutil: Fix header to work with C++ Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49137 (cherry picked from commit e94d3f65b90107204d477a7fab059d8cf3b1b0c3) M lib/libiscsiutil/libiscsiutil.h ____________________________________________________________________________________________________________ Commit: 7711a8c74d210820fd635ac48c8145261aa94cbf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7711a8c74d210820fd635ac48c8145261aa94cbf Author: John Baldwin (Wed 26 Feb 2025 15:14:53 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Permit simpler syntax for target LUNs in UCL Allow the LUN number to be specified as the key for a LUN instead of requiring it as a "number" field. If a key is used, permit a simple string value to be used for non-anymous LUNs. This permits replacing: lun = [ { number = 0, name = zvol_lun }, { number = 1 backend = ramdisk size = 1GB } ] with: lun = { 0 = zvol_lun 1 { backend = ramdisk size = 1GB } } Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48939 (cherry picked from commit 5b511473999a1d0145635fcc9d922601f34b670b) M usr.sbin/ctld/ctl.conf.5 M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: e1548d92b945f6e0e1ead509595451dc4a5ed24c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e1548d92b945f6e0e1ead509595451dc4a5ed24c Author: John Baldwin (Wed 26 Feb 2025 15:13:56 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Permit targets to use a string for portal-groups in UCL In the case that a separate auth-group is not required, this permits replacing: portal-group = { name = pg0 } with: portal-group = pg0 Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48938 (cherry picked from commit e49db000c4932753fb309ad895c02e98723023f3) M usr.sbin/ctld/ctl.conf.5 M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: b7919e0493c8b34a6c8ef126c83b4b8a1e9be64c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b7919e0493c8b34a6c8ef126c83b4b8a1e9be64c Author: John Baldwin (Wed 26 Feb 2025 15:13:10 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Support anonymous LUN entries in UCL If a target LUN entry doesn't have a name property, assume it is an anonymous LUN and parse other properties from the entry to define the LUN. This removes the odd support for target LUNs only named by an integer. My guess is this was meant to implement support for anonymous LUNs based on how the syntax for this works in the non-UCL case, but the prior implementation was useless (it just created unconfigured LUNs). Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48937 (cherry picked from commit b797cc839a12fc358e99635ca3adf3cf80e0825b) M usr.sbin/ctld/ctl.conf.5 M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: 9dd655a05bea9d50617bfabe252cbccc9590b2a4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9dd655a05bea9d50617bfabe252cbccc9590b2a4 Author: John Baldwin (Wed 26 Feb 2025 15:12:25 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Add missing properties to the UCL parser - Support for "foreign", "offload", and "tag" properties in portal group contexts. - Support for "ctl-lun" and "device-type" properties in LUN contexts. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48936 (cherry picked from commit 67940b204f5829a72e7c47f92069fb06a7dad91f) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: 8824cd3a11708c48f1f989d1b948e67a2bf956fc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8824cd3a11708c48f1f989d1b948e67a2bf956fc Author: John Baldwin (Wed 26 Feb 2025 15:11:30 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Be more consistent for auth parameters in the UCL config The auth-group context required an array of entries for "chap", "chap-mutual", "initiator-name", and "initiator-portal" whereas the target context required exactly one entry (and only permitted a single entry). Allow either a single entry or an array of entries for these keywords in both the auth-group and target contexts. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48935 (cherry picked from commit e28b758b35d0f80b38c295587271ec9588040077) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: c3688679ded592a35de9ed8ac1d576542c5ab02f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c3688679ded592a35de9ed8ac1d576542c5ab02f Author: John Baldwin (Wed 26 Feb 2025 15:11:07 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Fail UCL configurations with a nested error Errors from auth groups, portal groups, global luns, and targets were not propagated out of the main loop. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D49071 (cherry picked from commit f3a43b3db881679d0b82b97f18871422050a5819) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: 5cf8a917e086b99f12122c59098005c74fb823e5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5cf8a917e086b99f12122c59098005c74fb823e5 Author: John Baldwin (Wed 26 Feb 2025 15:10:33 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:57 GMT) ctld: Add a dedicated API between parse.y and the rest of the program The primary purpose of this is to permit the rest of ctld to use C++. However, this also has the nice side effect of reducing code duplication with the UCL parser. As a general rule, setting of options including error handling for invalid values, etc. is moved out of parse.y and into conf.c. The globals for the current configuration, auth group, portal group, lun, and target are also moved into conf.c hiding the types from parse.y. The intention is that all of the functions declared in conf.h will be extern "C" for use by parse.y and that the backing data structures can be reimplemented as C++ classes instead of C structures if desired. A few other small changes are included with this refactoring: - Warn and fail a configuration that specifies the same LUN multiple times for a target. - Use T_* constants for SCSI device types instead of magic numbers. - Warn and fail for a few UCL properties that aren't the required type including "discovery-auth-group" in a portal group context, "auth-type" and "port" in a target context. - Fix a bug where chap-mutual in a target in UCL would not auto-create a new auth-group. Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48934 (cherry picked from commit d42a73fb6a85b2dd4692cb003065be5c68863860) M usr.sbin/ctld/Makefile A usr.sbin/ctld/conf.c A usr.sbin/ctld/conf.h M usr.sbin/ctld/ctld.c M usr.sbin/ctld/ctld.h M usr.sbin/ctld/kernel.c M usr.sbin/ctld/parse.y M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: 1b4e894eaeb1058dfcdbab5197660573bcf19a46 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1b4e894eaeb1058dfcdbab5197660573bcf19a46 Author: John Baldwin (Wed 12 Feb 2025 19:27:53 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Fix parsing of text values for DSCP in UCL parser Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48933 (cherry picked from commit 5e6a462277b1e28ea5338a3031c509c829dcf588) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: e7b94c2f3fa2cd5813f72cb553b54bb98b828306 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e7b94c2f3fa2cd5813f72cb553b54bb98b828306 Author: John Baldwin (Wed 12 Feb 2025 19:27:30 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Use preferred style for evaluating result of strcmp Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48932 (cherry picked from commit 79a4240b135952cb318adf216a9e5d3ccbd6e343) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: bf60fb351df14fc6b5161cc28c1f130d6484d8ba URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bf60fb351df14fc6b5161cc28c1f130d6484d8ba Author: John Baldwin (Wed 12 Feb 2025 19:27:06 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Fail for missing or invalid CHAP secrets in UCL config Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48931 (cherry picked from commit f42f7bedabb329b68c7c9aa0d9a2dc49637d385f) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: 67f12d18252a146439df723e5feb9ed3356f095b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=67f12d18252a146439df723e5feb9ed3356f095b Author: John Baldwin (Wed 12 Feb 2025 19:26:43 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Fix the isns-period and isns-timeout keywords in the UCL parser These keywords were setting the wrong configuration value (connection timeout). Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48930 (cherry picked from commit 64905b38b1aeeaa9faeb90192b762efc1c2216ee) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: fb77f80ccae154704a4c60e8be2e4a127020c14e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fb77f80ccae154704a4c60e8be2e4a127020c14e Author: John Baldwin (Wed 12 Feb 2025 19:26:16 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Consistently free temporary strings during yacc parsing The lexer always allocates a duplicate string via strdup for STR tokens. The parse handlers did not always free these duplicated strings after consuming them. Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48929 (cherry picked from commit 6de7a0d6c47615beecd8692e580aa3136c243303) M usr.sbin/ctld/parse.y ____________________________________________________________________________________________________________ Commit: 21a93ffe7883b87aa7287200c86e901d5f7b834b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=21a93ffe7883b87aa7287200c86e901d5f7b834b Author: John Baldwin (Wed 12 Feb 2025 19:25:52 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Some bool-related cleanups - Convert a few variables from int to bool - Return bool instead of inverted 0/1 from configuration parsing functions and the auth check functions - Invert the existing dont_daemonize bool into a daemonize boolx Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48928 (cherry picked from commit 450a84c292ae5c4195d38bc7f7204d0e1e455f20) M usr.sbin/ctld/ctld.c M usr.sbin/ctld/ctld.h M usr.sbin/ctld/discovery.c M usr.sbin/ctld/login.c M usr.sbin/ctld/parse.y M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: f577b919b36027d8976b212d72ddb7c36061e947 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f577b919b36027d8976b212d72ddb7c36061e947 Author: John Baldwin (Wed 12 Feb 2025 19:25:22 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Drop some #if 0'd debugging traces Suggested by: asomers Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48927 (cherry picked from commit ca8a23d6cb32d8af18f3c249ed604c8db7c68d08) M usr.sbin/ctld/kernel.c ____________________________________________________________________________________________________________ Commit: f9e5a4d5ba2018712147277c7c788551c9a0f91d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f9e5a4d5ba2018712147277c7c788551c9a0f91d Author: John Baldwin (Wed 5 Feb 2025 19:54:09 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Move kernel_limits into login.c where it is used Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48771 (cherry picked from commit 9e425a8a7ef075706c901b27091a79e2911b7595) M usr.sbin/ctld/ctld.h M usr.sbin/ctld/kernel.c M usr.sbin/ctld/login.c ____________________________________________________________________________________________________________ Commit: 90d5638f97b3d073f90e49e23c919a2317d37bd9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=90d5638f97b3d073f90e49e23c919a2317d37bd9 Author: John Baldwin (Wed 5 Feb 2025 19:53:55 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Don't specify the TCP port for default iSCSI portal group sockets portal_group_add_listen already uses the default TCP port if no port is specified so this was redundant. Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48770 (cherry picked from commit 0a3e74f55aedc20dce7fc3a456d8307155627460) M usr.sbin/ctld/ctld.c ____________________________________________________________________________________________________________ Commit: d9f3d437144290e46b72235187c4f4e1e6b07846 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d9f3d437144290e46b72235187c4f4e1e6b07846 Author: John Baldwin (Wed 5 Feb 2025 19:53:35 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Factor out functions to parse dscp and pcp properties Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48769 (cherry picked from commit aa060232706cc9355d2585d765989c7459824b99) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: f1c08b6111246ed390319d3655a0d20a4e999c71 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f1c08b6111246ed390319d3655a0d20a4e999c71 Author: John Baldwin (Wed 5 Feb 2025 19:53:14 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Write the pidfile once after forking Don't rewrite the pidfile each time main_loop is called. PR: 284282 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284282 ) Reported by: asomers Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48768 (cherry picked from commit 7bad3c3e5f1c8b4d9e620bb2943299d4a30f3c86) M usr.sbin/ctld/ctld.c ____________________________________________________________________________________________________________ Commit: 42234f50008eca7a3764e411a4627d85dbae6cae URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=42234f50008eca7a3764e411a4627d85dbae6cae Author: John Baldwin (Thu 30 Jan 2025 15:48:44 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Use kevent(2) for socket events rather than select(2) Reviewed by: asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48597 (cherry picked from commit 66b107e82b2f4be2e9b648897e04ffd675a43469) M usr.sbin/ctld/ctld.c ____________________________________________________________________________________________________________ Commit: 7cf9371c06254528b4857e66c8639e2a88902652 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7cf9371c06254528b4857e66c8639e2a88902652 Author: John Baldwin (Thu 30 Jan 2025 15:19:51 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Use nvlist instead of home-rolled name-value lists Reviewed by: asomers (older version) Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48595 (cherry picked from commit 703b03a8e325101f85610bf09f098442697f2f23) M usr.sbin/ctld/ctld.c M usr.sbin/ctld/ctld.h M usr.sbin/ctld/kernel.c M usr.sbin/ctld/parse.y M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: def239812e9c8c80c8ec14a2f29f2676d60fbf61 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=def239812e9c8c80c8ec14a2f29f2676d60fbf61 Author: John Baldwin (Thu 30 Jan 2025 15:15:39 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) libiscsiutil: Add log_warnc() and log_errc() functions These are similar to warnc() and errc() in that they take an explicit error code instead of using the value of the errno global. Reviewed by: mav, asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48648 (cherry picked from commit de3deff65c5b407ab29b45780f2585b3bc24bbd6) M lib/libiscsiutil/libiscsiutil.h M lib/libiscsiutil/log.c ____________________________________________________________________________________________________________ Commit: bff5236e6872d857ea33ddf133d3c8a0b004964d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bff5236e6872d857ea33ddf133d3c8a0b004964d Author: John Baldwin (Fri 24 Jan 2025 14:53:44 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Fix assertion against the wrong field Reviewed by: mav, imp, asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48622 (cherry picked from commit ca81304f7cbe033be802e3e2ef12378a61fe2175) M usr.sbin/ctld/discovery.c ____________________________________________________________________________________________________________ Commit: 0cc467282f13e3edd4f3b382c3700bbb31e96cd5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0cc467282f13e3edd4f3b382c3700bbb31e96cd5 Author: John Baldwin (Fri 24 Jan 2025 14:52:51 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:56 GMT) ctld: Factor out code to setup a listening socket into a separate function While here: - Reuse the address family from the addrinfo structure instead of calling getsockname(2) on the socket. - Remove a bogus comment about the PCP option. Reviewed by: mav, asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48596 (cherry picked from commit b4a5ab97c8104bd9e3f36b164b4648bf9dc6bc94) M usr.sbin/ctld/ctld.c ____________________________________________________________________________________________________________ Commit: a3311db4010ddb3daf9db5cfd917717515e8eaa4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a3311db4010ddb3daf9db5cfd917717515e8eaa4 Author: John Baldwin (Fri 24 Jan 2025 14:52:26 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:55 GMT) ctld: Use bool in uclparse.c Previously these functions all returned either 0 or 1, but 0 was success and 1 was failure. Use a bool where false indicates failure instead which is more readable. Reviewed by: mav, asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48594 (cherry picked from commit 78cd9f0c0941e7a85dde12f719d16392b23a9975) M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: 944493636924f540e59562bca1f28a46d29b0f95 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=944493636924f540e59562bca1f28a46d29b0f95 Author: John Baldwin (Fri 24 Jan 2025 14:52:10 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:55 GMT) iscsi: Move valid_iscsi_name to libiscsiutil While here, use isxdigit(3) instead of a home-rolled version. Reviewed by: mav, asomers Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48593 (cherry picked from commit dd3603749cb7f20a628f04d595b105962b21a3d2) M lib/libiscsiutil/libiscsiutil.h M lib/libiscsiutil/utils.c M usr.bin/iscsictl/Makefile M usr.bin/iscsictl/iscsictl.c M usr.bin/iscsictl/iscsictl.h M usr.sbin/ctld/ctld.c M usr.sbin/ctld/ctld.h M usr.sbin/ctld/login.c ____________________________________________________________________________________________________________ Commit: 5535f9ea4aeca8015fc339e1ee5e3042fd52e816 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5535f9ea4aeca8015fc339e1ee5e3042fd52e816 Author: John Baldwin (Sat 18 Jan 2025 17:19:41 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:55 GMT) ctld: Trim trailing whitespace Sponsored by: Chelsio Communications (cherry picked from commit 237e9b7f5e90debb31ae7fd1e0a288e302659bfd) M usr.sbin/ctld/ctld.c M usr.sbin/ctld/parse.y M usr.sbin/ctld/uclparse.c ____________________________________________________________________________________________________________ Commit: 45e19db918addf83f1da7885b812f128a4fad144 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=45e19db918addf83f1da7885b812f128a4fad144 Author: John Baldwin (Mon 30 Dec 2024 18:51:48 GMT) Committer: John Baldwin (Tue 27 Jan 2026 18:15:55 GMT) nv: Add header for nvlist_t declaration This can be useful for headers that wish to use nvlist_t pointers in a structure or function argument without pulling in all of the headers from . Reviewed by: imp Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D48229 (cherry picked from commit 8a50aa09019a4230374f48c2f7411342f26b7475) A sys/sys/_nv.h M sys/sys/cnv.h M sys/sys/dnv.h M sys/sys/nv.h M tools/build/Makefile ____________________________________________________________________________________________________________ Commit: 051d781bf9d61da7e7631fccd562a0249f702996 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=051d781bf9d61da7e7631fccd562a0249f702996 Author: Michael Osipov (Fri 23 Jan 2026 20:03:20 GMT) Committer: Michael Osipov (Tue 27 Jan 2026 15:16:06 GMT) vt.4: Document that hw.vga.textmode does not apply for UEFI(8) boot PR: 292598 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292598 ) Approved by: ziaee, imp MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54842 (cherry picked from commit 28764001b504c3588fd9f8dd6e4c08144d20571c) M share/man/man4/vt.4 ____________________________________________________________________________________________________________ Commit: 18d1e673fbbb26dbf364b6ae5147e638fc16e871 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=18d1e673fbbb26dbf364b6ae5147e638fc16e871 Author: John Baldwin (Fri 1 Aug 2025 21:07:30 BST) Committer: John Baldwin (Tue 27 Jan 2026 14:32:57 GMT) genet: Add a detach routine PR: 288309 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288309 ) Co-authored by: Mike Belanger MFC after: 2 weeks (cherry picked from commit 96a550e9dd892f24a479da00ead93fbfaafb7733) M sys/arm64/broadcom/genet/if_genet.c ____________________________________________________________________________________________________________ Commit: 20351c1eacd5fa3332c60aa878fef44e21373895 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=20351c1eacd5fa3332c60aa878fef44e21373895 Author: Artem Bunichev (Fri 23 Jan 2026 16:17:46 GMT) Committer: Jose Luis Duran (Mon 26 Jan 2026 20:29:47 GMT) capsicum.4: Replace 'fi' ligature and smart quotation mark While here, wrap the line to 80 characters. Reviewed by: jlduran Fixes: c54534e60263 ("capsicum.4: Add some more detail from the Capsicum paper") MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54761 (cherry picked from commit e6bafbeb1ee7a61ddfe92ba052c476c7646c405b) M share/man/man4/capsicum.4 ____________________________________________________________________________________________________________ Commit: 37908be664c9d07c7695f17f066c968ea7b5aaca URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=37908be664c9d07c7695f17f066c968ea7b5aaca Author: Li-Wen Hsu (Fri 23 Jan 2026 20:55:32 GMT) Committer: Li-Wen Hsu (Mon 26 Jan 2026 17:27:14 GMT) mkimg(1): Sync mkimg(1) and usage() with the implementation Reviewed by: imp MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54419 (cherry picked from commit 3aa8d5395c4223f1613f28d6f39904c2df4f92d4) M usr.bin/mkimg/mkimg.1 M usr.bin/mkimg/mkimg.c ____________________________________________________________________________________________________________ Commit: f34fe1a084e5874f0fe955bed95e7381cce0566f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f34fe1a084e5874f0fe955bed95e7381cce0566f Author: Ed Maste (Tue 13 Jan 2026 14:31:29 GMT) Committer: Ed Maste (Mon 26 Jan 2026 16:13:30 GMT) libiconv: Fix typo in comment (cherry picked from commit dec3ea45b65442b4f3cafcd8a672f1e13b69a066) (cherry picked from commit 14dc55c7a03d4d3b3fae9a8ed38649cb2d3fbc52) M lib/libiconv_modules/mapper_std/citrus_mapper_std.c ____________________________________________________________________________________________________________ Commit: bcd6bb8067d13d28d13a309e32818cda9e0d29ff URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bcd6bb8067d13d28d13a309e32818cda9e0d29ff Author: Andrew Turner (Tue 6 Jan 2026 10:35:55 GMT) Committer: Mark Johnston (Mon 26 Jan 2026 14:45:34 GMT) arm64: Correctly align the SVE signal context The SVE signal context needs to be correctly aligned. Fix this by creating a new macro to calculate the needed size to provide this alignment, and use it when setting and checking the saved SVE signal context. Reported by: cperciva Reviewed by: cperciva, markj Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D54396 (cherry picked from commit a9e77eb7016df70723c208fc09fbd01ec23a732d) M sys/arm64/arm64/exec_machdep.c ____________________________________________________________________________________________________________ Commit: a2d1fa2a2b1fcbedd80a35e4ba17172f646ad3d2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a2d1fa2a2b1fcbedd80a35e4ba17172f646ad3d2 Author: Zhenlei Huang (Mon 26 Jan 2026 09:42:30 GMT) Committer: Zhenlei Huang (Mon 26 Jan 2026 10:06:47 GMT) modules: efirt: Fix standalone build This is extracted from change [1] which is not MFCed. This is a direct commit to stable/14 branch. [1] f840492b5b0d efidev: add support for memory attribute M sys/modules/efirt/Makefile ____________________________________________________________________________________________________________ Commit: bd1a6bff90cb832c256146eef4127495e4ed80b0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bd1a6bff90cb832c256146eef4127495e4ed80b0 Author: SHENG-YI HONG (Fri 29 Nov 2024 06:59:21 GMT) Committer: Zhenlei Huang (Mon 26 Jan 2026 10:06:47 GMT) sys/modules/hid/*: Fix standalone build Co-authored-by: Daniel Schaefer Reviewed by: imp, wulf Differential Revision: https://reviews.freebsd.org/D47830 (cherry picked from commit 9996c680d12a6245d808bc8def1d2411e736efd6) M sys/modules/hid/bcm5974/Makefile M sys/modules/hid/hcons/Makefile M sys/modules/hid/hgame/Makefile M sys/modules/hid/hidmap/Makefile M sys/modules/hid/hms/Makefile M sys/modules/hid/hmt/Makefile M sys/modules/hid/hpen/Makefile M sys/modules/hid/hsctrl/Makefile M sys/modules/hid/ietp/Makefile M sys/modules/hid/ps4dshock/Makefile M sys/modules/hid/xb360gp/Makefile ____________________________________________________________________________________________________________ Commit: 2890e164f15b2a97d29245ebf4dab82667ae557f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2890e164f15b2a97d29245ebf4dab82667ae557f Author: ShengYi Hung (Thu 21 Aug 2025 09:27:06 BST) Committer: Zhenlei Huang (Mon 26 Jan 2026 10:06:47 GMT) sys/modules: fix standalone build for multiple modules Multiple Makefile miss opt_*.h and *_if.h header file. We fix it by running make in sys/modules to build all modules. MFC note: this is a partial MFS to stable/14, as modules/etherswitch, modules/miiproxy and modules/nvmf do not exist in stable/14. Approved by: lwhsu (mentor), markj (mentor) Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D52062 (cherry picked from commit 8a847947153e60d812852e5c02de93997b2d3038) M sys/modules/e6000sw/Makefile M sys/modules/evdev/Makefile M sys/modules/gpio/gpioaei/Makefile M sys/modules/gve/Makefile M sys/modules/if_infiniband/Makefile M sys/modules/if_vlan/Makefile M sys/modules/linux64/Makefile M sys/modules/md/Makefile M sys/modules/mlx5/Makefile M sys/modules/mlx5en/Makefile M sys/modules/netgraph/ksocket/Makefile M sys/modules/qlnx/qlnxev/Makefile M sys/modules/uinput/Makefile M sys/modules/usb/usie/Makefile M sys/modules/usb/wmt/Makefile ____________________________________________________________________________________________________________ Commit: dfc7e0631d08cc884c2386228b9707c9e0c9d4d2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dfc7e0631d08cc884c2386228b9707c9e0c9d4d2 Author: Dimitry Andric (Fri 23 Jan 2026 17:31:53 GMT) Committer: Dimitry Andric (Mon 26 Jan 2026 08:33:02 GMT) libc++ inttypes.h: define __STDC_CONSTANT_MACROS and __STDC_LIMIT_MACROS Before transitively including the base version of inttypes.h, define __STDC_CONSTANT_MACROS and __STDC_LIMIT_MACROS, because the base inttypes.h directly includes sys/stdint.h, instead of going through the 'regular' stdint.h. The libc++ version of the latter does define those macros, to ensure things like UINT64_C() and SIZE_MAX are defined even in C++98 or C++03. MFC after: 3 days (cherry picked from commit 3cdb6c9d92ecf479a0df338267f3f844ef6feeb2) M contrib/llvm-project/libcxx/include/inttypes.h ____________________________________________________________________________________________________________ Commit: 6380e53112394caa83ed9c123cc34858ea765e9f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6380e53112394caa83ed9c123cc34858ea765e9f Author: Dimitry Andric (Thu 15 Jan 2026 11:31:29 GMT) Committer: Dimitry Andric (Mon 26 Jan 2026 08:30:26 GMT) mxge(4): avoid clang 21 warning in NO-IP configuration Building the LINT-NOIP kernel on amd64 with clang 21 results in a -Werror warning similar to: sys/dev/mxge/if_mxge.c:1846:44: error: variable 'sum' is uninitialized when passed as a const pointer argument here [-Werror,-Wuninitialized-const-pointer] 1846 | cksum_offset, sizeof(sum), (caddr_t)&sum); | ^~~ Indeed, if both `INET` and `INET6` are undefined, `sum` is never initialized. Initialize it to zero to silence the warning. Reviewed by: jhibbits MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54730 (cherry picked from commit 74cac745fe302b26ad22114f60735c8b73e90571) M sys/dev/mxge/if_mxge.c ____________________________________________________________________________________________________________ Commit: 5118ca75f3c4b9d6aa279575313dc3a74efc336f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5118ca75f3c4b9d6aa279575313dc3a74efc336f Author: Dimitry Andric (Fri 16 Jan 2026 14:02:25 GMT) Committer: Dimitry Andric (Mon 26 Jan 2026 08:30:22 GMT) vchiq: fix build with clang 21 When compiling vchiq with clang 21, the following -Werror warning is produced: sys/contrib/vchiq/interface/vchiq_arm/vchiq_arm.c:728:27: error: default initialization of an object of type 'VCHIQ_QUEUE_MESSAGE32_T' with const member leaves the object uninitialized [-Werror,-Wdefault-const-init-field-unsafe] 728 | VCHIQ_QUEUE_MESSAGE32_T args32; | ^ sys/contrib/vchiq/interface/vchiq_arm/vchiq_ioctl.h:151:40: note: member 'elements' declared 'const' here 151 | const /*VCHIQ_ELEMENT_T * */ uint32_t elements; | ^ While the warning is formally correct, the 'args32' object is immediately initialized after its declaration. Therefore, suppress the warning. MFC after: 3 days (cherry picked from commit b39662fc388678db2b7b5fa3c900205252d15b3b) M sys/arm/broadcom/bcm2835/files.bcm283x M sys/conf/files.arm64 M sys/conf/kern.mk ____________________________________________________________________________________________________________ Commit: 711b0e19aa5b054bcf62177ef918df16580106fa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=711b0e19aa5b054bcf62177ef918df16580106fa Author: Gordon Bergling (Sat 17 Jan 2026 18:39:55 GMT) Committer: Gordon Bergling (Sun 25 Jan 2026 17:52:14 GMT) netpfil/ipfw: Fix a typo in a source code comment - s/vaues/values/ (cherry picked from commit 9be9ab2a242080dea6254e187cf211604170de07) M sys/netpfil/ipfw/ip_fw_table_value.c ____________________________________________________________________________________________________________ Commit: ed2b5f46cf1ad81cc5ee363a89c6d3a357c51509 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ed2b5f46cf1ad81cc5ee363a89c6d3a357c51509 Author: Gordon Bergling (Sat 17 Jan 2026 18:38:53 GMT) Committer: Gordon Bergling (Sun 25 Jan 2026 17:52:03 GMT) rockship: Fix a typo in a source code comment - s/vaues/values/ (cherry picked from commit cabb5add07a60c146698d09759445276aa96757a) M sys/arm64/rockchip/clk/rk_clk_fract.c ____________________________________________________________________________________________________________ Commit: c41b12651a80e5c3c227e7428c2804f66ec17f2c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c41b12651a80e5c3c227e7428c2804f66ec17f2c Author: Eugene Grosbein (Thu 22 Jan 2026 14:37:54 GMT) Committer: Eugene Grosbein (Sun 25 Jan 2026 04:16:30 GMT) MFC: libfetch: allow disabling TLS v1.3 when negotiating the connection (cherry picked from commit 129aec72250266e60c07ff4643623188f7c27a9d) M lib/libfetch/common.c M lib/libfetch/fetch.3 ____________________________________________________________________________________________________________ Commit: fae1c84e95f7be4deacdab8a97f140714d8d2ae8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fae1c84e95f7be4deacdab8a97f140714d8d2ae8 Author: Eugene Grosbein (Thu 22 Jan 2026 08:40:35 GMT) Committer: Eugene Grosbein (Sun 25 Jan 2026 04:13:02 GMT) MFC: libfetch: apply timeout to SSL_read() Currently, fetchTimeout works for non-SSL connections only, so does fetch -T. Fix it applying specified timeout to SSL_read(). (cherry picked from commit 8f8a7f6fffd7dca09013f7c4bfa075bc3825fb8e) M lib/libfetch/common.c ____________________________________________________________________________________________________________ Commit: e4730bb6bbd703ae20b73922bb394c4038681b16 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e4730bb6bbd703ae20b73922bb394c4038681b16 Author: Kevin Bowling (Tue 19 Aug 2025 17:45:48 BST) Committer: Kevin Bowling (Sat 24 Jan 2026 11:12:19 GMT) Revert "e1000: Try auto-negotiation for fixed 100 or 10 configuration" We've gotten a report of this breaking a fixed no autoneg setup. Since no link is worse than what this intends to fix (negotiating full duplex at forced speed), revert for the undeway 15.0 release cycle until this can be further reviewed. PR: 288827 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288827 ) Differential Revision: https://reviews.freebsd.org/D47336 This reverts commit 645c45e297c0fcbbb9d2d24cdeeb124234825019. (cherry picked from commit 3ff0231c87f360afa4521e635b46f6c711dc4ee3) M sys/dev/e1000/e1000_phy.c M sys/dev/e1000/if_em.c ____________________________________________________________________________________________________________ Commit: 40c0d6735538a1557a9b53306dd70aa2fc8ae7d1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=40c0d6735538a1557a9b53306dd70aa2fc8ae7d1 Author: Marek Zarychta (Fri 16 Jan 2026 10:12:11 GMT) Committer: Pouria Mousavizadeh Tehrani (Sat 24 Jan 2026 09:23:28 GMT) ng_netflow v9: fix template re-announcement using packet count Increment fe->sent_packets after export9_send(). Previously, NetFlow v9 templates were only re-announced based on time, ignoring the packet count parameter (`templ_packets`). PR: 270083 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270083 ) Reviewed by: glebius pouria Approved by: glebius (mentor) MFC after: 1 week Sponsored by: Subcarpathian BSD User Group (cherry picked from commit d836dae9f0d888d441234ea11e3cd91614c86aa2) M sys/netgraph/netflow/netflow_v9.c ____________________________________________________________________________________________________________ Commit: 6abefcdd2585019bda24dddeab49040ee39f4079 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6abefcdd2585019bda24dddeab49040ee39f4079 Author: Alexander Motin (Thu 27 Jun 2024 14:29:23 BST) Committer: Mark Johnston (Fri 23 Jan 2026 17:12:50 GMT) Fix SATA NCQ error recovery after 25375b1415 Since that commit ahci(4), siis(4) and mvs(4) drivers ended up using wrong command to fetch error information for NCQ commands. Since ATA errors are not very informative to begin with, the only noticeable effect is a lack of retries on those errors by CAM. MFC after: 1 week PR: 279978 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279978 ) (cherry picked from commit 87085c12ba8fa51f777bc636df67008b45e20d1c) M sys/dev/ahci/ahci.c M sys/dev/mvs/mvs.c M sys/dev/siis/siis.c ____________________________________________________________________________________________________________ Commit: f5ea3d46d600c290752a4ebd8a5f8282d9b4887a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f5ea3d46d600c290752a4ebd8a5f8282d9b4887a Author: Colin Percival (Fri 23 Jan 2026 07:53:55 GMT) Committer: Colin Percival (Fri 23 Jan 2026 07:53:55 GMT) 14.4: Update stable/14 to -PRERELEASE This marks the start of the FreeBSD 14.4 release cycle; the stable/14 tree is now in "code slush". Developers are encouraged to prioritize fixing bugs (and/or merging bug fixes from HEAD) over new features at this time. Commit approval from re@ is not required but if new features introduce problems they may be removed from the release. Approved by: re (implicit) Sponsored by: OpenSats Initiative M sys/conf/newvers.sh M usr.bin/yacc/config.h ____________________________________________________________________________________________________________ Commit: 631d6cc0275c301bff27aa507a0d8922619d88cc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=631d6cc0275c301bff27aa507a0d8922619d88cc Author: Michael Tuexen (Tue 20 Jan 2026 17:04:35 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 15:30:09 GMT) sctp: support bridge interfaces Reported by: Timo Völker Tested by: Timo Völker (cherry picked from commit 8d82dafa568baf7be46e5e443dd7310986a28aa9) M sys/netinet/sctp_bsd_addr.c ____________________________________________________________________________________________________________ Commit: 35c9d8f04a192310d37aa13e5749f3a6933693e8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=35c9d8f04a192310d37aa13e5749f3a6933693e8 Author: Michael Tuexen (Tue 20 Jan 2026 10:25:31 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 15:26:48 GMT) dwc: cleanup Reviewed by: Timo Völker Differential Revision: https://reviews.freebsd.org/D54788 (cherry picked from commit 3d771e0db66da77da5a7f323df1c0638e6b586ea) M sys/dev/dwc/if_dwc.c ____________________________________________________________________________________________________________ Commit: ae83ce2e7ada37a5362da621ba9c6c09e75a2c68 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ae83ce2e7ada37a5362da621ba9c6c09e75a2c68 Author: Michael Tuexen (Mon 19 Jan 2026 20:38:37 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 15:20:01 GMT) sctp: improve compilation as module When compiling SCTP as a module, don't compile sctp_crc32.c into the module. This avoids code and variable duplication since sctp_crc32.c is compiled into the kernel. In particular, the variable system_base_info is not duplicated. This fixes the handling of the statistic counters sctps_sendhwcrc and sctps_sendswcrc when using sctp_delayed_cksum. (cherry picked from commit 68a449f09e2a38def9df822d42f91ecd2f27b0e2) M sys/modules/sctp/Makefile ____________________________________________________________________________________________________________ Commit: e8731113c601a4ed0d2faa3a1e8aaee643176760 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e8731113c601a4ed0d2faa3a1e8aaee643176760 Author: Michael Tuexen (Sun 18 Jan 2026 12:26:52 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 15:18:14 GMT) netstat: fix typo (cherry picked from commit 0ef8f7133d0f1ee28af1689f013f18e002eeae9f) M usr.bin/netstat/sctp.c ____________________________________________________________________________________________________________ Commit: d9665287cd602314ab54e2aba93c1096d61457e6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d9665287cd602314ab54e2aba93c1096d61457e6 Author: Michael Tuexen (Sat 17 Jan 2026 20:06:28 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 15:15:50 GMT) dwc: add receive checksum offload for IPv6 This patch adds support for receive checksum offload for TCP/IPv6 and UDP/IPv6. Since receive checksum offload can't be configured separately for IPv4 and IPv6, IFCAP_RXCSUM and IFCAP_RXCSUM_IPV6 can't be changed independently. Reviewed by: Timo Völker Differential Revision: https://reviews.freebsd.org/D54756 (cherry picked from commit 5d8777f3a7aee04eabbc9f3cf12138f9b56e3ebc) M sys/dev/dwc/if_dwc.c ____________________________________________________________________________________________________________ Commit: 81bddae7a4dcea29998ed417ad55421ad401c579 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=81bddae7a4dcea29998ed417ad55421ad401c579 Author: Michael Tuexen (Sat 17 Jan 2026 20:01:54 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 14:27:48 GMT) dwc: add transmit checksum offload for IPv6 This patch adds support for transmit checksum offload for TCP/IPv6 and UDP/IPv6. Reviewed by: Timo Völker Differential Revision: https://reviews.freebsd.org/D54754 (cherry picked from commit aca67c37a5215448828a2974a2ff44e75e9159bc) M sys/dev/dwc/if_dwc.c ____________________________________________________________________________________________________________ Commit: 88249c111d4372a8a307bfc08e0c87d1b5c6a7a7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=88249c111d4372a8a307bfc08e0c87d1b5c6a7a7 Author: Michael Tuexen (Fri 16 Jan 2026 17:28:01 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 14:22:49 GMT) dwc: prepare for IPv6 transmit checksum offloading No functional change intended. (cherry picked from commit 97b177f51fb939943ef920415e541d00789d12f4) M sys/dev/dwc/if_dwc.c ____________________________________________________________________________________________________________ Commit: 39a25aa8a736a827f7a99e682fdb1579af4e8df5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=39a25aa8a736a827f7a99e682fdb1579af4e8df5 Author: Michael Tuexen (Fri 16 Jan 2026 12:32:13 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 14:11:56 GMT) bge: disable TXCSUM if UDP transmit checksum offloading is disabled The bge interface is special with respect to transmit checksumi offloading. In the default settings, an bge interface announces TXCSUM capabilities, but only supports TCP/IPv4 and not UDP/IPv4 due to limitations of some of the NICs. This results in problems when the bge interface becomes a member of a bridge. Since currently only the TXCSUM capabilities are synced when a member is added to a bridge and not the protocol specific capabilities, this can result in a situation where UDP packets are sent out using a bge interface without having a correct checksum. To mitigate this problem, initially don't announce TXCSUM capabilities, when UDP transmit checksum is disabled. It is still possible to enable TXCSUM capabilities via ifconfig. PR: 291420 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291420 ) Reviewed by: Timo Voelker Differential Revision: https://reviews.freebsd.org/D54486 (cherry picked from commit bbd30927b1af44226c8de0512912a7fedfce2824) M share/man/man4/bge.4 M sys/dev/bge/if_bge.c ____________________________________________________________________________________________________________ Commit: 3fdfc6c77aad8eacce0a8e609cc435db1070d726 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3fdfc6c77aad8eacce0a8e609cc435db1070d726 Author: Michael Tuexen (Fri 16 Jan 2026 11:49:40 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 14:05:01 GMT) ipv6: account for jumbo payload option If a jumbo payload option is added, the length of the mbuf chain is increased by 8 but the actual hop-by-hop extension header with the jumbo playload option is only inserted in the packet if there are other options. Therefore, adjust optlen to reflect the actual size of IPv6 extension headers including the hop-by-hop extension header containing the jumbo payload option. Reported by: syzbot+73fe316271df473230eb@syzkaller.appspotmail.com Reviewed by: markj, Timo Voelker Differential Revision: https://reviews.freebsd.org/D54394 (cherry picked from commit 1f5b1de1fdf2924066c1851ed6c73f36fe20b438) M sys/netinet6/ip6_output.c ____________________________________________________________________________________________________________ Commit: a83f6427c15d0ae24c89c583e72abab9a4669d8f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a83f6427c15d0ae24c89c583e72abab9a4669d8f Author: Michael Tuexen (Fri 16 Jan 2026 11:02:53 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 14:04:21 GMT) dwc: improve IPv4 transmit checksum offloading This patch provides two improvements for TCP/IPv4 and UDP/IPv4 transmit checksum offloading: (1) Use *CIC_SEG instead of *CIC_FULL, since FreeBSD always provides a pseudo header checksum. (2) Don't make transmit IPv4 header checksum offloading a prerequisite for TCP/IPv4 or UDP/IPv4 transmit checksum offloading. This is the root cause of PR 291696, since right now the epair interface does not support transmit IPv4 header checksum offloading, but TCP/IPv4 and UDP/IPv4 transmit checksum offloading. PR: 291696 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291696 ) Reviewed by: Timo Voelker Tested by: Marek Benc Differential Revision: https://reviews.freebsd.org/D54395 (cherry picked from commit f8ddf74175c8013268e65b18750e247306fa088a) M sys/dev/dwc/if_dwc.c ____________________________________________________________________________________________________________ Commit: 0b2cf69287bbb97d29042a4062b01ea4d9e9e054 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0b2cf69287bbb97d29042a4062b01ea4d9e9e054 Author: Jean-Sébastien Pédron (Sun 7 Sep 2025 17:40:49 BST) Committer: Ed Maste (Wed 21 Jan 2026 13:41:57 GMT) linuxkpi: Take const root in read-only radix tree functions This is a preparation step for a future addition to this file. This is also closer to what Linux does. Reviewed by: emaste Sponsored by: The FreeBSD Foundation (cherry picked from commit cf39b51d36d82214ebdfd03055d321ddd2d85274) (cherry picked from commit c5445540995fd37c390ad371a2e95d300ee83988) M sys/compat/linuxkpi/common/include/linux/radix-tree.h M sys/compat/linuxkpi/common/src/linux_radix.c ____________________________________________________________________________________________________________ Commit: fab0a83ff7484a069f04ec9c6b5657ec9676c7dd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fab0a83ff7484a069f04ec9c6b5657ec9676c7dd Author: Timo Völker (Fri 19 Dec 2025 16:50:20 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:46:28 GMT) tcp: fix checksum calculation bug The new function in_delayed_cksum_o() was introduced to compute the checksum in the case the mbuf chain does not start with the IP header. The offset of the IP header is specified by the parameter iph_offset. If iph_offset was positive, the function computed an incorrect checksum. Reviewed by: sobomax, tuexen Fixes: 5feb38e37847 ("netinet: provide "at offset" variant of the in_delayed_cksum() API") Differential Revision: https://reviews.freebsd.org/D54269 (cherry picked from commit c8b3b605ae854ead6c8804e0400d80cb8fa73fdf) M sys/netinet/ip_output.c ____________________________________________________________________________________________________________ Commit: c1b29bcd789ebcb5c7b6a3aa10f00de3032cad06 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c1b29bcd789ebcb5c7b6a3aa10f00de3032cad06 Author: Michael Tuexen (Fri 19 Dec 2025 16:44:20 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:44:16 GMT) vtnet: improve consistency Use sbuf_new_for_sysctl() instead of sbuf_new_auto() when exposing the flags via sysctl. (cherry picked from commit 8da838ac31692e381adfc63d83ea49f2adabbf23) M sys/dev/virtio/network/if_vtnet.c ____________________________________________________________________________________________________________ Commit: 9d246c6be2b2c4d8845961c3170d6d65b4a92e3c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9d246c6be2b2c4d8845961c3170d6d65b4a92e3c Author: Michael Tuexen (Fri 19 Dec 2025 16:38:35 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:42:09 GMT) vtnet: expose features via sysctl tree Right now the 64-bit flags field needs to be casted to a 32-bit field, because clang warns if more than 32-bits are used. Once clang is fixed, this restriction will be removed and more bits will be added. Reviewed by: markj, Timo Völker Differential Revision: https://reviews.freebsd.org/D54288 (cherry picked from commit 634d9c0d111b630c3d63a1cf25d15c32a37afab8) M share/man/man4/vtnet.4 M sys/dev/virtio/network/if_vtnet.c M sys/dev/virtio/network/virtio_net.h ____________________________________________________________________________________________________________ Commit: 39140d9d9a27884b5941107abe3ddf92751d41b5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=39140d9d9a27884b5941107abe3ddf92751d41b5 Author: Michael Tuexen (Fri 19 Dec 2025 16:26:37 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:40:05 GMT) printf.9: Support more than 32 bits in %b This will be usable after clang has been extended to accept length modifiers for %b when compiling kernel code. But we need FreeBSD to support it first... Reviewed by: markj, Timo Völker Differential Revision: https://reviews.freebsd.org/D54286 (cherry picked from commit d2cb9cab8457b2a84898f0ac86f7b45e907f872c) M share/man/man9/printf.9 M sys/kern/subr_prf.c ____________________________________________________________________________________________________________ Commit: 1923671644e2b82030e6d5e9c90bf7e3b62df699 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1923671644e2b82030e6d5e9c90bf7e3b62df699 Author: Michael Tuexen (Thu 18 Dec 2025 22:49:51 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:39:31 GMT) printf.9: fix style Follow the style described by style.9. Reported by: markj (cherry picked from commit 391e8709315d4a0e8f5ba91912e370571ab6841b) M share/man/man9/printf.9 ____________________________________________________________________________________________________________ Commit: 02494584a52eceee40c6a638170fc3f9366a5bf2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=02494584a52eceee40c6a638170fc3f9366a5bf2 Author: Michael Tuexen (Thu 18 Dec 2025 14:57:46 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:39:05 GMT) vtnet.4: put each sentence on its own line Reported by: ziaee Fixes: e3a0571ad74d ("vtnet: expose flags via sysctl tree") (cherry picked from commit f6e183301851e3e826d53a29e76cfc9bc7626477) M share/man/man4/vtnet.4 ____________________________________________________________________________________________________________ Commit: 58e5923bf6fc59328a499b818052b4be1675f4c0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=58e5923bf6fc59328a499b818052b4be1675f4c0 Author: Michael Tuexen (Thu 18 Dec 2025 14:42:13 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:37:04 GMT) vtnet: expose flags via sysctl tree Provide the flags used for a vtnet interface via the sysctl tree. This is mostly used for debugging purposes. Reviewed by: Timo Völker Differential Revision: https://reviews.freebsd.org/D54283 (cherry picked from commit e3a0571ad74d8429a95fcae9efc1d91cc109a337) M share/man/man4/vtnet.4 M sys/dev/virtio/network/if_vtnet.c M sys/dev/virtio/network/if_vtnetvar.h ____________________________________________________________________________________________________________ Commit: 21f6087286c682c799c1c575d780e50a81a5ff2a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=21f6087286c682c799c1c575d780e50a81a5ff2a Author: Michael Tuexen (Thu 18 Dec 2025 12:41:29 GMT) Committer: Michael Tuexen (Wed 21 Jan 2026 12:34:31 GMT) vtnet: define flags in a consistent way This allows adding flags in the upper 32 bits in a consistent way. No functional change intended. (cherry picked from commit e0c6c4ecfc755b78ac9135033053d2f15c62bf04) M sys/dev/virtio/network/virtio_net.h ____________________________________________________________________________________________________________ Commit: 8e49c6c84cae980196b10886290e0c87c711cfdb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8e49c6c84cae980196b10886290e0c87c711cfdb Author: Jose Luis Duran (Wed 14 Jan 2026 17:06:14 GMT) Committer: Jose Luis Duran (Wed 21 Jan 2026 01:51:35 GMT) libexecinfo: tests: Expect failure on aarch64 Add a guard that expects a failure of the test on aarch64. Reviewed by: emaste Fixes: df1ea5887326 ("tests: Test libexecinfo backtrace call througth signal trampoline") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54675 (cherry picked from commit fef84fd8ae845e19cec0f6b9aac0e6451cca3d7a) M lib/libexecinfo/tests/sigtramp_test.c ____________________________________________________________________________________________________________ Commit: e5e98c244fe9889db7efb6789a2d0bd2ca1d151b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e5e98c244fe9889db7efb6789a2d0bd2ca1d151b Author: Jose Luis Duran (Mon 29 Sep 2025 17:32:36 BST) Committer: Ed Maste (Tue 20 Jan 2026 19:42:08 GMT) openssh: blocklist: Use NetBSD probes Use NetBSD probe locations for consistency. We have submitted all improved or missing probes, keeping them synchronized with NetBSD (our blocklist upstream) should simplify upgrades and maintenance, as the locations of these probes are a moving target, depending on upstream OpenSSH changes. Additionally, use BLACKLIST_AUTH_FAIL exclusively for now. At the time of this commit BLACKLIST_BAD_USER, is a no-op. However, it will change in a future upgrade. Also, enhance blacklist notification messages for better debugging by making them more descriptive. Reviewed by: emaste Approved by: emaste (mentor) MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D52749 (cherry picked from commit e02003bce726333872d65b7b9a1557d97b6d91a0) (cherry picked from commit 53dc967db74fba0d7b5bed413a7bc3216f16c55d) (cherry picked from commit 9c82c17c2a3ac61a69cb5337cb6f92ae88bc0b08) (cherry picked from commit 7161c525abffe6cdb19ac01223d058fcbabf49c5) M crypto/openssh/auth-pam.c M crypto/openssh/auth.c M crypto/openssh/auth2.c M crypto/openssh/monitor.c M crypto/openssh/packet.c M crypto/openssh/sshd-session.c ____________________________________________________________________________________________________________ Commit: 79041942fa9a4496c11f437e323fb0fc767fcce5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=79041942fa9a4496c11f437e323fb0fc767fcce5 Author: John Baldwin (Fri 8 Aug 2025 18:43:56 BST) Committer: Ed Maste (Tue 20 Jan 2026 19:42:08 GMT) openssh: Don't include an unused EVP_CIPHER_CTX_get_iv() stub This stub isn't actually used on modern versions of OpenSSL for which OpenSSH uses EVP_CIPHER_CTX_get_updated_iv instead via a wrapper macro. However, the wrapper macro conflicted with the existing namespace macro triggering an error on GCC: In file included from crypto/openssh/sshd-session.c:65: crypto/openssh/openbsd-compat/openssl-compat.h:71:11: error: "EVP_CIPHER_CTX_get_iv" redefined [-Werror] 71 | # define EVP_CIPHER_CTX_get_iv EVP_CIPHER_CTX_get_updated_iv | ^~~~~~~~~~~~~~~~~~~~~ In file included from : crypto/openssh/ssh_namespace.h:12:9: note: this is the location of the previous definition 12 | #define EVP_CIPHER_CTX_get_iv Fssh_EVP_CIPHER_CTX_get_iv | ^~~~~~~~~~~~~~~~~~~~~ The error was masked on clang due to MIT krb5 adding a blanket -Wno-macro-redefined. Building sshd-session without Kerberos support was sufficient to trigger a warning from clang. Reviewed by: des Differential Revision: https://reviews.freebsd.org/D51810 (cherry picked from commit e8633bc76ad935fa44156034713c608477bc3da0) M crypto/openssh/openbsd-compat/libressl-api-compat.c M crypto/openssh/ssh_namespace.h ____________________________________________________________________________________________________________ Commit: b19f74cfc43b2b555875fa8be35ae23cab6e6096 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b19f74cfc43b2b555875fa8be35ae23cab6e6096 Author: John Baldwin (Fri 8 Aug 2025 18:43:36 BST) Committer: Ed Maste (Tue 20 Jan 2026 19:42:08 GMT) openssh: Include explicitly in includes.h This was previously included due to nested includes in Heimdal's headers. Without this, the build fails with an error due to redefining AT_FDCWD. clang: In file included from crypto/openssh/sshd-session.c:46: /usr/obj/.../tmp/usr/include/fcntl.h:232:9: error: 'AT_FDCWD' macro redefined [-Werror,-Wmacro-redefined] 232 | #define AT_FDCWD -100 | ^ crypto/openssh/openbsd-compat/bsd-misc.h:69:10: note: previous definition is here 69 | # define AT_FDCWD (-2) | ^ GCC (can't be disabled): In file included from crypto/openssh/sshd-session.c:46: sys/sys/fcntl.h:232:9: error: "AT_FDCWD" redefined [-Werror] 232 | #define AT_FDCWD -100 | ^~~~~~~~ In file included from crypto/openssh/openbsd-compat/openbsd-compat.h:218, from crypto/openssh/includes.h:173, from crypto/openssh/sshd-session.c:30: openssh/openbsd-compat/bsd-misc.h:69:10: note: this is the location of the previous definition 69 | # define AT_FDCWD (-2) | ^~~~~~~~ Reviewed by: des Differential Revision: https://reviews.freebsd.org/D51809 (cherry picked from commit 7de6d9d9b6bd8b1cd5e190cf4f12df498b34a646) M crypto/openssh/includes.h ____________________________________________________________________________________________________________ Commit: 7ca599aa613955a939284292f0993b59b0d9fef3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7ca599aa613955a939284292f0993b59b0d9fef3 Author: Ed Maste (Fri 1 Aug 2025 16:56:45 BST) Committer: Ed Maste (Tue 20 Jan 2026 19:41:59 GMT) OpenSSH: Update to 10.0p2 Full release notes are available at https://www.openssh.com/txt/release-10.0 Selected highlights from the release notes: Potentially-incompatible changes - This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.] - This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this. - sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary. Security - sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.] New features - ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement. Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D51630 (cherry picked from commit 8e28d84935f2f0ee081d44f9803f3052b960e50b) (cherry picked from commit e600fc7295a7082041388113a5d677f6c4cf7ce7) M crypto/openssh/.depend M crypto/openssh/.git_allowed_signers M crypto/openssh/.github/ci-status.md M crypto/openssh/.github/configs M crypto/openssh/.github/run_test.sh M crypto/openssh/.github/setup_ci.sh M crypto/openssh/.github/workflows/c-cpp.yml M crypto/openssh/.github/workflows/selfhosted.yml M crypto/openssh/.github/workflows/upstream.yml M crypto/openssh/.gitignore M crypto/openssh/.skipped-commit-ids M crypto/openssh/ChangeLog M crypto/openssh/FREEBSD-upgrade M crypto/openssh/INSTALL M crypto/openssh/Makefile.in M crypto/openssh/PROTOCOL.agent M crypto/openssh/PROTOCOL.certkeys M crypto/openssh/README M crypto/openssh/README.md M crypto/openssh/addr.c M crypto/openssh/addr.h M crypto/openssh/auth2-pubkey.c M crypto/openssh/auth2.c M crypto/openssh/authfile.c M crypto/openssh/buildpkg.sh.in M crypto/openssh/channels.c M crypto/openssh/channels.h M crypto/openssh/cipher.c M crypto/openssh/clientloop.c M crypto/openssh/config.h M crypto/openssh/configure.ac M crypto/openssh/contrib/cygwin/ssh-user-config M crypto/openssh/contrib/redhat/openssh.spec M crypto/openssh/contrib/suse/openssh.spec M crypto/openssh/defines.h M crypto/openssh/dh.c M crypto/openssh/groupaccess.c M crypto/openssh/includes.h M crypto/openssh/libcrux_mlkem768_sha3.h M crypto/openssh/log.c M crypto/openssh/log.h M crypto/openssh/loginrec.c M crypto/openssh/loginrec.h M crypto/openssh/mdoc2man.awk M crypto/openssh/misc.c M crypto/openssh/mlkem768.sh M crypto/openssh/moduli M crypto/openssh/monitor.c M crypto/openssh/monitor.h M crypto/openssh/monitor_wrap.c M crypto/openssh/monitor_wrap.h M crypto/openssh/mux.c M crypto/openssh/myproposal.h M crypto/openssh/openbsd-compat/bsd-pselect.c M crypto/openssh/openbsd-compat/openssl-compat.h M crypto/openssh/openbsd-compat/port-linux.c M crypto/openssh/openbsd-compat/port-linux.h M crypto/openssh/pathnames.h M crypto/openssh/platform-listen.c M crypto/openssh/platform.h M crypto/openssh/progressmeter.c M crypto/openssh/readconf.c M crypto/openssh/readconf.h M crypto/openssh/regress/Makefile M crypto/openssh/regress/agent-restrict.sh M crypto/openssh/regress/agent.sh M crypto/openssh/regress/cert-userkey.sh M crypto/openssh/regress/cfginclude.sh M crypto/openssh/regress/cfgmatch.sh M crypto/openssh/regress/dropbear-ciphers.sh M crypto/openssh/regress/dropbear-kex.sh M crypto/openssh/regress/hostkey-agent.sh M crypto/openssh/regress/key-options.sh M crypto/openssh/regress/misc/fuzz-harness/agent_fuzz_helper.c A crypto/openssh/regress/misc/sk-dummy/Makefile A crypto/openssh/regress/misc/ssh-verify-attestation/Makefile A crypto/openssh/regress/misc/ssh-verify-attestation/ssh-verify-attestation.c M crypto/openssh/regress/percent.sh M crypto/openssh/regress/servcfginclude.sh A crypto/openssh/regress/sftp-resume.sh M crypto/openssh/regress/sshfp-connect.sh M crypto/openssh/regress/test-exec.sh A crypto/openssh/regress/unittests/authopt/Makefile A crypto/openssh/regress/unittests/misc/Makefile M crypto/openssh/sandbox-capsicum.c M crypto/openssh/sandbox-darwin.c M crypto/openssh/sandbox-null.c D crypto/openssh/sandbox-pledge.c M crypto/openssh/sandbox-rlimit.c M crypto/openssh/sandbox-seccomp-filter.c M crypto/openssh/sandbox-solaris.c D crypto/openssh/sandbox-systrace.c M crypto/openssh/scp.1 M crypto/openssh/scp.c M crypto/openssh/servconf.c M crypto/openssh/servconf.h M crypto/openssh/serverloop.c M crypto/openssh/session.c M crypto/openssh/sftp-client.c M crypto/openssh/sftp.1 M crypto/openssh/sftp.c M crypto/openssh/sk-usbhid.c M crypto/openssh/srclimit.c M crypto/openssh/ssh-agent.1 M crypto/openssh/ssh-agent.c M crypto/openssh/ssh-ecdsa-sk.c M crypto/openssh/ssh-keygen.1 M crypto/openssh/ssh-keygen.c M crypto/openssh/ssh-keyscan.c M crypto/openssh/ssh-keysign.c M crypto/openssh/ssh-pkcs11.c M crypto/openssh/ssh-sandbox.h M crypto/openssh/ssh.1 M crypto/openssh/ssh.c M crypto/openssh/ssh.h M crypto/openssh/ssh_api.c M crypto/openssh/ssh_config.5 M crypto/openssh/ssh_namespace.h M crypto/openssh/sshconnect.c M crypto/openssh/sshconnect.h M crypto/openssh/sshconnect2.c A crypto/openssh/sshd-auth.c A crypto/openssh/sshd-debug.sh M crypto/openssh/sshd-session.c M crypto/openssh/sshd.c M crypto/openssh/sshd_config M crypto/openssh/sshd_config.5 M crypto/openssh/sshkey.c M crypto/openssh/sshkey.h M crypto/openssh/sshsig.c M crypto/openssh/version.h M secure/libexec/Makefile A secure/libexec/sshd-auth/Makefile M secure/libexec/sshd-session/Makefile ____________________________________________________________________________________________________________ Commit: b3647e2a408e8a0246ec2240a152f8c41c3482cb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b3647e2a408e8a0246ec2240a152f8c41c3482cb Author: Alan Somers (Tue 6 Jan 2026 22:19:57 GMT) Committer: Alan Somers (Tue 20 Jan 2026 17:15:13 GMT) netstat: fix a segfault with --libxo Fix a segfault when printing the "protocol" field. The field-format and encoding-format were expecting different numbers of arguments. Also, fix the width of the tcp-state field in encoded output. PR: 292228 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292228 ) Fixes: c2b08c13c20 netstat: add support for UDP-Lite endpoints Sponsored by: ConnectWise Reviewed by: tuexen, js, des Differential Revision: https://reviews.freebsd.org/D54567 (cherry picked from commit 3b6615ec0332f901fcc9e9307f78717424f09c1e) M usr.bin/netstat/inet.c ____________________________________________________________________________________________________________ Commit: 3b5c296fa1519a7fbfb8c48703bcacadd4b7d9c0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3b5c296fa1519a7fbfb8c48703bcacadd4b7d9c0 Author: Alan Somers (Sun 21 Dec 2025 15:32:31 GMT) Committer: Alan Somers (Tue 20 Jan 2026 17:14:21 GMT) fusefs: Fix further intermittency in the BadServer.ShortWrite test case After being unmounted, the mockfs server would occasionally read from /dev/fuse again, if the main function didn't exit fast enough, getting an ENODEV error. Handle that appropriately. Reported by: Siva Mahadevan Fixes: d86025c1d49c84c4dc8c3635c83c078ad56e5a53 Reviewed by: Siva Mahadevan Differential Revision: https://reviews.freebsd.org/D54331 (cherry picked from commit f51e9d0e0988df58c94db586ab5c8b5fd091c004) M tests/sys/fs/fusefs/mockfs.cc ____________________________________________________________________________________________________________ Commit: 3b44f04225bc3f2ca33cff90273b8cdfea67774e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3b44f04225bc3f2ca33cff90273b8cdfea67774e Author: Alan Somers (Fri 5 Dec 2025 16:16:53 GMT) Committer: Alan Somers (Tue 20 Jan 2026 17:12:53 GMT) gpart: "gpart --libxo:JP list" duplicates attribute keys Add leaf-list modifier to attrib as it's possible to have multiple attributes on a gpart provider. I purposely made it so that the normal output still says "attrib:" just so we don't break any scripts people may be using to parse the output, but the libxo output now says "attribute" just like `gpart show` will do once https://reviews.freebsd.org/D53950 is merged. PR: 291377 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291377 ) Reviewed by: asomers Sponsored by: ConnectWise Differential Revision: https://reviews.freebsd.org/D54080 (cherry picked from commit a0347b0f3a6088872c29eddb85154478d543dffb) M sbin/geom/core/geom.c ____________________________________________________________________________________________________________ Commit: af46d309a72b73398c3d0e4bee9b21437af17d7a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=af46d309a72b73398c3d0e4bee9b21437af17d7a Author: Johan Söllvander (Thu 15 Jan 2026 14:21:07 GMT) Committer: Johan Söllvander (Tue 20 Jan 2026 13:25:39 GMT) netstat: Remove padding from cc and stack fields Trim white space padding that gets added libxo fields cc and stack when using -C and -c. The padding is only visible if you're using multiple stacks or congestion algorithms. PR: 292262 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292262 ) Reviewed by: asomers, tuexen Approved by: asomers (mentor) Differential Revision: https://reviews.freebsd.org/D54709 (cherry picked from commit faa31fc0e7acc1c53bba2b69a63e9ff55d24faf7) M usr.bin/netstat/inet.c ____________________________________________________________________________________________________________ Commit: 4f0342cf84dbe4fadbfea02e3279aafab36ea848 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4f0342cf84dbe4fadbfea02e3279aafab36ea848 Author: Kyle Evans (Wed 7 Jan 2026 18:20:05 GMT) Committer: Kyle Evans (Tue 20 Jan 2026 04:08:11 GMT) lualoader: fix pruning of non-existent default kernel Removing the kernel from the list of available kernels is sufficient to avoid rendering it in the list, but we need more for booting to actually work. Notably, the 'kernel' loader.conf var was left intact to its default value, so if one didn't use the kernel selector in the menu then we'd try to boot the nonexistent 'kernel' instead of the new default (first autodetected). There's room to improve the error messages here, but for now let's just make it actually work correctly. PR: 292232 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292232 ) Fixes: d04415c520b03 ("loader: lua: remove the default kernel [...]") (cherry picked from commit e30086ab4c8778ea70a3b19e83546ce1b4a16492) M stand/lua/core.lua ____________________________________________________________________________________________________________ Commit: 919c1e19058d2e214fa3c33498123adb6ca3366c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=919c1e19058d2e214fa3c33498123adb6ca3366c Author: Rob Norris (Wed 17 Dec 2025 17:00:47 GMT) Committer: Kyle Evans (Tue 20 Jan 2026 04:08:09 GMT) bectl: log modifying functions to zpool history Modeled directly after the method used by the zfs/zpool commands: flag commands with a "please log me" flag, and when there, reconstruct the command line. On success, call the library function to add it to the log. (Majority of the change by Rob; minor edits by kevans@) Signed-off-by: Rob Norris Co-authored-by: Kyle Evans Sponsored by: Modirum MDPay Sponsored by: Klara, Inc. (cherry picked from commit 2a87929671e6e6919c18f2c25d60f2c73c3d18f4) M lib/libbe/be.c M lib/libbe/be.h M lib/libbe/libbe.3 M sbin/bectl/bectl.c ____________________________________________________________________________________________________________ Commit: d3c523b6f5aa644e85d7c2c1177953f5d73e8529 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d3c523b6f5aa644e85d7c2c1177953f5d73e8529 Author: Kyle Evans (Wed 5 Nov 2025 00:28:02 GMT) Committer: Kyle Evans (Tue 20 Jan 2026 04:07:00 GMT) makedev(9): drop an additional note about cdevpriv dtors These were previously somewhat safe to call destroy_dev(9), but will now also cause a deadlock in the same fashion that d_close doing so would previously. Amend the note to point it out, in case it's useful for someone. Reviewed by: imp, kib, markj (cherry picked from commit 90314c04f10f583c37c59ec51fd628e3deaf3622) M share/man/man9/make_dev.9 ____________________________________________________________________________________________________________ Commit: b196a718ca0e77685b8e40aaac0911f11604d00c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b196a718ca0e77685b8e40aaac0911f11604d00c Author: Kyle Evans (Wed 29 Oct 2025 16:32:30 GMT) Committer: Kyle Evans (Tue 20 Jan 2026 04:06:56 GMT) libc: report _SC_NPROCESSORS_ONLN more accurately in cpu-limited jails We don't support CPU hotplug, but we do support cpuset(8) restrictions on jails (including prison0, which uses cpuset 1). The process cannot widen its cpuset beyond its root set, so it makes sense to instead report the number of cpus enabled there rather than the total number in the system. This change is effectively a nop for the majority of systems and jails in the wild, though it does reduce the performance of this query now that we can't take advantage of AT_NCPUS being provided in the auxinfo. The implementation here is notably different than Linux, which would not take cgroups into account. They do, however, take CPU hotplug into account, so the possibility for it to diverge from (and be lower than) the # configured count to reflect what the process can actually be scheduled on doesn't really diverge in semantics. Reviewed by: kib (cherry picked from commit d617806aac1469319970e3551656e9deabb98a35) M lib/libc/gen/sysconf.3 M lib/libc/gen/sysconf.c M lib/libc/tests/sys/cpuset_test.c ____________________________________________________________________________________________________________ Commit: 57b08d98db0a5bc16a6f0b47ade5b25021564d14 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=57b08d98db0a5bc16a6f0b47ade5b25021564d14 Author: Kyle Evans (Wed 29 Oct 2025 02:37:21 GMT) Committer: Kyle Evans (Tue 20 Jan 2026 04:05:44 GMT) libutil: defer setting the MAC label until after the login class MAC policies, like mac_biba(4), may forbid changing the login class once a label has been applied. For setting up the initial login context, this isn't really expected and in-fact may break some class-based configuration. Defer setting the MAC label until after the login class is set, and remove the requirement that we have a pwd entry since the label is pulled from the login class -- we only use pwd for syslog in this path. Patch is largely by Kevin Barry, with some modifications and this commit message by kevans@. PR: 177698 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=177698 ) Reviewed by: des, olce Co-authored-by: Kevin Barry (cherry picked from commit 98edcbcce0a4650084bd86e704cfa38bf590250c) M lib/libutil/login_class.c ____________________________________________________________________________________________________________ Commit: f00ebc7eb3a65494749fb85b3fd8f27ea09296ae URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f00ebc7eb3a65494749fb85b3fd8f27ea09296ae Author: Kyle Evans (Sun 26 Oct 2025 15:10:34 GMT) Committer: Kyle Evans (Tue 20 Jan 2026 04:05:37 GMT) libc: fix description issues in mac_text(3)/mac_free(3) mac_text(3) as-written would seem to indicate that a `mac_t` should be freed with free(3), but this isn't the case. One can derive from context from when the change was introduced and COMPATIBILITY that this was intended to talk about *text in `mac_to_text`, so move the comment there. PR: 179832 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=179832 ) Co-authored-by: Priit Järv (cherry picked from commit 081218b7a2006e5b6783e51f66fd751871ac1272) M lib/libc/posix1e/mac_free.3 M lib/libc/posix1e/mac_text.3 ____________________________________________________________________________________________________________ Commit: b46515ed59a8c1923f1a6bec04729feef72cf4bc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b46515ed59a8c1923f1a6bec04729feef72cf4bc Author: Michael Osipov (Mon 29 Dec 2025 21:31:49 GMT) Committer: Michael Osipov (Mon 19 Jan 2026 22:10:59 GMT) sockstat: improve printaddr() according to style(9) Reviewed by: des MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54412 (cherry picked from commit f89f7e58ba1d54c6a683e3cc899938895496c088) M usr.bin/sockstat/sockstat.c ____________________________________________________________________________________________________________ Commit: dccf0058ef62802fc44e041b4fd6ba1a3fb4439c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dccf0058ef62802fc44e041b4fd6ba1a3fb4439c Author: Mark Johnston (Mon 12 Jan 2026 13:56:56 GMT) Committer: Craig Leres (Mon 19 Jan 2026 17:45:14 GMT) grep/tests: Fix up the zgrep executable path in a newly added test Fixes: da5d94d29a5e ("Remove obsolete BUGS section from zgrep(1) man page, add test") (cherry picked from commit 045112f148fa092c92ec53204708f638b226ff8f) M usr.bin/grep/tests/grep_freebsd_test.sh ____________________________________________________________________________________________________________ Commit: 582882558ce9e894e467aed31571f67aa8ae7e65 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=582882558ce9e894e467aed31571f67aa8ae7e65 Author: Craig Leres (Sat 10 Jan 2026 00:34:39 GMT) Committer: Craig Leres (Mon 19 Jan 2026 17:45:06 GMT) Remove obsolete BUGS section from zgrep(1) man page, add test I forgot to check/update the man page with D54217. While here add a test for multiple -e flags. Reviewed by: markj Approved by: markj MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54632 (cherry picked from commit da5d94d29a5ec29817476c39ae2b2ad1666c3f06) M usr.bin/grep/tests/grep_freebsd_test.sh M usr.bin/grep/zgrep.1 ____________________________________________________________________________________________________________ Commit: 916166d9f98f6db8630b1955c1ae5606614a950f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=916166d9f98f6db8630b1955c1ae5606614a950f Author: Alexander Ziaee (Wed 25 Jun 2025 05:37:37 BST) Committer: Warner Losh (Sun 18 Jan 2026 21:10:52 GMT) uchcom.4: Add HARDWARE, makeover Tag spdx, improve document description for apropos, improve synopsis for clarity and consistency, improve description to explain usage, improve hardware for hardware release notes, mention the sysctl, xref the application to use this driver, improve history. MFC: no (unless change adding CH9102/CH343 mfcs) Fixes: 1395712cab8e9 (add support for CH9102 and CH343) Reviewed by: carlavilla, kevlo Differential Revision: https://reviews.freebsd.org/D51036 (cherry picked from commit f0ba0b99ef0a9cf9e7822278d7d2bc0a80911361) M share/man/man4/uchcom.4 ____________________________________________________________________________________________________________ Commit: f957857c48351396dbd0127bc0fdd47f69e82f6d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f957857c48351396dbd0127bc0fdd47f69e82f6d Author: Jose Luis Duran (Sun 11 Jan 2026 16:42:18 GMT) Committer: Jose Luis Duran (Sun 18 Jan 2026 03:55:38 GMT) Import latest mtree from NetBSD Merge commit '7e59b238fcf32f3d365e78ddc702ca494e1ff68d' This commit partially reverts the previous vendor import, given that the "type" keyword has been historically mandatory and should not be removed by "-R all". This was clarified in the man page. Reported by: glebius PR: 219467 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219467 ) MFC after: 1 week (cherry picked from commit 4250d2ad991b7bb9915e4c6b6d93b17369747ff0) M contrib/mtree/create.c M contrib/mtree/mtree.8 ____________________________________________________________________________________________________________ Commit: 8241dbc3a2af6e422774904dfa42feb0241b36c5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8241dbc3a2af6e422774904dfa42feb0241b36c5 Author: William Carrel (Thu 8 Jan 2026 08:56:27 GMT) Committer: Xin LI (Sun 18 Jan 2026 02:58:28 GMT) GCE: ARM64 Support: Add hw.pci.honor_msi_blacklist=0. This is required for MSI support on GCE ARM64 instances which is prerequisite to gve(4) not panicking at boot, and nvme(4) also has a real sad time without interrupts. Tested on a variety of c4a VMs. This is meant to be a temporary hack; long term fix would be to check for the hypervisor and quirk gve(4) device with PCI_QUIRK_ENABLE_MSI_VM. PR: kern/292081 (cherry picked from commit 9ae43352c89c776c8171f5881a984bc39acf5d6a) M release/tools/gce.conf ____________________________________________________________________________________________________________ Commit: dd1d6a06542cb07acf23682d77eed1a093226d76 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dd1d6a06542cb07acf23682d77eed1a093226d76 Author: Yichen Chai (Wed 14 Jan 2026 18:44:08 GMT) Committer: Bjoern A. Zeeb (Sat 17 Jan 2026 13:15:58 GMT) net80211: fix arguments to IEEE80211_NOTE in ieee80211_fix_rate Fix the arguments to the debug statement. (slightly adjusted from the original submission by bz) PR: 286448 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286448 ) (cherry picked from commit 75556c7e999e9095ce71558ae61f49c1ba61a192) (cherry picked from commit 2e93d2f39d72e5542781165c368343d7d73643e9) M sys/net80211/ieee80211_proto.c ____________________________________________________________________________________________________________ Commit: 16e2bb8177bd86a954ef968551d8c8980582381a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=16e2bb8177bd86a954ef968551d8c8980582381a Author: Bjoern A. Zeeb (Fri 16 Jan 2026 19:46:50 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:48:36 GMT) UPDATING: Bump __FreeBSD_version to 1403508 for various LinuxKPI changes Precautiously bump __FreeBSD_version for various LinuxKPI changes so they could be detected if needed (which they should not need to, hopefully). M UPDATING M sys/sys/param.h ____________________________________________________________________________________________________________ Commit: fff9ab9ed295e7f584feba459a1f0a3f4a1b783e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fff9ab9ed295e7f584feba459a1f0a3f4a1b783e Author: Bjoern A. Zeeb (Sun 28 Dec 2025 17:15:23 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:55 GMT) LinuxKPI: 802.11: reset hdr after crypto in lkpi_80211_txq_tx_one() When lkpi_80211_txq_tx_one() calls into the crypto offloading parts to possibly make space in the headroom, the beginning of our frame moves. We have to reset hdr after that call as otherwise later classifications based on the hdr->frame_control will fail or cause wrong classificaiton of packets. This makes sure frames will either be directly sent using (*mo_tx)() or use the correct tid for the correct queue. This helps to get rtwx8 packets flowing after BA was negotiated. Sponsored by: The FreeBSD Foundation Fixes: 11db70b6057e4 (cherry picked from commit f0395993e1ea83705e0da6623843e7d5d03f7269) (cherry picked from commit 4d255abe992fef69c97ce10991d815eda638c76d) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: e7c3b91d30176988612f3ab95140f50f13f29178 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e7c3b91d30176988612f3ab95140f50f13f29178 Author: Bjoern A. Zeeb (Sun 28 Dec 2025 17:03:41 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:55 GMT) LinuxKPI: 802.11: add compat.linuxkpi.80211.IF.dump_stas_queues Extend the normal compat.linuxkpi.80211.IF.dump_stas sysctl by queue information. This was helpful for debugging various issues, like selecting the outbound queue, stopping queues for BAR and helped finding multiple bugs. Sponsored by: The FreeBSD Foundation (cherry picked from commit 32ea8209825af594cbfa1fc654d45eb9a6aab528) (cherry picked from commit 6b9c0ac008a9c52b21b05c96ead6def41aa89ead) M share/man/man4/linuxkpi_wlan.4 M sys/compat/linuxkpi/common/src/linux_80211.c M sys/compat/linuxkpi/common/src/linux_80211.h ____________________________________________________________________________________________________________ Commit: 3fc5eb05910f0377e661c0ed57842baa1642b237 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3fc5eb05910f0377e661c0ed57842baa1642b237 Author: Bjoern A. Zeeb (Tue 16 Sep 2025 00:54:57 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:55 GMT) sys/bitcount.h: add __const_bitcount Add a version of __const_bitcount which can be used to get the numbers at compile-time when __builtin_popcountg() is not available (see sys/compat/linuxkpi/common/include/linux/bitops.h for LLVM before 19 and gcc before 14). Obtained from: https://reviews.freebsd.org/D50995#1174884 by obiwac Sponsored by: The FreeBSD Foundation Reviewed by: brooks, emaste Differential Revision: https://reviews.freebsd.org/D54301 (cherry picked from commit 27aa23cee81088b0ffa974eec9f03c654c36438e) (cherry picked from commit 605389e40b938088718bd8aa75f4919884789927) M sys/sys/bitcount.h ____________________________________________________________________________________________________________ Commit: 8fc0789a4dda595311bec566719ff3c2e2744ee2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8fc0789a4dda595311bec566719ff3c2e2744ee2 Author: Bjoern A. Zeeb (Wed 10 Dec 2025 20:29:23 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:55 GMT) LinuxKPI: 802.11: lock down the "txq_scheduled" tailq For consistency rename the "scheduled_txqs" tailq to "txq_scheduled" and add a lock per txq ("txq_scheduled_lock[]"). We use the "_bh" locking as this called from the device driver. This fixes panics due to concurrent access to the tailq, especially in between "first" and "remove" on the out-direction and between "insert" and "elem_init" on the in-direction. This was easily reproducible just running iperf3 at basic rates for a few seconds to minutes with multiple chipsets, not only rtw89. Sponsored by: The FreeBSD Foundation PR: 290636 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290636 ) Reported by: arved, and others before (cherry picked from commit 567a097c8ab60d9fcd68a87c3c5ad605fe8715cc) (cherry picked from commit 2e1156f75836a0e5a4026e13d72b54f272e705cb) M sys/compat/linuxkpi/common/src/linux_80211.c M sys/compat/linuxkpi/common/src/linux_80211.h ____________________________________________________________________________________________________________ Commit: 1b9d37ebbdb36be70c26da4c3a801cd2fb346b70 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1b9d37ebbdb36be70c26da4c3a801cd2fb346b70 Author: Bjoern A. Zeeb (Tue 25 Nov 2025 17:16:49 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:55 GMT) mt76: set appropriate CONFIG options for the module build Always set CONFIG_ARCH_DMA_ADDR_T_64BIT as it is true for all architectures we support. Add an option for CONFIG_NET_MEDIATEK_SOC_WED, which we currently do not yet support. Sponsored by: The FreeBSD Foundation (cherry picked from commit 87aa494dfca73204516799033821ab1db184933f) (cherry picked from commit e2ebe56c50e77f3302c85a8203f8fa4050ae0f54) M sys/modules/mt76/Makefile.inc ____________________________________________________________________________________________________________ Commit: 7e2143845d30bd66424e87c61eb2bd16a3da9622 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7e2143845d30bd66424e87c61eb2bd16a3da9622 Author: Bjoern A. Zeeb (Tue 25 Nov 2025 17:20:50 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:54 GMT) LinuxKPI: mt76: depend on CONFIG_NET_MEDIATEK_SOC_WED If CONFIG_NET_MEDIATEK_SOC_WED is not set then be silent; if CONFIG_NET_MEDIATEK_SOC_WED is set we will enable logic or rather te pr_debug("TODO") calls for now. Spsonsored by: The FreeBSD Foundation (cherry picked from commit 51c73fc5f5dd95c6a0e3d232091a732a14c7ecc9) (cherry picked from commit 7ed3a99f3563fce1f1088a376151e7ad68b738d6) M sys/compat/linuxkpi/common/include/linux/soc/mediatek/mtk_wed.h ____________________________________________________________________________________________________________ Commit: 78e0a224f50856ad33fc0484fad11ee3dc3b2dcf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=78e0a224f50856ad33fc0484fad11ee3dc3b2dcf Author: Bjoern A. Zeeb (Wed 3 Dec 2025 00:58:03 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:54 GMT) LinuxKPI: 802.11: move ieee80211_offload_flags Move the enum and leave a comment on the struct member for the vif about the type. No functional changes. Sponsored by: The FreeBSD Foundation (cherry picked from commit b10ff7ed37a9b891bec7e1093e44fa7abb2054b4) (cherry picked from commit a714641fa5380cc320d23181d4b18f7f89ccd183) M sys/compat/linuxkpi/common/include/net/mac80211.h ____________________________________________________________________________________________________________ Commit: 2a04a8562ecc23d68f64d0b8df86b5f3da223ac5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2a04a8562ecc23d68f64d0b8df86b5f3da223ac5 Author: Bjoern A. Zeeb (Wed 3 Dec 2025 01:09:24 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:54 GMT) LinuxKPI: device: add a pr_debug("TODO") call to device_release_driver() The logic in device_release_driver() got disabled in 93b14194acaf2 and since left alone. Add a pr_debug() call so we have a chance to notice if that code is actually still in need to be fixed and re-enabled. Sponsored by: The FreeBSD Foundation (cherry picked from commit fc9666d0fc0c2541e44bfbcaa5bb1b670395687c) (cherry picked from commit 0f496780deee49cfd86f4e02db775b706405fef9) M sys/compat/linuxkpi/common/include/linux/device.h ____________________________________________________________________________________________________________ Commit: bd339e8341bac1a20716c662b6d024161ec4f8c6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bd339e8341bac1a20716c662b6d024161ec4f8c6 Author: Bjoern A. Zeeb (Wed 3 Dec 2025 00:55:36 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:54 GMT) LinuxKPI: 802.11: make airtime fairness an IMPROVE We are ways away from implementing "airtime fairness" in LinuxKPI (or rather net80211). For now make it an 'improve' rather than a 'todo' to get the logging away. Everything will work without it. Sponsored by: The FreeBSD Foundation (cherry picked from commit 86bfe5b4d5a7b90d3746059dd1f87cdd5a0bf90c) (cherry picked from commit c55874da4cf57800fc8a665ee221e4c2e1ac6601) M sys/compat/linuxkpi/common/include/net/mac80211.h ____________________________________________________________________________________________________________ Commit: add692e05ca1825b974804ad65d961719be098f2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=add692e05ca1825b974804ad65d961719be098f2 Author: Bjoern A. Zeeb (Mon 17 Nov 2025 22:54:07 GMT) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:53 GMT) LinuxKPI: 802.11: initialize the passed in chandef in cfg80211_chandef_create cfg80211_chandef_create() gets passed a pointer to a cfg80211_chan_def. It seems that several users are passing in an uninitialized variable from the stack and expect cfg80211_chandef_create() to initialize it. Run memset() on the struct, which for all callers currently seems to do the right thing, to avoid later accesses to uninitialized struct members like "punctured". Reported by: CI (gcc build) Sponsonred by: The FreeBSD Foundation (cherry picked from commit 640205bc22c8b2bd31c766f4d0c409c183a8b8dc) (cherry picked from commit d389d1ac1699aea517a18cf73486e7077cfbda46) M sys/compat/linuxkpi/common/include/net/cfg80211.h ____________________________________________________________________________________________________________ Commit: 6b70b671b3c89678866a6d4979d214434c095186 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6b70b671b3c89678866a6d4979d214434c095186 Author: Bjoern A. Zeeb (Sat 11 Oct 2025 10:21:55 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:53 GMT) LinuxKPI: 802.11: additions for Linux v6.17 based wireless drivers This includes some type cleanups as well as some shuffling of structs and functions to sort dependencies out. Few new functions and defines as well as new struct members. Minor fixes to style and debug logging. This is the majority of changes. None of these should conflict with current in-tree drivers. The final bit of changes will come along with the driver updates adding an extra argument to function pointers. (cherry picked from commit 0567484734ad9732978e189ebed042f6320e2471) (cherry picked from commit f2b2d6c18a57abbedb14bf439ed5c69d648c47b6) M sys/compat/linuxkpi/common/include/linux/ieee80211.h M sys/compat/linuxkpi/common/include/linux/nl80211.h M sys/compat/linuxkpi/common/include/net/cfg80211.h M sys/compat/linuxkpi/common/include/net/mac80211.h M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: a7ac5ba799c74f34effc88e7161873777d3675d8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a7ac5ba799c74f34effc88e7161873777d3675d8 Author: Bjoern A. Zeeb (Fri 17 Oct 2025 21:28:36 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:53 GMT) LinuxKPI: netdevice add attach/detach skeleton functions For the moment add skeleton functions for netif_device_attach/detach() needed by rtw8[89] v6.17. (cherry picked from commit 5ea941a4fbfd1ba2483e47fe30ed6713fe912284) (cherry picked from commit 4bdd0e51d7113aadcbfba9a76d72d8e924c5dcdf) M sys/compat/linuxkpi/common/include/linux/netdevice.h ____________________________________________________________________________________________________________ Commit: efa6449e09dae6a8ee2a111313f761c275dc5fc7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=efa6449e09dae6a8ee2a111313f761c275dc5fc7 Author: Bjoern A. Zeeb (Sat 11 Oct 2025 10:25:08 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:53 GMT) LinuxKPI: skbuff: add a misplaced socket operation to skbuff.h for now This likely belongs in socket code which we do not have in LinuxKPI. Needed by a wirless driver at v6.17. (cherry picked from commit 88dbf83345feefa7181bd6df47786e1a8d1d304d) (cherry picked from commit 3ad05fa24a240011a8252140ff6431cb0b7879d9) M sys/compat/linuxkpi/common/include/linux/skbuff.h ____________________________________________________________________________________________________________ Commit: a75a58393b81a3a9d2c36eb7f5770d2b50d7ebee URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a75a58393b81a3a9d2c36eb7f5770d2b50d7ebee Author: Bjoern A. Zeeb (Sun 19 Oct 2025 16:28:30 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:53 GMT) LinuxKPI: soc/mediatek add pr_debug calls We do not support Wireless Ethernet Dispatch (wed) on the mt76 (yet). Add pr_debug calls with TODO in case we run into the calls anyway so we could deal with them. (cherry picked from commit 224ac9d2a030f85924e44a507ddc412797c3fe87) (cherry picked from commit b9b571e6146a1b95ba18de065166a1a50eb88dfc) M sys/compat/linuxkpi/common/include/linux/soc/mediatek/mtk_wed.h ____________________________________________________________________________________________________________ Commit: 26d5278eaee0025a0a24c3860fc58fd2be26c7d9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=26d5278eaee0025a0a24c3860fc58fd2be26c7d9 Author: Bjoern A. Zeeb (Sun 19 Oct 2025 23:57:13 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:52 GMT) LinuxKPI: page_pool headers moved; add netmem.h page_pool headers were not used yet; they were created for mt76 but are without functionality. Upstream has migrated them for v6.17 and split them up into multiple files. Also add netmem.h which the little needed is directly related to page pools. (cherry picked from commit 7c31cdfa408a4ebce7a3e10d29056a15c28bc092) (cherry picked from commit d388ff8016adf0f24b9b846941f1f15f5463c49e) A sys/compat/linuxkpi/common/include/net/netmem.h D sys/compat/linuxkpi/common/include/net/page_pool.h A sys/compat/linuxkpi/common/include/net/page_pool/helpers.h A sys/compat/linuxkpi/common/include/net/page_pool/types.h ____________________________________________________________________________________________________________ Commit: 1f9ca940c1ba1e27b3dbd62d8dd6384cd7c4c8c1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1f9ca940c1ba1e27b3dbd62d8dd6384cd7c4c8c1 Author: Bjoern A. Zeeb (Fri 17 Oct 2025 21:38:11 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:52 GMT) LinuxKPI: add skeleton pci_enable_wake() Given we do not yet support "wake" bits in device there is little need doing it in PCI if we cannot check if we are supposed to do the operation in first place. Once we would implement this, we would need to also do the appropriate PCI (pme) checks before enabling (disabling) it. Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D53208 (cherry picked from commit 885e8f272f7515b0325974de72d18b73318eff07) (cherry picked from commit be52a81be07997f84f454637372a056415f6a2eb) M sys/compat/linuxkpi/common/include/linux/pci.h ____________________________________________________________________________________________________________ Commit: 6248a65545474b0e534ddcf97959205f133ac2de URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6248a65545474b0e534ddcf97959205f133ac2de Author: Bjoern A. Zeeb (Fri 17 Oct 2025 20:34:20 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:52 GMT) LinuxKPI: add fips.h We do not currently aim to support crypto FIPS compliance in LinuxKPI so keep this turned off. Reviewed by: emaste, dumbbell Differential Revision: https://reviews.freebsd.org/D53207 (cherry picked from commit 98609f4fecffd0e70293ddd57c2b785e498b1131) (cherry picked from commit 3aaaba20786966062d1355d4809142b623ffc4b7) A sys/compat/linuxkpi/common/include/linux/fips.h ____________________________________________________________________________________________________________ Commit: 4c27dfb166f12bf27cd25a52442f4aa744c513e6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4c27dfb166f12bf27cd25a52442f4aa744c513e6 Author: Bjoern A. Zeeb (Sat 11 Oct 2025 10:24:40 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:52 GMT) LinuxKPI: platform_device return type change The return type now is void; I believe no one ever used this so we can just chnage it. The only active platform_driver_register() calls seems to be in ath1[01]k and mt76 and there in unsupported code. Reviewed by: dumbbell, emaste Differential Revision: https://reviews.freebsd.org/D53205 (cherry picked from commit 0ae4998423e0d513fb88e404dfb1c2a285d11309) (cherry picked from commit 5434a1635ed3fab8214f3fea8ada9772e4372372) M sys/compat/linuxkpi/common/include/linux/platform_device.h ____________________________________________________________________________________________________________ Commit: b0497fabb9d462fa3b9e443188c7dd98b8dbc1b0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b0497fabb9d462fa3b9e443188c7dd98b8dbc1b0 Author: Bjoern A. Zeeb (Sat 11 Oct 2025 10:22:48 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:51 GMT) LinuxKPI: add three skeleton functions to etherdevice.h We will see how much we will need them and how to fill them at that point. They are left with a pr_debug("TODO") for now. Differential Revision: https://reviews.freebsd.org/D53204 (cherry picked from commit cc792250acadd29e80a69501ad326d1340c0c1c6) (cherry picked from commit 805038b70a23f3f488ecba6e103f2aa1f9dad63c) M sys/compat/linuxkpi/common/include/linux/etherdevice.h ____________________________________________________________________________________________________________ Commit: 923c01f09ba737490e9ac9ee122f4de6742ca077 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=923c01f09ba737490e9ac9ee122f4de6742ca077 Author: Bjoern A. Zeeb (Sat 11 Oct 2025 10:22:26 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:51 GMT) LinuxKPI: add __counted_by_le() and __counted_by_be() The former is needed by a wireless driver at v6.17. Reviewed by: dumbbell, emaste Differential Revision: https://reviews.freebsd.org/D53203 (cherry picked from commit 0a4b11ddb298fa08e1a81af7337995a3769552bf) (cherry picked from commit 0e30cab0f32ee40e89f59b3a287ae96c084e1e7a) M sys/compat/linuxkpi/common/include/linux/compiler.h ____________________________________________________________________________________________________________ Commit: 710bc041bb138e8a24c71fbb970d6c54106ef84d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=710bc041bb138e8a24c71fbb970d6c54106ef84d Author: Bjoern A. Zeeb (Fri 17 Oct 2025 13:56:43 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:51 GMT) igc(4): also build module on aarch64 igc(4) seems to work fine on arm64 for as much as I could test with a 2.5Gbit/s interface on a mPCIe card. Enable the module build so it is available. (cherry picked from commit 51fbeadac4ccce6aafe51be9377d4114321295e5) (cherry picked from commit 2c345e94ae0048ecec577ab52bc81510365038d0) M sys/modules/Makefile ____________________________________________________________________________________________________________ Commit: 6d7d95b4758d04adcf051d6dcf7355caf4a1f2cd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6d7d95b4758d04adcf051d6dcf7355caf4a1f2cd Author: Chris Johns (Fri 17 Oct 2025 13:38:30 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:51 GMT) dc(4): fix argument to if_foreach_llmaddr() for 21143. As found on RTEMS the argument to if_foreach_llmaddr() was wrong causing crashes. Fixes: 51e80820552e0 PR: 290314 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290314 ) (cherry picked from commit 33afdf0e356d84ffe5c62c886f84cf12ba147d3e) (cherry picked from commit 10c71151ade7b5f021b49b7e117059730a2ddb56) M sys/dev/dc/if_dc.c ____________________________________________________________________________________________________________ Commit: 61c549c2bbf01eacb74093674694c595ded0e757 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=61c549c2bbf01eacb74093674694c595ded0e757 Author: Bjoern A. Zeeb (Mon 13 Oct 2025 14:15:58 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:50 GMT) fwget: pci: mediatek: correct package name The port is called wifi-firmware-mt76-kmod not "mediatek" in the moddle. Reported by: Lars Tunkrans (drsnx60 gmail.com) Reviewed by: emaste, jrm, imp Differential Revision: https://reviews.freebsd.org/D53067 (cherry picked from commit 10d88a7aa670a3cc2bf763e64bd292b4caa3a811) (cherry picked from commit e0487486279bc0690f65401622deebdbdea6a882) M usr.sbin/fwget/pci/pci_network_mediatek ____________________________________________________________________________________________________________ Commit: 9c54475b16dddeaf50510418c98a6e69ff635035 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9c54475b16dddeaf50510418c98a6e69ff635035 Author: Bjoern A. Zeeb (Thu 25 Sep 2025 13:49:07 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:50 GMT) pci: add quirk to disable Function-Level Reset (FLR) MediaTek mt76 WiFi cards are advertising FLR support but after issuing a FLR the chipset is gone. Add a quirk so we can disable FLR. The current reset code will automatically fall back to a power reset. This makes the card show up under bhyve where before it would just not be discovered at all. That should make wifibox work for it and will help development for a LinuxKPI based mt76 driver as found in framework laptops as no dedicated machine and constant reboots are needed anymore. We will likely need to add more PCI vendor/device IDs once we can test the other device IDs. After a lot of help from: jhb Really implemented by: jhb (I just typed and tested) GH issue: github.com/pgj/freebsd-wifibox/issues/73 Reviewed by: imp, emaste Differential Revision: https://reviews.freebsd.org/D52728 (cherry picked from commit 4c0e53aced2251eb5ac7eca44e13a6b947be8582) (cherry picked from commit 3bd015a1a918d060dbef556ddfa6e236f5212330) M sys/dev/pci/pci.c ____________________________________________________________________________________________________________ Commit: 8d76cbe16b42749336cf369fbba850bfb30e5cd6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8d76cbe16b42749336cf369fbba850bfb30e5cd6 Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:19:48 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:50 GMT) LinuxKPI: pci: implementation of [lkpi_]pci_get_slot() Like lkpi_pci_get_domain_bus_and_slot() implement lkpi_pci_get_slot() using pci_find_bsf() instead of pci_find_dbsf() (no domain). This is needed for a wireless driver. Unfortunately the name [pci_get_slot()] collides with the native PCI function. Add a guard around it and disable the use when the native version is required (in lkpifill_pci_dev() and in bnxt/bnxt_en; if the latter gets fixed we can probably also fix work around it in the former; further conflicts in drm-kmod 6.1-lts, 6.6-lts, and master were resolved). Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52065 (cherry picked from commit 4179e6b78297369f0cf0eae1076e01e5151c5cbe) (cherry picked from commit 62c3b77d1d1084dc46663eed52e288307b5c7e64) M sys/compat/linuxkpi/common/include/linux/pci.h M sys/compat/linuxkpi/common/src/linux_pci.c M sys/dev/bnxt/bnxt_en/if_bnxt.c ____________________________________________________________________________________________________________ Commit: 2f4700c4dc1598c1b99996412a932764d5cbac45 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2f4700c4dc1598c1b99996412a932764d5cbac45 Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:22:00 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:50 GMT) LinuxKPI: pci: allocate entire pci_dev hiereachy up to root port on attach In linux_pci_attach_device() allocate a LinuxKPI pci_dev for each device in the hierarchy up to the root port[1] as we cannot do that later on demand as we may be in a context where we may not sleep. Take special care of DRM as there is a non-PCI device in the chain which needs to be skipped. iwlwifi(4) can hit this case called from a callout. While here leave a comment as the cleanup order of linux_pci_attach_device() needs correction seperately. Sponsored by: The FreeBSD Foundation (initially) PR: 283027 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283027 ) PR: 289647 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289647 ) Suggested by: jhb [1] Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52069 (cherry picked from commit bbeeb585315645db20118ef349a4e3dc83b148cc) (cherry picked from commit 3860afe99ec39b9942967941181f28f27f3fc548) (cherry picked from commit 123c2dc6e15a62ceba3469caf0f1a6801214a7d3) (cherry picked from commit d8972ad2f6e7113d779d4ec975ce32552030b2a3) M sys/compat/linuxkpi/common/src/linux_pci.c ____________________________________________________________________________________________________________ Commit: 64075d53646679554c6b62911076b6b26e862acf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=64075d53646679554c6b62911076b6b26e862acf Author: Bjoern A. Zeeb (Thu 11 Sep 2025 15:44:10 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:50 GMT) LinuxKPI: 802.11: avoid recursive wiphy lock When freeing the last reference of the net80211 node the net80211 node_free() code may directly call into the crypto code to delete the keys. While we still holding the wiphy lock this would lead to a recursion on the non-recursive wiphy lock. Defer freeing the reference until we are back under the net80211 com lock. Reported by: Mark Phillips (mark freebsdfoundation.org) on 15.0-ALPHA1 (cherry picked from commit 3c38dce87ecd2c87744e4b7ff1904ee841f88a47) (cherry picked from commit b0469fa7f10f9fe5510a5445f38d1bf0b832c1e7) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: 62d86be3d64d65ba207f81f18d0dbf38f57935ee URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=62d86be3d64d65ba207f81f18d0dbf38f57935ee Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:28:18 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:49 GMT) LinuxKPI: devres: divorce dem_kfree from lkpi_devm_kmalloc_release dem_kfree() is called from all over the place and should actually do something; contrary to lkpi_devm_kmalloc_release() it can also take a const void *. We have to __DECONST() that though as the entire devres framework does otherwise not take a const argument. This was discovered during the rtw89 update to 6.16. Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52082 (cherry picked from commit 4ab64e34911ab06e567caaf07ed18f7770a61cc8) (cherry picked from commit f20a09e161f07874c3a01b1579e8a5d2356df8ce) M sys/compat/linuxkpi/common/include/linux/device.h M sys/compat/linuxkpi/common/src/linux_devres.c ____________________________________________________________________________________________________________ Commit: fa3f62df151532a2e6b2934d5d5dc632b923c2b5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fa3f62df151532a2e6b2934d5d5dc632b923c2b5 Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:27:48 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:49 GMT) LinuxKPI: maths64: implement roundup_u64() Needed by a wifi driver update. Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52080 (cherry picked from commit 2a44e10edb13e6b2be7fa2814b418a6959cb1171) (cherry picked from commit 88122c8eb70d81decb7c6dd16e551c3df6ad3818) M sys/compat/linuxkpi/common/include/linux/math64.h ____________________________________________________________________________________________________________ Commit: 4a3facee3ce66fedaafbb10dd2c927f001af2b7e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4a3facee3ce66fedaafbb10dd2c927f001af2b7e Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:27:16 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:49 GMT) LinuxKPI: kunit: add static_stub.h and more dummy headers These came up during a wifi driver update. Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52079 (cherry picked from commit 7c473933624f701263a83da526cac680b1ca69ed) (cherry picked from commit 3753913c9e1c3375be29b8f4ab925b054fe1ac4b) A sys/compat/linuxkpi/common/include/kunit/static_stub.h A sys/compat/linuxkpi/dummy/include/kunit/skbuff.h A sys/compat/linuxkpi/dummy/include/kunit/test-bug.h A sys/compat/linuxkpi/dummy/include/kunit/test.h ____________________________________________________________________________________________________________ Commit: 95f0e1e425a6847c58aad97b8d65b2a386e5b300 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=95f0e1e425a6847c58aad97b8d65b2a386e5b300 Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:26:32 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:49 GMT) LinuxKPI: sync overflow.h from Linux v6.16 It seems overflow.h wsa imported directly from Linux in 3208d4ad2b8320a. Update the file to the newer version as needed for wireless driver updates. Sponsored by: The FreeBSD Foundation (initially) Obtained from: git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 038d61fd642278 (tag: v6.16) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52078 (cherry picked from commit 70c508e691de1ed0f70b4a6f0773bfb5d627050d) (cherry picked from commit cd2bd8bf672cd5925531b6440d57f1c48e025079) M sys/compat/linuxkpi/common/include/linux/overflow.h ____________________________________________________________________________________________________________ Commit: eba61bc6749e571ca5797b85f572925916266927 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=eba61bc6749e571ca5797b85f572925916266927 Author: Bjoern A. Zeeb (Mon 18 Aug 2025 20:53:55 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:48 GMT) LinuxKPI: add __struct_size Use __builtin_object_size() by default. If __builtin_dynamic_object_size() is available use that instead. I would hope that in a future version we can remove the conditional checks but in order to be able to MFC this without checking all compiler versions simply keep it this way for now. Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52077 (cherry picked from commit ff5bcb742899f8398ccb1b9e292b2e5aeeb7fedb) (cherry picked from commit 310885b40ad256b054d65353c375b29700ee024c) M sys/compat/linuxkpi/common/include/linux/compiler.h ____________________________________________________________________________________________________________ Commit: 163fe10479a34071eb860695459999e2575e714c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=163fe10479a34071eb860695459999e2575e714c Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:25:30 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:48 GMT) LinuxKPI: add DEFINE_LOCK_GUARD_0 for rcu This adds guard support for non-real-types like rcu locking meaning that we need to keep the lock state separately ourselves. _T is still special and needs to be updated. Given it may not be used it needs an __unused attribute (we are using the LinuxKPI __maybe_unused which indeed is more expressive in this case). Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52076 (cherry picked from commit 3f48a0fe53ca7e001852f4a406c1bdfab1cd2f6d) (cherry picked from commit 4d5a78c5f40aa2dfd672ccfa4a6fff93e216c32b) M sys/compat/linuxkpi/common/include/linux/cleanup.h M sys/compat/linuxkpi/common/include/linux/rcupdate.h ____________________________________________________________________________________________________________ Commit: 6ceb046df3d72dfa2c218fdb9b32635d11bdcfcd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6ceb046df3d72dfa2c218fdb9b32635d11bdcfcd Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:24:55 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:48 GMT) LinuxKPI: cleanup: implement __free() and DEFINE_FREE(); use for kfree() A wifi driver update needs this. Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52075 (cherry picked from commit 39e9290d890b2aa07b68f2fe956b96e5df9a1da2) (cherry picked from commit 830cc677d97eebd02ade8b33ec17de38f2705a73) M sys/compat/linuxkpi/common/include/linux/cleanup.h M sys/compat/linuxkpi/common/include/linux/slab.h ____________________________________________________________________________________________________________ Commit: c84bfaa2531870a023fa9b267a765b9518ed3350 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c84bfaa2531870a023fa9b267a765b9518ed3350 Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:24:26 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:48 GMT) LinuxKPI: timer KPI *_timer -> timer_* del_timer() got renamed to timer_delete() approximately in Linux 6.2 (similar for *_sync and likely others). Keep the old functions as compat; unclear when we can gc them. We should also re-define them with a linuxkpi_ prefix to avoid possible conflicts in the future if we do a full pass over this at some point. Sponsored by: The FreeBSD Foundation (intiially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52074 (cherry picked from commit 5cb64a1d3fe75526fb879ef4dce5860bbb4e4aea) (cherry picked from commit 88198564dbd82a97d655e73459c03eccf7031331) M sys/compat/linuxkpi/common/include/linux/timer.h M sys/compat/linuxkpi/common/src/linux_compat.c ____________________________________________________________________________________________________________ Commit: 3c1f1bcb14d3e1f8c4f3af912fdce867cc72f3ab URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3c1f1bcb14d3e1f8c4f3af912fdce867cc72f3ab Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:23:57 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:48 GMT) LinuxKPI: rename from_timer() to timer_container_of() With Linux 6.16 from_timer() got renamed to timer_container_of(); add the LINUXKPI_VERSION check with a default to the current version. Update all in-tree consumers (apart from wireless drivers managed otherwise). Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52073 (cherry picked from commit 81cb7c4c8e7bc4951c77fe64a63a847ed6abee38) (cherry picked from commit 352be5b48ba8b3ec1e3e5dd0dbee4da8d1fa78b0) M sys/compat/linuxkpi/common/include/linux/timer.h M sys/compat/linuxkpi/common/src/linux_80211.c M sys/dev/irdma/irdma_cm.c M sys/dev/irdma/irdma_utils.c M sys/dev/qat/qat_common/adf_gen4_timer.c ____________________________________________________________________________________________________________ Commit: fe8793b39bef5a035aa4dce6fd8479f954ac5845 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fe8793b39bef5a035aa4dce6fd8479f954ac5845 Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:23:00 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:47 GMT) LinuxKPI: correct the LINUXKPI_VERSION check for abs_diff() The code introduced abs_diff() as migrated from drm to standard linux headers. The LINUXKPI_VERSION check did not allow this to be visible by default in-tree. Make sure the v6.6 check is optional. drm-kmod always defines LINUXKPI_VERSION so this should be fine. Sponsored by: The FreeBSD Foundation (initially) Fixes: afc450fac9f04 Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52071 (cherry picked from commit 736b16e88d2384f9dd0ec11c0492e825b8d42193) (cherry picked from commit ab45c859374d750a6b68292cf40889b8ca5db04a) M sys/compat/linuxkpi/common/include/linux/math.h ____________________________________________________________________________________________________________ Commit: 8f8a0aadfa8d0176c0d2527973208850faf432d3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8f8a0aadfa8d0176c0d2527973208850faf432d3 Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:22:30 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:47 GMT) LinuxKPI: pci: allow children to be attached to a pci_dev This will be used for hooking suspend/resume in for LinuxKPI 802.11 based drivers. Sponsored by: The FreeBSD Foundation (initially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52070 (cherry picked from commit 627234627b51c2f12c29d10617d7bbd18936ea55) (cherry picked from commit 8fca57469f7c33367c5f32f738a8fa8af40b6dda) M sys/compat/linuxkpi/common/src/linux_pci.c ____________________________________________________________________________________________________________ Commit: c017775775ee7548a071806042b0294e94824991 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c017775775ee7548a071806042b0294e94824991 Author: Bjoern A. Zeeb (Thu 31 Jul 2025 19:28:22 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:47 GMT) LinuxKPI: pci: implement [linuxkpi_]pcim_request_all_regions() Factor out the pci_request_region() implementation into an internal function and make pci_request_region() a simple wrapperaround it. Likewise implement pcim_request_all_regions() as a loop calling pci_request_region() for each entry. In two cases which we returned an error before (bar index is valid but bar is not (no len), and neither IO nor MEM) we now reutrn success (nothing to do for us). Otherwise callers, especially pcim_request_all_regions() would error out for the wrong reasons. This seems to also match the expected behaviour of pci_request_region(). Sponsored by: The FreeBSD Foundation (intially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52068 LinuxKPI: pci: undo the pci_resource_len() check in lkpi_pci_request_region() Creating non-passthru SR-IOV interfaces on a mlx5en(4) failed. The problem lies in the pci_resource_len() call but not that the BAR length is tmeporary 0 but in that we call lkpi_pci_get_bar() with a true argument which will create the BAR resource for us and report the approriate length back. However, the later call to bus_alloc_resource_any() will then fail given the resource already exists. Restore the previous behaviour and let bus_alloc_resource_any() do the work. Adjust the return values from -ENODEV to -EBUSY to match callers expectations. In linuxkpi_pcim_request_all_regions(), like in linuxkpi_pci_request_regions(), filter out the -EBUSY errors as "not an error" and try the next bar. This also seems to be consistent with the expectations of the callers. PR: 290793 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290793 ) Reported by: David BOYER (jcduss13 gmail.com) Tested on: mlx5en, iwlwifi, mt7921 Reviewed by: kib Fixes: 7e21158d44cd "implement [linuxkpi_]pcim_request_all_regions()" Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D53902 (cherry picked from commit 7e21158d44cd46e720395604ca6f00f2fa36b20c) (cherry picked from commit ff31767e530abb4a54131af199fed6ec946a5fa4) (cherry picked from commit ed29ffd396e522a45ab1980c12a75b3409b51712) (cherry picked from commit 2032abb31cbe067d41067a81e529d91f1bace4c9) M sys/compat/linuxkpi/common/include/linux/pci.h M sys/compat/linuxkpi/common/src/linux_pci.c ____________________________________________________________________________________________________________ Commit: 008b9c7db5b28ed38f30e05f9c0bfb6e30156a35 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=008b9c7db5b28ed38f30e05f9c0bfb6e30156a35 Author: Bjoern A. Zeeb (Thu 31 Jul 2025 18:45:26 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:47 GMT) LinuxKPI: pci: implement pcim_iomap() Like pci_iomap() add the devres version pcim_iomap() using the former to get the resource. Add a helper function to validate that the bar is within a valid range and sprinkle that check also to other related functions. Sponsored by: The FreeBSD Foundation (intially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52067 (cherry picked from commit 2f9064a5d2b50f292cc8699d2be5c66c317f1dc7) (cherry picked from commit cfb8f4bf2c2b9cfc8d5ed5a19b98f4a19f023ba6) M sys/compat/linuxkpi/common/include/linux/pci.h M sys/compat/linuxkpi/common/src/linux_pci.c ____________________________________________________________________________________________________________ Commit: baefe812214ebdeb042cf5a85e8232f4ee1a97ab URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=baefe812214ebdeb042cf5a85e8232f4ee1a97ab Author: Bjoern A. Zeeb (Thu 4 Sep 2025 21:20:15 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:46 GMT) LinuxKPI: pci: implement for_each_pci_dev() and improve pci_get_device() Implement for_each_pci_dev() needed by a wireless driver update. For that also improve pci_get_device() and add the functionality to support the odev argument to start searching from that. Sponsored by: The FreeBSD Foundation (intially) Reviewed by: dumbbell Differential Revision: https://reviews.freebsd.org/D52066 (cherry picked from commit 910cf345d0ee9a5d72856a1ba35382eb4f0db951) (cherry picked from commit 68f8fa4ada24aaf53a2d463b53259439dfb32146) M sys/compat/linuxkpi/common/include/linux/pci.h M sys/compat/linuxkpi/common/src/linux_pci.c ____________________________________________________________________________________________________________ Commit: 2c48a938d570b895002b16f78133ff4256efea1d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2c48a938d570b895002b16f78133ff4256efea1d Author: Bjoern A. Zeeb (Wed 3 Sep 2025 12:01:01 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:46 GMT) LinuxKPI: skbuff: no longer use IEEE80211_DEBUG to turn on debug A port using linux(kpi) header files but not using skbuffs is hitting the case that it cannot find opt_wlan.h. Give up to the idea that skbuff.h is only used by wireless drivers (or in-tree) and that IEEE80211_DEBUG (via opt_lwan.h) could autmatically compile in debug support. It is likely time to add a LINUXKPI_DEBUG knob in the near future (also for linuxkpi_debug or linuxkpi_debug_rcu). PR: 289268 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289268 ) (cherry picked from commit bc222e96d135687aea4e67ee9b11fb9490f42546) M sys/compat/linuxkpi/common/include/linux/skbuff.h ____________________________________________________________________________________________________________ Commit: c5ca8670efda02044811dfa87d14dec35ad8a66a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c5ca8670efda02044811dfa87d14dec35ad8a66a Author: Bjoern A. Zeeb (Sun 31 Aug 2025 19:51:55 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:46 GMT) fwget: pci: video amd: correct glob matching entries - one duplcate entry: 0x664*|0x664*) -> 0x664*|0x665*) - one unneeded glob: 0x98e4*) -> 0x98e4) - 0x15e7|0x1636|0x1638|0x164c) half of these are green-sardine; split - a missing entry for skillfish2 : + 0x143f Reviewed by: imp, manu Differential Revision: https://reviews.freebsd.org/D52312 (cherry picked from commit 1d12658755930e20904d498398379cad0e4ae396) M usr.sbin/fwget/pci/pci_video_amd ____________________________________________________________________________________________________________ Commit: 772579c13e5ce63eb4fddd97db77f5f53c7c19fa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=772579c13e5ce63eb4fddd97db77f5f53c7c19fa Author: Bjoern A. Zeeb (Sun 31 Aug 2025 19:51:12 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:46 GMT) fwget: pci: hex strings use 0-9 and a-f not a-z Reviewed by: imp, manu Differential Revision: https://reviews.freebsd.org/D52311 (cherry picked from commit 50cab1202d39e67cd38b395e3e08e140e7617d95) M usr.sbin/fwget/pci/pci ____________________________________________________________________________________________________________ Commit: 53d1c328e9123c8065f121afdd9dccb222af2221 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=53d1c328e9123c8065f121afdd9dccb222af2221 Author: Stephen Hurd (Fri 29 Aug 2025 21:01:58 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:46 GMT) rc: bluetooth: startup improvements During startup hccontrol reset needs to be run multiple times for iwbt to work more reliably. Add a loop trying up to three times. Tested by: various (original version; I changed test to -eq) Differential Revision: https://reviews.freebsd.org/D44861 Fix a redirect of stderr to stdout which is going to /dev/null. A '&' got missing in the original rewrite from the review that I took and committed. Seems no one had noticed during testing or review. People may have ended up with a "/1" file in their root file system. Fixes: 40652f86b5ef Reported by: Vladyslav Movchan (vladislav.movchan gmail.com) (cherry picked from commit 40652f86b5ef17c9016a5eaf4bc89b2f324540e8) (cherry picked from commit 78807c196c9481cdd88b5ce611b488903f52fbd0) M libexec/rc/rc.d/bluetooth ____________________________________________________________________________________________________________ Commit: 5b7aa8225bea341b830666e2724ecb13316e27b0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5b7aa8225bea341b830666e2724ecb13316e27b0 Author: Bjoern A. Zeeb (Fri 29 Aug 2025 19:55:53 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:45 GMT) LinuxKPI: skbuff: checksum offloading flags Given the checksum offloading flags are mutually exclusive and are not a bit mask, we can compress them into 2 bit for the four possible values. Change the define but leave the type at uint8_t for now with a comment. We can possible combine them with another sub-octet field in the future. Sponsored by: The FreeBSD Foundation (cherry picked from commit 343f8f71af70c92b36be19e1d97530b84f871c3e) M sys/compat/linuxkpi/common/include/linux/skbuff.h ____________________________________________________________________________________________________________ Commit: 4a26d2750b5695a1e700ea1530628e7ad470baaa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4a26d2750b5695a1e700ea1530628e7ad470baaa Author: Bjoern A. Zeeb (Sat 24 May 2025 21:09:51 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:45 GMT) LinuxKPI: 802.11: do not delete keys while still assoc While we are still associated we cannot delete the keys as packets may still go out and if the firmware has no more keys it will raise and exception. This can happen given net80211 has its own mind when to do this and we, in various places, unlock and re-lock the com lock, so are open to races. Sponsored by: The FreeBSD Foundation (cherry picked from commit 86a0941db7028a5eb4d56aaa34998b833e5de174) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: 8121f688bb550af894b4b1b3ff66dba283ac16d5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8121f688bb550af894b4b1b3ff66dba283ac16d5 Author: Bjoern A. Zeeb (Fri 29 Aug 2025 08:39:01 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:45 GMT) LinuxKPI: 802.11: adjust lower wake_queue locking In bc24342d96aa8 we added lower wake_queue locking. There are paths, such as in rtw89 from a (*hw_scan_cancel)() that we can get to there and then would recursively acquire the wiphy lock which is not allowed. Adjust locking to a spin lock to match Linux driver expectations. Sponsored by: The FreeBSD Foundation Fixes: bc24342d96aa8 (cherry picked from commit fc36de571f11abda5cc68a4abd963053f676f8c5) M sys/compat/linuxkpi/common/src/linux_80211.c M sys/compat/linuxkpi/common/src/linux_80211.h ____________________________________________________________________________________________________________ Commit: 096f1bd897464edfd115f7dd2272e3488cbca191 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=096f1bd897464edfd115f7dd2272e3488cbca191 Author: Bjoern A. Zeeb (Tue 26 Aug 2025 21:37:45 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:45 GMT) LinuxKPI: 802.11: mark all structs in struct ieee80211_mgmt __packed These structs as part of the union are used to handle raw packet data so mark them all __packed. Sponsored by: The FreeBSD Foundation (cherry picked from commit d1df103190c12a63a1f718bc3cf6a1afe1ece759) M sys/compat/linuxkpi/common/include/linux/ieee80211.h ____________________________________________________________________________________________________________ Commit: 3d35647d33cf90d3ead87e45dd62eac4d3bddc66 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3d35647d33cf90d3ead87e45dd62eac4d3bddc66 Author: Bjoern A. Zeeb (Wed 13 Aug 2025 22:52:42 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:44 GMT) LinuxKPI: implement str_disable_enable() Implement str_disable_enable() needed by a wireless driver by using the already existing str_enable_disable() with a toggled argument. Sponsored by: The FreeBSD Foundation Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D52081 (cherry picked from commit a274435d0dc04a876ce2898a9036223972d23fdc) M sys/compat/linuxkpi/common/include/linux/string_helpers.h ____________________________________________________________________________________________________________ Commit: ea8a9265e0fc42700636677303e4175aa83a0344 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ea8a9265e0fc42700636677303e4175aa83a0344 Author: Bjoern A. Zeeb (Wed 20 Aug 2025 22:04:18 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:44 GMT) usb: hub: uhub_root_intr() mark function arguments as __unused No functional change. Sponsored by: The FreeBSD Foundation Reviewed by: aokblast, imp Differential Revision: https://reviews.freebsd.org/D52147 (cherry picked from commit 7dce26eded4e4c8a511ecc7e8522b9a0332386ea) M sys/dev/usb/usb_hub.c ____________________________________________________________________________________________________________ Commit: b4688ce7454fd5324c2cd7e3743b21261592e18f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b4688ce7454fd5324c2cd7e3743b21261592e18f Author: Bjoern A. Zeeb (Sun 22 Jun 2025 08:33:04 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:44 GMT) LinuxKPI: 802.11: stop using hw_value on a channel During initial LinuxKPI 802.11 bringup looking at the usage in one driver I started using hw_value as an equivalent for ic_ieee. That is not correct. Remove all usage but logging of hw_value from LinuxKPI 802.11 code and leave the field to the drivers. We have to go through some hoops to get the needed ic_ieee value but so be it. At some point we may want to clear this up in net80211 (especially given we'll have to handle more per-band data in the future). Sponsored by: The FreeBSD Foundation (cherry picked from commit aa2989738ab1f1dae55702e2bf1d853f6fdcfdd0) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: b23b05c1d42044e7a1a812ddb7f21b27551ad156 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b23b05c1d42044e7a1a812ddb7f21b27551ad156 Author: Bjoern A. Zeeb (Thu 10 Jul 2025 11:24:13 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:44 GMT) LinuxKPI: 802.11: factor out sinfo printing Factor out the sinfo printing into an sbuf from the sysctl handler. That allows us to use lkpi_80211_dump_lvif_stas() for printing other debug information as well. Sponsored by: The FreeBSD Foundation (cherry picked from commit a086478e58bf398cc9892fba6bc0122a56b87a97) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: 03cc8045e57a5cba2e5e4aa109fdf5a903630d15 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=03cc8045e57a5cba2e5e4aa109fdf5a903630d15 Author: Bjoern A. Zeeb (Sat 14 Jun 2025 01:23:26 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:44 GMT) LinuxKPI: 802.11: fill in sinfo for chains in case driver does not We are getting per-packet information on the rx chains. Save them locally like we do for rx rate and add them to sinfo for the sysctl in case the driver does not fill in that information. Also note: chain_signal is a bitmask and not a number; treat it accordingly. Sponsored by: The FreeBSD Foundation (cherry picked from commit b3b61079ccc24792f1410840e42c36f71b9cab9f) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: 203fe473d079add112ddc2a019e9b33d48821309 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=203fe473d079add112ddc2a019e9b33d48821309 Author: Bjoern A. Zeeb (Sun 24 Aug 2025 09:28:30 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:43 GMT) LinuxKPI: 802.11: improve ieee80211_request_smps() Adjust logging from TODO() to IMPROVE() now that we can use fmt strings there too. Make sure we are not getting unsuported values to print. Also for non-station mode simply return. Sponsored by: The FreeBSD Foundation (cherry picked from commit b1e67b1a74d33e7a26e53886750a48f070a47226) M sys/compat/linuxkpi/common/include/net/mac80211.h ____________________________________________________________________________________________________________ Commit: 11f0a07f37c49e7c9bce020a2996c92a5466bb46 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=11f0a07f37c49e7c9bce020a2996c92a5466bb46 Author: Bjoern A. Zeeb (Mon 7 Jul 2025 08:02:35 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:43 GMT) LinuxKPi: 802.11: adjust linuxkpi_set_ieee80211_dev() to set ic_name While we used to pass in the dev_name(), we now use wiphy_dev() inside the implementation to get the dev and the name. This is for two reasons: (1) ath1xk also unset the dev and we need to check once we add support, and (2) in preparation for future work, which needs to hook into that point. Sponsored by: The FreeBSD Foundation (cherry picked from commit 60307068cf64700f5379c782ad98336d4d0f7390) M sys/compat/linuxkpi/common/include/net/mac80211.h M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: 7937d7fe644d7f55f563b65c349637c7acde0e25 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7937d7fe644d7f55f563b65c349637c7acde0e25 Author: Bjoern A. Zeeb (Sun 22 Jun 2025 08:31:05 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:43 GMT) LinuxKPI: 802.11: correct struct linuxkpi_ieee80211_channel Some of the annotations were not quite right. Also various fields had not been typed properly. Correct the types of field members and given the change also re-sort. Sponsored by: The FreeBSD Foundation (cherry picked from commit a394924856373b5228f542360618cfed8e334504) M sys/compat/linuxkpi/common/include/net/cfg80211.h ____________________________________________________________________________________________________________ Commit: ee44e19f0f8c5050c88e991e7f83521d776d094a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ee44e19f0f8c5050c88e991e7f83521d776d094a Author: Bjoern A. Zeeb (Sat 21 Jun 2025 15:07:48 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:43 GMT) LinuxKPI: 802.11: improve reg_query_regdb_wmm() Adjust the IMPROVE macro to also take a format string and use that in reg_query_regdb_wmm() instead of TODO() to avoid spamming the console with something that needs larger reworks. Return -ENODATA instead of -ENXIO as that seems a better fit though the only consumer uses it without checking the return value these days. Sponsored by: The FreeBSD Foundation (cherry picked from commit 85eccabc41c92d9147cac5c6f5434e2015d7eca8) M sys/compat/linuxkpi/common/include/net/cfg80211.h ____________________________________________________________________________________________________________ Commit: 8346b963c66628bd03121cacec60a9351cbbaa0e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8346b963c66628bd03121cacec60a9351cbbaa0e Author: Bjoern A. Zeeb (Thu 21 Aug 2025 23:13:03 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:42 GMT) LinuxKPI: 802.11: assign values to WLAN_HT_CAP_SM_PS_* No functional changes. Sponsored by: The FreeBSD Foundation (cherry picked from commit cd3c9f7afc275c250025bdd1140ce0e821d23f34) M sys/compat/linuxkpi/common/include/linux/ieee80211.h ____________________________________________________________________________________________________________ Commit: d784cfcd5c44ad0dc1a92ce5a42421ff06688089 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d784cfcd5c44ad0dc1a92ce5a42421ff06688089 Author: Bjoern A. Zeeb (Sat 10 May 2025 02:44:52 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:42 GMT) LinuxKPI: 802.11: announce netdev features under boot -v Under bootverbose print the announced netdev features during ifattach. Helps us to debug problems amongst drivers if needed. Leave a comment where to add checksum offlooading setting on the ifp if we get there (this would be based on netdev features). Sponsored by: The FreeBSD Foundation MFC after: 3 days (cherry picked from commit 8c1fdcf8c4026290d122f573e1207188ac029bac) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: 4faad6c23983b564b0c832eaed059b65758e38b3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4faad6c23983b564b0c832eaed059b65758e38b3 Author: Bjoern A. Zeeb (Sun 20 Jul 2025 16:03:42 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:42 GMT) LinuxKPI: 802.11: add guards to lkpi_ic_ampdu_rx_{start,stop} After updating calls into lkpi_ic_ampdu_rx_stop() were seen along with panics. Working backwards adding checks to each level we lastly ended up fighting a lsta which is NULL. Simply return in any error cases as there is nothing we can do and just leave it to net80211. Sponsored by: The FreeBSD Foundation (cherry picked from commit 8475942ca8e887287959ec2671266a210f41ed86) M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: 66e3185134528714f0017fe52f110b0cd9e94c19 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=66e3185134528714f0017fe52f110b0cd9e94c19 Author: Bjoern A. Zeeb (Fri 1 Aug 2025 06:28:28 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:42 GMT) linuxKPI: 802.11: assert wihpy lock in lkpi_80211_mo_start() Newer versions of Linux wifi drivers assert the wiphy lock in the (*start)() path. Make sure we do too and do hold the wiphy lock. Sponsored by: The FreeBSD Foundation (cherry picked from commit 897cf423a39474096dc699f7b9d173e4a97d3510) M sys/compat/linuxkpi/common/src/linux_80211.c M sys/compat/linuxkpi/common/src/linux_80211_macops.c ____________________________________________________________________________________________________________ Commit: 463d0ab1374f771366babb6e5a3fd64e24fcb543 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=463d0ab1374f771366babb6e5a3fd64e24fcb543 Author: Bjoern A. Zeeb (Wed 13 Aug 2025 23:02:07 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:41 GMT) LinuxKPI: 802.11: add dummy IEEE80211_EML_CAP_EMLSR_*_DELAY_256US A wifi driver update needs these to compile. Just add them. We'll given them porper values when we'll do a full pass needing them. Sponsored by: The FreeBSD Foundation (cherry picked from commit 9f779097032cb9d41dfc6f7a57f41768463899f8) M sys/compat/linuxkpi/common/include/net/cfg80211.h ____________________________________________________________________________________________________________ Commit: cc8d17e4366ce376204037fbf2a3a9eb3eeecda8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cc8d17e4366ce376204037fbf2a3a9eb3eeecda8 Author: Bjoern A. Zeeb (Wed 13 Aug 2025 23:00:38 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:41 GMT) LinuxKPI: 802.11: add wiphy_locked_debugfs_read() A wifi driver update required wiphy_locked_debugfs_read(). Add a skeleton implementation just reminding us of the TODO() for now. Sponsored by: The FreeBSD Foundation (cherry picked from commit 0dcce5bd70b00430c6c4b447724e88551e0eab0d) M sys/compat/linuxkpi/common/include/net/cfg80211.h ____________________________________________________________________________________________________________ Commit: 796aa6055e797b32ee1e3d1092f3e28f14e2c6d1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=796aa6055e797b32ee1e3d1092f3e28f14e2c6d1 Author: Bjoern A. Zeeb (Wed 13 Aug 2025 22:54:39 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:41 GMT) LinuxKPI: 802.11: ieee80211_probereq_get() takes const arguments With a wireless driver updates we are passed const arguments for addr and ssid. Adjust the local implementation to take the const in order to avoid compiler warnings (at no extra harm). Sponsored by: The FreeBSD Foundation (cherry picked from commit 2b37274a9a26d66010001217d53901de5b254b8b) M sys/compat/linuxkpi/common/include/net/mac80211.h M sys/compat/linuxkpi/common/src/linux_80211.c ____________________________________________________________________________________________________________ Commit: aaecab14f52c01ee0bfbb054ad5da7b0c6680586 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=aaecab14f52c01ee0bfbb054ad5da7b0c6680586 Author: Bjoern A. Zeeb (Wed 13 Aug 2025 06:38:34 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:41 GMT) LinuxKPI: 802.11: define the full set of IEEE80211_VHT_MAX_AMPDU_* Define all of IEEE80211_VHT_MAX_AMPDU_* and add a reference to the standard section. Sponsored by: The FreeBSD Foundation (cherry picked from commit 97cf5a33709b130fb108b75859af8fdc0ac4a9e3) M sys/compat/linuxkpi/common/include/linux/ieee80211.h ____________________________________________________________________________________________________________ Commit: 236b76516b6fc4d9439921259a7d2b9645e37a27 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=236b76516b6fc4d9439921259a7d2b9645e37a27 Author: Bjoern A. Zeeb (Thu 14 Aug 2025 01:46:34 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:41 GMT) LinuxKPI: 802.11: add bitfield.h to ieee80211.h Add the include to make some driver code compile without having to add FreeBSD-specific includes to drivers. Sponsored by: The FreeBSD Foundation (cherry picked from commit 7d49a336d5bf8ce4174286c2c5d1d93b3549cb88) M sys/compat/linuxkpi/common/include/linux/ieee80211.h ____________________________________________________________________________________________________________ Commit: 1aa8504d1c5156ff2b46c4eb0cc01fb2332dfb96 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1aa8504d1c5156ff2b46c4eb0cc01fb2332dfb96 Author: Bjoern A. Zeeb (Thu 21 Aug 2025 07:28:56 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:40 GMT) rtw88 / rtw89: define LINUXKPI_VERSION Always define the LINUXKPI_VERSION for LinuxKPI based wireless drivers. This ensures that LinuxKPI can move indepdent of drivers. Sponsored by: The FreeBSD Foundation (cherry picked from commit aecd63f4479423a65bdde7f93da66139293f0928) M sys/modules/rtw88/Makefile M sys/modules/rtw89/Makefile ____________________________________________________________________________________________________________ Commit: 30ea10d3513096d65840e10d8db964368ee7cc91 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=30ea10d3513096d65840e10d8db964368ee7cc91 Author: Bjoern A. Zeeb (Wed 20 Aug 2025 00:16:33 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:40 GMT) iwlwifi.4: add link to bugzilla in the BUGS section Given iwlwifi has a (hopefully) fully categorized bug-set under one meta-bug (tracking) we can give a link to that. Suggested by: grahamperrin (as part of a large GH pull request) Suggested by: ziaee (final markup) Sponosred by: The FreeBSD Foundation Reviewed by: ziaee Pull Request: https://github.com/freebsd/freebsd-src/pull/1541 (cherry picked from commit 0f73fdfc2ab990f0b576c23c27d43436d3304755) M share/man/man4/iwlwifi.4 ____________________________________________________________________________________________________________ Commit: cfc216559c92e8c4b610175d58a10c09a6a5e66d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cfc216559c92e8c4b610175d58a10c09a6a5e66d Author: Bjoern A. Zeeb (Thu 19 Jun 2025 01:01:07 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:40 GMT) bsnmp: wlan: use correct value for rssi net80211 keeps the rssi value in 0.5bm relative to the noise floor (see comment in ieee80211_node.h). Do proper maths to get a plain rssi value back (once further fixes are in net80211). Sponsored by: The FreeBSD Foundation Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D50930 (cherry picked from commit 69ffe3a6e778c3400a27a1098969802ac4cb5f56) M usr.sbin/bsnmpd/modules/snmp_wlan/wlan_sys.c ____________________________________________________________________________________________________________ Commit: 42c4f4d98216ebf1355e1387ff8d0bd42a88b120 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=42c4f4d98216ebf1355e1387ff8d0bd42a88b120 Author: Bjoern A. Zeeb (Tue 29 Jul 2025 13:36:26 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:40 GMT) dwmmc: cleanup cmd and locking, consistency between mmc and mmccam In general sprinkle locking assertions and harmonized KASSERTs throughout the upper part of the driver to document expectations. In dwmmc_cmd_done() "cmd" should be set correctly and be used for both MMCCAM and classic mmc rather than special-casing mmccam. In dwmmc_next_operation() place variable declarations on the top for both cases before the first debug and lock assertion calls; then factor out common parts at the end and put both cases in the same order. By calling dwmmc_next_operation() directly from both dwmmc_request() in the mmc case, and dwmmc_cam_request() in the mmccase (rather than) chaining calls in the latter, we avoid unlocking the sc in the mmccam case and have a consistent call path from both; also removing the mmccam #ifdef from dwmmc_request() brings more clarity. In dwmmc_next_operation() enhance the panic/error messages with some extra information and assert that we come in with a cam pinfo on CAM_ACTIVE_INDEX. Reviewed by: manu Differential Revision: https://reviews.freebsd.org/D51628 (cherry picked from commit 0f8a8416a4e07ddeaecc4eafd6f418da0f21efc7) M sys/dev/mmc/host/dwmmc.c ____________________________________________________________________________________________________________ Commit: 443e07f7980f8e777b7513e72769da639dd4e0e9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=443e07f7980f8e777b7513e72769da639dd4e0e9 Author: Bjoern A. Zeeb (Thu 31 Jul 2025 08:24:58 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:39 GMT) LinuxKPI: pci: use unsigned int for vendor/device arguments Linux drivers may pass a typed PCI_ANY_ID (-1U) in which then leads to a warning that the value gets truncated. Switch argument types to unsigned int (or uint32_t as we use in struct pci_device_id) to avoid the problem. Sponsored by: The FreeBSD Foundation Discussed in: D50008 Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D51652 (cherry picked from commit a96486531b915c621947980d01decff759afc65e) M sys/compat/linuxkpi/common/include/linux/pci.h M sys/compat/linuxkpi/common/src/linux_pci.c ____________________________________________________________________________________________________________ Commit: 96419b3aa91e71ef09832061afd6ffc630280faf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=96419b3aa91e71ef09832061afd6ffc630280faf Author: Bjoern A. Zeeb (Thu 31 Jul 2025 08:14:28 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:39 GMT) LinuxKPI: pci: fix argument type to linuxkpi_pci_iomap[_range] The last argument (maxlen) to linuxkpi_pci_iomap_range and linuxkpi_pci_iomap is an unsigned long not an int. LinuxKPI is not using that argument in the end but fix it where needed. While here adjust the name to 'maxlen' and remove the "mmio_" to bar and off. Sponsored by: The FreeBSD Foundation Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D51651 (cherry picked from commit 421bf3a968674cbb1fc7eb1c323fd4d5d2409718) M sys/compat/linuxkpi/common/include/linux/pci.h M sys/compat/linuxkpi/common/src/linux_pci.c ____________________________________________________________________________________________________________ Commit: 7d33beb6af2de0b769756211aaf2f253ed5e3e22 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7d33beb6af2de0b769756211aaf2f253ed5e3e22 Author: Bjoern A. Zeeb (Thu 31 Jul 2025 08:04:20 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:39 GMT) LinuxKPI: pci: harmonize #defines In some blocks of #defines spacing, trailing \ and indentation of a second line differed. Some of them are currently fine on a single line but future additions may not fit in that scheme. Harmonize them into a #define X\t\t\t...\\n<4 spaces>Y scheme. No functional changes. Sponsored by: The FreeBSD Foundation Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D51650 (cherry picked from commit 69ed0f766bb68876fed2096739d8adc313cf3340) M sys/compat/linuxkpi/common/include/linux/pci.h ____________________________________________________________________________________________________________ Commit: 0b6bb81935970d61bdc6580048c806ef17ef8cd4 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0b6bb81935970d61bdc6580048c806ef17ef8cd4 Author: Bjoern A. Zeeb (Thu 31 Jul 2025 01:42:15 BST) Committer: Bjoern A. Zeeb (Fri 16 Jan 2026 19:37:39 GMT) LinuxKPI: acpi: fix guid_t argument type acpi_check_dsm() and acpi_evaluate_dsm_typed() take a guid_t argument and not a char *. For in-tree Linux based drivers this leads to a compile error due to a warning. Fix the function argument type and cast internally. While this made the long statements in the wrapper functions for *_dsm_* even less readable split them up using a local variable. Sponsored by: The FreeBSD Foundation Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D51649 (cherry picked from commit 21cb44bf33f137eaab1ff6f9287c6bc8c27677f0) M sys/compat/linuxkpi/common/include/acpi/acpi_bus.h M sys/compat/linuxkpi/common/src/linux_acpi.c ____________________________________________________________________________________________________________ Commit: 296ebf7b8a50b24b4950b7bd92e170ee224e6671 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=296ebf7b8a50b24b4950b7bd92e170ee224e6671 Author: Brooks Davis (Fri 9 Jan 2026 14:19:49 GMT) Committer: Brooks Davis (Fri 16 Jan 2026 09:25:03 GMT) iflib: remove convoluted custom zeroing code Replace a collection of aliasing violations and ifdefs with memset (which now expands to __builtin_memset and should be quite reliably inlined.) The old code is hard to maintain as evidenced by the most recent change to if_pkt_info_t updating the defines, but not the zeroing code. Reviewed by: gallatin, erj Effort: CHERI upstreaming Sponsored by: Innovate UK Fixes: 43d7ee540efe ("iflib: support for transmit side nic KTLS offload") Differential Revision: https://reviews.freebsd.org/D54605 (cherry picked from commit 31e7dc6b9a000b02353bfc41cbd897533287cda2) M sys/net/iflib.c ____________________________________________________________________________________________________________ Commit: 39fd1181e5b21823f8fe31006d125963ecdf3492 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=39fd1181e5b21823f8fe31006d125963ecdf3492 Author: Martin Matuska (Mon 5 Jan 2026 20:14:54 GMT) Committer: Martin Matuska (Thu 15 Jan 2026 20:04:56 GMT) libarchive: merge from vendor branch libarchive 3.8.5 Important bugfixes: #2809 bsdtar: fix regression from 3.8.4 zero-length pattern issue bugfix Obtained from: libarchive Vendor commit: dd897a78c662a2c7a003e7ec158cea7909557bee MFC after: 1 week (cherry picked from commit 4b047c3af3fec1607ba1cfe04e1d442a17fc1cf6) M contrib/libarchive/NEWS M contrib/libarchive/README.md M contrib/libarchive/cpio/cpio.c M contrib/libarchive/libarchive/archive.h M contrib/libarchive/libarchive/archive_entry.h M contrib/libarchive/libarchive/archive_read_support_filter_uu.c M contrib/libarchive/libarchive/archive_read_support_format_cab.c M contrib/libarchive/libarchive/archive_read_support_format_cpio.c M contrib/libarchive/libarchive/archive_read_support_format_lha.c M contrib/libarchive/libarchive/archive_read_support_format_mtree.c M contrib/libarchive/libarchive/archive_string.c M contrib/libarchive/libarchive/archive_util.c M contrib/libarchive/libarchive/archive_write_open_fd.c M contrib/libarchive/libarchive/archive_write_open_file.c M contrib/libarchive/libarchive/archive_write_open_memory.c M contrib/libarchive/libarchive/archive_write_set_format_shar.c M contrib/libarchive/libarchive/archive_write_set_format_ustar.c M contrib/libarchive/libarchive/test/test_compat_lzip.c M contrib/libarchive/libarchive_fe/line_reader.c M contrib/libarchive/tar/subst.c M contrib/libarchive/tar/write.c M contrib/libarchive/test_utils/test_main.c M contrib/libarchive/unzip/bsdunzip.c M contrib/libarchive/unzip/la_queue.h ____________________________________________________________________________________________________________ Commit: d39dd181c8ab36264a60ad0b329e80929a0db7f8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d39dd181c8ab36264a60ad0b329e80929a0db7f8 Author: Martin Matuska (Mon 1 Dec 2025 13:05:35 GMT) Committer: Martin Matuska (Thu 15 Jan 2026 20:04:49 GMT) libarchive: merge from vendor branch libarchive 3.8.4 Important bugfixes: #2787 bsdtar: Fix zero-length pattern issue #2797 lib: Fix regression introduced in libarchive 3.8.2 when walking enterable but unreadable directories Obtained from: libarchive Vendor commit: d114ceee6de08a7a60ff1209492ba38bf9436f79 MFC after: 1 week (cherry picked from commit c1e033c33e8b290cd40f4069249c879efcbae6a6) M contrib/libarchive/NEWS M contrib/libarchive/libarchive/archive.h M contrib/libarchive/libarchive/archive_cryptor.c M contrib/libarchive/libarchive/archive_cryptor_private.h M contrib/libarchive/libarchive/archive_entry.h M contrib/libarchive/libarchive/archive_read_disk_entry_from_file.c M contrib/libarchive/libarchive/archive_read_disk_posix.c M contrib/libarchive/libarchive/archive_read_support_format_mtree.c M contrib/libarchive/libarchive/archive_version_details.c M contrib/libarchive/libarchive/archive_write.c M contrib/libarchive/libarchive/archive_write_disk_posix.c M contrib/libarchive/libarchive/archive_write_set_format_xar.c M contrib/libarchive/libarchive/test/test_archive_read_multiple_data_objects.c M contrib/libarchive/libarchive/test/test_write_disk_perms.c M contrib/libarchive/libarchive/test/test_write_filter_bzip2.c M contrib/libarchive/tar/subst.c M contrib/libarchive/tar/test/test_option_s.c ____________________________________________________________________________________________________________ Commit: eb042d5e8de37eacbed5aa94ba64d7d95995a266 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=eb042d5e8de37eacbed5aa94ba64d7d95995a266 Author: Martin Matuska (Wed 19 Nov 2025 13:33:40 GMT) Committer: Martin Matuska (Thu 15 Jan 2026 20:04:41 GMT) libarchive: merge from vendor branch libarchive 3.8.3 Important bugfixes: #2753 lib: Create temporary files in the target directory #2768 lha: Fix for an out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] #2769 7-zip: Fix a buffer overrun when reading truncated 7zip headers #2771 lz4 and zstd: Support both lz4 and zstd data with leading skippable frames Obtained from: libarchive Vendor commit: 1368b08875351df8aa268237b882c8f4ceb0882d MFC after: 1 week (cherry picked from commit 007679a138089676aadc9a712277f4004403b905) M contrib/libarchive/NEWS M contrib/libarchive/libarchive/archive.h M contrib/libarchive/libarchive/archive_entry.h M contrib/libarchive/libarchive/archive_entry_stat.3 M contrib/libarchive/libarchive/archive_read_disk_entry_from_file.c M contrib/libarchive/libarchive/archive_read_disk_posix.c M contrib/libarchive/libarchive/archive_read_support_filter_lz4.c M contrib/libarchive/libarchive/archive_read_support_filter_zstd.c M contrib/libarchive/libarchive/archive_read_support_format_7zip.c M contrib/libarchive/libarchive/archive_read_support_format_lha.c M contrib/libarchive/libarchive/archive_read_support_format_tar.c M contrib/libarchive/libarchive/archive_read_support_format_zip.c M contrib/libarchive/libarchive/archive_string.c M contrib/libarchive/libarchive/archive_string.h M contrib/libarchive/libarchive/archive_write_disk_posix.c M contrib/libarchive/libarchive/archive_write_open_filename.c A contrib/libarchive/libarchive/module.modulemap M contrib/libarchive/libarchive/test/test_archive_string.c M contrib/libarchive/libarchive/test/test_compat_lz4.c A contrib/libarchive/libarchive/test/test_compat_lz4_skippable_frames_B4.tar.lz4.uu A contrib/libarchive/libarchive/test/test_read_format_7zip_issue2765.7z.uu A contrib/libarchive/libarchive/test/test_read_format_7zip_issue2765.c M contrib/libarchive/tar/test/test_option_safe_writes.c M contrib/libarchive/tar/util.c M contrib/libarchive/test_utils/test_main.c M lib/libarchive/tests/Makefile ____________________________________________________________________________________________________________ Commit: 506203ae99e62b791d2f0fcb465cf5e080579824 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=506203ae99e62b791d2f0fcb465cf5e080579824 Author: Jose Luis Duran (Tue 6 Jan 2026 00:59:27 GMT) Committer: Jose Luis Duran (Thu 15 Jan 2026 19:49:00 GMT) makefs.8: Cleanup man page Reviewed by: ziaee MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54538 (cherry picked from commit 12c51484188f88bcabc5b38ca8523fcde76830a6) M usr.sbin/makefs/makefs.8 ____________________________________________________________________________________________________________ Commit: 64341378fadf9bb3e5490b91d17e659097f7804f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=64341378fadf9bb3e5490b91d17e659097f7804f Author: Jose Luis Duran (Mon 5 Jan 2026 20:35:37 GMT) Committer: Jose Luis Duran (Thu 15 Jan 2026 19:47:23 GMT) makefs: Fix typo 's/mirrorring/mirroring/' MFC after: 1 week (cherry picked from commit 73af599fb7be6806b553ac6f470d76711b74286c) M usr.sbin/makefs/msdos/msdosfs_vfsops.c ____________________________________________________________________________________________________________ Commit: 2706f7abcac7da9bfec2895102f0631b6f7b4b7c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2706f7abcac7da9bfec2895102f0631b6f7b4b7c Author: Andrew Turner (Thu 4 Sep 2025 18:24:56 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:15 GMT) arm64: Add a multiple TLBI workaround The Arm Cortex-A55, Cortex-A76, and Cortex-A510 CPUs have errata that require multiple TLBI, DSB instructions to workaround. Add support to pmap to implement these. As it appears that all affected TLBI calls are via pmap.c this should be sufficient. As all variants of this erratum are Category-B (rare) require the user to enable it at boot time. Reviewed by: alc Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52190 (cherry picked from commit a884f699e4bfc1be4e721d3ec4fa93915be18a86) M sys/arm64/arm64/pmap.c ____________________________________________________________________________________________________________ Commit: 7cd4ec4adb8f3727f59b6208b9e3bcc6c0bf30c0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7cd4ec4adb8f3727f59b6208b9e3bcc6c0bf30c0 Author: Andrew Turner (Thu 4 Sep 2025 15:57:41 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:15 GMT) arm64: Add a function to check a range of CPU revs Add a function that can check if a given midr is within a range of revisions. This will be used to check if a CPU is affected by a known erratum. Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52187 (cherry picked from commit c76b0247a95ed090cc0d83b2698228d2937af3e6) M sys/arm64/include/cpu.h ____________________________________________________________________________________________________________ Commit: 972c4dc33bd76495581f4067234ca73865d65e09 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=972c4dc33bd76495581f4067234ca73865d65e09 Author: Andrew Turner (Thu 4 Sep 2025 18:24:30 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:15 GMT) arm64: Replace cpu_tlb_flushID in initarm Replace cpu_tlb_flushID with pmap_s1_invalidate_all_kernel in initarm. They are identical in the SMP case. Reviewed by: alc Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52184 (cherry picked from commit fa23bfb425d53a87064d86ec9ae0ae5e31aa5d5b) M sys/arm64/arm64/machdep.c M sys/arm64/arm64/pmap.c M sys/arm64/include/pmap.h ____________________________________________________________________________________________________________ Commit: a5371aed0235915187a3d39809a637a63d510b37 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a5371aed0235915187a3d39809a637a63d510b37 Author: Andrew Turner (Thu 4 Sep 2025 18:24:07 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:14 GMT) arm64: Create a TLBI invalidate for the kernel Add pmap_s1_invalidate_all_kernel to remove the need to check for the kernel_pmap when it's passed in. While here replace pmap calls to cpu_tlb_flushID with pmap_s1_invalidate_all_kernel as they are identical. Reviewed by: kib Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52183 (cherry picked from commit 8df4dc90952be7afee36e3cc80c1a76e2c66fbac) M sys/arm64/arm64/pmap.c ____________________________________________________________________________________________________________ Commit: 5b364c721f8e85c54f1bcfa073f7c59f29e494ba URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5b364c721f8e85c54f1bcfa073f7c59f29e494ba Author: Andrew Turner (Fri 19 Sep 2025 11:05:47 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:14 GMT) arm64: Read the CPU feature tunables once Rather than reading the CPU tunables each time we enable a feature just read them once on boot. Reading them early on non-boot CPUs causes issues where they try to allocate memory before the core is set up to do so. As they don't change it is safe to cache the state of them. Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52578 (cherry picked from commit 5e0e2565288f3d1f1b4223d8bb53c7d70e0aa92c) M sys/arm64/arm64/cpu_feat.c M sys/arm64/include/cpu_feat.h ____________________________________________________________________________________________________________ Commit: e79e4c7031a444ac4d8466bc9834d2f4c3d31132 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e79e4c7031a444ac4d8466bc9834d2f4c3d31132 Author: Andrew Turner (Fri 19 Sep 2025 11:05:46 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:13 GMT) arm64: Add cpu_feat_disabled for disabled features When a feature is disabled we may need to run a cleanup handler, e.g. to remove a feature from the sanitized ID registers. Add support for this with a new feat_disabled handler. Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52577 (cherry picked from commit 055229eda697445880edd0050d0230a3f1bc85b3) M sys/arm64/arm64/cpu_feat.c M sys/arm64/include/cpu_feat.h ____________________________________________________________________________________________________________ Commit: 68d8de27c94d585980a99e22fed60171bcaed2ef URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=68d8de27c94d585980a99e22fed60171bcaed2ef Author: Andrew Turner (Fri 19 Sep 2025 11:05:47 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:13 GMT) arm64: Fix enabling CPU features Previously when enabling CPU feature we assumed the no check function means the feature was unconditionally enabled. When adding support to disable features on boot this check was incorrectly partially left in place. As all current features have a check function this meant all features were disabled. Fix this by restoring the previous behaviour while also allowing the user to disable the feature. Reviewed by: emaste Fixes: 4bc68fa98f68 ("arm64: Support managing features from loader") Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52579 (cherry picked from commit 5e690f1e12ce8699f16019854dfffd1857a801d8) M sys/arm64/arm64/cpu_feat.c ____________________________________________________________________________________________________________ Commit: 2210c15b08b9f70054d4de46a5a8566d395e0abe URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2210c15b08b9f70054d4de46a5a8566d395e0abe Author: Andrew Turner (Thu 4 Sep 2025 15:45:09 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:12 GMT) arm64: Support managing features from loader Allow the user to enable/disable supported cpu features/errata from a known tunable. This will allow the user to disable features, e.g. to work around broken firmware. It can also be used to enable workarounds for rare errata. Reviewed by: imp Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52358 (cherry picked from commit 4bc68fa98f68211ee7943d77cfc91f60ccb5880d) M sys/arm64/arm64/cpu_feat.c M sys/arm64/include/cpu_feat.h ____________________________________________________________________________________________________________ Commit: ddc20379099b8c3fea87bc0a8f2c8b6585b1d0bc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ddc20379099b8c3fea87bc0a8f2c8b6585b1d0bc Author: Andrew Turner (Thu 4 Sep 2025 15:44:31 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:12 GMT) arm64: Add a sysctl to see if features are enabled This will also be used as a tunable to control features in a later change. Reviewed by: imp Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52357 (cherry picked from commit 9204a315a71c5aa9a9b8c11f2dcefb155dd5fc34) M sys/arm64/arm64/cpu_feat.c M sys/arm64/include/cpu_feat.h ____________________________________________________________________________________________________________ Commit: 1c375ad453c000f64aa4f48eb4709bd5d3383bf7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1c375ad453c000f64aa4f48eb4709bd5d3383bf7 Author: Andrew Turner (Thu 4 Sep 2025 15:23:23 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:11 GMT) arm64: Add a macro to create cpu_feat This will be used later to extend cpu feature detection Reviewed by: imp (earlier version) Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52356 (cherry picked from commit b3605a7bb6f8c58d939e642671ce70b0ce39b95e) M sys/arm64/include/cpu_feat.h ____________________________________________________________________________________________________________ Commit: 3b24eedc93b77640280baf42b7ce560a32b0745b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3b24eedc93b77640280baf42b7ce560a32b0745b Author: Andrew Turner (Fri 24 Jan 2025 11:42:29 GMT) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:11 GMT) arm64: Add a new CPU feature framework This will be used to enable features that are discoverable on boot. It has support to check if a feature needs to be enabled, and if there is any errata associated with the feature that mean it shouldn't be enabled. It can also be used to enable errata workarounds that aren't associated with a specific feature, e.g. where we need to trap access to a register in userspace to emulate it. As some features need to be enabled early, while others can wait there are two options for when to enable a feature: * CPU_FEAT_EARLY_BOOT: The feature will be enabled early in the boot. On the boot CPU this is in initarm, while on secondary CPUs this is before signalling the CPU has started. * CPU_FEAT_AFTER_DEV: The feature will be enabled after devices have attached but before interrupts are enabled. There are also two scopes for where to enable the feature: * CPU_FEAT_PER_CPU: The feature will be checked and enabled on all CPU cores. * CPU_FEAT_SYSTEM: The feature will only be checked and enabled on a single core. It is expected the former will be used for most features, while the latter is for features that set a global variable to be checked. Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D47812 (cherry picked from commit ac4fa5838bb33f0c3ba05fce02d41164bd84a560) A sys/arm64/arm64/cpu_feat.c M sys/arm64/arm64/machdep.c M sys/arm64/arm64/mp_machdep.c A sys/arm64/include/cpu_feat.h M sys/conf/files.arm64 ____________________________________________________________________________________________________________ Commit: 25ff471f0bbcf5b489678e9f94877386366dc521 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=25ff471f0bbcf5b489678e9f94877386366dc521 Author: Andrew Turner (Mon 15 Sep 2025 13:05:05 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:11 GMT) arm64: Add the new C1 CPU IDs Add the Arm C1-Nano, C1-Pro, C1-Premium, and C1-Ultra CPUs from their Technical Reference Manuals. Sponsored by: Arm Ltd (cherry picked from commit 8fee6b9ecc84d3602a461f1cd33df91e50849cdf) M sys/arm64/arm64/identcpu.c M sys/arm64/include/cpu.h ____________________________________________________________________________________________________________ Commit: 935f00c4ddf6c0e90752e7017e1d8d165e0796a1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=935f00c4ddf6c0e90752e7017e1d8d165e0796a1 Author: Andrew Turner (Mon 23 Jun 2025 13:28:36 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:10 GMT) arm64: Add more CPU MIDR values Found in Linux and https://github.com/arm-software/data Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D50726 (cherry picked from commit 124b5dbf5c09a17251b75f6b96c9ab7b218eee7f) M sys/arm64/arm64/identcpu.c M sys/arm64/include/cpu.h ____________________________________________________________________________________________________________ Commit: 6025e23a8f2fca481e31436e3fa7a47fba5306d6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6025e23a8f2fca481e31436e3fa7a47fba5306d6 Author: Andrew Turner (Fri 17 Oct 2025 16:02:19 BST) Committer: Andrew Turner (Wed 14 Jan 2026 21:14:10 GMT) pci/n1sdp: Disable HotPlug Work around an issue when HotPlug is enabled where pcib3 and pcib5 continuously report the following: pcib3: HotPlug interrupt: 0x30 pcib3: Command Completed pcib3: HotPlug interrupt: 0x30 pcib3: Command Completed ... As a workaround disable HotPlug on the N1SDP as it's unlikely anyone will depend on it. Reviewed by: br Fixes: 1f5c50a86173 ("pci_host_generic:Add pcib_request_feature on ACPI") Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D53134 (cherry picked from commit edbbf26e2650e02cd3925dd1deaacf9b8fb2e2a0) M sys/dev/pci/controller/pci_n1sdp.c ____________________________________________________________________________________________________________ Commit: f21385688f528adcee8f8293e0117cf4b066f393 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f21385688f528adcee8f8293e0117cf4b066f393 Author: Baptiste Daroussin (Fri 12 Dec 2025 14:24:32 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:47 GMT) pci_vendors: update to version 2025-12-12 (cherry picked from commit 3b8e13c4696e9b3dab284842902b9f7b18073c8d) M share/misc/pci_vendors ____________________________________________________________________________________________________________ Commit: 23a18b79bd8bac5ab770c357f0e1c6db0fc290f7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=23a18b79bd8bac5ab770c357f0e1c6db0fc290f7 Author: Baptiste Daroussin (Tue 28 Oct 2025 08:31:46 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:47 GMT) pci_vendors: update to 2025-10-18 (cherry picked from commit e5f545e0d872fbfdb6c3c94ca81e7f3bce9d094a) M share/misc/pci_vendors ____________________________________________________________________________________________________________ Commit: d565a5e904ed15cffb480088b908063c9cfc8847 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d565a5e904ed15cffb480088b908063c9cfc8847 Author: Baptiste Daroussin (Tue 28 Oct 2025 08:31:02 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:47 GMT) usb_vendors: update to 2025-09-15 (cherry picked from commit 90cd623611b22e2e484b800743845b38d9c20250) M share/misc/usb_vendors ____________________________________________________________________________________________________________ Commit: d3759996530a17d0ae17eb52703909b859ad1209 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d3759996530a17d0ae17eb52703909b859ad1209 Author: Baptiste Daroussin (Thu 8 Jan 2026 15:28:34 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:41 GMT) release: make sh the default shell The default shell for root has been changed to sh(1) followup changing in release images sh(1) the shell for the "freebsd" user. MFC After: 1 week Reviewed by: manu, emaste (re) Approved by: manu, emaste (re) Differential Revision: https://reviews.freebsd.org/D54602 (cherry picked from commit d64db8892f8519f108d838f8d7e1d3b675ed37cd) M release/tools/arm.subr M release/tools/vagrant.conf ____________________________________________________________________________________________________________ Commit: 14f366b358ac336f78910e53d8e753f57f999852 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=14f366b358ac336f78910e53d8e753f57f999852 Author: Gonéri Le Bouder (Wed 7 Jan 2026 21:03:34 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:41 GMT) nuageinit: set the hostname when user-data is missing This address the situation reported here https://github.com/freebsd/freebsd-src/pull/1952#issuecomment-3720210259 The user-data file was missing and the `sethostname` function is never called. This commit adjusts slightly the logic to avoid the `exit()` call when the `user-data` file is missing. MFC After: 1 week Signed-off-by: Gonéri Le Bouder Differential Revision: https://github.com/freebsd/freebsd-src/pull/1953 (cherry picked from commit cae280931c9e1f072d8bf300c377ae120300b898) M libexec/nuageinit/nuageinit ____________________________________________________________________________________________________________ Commit: a56998eeef8d82b9d92d9205c84f3adc3c019add URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a56998eeef8d82b9d92d9205c84f3adc3c019add Author: Baptiste Daroussin (Thu 8 Jan 2026 09:52:20 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:41 GMT) nuageinit: fix test after recent behaviour change with recent change nuageinit always create a "freebsd" user, if no users are specified, which means we do need to get the rootdir in the testsuite containing a group file otherwise pw complains and the tests fails. (cherry picked from commit 65e77d34fdff9065616cfaedef3ef53329cdad26) M libexec/nuageinit/tests/nuageinit.sh ____________________________________________________________________________________________________________ Commit: 9f5c4fbf6ca2c8343ab10bb0178ebe3cf76076cd URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9f5c4fbf6ca2c8343ab10bb0178ebe3cf76076cd Author: Baptiste Daroussin (Wed 7 Jan 2026 13:55:54 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:40 GMT) release: stop disabling sendmail sendmail is already disabled by default everywhere since 14.0 MFC After: 1 week Approved by: emaste (re) Reviewed by: emaste (re) Differential Revision: https://reviews.freebsd.org/D54575 (cherry picked from commit d07198ff72aeddc5a884cfb81b22c22f2abf88f6) M release/Makefile M release/tools/arm.subr M release/tools/openstack.conf M release/tools/oracle.conf M release/tools/vagrant.conf ____________________________________________________________________________________________________________ Commit: 46eca8270ce528936e65c805eba9635ecd2cbcdb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=46eca8270ce528936e65c805eba9635ecd2cbcdb Author: Gonéri Le Bouder (Tue 6 Jan 2026 17:18:46 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:40 GMT) nuageinit: only create the default user when needed The "default" user should only be created when: - the `users` key is missing - or the `default` string is present in the `users` list Since the `public_keys` is extracted from the meta-data, this patch has to slightly adjust the way they are loaded. The change simplify the logic around the default user SSH key injection. Both `ssh_authorized_keys` and `public_keys` are handled at the same time. MFC After: 1 week Signed-off-by: Gonéri Le Bouder Pull Request: https://github.com/freebsd/freebsd-src/pull/1952 (cherry picked from commit cbc00fcc2b92e6e38b0a180261547b1a22b461bd) M libexec/nuageinit/nuageinit ____________________________________________________________________________________________________________ Commit: bdc2a7c9198a91aaacce7a1c3cbe6902b7bc4c50 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bdc2a7c9198a91aaacce7a1c3cbe6902b7bc4c50 Author: Baptiste Daroussin (Tue 6 Jan 2026 08:24:50 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:40 GMT) nuageinit(7): pert mandoc linter MFC After: 1 week (cherry picked from commit 9ea30bbb0e3c34b3ea369e217d930e2165610c0c) M libexec/nuageinit/nuageinit.7 ____________________________________________________________________________________________________________ Commit: 5ba6ed861df77399c8957f95ca1f62cb9865c28f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5ba6ed861df77399c8957f95ca1f62cb9865c28f Author: Gonéri Le Bouder (Sat 3 Jan 2026 02:11:55 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:40 GMT) nuageinit: config2_network support dns service cfg This change enhances `config2_network()` to honor the DNS configuration, when it's defined through the `services` section. The `network_data.json` file can hold DNS configuration at two different places: - within a network configuration entry - or `dns` entry in the `services` section, in this case the configuration is global. An example of such configuration: {"links": [{"id": "interface0", "type": "phy", "ethernet_mac_address": "52:54:00:01:59:03"}], "networks": [{"id": "private-ipv4-0", "type": "ipv4", "link": "interface0", "ip_address": "192.168.123.5", "netmask": "255.255.255.0", "routes": [{"network": "0.0.0.0", "netmask": "0.0.0.0", "gateway": "192.168.123.1"}], "network_id": "9e5b1ed9-f5e6-4941-a90f-2e06bab858de", "dns_nameservers": ["192.168.123.1"], "services": [{"type": "dns", "address": "192.168.123.1"}]}], "services": [{"type": "dns", "address": "192.168.123.1"}]} See: https://docs.openstack.org/nova/latest/user/metadata.html MFC After: 1 week Signed-off-by: Gonéri Le Bouder Pull Request: https://github.com/freebsd/freebsd-src/pull/1941 (cherry picked from commit 7af8b75201b7af353fa74c8feb937b52f5ccf9bb) M libexec/nuageinit/nuageinit M libexec/nuageinit/nuageinit.7 ____________________________________________________________________________________________________________ Commit: 01c811c317262e46bcc37ff5f8ac4a2f399bfdef URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=01c811c317262e46bcc37ff5f8ac4a2f399bfdef Author: Gonéri Le Bouder (Sat 3 Jan 2026 23:10:18 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:33:40 GMT) nuageinit/man: clarify how to enable sudo and doas Clarify that both `sudo` and `doas` are not part of the base system and they need to be listed in the `packages` section if the user wants to enable them. MFC After: 1 week Signed-off-by: Gonéri Le Bouder Pull Request: https://github.com/freebsd/freebsd-src/pull/1944 (cherry picked from commit 402f1353707783e2adc8d0bff01faf557820f6f5) M libexec/nuageinit/nuageinit.7 ____________________________________________________________________________________________________________ Commit: 9b9ebc918a6782a717f8380d1d65572804a102a9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9b9ebc918a6782a717f8380d1d65572804a102a9 Author: Baptiste Daroussin (Fri 5 Dec 2025 10:18:48 GMT) Committer: Baptiste Daroussin (Wed 14 Jan 2026 12:28:53 GMT) ncurses: readd "bsdpads" During the import of ncurses 6.5 some bsd specifics configuration where lost and reintroduce quickly after the import, unfortunatly there was a typo in this fix which caused the "bsdpads" to not be enabled in ncurses. Fortunatly only very old programs may be affected by this change, unfortunatly Nethack (in the ports tree is one of them.) PR: 287358 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287358 ) MFC After: 3 days (cherry picked from commit 836a0d46320c18d83029bf138b630b6ce5ebe6ae) M lib/ncurses/tinfo/ncurses_cfg.h ____________________________________________________________________________________________________________ Commit: 215d16e4102b3c03c6bde13c78f57922b94ad74e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=215d16e4102b3c03c6bde13c78f57922b94ad74e Author: Ed Maste (Tue 26 Aug 2025 21:29:28 BST) Committer: Ed Maste (Mon 12 Jan 2026 19:17:58 GMT) openssh: Add detail on client side VersionAddendum FreeBSD introduced VersionAddendum for the server as a local change in 2001 in commit 933ca70f8f88 and later extended it to the client in commit 9e2cbe04ff4f. In 2012 upstream added support for server VersionAddendum, in commit 23528816dc10. They did not add client support. We removed the client support from main in commit bffe60ead024 ("ssh: retire client VersionAddendum"). As of the 10.0p2 release upstream has added client-side VersionAddendum. Make note of this in FREEBSD-upgrade's patches section. Sponsored by: The FreeBSD Foundation (cherry picked from commit b55439338dc40d1954fd37281d48786148483190) M crypto/openssh/FREEBSD-upgrade ____________________________________________________________________________________________________________ Commit: 0e80562f15e3a634a2039cd88784957cb0f682c3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0e80562f15e3a634a2039cd88784957cb0f682c3 Author: Dimitry Andric (Thu 8 Jan 2026 08:35:13 GMT) Committer: Dimitry Andric (Mon 12 Jan 2026 17:59:04 GMT) zfs: emit .note.GNU-stack section for all ELF targets On FreeBSD, linking the zfs kernel module with binutils ld 2.44 shows the following warning: ld: warning: aesni-gcm-avx2-vaes.o: missing .note.GNU-stack section implies executable stack ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker Some of the `.S` files under `module/icp/asm-x86_64/modes` check whether to emit the `.note.GNU-stack` section using: #if defined(__linux__) && defined(__ELF__) We could add `&& defined(__FreeBSD__)` to the test, but since all other `.S` files in the OpenZFS tree use: #ifdef __ELF__ it would seem more logical to use that instead. Any recent ELF platform should support these note sections by now. Reviewed by: emaste, kib, imp MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54578 (cherry picked from commit eb1b6ec7a79aff05f5f10e1d6b1c63a0d8dc5f2f) M sys/contrib/openzfs/module/icp/asm-x86_64/modes/aesni-gcm-x86_64.S M sys/contrib/openzfs/module/icp/asm-x86_64/modes/ghash-x86_64.S ____________________________________________________________________________________________________________ Commit: 8d87742a96f59008e2fb655fa4434cd397d953a5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8d87742a96f59008e2fb655fa4434cd397d953a5 Author: John Hall (Mon 12 Jan 2026 17:33:39 GMT) Committer: John Hall (Mon 12 Jan 2026 17:42:00 GMT) RELNOTES: Correct commit hash in commit ec98cb56861f M RELNOTES ____________________________________________________________________________________________________________ Commit: 7f20404b9f91557d655a50d8d43c77f87379d577 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7f20404b9f91557d655a50d8d43c77f87379d577 Author: Frank Hilgendorf (Mon 27 Jan 2025 21:18:39 GMT) Committer: Ahmad Khalifa (Mon 12 Jan 2026 17:26:33 GMT) loader.efi: add stride & offset for MacBookPro3,1 Note that there are three variants of this MacBook. We only have the stride and offset values for the 17" 1680x1050 model. Reviewed by: vexeduxr Pull Request: https://github.com/freebsd/freebsd-src/pull/1584 (cherry picked from commit be6ba97aaee762c2e5300834f1916ae5dfd5a0b9) M stand/efi/loader/framebuffer.c ____________________________________________________________________________________________________________ Commit: 6741fb1bd4f473f3bc46e46841d2e53a9629907c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=6741fb1bd4f473f3bc46e46841d2e53a9629907c Author: Ahmad Khalifa (Sun 4 Jan 2026 13:15:37 GMT) Committer: Ahmad Khalifa (Mon 12 Jan 2026 17:26:33 GMT) loader.efi: only use firmware provided Blt on GOP gfx_state.tg_private points to a EFI_GRAPHICS_OUTPUT_PROTOCOL only when using GOP. The firmware provided Blt functions on UGA platforms have been observed to not work on old MacBooks, and are likley hit or miss anyways as UGA has been deprecated since 2006. Reviewed by: tsoome PR: 291935 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291935 ) MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54432 (cherry picked from commit 9595055ae7494997bb07b4aaed544f88ac4c5e7f) M stand/common/gfx_fb.c ____________________________________________________________________________________________________________ Commit: 4832232096f8e691563e5200b9f0d86d158bc51a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4832232096f8e691563e5200b9f0d86d158bc51a Author: Ahmad Khalifa (Sun 4 Jan 2026 13:15:02 GMT) Committer: Ahmad Khalifa (Mon 12 Jan 2026 17:26:33 GMT) loader.efi: probe for UGA if GOP isn't found Probe for UGA instead of returning early if we can't find GOP. Reviewed by: tsoome PR: 291935 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291935 ) MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54431 (cherry picked from commit 5d85dde27b4769604fc108b89328607e70e767ed) M stand/efi/loader/framebuffer.c ____________________________________________________________________________________________________________ Commit: 00d2b1b0c4d48bd8daf0b01851e694a7dff12fe1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=00d2b1b0c4d48bd8daf0b01851e694a7dff12fe1 Author: Ahmad Khalifa (Tue 6 Jan 2026 02:07:29 GMT) Committer: Ahmad Khalifa (Mon 12 Jan 2026 17:26:33 GMT) ng_tty: avoid the sign extention of char When c is compared to sc->hotchar, both undergo integer promotion, which can lead to c being sign extended. Fix this by casting c to an unsigned char. Reviewed by: kevans MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D54544 (cherry picked from commit 9b2478f60bfda663c84b48e272a2293159e1b0a0) M sys/netgraph/ng_tty.c ____________________________________________________________________________________________________________ Commit: 618cf02ffc529da1bb76622386bb7cc0eeb0a823 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=618cf02ffc529da1bb76622386bb7cc0eeb0a823 Author: Dag-Erling Smørgrav (Sat 3 Jan 2026 20:34:44 GMT) Committer: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:30:31 GMT) libgeom: Fix 32-bit gcc build MFC after: 1 week Fixes: 27894e20f140 ("libgeom: Fix segfault in 32-on-64 case") (cherry picked from commit 17355cf50fcbd0d8ddb638e1f2fd5861b526edbe) M lib/libgeom/geom_xml2tree.c ____________________________________________________________________________________________________________ Commit: ee28edf7546270091fab3626c7f55b5919e7cee8 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ee28edf7546270091fab3626c7f55b5919e7cee8 Author: Dag-Erling Smørgrav (Sat 3 Jan 2026 09:10:03 GMT) Committer: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:30:31 GMT) libgeom: Improve type safety of xml2tree code When resolving references, assert that the type of the object we find is what we expect. This will help prevent memory corruption if two objects of different types somehow end up with the same identifier. MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D54454 (cherry picked from commit 4b0d5d1d6a7c9773e38882feb4747a76b37a645c) M lib/libgeom/geom_xml2tree.c ____________________________________________________________________________________________________________ Commit: cff33cd16d6751ab0693a00473ccfe7c8132cfdf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cff33cd16d6751ab0693a00473ccfe7c8132cfdf Author: Dag-Erling Smørgrav (Sat 3 Jan 2026 09:09:58 GMT) Committer: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:30:31 GMT) libgeom: Clean up xml2tree code MFC after: 1 week Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D54453 (cherry picked from commit fad6707e2589d8557ceb6b6bf11f22323b265f01) M lib/libgeom/geom_xml2tree.c M lib/libgeom/libgeom.h ____________________________________________________________________________________________________________ Commit: 92f299dc666d82925abbe33e826eb52fb1ffb013 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=92f299dc666d82925abbe33e826eb52fb1ffb013 Author: Dag-Erling Smørgrav (Sat 3 Jan 2026 09:09:51 GMT) Committer: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:30:31 GMT) libgeom: Fix segfault in 32-on-64 case We were using strtoul() to parse object identifiers, which are kernel pointers. This works fine as long as the kernel and userland match, but in a 32-bit libgeom on a 64-bit kernel this will return ULONG_MAX for all objects, resulting in memory corruption when we later pick the wrong object while resolving consumer-producer references. MFC after: 1 week PR: 292127 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292127 ) Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D54452 (cherry picked from commit 27894e20f140ee2729c14b589035870c8185b87d) M lib/libgeom/geom_xml2tree.c ____________________________________________________________________________________________________________ Commit: 66206e00de17f929a863f92c11cbb2938796beed URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=66206e00de17f929a863f92c11cbb2938796beed Author: Dag-Erling Smørgrav (Sat 3 Jan 2026 09:09:41 GMT) Committer: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:30:31 GMT) linuxkpi: Correct kstrtobool Implement the exact same logic as in Linux: * Accept 'e', 't', 'y', '1', "on" for true. * Accept 'd', 'f', 'n', '0', "of" for false. * Disregard any characters beyond that. * Check that the string is not null, but don't check the result pointer. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: bz, emaste Differential Revision: https://reviews.freebsd.org/D54451 (cherry picked from commit f86148d2777d4d7985ed8f4ae957c41c44bd2484) M sys/compat/linuxkpi/common/include/linux/kstrtox.h ____________________________________________________________________________________________________________ Commit: 445f0d4b27d362867041d8ba20d79981a0eeba83 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=445f0d4b27d362867041d8ba20d79981a0eeba83 Author: Dag-Erling Smørgrav (Fri 2 Jan 2026 07:30:06 GMT) Committer: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:30:30 GMT) linuxkpi: Don't clobber result on failure In kstrto*(), don't assign to *res until we know the conversion is successful, and address issues that may result in warnings if code that uses is compiled at high warning levels. MFC after: 1 week Sponsored by: Klara, Inc. Sponsored by: NetApp, Inc. Reviewed by: bz, emaste Differential Revision: https://reviews.freebsd.org/D54440 (cherry picked from commit 3542d60fb8042474f66fbf2d779ed8c5a80d0f78) M sys/compat/linuxkpi/common/include/linux/kstrtox.h ____________________________________________________________________________________________________________ Commit: bf1c000e630524b476b931a60154adef4de120a0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=bf1c000e630524b476b931a60154adef4de120a0 Author: Jean-Sébastien Pédron (Sun 22 Dec 2024 15:33:04 GMT) Committer: Dag-Erling Smørgrav (Sun 11 Jan 2026 02:30:30 GMT) linuxkpi: Add `kstrtou32()` [Why] This is used by the amdgpu DRM driver in Linux 6.7. Reviewed by: manu Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D48744 (cherry picked from commit cd245b79418638e0fa8dc4027275ef5da9039993) M sys/compat/linuxkpi/common/include/linux/kstrtox.h ____________________________________________________________________________________________________________ Commit: c95f96dea30a26b7d3543961db6e25e677c02c5a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c95f96dea30a26b7d3543961db6e25e677c02c5a Author: Simon J. Gerraty (Wed 3 Dec 2025 18:13:30 GMT) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:13 GMT) Update to bmake-20251111 Merge commit '638c66de4a0faa4c2e815e81cd4021c2387c7e0f' (cherry picked from commit c60f6422ffae3ea85e7b10bad950ad27c463af18) M contrib/bmake/ChangeLog M contrib/bmake/FILES M contrib/bmake/LICENSE M contrib/bmake/VERSION M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/boot-strap M contrib/bmake/configure M contrib/bmake/configure.in M contrib/bmake/install-sh M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/auto.dep.mk M contrib/bmake/mk/auto.obj.mk M contrib/bmake/mk/autoconf.mk M contrib/bmake/mk/autodep.mk M contrib/bmake/mk/cc-wrap.mk M contrib/bmake/mk/ccm.dep.mk M contrib/bmake/mk/compiler.mk M contrib/bmake/mk/cython.mk M contrib/bmake/mk/dirdeps-cache-update.mk M contrib/bmake/mk/dirdeps-options.mk M contrib/bmake/mk/dirdeps-targets.mk M contrib/bmake/mk/dpadd.mk M contrib/bmake/mk/files.mk M contrib/bmake/mk/gendirdeps.mk M contrib/bmake/mk/genfiles.mk M contrib/bmake/mk/host-target.mk M contrib/bmake/mk/host.libnames.mk M contrib/bmake/mk/inc.mk M contrib/bmake/mk/init.mk M contrib/bmake/mk/install-mk M contrib/bmake/mk/install-new.mk M contrib/bmake/mk/install-sh M contrib/bmake/mk/java.mk M contrib/bmake/mk/jobs.mk M contrib/bmake/mk/ldorder.mk M contrib/bmake/mk/libnames.mk M contrib/bmake/mk/libs.mk M contrib/bmake/mk/links.mk M contrib/bmake/mk/manifest.mk M contrib/bmake/mk/meta.autodep.mk M contrib/bmake/mk/meta.stage.mk M contrib/bmake/mk/meta.subdir.mk M contrib/bmake/mk/meta.sys.mk M contrib/bmake/mk/meta2deps.sh M contrib/bmake/mk/mkopt.sh M contrib/bmake/mk/newlog.sh M contrib/bmake/mk/obj.mk M contrib/bmake/mk/options.mk M contrib/bmake/mk/posix.mk M contrib/bmake/mk/prlist.mk M contrib/bmake/mk/progs.mk M contrib/bmake/mk/rst2htm.mk M contrib/bmake/mk/rust.mk M contrib/bmake/mk/scripts.mk M contrib/bmake/mk/setopts.sh M contrib/bmake/mk/srctop.mk M contrib/bmake/mk/stage-install.sh M contrib/bmake/mk/subdir.mk M contrib/bmake/mk/suffixes.mk M contrib/bmake/mk/sys.clean-env.mk M contrib/bmake/mk/sys.debug.mk M contrib/bmake/mk/sys.dependfile.mk M contrib/bmake/mk/sys.dirdeps.mk M contrib/bmake/mk/sys.mk M contrib/bmake/mk/sys.vars.mk M contrib/bmake/mk/target-flags.mk M contrib/bmake/mk/warnings.mk M contrib/bmake/mk/whats.mk M contrib/bmake/mk/yacc.mk M contrib/bmake/os.sh M contrib/bmake/sigaction.c M contrib/bmake/sigcompat.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/Makefile.config.in M contrib/bmake/unit-tests/directive-dinclude.mk M contrib/bmake/unit-tests/directive-hyphen-include.mk M contrib/bmake/unit-tests/directive-include-guard.mk M contrib/bmake/unit-tests/directive-include.mk M contrib/bmake/unit-tests/directive-sinclude.mk M contrib/bmake/unit-tests/opt-debug-file.exp M contrib/bmake/unit-tests/opt-debug-file.mk A contrib/bmake/unit-tests/varmod-sun-shell1.exp A contrib/bmake/unit-tests/varmod-sun-shell1.mk M contrib/bmake/unit-tests/varname-circumflex.mk M contrib/bmake/var.c M contrib/bmake/wait.h M usr.bin/bmake/Makefile.config M usr.bin/bmake/config.h M usr.bin/bmake/unit-tests/Makefile M usr.bin/bmake/unit-tests/Makefile.config ____________________________________________________________________________________________________________ Commit: 06366a2188a13fc22b88a502fd7f9c4d17d91d2e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=06366a2188a13fc22b88a502fd7f9c4d17d91d2e Author: Simon J. Gerraty (Tue 5 Aug 2025 23:53:26 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:13 GMT) Merge bmake-20250804 Fixes bug in meta mode output capture. Merge commit '787302bde4d89279180303b753eb73b9bc6820b9' (cherry picked from commit b4894eca1ade4e9cec9afbe76021305d23bf914a) M contrib/bmake/ChangeLog M contrib/bmake/FILES M contrib/bmake/VERSION M contrib/bmake/job.c M contrib/bmake/meta.c M contrib/bmake/meta.h M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/install-mk M contrib/bmake/mk/meta2deps.py M contrib/bmake/mk/meta2deps.sh M contrib/bmake/unit-tests/Makefile A contrib/bmake/unit-tests/meta-output.exp A contrib/bmake/unit-tests/meta-output.mk M usr.bin/bmake/Makefile.config M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: 44ad87f77a847b1fcdc9bc0ee8d5532cc889b800 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=44ad87f77a847b1fcdc9bc0ee8d5532cc889b800 Author: Simon J. Gerraty (Sat 19 Jul 2025 18:37:32 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:13 GMT) Merge bmake-20250707 Merge commit '3d772e596c1acf76f555c1f51fd8d834e56b0c35' (cherry picked from commit a8c56be47166295d37600ff81fc1857db87b3a9b) M contrib/bmake/ChangeLog M contrib/bmake/FILES M contrib/bmake/VERSION M contrib/bmake/arch.c M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/for.c M contrib/bmake/job.c M contrib/bmake/job.h M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/make.c M contrib/bmake/make.h M contrib/bmake/make_malloc.c M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/prog.mk M contrib/bmake/parse.c M contrib/bmake/str.c M contrib/bmake/unit-tests/Makefile A contrib/bmake/unit-tests/char-005c-reverse-solidus.exp A contrib/bmake/unit-tests/char-005c-reverse-solidus.mk M contrib/bmake/unit-tests/check-expect.lua M contrib/bmake/unit-tests/cmd-errors-jobs.exp M contrib/bmake/unit-tests/cmd-errors-jobs.mk M contrib/bmake/unit-tests/cmd-errors-lint.exp M contrib/bmake/unit-tests/cmd-errors-lint.mk M contrib/bmake/unit-tests/cmd-errors.exp M contrib/bmake/unit-tests/cmd-errors.mk M contrib/bmake/unit-tests/cmdline-undefined.exp M contrib/bmake/unit-tests/cmdline-undefined.mk M contrib/bmake/unit-tests/cond-cmp-numeric-eq.exp M contrib/bmake/unit-tests/cond-cmp-numeric-eq.mk M contrib/bmake/unit-tests/cond-cmp-numeric.exp M contrib/bmake/unit-tests/cond-cmp-numeric.mk M contrib/bmake/unit-tests/cond-cmp-string.exp M contrib/bmake/unit-tests/cond-cmp-string.mk M contrib/bmake/unit-tests/cond-eof.exp M contrib/bmake/unit-tests/cond-eof.mk M contrib/bmake/unit-tests/cond-func-defined.exp M contrib/bmake/unit-tests/cond-func-defined.mk M contrib/bmake/unit-tests/cond-func-make.exp M contrib/bmake/unit-tests/cond-func-make.mk M contrib/bmake/unit-tests/cond-func.exp M contrib/bmake/unit-tests/cond-func.mk M contrib/bmake/unit-tests/cond-late.exp M contrib/bmake/unit-tests/cond-late.mk M contrib/bmake/unit-tests/cond-op-and-lint.exp M contrib/bmake/unit-tests/cond-op-and-lint.mk M contrib/bmake/unit-tests/cond-op-and.exp M contrib/bmake/unit-tests/cond-op-and.mk M contrib/bmake/unit-tests/cond-op-not.exp M contrib/bmake/unit-tests/cond-op-not.mk M contrib/bmake/unit-tests/cond-op-or-lint.exp M contrib/bmake/unit-tests/cond-op-or-lint.mk M contrib/bmake/unit-tests/cond-op-or.exp M contrib/bmake/unit-tests/cond-op-or.mk M contrib/bmake/unit-tests/cond-op-parentheses.exp M contrib/bmake/unit-tests/cond-op-parentheses.mk M contrib/bmake/unit-tests/cond-op.exp M contrib/bmake/unit-tests/cond-op.mk M contrib/bmake/unit-tests/cond-short.exp M contrib/bmake/unit-tests/cond-short.mk M contrib/bmake/unit-tests/cond-token-number.exp M contrib/bmake/unit-tests/cond-token-number.mk M contrib/bmake/unit-tests/cond-token-plain.exp M contrib/bmake/unit-tests/cond-token-plain.mk M contrib/bmake/unit-tests/cond-token-string.exp M contrib/bmake/unit-tests/cond-token-string.mk M contrib/bmake/unit-tests/cond-token-var.exp M contrib/bmake/unit-tests/cond-token-var.mk M contrib/bmake/unit-tests/dep-op-missing.exp M contrib/bmake/unit-tests/deptgt-begin.exp M contrib/bmake/unit-tests/deptgt-begin.mk M contrib/bmake/unit-tests/deptgt-path-suffix.exp M contrib/bmake/unit-tests/deptgt-path-suffix.mk M contrib/bmake/unit-tests/deptgt.exp M contrib/bmake/unit-tests/deptgt.mk M contrib/bmake/unit-tests/directive-dinclude.exp M contrib/bmake/unit-tests/directive-dinclude.mk M contrib/bmake/unit-tests/directive-export-gmake.exp M contrib/bmake/unit-tests/directive-export-gmake.mk M contrib/bmake/unit-tests/directive-for-errors.exp M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/directive-for-escape.exp M contrib/bmake/unit-tests/directive-for-escape.mk M contrib/bmake/unit-tests/directive-for-lines.exp M contrib/bmake/unit-tests/directive-for-lines.mk M contrib/bmake/unit-tests/directive-for.exp M contrib/bmake/unit-tests/directive-for.mk M contrib/bmake/unit-tests/directive-hyphen-include.exp M contrib/bmake/unit-tests/directive-hyphen-include.mk M contrib/bmake/unit-tests/directive-if.exp M contrib/bmake/unit-tests/directive-if.mk M contrib/bmake/unit-tests/directive-include.exp M contrib/bmake/unit-tests/directive-include.mk M contrib/bmake/unit-tests/directive-misspellings.exp M contrib/bmake/unit-tests/directive-misspellings.mk M contrib/bmake/unit-tests/directive-sinclude.exp M contrib/bmake/unit-tests/directive-sinclude.mk M contrib/bmake/unit-tests/directive-unexport.exp M contrib/bmake/unit-tests/directive-unexport.mk M contrib/bmake/unit-tests/directive-warning.exp M contrib/bmake/unit-tests/directive-warning.mk M contrib/bmake/unit-tests/directive.exp M contrib/bmake/unit-tests/directive.mk M contrib/bmake/unit-tests/moderrs.exp M contrib/bmake/unit-tests/moderrs.mk M contrib/bmake/unit-tests/opt-debug-file.exp M contrib/bmake/unit-tests/opt-debug-file.mk M contrib/bmake/unit-tests/opt-debug-lint.exp M contrib/bmake/unit-tests/opt-debug-lint.mk M contrib/bmake/unit-tests/opt-jobs-internal.exp M contrib/bmake/unit-tests/parse.exp M contrib/bmake/unit-tests/parse.mk M contrib/bmake/unit-tests/var-op-assign.exp M contrib/bmake/unit-tests/var-op-assign.mk M contrib/bmake/unit-tests/var-op-expand.exp M contrib/bmake/unit-tests/var-op-expand.mk M contrib/bmake/unit-tests/varmisc.exp M contrib/bmake/unit-tests/varmisc.mk M contrib/bmake/unit-tests/varmod-edge.exp M contrib/bmake/unit-tests/varmod-edge.mk M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-match-escape.exp M contrib/bmake/unit-tests/varmod-match-escape.mk M contrib/bmake/unit-tests/varmod-match.exp M contrib/bmake/unit-tests/varmod-match.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varmod-order.exp M contrib/bmake/unit-tests/varmod-order.mk M contrib/bmake/unit-tests/varmod-range.exp M contrib/bmake/unit-tests/varmod-range.mk M contrib/bmake/unit-tests/varmod.exp M contrib/bmake/unit-tests/varmod.mk A contrib/bmake/unit-tests/varname-circumflex.exp A contrib/bmake/unit-tests/varname-circumflex.mk M contrib/bmake/unit-tests/varname-vpath.exp M contrib/bmake/unit-tests/varname.exp M contrib/bmake/unit-tests/varname.mk M contrib/bmake/unit-tests/varparse-errors.exp M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile.config M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: eb560911563f13e56a74167e323fda1cf111e008 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=eb560911563f13e56a74167e323fda1cf111e008 Author: Simon J. Gerraty (Sat 28 Jun 2025 03:47:23 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:13 GMT) Merge bmake-20250618 (cherry picked from commit 0b46a53a2f50b5ab0f4598104119a049b9c42cc9) M contrib/bmake/ChangeLog M contrib/bmake/FILES M contrib/bmake/VERSION M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/dir.c M contrib/bmake/for.c M contrib/bmake/hash.c M contrib/bmake/hash.h M contrib/bmake/job.c M contrib/bmake/job.h M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/make.c M contrib/bmake/make.h M contrib/bmake/make_malloc.c M contrib/bmake/meta.c M contrib/bmake/meta.h M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/FILES M contrib/bmake/mk/auto.obj.mk A contrib/bmake/mk/dirdeps2dplibs.mk M contrib/bmake/mk/gendirdeps.mk M contrib/bmake/mk/install-mk M contrib/bmake/mk/lib.mk M contrib/bmake/mk/libs.mk M contrib/bmake/mk/meta.autodep.mk M contrib/bmake/mk/meta2deps.py M contrib/bmake/mk/meta2deps.sh M contrib/bmake/mk/mkopt.sh M contrib/bmake/mk/newlog.sh M contrib/bmake/mk/progs.mk M contrib/bmake/mk/setopts.sh M contrib/bmake/mk/sys.mk M contrib/bmake/parse.c M contrib/bmake/suff.c M contrib/bmake/targ.c M contrib/bmake/trace.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/archive.exp A contrib/bmake/unit-tests/check-expect.lua M contrib/bmake/unit-tests/cmd-errors-jobs.exp M contrib/bmake/unit-tests/cond-func-empty.exp M contrib/bmake/unit-tests/cond-func-empty.mk M contrib/bmake/unit-tests/cond-late.exp M contrib/bmake/unit-tests/dep-op-missing.exp M contrib/bmake/unit-tests/deptgt-suffixes.exp M contrib/bmake/unit-tests/directive-for-errors.exp M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/directive-for-null.exp M contrib/bmake/unit-tests/gnode-submake.exp A contrib/bmake/unit-tests/job-output.exp A contrib/bmake/unit-tests/job-output.mk M contrib/bmake/unit-tests/objdir-writable.exp M contrib/bmake/unit-tests/opt-debug-graph1.exp M contrib/bmake/unit-tests/opt-debug-graph2.exp M contrib/bmake/unit-tests/opt-debug-graph3.exp M contrib/bmake/unit-tests/opt-debug-jobs.exp M contrib/bmake/unit-tests/opt-file.exp M contrib/bmake/unit-tests/opt-jobs-internal.exp M contrib/bmake/unit-tests/opt-jobs-internal.mk M contrib/bmake/unit-tests/opt-jobs.mk M contrib/bmake/unit-tests/opt-touch-jobs.mk M contrib/bmake/unit-tests/opt-tracefile.exp M contrib/bmake/unit-tests/opt-tracefile.mk M contrib/bmake/unit-tests/sh-errctl.exp M contrib/bmake/unit-tests/shell-csh.mk M contrib/bmake/unit-tests/shell-ksh.exp M contrib/bmake/unit-tests/shell-ksh.mk M contrib/bmake/unit-tests/suff-main-several.exp M contrib/bmake/unit-tests/suff-transform-debug.exp M contrib/bmake/unit-tests/var-op-expand.exp M contrib/bmake/unit-tests/var-op-expand.mk M contrib/bmake/unit-tests/var-recursive.exp M contrib/bmake/unit-tests/varmod-assign.exp M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varname-dot-make-level.exp M contrib/bmake/unit-tests/varname-dot-makeflags.mk M contrib/bmake/unit-tests/varname-dot-newline.exp A contrib/bmake/unit-tests/varname-make_stack_trace.exp A contrib/bmake/unit-tests/varname-make_stack_trace.mk M contrib/bmake/unit-tests/varname.exp M contrib/bmake/unit-tests/varname.mk M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile.config M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: 8a4277b9667c5eb3bd0ab40513df1daa6985c679 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=8a4277b9667c5eb3bd0ab40513df1daa6985c679 Author: Simon J. Gerraty (Sat 19 Apr 2025 21:57:00 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:13 GMT) Merge bmake-20250414 Merge commit '284d1f7d496806b18558ab55e4654fd5e96d6a3e' (cherry picked from commit 759b177aecbfc49ebc900739954ac56b1aa5fc53) M contrib/bmake/ChangeLog M contrib/bmake/FILES M contrib/bmake/VERSION M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/cond.c M contrib/bmake/dir.c M contrib/bmake/for.c M contrib/bmake/job.c M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/make.h M contrib/bmake/meta.c M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/auto.obj.mk M contrib/bmake/mk/genfiles.mk M contrib/bmake/mk/init.mk M contrib/bmake/mk/install-mk M contrib/bmake/mk/rst2htm.mk M contrib/bmake/parse.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/archive.exp M contrib/bmake/unit-tests/cmd-errors-jobs.exp M contrib/bmake/unit-tests/cmd-errors-jobs.mk M contrib/bmake/unit-tests/cmd-errors-lint.exp M contrib/bmake/unit-tests/cmd-errors-lint.mk M contrib/bmake/unit-tests/cmd-errors.exp M contrib/bmake/unit-tests/cmd-errors.mk M contrib/bmake/unit-tests/cmdline-undefined.exp M contrib/bmake/unit-tests/cond-cmp-numeric-eq.exp M contrib/bmake/unit-tests/cond-cmp-numeric.exp M contrib/bmake/unit-tests/cond-cmp-string.exp M contrib/bmake/unit-tests/cond-cmp-unary.exp M contrib/bmake/unit-tests/cond-eof.exp M contrib/bmake/unit-tests/cond-func-defined.exp M contrib/bmake/unit-tests/cond-func-empty.exp M contrib/bmake/unit-tests/cond-func-make.exp M contrib/bmake/unit-tests/cond-func.exp M contrib/bmake/unit-tests/cond-late.exp M contrib/bmake/unit-tests/cond-op-and-lint.exp M contrib/bmake/unit-tests/cond-op-and.exp M contrib/bmake/unit-tests/cond-op-not.exp M contrib/bmake/unit-tests/cond-op-or-lint.exp M contrib/bmake/unit-tests/cond-op-or.exp M contrib/bmake/unit-tests/cond-op-parentheses.exp M contrib/bmake/unit-tests/cond-op.exp M contrib/bmake/unit-tests/cond-short.exp M contrib/bmake/unit-tests/cond-token-number.exp M contrib/bmake/unit-tests/cond-token-plain.exp M contrib/bmake/unit-tests/cond-token-string.exp M contrib/bmake/unit-tests/cond-token-string.mk M contrib/bmake/unit-tests/cond-token-var.exp M contrib/bmake/unit-tests/cond-token-var.mk M contrib/bmake/unit-tests/cond-undef-lint.exp M contrib/bmake/unit-tests/dep-colon-bug-cross-file.exp M contrib/bmake/unit-tests/dep-duplicate.exp M contrib/bmake/unit-tests/dep-op-missing.exp M contrib/bmake/unit-tests/dep.exp M contrib/bmake/unit-tests/deptgt-begin.exp M contrib/bmake/unit-tests/deptgt-path-suffix.exp M contrib/bmake/unit-tests/deptgt.exp M contrib/bmake/unit-tests/deptgt.mk M contrib/bmake/unit-tests/directive-dinclude.exp M contrib/bmake/unit-tests/directive-dinclude.mk M contrib/bmake/unit-tests/directive-elif.exp M contrib/bmake/unit-tests/directive-else.exp M contrib/bmake/unit-tests/directive-endfor.exp M contrib/bmake/unit-tests/directive-endif.exp M contrib/bmake/unit-tests/directive-error.exp M contrib/bmake/unit-tests/directive-export-gmake.exp M contrib/bmake/unit-tests/directive-export.exp M contrib/bmake/unit-tests/directive-for-break.exp M contrib/bmake/unit-tests/directive-for-empty.exp M contrib/bmake/unit-tests/directive-for-errors.exp M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/directive-for-escape.exp M contrib/bmake/unit-tests/directive-for-generating-endif.exp M contrib/bmake/unit-tests/directive-for-if.exp M contrib/bmake/unit-tests/directive-for-lines.exp M contrib/bmake/unit-tests/directive-for-null.exp M contrib/bmake/unit-tests/directive-for-null.mk M contrib/bmake/unit-tests/directive-for.exp M contrib/bmake/unit-tests/directive-for.mk M contrib/bmake/unit-tests/directive-hyphen-include.exp M contrib/bmake/unit-tests/directive-hyphen-include.mk M contrib/bmake/unit-tests/directive-if-nested.exp M contrib/bmake/unit-tests/directive-if.exp M contrib/bmake/unit-tests/directive-ifmake.exp M contrib/bmake/unit-tests/directive-ifndef.exp M contrib/bmake/unit-tests/directive-include-fatal.exp M contrib/bmake/unit-tests/directive-include-guard.exp M contrib/bmake/unit-tests/directive-include-guard.mk M contrib/bmake/unit-tests/directive-include.exp M contrib/bmake/unit-tests/directive-include.mk M contrib/bmake/unit-tests/directive-info.exp M contrib/bmake/unit-tests/directive-misspellings.exp M contrib/bmake/unit-tests/directive-sinclude.exp M contrib/bmake/unit-tests/directive-sinclude.mk M contrib/bmake/unit-tests/directive-undef.exp M contrib/bmake/unit-tests/directive-undef.mk M contrib/bmake/unit-tests/directive-unexport-env.exp M contrib/bmake/unit-tests/directive-unexport.exp M contrib/bmake/unit-tests/directive-warning.exp M contrib/bmake/unit-tests/directive.exp M contrib/bmake/unit-tests/error.exp M contrib/bmake/unit-tests/include-main.exp M contrib/bmake/unit-tests/lint.exp M contrib/bmake/unit-tests/meta-cmd-cmp.exp M contrib/bmake/unit-tests/moderrs.exp M contrib/bmake/unit-tests/moderrs.mk M contrib/bmake/unit-tests/opt-debug-file.exp M contrib/bmake/unit-tests/opt-debug-hash.exp M contrib/bmake/unit-tests/opt-debug-lint.exp M contrib/bmake/unit-tests/opt-debug-lint.mk M contrib/bmake/unit-tests/opt-debug-parse.exp M contrib/bmake/unit-tests/opt-debug-var.exp M contrib/bmake/unit-tests/opt-file.exp M contrib/bmake/unit-tests/opt-warnings-as-errors.exp M contrib/bmake/unit-tests/parse.exp A contrib/bmake/unit-tests/posix-execution.exp A contrib/bmake/unit-tests/posix-execution.mk A contrib/bmake/unit-tests/posix-expansion.exp A contrib/bmake/unit-tests/posix-expansion.mk A contrib/bmake/unit-tests/posix-varassign.exp A contrib/bmake/unit-tests/posix-varassign.mk M contrib/bmake/unit-tests/posix.exp M contrib/bmake/unit-tests/posix.mk M contrib/bmake/unit-tests/recursive.exp M contrib/bmake/unit-tests/var-eval-short.exp M contrib/bmake/unit-tests/var-op-assign.exp M contrib/bmake/unit-tests/var-op-expand.exp M contrib/bmake/unit-tests/var-op-expand.mk M contrib/bmake/unit-tests/var-op-shell.exp M contrib/bmake/unit-tests/var-recursive.exp M contrib/bmake/unit-tests/var-recursive.mk M contrib/bmake/unit-tests/var-scope-cmdline.exp M contrib/bmake/unit-tests/vardebug.exp M contrib/bmake/unit-tests/vardebug.mk M contrib/bmake/unit-tests/varmisc.exp M contrib/bmake/unit-tests/varmod-assign-shell.exp M contrib/bmake/unit-tests/varmod-assign.exp M contrib/bmake/unit-tests/varmod-assign.mk M contrib/bmake/unit-tests/varmod-edge.exp M contrib/bmake/unit-tests/varmod-edge.mk M contrib/bmake/unit-tests/varmod-gmtime.exp M contrib/bmake/unit-tests/varmod-hash.exp M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-indirect.exp M contrib/bmake/unit-tests/varmod-indirect.mk M contrib/bmake/unit-tests/varmod-localtime.exp M contrib/bmake/unit-tests/varmod-loop-delete.exp M contrib/bmake/unit-tests/varmod-loop-varname.exp M contrib/bmake/unit-tests/varmod-match-escape.exp M contrib/bmake/unit-tests/varmod-match.exp M contrib/bmake/unit-tests/varmod-match.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varmod-order.exp M contrib/bmake/unit-tests/varmod-order.mk M contrib/bmake/unit-tests/varmod-range.exp M contrib/bmake/unit-tests/varmod-range.mk M contrib/bmake/unit-tests/varmod-select-words.exp M contrib/bmake/unit-tests/varmod-select-words.mk M contrib/bmake/unit-tests/varmod-shell.exp M contrib/bmake/unit-tests/varmod-subst-regex.exp M contrib/bmake/unit-tests/varmod-subst.exp M contrib/bmake/unit-tests/varmod-subst.mk M contrib/bmake/unit-tests/varmod-sun-shell.exp M contrib/bmake/unit-tests/varmod-sysv.exp M contrib/bmake/unit-tests/varmod-sysv.mk M contrib/bmake/unit-tests/varmod-to-abs.exp M contrib/bmake/unit-tests/varmod-to-separator.exp M contrib/bmake/unit-tests/varmod-to-separator.mk M contrib/bmake/unit-tests/varmod.exp M contrib/bmake/unit-tests/varmod.mk M contrib/bmake/unit-tests/varname-dollar.exp M contrib/bmake/unit-tests/varname-dot-make-level.exp M contrib/bmake/unit-tests/varname-dot-make-level.mk M contrib/bmake/unit-tests/varname-dot-make-meta-ignore_filter.exp M contrib/bmake/unit-tests/varname-dot-make-meta-ignore_paths.exp M contrib/bmake/unit-tests/varname-dot-make-meta-ignore_patterns.exp M contrib/bmake/unit-tests/varname-dot-makeflags.exp M contrib/bmake/unit-tests/varname-dot-newline.exp M contrib/bmake/unit-tests/varname-dot-parsedir.exp M contrib/bmake/unit-tests/varname-dot-parsefile.exp M contrib/bmake/unit-tests/varname.exp M contrib/bmake/unit-tests/varparse-dynamic.exp M contrib/bmake/unit-tests/varparse-errors.exp M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile.config M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: a9319c35e816e0fab5de5d6b6e814667a14d3e7a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a9319c35e816e0fab5de5d6b6e814667a14d3e7a Author: Simon J. Gerraty (Wed 19 Mar 2025 21:06:16 GMT) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:12 GMT) Merge bmake-20250308 (cherry picked from commit d9a65c5de1c9f30ae71ce0be8fb88be9d20d216d) M contrib/bmake/ChangeLog M contrib/bmake/Makefile M contrib/bmake/VERSION M contrib/bmake/bmake.cat1 M contrib/bmake/bsd.after-import.mk M contrib/bmake/job.c M contrib/bmake/main.c M contrib/bmake/make.h M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/install-mk M contrib/bmake/mk/jobs.mk M contrib/bmake/mk/meta.autodep.mk M contrib/bmake/mk/meta.stage.mk M contrib/bmake/mk/sys.vars.mk M contrib/bmake/os.sh M usr.bin/bmake/Makefile M usr.bin/bmake/Makefile.config M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: 812d0cb17de0da39e3eb2fa0c3a365f4ea1cb71a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=812d0cb17de0da39e3eb2fa0c3a365f4ea1cb71a Author: Simon J. Gerraty (Thu 30 Jan 2025 23:40:08 GMT) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:12 GMT) Merge bmake-20250125 Merge commit '5ad769f660f3d00853bc739f82d9bc62f6a682cb' (cherry picked from commit 6a7405f5a6b639682cacf01e35d561411ff556aa) M contrib/bmake/ChangeLog M contrib/bmake/FILES M contrib/bmake/Makefile M contrib/bmake/VERSION M contrib/bmake/arch.c M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/bsd.after-import.mk M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/job.c M contrib/bmake/job.h M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/make.h M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/FILES M contrib/bmake/mk/README M contrib/bmake/mk/cython.mk M contrib/bmake/mk/dirdeps-targets.mk M contrib/bmake/mk/dirdeps.mk M contrib/bmake/mk/gendirdeps.mk A contrib/bmake/mk/genfiles.mk M contrib/bmake/mk/init.mk M contrib/bmake/mk/install-mk M contrib/bmake/mk/lib.mk M contrib/bmake/mk/links.mk M contrib/bmake/mk/meta.sys.mk M contrib/bmake/mk/meta2deps.py M contrib/bmake/mk/options.mk M contrib/bmake/mk/own.mk M contrib/bmake/mk/prog.mk A contrib/bmake/mk/rust.mk A contrib/bmake/mk/setopts.sh M contrib/bmake/mk/subdir.mk M contrib/bmake/mk/sys.mk M contrib/bmake/mk/sys.vars.mk M contrib/bmake/os.sh M contrib/bmake/parse.c M contrib/bmake/suff.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/archive.exp M contrib/bmake/unit-tests/archive.mk M contrib/bmake/unit-tests/cmd-errors-jobs.exp M contrib/bmake/unit-tests/cmd-errors-jobs.mk M contrib/bmake/unit-tests/cmd-errors-lint.exp M contrib/bmake/unit-tests/cmd-errors-lint.mk M contrib/bmake/unit-tests/cmd-errors.exp M contrib/bmake/unit-tests/cmd-errors.mk M contrib/bmake/unit-tests/cmd-interrupt.exp M contrib/bmake/unit-tests/cmd-interrupt.mk M contrib/bmake/unit-tests/cmdline.exp M contrib/bmake/unit-tests/cmdline.mk M contrib/bmake/unit-tests/cond-cmp-numeric-eq.exp M contrib/bmake/unit-tests/cond-cmp-numeric-eq.mk M contrib/bmake/unit-tests/cond-cmp-numeric.exp M contrib/bmake/unit-tests/cond-cmp-numeric.mk M contrib/bmake/unit-tests/cond-cmp-string.exp M contrib/bmake/unit-tests/cond-cmp-string.mk M contrib/bmake/unit-tests/cond-eof.exp M contrib/bmake/unit-tests/cond-eof.mk M contrib/bmake/unit-tests/cond-func-commands.mk M contrib/bmake/unit-tests/cond-func-defined.exp M contrib/bmake/unit-tests/cond-func-defined.mk M contrib/bmake/unit-tests/cond-func-empty.exp M contrib/bmake/unit-tests/cond-func-empty.mk M contrib/bmake/unit-tests/cond-func-exists.mk M contrib/bmake/unit-tests/cond-func-make.mk M contrib/bmake/unit-tests/cond-func-target.mk M contrib/bmake/unit-tests/cond-func.exp M contrib/bmake/unit-tests/cond-func.mk M contrib/bmake/unit-tests/cond-late.exp M contrib/bmake/unit-tests/cond-late.mk M contrib/bmake/unit-tests/cond-op-and.exp M contrib/bmake/unit-tests/cond-op-and.mk M contrib/bmake/unit-tests/cond-op-not.exp M contrib/bmake/unit-tests/cond-op-not.mk M contrib/bmake/unit-tests/cond-op-or.exp M contrib/bmake/unit-tests/cond-op-or.mk M contrib/bmake/unit-tests/cond-op-parentheses.exp M contrib/bmake/unit-tests/cond-op-parentheses.mk M contrib/bmake/unit-tests/cond-op.exp M contrib/bmake/unit-tests/cond-op.mk M contrib/bmake/unit-tests/cond-token-number.exp M contrib/bmake/unit-tests/cond-token-number.mk M contrib/bmake/unit-tests/cond-token-plain.exp M contrib/bmake/unit-tests/cond-token-plain.mk M contrib/bmake/unit-tests/cond-token-string.exp M contrib/bmake/unit-tests/cond-token-string.mk M contrib/bmake/unit-tests/cond-token-var.exp M contrib/bmake/unit-tests/cond-token-var.mk M contrib/bmake/unit-tests/cond-undef-lint.exp M contrib/bmake/unit-tests/cond-undef-lint.mk M contrib/bmake/unit-tests/dep-var.exp M contrib/bmake/unit-tests/dep-var.mk M contrib/bmake/unit-tests/deptgt-makeflags.exp M contrib/bmake/unit-tests/deptgt-order.exp M contrib/bmake/unit-tests/deptgt.exp M contrib/bmake/unit-tests/deptgt.mk M contrib/bmake/unit-tests/directive-export-impl.exp M contrib/bmake/unit-tests/directive-for-errors.exp M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/directive-for-escape.exp M contrib/bmake/unit-tests/directive-for-escape.mk M contrib/bmake/unit-tests/directive-for.exp M contrib/bmake/unit-tests/directive-for.mk M contrib/bmake/unit-tests/directive-if-nested.mk M contrib/bmake/unit-tests/directive-if.exp M contrib/bmake/unit-tests/directive-if.mk M contrib/bmake/unit-tests/directive-include-fatal.exp M contrib/bmake/unit-tests/directive-include-fatal.mk M contrib/bmake/unit-tests/directive-include-guard.exp M contrib/bmake/unit-tests/directive-include-guard.mk M contrib/bmake/unit-tests/directive-include.exp M contrib/bmake/unit-tests/directive-include.mk M contrib/bmake/unit-tests/directive-undef.exp M contrib/bmake/unit-tests/directive-undef.mk M contrib/bmake/unit-tests/include-main.exp M contrib/bmake/unit-tests/lint.exp M contrib/bmake/unit-tests/moderrs.exp M contrib/bmake/unit-tests/moderrs.mk M contrib/bmake/unit-tests/opt-debug-lint.exp M contrib/bmake/unit-tests/opt-debug-lint.mk M contrib/bmake/unit-tests/opt-debug-parse.exp M contrib/bmake/unit-tests/opt-debug-var.exp M contrib/bmake/unit-tests/opt-debug-var.mk M contrib/bmake/unit-tests/suff-incomplete.exp M contrib/bmake/unit-tests/suff-main-several.exp M contrib/bmake/unit-tests/suff-rebuild.exp A contrib/bmake/unit-tests/suff.exp A contrib/bmake/unit-tests/suff.mk M contrib/bmake/unit-tests/var-eval-short.exp M contrib/bmake/unit-tests/var-eval-short.mk M contrib/bmake/unit-tests/var-op-expand.exp M contrib/bmake/unit-tests/var-op-expand.mk M contrib/bmake/unit-tests/var-op-shell.exp M contrib/bmake/unit-tests/var-op-shell.mk M contrib/bmake/unit-tests/var-recursive.exp M contrib/bmake/unit-tests/var-recursive.mk M contrib/bmake/unit-tests/vardebug.exp M contrib/bmake/unit-tests/vardebug.mk M contrib/bmake/unit-tests/varmisc.exp M contrib/bmake/unit-tests/varmisc.mk M contrib/bmake/unit-tests/varmod-assign-shell.exp M contrib/bmake/unit-tests/varmod-assign-shell.mk M contrib/bmake/unit-tests/varmod-assign.exp M contrib/bmake/unit-tests/varmod-assign.mk M contrib/bmake/unit-tests/varmod-edge.exp M contrib/bmake/unit-tests/varmod-edge.mk M contrib/bmake/unit-tests/varmod-gmtime.exp M contrib/bmake/unit-tests/varmod-gmtime.mk M contrib/bmake/unit-tests/varmod-hash.exp M contrib/bmake/unit-tests/varmod-hash.mk M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-indirect.exp M contrib/bmake/unit-tests/varmod-indirect.mk M contrib/bmake/unit-tests/varmod-localtime.exp M contrib/bmake/unit-tests/varmod-localtime.mk M contrib/bmake/unit-tests/varmod-loop-delete.exp M contrib/bmake/unit-tests/varmod-loop-delete.mk M contrib/bmake/unit-tests/varmod-loop-varname.exp M contrib/bmake/unit-tests/varmod-loop-varname.mk M contrib/bmake/unit-tests/varmod-loop.exp M contrib/bmake/unit-tests/varmod-match-escape.exp M contrib/bmake/unit-tests/varmod-match-escape.mk M contrib/bmake/unit-tests/varmod-match.exp M contrib/bmake/unit-tests/varmod-match.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varmod-order.exp M contrib/bmake/unit-tests/varmod-order.mk M contrib/bmake/unit-tests/varmod-range.exp M contrib/bmake/unit-tests/varmod-range.mk M contrib/bmake/unit-tests/varmod-select-words.exp M contrib/bmake/unit-tests/varmod-select-words.mk M contrib/bmake/unit-tests/varmod-shell.exp M contrib/bmake/unit-tests/varmod-shell.mk M contrib/bmake/unit-tests/varmod-subst-regex.exp M contrib/bmake/unit-tests/varmod-subst-regex.mk M contrib/bmake/unit-tests/varmod-subst.exp M contrib/bmake/unit-tests/varmod-subst.mk M contrib/bmake/unit-tests/varmod-sun-shell.exp M contrib/bmake/unit-tests/varmod-sun-shell.mk M contrib/bmake/unit-tests/varmod-sysv.exp M contrib/bmake/unit-tests/varmod-sysv.mk M contrib/bmake/unit-tests/varmod-to-separator.exp M contrib/bmake/unit-tests/varmod-to-separator.mk M contrib/bmake/unit-tests/varmod.exp M contrib/bmake/unit-tests/varmod.mk M contrib/bmake/unit-tests/varname-dot-make-level.exp M contrib/bmake/unit-tests/varname-dot-make-level.mk M contrib/bmake/unit-tests/varname-dot-shell.exp M contrib/bmake/unit-tests/varname-dot-suffixes.exp M contrib/bmake/unit-tests/varname.exp M contrib/bmake/unit-tests/varname.mk M contrib/bmake/unit-tests/varparse-dynamic.exp M contrib/bmake/unit-tests/varparse-dynamic.mk M contrib/bmake/unit-tests/varparse-errors.exp M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile M usr.bin/bmake/Makefile.config M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: fa86ef7f23aee51a6d7dac33d89d657df50aae3c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fa86ef7f23aee51a6d7dac33d89d657df50aae3c Author: Simon J. Gerraty (Sat 20 Jul 2024 20:43:11 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:12 GMT) Merge bmake-20240711 Merge commit '84691af93185c692058ba55fa81a04103f5bf71b' (cherry picked from commit 226192822cddc30cacecd55bccb48f39c653058c) M contrib/bmake/ChangeLog M contrib/bmake/FILES M contrib/bmake/VERSION M contrib/bmake/arch.c M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/config.h.in M contrib/bmake/configure M contrib/bmake/configure.in M contrib/bmake/dir.c M contrib/bmake/dir.h M contrib/bmake/hash.c M contrib/bmake/hash.h M contrib/bmake/job.c M contrib/bmake/job.h M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/make.h M contrib/bmake/meta.c M contrib/bmake/mk/install-mk M contrib/bmake/parse.c M contrib/bmake/str.c M contrib/bmake/str.h M contrib/bmake/suff.c M contrib/bmake/targ.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/cmd-errors-jobs.exp M contrib/bmake/unit-tests/cmd-errors-jobs.mk M contrib/bmake/unit-tests/cmd-errors-lint.exp M contrib/bmake/unit-tests/cmd-errors-lint.mk M contrib/bmake/unit-tests/cmd-errors.exp M contrib/bmake/unit-tests/cmd-errors.mk M contrib/bmake/unit-tests/compat-error.exp M contrib/bmake/unit-tests/cond-cmp-numeric.exp M contrib/bmake/unit-tests/cond-func-defined.exp M contrib/bmake/unit-tests/cond-func.exp M contrib/bmake/unit-tests/cond-func.mk M contrib/bmake/unit-tests/cond-late.exp M contrib/bmake/unit-tests/cond-late.mk M contrib/bmake/unit-tests/cond-op-and.exp M contrib/bmake/unit-tests/cond-op-and.mk M contrib/bmake/unit-tests/cond-op-not.exp M contrib/bmake/unit-tests/cond-op-or.exp M contrib/bmake/unit-tests/cond-op-or.mk M contrib/bmake/unit-tests/cond-op-parentheses.exp M contrib/bmake/unit-tests/cond-op.exp M contrib/bmake/unit-tests/cond-short.exp M contrib/bmake/unit-tests/cond-token-number.exp M contrib/bmake/unit-tests/cond-token-string.exp M contrib/bmake/unit-tests/cond-token-string.mk M contrib/bmake/unit-tests/dep-op-missing.exp M contrib/bmake/unit-tests/dep-percent.exp M contrib/bmake/unit-tests/dep-var.exp M contrib/bmake/unit-tests/dep.exp M contrib/bmake/unit-tests/depsrc-ignore.exp M contrib/bmake/unit-tests/deptgt-begin-fail-indirect.exp M contrib/bmake/unit-tests/deptgt-begin-fail.exp M contrib/bmake/unit-tests/deptgt-delete_on_error.exp M contrib/bmake/unit-tests/deptgt-end-fail-all.exp M contrib/bmake/unit-tests/deptgt-end-fail-indirect.exp M contrib/bmake/unit-tests/deptgt-end-fail.exp M contrib/bmake/unit-tests/deptgt-error.exp M contrib/bmake/unit-tests/deptgt-ignore.exp M contrib/bmake/unit-tests/deptgt-path-suffix.exp M contrib/bmake/unit-tests/deptgt.exp M contrib/bmake/unit-tests/deptgt.mk M contrib/bmake/unit-tests/directive-dinclude.exp M contrib/bmake/unit-tests/directive-elif.exp M contrib/bmake/unit-tests/directive-else.exp M contrib/bmake/unit-tests/directive-export-gmake.exp M contrib/bmake/unit-tests/directive-for-break.exp M contrib/bmake/unit-tests/directive-for-errors.exp M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/directive-for-escape.exp M contrib/bmake/unit-tests/directive-for-escape.mk M contrib/bmake/unit-tests/directive-for-generating-endif.exp M contrib/bmake/unit-tests/directive-for-if.exp M contrib/bmake/unit-tests/directive-for-null.exp M contrib/bmake/unit-tests/directive-for.exp M contrib/bmake/unit-tests/directive-for.mk M contrib/bmake/unit-tests/directive-hyphen-include.exp M contrib/bmake/unit-tests/directive-ifmake.exp M contrib/bmake/unit-tests/directive-include-fatal.exp M contrib/bmake/unit-tests/directive-include.exp M contrib/bmake/unit-tests/directive-include.mk M contrib/bmake/unit-tests/directive-info.exp M contrib/bmake/unit-tests/directive-sinclude.exp M contrib/bmake/unit-tests/directive-undef.exp M contrib/bmake/unit-tests/directive-undef.mk M contrib/bmake/unit-tests/directive-unexport-env.exp M contrib/bmake/unit-tests/directive-warning.exp M contrib/bmake/unit-tests/directive.exp M contrib/bmake/unit-tests/doterror.exp M contrib/bmake/unit-tests/jobs-empty-commands-error.exp M contrib/bmake/unit-tests/jobs-error-indirect.exp M contrib/bmake/unit-tests/jobs-error-nested-make.exp M contrib/bmake/unit-tests/jobs-error-nested.exp M contrib/bmake/unit-tests/lint.exp M contrib/bmake/unit-tests/moderrs.exp M contrib/bmake/unit-tests/moderrs.mk M contrib/bmake/unit-tests/opt-debug-errors-jobs.exp M contrib/bmake/unit-tests/opt-debug-errors.exp M contrib/bmake/unit-tests/opt-debug-file.exp M contrib/bmake/unit-tests/opt-debug-file.mk M contrib/bmake/unit-tests/opt-debug-graph2.exp M contrib/bmake/unit-tests/opt-debug-graph3.exp M contrib/bmake/unit-tests/opt-debug-hash.exp M contrib/bmake/unit-tests/opt-debug-lint.exp M contrib/bmake/unit-tests/opt-debug-lint.mk M contrib/bmake/unit-tests/opt-file.exp M contrib/bmake/unit-tests/opt-keep-going-indirect.exp M contrib/bmake/unit-tests/opt-keep-going-multiple.exp M contrib/bmake/unit-tests/opt-keep-going.exp M contrib/bmake/unit-tests/opt-warnings-as-errors.exp M contrib/bmake/unit-tests/opt.exp M contrib/bmake/unit-tests/parse.exp M contrib/bmake/unit-tests/posix.exp M contrib/bmake/unit-tests/sh-jobs.exp M contrib/bmake/unit-tests/suff-add-later.exp M contrib/bmake/unit-tests/suff-clear-regular.exp M contrib/bmake/unit-tests/suff-clear-single.exp M contrib/bmake/unit-tests/suff-main-several.exp M contrib/bmake/unit-tests/suff-self.exp M contrib/bmake/unit-tests/suff-transform-endless.exp M contrib/bmake/unit-tests/suff-transform-expand.exp M contrib/bmake/unit-tests/suff-transform-select.exp M contrib/bmake/unit-tests/suff-use.exp M contrib/bmake/unit-tests/use-inference.exp M contrib/bmake/unit-tests/var-eval-short.exp M contrib/bmake/unit-tests/var-eval-short.mk M contrib/bmake/unit-tests/var-op-assign.exp M contrib/bmake/unit-tests/var-op-expand.exp M contrib/bmake/unit-tests/var-op-expand.mk M contrib/bmake/unit-tests/var-op-shell.exp M contrib/bmake/unit-tests/var-op-shell.mk M contrib/bmake/unit-tests/var-recursive.exp M contrib/bmake/unit-tests/vardebug.exp M contrib/bmake/unit-tests/vardebug.mk M contrib/bmake/unit-tests/varmisc.exp M contrib/bmake/unit-tests/varmisc.mk M contrib/bmake/unit-tests/varmod-assign-shell.exp M contrib/bmake/unit-tests/varmod-assign-shell.mk M contrib/bmake/unit-tests/varmod-assign.exp M contrib/bmake/unit-tests/varmod-assign.mk M contrib/bmake/unit-tests/varmod-edge.exp M contrib/bmake/unit-tests/varmod-edge.mk M contrib/bmake/unit-tests/varmod-gmtime.exp M contrib/bmake/unit-tests/varmod-gmtime.mk M contrib/bmake/unit-tests/varmod-hash.exp M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-indirect.exp M contrib/bmake/unit-tests/varmod-indirect.mk M contrib/bmake/unit-tests/varmod-localtime.exp M contrib/bmake/unit-tests/varmod-localtime.mk M contrib/bmake/unit-tests/varmod-loop-delete.exp M contrib/bmake/unit-tests/varmod-loop-delete.mk M contrib/bmake/unit-tests/varmod-loop-varname.exp M contrib/bmake/unit-tests/varmod-loop-varname.mk M contrib/bmake/unit-tests/varmod-match-escape.exp M contrib/bmake/unit-tests/varmod-match-escape.mk M contrib/bmake/unit-tests/varmod-match.exp M contrib/bmake/unit-tests/varmod-match.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varmod-order.exp M contrib/bmake/unit-tests/varmod-order.mk M contrib/bmake/unit-tests/varmod-range.exp M contrib/bmake/unit-tests/varmod-range.mk M contrib/bmake/unit-tests/varmod-select-words.exp M contrib/bmake/unit-tests/varmod-shell.exp M contrib/bmake/unit-tests/varmod-shell.mk M contrib/bmake/unit-tests/varmod-subst-regex.exp M contrib/bmake/unit-tests/varmod-subst.exp M contrib/bmake/unit-tests/varmod-sun-shell.exp M contrib/bmake/unit-tests/varmod-sun-shell.mk M contrib/bmake/unit-tests/varmod-sysv.exp M contrib/bmake/unit-tests/varmod-sysv.mk M contrib/bmake/unit-tests/varmod-to-separator.exp M contrib/bmake/unit-tests/varmod-to-separator.mk A contrib/bmake/unit-tests/varmod-to-title.exp A contrib/bmake/unit-tests/varmod-to-title.mk M contrib/bmake/unit-tests/varmod.exp M contrib/bmake/unit-tests/varmod.mk M contrib/bmake/unit-tests/varname-dot-newline.exp M contrib/bmake/unit-tests/varname-make_print_var_on_error-jobs.exp M contrib/bmake/unit-tests/varname-make_print_var_on_error.exp M contrib/bmake/unit-tests/varname.exp M contrib/bmake/unit-tests/varparse-errors.exp M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/util.c M contrib/bmake/var.c M usr.bin/bmake/Makefile.config M usr.bin/bmake/config.h M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: ba508f1da16dd58684f03f06805b0f668e4c87b2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ba508f1da16dd58684f03f06805b0f668e4c87b2 Author: Simon J. Gerraty (Sat 29 Jun 2024 01:19:51 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:12 GMT) Merge bmake-20240625 Merge commit 'dbb5be7f07456d02ce444484c683b130439acb45' (cherry picked from commit 8d5c8e21c690b35d0a9a604d6b886fba222cd2fe) M contrib/bmake/ChangeLog M contrib/bmake/VERSION M contrib/bmake/arch.c M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/dir.c M contrib/bmake/for.c M contrib/bmake/hash.c M contrib/bmake/hash.h M contrib/bmake/job.c M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/make.c M contrib/bmake/make.h M contrib/bmake/meta.c M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/dirdeps.mk M contrib/bmake/mk/install-mk M contrib/bmake/parse.c M contrib/bmake/suff.c M contrib/bmake/targ.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/cond-func-empty.mk M contrib/bmake/unit-tests/dep-duplicate.exp M contrib/bmake/unit-tests/dep-duplicate.mk M contrib/bmake/unit-tests/dep-var.exp M contrib/bmake/unit-tests/dep-var.mk M contrib/bmake/unit-tests/directive-export-literal.exp M contrib/bmake/unit-tests/directive-export-literal.mk M contrib/bmake/unit-tests/directive-export.exp M contrib/bmake/unit-tests/directive-export.mk M contrib/bmake/unit-tests/directive-for-empty.exp M contrib/bmake/unit-tests/directive-for-empty.mk M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/export-all.mk M contrib/bmake/unit-tests/opt-debug-hash.exp M contrib/bmake/unit-tests/opt-debug-hash.mk M contrib/bmake/unit-tests/parse-var.mk M contrib/bmake/unit-tests/recursive.mk M contrib/bmake/unit-tests/shell-csh.mk M contrib/bmake/unit-tests/suff-incomplete.exp M contrib/bmake/unit-tests/suff-main-several.exp M contrib/bmake/unit-tests/var-eval-short.exp M contrib/bmake/unit-tests/varmod-head.mk M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-loop.exp M contrib/bmake/unit-tests/varmod-loop.mk M contrib/bmake/unit-tests/varmod-match-escape.exp M contrib/bmake/unit-tests/varmod-match-escape.mk M contrib/bmake/unit-tests/varmod-match.exp M contrib/bmake/unit-tests/varmod-match.mk M contrib/bmake/unit-tests/varmod-sysv.exp M contrib/bmake/unit-tests/varmod-sysv.mk M contrib/bmake/unit-tests/varmod-tail.mk M contrib/bmake/unit-tests/varmod-to-separator.exp M contrib/bmake/unit-tests/varmod-to-separator.mk M contrib/bmake/unit-tests/varmod-undefined.mk M contrib/bmake/unit-tests/varmod.exp M contrib/bmake/unit-tests/varmod.mk M contrib/bmake/unit-tests/varname-dot-make-level.exp M contrib/bmake/unit-tests/varname-dot-make-level.mk M contrib/bmake/unit-tests/varname-dot-newline.exp M contrib/bmake/unit-tests/varname-dot-newline.mk M contrib/bmake/unit-tests/varname-dot-objdir.exp M contrib/bmake/unit-tests/varname-dot-objdir.mk M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile.config M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: 5d3c3f73b69c61cd2630be56642292a676363dd0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5d3c3f73b69c61cd2630be56642292a676363dd0 Author: Simon J. Gerraty (Thu 23 May 2024 21:11:02 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:11 GMT) Merge bmake-20240520 Merge commit '29efb3dcaedd9cbabc6f96f35545baf2c8b28501' (cherry picked from commit 9d3df31ec06fe91c5c67da464f11408474d57174) M contrib/bmake/ChangeLog M contrib/bmake/VERSION M contrib/bmake/dir.c M contrib/bmake/dir.h M contrib/bmake/getopt.c M contrib/bmake/main.c M contrib/bmake/parse.c M contrib/bmake/unit-tests/deptgt-phony.exp M usr.bin/bmake/Makefile.config ____________________________________________________________________________________________________________ Commit: 1d00ba4aaacfb001f17887529ebd6a7552a3f55a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1d00ba4aaacfb001f17887529ebd6a7552a3f55a Author: Simon J. Gerraty (Tue 14 May 2024 06:17:23 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:11 GMT) Merge bmake-20240508 Merge commit '3c2ab5fddc576e58f3ffa70dc5fa95144646a513' (cherry picked from commit c9f4001f81c4d5778f70f77dc9892d1c4ecfdcdb) M contrib/bmake/ChangeLog M contrib/bmake/VERSION M contrib/bmake/job.c M contrib/bmake/main.c M contrib/bmake/make.h M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/dirdeps.mk M contrib/bmake/mk/install-mk M contrib/bmake/unit-tests/opt-debug-graph1.exp M contrib/bmake/unit-tests/opt-debug-graph2.exp M contrib/bmake/unit-tests/opt-debug-graph3.exp M contrib/bmake/unit-tests/suff-main-several.exp M contrib/bmake/unit-tests/suff-transform-debug.exp M contrib/bmake/unit-tests/varname-dot-makeoverrides.exp M contrib/bmake/unit-tests/varname-dot-makeoverrides.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile.config ____________________________________________________________________________________________________________ Commit: 1166b90143dafc2e7f19140cd2492be74ed94348 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1166b90143dafc2e7f19140cd2492be74ed94348 Author: Simon J. Gerraty (Fri 3 May 2024 23:45:05 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:11 GMT) Merge bmake-20240430 Merge commit '507951f55039f9d1ceae507d510f8cb68225fbc5' (cherry picked from commit 548bfc56eb0b2cefa0fb8dc2478240bfef610309) M contrib/bmake/ChangeLog M contrib/bmake/Makefile M contrib/bmake/Makefile.config.in M contrib/bmake/VERSION M contrib/bmake/arch.c M contrib/bmake/bmake.cat1 M contrib/bmake/buf.c M contrib/bmake/buf.h M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/configure M contrib/bmake/configure.in M contrib/bmake/for.c M contrib/bmake/job.c M contrib/bmake/lst.c M contrib/bmake/lst.h M contrib/bmake/main.c M contrib/bmake/make-bootstrap.sh.in M contrib/bmake/make.h M contrib/bmake/meta.c M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/FILES M contrib/bmake/mk/init.mk M contrib/bmake/mk/install-mk M contrib/bmake/mk/meta.autodep.mk M contrib/bmake/mk/meta.subdir.mk M contrib/bmake/mk/own.mk M contrib/bmake/mk/progs.mk M contrib/bmake/mk/subdir.mk M contrib/bmake/mk/sys.dirdeps.mk A contrib/bmake/mk/sys/Cygwin.mk M contrib/bmake/os.sh M contrib/bmake/parse.c M contrib/bmake/str.c M contrib/bmake/targ.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/archive.exp M contrib/bmake/unit-tests/archive.mk M contrib/bmake/unit-tests/cmd-errors-jobs.exp M contrib/bmake/unit-tests/cmd-errors-jobs.mk M contrib/bmake/unit-tests/cmd-errors-lint.exp M contrib/bmake/unit-tests/cmd-errors-lint.mk M contrib/bmake/unit-tests/cmd-errors.exp M contrib/bmake/unit-tests/cmd-errors.mk M contrib/bmake/unit-tests/cmdline-undefined.mk M contrib/bmake/unit-tests/cmdline.mk M contrib/bmake/unit-tests/comment.mk M contrib/bmake/unit-tests/cond-cmp-string.mk M contrib/bmake/unit-tests/cond-func-defined.exp M contrib/bmake/unit-tests/cond-func-defined.mk M contrib/bmake/unit-tests/cond-token-string.exp M contrib/bmake/unit-tests/cond-token-string.mk M contrib/bmake/unit-tests/depsrc-end.mk M contrib/bmake/unit-tests/depsrc-nopath.exp M contrib/bmake/unit-tests/depsrc-nopath.mk M contrib/bmake/unit-tests/depsrc-phony.mk M contrib/bmake/unit-tests/deptgt-phony.exp M contrib/bmake/unit-tests/deptgt.exp M contrib/bmake/unit-tests/deptgt.mk M contrib/bmake/unit-tests/directive-export-impl.exp M contrib/bmake/unit-tests/directive-for-errors.exp M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/directive-for-escape.exp M contrib/bmake/unit-tests/directive-for-null.exp M contrib/bmake/unit-tests/directive-for-null.mk M contrib/bmake/unit-tests/directive-for.exp M contrib/bmake/unit-tests/directive-for.mk M contrib/bmake/unit-tests/directive-include.exp M contrib/bmake/unit-tests/directive-include.mk M contrib/bmake/unit-tests/directive-undef.exp M contrib/bmake/unit-tests/directive-undef.mk M contrib/bmake/unit-tests/lint.exp M contrib/bmake/unit-tests/moderrs.exp M contrib/bmake/unit-tests/opt-chdir.exp M contrib/bmake/unit-tests/opt-chdir.mk M contrib/bmake/unit-tests/opt-debug-errors-jobs.exp M contrib/bmake/unit-tests/opt-debug-lint.exp M contrib/bmake/unit-tests/opt-debug-lint.mk M contrib/bmake/unit-tests/opt-debug-parse.exp M contrib/bmake/unit-tests/opt-file.exp M contrib/bmake/unit-tests/opt-file.mk M contrib/bmake/unit-tests/opt-keep-going-indirect.mk M contrib/bmake/unit-tests/opt-m-include-dir.mk M contrib/bmake/unit-tests/var-eval-short.exp M contrib/bmake/unit-tests/var-eval-short.mk M contrib/bmake/unit-tests/var-op-expand.exp M contrib/bmake/unit-tests/var-op-expand.mk M contrib/bmake/unit-tests/vardebug.exp M contrib/bmake/unit-tests/vardebug.mk M contrib/bmake/unit-tests/varmisc.exp M contrib/bmake/unit-tests/varmod-assign.exp M contrib/bmake/unit-tests/varmod-assign.mk M contrib/bmake/unit-tests/varmod-edge.exp M contrib/bmake/unit-tests/varmod-edge.mk M contrib/bmake/unit-tests/varmod-gmtime.exp M contrib/bmake/unit-tests/varmod-gmtime.mk M contrib/bmake/unit-tests/varmod-hash.exp M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-indirect.exp M contrib/bmake/unit-tests/varmod-indirect.mk M contrib/bmake/unit-tests/varmod-localtime.exp M contrib/bmake/unit-tests/varmod-localtime.mk M contrib/bmake/unit-tests/varmod-loop-delete.exp M contrib/bmake/unit-tests/varmod-loop-delete.mk M contrib/bmake/unit-tests/varmod-loop-varname.exp M contrib/bmake/unit-tests/varmod-loop-varname.mk M contrib/bmake/unit-tests/varmod-loop.exp M contrib/bmake/unit-tests/varmod-match-escape.exp M contrib/bmake/unit-tests/varmod-match-escape.mk M contrib/bmake/unit-tests/varmod-match.exp M contrib/bmake/unit-tests/varmod-match.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varmod-range.exp M contrib/bmake/unit-tests/varmod-range.mk M contrib/bmake/unit-tests/varmod-subst-regex.exp M contrib/bmake/unit-tests/varmod-subst.exp M contrib/bmake/unit-tests/varmod-to-separator.exp M contrib/bmake/unit-tests/varmod-to-separator.mk M contrib/bmake/unit-tests/varmod.exp M contrib/bmake/unit-tests/varmod.mk M contrib/bmake/unit-tests/varname-dot-shell.exp M contrib/bmake/unit-tests/varparse-errors.exp M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile M usr.bin/bmake/Makefile.config M usr.bin/bmake/config.h M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: 72f01a763131bfba351beaa0786bd910d53ca589 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=72f01a763131bfba351beaa0786bd910d53ca589 Author: Simon J. Gerraty (Thu 14 Mar 2024 04:54:47 GMT) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:11 GMT) Merge bmake-20240309 Merge commit '368b06ce6b0135d6de13f7265f6dcbaeb791b3bb' (cherry picked from commit c59c3bf34db360695f07735bebc76a768cac5afc) M contrib/bmake/ChangeLog M contrib/bmake/Makefile M contrib/bmake/VERSION M contrib/bmake/arch.c M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/boot-strap M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/config.h.in M contrib/bmake/configure M contrib/bmake/configure.in M contrib/bmake/for.c M contrib/bmake/import.sh M contrib/bmake/install-sh M contrib/bmake/job.c M contrib/bmake/main.c M contrib/bmake/make-conf.h M contrib/bmake/make.1 M contrib/bmake/make.h M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/FILES M contrib/bmake/mk/auto.dep.mk M contrib/bmake/mk/auto.obj.mk M contrib/bmake/mk/autoconf.mk M contrib/bmake/mk/autodep.mk M contrib/bmake/mk/cc-wrap.mk A contrib/bmake/mk/ccm.dep.mk M contrib/bmake/mk/compiler.mk M contrib/bmake/mk/cython.mk M contrib/bmake/mk/dep.mk M contrib/bmake/mk/dirdeps-cache-update.mk M contrib/bmake/mk/dirdeps-options.mk M contrib/bmake/mk/dirdeps-targets.mk M contrib/bmake/mk/doc.mk M contrib/bmake/mk/dpadd.mk M contrib/bmake/mk/files.mk M contrib/bmake/mk/host-target.mk M contrib/bmake/mk/inc.mk M contrib/bmake/mk/init.mk M contrib/bmake/mk/install-mk M contrib/bmake/mk/install-new.mk M contrib/bmake/mk/install-sh M contrib/bmake/mk/java.mk M contrib/bmake/mk/jobs.mk M contrib/bmake/mk/ldorder.mk M contrib/bmake/mk/lib.mk M contrib/bmake/mk/libnames.mk M contrib/bmake/mk/libs.mk M contrib/bmake/mk/links.mk M contrib/bmake/mk/man.mk M contrib/bmake/mk/manifest.mk M contrib/bmake/mk/meta.autodep.mk M contrib/bmake/mk/meta.stage.mk M contrib/bmake/mk/meta.subdir.mk M contrib/bmake/mk/meta.sys.mk M contrib/bmake/mk/meta2deps.py M contrib/bmake/mk/meta2deps.sh M contrib/bmake/mk/mkopt.sh M contrib/bmake/mk/newlog.sh M contrib/bmake/mk/obj.mk M contrib/bmake/mk/options.mk M contrib/bmake/mk/own.mk M contrib/bmake/mk/posix.mk M contrib/bmake/mk/prlist.mk M contrib/bmake/mk/prog.mk M contrib/bmake/mk/progs.mk M contrib/bmake/mk/rst2htm.mk M contrib/bmake/mk/scripts.mk M contrib/bmake/mk/srctop.mk M contrib/bmake/mk/stage-install.sh M contrib/bmake/mk/subdir.mk A contrib/bmake/mk/suffixes.mk M contrib/bmake/mk/sys.clean-env.mk M contrib/bmake/mk/sys.debug.mk M contrib/bmake/mk/sys.dependfile.mk M contrib/bmake/mk/sys.dirdeps.mk M contrib/bmake/mk/sys.mk M contrib/bmake/mk/sys.vars.mk M contrib/bmake/mk/sys/Generic.mk M contrib/bmake/mk/target-flags.mk M contrib/bmake/mk/warnings.mk M contrib/bmake/mk/whats.mk M contrib/bmake/mk/yacc.mk M contrib/bmake/parse.c M contrib/bmake/suff.c M contrib/bmake/targ.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/var-scope-local.exp M contrib/bmake/unit-tests/var-scope-local.mk M contrib/bmake/unit-tests/varmod-indirect.mk M contrib/bmake/unit-tests/varmod.exp M contrib/bmake/unit-tests/varmod.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile M usr.bin/bmake/Makefile.config M usr.bin/bmake/config.h M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: 4b2e33e4815262757f998a188821b58b1fe1feea URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4b2e33e4815262757f998a188821b58b1fe1feea Author: Simon J. Gerraty (Sun 14 Jan 2024 01:31:01 GMT) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:11 GMT) Update to bmake-20240108 (cherry picked from commit d5e0a182cf153f8993a633b93d9220c99a89e760) M contrib/bmake/ChangeLog M contrib/bmake/README M contrib/bmake/VERSION M contrib/bmake/arch.c M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/boot-strap M contrib/bmake/bsd.after-import.mk M contrib/bmake/buf.c M contrib/bmake/buf.h M contrib/bmake/compat.c M contrib/bmake/cond.c M contrib/bmake/configure M contrib/bmake/configure.in M contrib/bmake/dir.c M contrib/bmake/for.c M contrib/bmake/hash.c M contrib/bmake/hash.h M contrib/bmake/job.c M contrib/bmake/job.h M contrib/bmake/lst.c M contrib/bmake/lst.h M contrib/bmake/main.c M contrib/bmake/make.1 M contrib/bmake/make.c M contrib/bmake/make.h M contrib/bmake/meta.c M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/compiler.mk M contrib/bmake/mk/dirdeps.mk M contrib/bmake/mk/dpadd.mk M contrib/bmake/mk/gendirdeps.mk M contrib/bmake/mk/host-target.mk M contrib/bmake/mk/init.mk M contrib/bmake/mk/install-mk M contrib/bmake/mk/jobs.mk M contrib/bmake/mk/lib.mk M contrib/bmake/mk/man.mk M contrib/bmake/mk/meta.autodep.mk M contrib/bmake/mk/own.mk M contrib/bmake/mk/prog.mk M contrib/bmake/mk/rst2htm.mk M contrib/bmake/os.sh M contrib/bmake/parse.c M contrib/bmake/str.c M contrib/bmake/str.h M contrib/bmake/suff.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/cmd-errors-jobs.exp M contrib/bmake/unit-tests/cmd-errors-lint.exp M contrib/bmake/unit-tests/cmd-errors.exp M contrib/bmake/unit-tests/cmdline-undefined.mk M contrib/bmake/unit-tests/comment.mk M contrib/bmake/unit-tests/cond-cmp-string.mk M contrib/bmake/unit-tests/cond-cmp-unary.mk M contrib/bmake/unit-tests/cond-eof.mk M contrib/bmake/unit-tests/cond-func-defined.exp M contrib/bmake/unit-tests/cond-func-defined.mk M contrib/bmake/unit-tests/cond-func-empty.mk M contrib/bmake/unit-tests/cond-func-exists.mk M contrib/bmake/unit-tests/cond-func.mk M contrib/bmake/unit-tests/cond-late.exp M contrib/bmake/unit-tests/cond-late.mk M contrib/bmake/unit-tests/cond-op-and.mk M contrib/bmake/unit-tests/cond-op-or.mk M contrib/bmake/unit-tests/cond-short.exp M contrib/bmake/unit-tests/cond-short.mk M contrib/bmake/unit-tests/cond-token-number.mk M contrib/bmake/unit-tests/cond-token-plain.exp M contrib/bmake/unit-tests/cond-token-plain.mk M contrib/bmake/unit-tests/cond-token-string.exp M contrib/bmake/unit-tests/cond-token-string.mk M contrib/bmake/unit-tests/cond-token-var.mk M contrib/bmake/unit-tests/dep-var.exp M contrib/bmake/unit-tests/dep-var.mk M contrib/bmake/unit-tests/depsrc-ignore.exp M contrib/bmake/unit-tests/deptgt-delete_on_error.exp M contrib/bmake/unit-tests/deptgt-makeflags.exp M contrib/bmake/unit-tests/deptgt-makeflags.mk M contrib/bmake/unit-tests/deptgt.mk M contrib/bmake/unit-tests/dir.mk M contrib/bmake/unit-tests/directive-else.mk M contrib/bmake/unit-tests/directive-export-gmake.exp M contrib/bmake/unit-tests/directive-export-gmake.mk M contrib/bmake/unit-tests/directive-export.exp M contrib/bmake/unit-tests/directive-export.mk M contrib/bmake/unit-tests/directive-for-empty.mk M contrib/bmake/unit-tests/directive-for-errors.mk M contrib/bmake/unit-tests/directive-for-escape.exp M contrib/bmake/unit-tests/directive-for-escape.mk M contrib/bmake/unit-tests/directive-for-if.mk M contrib/bmake/unit-tests/directive-for.exp M contrib/bmake/unit-tests/directive-for.mk M contrib/bmake/unit-tests/directive-ifmake.mk M contrib/bmake/unit-tests/directive-ifndef.mk M contrib/bmake/unit-tests/directive-include-guard.exp M contrib/bmake/unit-tests/directive-include-guard.mk M contrib/bmake/unit-tests/directive-warning.mk M contrib/bmake/unit-tests/directive.mk M contrib/bmake/unit-tests/escape.exp M contrib/bmake/unit-tests/escape.mk M contrib/bmake/unit-tests/hanoi-include.mk M contrib/bmake/unit-tests/jobs-error-indirect.exp M contrib/bmake/unit-tests/jobs-error-nested-make.exp M contrib/bmake/unit-tests/jobs-error-nested.exp M contrib/bmake/unit-tests/lint.mk M contrib/bmake/unit-tests/moderrs.exp M contrib/bmake/unit-tests/moderrs.mk M contrib/bmake/unit-tests/opt-debug-file.mk M contrib/bmake/unit-tests/opt-debug-jobs.mk M contrib/bmake/unit-tests/opt-debug-lint.mk M contrib/bmake/unit-tests/opt-debug-loud.mk M contrib/bmake/unit-tests/opt-debug-var.mk M contrib/bmake/unit-tests/parse-var.mk M contrib/bmake/unit-tests/recursive.exp M contrib/bmake/unit-tests/recursive.mk M contrib/bmake/unit-tests/sh-dots.mk M contrib/bmake/unit-tests/sh-leading-hyphen.exp M contrib/bmake/unit-tests/shell-sh.mk M contrib/bmake/unit-tests/unexport.mk M contrib/bmake/unit-tests/var-eval-short.mk M contrib/bmake/unit-tests/var-op-append.mk M contrib/bmake/unit-tests/var-op-assign.mk M contrib/bmake/unit-tests/var-op-default.mk M contrib/bmake/unit-tests/var-op-expand.mk M contrib/bmake/unit-tests/var-op-shell.mk M contrib/bmake/unit-tests/var-readonly.exp M contrib/bmake/unit-tests/var-readonly.mk M contrib/bmake/unit-tests/var-recursive.exp M contrib/bmake/unit-tests/var-recursive.mk M contrib/bmake/unit-tests/var-scope-cmdline.mk M contrib/bmake/unit-tests/var-scope-local-legacy.exp M contrib/bmake/unit-tests/var-scope-local-legacy.mk M contrib/bmake/unit-tests/var-scope-local.exp M contrib/bmake/unit-tests/var-scope-local.mk M contrib/bmake/unit-tests/vardebug.exp M contrib/bmake/unit-tests/vardebug.mk M contrib/bmake/unit-tests/varmisc.exp M contrib/bmake/unit-tests/varmisc.mk M contrib/bmake/unit-tests/varmod-assign.exp M contrib/bmake/unit-tests/varmod-assign.mk M contrib/bmake/unit-tests/varmod-defined.exp M contrib/bmake/unit-tests/varmod-defined.mk M contrib/bmake/unit-tests/varmod-edge.exp M contrib/bmake/unit-tests/varmod-edge.mk M contrib/bmake/unit-tests/varmod-gmtime.mk M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-indirect.mk M contrib/bmake/unit-tests/varmod-l-name-to-value.mk M contrib/bmake/unit-tests/varmod-localtime.mk M contrib/bmake/unit-tests/varmod-loop-varname.mk M contrib/bmake/unit-tests/varmod-loop.mk M contrib/bmake/unit-tests/varmod-match-escape.mk M contrib/bmake/unit-tests/varmod-match.exp M contrib/bmake/unit-tests/varmod-match.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varmod-order.exp M contrib/bmake/unit-tests/varmod-range.exp M contrib/bmake/unit-tests/varmod-range.mk M contrib/bmake/unit-tests/varmod-subst-regex.mk M contrib/bmake/unit-tests/varmod-subst.mk M contrib/bmake/unit-tests/varmod-sysv.mk M contrib/bmake/unit-tests/varmod-to-separator.mk M contrib/bmake/unit-tests/varmod-undefined.mk M contrib/bmake/unit-tests/varmod.mk M contrib/bmake/unit-tests/varname-dot-shell.exp M contrib/bmake/unit-tests/varname-dot-suffixes.exp M contrib/bmake/unit-tests/varname-dot-suffixes.mk M contrib/bmake/unit-tests/varname-empty.exp M contrib/bmake/unit-tests/varname-empty.mk M contrib/bmake/unit-tests/varname-make_print_var_on_error-jobs.mk M contrib/bmake/unit-tests/varname.mk M contrib/bmake/unit-tests/varparse-dynamic.mk M contrib/bmake/unit-tests/varparse-errors.exp M contrib/bmake/unit-tests/varparse-errors.mk M contrib/bmake/unit-tests/varparse-mod.mk M contrib/bmake/unit-tests/varparse-undef-partial.mk M contrib/bmake/util.c M contrib/bmake/var.c M usr.bin/bmake/Makefile.config M usr.bin/bmake/config.h M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: f580ef8a75c133ac75407ee1583cdb9cdb1f98c3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f580ef8a75c133ac75407ee1583cdb9cdb1f98c3 Author: Simon J. Gerraty (Mon 18 Sep 2023 02:05:19 BST) Committer: Simon J. Gerraty (Sat 10 Jan 2026 21:33:10 GMT) Merge bmake-20230909 Merge commit '1012cf15f75d1e9048779abd07270a37cdba590a' (cherry picked from commit 988758838533b24f5893b36514fe2c68a3f911a2) M contrib/bmake/ChangeLog M contrib/bmake/VERSION M contrib/bmake/bmake.1 M contrib/bmake/bmake.cat1 M contrib/bmake/boot-strap M contrib/bmake/cond.c M contrib/bmake/configure M contrib/bmake/configure.in M contrib/bmake/import.sh M contrib/bmake/install-sh M contrib/bmake/main.c M contrib/bmake/make-bootstrap.sh.in M contrib/bmake/make.1 M contrib/bmake/make.h M contrib/bmake/meta.c M contrib/bmake/mk/ChangeLog M contrib/bmake/mk/FILES M contrib/bmake/mk/dirdeps.mk M contrib/bmake/mk/install-mk A contrib/bmake/mk/install-sh M contrib/bmake/mk/jobs.mk M contrib/bmake/mk/lib.mk M contrib/bmake/mk/meta.autodep.mk M contrib/bmake/mk/mk-files.txt M contrib/bmake/mk/rst2htm.mk M contrib/bmake/mk/sys.mk M contrib/bmake/mk/sys/IRIX.mk M contrib/bmake/parse.c M contrib/bmake/unit-tests/Makefile M contrib/bmake/unit-tests/cond-cmp-numeric-eq.mk M contrib/bmake/unit-tests/cond-cmp-numeric-ge.mk M contrib/bmake/unit-tests/cond-cmp-numeric-gt.mk M contrib/bmake/unit-tests/cond-cmp-numeric-le.mk M contrib/bmake/unit-tests/cond-cmp-numeric-lt.mk M contrib/bmake/unit-tests/cond-cmp-numeric-ne.mk M contrib/bmake/unit-tests/cond-func-empty.exp M contrib/bmake/unit-tests/cond-func-empty.mk M contrib/bmake/unit-tests/cond-op-and.mk M contrib/bmake/unit-tests/cond-op-or.mk M contrib/bmake/unit-tests/dep-op-missing.exp M contrib/bmake/unit-tests/directive-dinclude.exp M contrib/bmake/unit-tests/directive-dinclude.mk M contrib/bmake/unit-tests/directive-export-gmake.exp M contrib/bmake/unit-tests/directive-export-gmake.mk M contrib/bmake/unit-tests/directive-export.exp M contrib/bmake/unit-tests/directive-export.mk M contrib/bmake/unit-tests/directive-for-escape.exp M contrib/bmake/unit-tests/directive-for-escape.mk M contrib/bmake/unit-tests/directive-hyphen-include.exp M contrib/bmake/unit-tests/directive-hyphen-include.mk M contrib/bmake/unit-tests/directive-include-guard.exp M contrib/bmake/unit-tests/directive-include-guard.mk M contrib/bmake/unit-tests/directive-include.exp M contrib/bmake/unit-tests/directive-include.mk M contrib/bmake/unit-tests/directive-sinclude.exp M contrib/bmake/unit-tests/directive-sinclude.mk M contrib/bmake/unit-tests/directive.exp M contrib/bmake/unit-tests/directive.mk M contrib/bmake/unit-tests/opt-debug-graph1.exp M contrib/bmake/unit-tests/opt-debug-graph2.exp M contrib/bmake/unit-tests/opt-debug-graph3.exp M contrib/bmake/unit-tests/opt-jobs.mk M contrib/bmake/unit-tests/parse.exp M contrib/bmake/unit-tests/parse.mk M contrib/bmake/unit-tests/suff-main-several.exp M contrib/bmake/unit-tests/suff-transform-debug.exp M contrib/bmake/unit-tests/var-op-assign.exp M contrib/bmake/unit-tests/var-op-assign.mk M contrib/bmake/unit-tests/varmod-gmtime.mk M contrib/bmake/unit-tests/varmod-ifelse.exp M contrib/bmake/unit-tests/varmod-ifelse.mk M contrib/bmake/unit-tests/varmod-mtime.exp M contrib/bmake/unit-tests/varmod-mtime.mk M contrib/bmake/unit-tests/varname-dot-make-jobs.exp M contrib/bmake/unit-tests/varname-dot-make-jobs.mk M contrib/bmake/unit-tests/varname.exp M contrib/bmake/unit-tests/varname.mk M contrib/bmake/var.c M usr.bin/bmake/Makefile.config M usr.bin/bmake/config.h M usr.bin/bmake/unit-tests/Makefile ____________________________________________________________________________________________________________ Commit: d437d1f1d5367af81417de9e0dc84d6a0e6846a1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d437d1f1d5367af81417de9e0dc84d6a0e6846a1 Author: William Carrel (Thu 8 Jan 2026 08:49:42 GMT) Committer: Xin LI (Sat 10 Jan 2026 17:04:01 GMT) GCE: Fix growfs path The sed command was missing the ${DESTDIR} prefix, meaning it was attempting to modify the build host's /etc/rc.d/growfs instead of the target image's script. Tested in an arm64 builder that builds as non-root. PR: kern/292081 (cherry picked from commit 709c1049fe0c6d0217e81268d4f33f7191474453) M release/tools/gce.conf ____________________________________________________________________________________________________________ Commit: c76941a6929d613fbe8f3f2bbbfae7c6dfdd458b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c76941a6929d613fbe8f3f2bbbfae7c6dfdd458b Author: William Carrel (Thu 8 Jan 2026 08:51:11 GMT) Committer: Xin LI (Sat 10 Jan 2026 17:04:00 GMT) GCE: Enable vtnet(4) Multiqueue. Removes hw.vtnet.mq_disable=1. This workaround was originally introduced nearly a decade ago to address stability issues on KVM that have long since been resolved in both the FreeBSD driver and the GCE hypervisor. Removing this allows network interrupts to scale across multiple vCPUs. Tested on n2-highcpu-16 VM with 15.0-RELEASE and confirmed multiple queue pairs active and interrupts handling across cores. PR: kern/292081 (cherry picked from commit f604d84618ad478fa46ec374480cbcbc1d93bf07) M release/tools/gce.conf ____________________________________________________________________________________________________________ Commit: cff07c11c7085e118dae8fc76b374b8e4850bdbb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cff07c11c7085e118dae8fc76b374b8e4850bdbb Author: Gordon Bergling (Sat 13 Dec 2025 09:43:49 GMT) Committer: Gordon Bergling (Sat 10 Jan 2026 13:12:24 GMT) mps(4): Fix a typo in a device message - s/reseting/resetting/ (cherry picked from commit bcc735cb710fb74d1fb5f7be3d37701343c58ccd) M sys/dev/mps/mps.c ____________________________________________________________________________________________________________ Commit: cb3ce1408d8b9b30771f3e3abc36325943d0cbba URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=cb3ce1408d8b9b30771f3e3abc36325943d0cbba Author: Gordon Bergling (Sat 13 Dec 2025 09:47:40 GMT) Committer: Gordon Bergling (Sat 10 Jan 2026 13:12:01 GMT) mmc(4): Fix a typo in a device debug message - s/reseting/resetting/ (cherry picked from commit 3b6f9481a85600cf1f23a819c3afee30fcd4122f) M sys/cam/mmc/mmc_xpt.c ____________________________________________________________________________________________________________ Commit: fced0139a3fb8d11dbee64069f79d5d9ba0b7cb9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=fced0139a3fb8d11dbee64069f79d5d9ba0b7cb9 Author: Gordon Bergling (Sat 13 Dec 2025 09:50:05 GMT) Committer: Gordon Bergling (Sat 10 Jan 2026 13:11:48 GMT) altq(4): Fix a typo in a source code comment - s/backet/bucket/ (cherry picked from commit 1df4d82bd17ebd7449a6b58c32b65a12269ca068) M sys/net/altq/altq.h ____________________________________________________________________________________________________________ Commit: 4c0dc30b761a428c81006fbc454c990363736923 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4c0dc30b761a428c81006fbc454c990363736923 Author: Gordon Bergling (Sat 13 Dec 2025 09:48:56 GMT) Committer: Gordon Bergling (Sat 10 Jan 2026 13:11:19 GMT) oce(4): Fix a typo in a device debug message - s/depricated/deprecated/ (cherry picked from commit a3950d70a499e120c67da884865486e8599229bd) M sys/dev/oce/oce_mbox.c ____________________________________________________________________________________________________________ Commit: 001a73c78b386735d36521d9c414cc6718e114a1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=001a73c78b386735d36521d9c414cc6718e114a1 Author: Gordon Bergling (Sat 13 Dec 2025 09:51:45 GMT) Committer: Gordon Bergling (Sat 10 Jan 2026 13:10:58 GMT) ng_hci(4): Fix a typo in a source code comment - s/depricated/deprecated/ (cherry picked from commit 756712d745db207085f1fe87dc8258434ec2147d) M sys/netgraph/bluetooth/include/ng_hci.h ____________________________________________________________________________________________________________ Commit: 0d82ee2726dfe21ef08387ac21db8d77031963c6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0d82ee2726dfe21ef08387ac21db8d77031963c6 Author: Konstantin Belousov (Wed 7 Jan 2026 06:25:46 GMT) Committer: Konstantin Belousov (Sat 10 Jan 2026 03:23:42 GMT) vm_object.h: tweak OBJ_ONEMAPPING comment even more (cherry picked from commit dcb80621bbf9a733b91f1a011af873318fac2709) M sys/vm/vm_object.h ____________________________________________________________________________________________________________ Commit: aa21e75f6da3875c4c519d3187f65e8b00c230ee URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=aa21e75f6da3875c4c519d3187f65e8b00c230ee Author: Konstantin Belousov (Wed 31 Dec 2025 22:26:38 GMT) Committer: Konstantin Belousov (Sat 10 Jan 2026 03:23:20 GMT) vm/vm_object.h: clarify the OBJ_ONEMAPPING semantic (cherry picked from commit 9c923575606bbd29dcf0ec3384150d2d67136cbb) M sys/vm/vm_object.h ____________________________________________________________________________________________________________ Commit: 1f150b9c73e5bbb0bb909df70b1edf9c59b16f4a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1f150b9c73e5bbb0bb909df70b1edf9c59b16f4a Author: Michael Osipov (Wed 7 Jan 2026 08:04:14 GMT) Committer: Michael Osipov (Fri 9 Jan 2026 18:49:52 GMT) mrsas.4: Fix devid hex style (cherry picked from commit c2b407244f3a939d8b09f9a22d872ebdce5f6b19) M share/man/man4/mrsas.4 ____________________________________________________________________________________________________________ Commit: ec98cb56861fa1cff372ae006f9c2c6a0fc78649 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ec98cb56861fa1cff372ae006f9c2c6a0fc78649 Author: John Hall (Thu 28 Aug 2025 22:11:02 BST) Committer: John Hall (Fri 9 Jan 2026 17:47:23 GMT) smartpqi: update to version 4660.0.2002 This updates the smartpqi driver to Microchip's latest available public release. Reviewed by: imp Approved by: imp Sponsored by: Microchip Technology Inc. Differential Revision: https://reviews.freebsd.org/D52507 (cherry picked from commit c558eca47970c8467ed0494145f08d1879050bbd) M share/man/man4/smartpqi.4 M sys/dev/smartpqi/smartpqi_cam.c M sys/dev/smartpqi/smartpqi_cmd.c A sys/dev/smartpqi/smartpqi_controllers.h M sys/dev/smartpqi/smartpqi_defines.h M sys/dev/smartpqi/smartpqi_discovery.c M sys/dev/smartpqi/smartpqi_event.c M sys/dev/smartpqi/smartpqi_helper.c M sys/dev/smartpqi/smartpqi_init.c M sys/dev/smartpqi/smartpqi_intr.c M sys/dev/smartpqi/smartpqi_ioctl.c M sys/dev/smartpqi/smartpqi_main.c M sys/dev/smartpqi/smartpqi_misc.c M sys/dev/smartpqi/smartpqi_prototypes.h M sys/dev/smartpqi/smartpqi_queue.c M sys/dev/smartpqi/smartpqi_request.c M sys/dev/smartpqi/smartpqi_response.c M sys/dev/smartpqi/smartpqi_sis.c M sys/dev/smartpqi/smartpqi_structures.h ____________________________________________________________________________________________________________ Commit: 653099bcc191eba839d7266333618fa6ca915605 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=653099bcc191eba839d7266333618fa6ca915605 Author: Michael Osipov (Tue 6 Jan 2026 20:31:24 GMT) Committer: Michael Osipov (Fri 9 Jan 2026 15:55:15 GMT) mrsas.4: Add Fujitsu RAID Controller SAS 6Gbit/s 1GB (D3116) This is an OEM card from Fujitsu using an LSI SAS2208 ROC controller shipped with many Fujitsu PRIMERGY servers like RX300 S7. Controller description: https://www.fujitsu.com/global/products/computing/servers/primergy/blades/connection/cb-pmod-110426.html Reviewed by: ziaee MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54566 (cherry picked from commit ccec94bf63de8ee067b03b981a283d9f968c3667) M share/man/man4/mrsas.4 ____________________________________________________________________________________________________________ Commit: 1410d22cac55c325dc437fb4575465001e65fe97 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1410d22cac55c325dc437fb4575465001e65fe97 Author: Alex Richardson (Mon 15 Sep 2025 23:14:18 BST) Committer: Ed Maste (Thu 8 Jan 2026 17:14:06 GMT) libc++: silence -Wnontrivial-memaccess warning with newer clang Apply part of LLVM commit 71315698c91d0cda054b903da0594ca6f072c350 to silence the -Wnontrivial-memaccess warning that is triggered any time this function is instantiated by user code. This fixes another buildworld failure with Clang HEAD. Original commit message: [clang] Warn about memset/memcpy to NonTriviallyCopyable types (#111434) This implements a warning that's similar to what GCC does in that context: both memcpy and memset require their first and second operand to be trivially copyable, let's warn if that's not the case. Reviewed by: emaste, dim MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D52534 (cherry picked from commit 34a006eaa39ceb6b0a96fa386c9b9b8a44681979) (cherry picked from commit ca149d75e9bd6455abc3c74e7db160464cfabbdb) M contrib/llvm-project/libcxx/include/__memory/uninitialized_algorithms.h ____________________________________________________________________________________________________________ Commit: 018c097a4fa7b97132746e07e4e0c21eac180c02 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=018c097a4fa7b97132746e07e4e0c21eac180c02 Author: Alex Richardson (Mon 15 Sep 2025 23:13:46 BST) Committer: Ed Maste (Thu 8 Jan 2026 17:14:06 GMT) libc++: Fix deprecation warnings with latest clang Latest clang has become more strict in diagnosing deprecated decls, so pull in LLVM commit 9feac2cbd0d80927ce9a8b4c3e810d2b81802d55. Original commit message: [libc++] Improve deprecated diagnostic guards. Recent Clang-21 builds improved the deprecated diagnotics. This uncovered missing guards in libc++ internally. Reviewed by: dim MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D52531 (cherry picked from commit 086ce467adec42d58414fdb4d54c2b6819cf0c07) (cherry picked from commit 703c98dc6eeb2b36ec94e138269a221704e55f4c) M contrib/llvm-project/libcxx/include/__functional/binary_function.h M contrib/llvm-project/libcxx/include/__functional/unary_function.h M contrib/llvm-project/libcxx/include/__functional/weak_result_type.h M contrib/llvm-project/libcxx/include/__memory/allocator_traits.h ____________________________________________________________________________________________________________ Commit: 21f206bb330f769afb82d7b6e8f3762478ee74b3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=21f206bb330f769afb82d7b6e8f3762478ee74b3 Author: Alex Richardson (Mon 15 Sep 2025 23:11:39 BST) Committer: Ed Maste (Thu 8 Jan 2026 17:14:05 GMT) libc++: avoid use of deprecated __reference_binds_to_temporary This was removed in upstream libc++ in commit 437ad06f762ab07d89badecdd20627db200b98d3, but as this does not apply cleanly to the current repository, I am applying the equivalent change in a minimally invasive way. This is needed to build with latest clang HEAD as of today. Reviewed by: dim MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D52530 (cherry picked from commit dee76cf2f3dace6290ccab07c2db17355994e70f) (cherry picked from commit e487653fe43434768b533b1d7f360ec448c05b4c) M contrib/llvm-project/libcxx/include/tuple ____________________________________________________________________________________________________________ Commit: e9e97eda0b1b8ab23db532e90b43301b51ab1f4f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e9e97eda0b1b8ab23db532e90b43301b51ab1f4f Author: Alex Richardson (Mon 15 Sep 2025 23:10:07 BST) Committer: Ed Maste (Thu 8 Jan 2026 17:14:05 GMT) libc++: avoid use of deprecated builtin This pulls in LLVM commit accfbd4cb327411ad66c0109ba1841482b871967 to avoid the use of __libcpp_is_trivially_relocatable. This fixes building FreeBSD libc++ with clang HEAD as of today. Original commit message: [libc++] Replace __is_trivially_relocatable by is_trivially_copyable (#124970) The __is_trivially_relocatable builtin has semantics that do not correspond to any current or future notion of trivial relocation. Furthermore, it currently leads to incorrect optimizations for some types on supported compilers: - Clang on Windows where types with non-trivial destructors get incorrectly optimized - AppleClang where types with non-trivial move constructors get incorrectly optimized Until there is an agreed upon and bugfree implementation of what it means to be trivially relocatable, it is safer to simply use trivially copyable instead. This doesn't leave a lot of types behind and is definitely correct. Reviewed by: dim MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D52529 (cherry picked from commit d61c75f634cf52fdef9590601d881f85275eee9a) (cherry picked from commit 29e3479f2d3068a2f3e2dbb578d3fabf6389e5a6) M contrib/llvm-project/libcxx/include/__type_traits/is_trivially_relocatable.h ____________________________________________________________________________________________________________ Commit: 4fc0ae5d6b459156317acc070acbbdc53cda1d6e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4fc0ae5d6b459156317acc070acbbdc53cda1d6e Author: Marian Cingel (Sun 4 Jan 2026 22:15:01 GMT) Committer: Ed Maste (Thu 8 Jan 2026 17:14:05 GMT) share/mk: Remove trailing '/' from debug info directories Signed-off-by: Marian Cingel Reviewed by: emaste Pull request: https://github.com/freebsd/freebsd-src/pull/1947 (cherry picked from commit 7359df79d3affeccf17f12f16c23ba3d4c5e0346) (cherry picked from commit 3e8f7f7c6c015f044f9e65ea8a1f307d449d41b3) M share/mk/bsd.debug.mk ____________________________________________________________________________________________________________ Commit: ac8b22b3732afbc05edec105a438f13b507bbac3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ac8b22b3732afbc05edec105a438f13b507bbac3 Author: Alexander Ziaee (Sun 28 Sep 2025 04:41:33 BST) Committer: Alexander Ziaee (Wed 7 Jan 2026 13:51:51 GMT) mrsas.4: Cleaning + Rewrite SYNOPSIS for consistency + Rewrite HARDWARE for HW Relnotes, and add some stragglers + Correct mdoc grammar, making sysctls aproposable and linking xrefs + Clean up TODO, cannonicalize to CAVEATS, a standard section + Editorial pass, tag SPDX MFC after: 3 days Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D52125 (cherry picked from commit 52eb7e394a7e28e9b08e2096c4a085a384cc1dd0) M share/man/man4/mrsas.4 ____________________________________________________________________________________________________________ Commit: 65cf47bad664f9395f17e698759be50fd8599e27 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=65cf47bad664f9395f17e698759be50fd8599e27 Author: Mark Johnston (Fri 19 Dec 2025 14:11:20 GMT) Committer: Mark Johnston (Wed 7 Jan 2026 13:50:38 GMT) ifconfig: Fix the -L flag when using netlink By default, when ifconfig shows a v6 address derived from a router-advertised prefix, it shows the initial preferred and valid lifetimes. When -L is specified, it is supposed to show the remaining lifetimes, but this was broken in the conversion to netlink. Fix that, and add a regression test which validates ifconfig output before and after a short-lived address expires. Reported by: Franco Fichtner Reviewed by: melifaro, allanjude, Seyed Pouria Mousavizadeh Tehrani Fixes: 4c91a5dfe483 ("ifconfig: make interface and address listing use Netlink as transport") MFC after: 2 weeks Sponsored by: OPNsense Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54294 (cherry picked from commit df6861d755c8f72380ae7fb8df535b27eba8c0be) M sbin/ifconfig/af_inet6.c M tests/sys/netinet6/ndp.sh M tests/sys/netinet6/ra.py ____________________________________________________________________________________________________________ Commit: ee1daae7b9141b771d1d25837642ec93c8791c6c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ee1daae7b9141b771d1d25837642ec93c8791c6c Author: Mark Johnston (Fri 19 Dec 2025 14:11:01 GMT) Committer: Mark Johnston (Wed 7 Jan 2026 13:50:38 GMT) tests: Fix style in ra.py No functional change intended. MFC after: 2 weeks (cherry picked from commit 7080c1b09d72e64f17185e90d7b660175f8fbaba) M tests/sys/netinet6/ra.py ____________________________________________________________________________________________________________ Commit: 5738812be35a26cc1fa1f96d363d2c67bfb85fe0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5738812be35a26cc1fa1f96d363d2c67bfb85fe0 Author: Mark Johnston (Thu 18 Dec 2025 14:17:20 GMT) Committer: Mark Johnston (Wed 7 Jan 2026 13:50:38 GMT) armv8rng: Fix an inverted test in random_rndr_read_one() If we get a random number, the NZCV is set to 0b0000. Then "cset %w1, ne" will test whether Z == 0 and set %w1 to 1 if so. More specifically, "cset %w1, ne" maps to "csinc %w1, wzr, wzr, eq", which stores 0 in %w1 when NZCV == 0b0100 and 1 otherwise. Thus, on a successful read we expect ret != 0, so the loop condition needs to be fixed. In practice this means that we would end up trying to fetch entropy up to ten times in a row. If all attempts are successful, the last will be returned, otherwise no entropy will be returned. Reported by: Kevin Day Reviewed by: andrew Fixes: 9eecef052155 ("Add an Armv8 rndr random number provider") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54259 (cherry picked from commit 93811883500b99f9f1fb4ffd6e764226d37dcfd0) M sys/dev/random/armv8rng.c ____________________________________________________________________________________________________________ Commit: b87f70f695f1ed21e0e7867f0c60778c3737d1a7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b87f70f695f1ed21e0e7867f0c60778c3737d1a7 Author: Mark Johnston (Sun 14 Dec 2025 15:48:27 GMT) Committer: Mark Johnston (Wed 7 Jan 2026 13:50:37 GMT) pfsync: Avoid zeroing the state export union pfsync_state_export() takes a pointer to a union that is in reality a pointer to one of the three state formats (1301, 1400, 1500), and zeros the union. The three formats do not have the same size, so zeroing is wrong when the format isn't that which has the largest size. Refactor a bit so that the zeroing happens at the layer where we know which format we're dealing with. Reported by: CHERI Reviewed by: kp MFC after: 1 week Sponsored by: CHERI Research Centre (EPSRC grant UKRI3001) Differential Revision: https://reviews.freebsd.org/D54163 (cherry picked from commit 796abca7e281f0d4b7f72f48da4f941e1c8b139c) M sys/net/pfvar.h M sys/netpfil/pf/if_pfsync.c M sys/netpfil/pf/pf_ioctl.c ____________________________________________________________________________________________________________ Commit: e08642c98c67d16c68558206a5abc822557bb824 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e08642c98c67d16c68558206a5abc822557bb824 Author: Mark Johnston (Sun 14 Dec 2025 15:47:38 GMT) Committer: Mark Johnston (Wed 7 Jan 2026 13:50:37 GMT) socket: Fix the name of a parameter in a comment Reported by: des Fixes: 0a68f644dca1 ("socket: Split up soreceive_generic()") MFC after: 1 week (cherry picked from commit a0d607957533c7fbefaac5cd81d34c037cc27344) M sys/kern/uipc_socket.c ____________________________________________________________________________________________________________ Commit: 284f29f84ac8a5a3f9f02ef145332af678ccc23f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=284f29f84ac8a5a3f9f02ef145332af678ccc23f Author: Mark Johnston (Sun 14 Dec 2025 15:47:48 GMT) Committer: Mark Johnston (Wed 7 Jan 2026 13:50:37 GMT) netmap: Let memory allocator parameters be settable via loader.conf This is useful when dev.netmap.port_numa_affinity is set to 1. When interfaces attach, they get a memory allocator that is copied from nm_mem. Parameters in nm_mem can be set using sysctls, but this happens after their values are copied. To work around this, we can make it possible to set these memory parameters as tunables. Reviewed by: vmaffione MFC after: 1 week Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D54178 (cherry picked from commit c694122f3cfb7d52b882fa79086d49f45a2c7fd2) M sys/dev/netmap/netmap_mem2.c ____________________________________________________________________________________________________________ Commit: 0957cb17e8a79b94c1e80bf53d57d333c86071c5 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0957cb17e8a79b94c1e80bf53d57d333c86071c5 Author: Olivier Certner (Thu 18 Dec 2025 14:05:11 GMT) Committer: Olivier Certner (Tue 6 Jan 2026 19:24:19 GMT) kern: racct: Remove code unused since %cpu resource computation revamp Reviewed by: emaste, markj Fixes: c72188d85a79 ("racct: Improve handling of the pcpu resource") MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54284 (cherry picked from commit 55ce12672b948c002431851af54843bfc7f50d6f) M sys/kern/kern_racct.c ____________________________________________________________________________________________________________ Commit: 2c3fb4cd509623f9510c62cde81d3e76b441435c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2c3fb4cd509623f9510c62cde81d3e76b441435c Author: Cyril Zhang (Wed 6 Aug 2025 00:20:56 BST) Committer: Olivier Certner (Tue 6 Jan 2026 19:24:14 GMT) racct: Improve handling of the pcpu resource The previous scheme would inflate the CPU consumption of short-lived processes. For containers (e.g., processes, jails), the total pcpu usage was computed as a sum of the pcpu usage of all constituent threads, which makes little sense for a decaying average. Instead, aggregate wallclock time of all on-CPU threads and compute the pcpu resource as a decaying average as the sum. This gives much more reasonable and accurate values in various simple tests. PR: 235556 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235556 ) Reviewed by: markj MFC after: 1 month Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D30878 (cherry picked from commit c72188d85a793c7610208beafb83af544de6e3b7) Changes for this MFC to stable/14: - Removal of process swap out (thread stacks swapped out) was done only in 'main' and stable/15 and prior to the original commit, causing a conflict with a test on P_INMEM. In this MFC, the %CPU is not forced to 0 anymore when P_INMEM is not set (contrary to what ps(1) explicitly does, which we find dubious). The %CPU decay will take care of that in a more accurate manner (for processes that have just been swapped out). - Commit 9530c6f082ada9e6 ("racct: Simplify skipping idle process in the throttling daemon") was MFCed before this one although it occurred after it. Consequently, adding the 'idle' variable in racctd() was removed from this MFC, as the other original commit removes it. M sys/kern/kern_racct.c M sys/sys/proc.h M sys/sys/racct.h ____________________________________________________________________________________________________________ Commit: 3690911c355a85177d534ae19c679d8e5d259f4f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3690911c355a85177d534ae19c679d8e5d259f4f Author: Michael Osipov (Sun 21 Dec 2025 15:53:27 GMT) Committer: Michael Osipov (Tue 6 Jan 2026 19:12:55 GMT) mfi(4): Add subvendor and subdevice for Fujitsu RAID Controller SAS 6Gbit/s 1GB (D3116) This is an OEM card from Fujitsu using an LSI SAS2208 ROC controller shipped with many Fujitsu PRIMERGY servers like RX300 S7. This chip is also recognized by mrsas(4) under the generic name for the controller chip. Controller description: https://www.fujitsu.com/global/products/computing/servers/primergy/blades/connection/cb-pmod-110426.html Reviewed by: ziaee MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54520 (cherry picked from commit 8b210276cde207ca3dc1f7f46d5a6d32e0a1c51d) M share/man/man4/mfi.4 M sys/dev/mfi/mfi_pci.c ____________________________________________________________________________________________________________ Commit: 4e4272024e33d06f0b38a7d93c1c65b779220d13 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4e4272024e33d06f0b38a7d93c1c65b779220d13 Author: Olivier Certner (Tue 2 Dec 2025 14:39:33 GMT) Committer: Olivier Certner (Tue 6 Jan 2026 14:18:11 GMT) jail: Don't define malloc type M_PRISON_RACCT on !RACCT Reviewed by: emaste, jamie MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54271 (cherry picked from commit a8be81456cfeecc66ba3b41eb9a2d3dfea7ebc8c) M sys/kern/kern_jail.c ____________________________________________________________________________________________________________ Commit: db094e82c2f754251eaa1375a79175a20066e3c3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=db094e82c2f754251eaa1375a79175a20066e3c3 Author: Dimitry Andric (Fri 2 Jan 2026 20:29:05 GMT) Committer: Dimitry Andric (Tue 6 Jan 2026 12:30:49 GMT) bsd.sys.mk: suppress another gcc warning for libc++ Similar to base 63d1c3c43690, suppress -Wc++20-extensions for gcc. Otherwise libc++ headers will lead to many -Werror warnings, due to our use of -Wsystem-headers, which is not officially supported upstream. MFC after: 3 days (cherry picked from commit 62a7fdc13ab45b48977424ef77bbc0f11f601e39) M share/mk/bsd.sys.mk ____________________________________________________________________________________________________________ Commit: 36e77eafb4d3eba643759d79f6355f682545917d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=36e77eafb4d3eba643759d79f6355f682545917d Author: Cy Schubert (Fri 19 Dec 2025 04:59:38 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:01:02 GMT) ntp: Fix buildworld with MK_OPENSSL=no Reported by: wosch Tested by: wosch (cherry picked from commit 2804461adfc670c78c1dcb9cab6b2191c8d486ec) M usr.sbin/ntp/Makefile.inc M usr.sbin/ntp/config.h ____________________________________________________________________________________________________________ Commit: 639afa4b441909f6d8fab53080730f17c6c126cc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=639afa4b441909f6d8fab53080730f17c6c126cc Author: Warner Losh (Thu 27 Nov 2025 00:04:29 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:01:01 GMT) ipfilter: fix broken build Every commit earns me a dozen emails that LINT is broken. This should stop that. Fixes: eda1756d0454f ipfilter: Verify frentry on entry into kernel Sponsored by: Netflix (cherry picked from commit ddec4209b10d65ef19e1d1b884e1b876eab58c7d) M sys/netpfil/ipfilter/netinet/fil.c M sys/netpfil/ipfilter/netinet/ip_nat.c ____________________________________________________________________________________________________________ Commit: a23b64b46cb1e9885073ef6086769584b69f56bf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a23b64b46cb1e9885073ef6086769584b69f56bf Author: Cy Schubert (Mon 15 Dec 2025 16:21:56 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:01:01 GMT) ipfilter: Add missing kenv fetch When a module the environment must be explicitly fetched. Fixes: d9788eabffa4 PR: 291548 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291548 ) Noted by: markj Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D54242 MFC after: 3 days (cherry picked from commit a6ea80bc917510b5e056cc5a29b62dfd7b39d068) M sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c ____________________________________________________________________________________________________________ Commit: a85c3ef7d80161da04241d275da804644cdc5347 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a85c3ef7d80161da04241d275da804644cdc5347 Author: Cy Schubert (Sun 16 Nov 2025 07:39:19 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:01:01 GMT) ipfilter: Disable ipfs(8) by default At the moment ipfs(8) is a tool that can be easily abused. Though the concept is sound the implementation needs some work. ipfs(8) should be considered experimental at the moment. This commit also makes ipfs support in the kernel optional. Reviewed by: emaste, glebius MFC after: 1 week Differential revision: https://reviews.freebsd.org/D53787 (cherry picked from commit 0ff0c19e7f70bc4d3f98196a8ad43de635cf13e5) M sbin/ipf/Makefile M share/mk/src.opts.mk M sys/conf/NOTES M sys/conf/options M sys/modules/ipfilter/Makefile M sys/netpfil/ipfilter/netinet/ip_nat.c M sys/netpfil/ipfilter/netinet/ip_state.c M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 616571ca7727be103247d4443fcfc89f7f5ba915 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=616571ca7727be103247d4443fcfc89f7f5ba915 Author: Cy Schubert (Wed 29 Oct 2025 18:29:39 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:00:59 GMT) ipfilter: Restrict ipfilter within a jail Add a sysctl/tunable (net.inet.ipf.jail_allowed) to control whether a jail can manage its own ipfilter rules, pools, and settings. A jail's control over its own ipfilter rules and settings may not be desireable. The default is jail access to ipfilter is denied. The host system can stil manage a jail's rules by attaching the rules, using the on keyword, limiting the rule to the jail's interface. Or the sysctl/tunable can be enabled to allow a jail control over its own ipfilter rules and settings. Implementation note: Rather than store the jail_allowed variable, referenced by sysctl(9), in a global area, storing the variable in the ipfilter softc is consistent with ipfilter's use of its softc. Discussed with: emaste, jrm MFC after: 1 week Differential revision: https://reviews.freebsd.org/D53623 (cherry picked from commit d9788eabffa4b67fc534685fc3d9b8e3334af196) M sbin/ipf/libipf/interror.c M sys/netpfil/ipfilter/netinet/fil.c M sys/netpfil/ipfilter/netinet/ip_fil.h M sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c M sys/netpfil/ipfilter/netinet/mlfk_ipl.c ____________________________________________________________________________________________________________ Commit: af32b767e10310d06706724fc6ea9ae3a711be47 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=af32b767e10310d06706724fc6ea9ae3a711be47 Author: Cy Schubert (Wed 26 Nov 2025 23:39:24 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:00:58 GMT) ipfilter: Restore used variable One of the "unused" i variables is actually used. Fixes: 20c48f090b27 (cherry picked from commit 78c6cfdc3dc0b84aa2daf0f32c7c9cdf3b34fee5) M sys/netpfil/ipfilter/netinet/fil.c ____________________________________________________________________________________________________________ Commit: dfab913f72a9257f146c64f5cacc3474690cfc2e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=dfab913f72a9257f146c64f5cacc3474690cfc2e Author: Cy Schubert (Wed 26 Nov 2025 23:24:17 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:00:57 GMT) ipfilter: Remove unused variable Reported by: jlduran Fixes: eda1756d0454, 821774dfbdaa MFC after: 1 week X-MFC with: eda1756d0454, 821774dfbdaa (cherry picked from commit 20c48f090b270d0124d5f0b31c6f3a639efbbc80) M sys/netpfil/ipfilter/netinet/fil.c M sys/netpfil/ipfilter/netinet/ip_nat.c ____________________________________________________________________________________________________________ Commit: b94fbf89ef715a1caaba27311e165a43b0a49f67 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b94fbf89ef715a1caaba27311e165a43b0a49f67 Author: Cy Schubert (Mon 3 Nov 2025 04:59:15 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:00:55 GMT) ipfilter: Verify ipnat on entry into kernel The ipnat struct is built by ipnat(8), specifically ipnat_y.y when parsing the ipnat configuration file (typically ipnat.conf). ipnat contains a variable length string field at the end of the struct. This data field, called in_names, may contain various text strings such as NIC names. There is no upper bound limit to the length of strings as long as the in_namelen length field specifies the length of in_names within the ipnat structure and in_size specifies the size of the ipnat structure itself. Reported by: Ilja Van Sprundel Reviewed by: markj MFC after: 1 week Differential revision: https://reviews.freebsd.org/D53843 (cherry picked from commit 821774dfbdaa12ef072ff7eaea8f9966a7e63935) M sbin/ipf/libipf/interror.c M sys/netpfil/ipfilter/netinet/ip_nat.c ____________________________________________________________________________________________________________ Commit: 53978114bcf89f5f1fc8a2722c42e3347c24bb6b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=53978114bcf89f5f1fc8a2722c42e3347c24bb6b Author: Cy Schubert (Wed 29 Oct 2025 17:23:23 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:00:53 GMT) ipfilter: Verify frentry on entry into kernel The frentry struct is built by ipf(8), specifically ipf_y.y when parsing the ipfilter configuration file (typically ipf.conf). frentry contains a variable length string field at the end of the struct. This data field, called fr_names, may contain various text strings such as NIC names, destination list (dstlist) names, and filter rule comments. The length field specifies the length of fr_names within the frentry structure and fr_size specifies the size of the frentry structure itself. The upper bound limit to the length of strings field is controlled by the fr_max_namelen sysctl/kenv or the max_namelen ipfilter tuneable. The initial concepts were discussed with emaste and jrm. Reported by: Ilja Van Sprundel Reviewed by: markj MFC after: 1 week Differential revision: https://reviews.freebsd.org/D53843 (cherry picked from commit eda1756d0454f9383940dc825cf571ff67e0c013) M sbin/ipf/libipf/interror.c M sys/netpfil/ipfilter/netinet/fil.c M sys/netpfil/ipfilter/netinet/ip_fil.h M sys/netpfil/ipfilter/netinet/mlfk_ipl.c ____________________________________________________________________________________________________________ Commit: 9ac25e9b5b31fb03f090e157166b05d2d501a8f0 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9ac25e9b5b31fb03f090e157166b05d2d501a8f0 Author: Cy Schubert (Tue 18 Nov 2025 19:23:06 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:00:53 GMT) ipfilter: Add ipf_check_names_string() ipf_check_names_string will verify userland inputs in names strings (fr.fr_names, in.in_names) for correctness. Original concept of ipf_check_names_string() instead of macros by markj. Reviewed by: markj MFC after: 1 week Differential revision: https://reviews.freebsd.org/D53843 (cherry picked from commit 525c535d5aa87f686dcfee620619827f7c6090db) M sys/netpfil/ipfilter/netinet/fil.c M sys/netpfil/ipfilter/netinet/ip_fil.h ____________________________________________________________________________________________________________ Commit: b2f4c3b36c2c60ba77ad1536cbe1c115bfcf3af1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b2f4c3b36c2c60ba77ad1536cbe1c115bfcf3af1 Author: Cy Schubert (Tue 28 Oct 2025 03:43:14 GMT) Committer: Cy Schubert (Mon 5 Jan 2026 20:00:52 GMT) ipfs: Fix typo in error message MFC after: 3 days (cherry picked from commit 5ae7b106cfd4801ef5e0f69b02ad9b3ae3ccfbec) M sbin/ipf/ipfs/ipfs.c ____________________________________________________________________________________________________________ Commit: f1081a8c5741cb68860dba6cb10eb3448e4c1d21 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f1081a8c5741cb68860dba6cb10eb3448e4c1d21 Author: Ed Maste (Sun 28 Dec 2025 15:52:13 GMT) Committer: Ed Maste (Mon 5 Jan 2026 16:25:27 GMT) vt: Remove .fnt.uu from Makefile SUFFIXES The uudecode make rule was removed years ago. Fixes: 68510f3bac15 ("Remove uudecode make rule for vt fonts") (cherry picked from commit c910c7a3d224764adf53581cc097cefb6f963502) (cherry picked from commit ad4cfaafb83343dc77a77cfe8768fe4e02a1a304) M share/vt/fonts/Makefile ____________________________________________________________________________________________________________ Commit: 408cd2fff86176513c69e880d7515af11f980cb7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=408cd2fff86176513c69e880d7515af11f980cb7 Author: Ed Maste (Fri 28 Nov 2025 21:25:26 GMT) Committer: Ed Maste (Mon 5 Jan 2026 16:25:27 GMT) linux: Add required symbol to EXPORT_SYMS list PR: 291270 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291270 ) (cherry picked from commit 3e2093de47251de5e6e61c08d2955251137afd01) (cherry picked from commit 4c318cb3320d9aedd17a2e3c07ff5c69225a29eb) M sys/modules/linux/Makefile M sys/modules/linux_common/Makefile ____________________________________________________________________________________________________________ Commit: 94f54c6930657578512cecf8713b0c65f2dc4138 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=94f54c6930657578512cecf8713b0c65f2dc4138 Author: Ed Maste (Thu 20 Nov 2025 16:41:38 GMT) Committer: Ed Maste (Mon 5 Jan 2026 16:25:27 GMT) mgb.4, muge.4: Use standard HARDWARE introduction Release notes are generated using this text. I used "interfaces" not "adapters" in these pages as the listed devices are the controller ICs, not end-user projects. Reviewed by: ziaee Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D53846 (cherry picked from commit a4aa7df767e0df49ca3294d2b578be25812364d8) (cherry picked from commit 11c5b906fcac36e1b8749e9ef2f65ed8ad9812f9) M share/man/man4/mgb.4 M share/man/man4/muge.4 ____________________________________________________________________________________________________________ Commit: 012736a2a882eb20797083361df519cf10438f42 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=012736a2a882eb20797083361df519cf10438f42 Author: Ed Maste (Thu 2 Oct 2025 15:39:43 BST) Committer: Ed Maste (Mon 5 Jan 2026 16:25:27 GMT) Cirrus-CI: Switch back to tzst packages, but use level 1 We previously used `PKG_FORMAT: tar` to avoid spending a lot of time in zstd compression. Instead just set PKG_LEVEL to compression level 1, which still produces packages that are much smaller than uncompressed tarballs with only a small penalty in build time. Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D52858 (cherry picked from commit ae5914c0e4478fd35ef9db3f32665b60e04d5a6f) (cherry picked from commit ba89a061d0bae42c4367bc5408b8c51fd63a2715) M .cirrus.yml ____________________________________________________________________________________________________________ Commit: be9dcb2d15252f4a3e91ecf3049e703841adf2d7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=be9dcb2d15252f4a3e91ecf3049e703841adf2d7 Author: Ed Maste (Thu 2 Oct 2025 15:39:11 BST) Committer: Ed Maste (Mon 5 Jan 2026 16:25:27 GMT) Cirrus-CI: Build packages in parallel Reviewed by: ivy Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D52857 (cherry picked from commit e2796f0359afad522113c25d720fa30677a044ab) (cherry picked from commit 2ef79b0524b516792f1ebb1c623999ef2ec06408) M .cirrus.yml ____________________________________________________________________________________________________________ Commit: 76df3f6f3680556c777e2e13565c9e217c12d5b1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=76df3f6f3680556c777e2e13565c9e217c12d5b1 Author: Johan Söllvander (Thu 18 Dec 2025 15:06:09 GMT) Committer: Johan Söllvander (Mon 5 Jan 2026 14:47:18 GMT) gpart: add libxo support for "show" subcommand + man page updates Added libxo support to `gpart show`, also updated the man pages for geom and gpart to show where you can expect libxo formatted output. PR: 290629 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290629 ) Sponsored by: ConnectWise Reviewed by: asomers, mckusick, phil Approved by: asomers (mentor) Differential Revision: https://reviews.freebsd.org/D53950 (cherry picked from commit 4f809ffec69cd6ede3e7be9a5bc876b2e5931028) geom_part: Fix format string issues This fixes a segfault on i386 and armv7 and numerous style violations. PR: 292008 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292008 ) Fixes: 4f809ffec69c ("gpart: add libxo support for "show" subcommand + man page updates") Reviewed by: js Differential Revision: https://reviews.freebsd.org/D54393 (cherry picked from commit faff7013187b03f4240af6f52f608e7ebafe19f3) M lib/geom/part/Makefile M lib/geom/part/geom_part.c M lib/geom/part/gpart.8 M sbin/geom/core/geom.8 ____________________________________________________________________________________________________________ Commit: a5c6c95631195181bd3707d96ab79184235df6a6 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a5c6c95631195181bd3707d96ab79184235df6a6 Author: Robert Clausecker (Thu 18 Dec 2025 23:37:33 GMT) Committer: Robert Clausecker (Sun 4 Jan 2026 13:25:33 GMT) libc/amd64: fix stpncpy.S again The previous fix introduced a regression on machines without the BMI1 instruction set extension. The TZCNT instruction used in this function behaves different on old machines when the source operand is zero, but the code was originally designed to never trigger this case. The bug fix caused this case to be possible, leading to a regression on sufficiently old hardware. Fix the code by messing with things such that the source operand is never zero. PR: 291720 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291720 ) Fixes: 66eb78377bf109af1d9e25626bf254b4369436ec Tested by: cy Approved by: markj (mentor) Differential Revision: https://reviews.freebsd.org/D54303 (cherry picked from commit 2f83319214d9adb8ab7a77e35d1014658b3f9cae) M lib/libc/amd64/string/stpncpy.S ____________________________________________________________________________________________________________ Commit: 793877e7667ce667cdf3539de68af78fb511c06f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=793877e7667ce667cdf3539de68af78fb511c06f Author: Dag-Erling Smørgrav (Tue 16 Dec 2025 19:04:51 GMT) Committer: Robert Clausecker (Sun 4 Jan 2026 13:25:33 GMT) libc/amd64: Disable baseline version of stpncpy() This implementation appears to be broken on some CPUs. Disable it until the issue can be investigated and fixed. PR: 291720 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291720 ) Fixes: 66eb78377bf1 ("libc/amd64: fix overread conditions in stpncpy()") Fixes: 90253d49db09 ("lib/libc/amd64/string: add stpncpy scalar, baseline implementation") (cherry picked from commit ce9557d4ee174267504a63b2c8f6009be27368c9) M lib/libc/amd64/string/stpncpy.S ____________________________________________________________________________________________________________ Commit: b0dc25c6d378fbab41f86e494d4e7fcbadeb1b74 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b0dc25c6d378fbab41f86e494d4e7fcbadeb1b74 Author: Robert Clausecker (Wed 10 Dec 2025 20:45:18 GMT) Committer: Robert Clausecker (Sun 4 Jan 2026 13:25:33 GMT) libc/amd64: fix overread conditions in stpncpy() Due to incorrect unit test design, two overread conditions went undetected in the amd64 baseline stpncpy() implementation. For buffers of 1--16 and 32 bytes that do not contain nul bytes and end exactly at a page boundary, the code would incorrectly read 16 bytes from the next page, possibly crossing into an unmapped page and crashing the program. If the next page was mapped, the code would then proceed with the expected behaviour of the stpncpy() function. Three changes were made to fix the bug: - an off-by-one error is fixed in the code deciding whether to enter the runt case or not, entering it for 0 Reviewed by: getz Approved by: markj (mentor) MFC after: 1 week Fixes: 90253d49db09a9b1490c448d05314f3e4bbfa468 (D42519) Differential Revision: https://reviews.freebsd.org/D54170 (cherry picked from commit 66eb78377bf109af1d9e25626bf254b4369436ec) M lib/libc/amd64/string/stpncpy.S ____________________________________________________________________________________________________________ Commit: e2f095779323204e90843b405863c81dc02423d2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=e2f095779323204e90843b405863c81dc02423d2 Author: Robert Clausecker (Thu 4 Dec 2025 16:34:59 GMT) Committer: Robert Clausecker (Sun 4 Jan 2026 13:25:21 GMT) libc/tests/string: improve stpncpy() "bounds" unit test The test is extended the same way I previously extended the memccpy() test to fix what is probably the same kind of bug. PR: 291359 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291359 ) Reported by: Collin Funk Reviewed by: ngie Approved by: markj (mentor) Fixes: 6fa9e7d8737548ef93c573387ce62402c368d486 (D42519) See also: 61ed5748e4e9c7397fcb2638b442f46ac5c9e7c5 (D46051) MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D54169 lib/libc/tests/string/stpncpy_test.c: apply ngie's fixes (cherry picked from commit 123c086200491819595abc271d360e605288fd18) (cherry picked from commit 8be8642826099368208efb2c1222f2a102cc5b08) M lib/libc/tests/string/stpncpy_test.c ____________________________________________________________________________________________________________ Commit: b35e955333efdd97a3a369740d2b2038fb86826c URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=b35e955333efdd97a3a369740d2b2038fb86826c Author: Roman Bogorodskiy (Fri 5 Dec 2025 18:45:03 GMT) Committer: Roman Bogorodskiy (Sun 4 Jan 2026 10:24:47 GMT) bhyvectl: improve options error handling Currently, it is possible to execute bhyvectl(8) with mutually exclusive options, such as "--destroy" and "--suspend", and it will print out obscure errors, e.g.: bhyvectl --suspend=/var/run/vms/my_vm --destroy --vm my_vm connect() failed: Connection refused Address that by failing early if mutually exclusive options were specified. Additionally, move the BHYVE_SNAPSHOT block before the errors are printed, so its errors are also displayed. Approved by: markj Sponsored by: The FreeBSD Foundation MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D54092 (cherry picked from commit 148111d3775eb159d71a36e3a8b4c5c1bf53392c) M usr.sbin/bhyvectl/bhyvectl.c ____________________________________________________________________________________________________________ Commit: 3f649d1edfbea6caccd3270fe0071875adb9651a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3f649d1edfbea6caccd3270fe0071875adb9651a Author: Roman Bogorodskiy (Fri 5 Dec 2025 17:16:29 GMT) Committer: Roman Bogorodskiy (Sun 4 Jan 2026 10:24:47 GMT) bhyve: change suspend exit code Currently, after suspending, bhyve(8) exits with 0. This code is also used to indicate that a VM was rebooted. To differentiate reboot and suspend, use the next available exit code, 5, for suspend. Approved by: markj Sponsored by: The FreeBSD Foundation MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D54087 (cherry picked from commit 611bbb190ff593e0e424e311575d7e978e623659) M usr.sbin/bhyve/bhyve.8 M usr.sbin/bhyve/snapshot.c ____________________________________________________________________________________________________________ Commit: 21961607e631a9c00a6a8aa1a20d3b2034f834ae URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=21961607e631a9c00a6a8aa1a20d3b2034f834ae Author: Alex Richardson (Tue 16 Sep 2025 05:54:36 BST) Committer: Dimitry Andric (Sun 4 Jan 2026 01:46:52 GMT) sys/xen: Use __printflike() instead of format(printf) The __printflike macro sets the format to freebsd_kprintf which recent clang understands and warns about. Fixes the following error: `passing 'printf' format string where 'freebsd_kprintf' format string is expected [-Werror,-Wformat]` MFC after: 1 week (cherry picked from commit 4cd7be3e81863bd22aacccc34fc2e8b2cfcb14d9) M sys/dev/xen/blkback/blkback.c M sys/xen/xen_intr.h M sys/xen/xenbus/xenbusvar.h M sys/xen/xenstore/xenstorevar.h ____________________________________________________________________________________________________________ Commit: 108270f4c03d4d39815c587627e650e558e22d2e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=108270f4c03d4d39815c587627e650e558e22d2e Author: Alex Richardson (Tue 16 Sep 2025 05:58:36 BST) Committer: Dimitry Andric (Sun 4 Jan 2026 01:46:37 GMT) ocs_fc: Use __printflike() instead of format(printf) The __printflike macro sets the format to freebsd_kprintf which recent clang understands and warns about. Fixes the following error: `passing 'printf' format string where 'freebsd_kprintf' format string is expected [-Werror,-Wformat]` MFC after: 1 week (cherry picked from commit 3c0ea1b629764c49611e3e3adfa0c44f9afa3558) M sys/dev/ocs_fc/ocs_ddump.h M sys/dev/ocs_fc/ocs_mgmt.h M sys/dev/ocs_fc/ocs_os.h M sys/dev/ocs_fc/ocs_utils.h ____________________________________________________________________________________________________________ Commit: 1a0377015e78f6ed4b444133a8b5139a18737f42 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1a0377015e78f6ed4b444133a8b5139a18737f42 Author: Dimitry Andric (Tue 30 Dec 2025 12:50:24 GMT) Committer: Dimitry Andric (Fri 2 Jan 2026 20:45:08 GMT) zfs: rename several printf attribute declarations to __printf__ For kernel builds, we redefine `__printf__` to `__freebsd_kprintf__`, to support FreeBSD kernel printf(9) extensions with clang. In OpenZFS various printf related functions are declared with __attribute__((format(printf, X, Y))), so these won't work with the above redefinition. With clang 21 and higher, this leads to errors similar to: sys/contrib/openzfs/module/zfs/spa_misc.c:414:38: error: passing 'printf' format string where 'freebsd_kprintf' format string is expected [-Werror,-Wformat] 414 | (void) vsnprintf(buf, sizeof (buf), fmt, adx); | ^ Since attribute names can always be spelled with leading and trailing double underscores, rename these instances. Note that in FreeBSD proper we usually use `__printflike` from , but that does not apply to OpenZFS. Reviewed by: emaste MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54388 (cherry picked from commit bcd9ea853b14c85a61eb9079c59e966eed336578) M sys/contrib/openzfs/include/os/freebsd/spl/sys/cmn_err.h M sys/contrib/openzfs/include/os/freebsd/spl/sys/kmem.h M sys/contrib/openzfs/include/sys/spa.h M sys/contrib/openzfs/include/sys/vdev.h M sys/contrib/openzfs/include/sys/zfs_debug.h ____________________________________________________________________________________________________________ Commit: 752d056fce33052d482eeb24756497fc44dac579 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=752d056fce33052d482eeb24756497fc44dac579 Author: Dimitry Andric (Tue 30 Dec 2025 12:46:20 GMT) Committer: Dimitry Andric (Fri 2 Jan 2026 20:44:59 GMT) crypto: avoid warnings about too-long initializer strings Mark `sigma` and `tau` as `__non_string`, to avoid warnings from clang 21 similar to: sys/crypto/chacha20/chacha.c:53:31: error: initializer-string for character array is too long, array size is 16 but initializer has size 17 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 53 | static const char sigma[16] = "expand 32-byte k"; | ^~~~~~~~~~~~~~~~~~ sys/crypto/chacha20/chacha.c:54:29: error: initializer-string for character array is too long, array size is 16 but initializer has size 17 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 54 | static const char tau[16] = "expand 16-byte k"; | ^~~~~~~~~~~~~~~~~~ MFC after: 3 days Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D54364 (cherry picked from commit 710ec409dffed3306ced253bba85dbdc7758510b) M sys/crypto/chacha20/chacha.c ____________________________________________________________________________________________________________ Commit: a7805f3341705323f80c579173777f947bd8aae3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a7805f3341705323f80c579173777f947bd8aae3 Author: Dimitry Andric (Tue 30 Dec 2025 12:48:07 GMT) Committer: Dimitry Andric (Fri 2 Jan 2026 20:44:54 GMT) ncurses: avoid warnings about too-long initializer strings Increase the size of `assoc::from` to 8 bytes, to avoid warnings from clang 21 similar to: contrib/ncurses/progs/infocmp.c:702:10: error: initializer-string for character array is too long, array size is 4 but initializer has size 5 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 702 | DATA("\033[2J", "ED2"), /* clear page */ | ^~~~~~~~~ contrib/ncurses/progs/infocmp.c:716:10: error: initializer-string for character array is too long, array size is 4 but initializer has size 5 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 716 | DATA("\033[!p", "DECSTR"), /* soft reset */ | ^~~~~~~~~ Reviewed by: markj Obtained from: https://invisible-island.net/archives/ncurses/6.5/ncurses-6.5-20241207.patch.gz MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54371 (cherry picked from commit 667259b392ec0a86d066ccc6ba0f4025b3d2a083) M contrib/ncurses/progs/infocmp.c ____________________________________________________________________________________________________________ Commit: 0c5ac3e46e789133a90e874b3e54e4fa9a2e665b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0c5ac3e46e789133a90e874b3e54e4fa9a2e665b Author: Kyle Evans (Sun 28 Dec 2025 22:02:04 GMT) Committer: Dimitry Andric (Fri 2 Jan 2026 20:44:39 GMT) compat: linux: use appropriate variables for copying out old timers We copyout &l_oval but do the conversions into &l_val, leaving us with stack garbage. A build with an LLVM21 cross-toolchain seems to catch this. Reported by: Florian Limberger Reviewed by: markj Fixes: a1fd2911ddb06 ("linux(4): Implement timer_settime64 syscall.") MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D52985 (cherry picked from commit 541a98d7e28a8e4697ac2fa78dd4c4203c2c3a9c) M sys/compat/linux/linux_timer.c ____________________________________________________________________________________________________________ Commit: c645b2f41833063795f470e393c2b0f0961b1134 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c645b2f41833063795f470e393c2b0f0961b1134 Author: Dimitry Andric (Thu 25 Dec 2025 18:44:34 GMT) Committer: Dimitry Andric (Fri 2 Jan 2026 20:44:34 GMT) bsd.sys.mk: suppress some new clang 21 warnings for C++ Otherwise, these lead to many -Werror warnings in libc++ headers, due to our use of -Wsystem-headers, which is not officially supported upstream: Suppress -Wc++20-extensions, due to: /usr/include/c++/v1/__algorithm/simd_utils.h:96:50: error: explicit template parameter list for lambdas is a C++20 extension [-Werror,-Wc++20-extensions] 96 | inline constexpr size_t __simd_vector_size_v = []() -> size_t { | ^ Suppress -Wc++23-lambda-attributes, due to: /usr/include/c++/v1/__format/format_functions.h:462:32: error: an attribute specifier sequence in this position is a C++23 extension [-Werror,-Wc++23-lambda-attributes] 462 | if (bool __is_identity = [&] [[__gnu__::__pure__]] // Make sure the compiler knows this call can be eliminated | ^ Suppress -Wnullability-completeness, due to: /usr/include/c++/v1/string:1068:80: error: pointer is missing a nullability type specifier (_Nonnull, _Nullable, or _Null_unspecified) [-Werror,-Wnullability-completeness] 1068 | _LIBCPP_HIDE_FROM_ABI _LIBCPP_CONSTEXPR_SINCE_CXX20 basic_string(const _CharT* __s, size_type __n) { | ^ MFC after: 3 days (cherry picked from commit 63d1c3c43690ff3c3e76e1fb03c8640fe30a2663) M share/mk/bsd.sys.mk ____________________________________________________________________________________________________________ Commit: 3cd0026966d0174c7143ac1d8233ed81ffa68ddf URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=3cd0026966d0174c7143ac1d8233ed81ffa68ddf Author: Dimitry Andric (Thu 25 Dec 2025 20:13:48 GMT) Committer: Dimitry Andric (Fri 2 Jan 2026 20:44:28 GMT) sh: avoid warnings about too-long initializer strings Mark `optletter` and `t_op::op_text` as `__non_string`, to avoid warnings from clang 21 similar to: bin/sh/options.h:77:36: error: initializer-string for character array is too long, array size is 19 but initializer has size 20 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 77 | const char optletter[NSHORTOPTS] = "efIimnsxvVECabupTPh"; | ^~~~~~~~~~~~~~~~~~~~~ bin/test/test.c:153:3: error: initializer-string for character array is too long, array size is 2 but initializer has size 3 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 153 | {"==", STREQ}, | ^~~~ MFC after: 3 days Reviewed by: jilles Differential Revision: https://reviews.freebsd.org/D54362 (cherry picked from commit e6546807f4c1a8a6a6fa53fceab7b8c80e3ed802) M bin/sh/options.h M bin/test/test.c ____________________________________________________________________________________________________________ Commit: 41626383b651d4229197c2f439d5ff940da025c3 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=41626383b651d4229197c2f439d5ff940da025c3 Author: Dimitry Andric (Wed 24 Dec 2025 15:52:48 GMT) Committer: Dimitry Andric (Fri 2 Jan 2026 20:44:21 GMT) OptionalObsoleteFiles.inc: fix up WITH_LLVM_LINK_STATIC_LIBRARIES cases In commit cf1eaaf41cef I added the WITH_LLVM_LINK_STATIC_LIBRARIES src.conf(5) build knob, which also affects OptionalObsoleteFiles.inc. However, the checks were incorrect: when WITH_LLVM_LINK_STATIC_LIBRARIES is active, the OLD_LIBS libprivatellvm.so.19, libprivateclang.so.19 and libprivatelldb.so.19 should always be cleaned up. Fixes: cf1eaaf41cef MFC after: 1 week (cherry picked from commit 160077a4d75186a979f28f0778259c66d8cac8be) M tools/build/mk/OptionalObsoleteFiles.inc ____________________________________________________________________________________________________________ Commit: 908ca4f6af8a95d6c6ae65caed4371f96afb6409 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=908ca4f6af8a95d6c6ae65caed4371f96afb6409 Author: Dimitry Andric (Wed 18 Jun 2025 11:06:25 BST) Committer: Dimitry Andric (Fri 2 Jan 2026 20:44:10 GMT) src.conf: Add WITH_LLVM_LINK_STATIC_LIBRARIES build knob In commit 2e47f35be5dc libllvm, libclang and liblldb were converted into private shared libraries. This allowed clang, lld, lldb, and other llvm tools to be linked against these shared libraries, which makes them smaller and avoids duplication. However, this also comes at the cost of some performance, since the dynamic libraries are quite large, and contain lots of long symbols (mangled C++ identifiers). Add a WITH_LLVM_LINK_STATIC_LIBRARIES build knob that can be used to go back to the previous behavior: libllvm, libclang and liblldb are built as internal static libraries, i.e. only available during buildworld, and fully linked into the various executables such as clang, lld, etc. PR: 287447 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287447 ) Reviewed by: emaste MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D50956 (cherry picked from commit 8d5a11cd0137d3ad70f6b06e063ea91a776d510a) M lib/clang/libclang/Makefile M lib/clang/liblldb/Makefile M lib/clang/libllvm/Makefile M share/man/man5/src.conf.5 M share/mk/src.opts.mk M tools/build/mk/OptionalObsoleteFiles.inc A tools/build/options/WITH_LLVM_LINK_STATIC_LIBRARIES M usr.bin/clang/Makefile.inc M usr.bin/clang/clang.prog.mk M usr.bin/clang/lld/Makefile M usr.bin/clang/lldb-server/Makefile M usr.bin/clang/lldb/Makefile M usr.bin/clang/llvm.prog.mk ____________________________________________________________________________________________________________ Commit: 186ac4724746b50acfa43e148ca99991aa1dbe9e URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=186ac4724746b50acfa43e148ca99991aa1dbe9e Author: Eugene Grosbein (Sun 28 Dec 2025 17:47:08 GMT) Committer: Eugene Grosbein (Fri 2 Jan 2026 19:33:50 GMT) MFC: ipfw.8: document how to delete nat configuration instance (cherry picked from commit e51047118cb1d15abe8077a5b47b8063fa364ad9) M sbin/ipfw/ipfw.8 ____________________________________________________________________________________________________________ Commit: a3559f398824e3e7b7d102f4483610881119ff47 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=a3559f398824e3e7b7d102f4483610881119ff47 Author: Eugene Grosbein (Sun 28 Dec 2025 17:05:22 GMT) Committer: Eugene Grosbein (Fri 2 Jan 2026 19:20:54 GMT) ipfw.8: fix documentation bug for setmark A mark set with "setmark" keyword is intended to be "sticky" and documented as such but in fact it is not yet, as current implementation lacks "sticky" feature and its implementation will be not MFC'd, most probably. Correct the manual page until the implementation improved. Discussed with: Boris Lytochkin (author) (cherry picked from commit a7b8a5d37bcb0009297962137bfb6c6570e5af12) (cherry picked from commit 9fdf49e8a501047b61a615ab1b4b133159ad76e1) M sbin/ipfw/ipfw.8 ____________________________________________________________________________________________________________ Commit: 74c8530c214cbc6eb01af00f12aa1d204c65ab26 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=74c8530c214cbc6eb01af00f12aa1d204c65ab26 Author: Alexander Ziaee (Tue 23 Dec 2025 13:36:49 GMT) Committer: Alexander Ziaee (Thu 1 Jan 2026 19:05:58 GMT) camcontrol.8: Descriptions before examples This page has a lot of examples, so having them in the previous order can be confusing. Rewrite to the normal order where the descriptions come before the command, followed by a colon, which is still clear even jumping to the middle of the section. PR: 291759 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291759 ) MFC after: 3 days Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D54285 (cherry picked from commit fbc321b9cdceecd3c97742868da5d500423cf484) M sbin/camcontrol/camcontrol.8 ____________________________________________________________________________________________________________ Commit: 063714951ad0e8407f39095f36de6be62a5fe07b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=063714951ad0e8407f39095f36de6be62a5fe07b Author: Yan-Hao Wang (Mon 29 Dec 2025 20:13:16 GMT) Committer: Alexander Ziaee (Thu 1 Jan 2026 19:05:28 GMT) kyua manuals: Correct --results-file short form PR: 290647 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290647 ) Ref: kyua/cli/common.cpp#104 MFC after: 3 days Reviewed by: ziaee Closes: https://github.com/freebsd/kyua/issues/267 (cherry picked from commit bbaa7d628175ee484e31a054fb3cf7b7866cad13) M contrib/kyua/doc/kyua-db-exec.1.in M contrib/kyua/doc/kyua-db-migrate.1.in M contrib/kyua/doc/kyua-report-html.1.in M contrib/kyua/doc/kyua-report-junit.1.in M contrib/kyua/doc/kyua-report.1.in M contrib/kyua/doc/kyua-test.1.in ____________________________________________________________________________________________________________ Commit: 7fa86256aaca948671c38f462e9ef4692799d8fc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=7fa86256aaca948671c38f462e9ef4692799d8fc Author: Felix Johnson (Mon 29 Dec 2025 19:21:26 GMT) Committer: Alexander Ziaee (Thu 1 Jan 2026 19:04:30 GMT) ioctl.2: Mention EACCES ioctls can fail with EACCES, see sys/kern/tty.c PR: 239504 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=239504 ) MFC after: 3 days Reviewed by: ziaee Reported by: Brennan Vincent Differential Revision: https://reviews.freebsd.org/D49072 (cherry picked from commit e2afbc45258f2fa4bdcf126e959ac660e76fc802) M lib/libc/sys/ioctl.2 ____________________________________________________________________________________________________________ Commit: 47db87fe8398d975e6bd8634eb8104ad0c001743 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=47db87fe8398d975e6bd8634eb8104ad0c001743 Author: Ed Maste (Sun 28 Dec 2025 00:52:17 GMT) Committer: Alexander Ziaee (Thu 1 Jan 2026 18:39:29 GMT) vt.4: Remove Xr to nonexistent vidcontrol(8) PR: 291985 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291985 ) Fixes: a8740ba860bf ("vt.4: Document increasing scrollback size") (cherry picked from commit f22cffe43343d9d48c731952d94976c5deb9659e) M share/man/man4/vt.4 ____________________________________________________________________________________________________________ Commit: ce92b9d8332a436ec03d3457dffe247865ffc9c2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ce92b9d8332a436ec03d3457dffe247865ffc9c2 Author: Alexander Ziaee (Fri 21 Nov 2025 17:40:56 GMT) Committer: Alexander Ziaee (Thu 1 Jan 2026 18:39:29 GMT) vt.4: Document increasing scrollback size MFC: immediately as 2 llms say this is impossible Reviewed by: adrian, emaste Differential Revision: https://reviews.freebsd.org/D53860 (cherry picked from commit a8740ba860bfc35879f886b80b30327d0d3b16bd) M share/man/man4/vt.4 ____________________________________________________________________________________________________________ Commit: 1b23b79beef230009f4df5c15f1571a134521810 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1b23b79beef230009f4df5c15f1571a134521810 Author: Alexander Ziaee (Thu 7 Aug 2025 18:01:29 BST) Committer: Alexander Ziaee (Thu 1 Jan 2026 18:38:02 GMT) vt.4: Style pass Outstanding: I'm not sure kernel configuration declarations are defined variables. Dv does not allow arguments, but some why allowed paths, so non-path arguments were being incorrectly marked up as paths. MFC after: 3 days (with resolved conflicts) Reviewed by: 0mp, emaste Differential Revision: https://reviews.freebsd.org/D49565 (cherry picked from commit 7cd6da268a8fbf34b16564dd9a94c86853eb7c56) M share/man/man4/vt.4 ____________________________________________________________________________________________________________ Commit: c330c43e58d74726a9014d3cc380bd59bbcef256 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c330c43e58d74726a9014d3cc380bd59bbcef256 Author: Alexander Ziaee (Mon 15 Jan 2024 19:54:20 GMT) Committer: Alexander Ziaee (Thu 1 Jan 2026 18:34:47 GMT) vt.4: explain console fonts Add explaination about console fonts, how to convert them, which subset of things support them and how to use them. Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/1063 (cherry picked from commit 7bd6cbbf69c7a9b952ebed096625a4a4a6b7bbfd) M share/man/man4/vt.4 ____________________________________________________________________________________________________________ Commit: 1839dd31cab9a02acc2a1065bb0a63488a69ba0b URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=1839dd31cab9a02acc2a1065bb0a63488a69ba0b Author: Michael Osipov (Mon 29 Dec 2025 20:49:49 GMT) Committer: Michael Osipov (Thu 1 Jan 2026 10:41:38 GMT) linprocfs.5: Synchronize style and format with 15-STABLE This is a logical backport of 1d193b1808098328d3ad16b436a329b258935e0c including the changes happended after that. Reviewed by: fernape Differential Revision: https://reviews.freebsd.org/D54408 M share/man/man5/linprocfs.5 ____________________________________________________________________________________________________________ Commit: ab5ec8ccbcf0f1b470690742e2049bb4534b4eae URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ab5ec8ccbcf0f1b470690742e2049bb4534b4eae Author: Rick Macklem (Wed 24 Dec 2025 16:29:29 GMT) Committer: Rick Macklem (Wed 31 Dec 2025 01:32:07 GMT) nfsd.8: Add a short paragraph w.r.t. NFSv3 vs NFSv4 setup The nfsd can be configured to support NFSv3, NFSv4 or both of them. This patch adds a short paragraph to nfsd.8 to explain this. This is a content change. (cherry picked from commit 4f184fd35d81bbd85284d47d2a65aeece67e87d4) M usr.sbin/nfsd/nfsd.8 ____________________________________________________________________________________________________________ Commit: 07700b0107dc642b47c78917102b1f059e2af645 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=07700b0107dc642b47c78917102b1f059e2af645 Author: Xin LI (Tue 23 Dec 2025 08:24:13 GMT) Committer: Xin LI (Tue 30 Dec 2025 02:20:31 GMT) MFV 762f11d98d5cd57ebbe85c36e9e86a557a91fe4e: xz 5.8.2. (cherry picked from commit ae12432049e7873ab3912643ae5d08297b8cbc49) M contrib/xz/ChangeLog M contrib/xz/THANKS M contrib/xz/doxygen/Doxyfile M contrib/xz/src/common/my_landlock.h M contrib/xz/src/common/mythread.h M contrib/xz/src/liblzma/api/lzma/base.h M contrib/xz/src/liblzma/api/lzma/container.h M contrib/xz/src/liblzma/api/lzma/version.h M contrib/xz/src/liblzma/check/crc32_arm64.h M contrib/xz/src/liblzma/check/crc32_fast.c M contrib/xz/src/liblzma/check/crc64_fast.c M contrib/xz/src/liblzma/check/crc_common.h M contrib/xz/src/liblzma/common/alone_decoder.c M contrib/xz/src/liblzma/common/filter_common.c M contrib/xz/src/liblzma/common/lzip_decoder.c M contrib/xz/src/liblzma/common/outqueue.h M contrib/xz/src/liblzma/common/stream_decoder_mt.c M contrib/xz/src/liblzma/common/vli_decoder.c M contrib/xz/src/liblzma/lzma/lzma_common.h M contrib/xz/src/liblzma/lzma/lzma_decoder.h M contrib/xz/src/liblzma/rangecoder/range_decoder.h M contrib/xz/src/liblzma/validate_map.sh M contrib/xz/src/xz/args.c M contrib/xz/src/xz/file_io.c M contrib/xz/src/xz/hardware.c M contrib/xz/src/xz/list.c M contrib/xz/src/xz/message.h M contrib/xz/src/xz/sandbox.c M contrib/xz/src/xz/signals.c M contrib/xz/src/xz/util.c M contrib/xz/src/xz/xz.1 M contrib/xz/src/xzdec/xzdec.c M lib/liblzma/config.h ____________________________________________________________________________________________________________ Commit: 85e0cdeeb75a8fffc7910032d409417124dfee26 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=85e0cdeeb75a8fffc7910032d409417124dfee26 Author: John Baldwin (Fri 6 Dec 2024 22:26:27 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 21:48:36 GMT) cdefs: Add __deprecated1 which accepts a message as an argument This message will be included in any warning issued by the compiler for use of the deprecated function. Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D47701 (cherry picked from commit 6da04bcff9efedeae7d4046553002b9e3b2bc24f) M sys/sys/cdefs.h ____________________________________________________________________________________________________________ Commit: 4ff445d3723a58ef8a5d34e4e33c4f40d217e1ab URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4ff445d3723a58ef8a5d34e4e33c4f40d217e1ab Author: Warner Losh (Tue 15 Oct 2024 20:49:53 BST) Committer: Dimitry Andric (Mon 29 Dec 2025 21:48:19 GMT) cdefs: Add __deprecated Add __deprecated decorator. This is for a deprecated interface. copystr is tagged with this today in copy(9), but don't actually provide it or use it. copystr is a #define so adding it will have to wait. LinuxKPI was defining this away completely in compiler.h. Since this is shared between Linux KPI consumers and OpenZFS, if it's already defined, use the FreeBSD sys/cdefs.h version, otherwise define it away. For OpenZFS this will retain it, while for Linux KPI it will tend to drop it (I think always, but I didn't look at everything). Sponsored by: Netflix Reviewed by: jhb, emaste Differential Revision: https://reviews.freebsd.org/D46137 (cherry picked from commit 16672453f12586703f1c51d909bd1900691bf884) M sys/compat/linuxkpi/common/include/linux/compiler.h M sys/sys/cdefs.h ____________________________________________________________________________________________________________ Commit: c4290c35857d46a880ae3873fef58aa98a20c087 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c4290c35857d46a880ae3873fef58aa98a20c087 Author: Lexi Winter (Fri 2 Feb 2024 16:41:40 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 21:47:53 GMT) sys/cdefs.h: add __noexcept and __noexcept_if These macros provide the C++11 noexcept and noexcept(...) keywords if we're compiling in a C++11 environment. Otherwise, they expand to an empty string. This will be used to add the required noexcept specifier to several libc functions as required in C++11. MFC after: 2 weeks Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/1085 (cherry picked from commit 02b0d4b688cc4deb14cb6e7534a2a4958e48b753) M sys/sys/cdefs.h ____________________________________________________________________________________________________________ Commit: 108f057e50cafdbec62785a2c4a53fde6142b99f URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=108f057e50cafdbec62785a2c4a53fde6142b99f Author: Michael Osipov (Fri 26 Dec 2025 13:40:37 GMT) Committer: Michael Osipov (Mon 29 Dec 2025 18:41:10 GMT) bhyve: Document that MAC address has to be unicast bhyve accepts any MAC address even foreign as long it is a unicast one. Reviewed by: ziaee MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54372 (cherry picked from commit e1bfd541c7cdee1e184cacb2ea3bbebb3a500dfb) M usr.sbin/bhyve/bhyve.8 M usr.sbin/bhyve/bhyve_config.5 ____________________________________________________________________________________________________________ Commit: c847ea5418e23d4f103882ad35c710af59061cfa URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c847ea5418e23d4f103882ad35c710af59061cfa Author: Michael Osipov (Fri 26 Dec 2025 12:12:03 GMT) Committer: Michael Osipov (Mon 29 Dec 2025 18:40:31 GMT) bhyve_config.5: Fix consistency and terms in manpage Correct inconsistent spelling of terms and duplication. Reviewed by: ziaee MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54370 (cherry picked from commit 66604463e737f4754ae6268171031ceefc226837) M usr.sbin/bhyve/bhyve_config.5 ____________________________________________________________________________________________________________ Commit: 23b83bfeb767eaf04ea15bf65aaa6a47761186b9 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=23b83bfeb767eaf04ea15bf65aaa6a47761186b9 Author: Dmitry Salychev (Tue 28 Oct 2025 22:30:05 GMT) Committer: Dmitry Salychev (Mon 29 Dec 2025 18:14:52 GMT) dpaa2: Setup interface caps on attach 39d4094173f9 ("epair: add support for checksum offloading") revealed that HW checksum offloading is not enabled when the dpaa2_ni driver is attached despite being declared and enabled on the dpni interface. I modified dpaa2_ni_setup_if_caps to take into account both IPv4 and IPv6 checksum offloading capabilities and added a call to re-configure interface capabilities on attach to fix it. Reviewed by: bz Fixes: 39d4094173f9 ("epair: add support for checksum offloading") MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D53436 (cherry picked from commit a731cb93a66271713d6ea197946e4a307e5b0837) M sys/dev/dpaa2/dpaa2_ni.c ____________________________________________________________________________________________________________ Commit: 143273854faae2ad27193ce58cab773356a70e2a URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=143273854faae2ad27193ce58cab773356a70e2a Author: Dimitry Andric (Fri 26 Dec 2025 14:31:43 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 12:22:58 GMT) sys/font.h: avoid warnings about too-long initializer strings Mark `font_header::fh_magic` as `__non_string`, to avoid a warning from clang 21 similar to: /usr/src/usr.bin/vtfontcvt/vtfontcvt.c:763:15: error: initializer-string for character array is too long, array size is 8 but initializer has size 9 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 763 | .fh_magic = FONT_HEADER_MAGIC, | ^~~~~~~~~~~~~~~~~ /usr/obj/usr/src/amd64.amd64/tmp/usr/include/sys/font.h:109:27: note: expanded from macro 'FONT_HEADER_MAGIC' 109 | #define FONT_HEADER_MAGIC "VFNT0002" | ^~~~~~~~~~ MFC after: 3 days (cherry picked from commit e2c93ed09f259ed049923bdaa9b697b3586e2f1a) M sys/sys/font.h ____________________________________________________________________________________________________________ Commit: 4f8f0941c285a897beefe1c9795be8d9bbdcf724 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4f8f0941c285a897beefe1c9795be8d9bbdcf724 Author: Dimitry Andric (Fri 26 Dec 2025 13:27:08 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 12:21:17 GMT) bsnmpd: avoid warnings about too-long initializer strings Mark `UTC` as `__non_string`, to avoid a warning from clang 21 similar to: usr.sbin/bsnmpd/tools/libbsnmptools/bsnmptc.c:339:29: error: initializer-string for character array is too long, array size is 3 but initializer has size 4 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] --- all_subdir_usr.sbin --- 339 | static const char UTC[3] = "UTC"; | ^~~~~ MFC after: 3 days (cherry picked from commit 3054e22e4524df24908d7e9379681c1ccf829b93) M usr.sbin/bsnmpd/tools/libbsnmptools/bsnmptc.c ____________________________________________________________________________________________________________ Commit: 43d41e72fa2d3365241346c8b122c1a5215f2723 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=43d41e72fa2d3365241346c8b122c1a5215f2723 Author: Dimitry Andric (Fri 26 Dec 2025 00:22:03 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 12:20:53 GMT) makefs: avoid warnings about too-long initializer strings Mark `direntry::deName` as `__non_string`, to avoid warnings from clang 21 similar to: usr.sbin/makefs/msdos/msdosfs_vnops.c:512:4: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 512 | { ". ", /* the . entry */ | ^~~~~~~~~~~~~ usr.sbin/makefs/msdos/msdosfs_vnops.c:522:4: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 522 | { ".. ", /* the .. entry */ | ^~~~~~~~~~~~~ MFC after: 3 days (cherry picked from commit ba0a11512237681fc621670023d56195cb8c82ad) M usr.sbin/makefs/msdos/direntry.h ____________________________________________________________________________________________________________ Commit: 9f60c9b76fa4b45c73531073c306e0ddeb32cd16 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9f60c9b76fa4b45c73531073c306e0ddeb32cd16 Author: Dimitry Andric (Fri 26 Dec 2025 00:30:25 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 12:19:40 GMT) m4: avoid warnings about too-long initializer strings Mark `digits` as `__non_string`, to avoid warnings from clang 21 similar to: usr.bin/m4/misc.c:123:27: error: initializer-string for character array is too long, array size is 36 but initializer has size 37 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 123 | static char digits[36] = "0123456789abcdefghijklmnopqrstuvwxyz"; | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ MFC after: 3 days (cherry picked from commit a3394b6a23fb66ccb7e588129d2465ef8ea26d30) M usr.bin/m4/misc.c ____________________________________________________________________________________________________________ Commit: 5402a4d73fe7f26d9ae7d6a9a5937c87ad06b5a2 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5402a4d73fe7f26d9ae7d6a9a5937c87ad06b5a2 Author: Dimitry Andric (Thu 25 Dec 2025 20:28:14 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 12:19:14 GMT) fsck_msdosfs: avoid warnings about too-long initializer strings Mark `dot_name` and `dotdot_name` as as `__non_string`, to avoid warnings from clang 21 similar to: sbin/fsck_msdosfs/dir.c:466:39: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 466 | static const u_char dot_name[11] = ". "; | ^~~~~~~~~~~~~ sbin/fsck_msdosfs/dir.c:467:39: error: initializer-string for character array is too long, array size is 11 but initializer has size 12 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization] 467 | static const u_char dotdot_name[11] = ".. "; | ^~~~~~~~~~~~~ MFC after: 3 days (cherry picked from commit 98c3d868fb5a7da7356c58e8c51423975bbd078b) M sbin/fsck_msdosfs/dir.c ____________________________________________________________________________________________________________ Commit: 9ea1aadfdb306d95e79854ca569aefc7cf993fcb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=9ea1aadfdb306d95e79854ca569aefc7cf993fcb Author: Ayrton Munoz (Mon 29 Dec 2025 02:02:28 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 12:16:27 GMT) cross-build: Avoid adding to SYSINCS Summary: The sys/cdefs.h in src is incompatible with glibc's sys/cdefs.h so cross-building broke when the former was added to SYSINCS in 1c9ff80f06. This commit adds a guard around that to only do that when building on FreeBSD. This should fix github CI. Test Plan: Ran buildkernel using tools/build/make.py on linux in github CI and locally on FreeBSD to double check nothing broke. Reviewed by: dim MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D54385 (cherry picked from commit b6672803a1cf10dd1c912fe6571a8d426b8868bd) M tools/build/Makefile ____________________________________________________________________________________________________________ Commit: 2ade7285253fc5dfe0adfc51f7bd342b9293f253 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=2ade7285253fc5dfe0adfc51f7bd342b9293f253 Author: Dimitry Andric (Fri 26 Dec 2025 15:26:13 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 12:16:00 GMT) tools.build: add sys/cdefs.h to SYSINCS, since lots of other headers use it This is needed to let the legacy stage compile against newer versions of sys/font.h, which transitively includes sys/cdefs.h, and requires the new __nonstring macro from it. Fixes: e2c93ed09f25 MFC after: 3 days (cherry picked from commit 1c9ff80f06350fa44b7e50ce09ad665ab0082abb) M tools/build/Makefile ____________________________________________________________________________________________________________ Commit: 0925033ac7704279664c0deceaea7835bfb5cc1d URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=0925033ac7704279664c0deceaea7835bfb5cc1d Author: Alex Richardson (Tue 16 Dec 2025 18:03:44 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 11:57:38 GMT) cdefs.h: Introduce __nonstring attribute This attribute can be used to annotate char arrays that are not supposed to be terminated with a NUL char and is needed to silence clang's new -Wunterminated-string-initialization warning. The name matches linuxkpi. Reviewed by: emaste, jhb MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D52565 (cherry picked from commit 802c6d5d61d15494a54a386dc2ffbcfefc68c8ab) M sys/sys/cdefs.h M tools/build/cross-build/include/common/sys/cdefs.h ____________________________________________________________________________________________________________ Commit: 92d80c231d0a0f53daf6224037181d648b06b632 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=92d80c231d0a0f53daf6224037181d648b06b632 Author: Colin Percival (Sat 15 Nov 2025 15:02:27 GMT) Committer: Xin LI (Mon 29 Dec 2025 03:22:19 GMT) GCE: Don't .error on unsupported targets We ingest Makefile.gce even when we're not trying to create GCE images so we don't want to .error here. Instead, set GCE_ARCH to a dummy value which should make the problem clear to anyone who attempts to create GCE images on an unsupported architecture. Reported by: Jenkins Fixes: 0a8ecca4e315 ("GCE: Specify the architecture of images") (cherry picked from commit 787d09753f70bb382a7cbfba742a612fa54069e6) M release/Makefile.gce ____________________________________________________________________________________________________________ Commit: 86b5e5bb7814f4f972dc29076969d06cd76567cb URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=86b5e5bb7814f4f972dc29076969d06cd76567cb Author: Andrew Jorgensen (Fri 14 Nov 2025 18:06:52 GMT) Committer: Xin LI (Mon 29 Dec 2025 03:22:19 GMT) GCE: Specify the architecture of images Without a specified architecture, a user can attempt to create an arm64 instance with an amd64 image or vice versa. With the change the API will prevent that mismatch. (cherry picked from commit 0a8ecca4e3156bcd4ebbfcb24d968e67a3a09434) M release/Makefile.gce ____________________________________________________________________________________________________________ Commit: d1f275606d9fa2560606c4b6e515bc35d82699fc URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=d1f275606d9fa2560606c4b6e515bc35d82699fc Author: Andrew Jorgensen (Fri 14 Nov 2025 18:06:16 GMT) Committer: Xin LI (Mon 29 Dec 2025 03:22:18 GMT) GCE: Add TARGET and FS to image family GCE image family is meant to be unique per set of image characteristics so that a user can create instances using the image family instead of the image name to reliably get a similar image with updated software, but no other changes. Without this change, the instances create API would select the most recent non-deprecated image matching the name, regardless of architecture or filesystem. (cherry picked from commit fc83e6c5e1f20087314dc52b63e485db87a98b86) M release/Makefile.gce ____________________________________________________________________________________________________________ Commit: 5143ea18e51042811bfb8be2b14e57befbde10fe URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=5143ea18e51042811bfb8be2b14e57befbde10fe Author: Dimitry Andric (Fri 26 Dec 2025 13:37:47 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 02:11:35 GMT) pmcannotate: avoid accessing uninitialized local variables Initialize `tbfl` and `tofl` to NULL, and check whether they are non-NULL before calling remove(3) on them, to avoid warnings from clang 21 similar to: usr.sbin/pmcannotate/pmcannotate.c:746:3: error: variable 'tbfl' is uninitialized when used here [-Werror,-Wuninitialized] 746 | FATAL(exec, "%s: Impossible to locate the binary file\n", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 747 | exec); | ~~~~~ usr.sbin/pmcannotate/pmcannotate.c:57:9: note: expanded from macro 'FATAL' 57 | remove(tbfl); \ | ^~~~ usr.sbin/pmcannotate/pmcannotate.c:695:12: note: initialize the variable 'tbfl' to silence this warning 695 | char *tbfl, *tofl, *tmpdir; | ^ | = NULL usr.sbin/pmcannotate/pmcannotate.c:746:3: error: variable 'tofl' is uninitialized when used here [-Werror,-Wuninitialized] 746 | FATAL(exec, "%s: Impossible to locate the binary file\n", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 747 | exec); | ~~~~~ usr.sbin/pmcannotate/pmcannotate.c:58:9: note: expanded from macro 'FATAL' 58 | remove(tofl); \ | ^~~~ usr.sbin/pmcannotate/pmcannotate.c:695:19: note: initialize the variable 'tofl' to silence this warning 695 | char *tbfl, *tofl, *tmpdir; | ^ | = NULL MFC after: 3 days (cherry picked from commit cd880010c49a5d4ec529f4204d4e88cd27727255) M usr.sbin/pmcannotate/pmcannotate.c ____________________________________________________________________________________________________________ Commit: ecb101967370cb1dedef5c46109011a93eeb1aa1 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=ecb101967370cb1dedef5c46109011a93eeb1aa1 Author: Dimitry Andric (Mon 22 Dec 2025 11:49:27 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 02:11:30 GMT) Remove debug crutch I accidentally left in Fixes: cf1eaaf41cef MFC after: 1 week (cherry picked from commit 3b1126208f44a90c7dc04a87207e54b22d45893c) M lib/clang/libllvm/Makefile ____________________________________________________________________________________________________________ Commit: 4660accec8d3e31b513bcbcf57d3a3a532ea60ca URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=4660accec8d3e31b513bcbcf57d3a3a532ea60ca Author: Dimitry Andric (Sun 21 Dec 2025 21:37:57 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 02:11:13 GMT) Reduce number of external symbols in libllvm, libclang and liblldb In commit 2e47f35be5dc libllvm, libclang and liblldb were converted into private shared libraries. This allowed clang, lld, lldb, and other llvm tools to be linked against these shared libraries, which makes them smaller and avoids duplication. However, upstream builds the shared libraries using several visibility options, which reduces the number of external symbols, and makes the libraries a bit smaller. On my test machine: * libprivatellvm.so goes from 75643 to 34706 symbols (~54% reduction) * libprivateclang.so goes from 53250 to 33531 symbols (~37% reduction) * libprivatelldb.so goes from 27242 to 18798 symbols (~31% reduction) Note: to get the full benefit, a clean build is required. Incremental builds should still work, but I didn't want to force a full rebuild on everybody. MFC after: 1 week (cherry picked from commit cf1eaaf41cefe7e3aef45f6dab862191a3939ed8) M lib/clang/libllvm/Makefile M lib/clang/llvm.build.mk ____________________________________________________________________________________________________________ Commit: c55bd9b2727595b170d25c87d0561477952cce54 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=c55bd9b2727595b170d25c87d0561477952cce54 Author: Dimitry Andric (Thu 25 Dec 2025 18:02:27 GMT) Committer: Dimitry Andric (Mon 29 Dec 2025 02:07:08 GMT) cuse(3): annotate cuse_init() to suppress thread safety analysis This avoids warnings from clang 21, similar to: /usr/src/lib/libcuse/cuse_lib.c:111:14: error: writing variable 'h_cuse' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis] 111 | TAILQ_INIT(&h_cuse); | ^ /usr/src/lib/libcuse/cuse_lib.c:111:14: error: writing variable 'h_cuse' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis] /usr/src/lib/libcuse/cuse_lib.c:112:14: error: writing variable 'h_cuse_entered' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis] 112 | TAILQ_INIT(&h_cuse_entered); | ^ /usr/src/lib/libcuse/cuse_lib.c:112:14: error: writing variable 'h_cuse_entered' requires holding mutex 'm_cuse' exclusively [-Werror,-Wthread-safety-analysis] MFC after: 3 days (cherry picked from commit 5629b5cf79934e0b94ddbbd93b7756f74fe4050a) M lib/libcuse/cuse_lib.c ____________________________________________________________________________________________________________ Commit: f9d671f726ac2199b906fc406b46b57cd2a11cf7 URL: https://git.freebsd.catflap.org/src/stable-14/commit/?id=f9d671f726ac2199b906fc406b46b57cd2a11cf7 Author: Jose Luis Duran (Fri 19 Dec 2025 20:14:35 GMT) Committer: Jose Luis Duran (Sat 27 Dec 2025 16:28:35 GMT) Import latest mtree from NetBSD Merge commit 'eb2ccba0c11b405ac613c3046997765317cc8b5c' PR: 192839 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192839 ) PR: 219467 ( https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219467 ) MFC after: 1 week (cherry picked from commit f8cee1f2c2dfba6223385fd711cce9faeca76451) M contrib/mtree/compare.c M contrib/mtree/create.c M contrib/mtree/mtree.c M contrib/mtree/spec.c ___________________________________________________________________________________________________________