audio_wav_parse_hdr: handle zero-length data files again

the previous clean up turns zero-length data into no data and thus
an error, instead of simply doing nothing.  noted by gson.

(mrg)

apei(4): Tweak some comments about the APEI interpreter language.

No functional change intended.

PR kern/58046

(riastradh)

apei(4): Pacify -Wsign-compare.

Assert that the parsing made forward progress too while here.

PR kern/58046

(riastradh)

apei(4): New driver for ACPI Platform Error Interfaces.

For now it is wired up only in x86 ALL kernels, and built as a module
for x86 and Arm.  Once it gets a little more testing on machines with
APEI, I would like to flip it on by default.

PR kern/58046

(riastradh)

x86: Release the ramdisks too.

This way we will get cgdroot.fs (and zfsroot.fs too) in the release.

PR misc/57534

(riastradh)

libcrypto: Add expected symbol list to check at build-time.

(riastradh)

bsd.lib.mk: Check expected vs actual symbols at build-time.

If, for LIB=foo, you create a file foo.expsym, bsd.lib.mk will list
the dynamic symbols and their versions with

nm --dynamic --extern-only --defined-only --with-symbol-versions

and compare the names (not addresses or types) to foo.expsym.  If
there are any differences, they will be printed and the build will
fail.

foo.expsym should be sorted with `LANG=C sort -u'.

This way, you can verify changes don't inadvertently add or remove
symbols.  If you do want to add (or, if you're bumping the major,
remove) symbols, you can verify the changes and edit the foo.expsym
file accordingly.  This will also help to enforce rules about symbol
changes on pullups in release branches.

Note that using a version map (-Wl,--version-script=...) doesn't
catch symbol removal -- ld quietly ignores symbols in the version map
that aren't actually defined by any object in the library.  So this
supplements the version map.

Proposed on tech-userlevel:
https://mail-index.NetBSD.org/tech-userlevel/2024/03/16/msg014264.html

(riastradh)

acpi(4): Make apeibus actually work as an iattr.

PR kern/58046

(riastradh)

sparc64/fpsetround: avoid shifting into the sign bit

Lint had warned about the constant expression '0x03 << 30' but not about
the structurally equal nonconstant expression '(rnd_dir & 0x03) << 30'.

No binary change.

(rillig)

acpi(4): New iattr `apeibus' for attaching an APEI driver.

APEI is the ACPI Platform Error Interface, a standard (if very
complicated) interface for reporting hardware errors to the OS.

Firmware support for APEI is presented through the ACPI tables BERT
(Boot Error Record Table), ERST (Error Record Serialization Table),
EINJ (Error Injection Table), and HEST (Hardware Error Source Table),
rather than through nodes in the ACPI device tree, so it can't just
attach through the existing acpinodebus iattr and instead requires a
special pseudo-bus like acpiwdrt(4).

No driver yet -- this is just the hook to attach one in a module.

The new member sc_apei of struct acpi_softc is placed at the end of
the structure so that this change can be safely pulled up to release
branches without risk to ABI compatibility in existing modules such
as acpiverbose.kmod which may rely on the layout (but not size) of
struct acpi_softc.

PR kern/58046

(riastradh)

Fix reproducible builds (Jan-Benedict Glaw)

(christos)

remove extra stat (Jan-Benedict Glaw)

(christos)

Fix reproducible builds (Jan-Benedict Glaw)

(christos)

Fix reproducible builds (Jan-Benedict Glaw)

(christos)

lint: keep invalid arguments in function calls

Previously, arguments of incomplete type or 'void' cleared all arguments
of the function call expression, requiring extra checks in later checks.

Invalid function calls are now exported to the .ln files, but that's
irrelevant in practice as these invalid function calls make lint1 fail,
after which xlint removes the .ln file.

(rillig)

cpuctl.8: fix grammar in a sentence

(gutteridge)

ipsec.4: minor grammatical improvements

(gutteridge)

The fetestexcept_trap test case only makes sense on FPUs that implement
exceptions.

(martin)

strptime(3): Declare digit d as time_t.

This doesn't make a semantic difference -- d can only take on the ten
values {0,1,2,3,4,5,6,7,8,9}, and the arithmetic with it later all
comes out the same whether the type is unsigned or time_t, even if
time_t were int32_t instead of int64_t.

But it pacifies overzealous compilers used by downstream users of
this code.  And while it's silly to use a much wider type (64-bit
signed) than is needed here to store a single digit, it doesn't
really hurt either (32-bit unsigned is much larger than needed too).

PR lib/58041

(riastradh)

Use HUD_PEN instead of 0x0002 as appropriate

(jakllsch)

hier(7): remove reference to /var/db/pkg

The pkg database lives in ${PREFIX}/pkgdb instead now.

Bump date.

(wiz)

Add missing "e" in few words, in comments and one log message.

(andvar)

s/argumment/argument/ in documentation.

(andvar)

Prevent errant ucycom-presenting device from causing up to 225
bytes of kernel memory following input buffer to leak to tty
application.

Probably not practically expolitable, but you never know.

(jakllsch)

Remove debug print

(ryoon)

make all QUAD constants look the same.

(christos)

s/Broardcast/Broadcast/ in comment.

(andvar)

strptime(3): Reduce unnecessary indentation.

Post-fix tidying.

No functional change intended.

PR lib/58041

(riastradh)

strptime(3): Avoid arithmetic overflow.

PR lib/58041

(riastradh)

strptime(3): Exercise some edge cases in the automatic tests.

Unfortunately, we can't quite use strptime as a black box to detect
the cases that triggered undefined behaviour, because strptime just
fails in that case anyway since the number that would go in .tm_year
is far out of the representable range.

PR lib/58041

(riastradh)

"retval = 0" should be "*retval = 0", should fix the broken build.

(andvar)

Rewrite !VMSWAP uvm_swap_stats() macro as a static function. NFCI.

From riastradh

(andvar)

libcrypto: Fix buffer overrun in truncated SHA-512 functions.

Further fallout from the libc/openssl sha2 symbol collision.

PR lib/58039

(riastradh)

doc: changes from the last 2 weeks

(nia)

doc/3RDPARTY: Note OpenSSL vendor/release tags.

(riastradh)

libcrypto: Add some trivial tests for truncated SHA-512 variants.

These should use more of the test vectors from

https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Secure-Hashing#Testing

but this will do for now to detect the buffer overrun rake we left
lying around for ourselves.

PR lib/58039

(riastradh)

Fix !VMSWAP build:
Added __unused for few local variables, which are used in VMSWAP block only.
Adjust !VMSWAP uvm_swap_stats() definition to make it build with compat code.
Copied "int (*uvm_swap_stats50)(...)" definition from uvm_swap to uvm_swapstub
to avoid missing uvm_swap_stats50 reference on linking.

Fixes INSTALL_CPMBR1400, INSTALL_ZYXELKX evbmips kernel configs as a result.

Reviewed by simon and phone in IRC (thanks).

(andvar)

evbarm/instkernel/sshramdisk: Put firmware in the right paths.

Maybe this should also be wired up to `release' to put the ramdisk in
the releasedir so we detect destdir path leakage like this had.

PR port-evbarm/58035

(riastradh)

stat: don't allow numeric formatting flags on strings

Calling snprintf with "%+s" invokes undefined behavior.

(rillig)

tests/stat: test the left-aligned and right-aligned 'S' format

(rillig)

While the change in 1.51 certainly retained binary compat with
what was in 1.50 (while silencing LINT) - it was clearly not the
correct change to make.  The code used !FLAG_POUND where it
clearly meant ~FLAG_POUND ... the former is 0, so &= 0 could
be replaced by =0 changing nothing.  But that's not what it
should have been doing, other flags should not have been
removed here, just FLAG_POUND.

This problem seems to have existed since support for %#s
was first added in 2011, which kind of suggests how rarely
that format, particularly with other flags (like %#-s)
has ever been used (with no other flags, the bug would not
be noticed).

(kre)

Use ether_crc32_be() instead of having a local bitrev32() function to
munge ether_crc32_le() output when programming multicast filter.

(jakllsch)

Sync with x86_64 the quad constants. No reason to be different

(christos)

Fix reproducible build (Jan-Benedict Glaw)

(christos)

Sync with OpenBSD

(jakllsch)

Remove Reserved usages and ranges thereof

Helps align with future merge

(jakllsch)

fix typos

(jakllsch)

Be a bit more clear about which devices are being handled.

(pgoyette)

add gftfb

(macallan)

expat-2.6.2 is out

(wiz)

stat: fix lint warning about constant argument to '!'

No binary change.

(rillig)

fix some sizeof() confusion.

using "const char search[4]" as a function parameter means that
"search" is actually a pointer type so "sizeof search" returns
8 on 64-bit platforms.  i mis-read this and used "sizeof *search"
which is always 1, noted by rillig.

instead of trying to avoid writing "4" twice, put it in a define
and use that in various places instead.  annoying.

(mrg)

centrally control if we are building kerberos

(christos)

evbmips/interrupt.c: No need for __diagused with KASSERT.

KASSERT already references all the variables even in !DIAGNOSTIC
builds (but evaluates nothing at run-time in that case).

That said: Is the curlwp->l_blcnt assertion correct?  Can't curlwp be
changed in this interrupt handler by preemption?

(riastradh)

Mention ascaudio(4).

(nat)

Apple Sound Chip audio support for 68k Macintoshoes.

This provies a sound device and support for wsbell(4).

Manual page to be added in a followup commit.

As posted to port-mac68k.

(nat)

Bluetooth low energy - A beginning at least.

This was the start of support for low energy bluetooth support that I have
not as yet completed.

I'm committing this as it gives the hci defines for an impementation in NetBSD.

(nat)

Remove #ifdef DIAGNOSTIC by using __diagused. NFCI.

(skrll)

tests/lint: ensure that lint correctly decays array parameter types

(rillig)

lint: trim down the check for snprintb formats

(rillig)

Fix non-DIAGNOSTIC build for evbmips.

mtx_count, biglock_count and blcnt are defined inside DIAGNOSTIC block, thus
KASSERTs using them should be guarded as well.

Seemingly introduced with matt-nb5-mips64 merge in 2011.

(andvar)

tests/lint: extend test for previously wrong warning about bit-fields

(rillig)

Tickets #1940 and #1948

(martin)

Pull up the following revisions, requested by mrg in ticket #1948:

usr.bin/audio/common/auconv.h                  up to 1.6
usr.bin/audio/common/audio.c                    up to 1.27
usr.bin/audio/common/decode.c                  up to 1.2
usr.bin/audio/common/libaudio.h                up to 1.22
usr.bin/audio/common/sun.c                      up to 1.11
usr.bin/audio/common/wav.c                      up to 1.22
usr.bin/audio/play/audioplay.1                  up to 1.34
usr.bin/audio/play/play.c                      up to 1.64
usr.bin/audio/record/audiorecord.1              up to 1.45
usr.bin/audio/record/record.c                  up to 1.58

- support for playing 32-bit and 64-bit IEEE FP .wav files
- support for recording 24 bit .wav files
- read-overflow fixes for .wav files, and other fixes for the
  wav parser
- audioplay gains -n flag (no play, like make -n)
- audiorecord manual gained useful examples

(martin)

Tickets #1807 and #1818

(martin)

Pull up the following revisions, requested by mrg in ticket #1818:

usr.bin/audio/common/auconv.h                  up to 1.6
usr.bin/audio/common/audio.c                    up to 1.27
usr.bin/audio/common/decode.c                  up to 1.2
usr.bin/audio/common/libaudio.h                up to 1.22
usr.bin/audio/common/sun.c                      up to 1.11
usr.bin/audio/common/wav.c                      up to 1.22
usr.bin/audio/ctl/audioctl.1                    up to 1.25
usr.bin/audio/play/audioplay.1                  up to 1.34
usr.bin/audio/play/play.c                      up to 1.64
usr.bin/audio/record/audiorecord.1              up to 1.45
usr.bin/audio/record/record.c                  up to 1.58

- support for playing 32-bit and 64-bit IEEE FP .wav files
- support for recording 24 bit .wav files
- read-overflow fixes for .wav files, and other fixes for the
  wav parser
- audioplay gains -n flag (no play, like make -n)
- audioctl manual spruced up
- audiorecord manual gained useful examples

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1940):

sys/dev/usb/usbdi.c: revision 1.248

usbdi(9): Avoid calling ubm_softint with lock held and polling on.

PR kern/57783

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1807):

sys/dev/usb/usbdi.c: revision 1.248

usbdi(9): Avoid calling ubm_softint with lock held and polling on.

PR kern/57783

(martin)

Welcome to 10.0 RC6

(martin)

Ticket #1817

(martin)

Tickets #633 - #635

(martin)

Pull up following revision(s) (requested by kre in ticket #635):

usr.bin/kdump/kdump.c: revision 1.141
usr.bin/kdump/kdump.c: revision 1.142
usr.bin/kdump/kdump.c: revision 1.143
usr.bin/kdump/kdump.c: revision 1.144

PR/57918: Taylor R Campbell: Don't try to print symbolically ioctls that
have bits set on the high 32 bits of a 64 bit long.

PR bin/57918

Redo the previous correctly, the test should be whether or not only the
bottom 32 bits are set, rather than whether any of bits 32..63 are set.

This makes no difference if u_long (or unsigned long long) is 64 bits,
it is the same test in that case, but if u_long were 128 bits there is
a notable difference (though for the particular issue observed in the PR,
it is likely to work either way).
decode some {g,s}etsockopt*.

kdump: keep the comment with its corresponding code
No binary change.

(martin)

Pull up the following revisions, requested by mrg in ticket #634:

usr.bin/audio/common/auconv.h                  up to 1.6
usr.bin/audio/common/audio.c                    up to 1.27
usr.bin/audio/common/decode.c                  up to 1.2
usr.bin/audio/common/libaudio.h                up to 1.22
usr.bin/audio/common/sun.c                      up to 1.11
usr.bin/audio/common/wav.c                      up to 1.22
usr.bin/audio/play/audioplay.1                  up to 1.34
usr.bin/audio/play/play.c                      up to 1.64
usr.bin/audio/record/audiorecord.1              up to 1.45
usr.bin/audio/record/record.c                  up to 1.58

- support for recording 24 bit .wav files
- read-overflow fixes for .wav files, and other fixes for the
  wav parser
- audioplay gains -n flag (no play, like make -n)

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1817):

sys/dev/ic/nvme.c: revision 1.69

nvme(4): Disestablish admin q interrupt while suspended.

And re-establish on resume.  Fixes nvmectl(8) after a suspend/resume
cycle on some systems.

Adapted from a patch by mrg@.

PR kern/58025

(martin)

Pull up following revision(s) (requested by riastradh in ticket #633):

sys/dev/ic/nvme.c: revision 1.69

nvme(4): Disestablish admin q interrupt while suspended.

And re-establish on resume.  Fixes nvmectl(8) after a suspend/resume
cycle on some systems.

Adapted from a patch by mrg@.

PR kern/58025

(martin)

remove accidentally left in debug goop

(macallan)

use uint8_t for all 8bit masks and data to avoid sign extending weirdness
found by running this on hppa with gcc12

(macallan)

lint: fix warning about loss of conversion for unsigned bit-fields

Since decl.c 1.180 from 2021-05-02.

(rillig)

tests/lint: demonstrate wrong warning when comparing a bit-field

Since decl.c 1.180 from 2021-05-02, which allowed arbitrary integer
types to be used as the underlying type for bit-fields in GCC mode.

(rillig)

wg(4): Rework example numbering for clarity and add IPv6.

Let's avoid triggering unease with host number 0.

PR misc/58015

(riastradh)

coretemp.c: don't accept impossibly low TjMax values

r. 1.39 introduced a regression where instead of applying a reasonable
default maximum (as was done prior to that change), incorrect values
were accepted and applied, as failures to retrieve an expected MSR
value weren't accounted for.

Apply different logic for unexpectedly low vs. high maximums, with
distinct warnings for each. Also add another warning about a retrieval
failure right at the outset (which also just uses the default, then).

This change fundamentally doesn't address the fact that
__SHIFTOUT(msr, MSR_TEMP_TARGET_READOUT)
doesn't necessarily return a valid value. It just restores prior
behaviour, which is more reasonable than applying a zero value, which
started happening on some older hardware. (I infer this is most likely
an issue with dated generations of Intel hardware with this feature.)
The challenge is that this evidently isn't all documented properly
anywhere. Various "magic values" in this driver need further
investigation.

While here, also fix output so warnings are cleanly formatted, rather
than the slightly scrambled way they were appearing.

Tested on older Intel hardware I had on hand:
E7500 (now falls back to default 100 rather than 0)
E5540 (successfully retrieves 97, as before)
i5-3340M (successfully retrieves 105, as before)

(gutteridge)

audioplay(1): handle mis-aligned RIFF chunks.

put the code to find RIFF chunks into a new find_riff_chunk() function,
and handle mis-aligned chunk lengths.  can now play files with chunks
that say they are 7 bytes long, and have 1 byte padding.

add some -V -V extra-verbose for the wav parser.

(mrg)

minor clean up in the RIFF/WAVE header checking.

use memcmp() not strncmp() to check for "RIFF" and "WAVE".
avoid endian convesion on part.len 3 times.

(mrg)

fix lint

(christos)

add casts for compat code where time_t is 32 bits.

(christos)

nvme(4): Disestablish admin q interrupt while suspended.

And re-establish on resume.  Fixes nvmectl(8) after a suspend/resume
cycle on some systems.

Adapted from a patch by mrg@.

PR kern/58025

(riastradh)

Tickets #620 - #622, #624 - #632

(martin)

Pull up following revision(s) (requested by riastradh in ticket #632):

sys/dev/pci/xhci_pci.c: revision 1.33

Consistently use cached chipset tag value.

(martin)

Pull up following revision(s) (requested by riastradh in ticket #631):

sys/dev/pci/ehci_pci.c: revision 1.76

Consistently use cached chipset tag value.

(martin)

Tickets #1945 - #1947

(martin)

Pull up following revision(s) (requested by ozaki-r in ticket #1947):

lib/libc/gen/getcap.c: revision 1.58

Fix memory leak in getent()

Memory was not freed if record was not found

(martin)

Tickets #1813 - #1816

(martin)

Pull up following revision(s) (requested by ozaki-r in ticket #1816):

lib/libc/gen/getcap.c: revision 1.58

Fix memory leak in getent()

Memory was not freed if record was not found

(martin)

Pull up following revision(s) (requested by ozaki-r in ticket #630):

lib/libc/gen/getcap.c: revision 1.58

Fix memory leak in getent()

Memory was not freed if record was not found

(martin)

Pull up following revision(s) (requested by riastradh in ticket #629):

share/man/man4/wg.4: revision 1.7

wg(4): Spruce up example a bit.
- Suggest umask so the private keys aren't world readable.
- Suggest use of pre-shared key files.
- Use TEST-NET-1 and TEST-NET-2 addresses for the example instead of
  real publicly routable addresses.

Holding off on adding IPv6 example until the tun(4) issue is fixed
(PR bin/58013).

PR misc/58015

(martin)

Pull up following revision(s) (requested by riastradh in ticket #628):

sys/net/if_wg.c: revision 1.78

wg(4): Bind to CPU in wg_handle_packet.

Required by use of psref there.
Assert we're bound up front so we catch mistakes early, rather than
later on if we get unlucky in preemption and scheduling.

PR bin/58021

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1946):

sys/net/if_tun.c: revision 1.175

tun(4): Allow IPv6 packets with TUNSLMODE configured.
PR kern/58013

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1815):

sys/net/if_tun.c: revision 1.175

tun(4): Allow IPv6 packets with TUNSLMODE configured.
PR kern/58013

(martin)

Pull up following revision(s) (requested by riastradh in ticket #627):

sys/net/if_tun.c: revision 1.175

tun(4): Allow IPv6 packets with TUNSLMODE configured.
PR kern/58013

(martin)

be sure to byte swap ext.len when checking/printing it.

noted by rillig@.

(mrg)

Pull up following revision(s) (requested by riastradh in ticket #1945):

sys/kern/sysv_shm.c: revision 1.142 (patch)

Avoid overflow when computing kern.ipc.shmmax. Keep shmmax (bytes) and
shmall (pages) values aligned and use arithmetic everywhere instead
of shifts.

Should fix PR 57979

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1814):

sys/kern/sysv_shm.c: revision 1.142

Avoid overflow when computing kern.ipc.shmmax. Keep shmmax (bytes) and
shmall (pages) values aligned and use arithmetic everywhere instead
of shifts.

Should fix PR 57979

(martin)

Pull up following revision(s) (requested by riastradh in ticket #626):

sys/kern/sysv_shm.c: revision 1.142

Avoid overflow when computing kern.ipc.shmmax. Keep shmmax (bytes) and
shmall (pages) values aligned and use arithmetic everywhere instead
of shifts.

Should fix PR 57979

(martin)

Pull up following revision(s) (requested by riastradh in ticket #625):

usr.sbin/certctl/certctl.sh: revision 1.7

certctl(8): Pacify formal POSIX sh syntax.

According to POSIX 2018, the syntax between `then' and `elif' and
`fi' must be a _non-empty_ list of commands:
compound_list    : linebreak term
                | linebreak term separator
                ;
...
if_clause        : If compound_list Then compound_list else_part Fi
                | If compound_list Then compound_list          Fi
                ;
else_part        : Elif compound_list Then compound_list
                | Elif compound_list Then compound_list else_part
                | Else compound_list
                ;

https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html#tag_18
+_10_02

NetBSD's sh(1) currently doesn't enforce this and allows an empty
sequence of commands, but let's not rely on that nonstandard quirk.

Noted in PR 57997.

(martin)

Pull up following revision(s) (requested by riastradh in ticket #624):

usr.sbin/wgconfig/wgconfig.8: revision 1.11

Fix typo in wgconfig(8)
From rudolf in PR 57663

(martin)

Pull up following revision(s) (requested by christos in ticket #1813):

etc/named.conf: revision 1.11
usr.sbin/postinstall/postinstall.in: revision 1.59
external/mpl/bind/dist/lib/isc/netmgr/netmgr-int.h: revision 1.11

Make sure that the extra field is maximally aligned since it is used for
other struct storage.
- fix named.conf (remove dnssec-enable option)
- use proper local variables instead of adding _ or other prefixes.
- centralize rm use
- use grep -q instead of > /dev/null
- reduce constant duplication

remove obsolete option "dnssec-enable"

(martin)

Pull up following revision(s) (requested by christos in ticket #622):

etc/named.conf: revision 1.11
usr.sbin/postinstall/postinstall.in: revision 1.59
external/mpl/bind/dist/lib/isc/netmgr/netmgr-int.h: revision 1.11
usr.sbin/postinstall/postinstall.in: revision 1.60
usr.sbin/postinstall/postinstall.in: revision 1.61

Make sure that the extra field is maximally aligned since it is used for
other struct storage.
- fix named.conf (remove dnssec-enable option)
- use proper local variables instead of adding _ or other prefixes.
- centralize rm use
- use grep -q instead of > /dev/null
- reduce constant duplication

no local in loops, simplify eval (thanks kre)

postinstall: fix endless loop (since 2024-03-07)

remove obsolete option "dnssec-enable"

(martin)

Pull up following revision(s) (requested by riastradh in ticket #621):

usr.sbin/certctl/certctl.sh: revision 1.6

certctl(8): Avoid basename(1).

Saves some time running subprocesses.  Since this is only used for
non-directories (i.e., there's never trailing / on the inputs), it
suffices to delete the longest prefix matching glob `*/' with shell
parameter expansion -- much cheaper than spawning a subprocess.

Shaves off about 1/3 of the time spent in `certctl list' on an
aarch64 VM in qemu.

PR bin/57993

(martin)

Pull up following revision(s) (requested by riastradh in ticket #620):

external/mpl/mozilla-certdata/dist/certdata.txt up to 1.1.1.2
external/mpl/mozilla-certdata/share/certs/TrustCor_RootCert_CA-2.pem: file removal
external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-01.pem: revision 1.1
distrib/sets/lists/base/mi: revision 1.1334
external/mpl/mozilla-certdata/share/certs/Global_Chambersign_Root_-_2008.pem: file removal
external/mpl/mozilla-certdata/share/certs/Telekom_Security_SMIME_ECC_Root_2021.pem: revision 1.1
doc/3RDPARTY: revision 1.1994
external/mpl/mozilla-certdata/share/certs/TrustAsia_Global_Root_CA_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/email.trust: revision 1.2
external/mpl/mozilla-certdata/share/certs/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem: file removal
external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-01.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem: file removal
external/mpl/mozilla-certdata/share/certs/D-Trust_SBR_Root_CA_2_2022.pem: revision 1.1
external/mpl/mozilla-certdata/share/server.trust: revision 1.2
external/mpl/mozilla-certdata/share/certs/D-Trust_SBR_Root_CA_1_2022.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Telekom_Security_TLS_ECC_Root_2020.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TrustCor_RootCert_CA-1.pem: file removal
external/mpl/mozilla-certdata/share/certs/Security_Communication_Root_CA.pem: file removal
external/mpl/mozilla-certdata/share/certs/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem: file removal
doc/3RDPARTY: revision 1.1982
external/mpl/mozilla-certdata/share/certs/Telekom_Security_TLS_RSA_Root_2023.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem: file removal
external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-02.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Telekom_Security_SMIME_RSA_Root_2023.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Chambers_of_Commerce_Root_-_2008.pem: file removal
external/mpl/mozilla-certdata/share/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem: revision 1.2
external/mpl/mozilla-certdata/share/certs/TrustCor_ECA-1.pem: file removal
external/mpl/mozilla-certdata/share/Makefile: revision 1.4
external/mpl/mozilla-certdata/share/certs/TrustAsia_Global_Root_CA_G4.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-02.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.1.pem: file removal
external/mpl/mozilla-certdata/share/certdata.awk: revision 1.3

new mozilla-certdata out

mozilla-certdata: Update Mozilla certdata.txt.
nss hg date: 2024-02-12
nss hg revision: c17a3709bdd6e706040ac268a1d2b488c2fab5d8
Status:
Vendor Tag:    MOZILLA-CERTDATA
Release Tags:  mozilla-certdata-20240212
U src/external/mpl/mozilla-certdata/dist/certdata.txt
No conflicts created by this import
From http://mail-index.netbsd.org/source-changes/2024/03/03/msg150226.html:
Committed By:  riastradh
Date:          Sun Mar  3 04:24:41 UTC 2024

mozilla-certdata: Update reference in Makefile.
mozilla-certdata: regen
mozilla-certdata: Update set lists.

doc/3RDPARTY: mozilla-certdata is up-to-date.
mozilla-certdata: Fix typo: sprintf, not snprintf, in awk.
Only used during import, and only in case something is wrong anyway
requiring manual intervention, so no change to builds.

(martin)

lint: add details to the message about integer overflow

Having only the operator was too unspecific to be actionable, so add the
actual numbers and the data type.

(rillig)

Tickets #1939, #1941 - #1944

(martin)

Tickets #1806, #1808 - #1812

(martin)

Tickets #612 - #619

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1944):

sys/netinet6/in6.c: revision 1.292

netinet6: Avoid NPD on `ifconfig ifN inet6 ... pltime 0 vltime 0'.
PR kern/53922

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1812):

sys/netinet6/in6.c: revision 1.292

netinet6: Avoid NPD on `ifconfig ifN inet6 ... pltime 0 vltime 0'.
PR kern/53922

(martin)

Pull up following revision(s) (requested by riastradh in ticket #619):

sys/netinet6/in6.c: revision 1.292

netinet6: Avoid NPD on `ifconfig ifN inet6 ... pltime 0 vltime 0'.
PR kern/53922

(martin)

Pull up following revision(s) (requested by riastradh in ticket #618):

sys/netinet/if_arp.c: revision 1.312

Attribute debug message.
Fixes PR 57959

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1943):

usr.bin/getconf/getconf.c: revision 1.37
usr.bin/getconf/getconf.1: revision 1.14

PR/57875: Jason Bacon: Try again without an _ for portability.
getconf.1: Note that leading underscores in configuration
variable names are ignored by getconf(1).

While here, add a section with examples, and make the synopsis
more concise.

PR bin/57875

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1811):

usr.bin/getconf/getconf.c: revision 1.37
usr.bin/getconf/getconf.1: revision 1.14

PR/57875: Jason Bacon: Try again without an _ for portability.
getconf.1: Note that leading underscores in configuration
variable names are ignored by getconf(1).

While here, add a section with examples, and make the synopsis
more concise.

PR bin/57875

(martin)

Pull up following revision(s) (requested by riastradh in ticket #617):

usr.bin/getconf/getconf.c: revision 1.37
usr.bin/getconf/getconf.1: revision 1.14

PR/57875: Jason Bacon: Try again without an _ for portability.
getconf.1: Note that leading underscores in configuration
variable names are ignored by getconf(1).

While here, add a section with examples, and make the synopsis
more concise.

PR bin/57875

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1942):

sys/dev/usb/if_urtwn.c: revision 1.109 (patch)

urtwn(4): Ditch old queued commands on overflow.
Don't increment ring->queued past what the task will decrement.

This is a stop-gap measure; really, we should just have one task for
each operation that is deferred to the task thread.

PR kern/57965

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1810):

sys/dev/usb/if_urtwn.c: revision 1.109 (patch)

urtwn(4): Ditch old queued commands on overflow.
Don't increment ring->queued past what the task will decrement.

This is a stop-gap measure; really, we should just have one task for
each operation that is deferred to the task thread.

PR kern/57965

(martin)

Pull up following revision(s) (requested by riastradh in ticket #616):

sys/dev/usb/if_urtwn.c: revision 1.109

urtwn(4): Ditch old queued commands on overflow.
Don't increment ring->queued past what the task will decrement.

This is a stop-gap measure; really, we should just have one task for
each operation that is deferred to the task thread.

PR kern/57965

(martin)

kdump: keep the comment with its corresponding code

No binary change.

(rillig)

Pull up following revision(s) (requested by riastradh in ticket #1809):

sys/netinet6/raw_ip6.c: revision 1.184 (patch)
sys/netinet6/icmp6.c: revision 1.256 (patch)

Deliver timestamps also to raw sockets.
Fixes PR 57955

(martin)

Pull up following revision(s) (requested by riastradh in ticket #615):

sys/netinet6/raw_ip6.c: revision 1.184
sys/netinet6/icmp6.c: revision 1.256

Deliver timestamps also to raw sockets.
Fixes PR 57955

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1941):

lib/libc/net/getnameinfo.3: revision 1.43

Document the NI_NUMERICSCOPE flag.
PR lib/57832

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1808):

lib/libc/net/getnameinfo.3: revision 1.43

Document the NI_NUMERICSCOPE flag.
PR lib/57832

(martin)

Pull up following revision(s) (requested by riastradh in ticket #614):

lib/libc/net/getnameinfo.3: revision 1.43

Document the NI_NUMERICSCOPE flag.
PR lib/57832

(martin)

Pull up following revision(s) (requested by riastradh in ticket #613):

sys/dev/usb/usbdi.c: revision 1.248
sys/dev/usb/usbdi.c: revision 1.249

usbdi(9): Avoid calling ubm_softint with lock held and polling on.
usbdi(9): Avoid taking locks in usbd_transfer while polling.

PR kern/57783

(martin)

postinstall: fix parameter order in usage message

(rillig)

compiler_rt: allow signed bit shifts for __negv

Standard C defines '1 << 31' as undefined behavior, but
https://gcc.gnu.org/onlinedocs/gcc/Integers-implementation.html allows
it for GCC.

(rillig)

PR/58018: Damir Holovati: ext2fs readdir (d_type conversion error)

(christos)

sparc: fix snprintb formats for SFSR_BITS

(rillig)

lsi64854reg: fix snprintb formats DDMACSR_BITS and PDMACSR_BITS

(rillig)

decode some {g,s}etsockopt*.

(christos)

powerpc/hid: fix snprintb format for HID0_970_BITMASK_U

(rillig)

sparc/sbusreg: fix snprintb format for SBUS_AFSR_BITS

(rillig)

sparc/vmereg: fix snprintb format VMEBUS_AFSR_BITS

(rillig)

lint: clean up tree matcher for snprintb calls

(rillig)

lint: saturate signed integer overflow

In array address calculations, this prevents a 'array subscript cannot
be negative' for large array subscripts.

(rillig)

lint: fix integer overflow detection

Previously, an unsigned operation that had a negative result went
undetected in a few cases. Now, all results that are not representable
by their type are considered overflows.

The implementation of signed shift-right had been wrong for a few
commits.

(rillig)

lint: clean up check for overflow in integer constants

(rillig)

lint: detect more cases of integer overflow in constant expressions

For unsigned integers, detect when 'a + b' wraps around.

(rillig)

Pull up following revision(s) (requested by riastradh in ticket #1939):

lib/libc/net/getnameinfo.c: revision 1.60

PR/57609: Carl Engvall: Add salen checks but accept larger sizes
(upto sockaddr_storage)

(martin)

Pull up following revision(s) (requested by riastradh in ticket #1806):

lib/libc/net/getnameinfo.c: revision 1.60

PR/57609: Carl Engvall: Add salen checks but accept larger sizes
(upto sockaddr_storage)

(martin)

Pull up following revision(s) (requested by riastradh in ticket #612):

lib/libc/net/getnameinfo.c: revision 1.60

PR/57609: Carl Engvall: Add salen checks but accept larger sizes
(upto sockaddr_storage)

(martin)

lint: split integer overflow check into separate functions

The checks for unsigned and signed integers differ for each operator, so
there's no point having both parts in the same function.

(rillig)

tests/lint: enable test for integer overflow in array index

(rillig)

lint: remove wrong warning about overflow in unary '-' for unsigned

(rillig)

lint: fix integer overflow in integer overflow check

(rillig)

tests/lint: test integer overflow when folding constants

The test is still incomplete, yet it has discovered several bugs that
are worth fixing.

(rillig)

lint: in check for integer overflow, sort operators

(rillig)

nvme(4): don't write to INTMC register if in intx mode

this matches the handling of INTMS, both of which have the same
restrictions on access in MSI-X mode.

ideally, this register should be written to with a full set of
values for MSI (upto 32 bits), but trying to force MSI mode for
my test machine makes the system unstable.

tested with samsung SM981 256GB, samsung 980 PRO 1TB, and intel
760p 250G.

(mrg)