Re: Update: PostgreSQL 17.5

2025-05-09 Thread Mark Patruck
+share/doc/postgresql/html/release-17-5.html share/doc/postgresql/html/release-17.html share/doc/postgresql/html/release-prior.html share/doc/postgresql/html/release.html -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74 F644 0D3C F66F F286 5E51 https

Re: databases/timescaledb 2.19.3

2025-05-05 Thread Mark Patruck
On 27.04.2025 12:19, Mark Patruck wrote: Update databases/timescaledb to 2.19.3 (+ extras) released about two weeks ago. Changes in 2.19.3: https://github.com/timescale/timescaledb/releases/tag/2.19.3 No issues spotted after upgrading my running environment (Zabbix). ping Index

net/zabbix 7.0.12

2025-04-27 Thread Mark Patruck
+zabbix/locale/uz/ +zabbix/locale/uz/LC_MESSAGES/ +zabbix/locale/uz/LC_MESSAGES/frontend.mo +zabbix/locale/uz/LC_MESSAGES/frontend.po zabbix/locale/vi/ zabbix/locale/vi/LC_MESSAGES/ zabbix/locale/vi/LC_MESSAGES/frontend.mo -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3

databases/timescaledb 2.19.3

2025-04-27 Thread Mark Patruck
--${GH_TAGNAME}.sql -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74 F644 0D3C F66F F286 5E51 https://www.wrapped.cx

Re: UPDATE: databases/timescaledb 2.19.0

2025-03-27 Thread Mark Patruck
/timescaledb--${GH_TAGNAME}.sql share/postgresql/extension/timescaledb--2.5.0--${GH_TAGNAME}.sql share/postgresql/extension/timescaledb--2.5.1--${GH_TAGNAME}.sql -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74 F644 0D3C F66F F286 5E51 https://www.wrapped.cx

net/zabbix 7.0.11

2025-03-27 Thread Mark Patruck
APACHE_STR "TimescaleDB Apache 2 Edition" + #define ZBX_TIMESCALE_LICENSE_COMMUNITY "timescale" + #define ZBX_TIMESCALE_LICENSE_COMMUNITY_STR "TimescaleDB Community Edition" -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74 F644 0D3C F66F F286 5E51 https://www.wrapped.cx

Re: databases/timescaledb 2.18.2

2025-02-27 Thread Mark Patruck
On 27.02.2025 13:54, Stuart Henderson wrote: On 2025/02/26 11:36, Mark Patruck wrote: On 26.02.2025 10:24, Stuart Henderson wrote: > On 2025/02/26 10:30, Mark Patruck wrote: > > Hi, > > > > this updates databases/timescaledb to 2.18.2 with lots of important > > fixes

Re: databases/timescaledb 2.18.2

2025-02-26 Thread Mark Patruck
On 26.02.2025 10:24, Stuart Henderson wrote: On 2025/02/26 10:30, Mark Patruck wrote: Hi, this updates databases/timescaledb to 2.18.2 with lots of important fixes, especially if you use net/zabbix. Your zabbix update has "Includes upstream support for TimescaleDB 2.18", so do

net/zabbix 7.0.10

2025-02-26 Thread Mark Patruck
: configure #include int main (void) -@@ -18979,16 +18980,16 @@ fi +@@ -18982,16 +18983,16 @@ fi RANLIB="ranlib" -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74 F644 0D3C F66F F286 5E51 https://www.wrapped.cx

databases/timescaledb 2.18.2

2025-02-26 Thread Mark Patruck
/postgresql/extension/timescaledb--${GH_TAGNAME}.sql share/postgresql/extension/timescaledb--2.5.0--${GH_TAGNAME}.sql share/postgresql/extension/timescaledb--2.5.1--${GH_TAGNAME}.sql -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74 F644 0D3C F66F F286 5E51 https

Re: openports.pl down?

2025-02-17 Thread Mark Waite
https://github.com/jenkins-infra/jenkins.io/pull/7889 submitted. Comments welcomed Mark Waite

openports.pl down?

2025-02-16 Thread Mark Waite
It appears that openports.pl is no longer responding. Is there a replacement? The Jenkins project linked to openports.pl from our download page. Is there a better location? Mark Waite

A few more openssl x-only fixes

2025-02-06 Thread Mark Kettenis
After enabling SVE (the "new" SIMD instruction set on arm64) there is a bit more perlasm that needs to be adjusted. The machine I'm testing on also implements the SM3 and SM4 instructions and the perlasm for that needs fixes as well. Diff below fixes all three openssl versions. The fixes are ide

Re: Update RK3588-specific U-Boot to 2025.01

2025-01-25 Thread Mark Kettenis
> Date: Sat, 25 Jan 2025 22:13:36 +0100 > From: Patrick Wildt > > Hi, > > this Update's the RK3588-specific U-Boot to 2025.01. I'm successfully > running it on my NanoPi R6C. Please give it a try on some of your > RK3588 boxes. > > The patch updates are fairly simple: > > * All DTSs have mov

Re: Update arm64-qcom-dtb firmware

2025-01-22 Thread Mark Kettenis
> Date: Tue, 21 Jan 2025 21:56:41 +0100 > From: Kirill A. Korinsky > > On Tue, 21 Jan 2025 21:42:40 +0100, > Mark Kettenis wrote: > > > > [ Now with diff ] > > > > This rebases things on top of Linux 6.13 and adds some recent patches from: > > &g

Update arm64-qcom-dtb firmware

2025-01-21 Thread Mark Kettenis
[ Now with diff ] This rebases things on top of Linux 6.13 and adds some recent patches from: https://github.com/SpieringsAE/linux/tree/wip/x1e80100-6.13 which in turn includes patches from: https://github.com/jhovold/linux/tree/wip/x1e80100-6.13 The vast majority of these patches have rec

Update arm64-qcom-dtb firmware

2025-01-21 Thread Mark Kettenis
This rebases things on top of Linux 6.13 and adds some recent patches from: https://github.com/SpieringsAE/linux/tree/wip/x1e80100-6.13 which in turn includes patches from: https://github.com/jhovold/linux/tree/wip/x1e80100-6.13 The vast majority of these patches have received positive revi

Re: devel/gdb assorted fixes

2024-12-28 Thread Mark Kettenis
> Date: Fri, 27 Dec 2024 18:01:44 +0100 > From: Jeremie Courreges-Anglas > > I'm working on an update to gdb-15.2, but the changes below are > already legit. > > 0. add some missing files to ALLDEPFILES for consistency, update > comment > 1. add ppc64-obsd-tdep.o to ALL_64_TARGET_OBS, so that

Re: UPDATE: x265 4.1

2024-12-01 Thread Mark Kettenis
> Date: Sun, 1 Dec 2024 02:48:38 -0500 > From: Brad Smith > > Here is an update to x265 4.1. > > Tested on older amd64. Needs testing on modern amd64 for IBT. > > aarch64 currently crashes in the NEON code. Could someone take a > look at this? Is this xonly or something else? With the two x-on

Re: net/zabbix 7.0.6

2024-11-28 Thread Mark Patruck
Update net/zabbix to 7.0.6 released eight days ago. Release notes 7.0.6: https://www.zabbix.com/rn/rn7.0.6 Changes in 7.0.6: https://www.zabbix.com/documentation/7.0/en/manual/introduction/whatsnew706 Upgrade notes 7.0.6: https://www.zabbix.com/documentation/7.0/en/manual/installation/upgrade_n

Re: arm64-qcom-dtb: add qccpucp + arm-scmi

2024-11-16 Thread Mark Kettenis
> Date: Sat, 16 Nov 2024 22:41:47 +0100 > From: Tobias Heider > > I've been working on enabling CPUCP and arm-scmi, I guess we can > already add them to the dtb since they cause no harm. > > This adds the linux changes from: > https://lore.kernel.org/linux-arm-msm/20241030130840.2890904-1-quic_s

Re: Update m1n1 to 1.4.16

2024-11-03 Thread Mark Kettenis
> Date: Fri, 1 Nov 2024 08:37:09 +1100 > From: Jonathan Gray > > On Thu, Oct 31, 2024 at 09:31:38PM +0100, Mark Kettenis wrote: > > Some commit messages look like they might matter for people that > > update their macOS install. > > > > Tested on my M2 Pro Ma

Update m1n1 to 1.4.16

2024-10-31 Thread Mark Kettenis
Some commit messages look like they might matter for people that update their macOS install. Tested on my M2 Pro Mac Mini. ok? Index: sysutils/m1n1/Makefile === RCS file: /cvs/ports/sysutils/m1n1/Makefile,v diff -u -p -r1.15 Makefi

Re: net/zabbix 7.0.5

2024-10-30 Thread Mark Patruck
Updated diff to net/zabbix 7.0.5 released eight days ago. Release notes 7.0.5: https://www.zabbix.com/rn/rn7.0.5 Changes in 7.0.5: https://www.zabbix.com/documentation/7.0/en/manual/introduction/whatsnew705 Upgrade notes 7.0.5: https://www.zabbix.com/documentation/7.0/en/manual/installation/upg

Re: net/zabbix 7.0.4

2024-09-25 Thread Mark Patruck
Updated diff to net/zabbix 7.0.4 released yesterday. Release notes 7.0.4: https://www.zabbix.com/rn/rn7.0.4 Changes in 7.0.4: https://www.zabbix.com/documentation/7.0/en/manual/introduction/whatsnew704 Upgrade notes 7.0.4: https://www.zabbix.com/documentation/7.0/en/manual/installation/upgrade_

Re: net/zabbix-agent PSK issue

2024-09-12 Thread Mark Patruck
of parameter "TLSConnect" requires support of encrypted connection with PSK but support for PSK was not compiled in amandil# pkg_info zabbix-agent Information for inst:zabbix-agent-6.4.11 Best Regards -- Mark Patruck ( mark at wrapped.cx ) GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE

net/zabbix 7.0.3

2024-09-04 Thread Mark Patruck
so far i did not spot any issues. It'd be nice if 7.6 ships with net/zabbix 7.0.x...so any feedback, tests are welcome. -Mark Index: Makefile === RCS file: /cvs/ports/net/zabbix/Makefile,v diff -u -p -r1.215 Makefile --

Re: elf_aux_info in the mozillas on arm64 (was: Re: aarch64 bulk build report)

2024-07-22 Thread Mark Kettenis
> Date: Mon, 22 Jul 2024 00:19:28 +0200 > From: Jeremie Courreges-Anglas > > On Sat, Jul 20, 2024 at 10:50:30AM +0200, Landry Breuil wrote: > > Le Fri, Jul 19, 2024 at 10:45:18AM +0200, Landry Breuil a écrit : > > > Le Fri, Jul 19, 2024 at 08:49:54AM +0200, Peter Hessler a écrit : > > > > On 2024

Re: ruby arm64 BTI

2024-06-22 Thread Mark Kettenis
> From: "Theo de Raadt" > Date: Sat, 22 Jun 2024 06:16:03 -0600 > > Mark Kettenis wrote: > > > Theo pointed out the NOBTCFI reversal here. Now the reason that we > > still see SIGILL despite fixes to the assembly code is because the > > -mbr

ruby arm64 BTI

2024-06-22 Thread Mark Kettenis
Theo pointed out the NOBTCFI reversal here. Now the reason that we still see SIGILL despite fixes to the assembly code is because the -mbranch-protection=pac-ret option added by the configure script actually downgrades our default of enabling both BTI and PAC to just enabling PAC. So the necessar

Re: Update m1n1 and apple-boot firmware

2024-05-18 Thread Mark Kettenis
> From: Stuart Henderson > Date: Fri, 17 May 2024 20:49:33 +0100 > > Better hold off for now, seems there's a display init problem on M1 (at > least desktop) Fixed in m1n1 1.4.14. > On 17 May 2024 20:20:47 Mark Kettenis wrote: > > https://social.

Update m1n1 and apple-boot firmware

2024-05-17 Thread Mark Kettenis
https://social.treehouse.systems/@AsahiLinux/112454079096607233 This updates m1n1 to a version that has the mentioned workaround. Once this is in, we should make the new firmware available, probably also for the 7.5 release. ok? Index: sysutils/m1n1/Makefile

security/openssl/3.1 avx512 fix

2024-04-14 Thread Mark Kettenis
This backports https://github.com/openssl/openssl/commit/143ca66cf00c88950d689a8aa0c89888052669f4 such that the tests pass again on avx512 hardware. ok? Index: security/openssl/3.1/Makefile === RCS file: /cvs/ports/security/openss

Re: big-endian sysutils/u-boot/{rk356x,rk3588}

2024-04-13 Thread Mark Kettenis
> From: Kurt Miller > Date: Sat, 13 Apr 2024 13:21:49 + > > On Mar 21, 2024, at 1:16 PM, George Koehler wrote: > > > > I don't use u-boot, but I saw the powerpc bulk failing to package > > u-boot for rk356x and rk3588. This diff fixes the failures by adding > > 5 endian swaps. I don't kno

Re: sysutils/u-boot/rk3308

2024-03-27 Thread Mark Kettenis
> Date: Wed, 27 Mar 2024 18:57:11 +1000 > From: Jonathan Matthew > > We've had kernel support for RK3308 based systems for a while, but it's been > difficult to install on them. Recent U-Boot versions include support for > them, so we can fix that now. > > I've replaced the old hand built Rock

sysuitls/u-boot: split off 32-bit ARM Allwinner SoCs

2024-03-22 Thread Mark Kettenis
The diff below splits off the 32-bit ARM Allwinner SoCs and updates them to U-Boot 2024.01. I've tested this on a few of my armv7 boards and I'm pretty confident it doesn't break any of them. Theo, this has consequences for the armv7 miniroots as the "cubie" variant includes firmwares that move f

devel/libffi: arm64 BTI fix

2024-03-07 Thread Mark Kettenis
This one was a bit tricky as I had to adjust the offsets used in the instructions. But with this lang/guile3 no longer generates SIGILL when running the tests. ok? Index: devel/libffi/Makefile === RCS file: /cvs/ports/devel/libffi/

Re: gnustep/libobjc2 and BTI (was: Re: x11/gnustep/libobjc2 failed to build)

2024-03-07 Thread Mark Kettenis
> Date: Thu, 7 Mar 2024 12:55:50 + > From: Stuart Henderson > > On 2024/03/07 10:28, Mark Kettenis wrote: > > This version looks best to me. But I suspect arm64 needs more work in > > this version too. > > I tried to give it a spin with gnustep-based software,

Re: gnustep/libobjc2 and BTI (was: Re: x11/gnustep/libobjc2 failed to build)

2024-03-07 Thread Mark Kettenis
> From: "Sebastian Reitenbach" > Date: Thu, 07 Mar 2024 09:01:13 +0100 > > Hi, > > On Wednesday, March 06, 2024 23:42 CET, Mark Kettenis > wrote: > > > > Date: Wed, 06 Mar 2024 23:32:51 +0100 > > > From: Mark Kettenis > > > >

Re: gnustep/libobjc2 and BTI (was: Re: x11/gnustep/libobjc2 failed to build)

2024-03-06 Thread Mark Kettenis
> Date: Wed, 06 Mar 2024 23:32:51 +0100 > From: Mark Kettenis > > > Date: Wed, 6 Mar 2024 19:02:35 +0100 > > From: Jeremie Courreges-Anglas > > > > Le Wed, Mar 06, 2024 at 10:17:32AM +0100, Theo Buehler a écrit : > > > Could you please resend

Re: gnustep/libobjc2 and BTI (was: Re: x11/gnustep/libobjc2 failed to build)

2024-03-06 Thread Mark Kettenis
> Date: Wed, 6 Mar 2024 19:02:35 +0100 > From: Jeremie Courreges-Anglas > > Le Wed, Mar 06, 2024 at 10:17:32AM +0100, Theo Buehler a écrit : > > Could you please resend the endbr64 patches with Cc kettenis? They > > should make release. > > Since I now have a laptop with BTI I figured I was goin

sysutils/u-boot/rk3588: Add NanoPi R6C support

2024-03-05 Thread Mark Kettenis
After committing support for the NanoPi R6S, somebody asked me about the R6C. That model only has two Ethernet interfaces (2.5G rge(4) and 1G dwqe(4)), but does have an M.2 slot for an SSD. So the config gets a CONFIG_NVME_PCI=y on top of what we had for the R6S. ok? Index: sysutils/u-boot/rk3

multimedia/openh264: Fix arm64 asm

2024-03-05 Thread Mark Kettenis
This has been broken for a while since there was no BTI support, but also no X-only support. With this fixed, make test passes. ok? Index: multimedia/openh264/Makefile === RCS file: /cvs/ports/multimedia/openh264/Makefile,v retriev

Re: libdv: missing ENDBR64

2024-02-28 Thread Mark Kettenis
> Date: Wed, 28 Feb 2024 20:10:58 +0100 > From: Theo Buehler > > This is straightforward. There doesn't seem to be a possibility of > shortcuts via a macro, so just add endbr64 to the four functions in this > file. I could not find code that actually uses these, but it's probably > better to be s

Re: UPDATE: aom 3.8.1

2024-02-28 Thread Mark Kettenis
> Date: Wed, 28 Feb 2024 16:17:54 + > From: Stuart Henderson > > +cc kettenis for the IBT patch Looks good to me. > On 2024/02/28 16:15, Stuart Henderson wrote: > > On 2024/02/23 17:19, Brad Smith wrote: > > > Here is an update to aom 3.8.1. > > > > > > https://aomedia.googlesource.com/aom

Re: multimedia/libvpx: ENDBR64

2024-02-28 Thread Mark Kettenis
> Date: Wed, 28 Feb 2024 12:43:05 +0100 > From: Robert Nagy > > It seems that we need more here. This makes all the regression > tests pass. I suspect there will be still more needed, but we > need something to uncover those. Not entirely clear to me why the linker doesn't issue warnings here, t

Re: missing endbr64

2024-02-27 Thread Mark Kettenis
> Date: Tue, 27 Feb 2024 16:06:59 + > From: Stuart Henderson > > On 2024/02/27 16:03, Stuart Henderson wrote: > > On 2024/02/27 12:08, Theo Buehler wrote: > > > Now that the bulk has completed here's the remainder of the list with > > > two more that may need fixing. 119 ports total contained

Re: missing endbr64

2024-02-27 Thread Mark Kettenis
> Date: Tue, 27 Feb 2024 12:08:22 +0100 > From: Theo Buehler > > Now that the bulk has completed here's the remainder of the list with > two more that may need fixing. 119 ports total contained a warning. > I did not build the chromium variants. Only two more? I guess all the libs (where this m

Re: Add missing endbr64 to gstreamer1-plugins-good

2024-02-25 Thread Mark Kettenis
> Date: Sun, 25 Feb 2024 19:49:52 +0100 > From: Theo Buehler > > This fixes > > ld: warning: gst_yadif_filter_line_mode0_ssse3: missing endbr64 > ld: warning: gst_yadif_filter_line_mode2_ssse3: missing endbr64 > ld: warning: gst_yadif_filter_line_mode0_sse2: missing endbr64 > ld: warning: gst_ya

Re: missing endbr64

2024-02-25 Thread Mark Kettenis
> Date: Sun, 25 Feb 2024 18:43:54 + > From: Stuart Henderson > > > > sysutils/borgbackup/2.0.log: lots of warnings about symbols from > > > openssl/3.1: > > > ld: warning: aesni_set_decrypt_key: missing endbr64 > > > ld: warning: aesni_set_encrypt_key: missing endbr64 > > > ld: warning: ChaC

Re: missing endbr64

2024-02-25 Thread Mark Kettenis
> From: Theo Buehler > Date: Sun, 25 Feb 2024 09:39:39 + > > Here's the list of ~90 ports emitting warnings after about 1/4 of an > amd64 bulk. First the ports that I haven't looked at more closely with > (some of) the warnings. Then some ports using D where I suspect NOBTCFI > is missing. Go

Re: games/allegro: add ENDBR64

2024-02-25 Thread Mark Kettenis
> Date: Sun, 25 Feb 2024 10:26:59 +0100 > From: Theo Buehler > > liballeg is used by at the following ports, most of which also emit the > same warning. All global symbols are generated by the FUNC macro, so fix > that. There's no arm64 assembly as far as I can tell. > > audio/dumb.log > games/c

Re: missing endbr64

2024-02-25 Thread Mark Kettenis
> From: Theo Buehler > Date: Sun, 25 Feb 2024 09:39:39 + > > Here's the list of ~90 ports emitting warnings after about 1/4 of an > amd64 bulk. First the ports that I haven't looked at more closely with > (some of) the warnings. Then some ports using D where I suspect NOBTCFI > is missing. Go

Re: devel/objfw: add BTCFI landing pads for amd64 and arm64

2024-02-24 Thread Mark Kettenis
.nil.im/downloads/objfw-1.0.10.tar.gz.sig > > Am 24.02.24 um 22:17 schrieb Mark Kettenis: > > > Ah, right. What happens in that case is that the branch will use > > register X16 or X17 and those are special in the sense that both "bti > > c" and "bti j&q

Re: devel/objfw: add BTCFI landing pads for amd64 and arm64

2024-02-24 Thread Mark Kettenis
> Date: Sat, 24 Feb 2024 21:40:53 +0100 > From: Jonathan Schleifer > > Am 24.02.24 um 21:30 schrieb Mark Kettenis: > > > Unless we explicitly mark them as not, yes, they will use IBT (but not > > Shadow Stack). > > Ah cool! > > > No. Tail call eli

Re: devel/objfw: add BTCFI landing pads for amd64 and arm64

2024-02-24 Thread Mark Kettenis
> Date: Sat, 24 Feb 2024 20:01:06 +0100 > From: Theo Buehler > > This adds missing landing pads for amd64 and arm64. Not sure if for > upstream a dance using _CET_ENDBR would be preferable. For the > port I kept it simple. > > ld: warning: objc_msg_lookup: missing endbr64 > ld: warning: objc_ms

Re: devel/objfw: add BTCFI landing pads for amd64 and arm64

2024-02-24 Thread Mark Kettenis
r64 > > ld: warning: OFForward: missing endbr64 > > ld: warning: OFForward_stret: missing endbr64 > > Thanks for reporting this! Does this mean all binaries on OpenBSD use > CET now? Unless we explicitly mark them as not, yes, they will use IBT (bu

Re: openssl/3.1: missing endbr64 in bsaes_xts

2024-02-24 Thread Mark Kettenis
> Date: Sat, 24 Feb 2024 17:59:55 +0100 > From: Theo Buehler > > Two more endbr64 were missed in 3.1. I'll sync the diff to quictls. These are indeed assigned to function pointers in crypto/evp/e_aes.c ok kettenis@ > Index: Makefile > ===

multimedia/libvpx: ENDBR64

2024-02-24 Thread Mark Kettenis
The asm in this port seems to have some x265 heritage. So there is a x86inc.asm file that we can patch. But it uses yasm instead of nasm and yasm doesn't know about endbr64. So just dump the bytes for that instruction into place. Seems to be fix playing youtube vids in chromium again. ok? In

Re: openssl/1.1: missing endbr64 for padlock engine

2024-02-24 Thread Mark Kettenis
> Date: Sat, 24 Feb 2024 17:33:10 +0100 > From: Theo Buehler > > This adds missing endbr64 to the padlock engine in openssl/1.1: > > ld: warning: padlock_capability: missing endbr64 > ld: warning: padlock_key_bswap: missing endbr64 > ld: warning: padlock_verify_context: missing endbr64 > ld: war

devel/ffcall: ENDBR64

2024-02-22 Thread Mark Kettenis
This has various asm bits that do some nasty things. Ionly fixed some as the other stuff seems to violate X-only and R^W. And some bits even use an executable stack. But nothing that uses this (lang/clisp and lang/gforth as far as I can tell) use -Wl,-zwxneeded or -Wl,--no-execute-only. So this

Re: security/libgcrypt: Sprinkle some ENDBR64 instructions

2024-02-22 Thread Mark Kettenis
l over-BTI, but I'm also looking at having the linker remove unnecessary ENDBR64 instructions at the start of a function. ok? On Tue, Feb 20 2024, Mark Kettenis wrote: > I probably could have done this by changing CFI_STARTPROC, like > on > arm64. But that would "over-BTI&q

Re: Update arm-trusted-firmware 2.10.2

2024-02-22 Thread Mark Kettenis
> Date: Thu, 22 Feb 2024 05:32:57 +0900 > From: SASANO Takayoshi > > Hi, here is the fixed version: I'm not sure about the "move away with date" approach. That is probably something a ports hacker should judge. But otherwise this is ok kettenis@ > Index: Makefile > ===

Re: Update arm-trusted-firmware 2.10.2

2024-02-21 Thread Mark Kettenis
> Date: Wed, 21 Feb 2024 22:59:53 +0900 > From: SASANO Takayoshi > > Hi, > > how about to add SUNXI_SETUP_REGULATORS=0'ed binary for Allwinner H6? Yes that looks reasonable. You'll need to bump the REVISION though. > Index: Makefile > ==

sysutils/u-boot-rk3588

2024-02-20 Thread Mark Kettenis
I've had this NanoPi R6S for over a year. It has three network ports: two rge(4) interfaces and one dwqe(4). Although the dwqe(4) doesn't work yet; I'm working on a diff for that. And you can get it in a really nice and solid case. Recently a device tree for this board made it into Linux. But

multimedia/openh264: ENDRB64 sprinkling

2024-02-20 Thread Mark Kettenis
Theo says I need to explain a bit more how to fix these issues so that you guys can fix things yourself in the future ;). This one is fairly simple. We're missing an ENDBR64 instruction at the start of exported assembly functions. Calling into the shared library through PLT entries involves an i

Re: sysuitls/u-boot/sun50i

2024-02-20 Thread Mark Kettenis
> Date: Tue, 20 Feb 2024 14:47:05 + > From: Stuart Henderson > > On 2024/02/20 14:53, Mark Kettenis wrote: > > This splits out the sun50i boards from the aarch64 package, updates > > the U-Boot version for those boards and includes the new crust SCP > > firmware

sysuitls/u-boot/sun50i

2024-02-20 Thread Mark Kettenis
This splits out the sun50i boards from the aarch64 package, updates the U-Boot version for those boards and includes the new crust SCP firmware in the image. The new sun50i package is provided as tgz file; the diff removes the relevant boards from the aarch64 package. My idea is to import the sun

Re: sysutils/crust: SCP firmware for Allwinner SoCs

2024-02-20 Thread Mark Kettenis
> From: Jeremie Courreges-Anglas > Date: Mon, 19 Feb 2024 23:34:34 +0100 > > On Mon, Feb 19 2024, Mark Kettenis wrote: > > This will be used in an upcoming u-boot update for Allwinner's 64-bit > > SoCs. This will bring "proper" S3-like suspend/re

security/libgcrypt: Sprinkle some ENDBR64 instructions

2024-02-20 Thread Mark Kettenis
I probably could have done this by changing CFI_STARTPROC, like on arm64. But that would "over-BTI" and there is a benefit in trying to avoid that on amd64. Let me know what you think. Index: security/libgcrypt/Makefile === RCS fil

multimedia/x264: IBT fixes

2024-02-19 Thread Mark Kettenis
Same diff as x265. There is no make test here, but the code is largely identical so I'm sure this is necessary here as well. ok? Index: multimedia/x264/Makefile === RCS file: /cvs/ports/multimedia/x264/Makefile,v retrieving revisio

multimedia/x265: IBT fixes

2024-02-19 Thread Mark Kettenis
This seems to be the magic to insert an endbr64 at the start of global functions. Even though many of these are hidden in the shared library, the majority seems to be called through function pointers that are setup based on the available instruction set extensions. With this diff "make test" pass

sysutils/crust: SCP firmware for Allwinner SoCs

2024-02-19 Thread Mark Kettenis
This will be used in an upcoming u-boot update for Allwinner's 64-bit SoCs. This will bring "proper" S3-like suspend/resume on selected boards. ok? diff --git a/sysutils/crust/Makefile b/sysutils/crust/Makefile new file mode 100644 index 000..3b187598161 --- /dev/null +++ b/sysutils/cru

security/openssl/3.2 endbr64 sprinkling

2024-02-18 Thread Mark Kettenis
ok? Index: security/openssl/3.2/Makefile === RCS file: /cvs/ports/security/openssl/3.2/Makefile,v retrieving revision 1.4 diff -u -p -r1.4 Makefile --- security/openssl/3.2/Makefile 30 Jan 2024 23:24:27 - 1.4 +++ securi

security/openssl/3.1 endbr64 sprinkling

2024-02-18 Thread Mark Kettenis
ok? Index: security/openssl/3.1/Makefile === RCS file: /cvs/ports/security/openssl/3.1/Makefile,v retrieving revision 1.18 diff -u -p -r1.18 Makefile --- security/openssl/3.1/Makefile 30 Jan 2024 16:49:39 - 1.18 +++ sec

security/openssl/1.1 endbr64 sprinkling

2024-02-18 Thread Mark Kettenis
ok? Index: Makefile === RCS file: /cvs/ports/security/openssl/1.1/Makefile,v retrieving revision 1.66 diff -u -p -r1.66 Makefile --- Makefile29 Nov 2023 11:47:57 - 1.66 +++ Makefile18 Feb 2024 22:23:53 - @@ -8,7 +

dav1d: add missing IBT landing pads for AVX-512

2024-02-18 Thread Mark Kettenis
A few landing pads were missed for AVX-512 code. No chance of hitting those on OpenBSD since we don't support AVX-512 yet. But I have a diff for this. Passes regress on a machine with AVX-512 enabled. Allows me to watch youtube vids on that machine. ok? Index: multimedia/dav1d/Makefile =

Update arm-trusted-firmware 2.10.2

2024-02-17 Thread Mark Kettenis
I tested rk3328, rk3399, sun50i_a64 and sun50i_h616. Earlier releases don't work on the H618 board that I have. Debug builds no longer fit the SRAM constraints on at least A64. So this switches to release builds. ok? Index: sysutils/arm-trusted-firmware/Makefile ==

Update u-boot-rk356x to 2024.01

2024-02-15 Thread Mark Kettenis
Also adds a few more more boards and sorts them in alphabetical order. Tested on the rock-3a-rk3568 with the latest -current. ok? P.S. Also tried to update u-boot-rk3588 to 2024.01, but that one is borked. I'll try again for 2024.04. Index: sysutils/u-boot/rk356x/Makefile

latest postfix version - security vulnerability and upgrade

2023-12-19 Thread Mark
r OpenBSD 7.4 stable packages, to upgrade postfix to latest stable revision, for security purposes in that case? Best wishes, regards. Mark.

apple-boot firmware update

2023-12-12 Thread Mark Kettenis
This updates m1n1 to the latest tagged version (1.4.8) and updates u-boot to a version that can initailize the "mtp" coprocessor on with newer system firmware. This is necessary to have a working keyboard on machines like the M2 MacBook Air when using the latest version of the Asahi installer. ok

Fix u-boot-asahi plist

2023-12-03 Thread Mark Kettenis
Add a few files that were missed in a previous update. ok? Index: sysutils/u-boot-asahi/Makefile === RCS file: /cvs/ports/sysutils/u-boot-asahi/Makefile,v retrieving revision 1.12 diff -u -p -r1.12 Makefile --- sysutils/u-boot-asahi

Re: Fix rk356x u-boot device trees

2023-11-24 Thread Mark Kettenis
> Date: Fri, 24 Nov 2023 16:27:07 +0800 > From: Kevin Lo > > On Thu, Nov 23, 2023 at 02:14:59PM +0100, Mark Kettenis wrote: > > > > The ranges provided by the "official" device tree still don't seem to > > work correctly. At least iwx(4) fails to

Fix rk356x u-boot device trees

2023-11-23 Thread Mark Kettenis
The ranges provided by the "official" device tree still don't seem to work correctly. At least iwx(4) fails to load its firmware with the default device tree. The diff below fixes this. This matches the device tree I built myself some time ago. ok? Index: sysutils/u-boot/rk356x/Makefile =

Re: libffi: fix arm64 bti

2023-11-21 Thread Mark Kettenis
> Date: Tue, 21 Nov 2023 16:08:13 +0100 > From: Tobias Heider > > On Tue, Nov 21, 2023 at 12:23:08PM +0100, Mark Kettenis wrote: > > > Date: Tue, 21 Nov 2023 12:04:42 +0100 > > > From: Tobias Heider > > > > > > On Tue, Nov 21, 2023 at 11:56:18AM

Re: libffi: fix arm64 bti

2023-11-21 Thread Mark Kettenis
> Date: Tue, 21 Nov 2023 12:04:42 +0100 > From: Tobias Heider > > On Tue, Nov 21, 2023 at 11:56:18AM +0100, Mark Kettenis wrote: > > > Date: Tue, 21 Nov 2023 00:16:40 +0100 > > > From: Tobias Heider > > > > > > Diff below fixes make regress for

Re: libffi: fix arm64 bti

2023-11-21 Thread Mark Kettenis
> Date: Tue, 21 Nov 2023 00:16:40 +0100 > From: Tobias Heider > > Diff below fixes make regress for libffi with arm64 BTI enabled. > The tricky part were two jump tables in ffi.c and sysV.S. > > ok? I think you missed the "computed goto" in ffi_closure_SYSV. Maybe we shouldn't add a "bti j" fo

Re: arm64 BTI for libgcrypt

2023-11-20 Thread Mark Kettenis
> Date: Mon, 20 Nov 2023 11:55:43 +0100 > From: Tobias Heider > Cc: Jeremie Courreges-Anglas , ports@openbsd.org, > kette...@openbsd.org, ajacou...@openbsd.org > Content-Type: text/plain; charset=us-ascii > Content-Disposition: inline > > On Mon, Nov 20, 2023 a

Re: arm64 BTI for libgcrypt

2023-11-20 Thread Mark Kettenis
> From: Jeremie Courreges-Anglas > Date: Mon, 20 Nov 2023 08:22:13 +0100 > > On Sun, Nov 19 2023, Tobias Heider wrote: > > Diff below fixes libgcrypt/gnupg on my m2. > > > > CFI_STARTPROC() seemed like a good place to add the bti instructions > > since it is called in all the right places. > >

Re: m1n1: update to 1.4.3

2023-10-24 Thread Mark Kettenis
> Date: Mon, 23 Oct 2023 20:38:33 +0200 > From: Tobias Heider > > As the title says. We need a small patch to remove an unnecessary > bash dependency, I opened an upstream PR for that. > Once this is in I will also update apple-firmware. ok kettenis@ > Index: Makefile >

Clean up sysutils/u-boot a bit

2023-10-19 Thread Mark Kettenis
Back when I split up the port, Stuart suggested to see if some simplification of the do-build rule would be possible. I think the most sensible thing to do is to move this from Makefile.inc into the per-directory Makefile. There is a tiny bit of duplication, but I think the result is more managea

U-Boot for RK356x SoCs (take 2)

2023-10-13 Thread Mark Kettenis
Now that U-Boot 2023.10 has been release, here is an update. This adds a few more boards and now uses a script that U-Boot provides to switch the serial console baudrate to 115200. This way I don't need to patch the configs anymore. ok? Index: sysutils/u-boot/rk356x/Makefile ==

U-Boot for RK356x SoCs

2023-09-30 Thread Mark Kettenis
So here is the start of a port for a few RK3566 and RK3568 boards. These boards currently need some binary blobs to run. And a LICENSE file was added to the relevant repository that explicitly allows redistribution of these blobs. The default baudrate for the serial console is embedded in one of

Enable LTO for arm/aarch64 cross-compiler

2023-09-23 Thread Mark Kettenis
Newer U-Boot versions have started to require LTO in order to save some space for certain targets. I don't see a downside in enabling it as the cross compiler won't be used to build OpenBSD binaries. ok? Index: devel/arm-none-eabi/gcc/Makefile ===

BTI fix ruby 3.2.2

2023-09-23 Thread Mark Kettenis
The configure scripts adds -mbranch-protection=pac-ret, which on OpenBSD actually *downgrades* the protection and makes things fail on arm64 systems that implement BTI. Use -mbranch-protection=standard instead. ok? Index: lang/ruby/3.2/Makefile ==

Re: enable -fstack-clash-protection in llvm ports

2023-09-14 Thread Mark Kettenis
> From: Theo de Raadt > Date: Thu, 14 Sep 2023 01:02:14 -0600 (MDT) > > I do not think this should be enabled. > Our stacks work differently. > We don't put shit near the bottom of the main stack, because we > reserve the space. > For pthread stacks, we allocate them randomly also so you cannot >

Re: [RFC] Split sysutils/u-boot

2023-08-08 Thread Mark Kettenis
> Date: Tue, 8 Aug 2023 16:20:09 -0400 > From: A Tammy > > On 8/8/23 15:38, Mark Kettenis wrote: > >> From: Stuart Henderson > >> Date: Mon, 07 Aug 2023 22:59:21 +0100 > >> > >> Just had a quick read through on my phone, I'll try to

Re: [RFC] Split sysutils/u-boot

2023-08-08 Thread Mark Kettenis
ly, or keep the common parts in Makefile.inc by using > do-build/do-install in one file, post-build/post-install for the other) but > probably simpler to do that as a separate step. Yes I thought about that. I think that's best done after I split out a few of the SoCs. > On 7 Augu

[RFC] Split sysutils/u-boot

2023-08-07 Thread Mark Kettenis
a git diff for this since I didn't want to pollute the CVS repo with new directories yet. This has the benefit that it clearly shows that the patch files have simply been moved. Thoughts? >From 3dcb8724513098a710972a3b3f47c7601756cd76 Mon Sep 17 00:00:00 2001 From: Mark Kettenis Date:

Re: devel/gmp: update to 6.3.0, needs testing

2023-08-01 Thread Mark Kettenis
> Date: Tue, 1 Aug 2023 21:36:41 +0200 > From: Christian Weisgerber > > Here's an update to devel/gmp 6.3.0: > * New public function mpz_prevprime. > * New documented pointer types mpz_ptr, mpz_srcptr, and similar for > other GMP types. > > I have successfully run the tests on > * amd64 with I

  1   2   3   4   >