100 Commits
Author SHA1 Message Date
Enji Cooper a3214d4e9b share/mk/bsd.confs.mk: fix trivial typo in message
The error message noting that the file should not be included said
"bsd.conf.mk" before this change. Now it correctly says "bsd.confs.mk".

MFC after:	3 days
2026-10-24 19:57:19 -07:00
Enji Cooper ec1754a677 diff: diff regular files when -q is specified again
c30a321a61 accidentally modified the code paths when diffing regular
files to not diff them if `-q` was specified. Call `diffreg(..)` again,
regardless of whether or not `-q` was specified to restore the
functionality pre-c30a321a61ce, while only printing out the result to
the console if `-q` is not specified.

This change unbreaks diff so 2 files which differ are reported again via
the exit code when with `-q` is specified.

MFC after:	3 days
PR:		299643
Reviewed by:	des
Differential Revision: https://reviews.freebsd.org/D60910
Fixes: c30a321a61 ("diff: support -qq to output absolutely nothing")
2026-10-20 10:40:47 -07:00
Enji Cooper e45c7bc611 linux: implement sched_getattr()
This change adds the necessary glue to translate Linux scheduler policy
and priority from FreeBSD so this information is available to Linux
applications.

Please note that this change does not fill in the `.sched_nice` property: this
will be handled in a follow up commit (see bug 299617 for more details).

This unbreaks using the Linux version of Chromium on FreeBSD.

PR:	297468
Signed-off-by:	Joao Bonifacio <[email protected]>
Pull Request: https://github.com/freebsd/freebsd-src/pull/2370
Reviewed by:	olce
Differential Revision:	https://reviews.freebsd.org/D60214
2026-10-19 13:27:24 -07:00
Enji Cooper 3593be37a4 sbuf(3): clean up tests
- Update the copyright dates and add "Joao Bonifacio" to the top of
  `sbuf_core_test.c`.
- Use `SPDX-Identifier` instead of longform copyright tort.
- Remove `sbuf_test_common.h`: the header was originally added to help
  with the 10.x/11.x split, but is no longer needed given that those
  releases have been EOLed for multiple years now.

MFC after:	1 week
2026-10-18 11:24:20 -07:00
Enji Cooper 23ab9a9d09 Revert "sbuf(3): increase test coverage"
ghpr doesn't seem to do a `git status` prior to allowing someone to push
changes (bug pending). Revert the change so the properly tested one can
be pushed into the tree.

This reverts commit 760efcc775.
2026-10-18 11:09:37 -07:00
Enji Cooper e8431fae65 Revert "tests/libc: use an allowlist for sbrk in NetBSD-derived tests"
Need to update the commit message.

This reverts commit 36b849b5c7.
2026-10-10 10:43:00 -07:00
Enji Cooper 7a48c3fd3e acl(9): expound on NFSv4 constants' meanings
This change adds missing documentation for various NFSv4 constants
supported by acl(9).

Bump `.Dd` for the change.

MFC after:	1 week
Reviewed by:	rmacklem
Differential Revision:	https://reviews.freebsd.org/D58736
2026-10-10 00:28:36 -07:00
Enji Cooper ef947bb973 LinuxKPI: firmware: remove enoentok logic in *firmware_request(..)
Prior to this change, in the event that a firmware module could not be
loaded, the linux_firmware driver would return a partially initialized
structure with uninitialized/zeroed out values for certain fields. Linux
does not do this, however, so some drivers that use
`request_firmware_nowait` expecting Linux behavior, like `if_bcrmfmac`,
would crash trying to dereference a NULL pointer.

This doesn't address the load/unload situation completely as the driver
remains loaded after the "firmware crashes", but it makes a completely
unusable situation (a kernel panic) into a slightly more usable situation
(driver does not unload).

As a sidenote: the raw free(9) call was replaced with a call to
`linuxkpi_release_firmware` because the latter call [better] ensures
that all resources allocated earlier on in the function are cleaned up.

MFC after:	1 weeks
Reviewed by:	bz
Differential Revision:	https://reviews.freebsd.org/D58451
2026-10-07 11:22:12 -07:00
Enji Cooper 26eb328b52 contrib/kyua: commit generated files
MFC after:      1 month
Fixes: eb8f69902 ("contrib/kyua: update to 0.15.0")
2026-10-07 11:04:21 -07:00
Enji Cooper b836604e12 contrib/kyua: commit Makefile changes for version update
This was accidentally missed in the version update.

MFC after:	1 month
Fixes: eb8f69902 ("contrib/kyua: update to 0.15.0")
2026-10-07 10:55:21 -07:00
Enji Cooper eb8f69902f contrib/kyua: update to 0.15.0
This new release contains multiple feature updates and bugfixes. Please
see the release notes mentioned in the merge commit for more details.

MFC after:	1 month
Merge commit '144afd05f8a2300361ec30c1c2020e4022ddd943'

Conflicts:
	contrib/kyua/cli/cmd_debug.cpp
	contrib/kyua/doc/kyua-debug.1.in
	contrib/kyua/doc/kyuafile.5.in
	contrib/kyua/engine/config.cpp
	contrib/kyua/engine/execenv/execenv.cpp
	contrib/kyua/engine/execenv/execenv.hpp
	contrib/kyua/engine/execenv/execenv_host.hpp
	contrib/kyua/engine/requirements.cpp
	contrib/kyua/engine/requirements.hpp
	contrib/kyua/engine/scheduler.cpp
	contrib/kyua/model/metadata.cpp
	contrib/kyua/os/freebsd/execenv_jail.hpp
	contrib/kyua/os/freebsd/execenv_jail_stub.cpp
	contrib/kyua/os/freebsd/main.cpp
	contrib/kyua/os/freebsd/reqs_checker_kmods.cpp
	contrib/kyua/os/freebsd/utils/jail.hpp
	contrib/kyua/utils/fs/directory.cpp
	contrib/kyua/utils/process/executor.cpp
2026-10-07 10:50:26 -07:00
Enji Cooper 144afd05f8 kyua: import kyua-0.15.0
This change adds kyua kyua-0.15.0 from [upstream][1].

The kyua-0.15.0 artifact was been verified by [SHA256 checksum][3].

More information about the release (from a high level) can be found in
the [release notes][4].

Updated via [`update_kyua.sh`][4] `update_kyua.sh 0.15.0 kyua-0.15.0`.

1: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0/kyua-0.15.0.tar.gz
2: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0/kyua-0.15.0.tar.gz.sha256
3: https://github.com/freebsd/kyua/blob/kyua-0.15.0/NEWS.md
4: https://codeberg.org/ngie/freebsd-powertools:shell/update_kyua.sh@10a04edb
2026-10-07 10:20:07 -07:00
Enji Cooper 4abfb452ea Revert "linux: implement fchmodat2 syscall"
This got accidentally committed when I was reverting another commit.

This reverts commit c070ec923e.
2026-10-05 21:51:35 -07:00
Enji Cooper 32f5a9f3fb Revert "linux: implement sched_getattr()"
The changes need to be reviewed further; revert until the issues have
been worked out.

Requested by:	markj
This reverts commit bb5f10e51b.
2026-10-05 21:50:53 -07:00
Enji Cooper c070ec923e linux: implement fchmodat2 syscall
The fchmodat2 syscall on Linux is effectively the same as the fchmodat
on FreeBSD, whereas fchmodat on Linux is fchmodat on FreeBSD, minus
the `flags` argument.

This change provides the necessary glue in order to call kern_fchmodat
properly via the Linuxulator.

NB: glibc transparently passes through the `flags` argument, so this is
[largely] a no-op for end-users, but it affects those who compiled
binaries specifically using the fchmodat2 syscall.

MFC after:	2 weeks
Differential Revision:	https://reviews.freebsd.org/D60394
2026-10-05 21:50:53 -07:00
Enji Cooper bb5f10e51b linux: implement sched_getattr()
This change adds the necessary glue to translate Linux scheduler policy
and priority from FreeBSD so this information is available to Linux
applications.

This unbreaks using the Linux version of Chromium on FreeBSD.

This change was originally submitted via [freebsd/freebsd-src#2370][github-pr].

MFC after:	2 weeks
PR:	297468
Co-Authored-By:	Enji Cooper <[email protected]>
Signed-off-by:	Joao Bonifacio <[email protected]>

[github-pr]: https://github.com/freebsd/freebsd-src/pull/2370

Differential Revision:	https://reviews.freebsd.org/D60214
2026-10-05 15:49:09 -07:00
Enji Cooper 9d5a33d9c2 [tests] lib/libc/gen:assert_test: undefine NDEBUG
In the event `NDEBUG` was defined, `assert` would become a no-op,
breaking some of the expectations in `assert_test` around `assert(..)`
failing generating a coredump.

This is a better approach than the previous one committed in 6f3445006a
as it continues to test the `assert(..)` function instead of just
skipping it if `NDEBUG` was defined.

Suggested by:	kevans
MFC after:	4 days
MFC with:	6f3445006a
Fixes:		6f3445006a
Differential Revision: https://reviews.freebsd.org/D60253
2026-10-02 13:42:53 -07:00
Enji Cooper be0569f12f crypto/openssl: update generated files to match 3.5.9 release content
A new manpage has been added and some source files have been refactored
slightly, but by and large this is just a standard "version bump" update
(3.5.8 -> 3.5.9).

MFC after:	1 day
MFC with:	b3a31d78
2026-09-30 10:14:32 -07:00
Enji Cooper f9bc005b8e crypto/openssl: update to 3.5.9
This is a security fix release addressing CVE High issues. Users are
strongly encouraged to update to this version.

See the release notes for the release for more details on what is being
fixed.

MFC after:	1 day
Merge commit 'af5a659dc1cd2b0a6994f2cee1956d0bf50bb1a2'
2026-09-30 10:10:27 -07:00
Enji Cooper af5a659dc1 openssl: import 3.5.9
This change adds openssl 3.5.9 from [upstream][1].

The 3.5.9 artifact was been verified via [PGP key][2] and by [SHA256 checksum][3].

3.5.9 is a security patch release, with the highest CVE fixed being ranked High.

More information about the release (from a high level) can be found in
the [release notes][4].

Updated via [`update_openssl.sh`][5] `update_openssl.sh 3.5.9`.

Maintainer note: large test input files under `tests/recipes` were removed as
part of the import in order to pass the pre-receive checker. Please see this
[GitHub Issue][6] for more details.

1: https://github.com/openssl/openssl/releases/download/openssl-3.5.9/openssl-3.5.9.tar.gz
2: https://github.com/openssl/openssl/releases/download/openssl-3.5.9/openssl-3.5.9.tar.gz.asc
3: https://github.com/openssl/openssl/releases/download/openssl-3.5.9/openssl-3.5.9.tar.gz.sha256
4: https://github.com/openssl/openssl/blob/openssl-3.5.9/NEWS.md
5: https://codeberg.org/ngie/freebsd-powertools:shell/update_openssl.sh@c2f51140
6: https://github.com/openssl/openssl/issues/32603
2026-09-29 16:01:54 -07:00
Enji Cooper 47275d8e3b kyua: import kyua-0.15.0-rc2
This change adds kyua kyua-0.15.0-rc2 from [upstream][1].

The kyua-0.15.0-rc2 artifact was been verified by [SHA256 checksum][3].

This contains a removal for umount(8) support as all supported OSes have
access to the u(n)?mount syscall.

More information about the release (from a high level) can be found in
the [release notes][4].

Updated via [`update_kyua.sh`][4] `update_kyua.sh 0.15.0-rc2 kyua-0.15.0`.

1: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0-rc2/kyua-0.15.0-rc2.tar.gz
2: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0-rc2/kyua-0.15.0-rc2.tar.gz.sha256
3: https://github.com/freebsd/kyua/blob/kyua-0.15.0-rc2/NEWS.md
4: https://codeberg.org/ngie/freebsd-powertools:shell/update_kyua.sh@10a04edb
2026-09-23 23:26:22 -07:00
Enji Cooper 8d94a93d96 integration_test: backport fix from freebsd/atf
See the related merge commit for more details.

MFC after:	28 days
Obtained from:	[freebsd/atf@2690b04c][upstream]
Fixes:		95223108 ("contrib/atf: upgrade to 0.26")

Merge commit '8fd09407c8e64fd26d095c9b00990c545577db5a'

[upstream]: https://github.com/freebsd/atf/commit/2690b04cbc608af165a58426b7275c063b779f03
2026-09-23 21:30:34 -07:00
Enji Cooper 8fd09407c8 atf-sh/integration_test: fix hang when invoked via kyua
The code in `create_test_program` called cat on top of the calling
function, resulting in code that would hang waiting for an EOF to be
sent. This was wrong. Pass the heredoc output directly to
`create_test_program` so the content is output to the test program once.

Closes:	#201
Signed-off-by: Enji Cooper <[email protected]>
2026-09-23 21:29:28 -07:00
Enji Cooper a4c71d0a20 atf-sh: install kmod_test added as part of the 0.26 release
Fixes:	9522310861 ("contrib/atf: upgrade to 0.26")
2026-09-22 09:36:46 -07:00
Enji Cooper 9522310861 contrib/atf: upgrade to 0.26
This new version gets contrib/atf in line with the published version of
the package up on [GitHub][github].

Please note that this release is a major update: it contains several
bugfixes and feature enhancements. Most were already present in the
FreeBSD src repo, but there were a large number of changes made in
addition to what was already present.

MFC after:      1 month

Merge commit '9c78088348bcf1059d82a62bb57a0746309d4312'

Conflicts:
        contrib/atf/.cirrus.yml
        contrib/atf/Makefile.am
        contrib/atf/Makefile.in
        contrib/atf/aclocal.m4
        contrib/atf/admin/ar-lib
        contrib/atf/admin/check-style-common.awk
        contrib/atf/admin/check-style.sh
        contrib/atf/admin/compile
        contrib/atf/admin/config.guess
        contrib/atf/admin/config.sub
        contrib/atf/admin/depcomp
        contrib/atf/admin/install-sh
        contrib/atf/admin/ltmain.sh
        contrib/atf/admin/missing
        contrib/atf/atf-c++/Makefile.am.inc
        contrib/atf/atf-c++/atf-c++.3
        contrib/atf/atf-c++/atf-c++.pc.in
        contrib/atf/atf-c++/check.cpp
        contrib/atf/atf-c++/check.hpp
        contrib/atf/atf-c++/detail/Makefile.am.inc
        contrib/atf/atf-c++/detail/process_test.cpp
        contrib/atf/atf-c/Makefile.am.inc
        contrib/atf/atf-c/atf-c.3
        contrib/atf/atf-c/atf-c.pc.in
        contrib/atf/atf-c/detail/Makefile.am.inc
        contrib/atf/atf-c/detail/fs.c
        contrib/atf/atf-c/detail/fs_test.c
        contrib/atf/atf-c/detail/process_test.c
        contrib/atf/atf-c/tc.c
        contrib/atf/atf-c/tc.h
        contrib/atf/atf-sh/Makefile.am.inc
        contrib/atf/atf-sh/atf-check.cpp
        contrib/atf/atf-sh/atf-check_test.sh
        contrib/atf/bootstrap/Makefile.am.inc
        contrib/atf/bootstrap/package.m4
        contrib/atf/bootstrap/testsuite
        contrib/atf/config.h
        contrib/atf/configure
        contrib/atf/configure.ac
        contrib/atf/doc/Makefile.am.inc
        contrib/atf/doc/atf-test-case.7
        contrib/atf/m4/developer-mode.m4
        contrib/atf/m4/libtool.m4
        contrib/atf/m4/ltoptions.m4
        contrib/atf/m4/ltsugar.m4
        contrib/atf/m4/ltversion.m4
        contrib/atf/m4/lt~obsolete.m4
        contrib/atf/m4/module-defs.m4
        contrib/atf/test-programs/Makefile.am.inc

[github]: https://github.com/freebsd/atf
2026-09-22 08:23:32 -07:00
Enji Cooper 9c78088348 atf: import atf-0.26
This change imports 0.26 release content from [upstream][1].

The atf-0.26 artifact was been verified by [SHA256 checksum][2].

This update pulls in a large number of memory management fixes, polished upstreamed
content from contrib/atf in FreeBSD (proper), etc.

Please note that this new version requires a C++-20 compatible toolchain
to build.

More information about the release (from a high level) can be found in
the [release notes][3].

Updated via [`update_atf.sh`][4] using `update_atf.sh 0.26 atf-0.26`.

1: https://github.com/freebsd/atf/releases/download/atf-0.26/atf-0.26.tar.gz
2: https://github.com/freebsd/atf/releases/download/atf-0.26/atf-0.26.tar.gz.sha256
3: https://github.com/freebsd/atf/blob/atf-0.26/NEWS.md
4: https://codeberg.org/ngie/freebsd-powertools:shell/update_atf.sh@10a04edb
2026-09-22 00:06:06 -07:00
Enji Cooper f6ae5b18a6 kyua: import kyua-0.15.0-rc1
This change adds kyua kyua-0.15.0-rc1 from [upstream][1].

The kyua-0.15.0-rc1 artifact was been verified by [SHA256 checksum][3].

This release incorporates items upstreamed from FreeBSD src and uses C++
attributes (`[[maybe_unused]]` and `[[noreturn]]`) instead of ad hoc
equivalents.

More information about the release (from a high level) can be found in
the [release notes][4].

Updated via [`update_kyua.sh`][4] `update_kyua.sh 0.15.0-rc1 kyua-0.15.0`.

1: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0-rc1/kyua-0.15.0-rc1.tar.gz
2: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0-rc1/kyua-0.15.0-rc1.tar.gz.sha256
3: https://github.com/freebsd/kyua/blob/kyua-0.15.0-rc1/NEWS.md
4: https://codeberg.org/ngie/freebsd-powertools:shell/update_kyua.sh@10a04edb
2026-09-20 19:29:32 -07:00
Enji Cooper 5cb9699344 kyua: import kyua-0.15.0-beta1
This change adds kyua kyua-0.15.0-beta1 from [upstream][1].

The kyua-0.15.0-beta1 artifact was been verified by [SHA256 checksum][3].

This change contains a number of new features and bugfixes, as well as
the official upstreaming of several features previously committed to the
FreeBSD src tree.

More information about the release (from a high level) can be found in
the [release notes][4].

Updated via [`update_kyua.sh`][4] `update_kyua.sh 0.15.0-beta1 kyua-0.15.0`.

1: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0-beta1/kyua-0.15.0-beta1.tar.gz
2: https://github.com/freebsd/kyua/releases/download/kyua-0.15.0-beta1/kyua-0.15.0-beta1.tar.gz.sha256
3: https://github.com/freebsd/kyua/blob/kyua-0.15.0-beta1/NEWS.md
4: https://codeberg.org/ngie/freebsd-powertools:shell/update_kyua.sh@10a04edb
2026-09-20 17:54:51 -07:00
Enji Cooper ac2d088aae atf: import atf-0.26-rc1
This change adds atf atf-0.26-rc1 from [upstream][1].

The atf-0.26-rc1 artifact was been verified by [SHA256 checksum][3].

This release contains the upstreamed version of `require.kmods` support
provided by des@ in [freebsd@83a1ee57][require-kmods-support].

More information about the release (from a high level) can be found in
the [release notes][4].

Updated via [`update_atf.sh`][4] `update_atf.sh 0.26-rc1 atf-0.26`.

1: https://github.com/freebsd/atf/releases/download/atf-0.26-rc1/atf-0.26-rc1.tar.gz
2: https://github.com/freebsd/atf/releases/download/atf-0.26-rc1/atf-0.26-rc1.tar.gz.sha256
3: https://github.com/freebsd/atf/blob/atf-0.26-rc1/NEWS.md
4: https://codeberg.org/ngie/freebsd-powertools:shell/update_atf.sh@10a04edb
require-kmods-support: https://cgit.freebsd.org/src/commit/?id=83a1ee578c9d1ab7013e997289c7cd470c0e6902
2026-09-20 17:46:29 -07:00
Enji Cooper 6f3445006a [tests] lib/libc/gen:assert_test: skip tests when NDEBUG set
In the event that NDEBUG is specified in CFLAGS--which is most likely
triggered via `MK_ASSERT_DEBUG` == "no" -- all assert(3) statements are
optimized out by design. This breaks the assert(3) tests as they
specifically rely on assert(3) actually raising a `SIGABRT` instead of
quietly succeeding.

Skip both tests if `NDEBUG` is set. There's no sense running the
`assert(true)` test if the result could instead be a false positive.

MFC after:	2 weeks
2026-09-21 23:30:30 -07:00
Enji Cooper d90a75af95 src.conf(5): regenerate after f6db138f97
MFC after:	2 weeks
MFC with:	f6db138f97 ("src.opts.mk: force the Dtrace tests ...")
2026-09-21 20:02:02 -07:00
Enji Cooper df6131e2b7 Remove CDDL and ctfconvert tests when their controlling knobs are disabled
In the event someone specified MK_CDDL == no prior to this change, all
tests under `/usr/tests/cddl` would stick around after the change,
resulting in errors. Similarly, MK_DTRACE == no removed ctfconvert,
which the ctfconvert tests relied on (but remained around after the knob
was disabled).

Remove the tests under the respective blocks now so they don't linger
around on systems where these knobs are disabled, resulting in false
positives when running the complete test suite.

The ctfconvert tests weren't specifically put under
`${MK_DTRACE_TESTS}` == no because ctfconvert was bundled separately
from the upstream provided Dtrace test suite.

MFC after:	2 weeks
MFC with:	30c20ca26 ("Remove Dtrace/ZFS tests if their knobs are disabled")
2026-09-21 19:53:03 -07:00
Enji Cooper f6db138f97 src.opts.mk: force the Dtrace tests off if ${MK_DTRACE} == no
Prior to this change Dtrace's tests could be enabled even if
`${MK_DTRACE}` == no. Allowing this doesn't make sense so remove the
tests if `${MK_DTRACE}` is also disabled.

MFC after:	2 weeks
2026-09-21 19:53:03 -07:00
Enji Cooper 30c20ca26e Remove Dtrace/ZFS tests if their knobs are disabled
Prior to this change, Dtrace and ZFS tests and their respective
directories would remain installed even if `${MK_DTRACE_TESTS}` == no or
`${MK_ZFS_TESTS}` == no.

This change enhances the logic to remove the tests when the respective
knobs are disabled so the tests will be removed when `make delete-old`
is run.

MFC after:	2 weeks
2026-09-21 19:31:34 -07:00
Enji Cooper 9257ae7294 Add entries for third-party projects I maintain
Add myself formally as the "maintainer" for atf, kyua, and lutok, both
in the GitHub CODEOWNERS and MAINTAINERS files.

This change matches the herald rules I recently setup for these
third-party components.
2026-09-21 15:04:04 -07:00
Enji Cooper 7a039603a4 asmc.4: clean up/modernize manpage
- sysutils/ataidle is no more: it was superseded by camcontrol(8).
- Sort the models table alphabetically.
- Use the SPDX License ID instead of the longhand licensing tort in the
  manpage header.
- Note that the driver has been heavily modified in 15.1 and later to
  support additional platforms and functionality.
- Trim down SYNOPSIS.

MFC after:	2 weeks
Differential Revision:	https://reviews.freebsd.org/D59470
2026-09-13 19:33:58 -07:00
Enji Cooper 8f478e4ac6 apple_bce.4: add a basic manpage describing the driver
This new manpage describes what the apple_bce driver services, how the
driver is configured, and what Apple models the driver claims to
support.

Reviewed by:	seuros
Differential Revision:	https://reviews.freebsd.org/D59467
2026-09-13 19:33:57 -07:00
Enji Cooper a24eb09825 apple_bce: require usb(4) for vhci functionality
The vhci portion of the driver relies on usb(4) for both constants and
functionality. Add an explicit dependency on usb(4) in `files.amd64` so
it builds properly 100% of the time in a static kernel config.

Reviewed by:	seuros
Differential Revision:	https://reviews.freebsd.org/D59469
2026-09-06 21:29:27 -07:00
Enji Cooper cfe443e1e6 contrib/lutok: remove autotools generated files
These files provide no value in the FreeBSD tree proper and change
frequently, depending on what machine I generate the release tarball on
(and what versions of autotools are on the host). Nuke the autogenerated
files to avoid bloating commit history/the tree.

MFC after:	3 days
Requested by:	Benjamin Jacobs <[email protected]>
2026-09-06 20:25:17 -07:00
Enji Cooper ca0e8956c5 Revert "contrib/lutok: remove autotools and doxygen generated files"
I messed up the commit title. Redo it with a correct summary.

This reverts commit 3dbe180084.
2026-09-06 20:24:36 -07:00
Enji Cooper 3dbe180084 contrib/lutok: remove autotools and doxygen generated files
These files provide no value in the FreeBSD tree proper and change
frequently, depending on what machine I generate the release tarball on
(and what versions of autotools are on the host). Nuke the autogenerated
files to avoid bloating commit history/the tree.

MFC after:	3 days
Requested by:	Benjamin Jacobs <[email protected]>
2026-09-06 20:23:45 -07:00
Enji Cooper 0cf1002113 tests/sys/kern/ssl_sendfile: fix the build with ATF 0.22+
Code that assigned variables as part of ATF_\* are no longer
permitted due to changes introduced in [ATF 0.22][1].

MFC after:	2 weeks
Reported by:	clang/gcc (-Wparenthesis)
Differential Revision:	https://reviews.freebsd.org/D59286

[1]: https://github.com/freebsd/atf/pull/72
2026-09-06 12:18:26 -07:00
Enji Cooper 2561c468c1 Assign and test malloc result separately
The previous pattern is cited as an issue with ATF 0.22+ when using
clang/gcc after [1].

MFC after:	2 weeks
Reported by:	clang (-Wparenthesis)
Differential Revision:	https://reviews.freebsd.org/D59274

[1]: https://github.com/freebsd/atf/pull/72
2026-09-06 12:18:24 -07:00
Enji Cooper 5b10c3c3e3 tty_pts: reduce/correct libatf-c linkage
ATF_TESTS_C automatically adds the appropriate library to LDADD --
there's no need to manually append the same library.

MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D59411
2026-09-04 11:18:55 -07:00
Enji Cooper 064d190cda [tests] libarchive: mark test_read_filter_lz4_raw_skip broken
This test has not passed since 185becb1e1
(the libarchive 3.8.9 upgrade).

PR:		273732
MFC after:	1 week
Reviewed by:	siva
Differential Revision:	https://reviews.freebsd.org/D59314
2026-09-02 08:42:42 -07:00
Enji Cooper 4aea6ea2eb tests/sys/netinet/tcp_socket: fix build with ATF 0.22+
Confirm that creating clients/sockets was successful by testing the
result separate from the assignment and test that the return value is
not -1 instead of testing that the value returned is non-zero.

This fixes the build with [ATF 0.22+][1].

MFC after:      2 weeks
Reported by:    clang (-Wparenthesis)
Reviewed by:	tuexen, cc
Differential Revision:	https://reviews.freebsd.org/D59284
[1]: https://github.com/freebsd/atf/pull/72
2026-09-02 00:39:24 -07:00
Enji Cooper 505103215e tests/sys/kern/ktls_test: fix -Wsign-compare issue
Cast the size_t quantity used in a comparison to off_t to mute a
`-Wsign-compare` complaint that now occurs after ATF 0.22 [1].

MFC after:	2 weeks
Reported by:	clang
Reviewed by:	markj
Differential Revision:	https://reviews.freebsd.org/D59285
[1]: https://github.com/freebsd/atf/pull/72
2026-09-02 00:39:16 -07:00
Enji Cooper edbb2e9d7a lib/libarchive/tests/Makefile: minor fixes
- Remove trailing whitespace
- Fix typo with variable referenced adding sources for `test_fuzz`.

MFC after:	2 weeks
2026-09-01 12:02:46 -07:00
Enji Cooper 132f818ddb contrib/lutok: update from 0.4 to 0.6.2
More information about what's included in the new release can be found
[here](https://github.com/freebsd/lutok/compare/lutok-0.4...lutok-0.6.2).

MFC after:	1 week
Merge commit '447d4fe61d8bf55ffa21698ecee0ac51010a9a0f'
2026-08-31 09:29:06 -07:00
Enji Cooper 447d4fe61d vendor/lutok: import 0.6.2
This version contains several minor changes related to documentation and
new C++ standards conformance (C++-20+ is now required to build the
project).

This change also uses the version from the official release tarball whereas
the prior imported version (0.4) was committed directly from a git clone.

Obtained from:	https://github.com/freebsd/lutok/releases/tag/lutok-0.6.2
2026-08-30 20:19:48 -07:00
Enji Cooper 4881c7a650 tests/sys/kern/unix_stream: fix bad assertion
kqueue returns a value != -1 on error. Test for that instead of any
non-zero value to confirm that success was achieved when calling
`kqueue`.

This issue exists with ATF 0.22+ [1].

MFC after:	2 weeks
Reported by:	clang (-Wparenthesis)

[1]: https://github.com/freebsd/atf/pull/72
2026-08-30 11:25:23 -07:00
Enji Cooper 4ae95fe823 tests/sys/sys/bitstring_test: fix build with ATF 0.22+
Do not assign `b` in the `ATF_REQUIRE` macro. Set and test `b`
separately to avoid the issue cited by clang++/g++ after
implementing the change referenced in [1].

MFC after:	2 weeks
Reported by:	clang (-Wparenthesis)
Reference:	https://github.com/freebsd/atf/pull/72
2026-08-30 11:24:51 -07:00
Enji Cooper 19c1fe2d0c crypto/openssl: add manpages missed in related commit
MFC with:	78e936b2d
Fixes:		0d4d0f3a9 ("crypto/openssl: update generated content ...")
Reported by:	Jenkins CI
2026-08-28 19:28:11 -07:00
Enji Cooper 0d4d0f3a9f crypto/openssl: update generated content to match 3.5.8 release
This contains 2 new manpages as well as some minor manpage content
changes.

MFC with:	78e936b2d
2026-08-28 18:41:30 -07:00
Enji Cooper 78e936b2d0 crypto/openssl: update to 3.5.8
This is a security bugfix release. Please see the related merge commit
for more details.

Maintainer note:	`quic_ackm.h`'s conflict was resolved by taking
			the upstream version of the file verbatim.

Conflicts:
	crypto/openssl/include/internal/quic_ackm.h

MFC after:	3 days
Merge commit '248da023ae5ea7292930ac5d715d88b87e2e6f46'
2026-08-28 18:28:12 -07:00
Enji Cooper 248da023ae crypto/openssl: remove large test input file
This file was added between 3.5.7 and 3.5.8. Given that we don't yet leverage
the OpenSSL tests, there's no sense in merging this file to mainline branches..
2026-08-28 18:21:30 -07:00
Enji Cooper 185f1a1f6a openssl: import 3.5.8
This change adds OpenSSL 3.5.8 from upstream [1].

The 3.5.8 artifact was been verified via PGP key [2] and by SHA256 checksum [3].

This is a security patch release. The highest severity issue is medium.

More information about the release (from a high level) can be found in
the release notes [4].

Updated via [5] with `update_openssl.sh 3.5.8`.

1. https://github.com/openssl/openssl/releases/download/openssl-3.5.8/openssl-3.5.8.tar.gz
2. https://github.com/openssl/openssl/releases/download/openssl-3.5.8/openssl-3.5.8.tar.gz.asc
3. https://github.com/openssl/openssl/releases/download/openssl-3.5.8/openssl-3.5.8.tar.gz.sha256
4. https://github.com/openssl/openssl/blob/openssl-3.5.8/NEWS.md
5. https://codeberg.org/ngie/freebsd-powertools:shell/update_openssl.sh@c2f51140
2026-08-25 21:25:22 -07:00
Enji Cooper 8109a5c0fb contrib/netbsd-tests: lib/libc/c063: sync with NetBSD
This change syncs the lib/libc/c063 NetBSD tests with FreeBSD. This does
two things:
- Addresses bogus tautologically true assertions flagged by clang and gcc
  with ATF 0.22+ [1].
- Brings in some new test coverage.

Obtained from:	NetBSD (date tag: `20260818UTC`)
MFC after:	2 weeks
1. https://github.com/freebsd/atf/pull/72
2026-08-19 01:10:20 -07:00
Enji Cooper b385e49173 Import files missed in previous imports
Fixes:	0c9bf043 ("vendor/atf: import atf-0.24-rc1")
2026-08-18 11:06:25 -07:00
Enji Cooper 81cf13ffa2 vendor/atf: import atf-0.24-rc2
This version incorporates some of the local changes which had not yet
made it upstream into the RC1 code.

Obtained from:          https://github.com/freebsd/atf/releases/tag/atf-0.24-rc2
2026-08-18 01:39:25 -07:00
Enji Cooper 0c9bf043d6 vendor/atf: import atf-0.24-rc1
This release candidate will likely serve as the actual upstream
release tag for version 0.24, but for now it should be considered a
release-candidate worthy tag as this code has not gone through a full
FreeBSD test suite run or been built with `make tinderbox` yet on all
supported architectures.

Obtained from:		https://github.com/freebsd/atf/releases/tag/atf-0.24-rc1
2026-08-17 02:41:49 -07:00
Enji Cooper 880865783d pmc(8): revert unnecessary lvalue reference change from prior commit
I need to do more work before references can be accepted in other
sections of the code. This was an unnecessary drive-by change that was
not tested in `make universe`.

Reported by:	CI
Fixes:	fd809148 ("pmc(8): resolve -Wshadow issues")
2026-08-09 18:42:07 -07:00
Enji Cooper 9fd963b0a1 acl(9): fix typo (ACL_ACL -> ACL)
MFC after:	1 week
2026-08-09 16:20:46 -07:00
Enji Cooper 8eced03c36 atomic(9): add missing .Nm entries
MFC after:	1 week
Reported by:	make manlint
2026-08-09 16:19:35 -07:00
Enji Cooper 4fa245edc7 alq(9): add missing .Nm entry for ALQ(9)
MFC after:	1 week
Reported by:	make manlint
2026-08-09 16:19:32 -07:00
Enji Cooper b96a063f61 DB_COMMAND(9): correct mdoc markup for .Nm entries
Add missing commas after .Nm entries.

MFC after:	1 week
Reported by:	make manlint
2026-08-09 16:19:28 -07:00
Enji Cooper 5007a5d682 cpuset(9): correct markup
- Remove `\(em` from .Nm section as it's not valid mandoc markup.
- Remove the section from the .Nm directive (it's handled under the .Dt
  directive).

MFC after:	1 week
Reported by:	make manlint
2026-08-09 16:17:56 -07:00
Enji Cooper 503f16182e pmc(8): add missing headers to not rely on header pollution
This mutes a number of complains from g++ about needing specific headers
for functionality related to C strings and other function prototypes.

Reported by:	g++ 14
2026-08-09 16:07:03 -07:00
Enji Cooper fd809148ca pmc(8): resolve -Wshadow issues
- Prefix all structs with the struct keyword to avoid collisions between
  the types and variables with the same "name".
- Use `_` suffixed variables in initializers to distinguish input
  parameters from public members [1].

Resolve some trailing whitespace issues while here.

NOTE: this doesn't resolve the -pedantic issue reported by g++ with
`pmchdr_cpuidinfo::cpuid` about the field being a flexible array in an
otherwise empty struct.

1. I generally do this the other way around, i.e., suffix private/protected
   members with `_`, but these are public members in structs and I don't want
   to introduce a lot of churn in calling code.

Reported by:	g++14 with FreeBSD CI (powerpc64 tinderbox)
Fixes:	ce6ab51f ("pmc: enable the new pmc commands")
2026-08-09 15:56:50 -07:00
Enji Cooper bc81728c00 [test] libatexit: leverage __{BEGIN,END}_DECLS
This change converts the longhand form of `extern "C" {` and its
corresponding `}` into `__BEGIN_DECLS` and `__END_DECLS`, respectively.

The new form is much easier to grep for and is a best practice to use in
the FreeBSD tree.

This is meant to be a non-functional change.

MFC after:	1 week
2026-07-25 09:55:38 -07:00
Enji Cooper a594783bac linux_firmware: reformat error print-out
This makes it easier to grep for the error message to better understand
the call stack when loading firmware modules fails.

Fix a cosmetic-only style(9) bug while here in the same function related
to another logging message.

MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D58380
2026-07-24 15:45:34 -07:00
Enji Cooper a18e773d27 tests/sys/pmc: only build if MK_PMC != no
This unbreaks the build when pmc support is explicitly disabled via the
aforementioned build knob.

MFC after:	10 days
Fixes:		2cfd82f74 ("hwpmc: add regression tests for ...")
Differential Revision:	https://reviews.freebsd.org/D58401
2026-07-23 13:10:32 -07:00
Enji Cooper 4db3872aab Only build secure/libexec/ssh-sk-helper if MK_USB == no
The ssh-sk-helper utility only functions if/when MK_USB == yes.
Installing it on systems where MK_USB == no doesn't make sense.

Differential Revision:	https://reviews.freebsd.org/D58246
2026-07-22 12:33:44 -07:00
Enji Cooper 5cafd6213f exterr_set: sync the definition with the header declaration
This unbreaks buildkernel with TARGET=armv7 (32-bit arm). More work may be required
in order to unbreak `exterr_set` with 32-bit kernels.

Fixes:	844009378d ("exterr: allow exterr to fit pointers on CHERI targets")
2026-07-16 19:31:16 -07:00
Enji Cooper f2e6a8b9e5 libproc: link against libctf if MK_CTF != no instead of MK_CDDL != no
Logic prior to this change would incorrectly try linking when MK_CDDL != no,
instead of MK_CTF != no, which could result in the library and the tests being
broken if/when MK_CTF == no and MK_CDDL != no (an uncommon, but possible
combination with today's build knobs).

This change updates the conditional to correctly track the value of MK_CTF, which
in turn is properly toggled to no if/when MK_CDDL == no as it's a dependent build
knob.

This [niche] build bug has been present in FreeBSD since 2014.

MFC after:	1 week
2026-07-16 14:56:29 -07:00
Enji Cooper fc186c24b1 rc.d/dumpon: minor hardening/tightening up
- Scope local variables properly to each function.
- Quote variables that should be treated as single words.
- Replace `${cmd}; if [ $? -eq 0 ]` with `if ${cmd}` for simplicity.

MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D57899
2026-07-16 09:25:03 -07:00
Enji Cooper 92bdcb0811 thunderbolt: do not enable in GENERIC
The thunderbolt implementation is not 100% complete and causes some
suspend/resume issues. Comment out the device until it is better
fleshed out and some of the core issues with it are resolved.

MFC after:	1 week
Requested by:	obiwac
Differential Revision:	https://reviews.freebsd.org/D57650
2026-06-18 14:37:27 -07:00
Enji Cooper d6e3662bc1 Remove fips-module related diff
This particular change didn't come from upstream. It was added locally
in 7a991ecd1 when attempting to enable the fips provider with 3.0.

Given the fact that we no longer build the fips provider and the fips
provider build process (including sources) is very prescribed to
specific build steps and source versions, there's no reason why we need
to continue carrying around this diff anymore.

MFC after:	1 week
Signed-off-by: Enji Cooper <[email protected]>
2026-06-11 22:50:52 -07:00
Enji Cooper 2de6d07e16 Remove $FreeBSD$ from upstream-provided config file
This diff reduces with the content provided by upstream (OpenSSL).

MFC after:	1 week
2026-06-11 22:45:28 -07:00
Enji Cooper 0881f6cf3f crypto/openssl: update artifacts to match 3.5.7 release
MFC after:	3 days
MFC with:	1523ccfd9
2026-06-10 08:32:35 -07:00
Enji Cooper 1523ccfd9c MFV: openssl 3.5.7
This change is a security release which resolves several issues with OpenSSL 3.5,
the highest severity issue being ranked "High". Users are strongly encouraged to
update to this release.

More information about the release (from a high level) can be found in
the release notes [1].

1. https://github.com/openssl/openssl/blob/openssl-3.5.7/NEWS.md

All conflicts were resolved with `--theirs`, taking the release diff
over the local diff; the conflicts occurred due to preemptive security
fixes applied by so@ in e508c343.

MFC after:	3 days (the important security issues have been
preemptively addressed)
Merge commit '3a71a35ad9dad0e5d2cad8efecc8ba9d57c42d43'

Conflicts:
	crypto/openssl/include/internal/quic_channel.h
	crypto/openssl/ssl/quic/quic_channel_local.h
	crypto/openssl/ssl/quic/quic_rx_depack.c
	crypto/openssl/test/cmsapitest.c
	crypto/openssl/test/evp_extra_test.c
2026-06-10 08:31:07 -07:00
Enji Cooper 8f9aabbdbc OpenSSL: update MAINTAINERS/CODEOWNERS
I've been the quasi-defacto component maintainer for OpenSSL since
14.0-RELEASE. Make it official via CODEOWNERS/MAINTAINERS.

The goal is to help guide those interested in making changes in this
space to solicit my input with the new vendor import process and
coordinate fixes with upstream until things are at a point where most of
this is automated a system of automated checks and balances to confirm
that the updates being made to the component help maintain a security
supply chain for this given component.

Thank you benl and jkim for your past efforts in this component area.
Hopefully I can do my part to help improve this critical space further
as you both did in your respective tenures.

MFC after:	3 days
2026-06-09 12:37:52 -07:00
Enji Cooper 3a71a35ad9 openssl: import 3.5.7
This change adds OpenSSL 3.5.7 from upstream [1].

The 3.5.7 artifact was been verified via PGP key [2] and by SHA256 checksum [3].

This change is a security release which resolves several issues with OpenSSL 3.5,
the highest severity issue being ranked "High". Users are strongly encouraged to
update to this release.

More information about the release (from a high level) can be found in
the release notes [4].

Updated via [5] with `update_openssl.sh 3.5.7`.

Approved by:	so (gordon; implicit)

1. https://github.com/openssl/openssl/releases/download/openssl-3.5.7/openssl-3.5.7.tar.gz
2. https://github.com/openssl/openssl/releases/download/openssl-3.5.7/openssl-3.5.7.tar.gz.asc
3. https://github.com/openssl/openssl/releases/download/openssl-3.5.7/openssl-3.5.7.tar.gz.sha256
4. https://github.com/openssl/openssl/blob/openssl-3.5.7/NEWS.md
5. https://codeberg.org/ngie/freebsd-powertools/src/branch/main/shell/update_openssl.sh (facdfe954)
2026-06-09 12:21:35 -07:00
Enji Cooper 886164895f amd64: complete thunderbolt KERNCONF integration
This completes the work so the driver can be integrated into KERNCONFs
properly on amd64.

MFC after: 1 month

Differential Revision:	https://reviews.freebsd.org/D55573
2026-06-02 23:02:01 -07:00
Enji Cooper 1836330791 thunderbolt: make code -Wunused clean
This change modifies code paths and uses `__diagused` to address `-Wunused`
issues that occur when `THUNDERBOLT_DEBUG` == `0`.

MFC after:	1 month
Differential Revision:	https://reviews.freebsd.org/D55575
2026-05-15 18:00:36 -07:00
Enji Cooper 3348fa7a45 Revert "Skip sys.netinet6.frag6.frag6_19.frag6_19 in CI"
Per [siva@'s comment on the PR][1], this testcase now passes cleanly in CI.

PR:	274941
MFC after:	1 week

[1]: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274941#c6

This reverts commit 86e87c3bd1.
2026-05-06 16:08:26 -07:00
Enji Cooper af864dd4a2 hosts.equiv.5: correct nits to fix mandoc -T lint issues
- Rename `.Nm .rhosts` to `.Nm rhosts` to match the MLINK for the
  manpage.
- Use `.Pa` instead of `.Nm` when discussing the paths for `.rhosts` and
  `hosts.equiv.5` for explicitness and clarity.

Bump .Dd for the change.

MFC after:	1 week
2026-04-24 13:45:14 -07:00
Enji Cooper 573a9e5764 security(7): fix mandoc -T lint complaints
- Add `.Nm` section for securelevel(7) to match corresponding MLINKS entry.
- Fix the spelling for mac(4) (the actual subsystem manpage is spelled out in
  lowercase.

MFC after:	1 week
2026-04-24 13:45:14 -07:00
Enji Cooper 944a4de2d2 Remove cam.d when MK_DTRACE == no
MFC with:	efb77950fd
Fixes:	efb77950fd ("dtrace: Add definitiosn for the cam dtrace provider")
Differential Revision:	https://reviews.freebsd.org/D56588
2026-04-24 13:45:13 -07:00
Enji Cooper fb7df70a47 Remove all of /usr/tests/share/examples/... when MK_EXAMPLES == no
- Remove the generated files (`file1`).
- Remove the top-level example `Kyuafile`.

MFC after:	1 week
2026-04-22 14:08:04 -07:00
Enji Cooper b9495bd8c1 Preen/update list for share/examples/sound under MK_EXAMPLES
- Update sources to match current installed files list. This involved
  adding and removing some example files.
- Sort the list alphabetically so it'll be easier to spot future updates.

MFC after:	1 week
2026-04-22 14:00:52 -07:00
Enji Cooper ab53a4e9b9 Remove /usr/share/examples/oci when MK_EXAMPLES == no
MFC after:	1 week
Fixes:		d03c82c28d ("release: add optional OCI images")
2026-04-22 13:53:24 -07:00
Enji Cooper 48d6db4932 OpenSSL: move -DOPENSSL_PIC from PIC_FLAG to SHARED_CFLAGS
`PIC_FLAG` should be used strictly for `-fPIC`, `-fpic`, etc, options.
`SHARED_CFLAGS` is the more appropriate place to this flag to be set.

Requested by:	jrtc27
MFC after:	3 days
MFC with:	3797fe720a
2026-04-22 13:34:25 -07:00
Enji Cooper 9f7080ba6b crypto/openssl: add new manpage from release 3.5.6
MFC after:      1 day (the security issues warrant a quick backport).
MFC with:       10a428653e
2026-04-08 19:00:10 -07:00
Enji Cooper 5254e16213 crypto/openssl: update artifacts to match 3.5.6 release artifacts
A new manpage and any associated links will be added in the next commit.

MFC after:      1 day (the security issues warrant a quick backport).
MFC with:	10a428653e
2026-04-08 18:55:43 -07:00
Enji Cooper 10a428653e MFV: crypto/openssl: update to 3.5.6
This change brings in version 3.5.6 of OpenSSL, which features
several security fixes (the highest of which is a MEDIUM severity
issue), as well as some miscellaneous feature updates.

Please see the release notes [1] for more details.

PS Apologies for the confusing merge commits -- I was testing out a
new automated update process and failed to catch the commit message
issues until after I pushed the change.

1. https://github.com/openssl/openssl/blob/openssl-3.5.6/NEWS.md

MFC after:	1 day (the security issues warrant a quick backport).
Merge commit 'ab5fc4ac933ff67bc800e774dffce15e2a541e90'
2026-04-08 18:44:24 -07:00
Enji Cooper ab5fc4ac93 OpenSSL: import 3.5.6
This change adds OpenSSL 3.5.6 from upstream [1].

The 3.5.5 artifact was been verified via PGP key [2] and by SHA256 checksum [3].

This is a security release, but also contains several bugfixes.

More information about the release (from a high level) can be found in
the release notes [4].

1. openssl-3.5.6.tar.gz
2. openssl-3.5.6.tar.gz.asc
3. openssl-3.5.6.tar.gz.sha256
4. https://github.com/openssl/openssl/blob/openssl-3.5.6/NEWS.md
2026-04-07 15:35:35 -07:00
Enji Cooper 60baee1fa4 release.sh: add chroot cleanup routine
The chroot_cleanup routine handles any cleanup needed post-chroot_setup,
etc. This consists of purely tearing down `${CHROOTDIR}/dev` today, but
might involve additional steps, as needed for custom functions. This
allows end-users to override the various chroot functions without having
to modify code in main() or replicate the unmount procedure in an
equivalent routine setup via the trap builtin.

This change modifies the /dev unmount process to use `umount -f` instead
of `umount`. The latter can result in failures if resources are still
mounted or are running post-build, whereas the former will clean up any
resources still in use by processes running in the chroot at time of
build. Moreover, the `chroot_cleanup` routine is now called when the
script is killed with `SIGINT` and `SIGTERM`, as well as at `EXIT`,
better ensuring that the script's resources are cleaned up in relatively common
scenarios that can be detected/handled.

MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D55450 (as part of a larger change)
2026-03-21 20:02:09 -07:00
Enji Cooper b24fc79095 release.sh: document user-overriddable functions
This helps others attempting to customize the behavior of `release.sh`.

MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D55450 (as part of a larger change)
2026-03-21 20:01:29 -07:00
Enji Cooper 3797fe720a libcrypto: compile all PIC objects with -DOPENSSL_PIC -fPIC
This change modifies the libcrypto PIC objects to always compile with
`-DOPENSSL_PIC -fPIC` to restore parity with the upstream build process.
This ensures that the legacy provider is built with parity to the
upstream legacy provider.

MFC after:              12 days
Tested with:		`make check` (legacy provider), `make universe`
Fixes:			14b9955e
Differential Revision:  https://reviews.freebsd.org/D44896
2026-03-21 18:38:49 -07:00