jaildesc: Make sure to drain selinfo sleepers in jaildesc_close()

Otherwise they may be left on a freed selinfo list after the
corresponding jaildesc struct is freed. This can be exploited to
eleva

jaildesc: Make sure to drain selinfo sleepers in jaildesc_close()

Otherwise they may be left on a freed selinfo list after the
corresponding jaildesc struct is freed. This can be exploited to
elevate privileges.

Remove the JDF_SELECTED micro-optimization. doselwakeup() is a no-op if
no one ever called selrecord() on the file description, so I see no
reason to complicate the code to avoid the call.

Add some regression tests.

Approved by: so
Security: FreeBSD-SA-26:19.file
Security: CVE-2026-45251
Fixes: 66d8ffe3046d ("jaildesc: add kevent support")
Reviewed by: kib, jamie
Differential Revision: https://reviews.freebsd.org/D56945

show more ...

procdesc: Make sure to drain selinfo sleepers in procdesc_free()

Otherwise they are left on a freed list after procdesc_free() is called.
This can be exploited to elevate privileges.

Remove the PDF

procdesc: Make sure to drain selinfo sleepers in procdesc_free()

Otherwise they are left on a freed list after procdesc_free() is called.
This can be exploited to elevate privileges.

Remove the PDF_SELECTED micro-optimization. doselwakeup() is a no-op if
no one ever called selrecord() on the file description, so I see no
reason to complicate the code to avoid the call.

Add some regression tests.

Approved by: so
Security: FreeBSD-SA-26:19.file
Security: CVE-2026-45251
Reported by: 75Acol, Lexpl0it, fcgboy, and robinzeng2015
Reviewed by: kib, oshogbo
Fixes: cfb5f7686588 ("Add experimental support for process descriptors")
Differential Revision: https://reviews.freebsd.org/D56887

show more ...

tests: Add a simple regression test for an execve overflow bug

MFC after: 2 weeks

tests/timerfd: Serialize

At least one of these tests changes the system clock, which potentially
interferes with concurrently running tests and causes them to fail.

MFC after: 1 week

timerfd: Expect periodic timer performance failures

The current timerfd implementation fails to correctly count events on a
nanosecond callout interval. The timerfd__periodic_timer_performance
test

timerfd: Expect periodic timer performance failures

The current timerfd implementation fails to correctly count events on a
nanosecond callout interval. The timerfd__periodic_timer_performance
test detects this and reports failure.

Mark this test as an expected failure so it isn't flagged by CI. A link
to the bug report is attached to the test for reference.

While we're here, clean up some minor style and Make issues.

Fixes: 834c1ba793d9 ("timerfd: Add tests")
MFC after: 1 week

show more ...

timerfd: Add tests

Take Jan Kokemuller's timerfd tests from the epoll-shim project,
stripping out code that isn't directly related to FreeBSD.

Reviewed by: markj
Differential Revision: https://rev

timerfd: Add tests

Take Jan Kokemuller's timerfd tests from the epoll-shim project,
stripping out code that isn't directly related to FreeBSD.

Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D55789
MFC after: 2 weeks

show more ...

tests/kern: put ssl_sendfile under MK_OPENSSL != no

Reported by: wosch

Add tests for pdwait

MFC With: 4d707825bf62ee73a32b615846eff9c4a9bda538
Sponsored by: ConnectWise

Add tests for pdrfork

MFC With: 5c2ee618d5ec21f110c4da40e9f17833b2ab8b76
Sponsored by: ConnectWise

procdesc: Add a test for pid recycling behavior

MFC With: 09984871d8caff9263b955a94bb9fb5354af1b4c
Sponsored by: ConnectWise

tests/kern: add test for SSL_sendfile()

Makefile*: remove powerpcspe

As reported on the freebsd-announce mailing list[1] FreeBSD is
continuing to retire 32-bit support. Remove powerpcspe from build
infrastructure.

[1] https://lists.free

Makefile*: remove powerpcspe

As reported on the freebsd-announce mailing list[1] FreeBSD is
continuing to retire 32-bit support. Remove powerpcspe from build
infrastructure.

[1] https://lists.freebsd.org/archives/freebsd-announce/2024-February/000117.html

Signed-off-by: Minsoo Choo <minsoochoo0122@proton.me>
Reviewed by: jhibbits, emaste
Pull request: https://github.com/freebsd/freebsd-src/pull/1914

show more ...

tests: Add some regression tests for copy_file_range()

These cover a few bugs that have cropped up, including the ones fixed by
commits 4046ad6bb0e and 2319ca6a0181.

PR: 276045
Reviewed by: rmackl

tests: Add some regression tests for copy_file_range()

These cover a few bugs that have cropped up, including the ones fixed by
commits 4046ad6bb0e and 2319ca6a0181.

PR: 276045
Reviewed by: rmacklem
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D51856

show more ...

uexterr_gettext: add tests

Add tests for the new extended errno feature.

Sponsored by: ConnectWise
MFC after: 2 weeks
Reviewed by: kib
Differential Revision: https://reviews.freebsd.org/D51184

getdirentries: Return ENOTDIR if not a directory.

This is both more logical and more useful than EINVAL.

While here, also check for VBAD and return EBADF in that case. This can
happen if the under

getdirentries: Return ENOTDIR if not a directory.

This is both more logical and more useful than EINVAL.

While here, also check for VBAD and return EBADF in that case. This can
happen if the underlying filesystem got forcibly unmounted after the
directory was opened. Previously, this would also have returned EINVAL,
which wasn't right but wasn't wrong either; however, ENOTDIR would not
be appropriate.

MFC after: never
Sponsored by: Klara, Inc.
Reviewed by: kevans, kib
Differential Revision: https://reviews.freebsd.org/D51209

show more ...

tests: Add some regression tests for inotify

Reviewed by: kib
MFC after: 3 months
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D50315

unix/tests: Add a regression test for fd transfer across jails

MFC after: 3 weeks

tests: Add a regression test for commit 7587f6d4840f8

Reviewed by: kib
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D50533

tests: Serialize kern_descrip_test

It can trigger failures in unrelated tests when it modifies the maxfiles
limit.

MFC after: 1 week

tests/unix_stream: improve writable test

In addition with non-blocking checks on writability, add blocking once
with help of pthread(3).

jail: Add meta and env parameters

Each one is an arbitrary string associated with a jail. It can be set
upon jail creation or added/modified later:

> jail -cm ... meta="tag1=value1 tag2=value2"

jail: Add meta and env parameters

Each one is an arbitrary string associated with a jail. It can be set
upon jail creation or added/modified later:

> jail -cm ... meta="tag1=value1 tag2=value2" env="configuration"

The values are not inherited from the parent jail.

A parent jail can read both metadata parameters, while a child jail can
read only env via security.jail.env sysctl.

The maximum size of meta or env per jail is controlled by the
global security.jail.meta_maxbufsize sysctl. Decreasing it does not
alter the existing meta information.

Each metadata buffer can be handled as a set of key=value\n strings:

> jail -cm ... meta="$(echo k1=v1; echo k2=v2)" env.1=one
> jls meta.k2 env.1 meta.k1

While meta.k1= resets the value to an empty string, the meta.k1 without
the equal sign removes the given key.

Relnotes: yes
Reviewed by: jamie
Tested by: dch
Sponsored by: SkunkWerks GmbH
Differential Revision: https://reviews.freebsd.org/D47668

show more ...

tests: kern: add some tests for recently added logsigexit

We don't bother tweaking the sysctl in these tests, we'll just try with
it forced both on and off via proccontrol(1). This could be problem

tests: kern: add some tests for recently added logsigexit

We don't bother tweaking the sysctl in these tests, we'll just try with
it forced both on and off via proccontrol(1). This could be problematic
in the face of pid wrapping if we got really unfortunate, but the
potential solutions need careful consideration- you probably don't want
to assume a certain velocity of messages into syslog, so just checking
the last N lines is probably similarly flakey.

show more ...

tests: Add regression test for ppoll() / pselect() race.

These tests demonstrate the bug that was fixed in ccb973da1f1b.

Sponsored by: Klara, Inc.
Sponsored by: NetApp, Inc.
Reviewed by: markj
Diff

tests: Add regression test for ppoll() / pselect() race.

These tests demonstrate the bug that was fixed in ccb973da1f1b.

Sponsored by: Klara, Inc.
Sponsored by: NetApp, Inc.
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D47738

show more ...

tests: Switch sys/kern/sysctl_security_jail_children to execenv=jail

Kyua skips tests based on the jail execution environment if a system is
built WITHOUT_JAIL. Thus, the test case does not need to

tests: Switch sys/kern/sysctl_security_jail_children to execenv=jail

Kyua skips tests based on the jail execution environment if a system is
built WITHOUT_JAIL. Thus, the test case does not need to handle it.

Reviewed by: markj
Approved by: markj (mentor)
Differential Revision: https://reviews.freebsd.org/D47105

show more ...

tests: kern: add some porch(1)-based tty tests

If sysutils/porch is installed, we'll do some basic testing of tty
behavior. The existing tests primarily cover ICANON-related processing
and corner c

tests: kern: add some porch(1)-based tty tests

If sysutils/porch is installed, we'll do some basic testing of tty
behavior. The existing tests primarily cover ICANON-related processing
and corner cases that have been fixed somewhat recently, but I
anticipate growing this out a bit in due time.

Reviewed by: ngie
Differential Revision: https://reviews.freebsd.org/D46806

show more ...