tty_pts: reduce/correct libatf-c linkage

ATF_TESTS_C automatically adds the appropriate library to LDADD --
there's no need to manually append the same library.

MFC after: 1 week
Differential Revis

tty_pts: reduce/correct libatf-c linkage

ATF_TESTS_C automatically adds the appropriate library to LDADD --
there's no need to manually append the same library.

MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D59411

show more ...

tests: exercise unix connectat(2) with a socket peer descriptor

Cover the new fd-direct connect path: stream connect and data passing,
the peer address reported by `getpeername(2)`, datagram to an u

tests: exercise unix connectat(2) with a socket peer descriptor

Cover the new fd-direct connect path: stream connect and data passing,
the peer address reported by `getpeername(2)`, datagram to an unbound
peer, the `EINVAL`/`ENOTSOCK`/`EPROTOTYPE`/`ECONNREFUSED` error matrix,
and the Capsicum token semantics — a descriptor limited to
`CAP_CONNECTAT` can be connected to but not listened on, accepted from,
or read, and one lacking `CAP_CONNECTAT` cannot be a connect target.

Stream listeners are always bound: `uipc_listen()` refuses unbound
sockets with `EDESTADDRREQ`, so an unbound fd-direct listener is not
reachable even with this feature.

Signed-off-by: John Ericson <John.Ericson@Obsidian.Systems>
Assisted-by: Claude Code (Claude Opus 4.8 and Fable 5)

Reviewed by: markj
MFC after: 2 months
Differential Revision: https://reviews.freebsd.org/D58406

show more ...

ptrace_test: require debug.ptrace_transparent_attach enabled for its test

Sponsored by: The FreeBSD Foundation
MFC after: 1 week

tests/sys/kern: Skip capsicum procdesc tests when capability mode is unavailable

pdwait's capsicum/enotcap and procdesc's pdopenpid_capmode enter capability mode.
Require security_capability_mode (a

tests/sys/kern: Skip capsicum procdesc tests when capability mode is unavailable

pdwait's capsicum/enotcap and procdesc's pdopenpid_capmode enter capability mode.
Require security_capability_mode (and security_capabilities for enotcap) so the
cases skip cleanly on kernels built without CAPABILITIES instead of failing.

Approved by: asomers, gallatin
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D58545

show more ...

tests/exterr_test: use ATF_REQUIRE_FEATURE to check exterr_strings

This keeps the skipped test message consistent with others.

Reviewed by: netchild
MFC after: 3 days
Sponsored by: The FreeBSD Foun

tests/exterr_test: use ATF_REQUIRE_FEATURE to check exterr_strings

This keeps the skipped test message consistent with others.

Reviewed by: netchild
MFC after: 3 days
Sponsored by: The FreeBSD Foundation

show more ...

tests/sendfile: move the helper program to common

In order to reuse the sendfile_helper program in pf tests, move it
to tests/sys/common directory, indicatint that it is also used from
another place

tests/sendfile: move the helper program to common

In order to reuse the sendfile_helper program in pf tests, move it
to tests/sys/common directory, indicatint that it is also used from
another places than sys/kern.
Also make the readlen variable static.

Reviewed by: gelbius, kp
Differential Revision: https://reviews.freebsd.org/D58040

show more ...

jail: prevent a race between jail_attach in different threads

Attaching to a jail changes its root directory and its process
credentials. These operations both require unlocking the jail, and also
n

jail: prevent a race between jail_attach in different threads

Attaching to a jail changes its root directory and its process
credentials. These operations both require unlocking the jail, and also
need allprison_lock unlocked. That means that if two threads are trying
to attach to different jails at the same time, it's possible for the
process to end up with one jail's root directory but the other jail's
credentials.

Solve this by forcing the process into single-threaded mode during
system calls that attach to a jail (jail_attach, jail_attach_jd, and
sometimes jail_set).

Reviewed by: kib, markj
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D57858

show more ...

unlinkat: Pass flags down to the work functions

The unlinkat(2) and funlinkat(2) system calls were ignoring
AT_RESOLVE_BENEATH.

Also pass pathseg through instead of assuming it's UIO_USERSPACE.

Ad

unlinkat: Pass flags down to the work functions

The unlinkat(2) and funlinkat(2) system calls were ignoring
AT_RESOLVE_BENEATH.

Also pass pathseg through instead of assuming it's UIO_USERSPACE.

Add some tests which make sure that AT_RESOLVE_BENEATH is handled
properly by various system calls.

Approved by: so
Security: FreeBSD-SA-26:42.unlinkat
Security: CVE-2026-49421
Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai
Reviewed by: kib
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57790

show more ...

tests: Fix race condition in aslr_setuid

Use a cloexec pipe to block the parent until the child is ready.

While here, redirect the output from ping to /dev/null, and mark the
test as requiring the

tests: Fix race condition in aslr_setuid

Use a cloexec pipe to block the parent until the child is ready.

While here, redirect the output from ping to /dev/null, and mark the
test as requiring the inet feature since we ping the IPv4 loopback.

PR: 296116
MFC after: 1 week
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D57734

show more ...

tests/jaildesc: Add some more test scenarios

MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D57147

imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images

Otherwise an unprivileged user can disable randomization of the base
address for PIEs even if they are setugid.

Add a regressio

imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images

Otherwise an unprivileged user can disable randomization of the base
address for PIEs even if they are setugid.

Add a regression test.

Approved by: so
Security: FreeBSD-SA-26:32.elf
Security: CVE-2026-49414
Reported by: David Berard
Reviewed by: kib
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57397

show more ...

tests/procdesc: Use a more efficient mechanism to block

Reviewed by: kib
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D57149

jaildesc: Make sure to drain selinfo sleepers in jaildesc_close()

Otherwise they may be left on a freed selinfo list after the
corresponding jaildesc struct is freed. This can be exploited to
eleva

jaildesc: Make sure to drain selinfo sleepers in jaildesc_close()

Otherwise they may be left on a freed selinfo list after the
corresponding jaildesc struct is freed. This can be exploited to
elevate privileges.

Remove the JDF_SELECTED micro-optimization. doselwakeup() is a no-op if
no one ever called selrecord() on the file description, so I see no
reason to complicate the code to avoid the call.

Add some regression tests.

Approved by: so
Security: FreeBSD-SA-26:19.file
Security: CVE-2026-45251
Fixes: 66d8ffe3046d ("jaildesc: add kevent support")
Reviewed by: kib, jamie
Differential Revision: https://reviews.freebsd.org/D56945

show more ...

procdesc: Make sure to drain selinfo sleepers in procdesc_free()

Otherwise they are left on a freed list after procdesc_free() is called.
This can be exploited to elevate privileges.

Remove the PDF

procdesc: Make sure to drain selinfo sleepers in procdesc_free()

Otherwise they are left on a freed list after procdesc_free() is called.
This can be exploited to elevate privileges.

Remove the PDF_SELECTED micro-optimization. doselwakeup() is a no-op if
no one ever called selrecord() on the file description, so I see no
reason to complicate the code to avoid the call.

Add some regression tests.

Approved by: so
Security: FreeBSD-SA-26:19.file
Security: CVE-2026-45251
Reported by: 75Acol, Lexpl0it, fcgboy, and robinzeng2015
Reviewed by: kib, oshogbo
Fixes: cfb5f7686588 ("Add experimental support for process descriptors")
Differential Revision: https://reviews.freebsd.org/D56887

show more ...

tests: Add a simple regression test for an execve overflow bug

MFC after: 2 weeks

tests/timerfd: Serialize

At least one of these tests changes the system clock, which potentially
interferes with concurrently running tests and causes them to fail.

MFC after: 1 week

timerfd: Expect periodic timer performance failures

The current timerfd implementation fails to correctly count events on a
nanosecond callout interval. The timerfd__periodic_timer_performance
test

timerfd: Expect periodic timer performance failures

The current timerfd implementation fails to correctly count events on a
nanosecond callout interval. The timerfd__periodic_timer_performance
test detects this and reports failure.

Mark this test as an expected failure so it isn't flagged by CI. A link
to the bug report is attached to the test for reference.

While we're here, clean up some minor style and Make issues.

Fixes: 834c1ba793d9 ("timerfd: Add tests")
MFC after: 1 week

show more ...

timerfd: Add tests

Take Jan Kokemuller's timerfd tests from the epoll-shim project,
stripping out code that isn't directly related to FreeBSD.

Reviewed by: markj
Differential Revision: https://rev

timerfd: Add tests

Take Jan Kokemuller's timerfd tests from the epoll-shim project,
stripping out code that isn't directly related to FreeBSD.

Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D55789
MFC after: 2 weeks

show more ...

tests/kern: put ssl_sendfile under MK_OPENSSL != no

Reported by: wosch

Add tests for pdwait

MFC With: 4d707825bf62ee73a32b615846eff9c4a9bda538
Sponsored by: ConnectWise

Add tests for pdrfork

MFC With: 5c2ee618d5ec21f110c4da40e9f17833b2ab8b76
Sponsored by: ConnectWise

procdesc: Add a test for pid recycling behavior

MFC With: 09984871d8caff9263b955a94bb9fb5354af1b4c
Sponsored by: ConnectWise

tests/kern: add test for SSL_sendfile()

Makefile*: remove powerpcspe

As reported on the freebsd-announce mailing list[1] FreeBSD is
continuing to retire 32-bit support. Remove powerpcspe from build
infrastructure.

[1] https://lists.free

Makefile*: remove powerpcspe

As reported on the freebsd-announce mailing list[1] FreeBSD is
continuing to retire 32-bit support. Remove powerpcspe from build
infrastructure.

[1] https://lists.freebsd.org/archives/freebsd-announce/2024-February/000117.html

Signed-off-by: Minsoo Choo <minsoochoo0122@proton.me>
Reviewed by: jhibbits, emaste
Pull request: https://github.com/freebsd/freebsd-src/pull/1914

show more ...

tests: Add some regression tests for copy_file_range()

These cover a few bugs that have cropped up, including the ones fixed by
commits 4046ad6bb0e and 2319ca6a0181.

PR: 276045
Reviewed by: rmackl

tests: Add some regression tests for copy_file_range()

These cover a few bugs that have cropped up, including the ones fixed by
commits 4046ad6bb0e and 2319ca6a0181.

PR: 276045
Reviewed by: rmacklem
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D51856

show more ...