src/tests, branch releng/14.3

pf: improve SCTP validation

2026-04-28T20:33:04Z

As per RFC5061 "4.2. New Parameter Types" the add/delete IP address parameters (0xc001, 0xc002) may not be present in an INIT or INIT-ACK chunk. They are only allowed to be present in an ASCONF chunk. This also prevents unbounded recursion while parsing an SCTP packet. Approved by: so Security: FreeBSD-SA-26:14.pf Security: CVE-2026-7164 PR: 294799 Reported by: Igor Gabriel Sousa e Souza Sponsored by: Orange Business Services

pkru: Fix handling of 1GB largepage mappings

2026-04-21T15:45:50Z

pmap_pkru_update_range() did not handle the case where a PDPE has PG_PS set. More generally, the SET_PKRU and CLEAR_PKRU sysarch implementations did not check whether the request covers a "boundary" vm map entry. Fix this, add the missing PG_PS test, and add some tests. Approved by: so Security: FreeBSD-SA-26:11.amd64 Security: CVE-2026-6386 Reported by: Nicholas Carlini Reviewed by: kib, alc Differential Revision: https://reviews.freebsd.org/D56184

tty: Avoid leaving dangling pointers in tty_drop_ctty()

2026-04-21T15:45:50Z

The TIOCNOTTY handler detaches the calling process from its controlling terminal. It clears the link from the session to the tty, but not the pointers from the tty to the session and process group. This means that sess_release() doesn't call tty_rel_sess(), and that pgdelete() doesn't call tty_rel_pgrp(), so the pointers are left dangling. Fix this by clearing pointers in tty_drop_ctty(). Add a standalone regression test. Approved by: so Security: FreeBSD-SA-26:10.tty Security: CVE-2026-5398 Reported by: Nicholas Carlini Reviewed by: kib, kevans Fixes: 1b50b999f9b5 ("tty: implement TIOCNOTTY") Differential Revision: https://reviews.freebsd.org/D56046

pf tests: verify that we handle address range rules correctly

2026-03-25T16:13:33Z

There's been a problem where rules which differed only in address ranges were considered duplicates and not added. Test for this. Approved by: so Security: FreeBSD-SA-26:09.pf Security: CVE-2026-4748 Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit ab74151e8d097b263237942c0b12277098bc9533) (cherry picked from commit 958dbc87e9c59a2e9f83d84115ce03fb96e9b249)

unix/tests: Add a regression test for fd transfer across jails

2026-02-23T16:00:13Z

Approved by: so MFC after: 3 weeks (cherry picked from commit 5843b8ee02e99527c28f579acfc1f48e10033529) (cherry picked from commit ac2279ea57b72d688cf0af5a6fa7f5dbd1d4521b)

tests: Add a regression test for commit 7587f6d4840f8

2026-01-26T16:49:29Z

Approved by: so Reviewed by: kib MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D50533 (cherry picked from commit a5dac34f6e98c47bd7cb1946e39cc45432e167a8) (cherry picked from commit f56b66f1260a33e49c65bbc05213ec8267978a93)

so_reuseport_lb_test: Add a test case for connected UDP sockets

2025-10-22T15:51:38Z

Approved by: so (cherry picked from commit 1dd66c6ac2c146f540b2ff825fbee442354aeee5) (cherry picked from commit 7272e2d029c20c3144d7aa49500dc86d70344030)

queue(3): Add simple tests for some macros for all list/tailq types

2025-05-01T19:48:48Z

These essentially test building a list/tailq of 100 elements with _INSERT_HEAD(), iterating over them with _FOREACH(), splitting it with _SPLIT_AFTER() and concatenating back the results with _CONCAT(), checking that the lists/tailqs at each step have the right number of elements and at the expected positions. Reviewed by: markj MFC after: 2 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D49975 (cherry picked from commit 4fa275a5f35742a5d662db7106d20819329dc8f2)

fusefs: slightly better debugging in the tests

2025-04-17T20:14:58Z

If the kernel rejects a response written by the server, print it. That would most likely be due to an error in the test logic. MFC after: 2 weeks Sponsored by: ConnectWise (cherry picked from commit 564c732b5c0221373d067c9a21da09b310e676ae) fusefs: fix the 32-bit build after 564c732b5c0 It's a printf format specifier again. MFC with: 564c732b5c0221373d067c9a21da09b310e676ae Sponsored by: ConnectWise (cherry picked from commit 52f7eb31ae84b0a02cd79c857c3201cb7b65c00f)

fusefs: add a test for the max_read= mount option

2025-04-17T20:14:58Z

When set, this limits the amount of data that the kernel will request of the server in any single read operation. The option has always been available in our fusefs implementation, but never covered by the test suite. MFC after: 2 weeks Sponsored by: ConnectWise (cherry picked from commit 9f31c47460412ab6ccae36a70ca019b47423ccec)