Commit Graph

5561 Commits

Author SHA1 Message Date
jmcneill
25e55d52d9 fix default pixmap search directory 2015-11-10 23:09:13 +00:00
christos
f16c72ecb3 Apply patch by Jouni Malinen. We don't have CONFIG_EAP_PWD enabled so we are
not affected:

EAP-pwd peer error path failure on unexpected Confirm message

Published: November 10, 2015
Identifier: CVE-2015-5316
Latest version available from: http://w1.fi/security/2015-8/

Vulnerability

A vulnerability was found in EAP-pwd peer implementation used in
wpa_supplicant. If an EAP-pwd Confirm message is received unexpectedly
before the Identity exchange, the error path processing ended up
dereferencing a NULL pointer and terminating the process.

For wpa_supplicant with EAP-pwd enabled in a network configuration
profile, this could allow a denial of service attack by an attacker
within radio range.

Vulnerable versions/configurations

wpa_supplicant v2.3-v2.5 with CONFIG_EAP_PWD=y in the build
configuration (wpa_supplicant/.config) and EAP-pwd enabled in a network
profile at runtime.

Possible mitigation steps

- Merge the following commits and rebuild wpa_supplicant:

  EAP-pwd peer: Fix error path for unexpected Confirm message

  This patch is available from http://w1.fi/security/2015-8/

- Update to wpa_supplicant v2.6 or newer, once available

- Remove CONFIG_EAP_PWD=y from build configuration

- Disable EAP-pwd in runtime configuration
2015-11-10 18:39:40 +00:00
dholland
5ca5bd7479 Don't use %m in format strings sent to printf. 2015-11-09 00:53:57 +00:00
christos
14b759e0d5 We've never supported executable stack notes in any archs so don't add one. 2015-11-08 17:13:01 +00:00
christos
b09d094867 We've never supported the executable stack note, and none of the other
archs have it.
2015-11-08 17:11:55 +00:00
szptvlfn
93ba639ed2 change MKDEPFLAGS from
-msse2 -mssse3 -mssse3 -fvisibility=hidden
to
  -msse2 -msse3 -mssse3 -fvisibility=hidden

OK dholland@ at tech-x11@
2015-11-07 20:45:03 +00:00
christos
05e58339da Apply the GNU-stack fixes to the old branch. 2015-11-07 16:53:59 +00:00
christos
bb5915f98c Fix inconsistencies with GNU-stack note:
- always use __ELF__ && __linux, not just __ELF__ or just __linux__
- remember to pop back to the previous section where it is missing
XXX: need to file this bug with the GNU folks.
2015-11-07 16:53:07 +00:00
joerg
f80193c0ce Install stdalign.h and stdnoreturn.h for clang as well. 2015-11-07 00:12:57 +00:00
szptvlfn
ba86449ebf remove redundant \ 2015-11-06 21:32:22 +00:00
jmcneill
01606544ce Build xf86-video-modesetting on evbarm 2015-11-06 01:17:08 +00:00
phx
d188e23f41 Build a wsfb Xorg server for amiga. 2015-11-04 17:06:23 +00:00
christos
7c99015f93 add 'n' to getopt 2015-11-04 16:21:52 +00:00
shm
52ccb86d6c PR/50199 - fix for strftime called with empty string.
Patch written by Juho Salminen
2015-11-03 14:15:08 +00:00
szptvlfn
aa4d1a720b remove redundant \ 2015-11-03 11:14:05 +00:00
szptvlfn
dc1a7a52a9 remove redundant \ 2015-11-03 10:43:31 +00:00
szptvlfn
12a863b7a8 remove redundant \ 2015-11-03 10:26:06 +00:00
mrg
d3e820d3ba remove some trailing \'s that aren't needed. from Ryosuke Moro 2015-11-03 06:00:50 +00:00
gdt
fc89a2852b Use -f with cp.
When the source tree is 444 (as should be unremarkable), cp results in
object files that are 444, which when cp'd again without -f result in
an error.
2015-11-02 00:51:18 +00:00
mrg
f5c7aafae0 don't look for libdrm_nouveau unless we've built it. 2015-10-31 20:13:45 +00:00
jmcneill
98b6c89d6e build nouveau on evbarm, too 2015-10-29 10:10:09 +00:00
mrg
62b6708390 properly link and enable all the nouveau parts.
with this, hw GL seems to work!
2015-10-29 08:09:55 +00:00
christos
6ca7fac253 use asprintf(3) 2015-10-26 15:14:33 +00:00
mrg
7e2743fd87 build the nouveau gallium driver. 2015-10-26 07:15:36 +00:00
jmcneill
f2b214e388 Build libdrm_nouveau on evbarm 2015-10-24 14:30:28 +00:00
christos
af12ab5e93 merge conflicts 2015-10-23 18:06:19 +00:00
christos
a6f3f22f24 Import ntp 4.2.8p4 2015-10-23 17:47:36 +00:00
roy
e5a5e919fe Install dhcpcd.conf as root writeable. 2015-10-22 10:51:16 +00:00
christos
d4aeb196d8 make too many struct or union members non-fatal. 2015-10-21 13:43:49 +00:00
macallan
150a0d4705 build some drivers for PCI graphics chips, now that they could be useful
TODO: fix up MMIO stuff to deal with MACE PCI's endianness twiddling
2015-10-19 15:09:39 +00:00
roy
cc3c06b611 Add support for parsing IPv6 nameservers found in resolv.conf.
Fixes PR bin/42196.
2015-10-15 16:14:40 +00:00
roy
f3b5e9756a Revert prior. Instead just send the diagnostic to debugf instead of syslog as it's not really that interesting. 2015-10-15 15:58:34 +00:00
roy
58056b4c20 Derive our primary interface and address by trying to connect to an
address in the TEST-NET-2 network as noted in RFC5737 instead of using
the 1.1.1.1 address. Also, use port 7 (echo) for better style.
Fixes PR bin/46758 thanks to Lloyd Parkes.

While here, if we do fail to connect to the test address, don't spam
this to the console as it's a common case during the boot sequence.
2015-10-15 11:21:53 +00:00
roy
89f3ce7080 If scheduling a probe or response is in the past or exactly now, schedule
it for now + 1 to avoid log file spam about not all probes being sent.
2015-10-15 10:29:57 +00:00
roy
5a3bbc9d90 Revert r1.5 now that the time calculations are using a monotonic clock. 2015-10-15 10:24:33 +00:00
roy
750bc52c86 Starting and stopping should be informational messages to avoid console
spam.
2015-10-15 10:15:18 +00:00
christos
d8e986fab6 Introduce a syslog format that accepts %m. Stop accepting %m in printf
like formats. Support for this is detected via the __syslog_attribute__
macro.
2015-10-14 16:05:14 +00:00
christos
dfe90780e8 syslog attribute. 2015-10-14 16:01:29 +00:00
christos
bbef9da5e8 use syslog attribute 2015-10-14 16:00:17 +00:00
christos
4860ae3db5 use __sysloglike where appropriate. 2015-10-14 15:58:46 +00:00
christos
9fa485335a We really mean __sysloglike here... 2015-10-14 15:58:08 +00:00
christos
37ecb8c3ab introduce an NTP_SYSLOG macro. 2015-10-14 15:55:42 +00:00
christos
1616498e3d these are syslog-like 2015-10-14 15:54:21 +00:00
christos
f5de81ed67 Add a coverity annotation; string bytes follow the struct. It would be
better to add a char bytes[]; at the end of the struct.
2015-10-14 01:49:46 +00:00
rjs
210aa65bab Add Xorg server and S3 driver to ibmnws build. 2015-10-13 19:43:44 +00:00
mrg
4f06f9c186 build libdrm_nouveau and xf86-video-nouveau on x86.
crashes early when starting so far.
2015-10-13 04:33:21 +00:00
mrg
e43864ddde install nouveau.h 2015-10-13 03:32:28 +00:00
roy
fd7491b1b7 A lack of useable addresses on any interfaces is not an error.
More interfaces and/or useable addresses could be added later.
2015-10-12 09:29:25 +00:00
roy
83969876a9 Ignore loopback interfaces 2015-10-12 09:28:15 +00:00
roy
afc9672b0b Use clock_gettime as a more accurate time source. 2015-10-12 09:26:38 +00:00