Commit Graph

1688 Commits

Author SHA1 Message Date
christos
91805f2d22 Fix CVE-2009-1252: Buffer overflow in ntpd crypto code. A remote
attacker can send a specially constructed request packet that would
overflow the sprintf()'ed buffer causing ntpd to crash.

XXX: Pullup to 5.x
2009-05-20 01:37:36 +00:00
wiz
983cc93f85 Sort SEE ALSO. 2009-05-18 14:11:30 +00:00
roy
45d9fd18a3 Use new way of associating, which fixes wpa with ral(4) 2009-05-13 11:57:16 +00:00
he
e437fa175c Now that we have strnlen() in libc, get rid of the local
and type-conflicting implementation here instead of fixing
it locally.  I don't think (hope!) this is size-critical.
2009-05-10 22:03:22 +00:00
christos
9371e91bff reorder code to avoid uninitalized variable. 2009-05-08 12:06:11 +00:00
christos
3fde99f00c - prevent buffer overflow from Maksymilian Arciemowicz (worst case was 1041
characters and we allocated only 1024.
While here:
- use snprintf to prevent this from happening in the future.
- don't close fd twice on error.
- pass unsigned char to ctype.h functions.
2009-05-07 21:07:34 +00:00
wiz
8da40e7f0e Remove trailing whitespace. 2009-05-04 21:09:12 +00:00
wiz
b10ceebb6d New sentence, new line. 2009-05-04 19:52:34 +00:00
reed
9fc4d3902e Fix roff formatting for ->
by adding an \ such as document in mdoc.7

This was reported in 41276
2009-04-24 16:48:58 +00:00
mrg
8cf404da0f add a NetBSD_DISABLED_* target for config.h.in. 2009-04-19 10:22:10 +00:00
tnozaki
41a9bd5969 fix reliability issue.
if wcwidth(3) return -1, nvi may crash by memory fault.
2009-04-19 02:28:19 +00:00
christos
6757e2669a delete old bind 2009-04-18 13:06:47 +00:00
dogcow
c96865e412 more -Wsign-compare fixes. 2009-04-18 06:37:35 +00:00
christos
39a569fdc2 Fix:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0159
Using:
    https://support.ntp.org/bugs/show_bug.cgi?id=1144
XXX: Pullup to 5.x
2009-04-17 02:45:55 +00:00
tnozaki
4bdba43474 fix PR/41136: \<word search doesn't work in vi
don't reuse RCHAR_T(=wchar_t)'s bits, CSI wchar_t is opaque object.
2009-04-12 14:47:51 +00:00
lukem
eb2de0beef Resolve -Wcast-qual issues. 2009-04-11 11:10:43 +00:00
kefren
430d7ee47c fix null references introduced while merging bzip2 1.0.5
fixes PR/41032
ok christos@
2009-04-06 19:33:22 +00:00
joerg
3e0637e9dd libarchive moved to src/external a while ago. 2009-04-06 15:05:52 +00:00
christos
b01113f755 use the proper status variable. 2009-04-05 17:33:11 +00:00
jld
09d4e48298 Make vi's '@' command work again; a precedence warning fix in r1.2 added
parens in the wrong place such that '@' did nothing.  Needs pullup to -5.

Reported by Ed Ravin; fixes PR 41134.
2009-04-04 01:13:42 +00:00
perry
4bfc10355c add missing commas to .Dd fix, pointed out by wiz 2009-03-22 14:29:34 +00:00
perry
c8a35b6227 OpenBSD uses a custom CVS hack to handle Dd fields ($Mdocdate$) which
we don't have. Replace ".Dd $Mdocdate" with ".Dd Month Day Year" so
that the date comes out right when man pages get built. This will
doubtless need hand conflict resolution whenever these pages are
re-imported.

Note that it would be interesting to have some similar facility for
NetBSD, but I don't think a custom rcs keyword is the right thing --
maybe we can teach groff to parse $Date$
2009-03-21 00:15:52 +00:00
perry
74c461bcb0 Disable inclusion of __DATE__ in the version string. 2009-03-20 21:25:24 +00:00
tsutsui
ce059cd609 Fix bad TCP checksum in packets with IP option header. 2009-03-17 10:10:20 +00:00
joerg
9a62852c21 Specify width for tag list. 2009-03-15 15:16:58 +00:00
njoly
56695ef522 In is_number(), do not check strtod() result against HUGE_VAL which
will result in a SIGFPE on non IEEE hardware. Instead, check the
provided buffer for "nan" string.

This make native build work again on alpha.
2009-03-12 13:04:01 +00:00
christos
ba6a866c95 semi-colon before charset. From Anon Ymous 2009-03-11 01:08:23 +00:00
joerg
997634fe14 Fix preamble to match order set out by mdoc(7). Discussed with wiz. 2009-03-09 19:24:26 +00:00
christos
29e4b0fb40 eliminate hacky memory allocation that loses on 64 bit archs with alignment
issues.
2009-03-06 21:36:25 +00:00
apb
55a5451b03 #include <sys/param.h>, in case it defined MIN and MAX. (Later in this
file, we conditionally define MIN and MAX.)

Including sys/param.h unconditionally like this seems unportable (in
view of the fact that file is built as a host tool), but other parts of
the file sources already include sys/param.h, so this change doesn't
make it worse.

This might fix PR 40539 from Brad Parker.
2009-03-06 19:42:54 +00:00
christos
e5fb0732fe Use siginfo to print more details about the sigfpe. 2009-03-01 23:30:52 +00:00
kenh
83e1006d39 Revert back to previous version 2009-02-27 03:01:57 +00:00
kenh
05970a1d19 This didn't change ... what's the deal? 2009-02-27 02:59:11 +00:00
sketch
1e56a266d4 regen. 2009-02-24 22:27:02 +00:00
sketch
7ce9d1c8ea Make 'build.sh tools' work with the Sun Studio compiler, although bugs in
some of the generated tools still prevent building a full release using them.
2009-02-24 22:25:24 +00:00
tnozaki
63b0517c27 fix following wregexp bug reported in current-user:
- . doesn't match anything
  - [] groups containing more than one character don't match anything
introduced by -Wsign-compare fix.
2009-02-22 11:34:53 +00:00
drochner
7cd24411fd Make ntpd drop supplementary group memberships when dropping privileges
due to a "-u" option.
(There is a bug report to the subcect in ntp's bugzilla, listed
as "closed", almost two years old. Don't know what happed. My patch
is not derived from that one because the code changed.)
2009-02-03 12:51:13 +00:00
jmcneill
cdbce806da Make os_time_t a time_t instead of a long. 2009-01-29 01:02:48 +00:00
jmcneill
464bb4625b Merge http://cvsweb.netbsd.org/bsdweb.cgi/src/usr.sbin/wpa/wpa_supplicant/Attic/driver_netbsd.c.diff?r1=1.7&r2=1.8
PR# 39364: wpa_cli scan_results shows '0' signal level

Use rssi for level (instead of qual) in scan results, following examples
set by the wpa_supplicant ndis and iphone drivers.
2009-01-29 00:17:22 +00:00
christos
7842bfc111 check for memcpy too 2009-01-27 16:50:08 +00:00
lukem
293645aa72 sign-compare fixes 2009-01-25 14:25:27 +00:00
lukem
53fcdb3604 sign-compare fixes for amd64 2009-01-22 10:33:58 +00:00
christos
cce9197201 revert __func__ -> __FUNCTION__ 2009-01-21 23:31:31 +00:00
jmmv
0cdcf7cea6 Remove ATF 0.5 from dist/atf and all of the reachover Makefiles used to
build it.  0.6 is going to be imported in external/bsd/atf, with all the
necessary Makefiles in that same hierarchy.
2009-01-19 07:08:14 +00:00
lukem
cadac39416 fix -Wsign-compare issues 2009-01-18 03:43:45 +00:00
christos
45220987b8 PR/40414: Peter Bex: nvi abort()s in autoindent/autoindent differs from
historical vi
2009-01-16 15:05:55 +00:00
christos
c06deb4e8c PR/40386: M. Levinson: vi(1) filename completion no longer works, fix bug
introduced by shadow variable fix.
2009-01-13 15:43:27 +00:00
drochner
bc4339482e sync the last commit with the official 9.5.1-P1 release,
thanks to Adrian Portelli for the upstream patch
2009-01-09 17:44:20 +00:00
kardel
300f8f3036 merge ntp 4.2.4p6 2009-01-08 20:09:03 +00:00
kardel
0fee6ba94f Import ntp 4.2.4p6 2009-01-08 19:17:53 +00:00