61078fef5f
Revert to previous, it was not working for me correctly...
2007-09-10 06:28:38 +00:00
fcbc8c046f
Fixed IPF bug #1767831
...
ipflog() & ipmon ignore IPv6 extension headers
Patch fetched from the SourceForge bug report.
2007-09-10 06:12:02 +00:00
e0ef0e5000
Welcome to version 20070908 - multiple targets bug fix.
2007-09-08 09:52:20 +00:00
c11d4df578
Resurrect the port number argument to the iSCSI test harness.
2007-09-08 09:44:24 +00:00
b35bda38e1
Cosmetic change to a long line
...
Don't reset the target session's idea of the disk id whenever input is received.
2007-09-02 18:50:49 +00:00
028ef264bb
Only give the AI_NUMERICSERV hint to getaddrinfo() if it's defined.
2007-09-02 18:48:45 +00:00
22d0439909
In setfval(), ensure that arithmetic never yields a negative zero
...
result. Now {echo | awk '{print -1 * 0}'} prints "0" instead of "-0".
Fixes PR 36831. Discussed in tech-userlevel.
2007-08-28 15:23:13 +00:00
eeb69d2fa6
Import pkg_install-20070821.
2007-08-23 15:19:12 +00:00
45f483d712
Remove CVS $Log$ tag, this got problematic when pulled up to netbsd-4.
2007-08-21 13:17:24 +00:00
9e20ecb745
track upcoming fix for NTP-Bug 889 (avoid calling malloc()
...
during SIGIO handling)
2007-08-18 13:18:23 +00:00
a097fb65eb
pick up upcoming fixes from NTP-Bug 885
2007-08-18 09:56:13 +00:00
55ae27e368
revert a local fix - not necessary any more
...
created and tested by drochner@
2007-08-18 05:48:46 +00:00
4b38cf6082
Use AI_NUMERICSERV as a flag to getaddrinfo() when trying to find the
...
correct service - allows us to bind to the correct port, and not the
iSCSI control port.
Update version to 20070815, and re-run autoconf and autoheader.
2007-08-16 06:25:16 +00:00
50c788c748
Import pkg_install-20070814.
2007-08-14 22:59:50 +00:00
6396470148
+ re-activate code to set port number in the iSCSI target
...
+ if the attempt to getaddrinfo() on (host,port) fails, try various
combinations of (host,service)
+ clean up lint
+ set sess->d when we get traffic in, rather than just at iSCSI login
2007-08-14 18:52:48 +00:00
06a05a37cc
Import pkg_install-20070804: Fix ordering in pkg_order.
2007-08-08 22:38:48 +00:00
64a91fda89
Import libarchive-2.2.6
2007-08-06 12:25:33 +00:00
255da49526
pkg_install-20070802
2007-08-03 13:58:16 +00:00
ed52b7dc34
Import libarchive-2.2.5.
...
Only the library, tar, the test suites for each and the NEWS are
imported, the rest is not used or currently not useful.
Patches for an aliasing violation and a ctype interface violation
are included, they are scheduled to be part of the next release.
2007-07-29 16:35:09 +00:00
c6de8226b0
Back out local NetBSD change (range check to avoid buffer overflow),
...
to reduce diffs to upstream.
This is superseded by another check (TCHECK2) introduced upstream.
2007-07-28 16:09:14 +00:00
87eb08c4d6
Back out local NetBSD change (attempt to handle FDDI padding), to reduce
...
diffs to upstream.
This turns out to be a no-op, and it shouldn't be here at all because
the DEC/NetBSD specific FDDI padding is dealt with in libpcap already.
2007-07-28 16:07:32 +00:00
624d9b0e79
Back out local NetBSD change (typecast to void*), to reduce diffs to
...
upstream.
Appears unnecessary to me (source and target are unsigned char*) and
compiles w/o for me.
2007-07-28 16:04:44 +00:00
427fb19923
Back out local NetBSD changes (removal of _U_ which expands to
...
attribute(unused)), to reduce diffs to upstream.
While that is ugly, we have the _U_ left in at other places.
2007-07-28 16:02:17 +00:00
68aa07a617
Back out local NetBSD change (addition of #include files), to reduce
...
diffs to upstream.
Compiles fine without for me, and there is no CVS commit message
telling why it should be necessary.
2007-07-28 15:59:39 +00:00
55e2ff23b1
fix build for the "USE_INET6=no" case, the two variables 'nxt' and 'len32'
...
are only used in the inet6 code.
2007-07-26 18:15:12 +00:00
1ad9ad78c6
fix compilation on 64-bit platforms by avoiding spurious EXTRACT_32BITS
2007-07-25 06:31:32 +00:00
5b94024b59
Import bind 9.4.1-P1
...
2206. [security] "allow-query-cache" and "allow-recursion" now
cross inherit from each other.
If allow-query-cache is not set in named.conf then
allow-recursion is used if set, otherwise allow-query
is used if set, otherwise the default (localnets;
localhost;) is used.
If allow-recursion is not set in named.conf then
allow-query-cache is used if set, otherwise allow-query
is used if set, otherwise the default (localnets;
localhost;) is used.
[RT #16987 ]
2203. [security] Query id generation was cryptographically weak.
[RT # 16915]
2202. [security] The default acls for allow-query-cache and
allow-recursion were not being applied. [RT #16960 ]
2193. [port] win32: BINDInstall.exe is now linked statically.
[RT #16906 ]
2192. [port] win32: use vcredist_x86.exe to install Visual
Studio's redistributable dlls if building with
Visual Stdio 2005 or later.
2007-07-24 23:52:54 +00:00
92b1ea3abe
Import bind 9.4.1-P1
2007-07-24 23:32:11 +00:00
2e9d41b4db
merge in NetBSD changes
2007-07-24 12:41:07 +00:00
7ef8b6e9b2
avoid a pointer signedness warning
2007-07-24 11:55:13 +00:00
d8f5b90097
merged tcpdump-3.9.7
2007-07-24 11:53:36 +00:00
57e6a30fe7
import tcpdump-3.9.7 (after running the tcpdump2netbsd script and
...
defusing NetBSD id strings used as reference)
2007-07-24 11:42:50 +00:00
23622f237e
Ensure that the special host token '*SMBSERVER' is not automatically
...
hyphenated, as this can lead to some confusion (e.g.: '*SMB-SERVER' isn't
valid).
(Thanks Wiz!)
2007-07-21 22:41:09 +00:00
adf4078381
Fix a possible integer overflow in buffer length calculation due to
...
insufficient check of snprintf()'s return value, see gentoo bug #184815 .
The exploit provided appearently doesn't trigger the overflow in
NetBSD; this might be due to different error return behavior of snprintf
implementations, or due to the fact that out tcpdump is still 3.8.3
while the bug was reported against 3.9.x. The fix looks correct in any
case.
The exploit caused an endless loop at another place instead, due
to an obvious bug, so fix this too.
Also apply another patch which was applied to the 3.8 branch upstream
but never released: rev. 1.72.2.5, infinite loop protection for ldp and bgp
We should update tcpdump to 3.9.x.
2007-07-20 17:12:37 +00:00
8f80c199b2
remove uucp references; from Anon-Ymous
2007-07-18 18:36:57 +00:00
700b744d72
Remove files accidently commited in first import of pkg_install
2007-07-18 14:27:12 +00:00
764d59fb69
Import fix for the download-vulnerability-list script forgotten
...
in the original merge and remove a created file accidently added.
2007-07-18 14:23:32 +00:00
d243200850
Import of pkg_install-20070715 from pkgsrc.
...
This is part one of moving the authoritive version from
src/usr.sbin/pkg_install to pkgsrc/pkgtools/pkg_install/files.
Discussed with and agreed by: jlam@, agc@, adrianp@
Raised issue to and not objected by: core@
2007-07-16 13:01:43 +00:00
71edd4968d
Add new 'data_len' parameter to mount().
2007-07-14 16:03:05 +00:00
d370a3332c
sync with release
2007-07-06 21:20:25 +00:00
d7d9fc60cc
sync with release / removes debug NULL deref
2007-07-06 21:19:33 +00:00
db56afd343
compile fix for amd64
2007-06-24 19:39:06 +00:00
9238104d09
resolve merge conflicts of 4.2.4p2 import
2007-06-24 16:55:11 +00:00
d3063e9f3c
Import ntp 4.2.4p2
2007-06-24 15:47:02 +00:00
ad9b63f6fb
Move my own code from a 4 clause to a 3 clause licence.
2007-06-16 23:13:25 +00:00
c77a3f5aad
Upgraded IPFilter to v4.1.23
2007-06-16 10:52:24 +00:00
03f2531d69
Import IPFilter 4.1.23
2007-06-16 10:33:08 +00:00
bcf774971d
Re-generate autoconf parts.
...
No change to NetBSD distribution, since it is made using reachover Makefiles.
2007-06-16 10:02:23 +00:00
e6bf177ae1
Apply the fix from PR 36354, from yamt.
...
yamt's reading of RFC 3720 is correct (see section 12.10, InitialR2T).
The desired transfer length in the initial ready to transmit
negotiation should not include any immediate data.
2007-06-15 19:57:30 +00:00
86146f9e2e
put LP64 SIZE_T_MAX on a diet: 17 f's is too much, trim it down to 16
2007-06-14 19:26:17 +00:00
549f6b16d1
Make this match the distributing by removing some extra goo that was
...
added a few years back when battling AM_MAINTAINER_MODE and has been
lugged around ever since.
from adrianp
2007-06-14 19:10:54 +00:00
6f5be32dbf
print millis too.
2007-06-09 19:52:36 +00:00
419556ce9d
Instead of printing the priority, print the time before each message which
...
is more useful.
2007-06-09 17:10:59 +00:00
9afe6367b3
crunch cornflakes
2007-06-07 11:32:44 +00:00
40ad27db84
file 4.21. bugfixes
2007-06-07 11:24:27 +00:00
fff7fd04df
s/iplattach/ipfattach/ and s/ipldetach/ipfdetach/
2007-06-04 12:38:58 +00:00
f84135414c
don't make bogus assumptions about struct alignment.
2007-05-31 02:58:10 +00:00
67fcd29261
Do not include internal header files from libpcap without setting the
...
feature-test macros they use. Really, of course, this code should not
include such header files at all.
2007-05-28 11:55:19 +00:00
62e0f430f0
p needs to be const. [hi christos!]
2007-05-28 00:39:00 +00:00
ac016a7fc2
Changes required for FORTIFY_SOURCE: don't rely on #define read (etc.)
...
before system header file inclusion magically causing what "read" is
#defined to to pick up a read-like prototype. For sanity's sake, put
prototypes for revolting trace_mr stuff in their own header file (instead
of nowhere at all and using the trick referenced above).
2007-05-27 16:27:57 +00:00
657382d62b
Added missing .TP
2007-05-23 05:18:45 +00:00
67f0e23f0f
coverity CID 4418: Don't call strlen() with NULL.
2007-05-16 20:53:49 +00:00
6718c86598
Merge IP-Filter 4.1.22
2007-05-15 22:52:20 +00:00
29fd0d9db1
Import IPFilter 4.1.22
2007-05-15 22:26:02 +00:00
e096ddfc8a
Document state policy flags for 'nat' and 'rdr' rules.
2007-05-10 23:03:22 +00:00
f7748bc6aa
pfctl: extend pf.conf(5) syntax. Let the operator supply an optional
...
"state lock" flag (if-bound, gr-bound, floating) at the end of a
NAT rule. The new syntax is backwards-compatbile with the old
syntax.
PF (kernel): change the macro BOUND_IFACE() to the inline function
bound_iface(), and add a new argument, the applicable NAT rule.
Use both the flags on the applicable filter rule and on the applicable
NAT rule to decide whether or not to bind a state to the interface
or the group where it is created.
2007-05-10 22:30:54 +00:00
2d0d2fc81d
merge conflicts
2007-05-01 22:15:12 +00:00
5f9b8877e1
Import bind 9.4.1
2007-05-01 21:51:06 +00:00
872147fef7
Upgraded IPFilter to 4.1.20
2007-05-01 19:08:03 +00:00
68eb121d73
Import IPFilter 4.1.20
2007-05-01 19:00:58 +00:00
8767590c76
On amd64 U_QUAD_T is (probably) 'unsigned long', but "%qd" expects to see
...
a "long long" - giving a compilation warning.
Check for the presence of PRIu64 and use that in preference.
Adjust code to avoid multiple printf() calls.
Use unsigned format specifiers in all cases.
2007-04-21 11:16:53 +00:00
65febf04fc
fix build on arches with chars that're by default unsigned.
...
(patch supplied by martin.)
2007-04-16 02:36:24 +00:00
8ebafcc992
Update IPFilter to version 4.1.19
2007-04-14 20:34:18 +00:00
993d757ec6
Import IPFilter 4.1.19
2007-04-14 20:17:19 +00:00
99a3390caf
Coverity CID/4421: Add extra check for NULL before deref.
2007-04-04 21:40:48 +00:00
94364b1084
Resolve conflicts.
2007-03-30 19:40:47 +00:00
cc483ecacb
Import bind-9.4.0.
2007-03-30 19:15:20 +00:00
a5346961e8
use memcpy instead of strlcpy because we want to truncate the string.
2007-03-27 01:29:44 +00:00
cc1b813618
Don't segfault during decoding of unlimited strings in PPPoE.
2007-03-24 23:20:12 +00:00
f790a123d5
unbork openssl import borkage.
2007-03-07 03:18:53 +00:00
000760c6d5
make print format specifiers match types printed
2007-03-04 21:50:43 +00:00
9f5aa7f07f
fallout from caddr_t -> void * change
2007-03-04 20:04:14 +00:00
7a41045ba4
squelch gcc warnings
2007-03-04 15:25:10 +00:00
17dbe768ca
apply conflict therapy for 4.20 import
2007-03-04 15:22:07 +00:00
67e9db49c9
file 4.20, contains fixes to the magic parser, new syntax and a
...
buffer overflow fix
2007-03-04 14:54:42 +00:00
53d226486b
An incredibly grody hack to save a few more precious bytes: in dhclient,
...
don't include the unknown-{nn,mm} strings ifdef SMALL.
2007-03-01 01:02:33 +00:00
75a9720952
#include <machine/lock.h> before _KERNEL is defined to bypass
...
lossage when including it when _KERNEL is defined in userland.
2007-02-20 15:40:08 +00:00
2d212326ef
Use the new ifnet->if_output signature, the one with a const
...
argument, when __NetBSD__Version >= 499001100.
2007-02-18 04:01:27 +00:00
51701d90f7
constify struct sockaddr for no_output and write_output, due to if.h 1.122
2007-02-18 03:22:03 +00:00
f987814949
include <types.h>
2007-01-30 18:12:48 +00:00
03f10a71aa
provide non-atomic versions so that things compile for now.
2007-01-30 00:46:52 +00:00
fd07b4b277
handle resolv_mt.h
2007-01-27 23:02:37 +00:00
d7aeceb511
deal with base64.c
2007-01-27 22:28:22 +00:00
4455b59ff4
Use __inline consistently so that we avoid unused warnings.
2007-01-27 21:30:22 +00:00
4674124bb1
resolve conflicts
2007-01-27 21:24:09 +00:00
c1a4ad93e3
Import bind-9.4.0-rc2 from ftp.isc.org
2007-01-27 21:02:43 +00:00
24e8b498bd
track NTP bug 768: opening of bcast if, misleading error message
2007-01-27 09:02:38 +00:00
8acf6049c0
Use the portable version to declare the type of the length argument
...
for the recv*() functions. Fix queued with the NTP project.
2007-01-21 07:59:31 +00:00
54a07e0f01
PR/25482
...
reinstate NTP html pages (sans gif's/img tags).
The important man pages are now generated by autogen and
thus match again the code again.
2007-01-20 16:50:29 +00:00
9e57eb45fe
track ntp bug #760 - support DYNAMIC flags in async resolver
2007-01-13 11:41:05 +00:00
b734ab10f3
Use the proper tracing functionality
2007-01-11 22:59:53 +00:00
766d3d66b8
Get rid of some magic constants.
2007-01-11 19:57:23 +00:00
977a3071b2
Explain what's happening when a target is not exporting any iSCSI
...
targets to the initiator rather than a cryptic message about a portal
group tag not being present.
2007-01-11 19:14:32 +00:00
9f740696e2
Pass the target hostname to the iscsi_sock_connect() call, so that it's
...
available for getaddrinfo.
Use the correct IQN name for the NetBSD iSCSI initiator.
2007-01-11 18:56:57 +00:00
0b68869633
Use getaddrinfo(3) to get the required information about the host. Use this
...
explicitly in iscsi_socket_connect(), and ignore the port argument to this
function for just now.
2007-01-11 18:54:58 +00:00
524517b593
Make the code a bit smarter, and dynamically allocate the buffers that are
...
used to cache the data for the read and write operations. This will reduce the
resident set size down from 80+ MB to something much more manageable.
2007-01-10 22:40:31 +00:00
f980d4284c
Move away from magic constants for the SCSI return codes.
...
Give the appropriate size bound when filling in data for the extended
INQUIRY command.
2007-01-10 18:04:31 +00:00
b0ab3a15b9
Return the correct length of the T10 identifier and uuid in the VPD page 83
...
response.
Found by the embryonic NetBSD initiator.
2007-01-09 19:08:08 +00:00
e1d88c5d14
read the values of max_lba and blocklen, and byte swap them if necessary,
...
before printing out their values.
2007-01-08 22:05:47 +00:00
c0040e78f5
various enhancements to make this compile with WARNS=4
2007-01-08 21:46:00 +00:00
eaf1b66230
Export the function to split a config file entry up into parts,
...
conffile_split(), and make it work in the presence of a NULL conffile
descriptor (i.e. from stdin).
2007-01-08 21:44:47 +00:00
dbbbd5d806
import NTP 4.2.4
2007-01-06 19:45:21 +00:00
d1d4526d02
Import ntp 4.2.4
2007-01-06 16:04:26 +00:00
980fc49cd5
CID-3325: don't leak `fd'
...
Also, check for the return value of malloc(3)
ok christos@
2006-12-27 18:13:53 +00:00
b68a85a32f
CID-4282: dies if we can't allocate memory for `peer->hba'
...
CID-2488: `t' is uninitialized
2006-12-26 00:08:44 +00:00
0fd99769e3
CID-3224: check the return value of strtok() before use
...
ok christos@
2006-12-25 23:55:47 +00:00
93b5694767
Remove () from end of the BIND 9 ARM as it is not a man page.
...
(I am not committing the fix to dist/bind/bin/named/named.conf.docbook
as we don't use that docbook file.)
2006-12-14 02:17:14 +00:00
7b1864c5ec
fix byte-swapping code.
2006-12-11 22:05:38 +00:00
a43651f235
Modify netmask calculation so that /0 is fast-tracked, and so that network
...
addresses with bit 31 set are processed properly.
Fix from Hiroshi Nakamoto in PR 34578.
[22:09:17] agc@inspiron1300 ...dist/iscsi/src 26 > ./n 10.4/16 10.4.0.29 10.4/16 10.5.0.29 10.4/0 10.4.0.19 10.4 10.4.0.19 10.4.3/8 10.4.3.7 10.4.3/24 10.4.3.7
addr 10.4.0.29 00000a04, mask 10.4.0.0 00000a04, slash 16
mask 10.4/16 matches addr 10.4.0.29
addr 10.5.0.29 00000a05, mask 10.4.0.0 00000a04, slash 16
No match for mask 10.4/16 from addr 10.5.0.29
mask 10.4/0 matches addr 10.4.0.19
addr 10.4.0.19 0a040013, mask 10.4.0.0 0a040000, slash 32
No match for mask 10.4 from addr 10.4.0.19
addr 10.4.3.7 0000000a, mask 10.4.3.0 0000000a, slash 8
mask 10.4.3/8 matches addr 10.4.3.7
addr 10.4.3.7 000a0403, mask 10.4.3.0 000a0403, slash 24
mask 10.4.3/24 matches addr 10.4.3.7
[22:09:20] agc@inspiron1300 ...dist/iscsi/src 27 > ./n any 192.168.0.1
mask any matches addr 192.168.0.1
2006-11-27 22:24:27 +00:00
c0179c282a
spell precede; from Zafer
2006-11-25 16:48:31 +00:00
be008341cd
Hopping through a void* is not enough to get rid of alignment requirements.
...
Do a memcpy to a properly aligned local variable instead.
2006-11-23 13:07:17 +00:00
83293ad752
back to casting to long since we think that the openssl version dropping the
...
'L' suffix was an accident.
2006-11-14 21:54:24 +00:00
65811b35f5
openssl changed its version number from long to int; compensate.
2006-11-14 19:23:47 +00:00
9013d7c51c
Remove a strange #if that broke libmagic for most 64 bit archs.
...
OK'd by christos.
2006-11-14 14:12:24 +00:00
499ac5cbee
Looks like OpenSSL now uses an int instead of a long for its version
...
number (!?), so explicitly cast to long in case they change it back.
2006-11-14 02:41:40 +00:00
5b239d0be1
PR/35039: jklowden: Fix example to include -i or -p for ipf or pf.
2006-11-12 06:24:08 +00:00
a45cd5c0e1
In the description of the -y option, add a pointer to the -L option.
2006-11-11 10:36:56 +00:00
c9f5e8dae9
don't use a variable array on the stack for a stupid reason.
2006-11-09 20:12:29 +00:00
9a3db19511
track NTP bug 734: setsockopt(..., IP_MULTICAST_IF, ...) fails on 64 bit platforms
2006-11-06 12:19:30 +00:00
956703a5a2
Patch from Christos Zoulas:
...
rework syslog handling to fix PR 33926.
2006-11-05 09:16:20 +00:00
1231a9a93e
renamed to bflt in upstream
...
keen-eyed source-changes reader was Jed Davis
2006-11-03 10:10:39 +00:00
3429d8a242
Sprinkle llx -> PRIx64 around; fixes compilation on 64 bit platforms.
2006-11-01 00:33:40 +00:00
91e9593f57
file 4.18 last-minute conflix
2006-10-31 21:50:54 +00:00
26e338dcb4
readd winzip
2006-10-31 21:47:24 +00:00
2a4995fe7b
this is file 4.18 already, bump patchlevel
2006-10-31 21:39:08 +00:00
74d6dfb485
errno is in 2
2006-10-31 21:17:15 +00:00
910040d09f
welcome to file 4.18. have a nice day.
2006-10-31 21:16:23 +00:00
0968f96e37
file 4.18
...
changes since 4.16: bugfixes, magic improvements, other minor improvements
2006-10-31 20:34:42 +00:00
336eaa9131
comment out impossible code.
2006-10-24 20:45:33 +00:00
2933708c6a
remove 3d magic.
2006-10-20 15:54:45 +00:00
d72654d9e5
Fix spacing issue, reported by anonymous.
2006-10-19 20:28:45 +00:00
5b106e45c5
kill empty else.
2006-10-16 03:38:08 +00:00
7631e65b9f
fix an incomplete initializer.
2006-10-15 19:52:40 +00:00
cdb23ba9fb
add a volatile variable to prevent vfork/longjmp clobbering.
2006-10-15 19:27:21 +00:00
dd191f37f3
Merge the peter-altq branch.
...
(sync with KAME & add support for using ALTQ with pf(4)).
2006-10-12 19:59:07 +00:00
1921cb5602
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
...
Initial patch by rivo nurges, thanks!
2006-10-07 15:10:17 +00:00
66ac2330dc
Teach dhclient(8) to exit gracefully if another instance is already
...
running instead of overwriten the PID file, removing IPv4 address
from the network interface(s) and leaving the system in a broken state.
This fixes PR bin/26504 by Jun-ichiro itojun Hagino. Patch supplied
by Rivo Nurges during NetBSD's second Bugathon.
2006-10-07 14:14:06 +00:00
40a354528b
Coverity CID 3692: Prevent use after free (from Arnaud Lacombe)
2006-10-03 19:06:05 +00:00
1bb7c537ad
Coverity CID 3013: Don't check for NULL after deref! (from Arnaud Lacombe)
2006-10-03 18:18:18 +00:00
a5239739d0
PR/34656: Geoff C. Wing: pppd has stuffed up wtmpx code
2006-09-29 15:44:46 +00:00
5e4126c34c
Coverity CID 3498: Don't return after yyerror(); cleanup first.
2006-09-27 15:35:12 +00:00
e9506eb74b
PR/34284: Gene ENonymous: Fix the userland copy of ip_lookup.c. Why do we
...
have 2 copies?
2006-09-17 14:49:46 +00:00
e89f828c3b
From jmc@openbsd:
...
revision 1.352
date: 2006/08/02 11:45:56; author: dhartmei; state: Exp; lines: +2 -2
in the BNF section, note that a comma is optional, closes PR 5191
2006-09-17 13:53:33 +00:00
ee74a1421a
Fixes for CVE-2006-4095 and CVE-2006-4096 from bind-9.3.2-P1
...
* Assertion failure in ISC BIND SIG query processing (CVE-2006-4095)
- Recursive servers
Queries for SIG records will trigger an assertion failure if more
than one RRset is returned. However exposure can be minimized by
restricting which sources can ask for recursion.
- Authoritative servers
If a nameserver is serving a RFC 2535 DNSSEC zone and is queried
for the SIG records where there are multiple RRsets, then the
named program will trigger an assertion failure when it tries
to construct the response.
* INSIST failure in ISC BIND recursive query handling code (CVE-2006-4096)
It is possible to trigger an INSIST failure by sending enough
recursive queries such that the response to the query arrives after
all the clients waiting for the response have left the recursion
queue. However exposure can be minimized by restricting which sources
can ask for recursion.
ok'ed christos@
2006-09-05 19:31:47 +00:00
4a00cfc811
Typo.
2006-08-28 21:21:52 +00:00
18b025cbc8
PR/34286: Gene ENonymous: Increase YYSTACKSIZE so that we can handle huge
...
pools.
2006-08-26 23:20:56 +00:00
50fe2341d5
force all assertions on when __COVERITY__ is set
2006-08-23 04:10:51 +00:00
5da5f197c5
Use "unsigned int" rather than "u_int" to be consistent with the rest
...
of file(1).
2006-08-20 19:49:31 +00:00
95ee253760
Print rejected rpc packet reason.
2006-08-11 19:01:18 +00:00
a916e7d758
Document the "tos" keyword. Spotted by maxim bourmistrov, patch supplied by
...
jared r r spiegel and forwarded by Thomas Klausner via Jason McIntyre.
2006-08-10 12:30:49 +00:00
5145dd52fa
Belatedly Bump date after my not-so-recent changes.
2006-08-07 20:57:56 +00:00
cc94fcb6e9
Correct units on IEEE80211_RADIOTAP_DBM_ANTSIGNAL,
...
IEEE80211_RADIOTAP_DBM_ANTNOISE.
2006-08-06 17:52:17 +00:00
9410ca204b
mark VPD 0x80 (Unit Serial Number VPD Page) as being done
2006-08-03 20:50:45 +00:00
72a3c3e7b9
Add support for Vital Product Data 0x80, Unit Serial Number, reported to be
...
used by the beta FreeBSD initiator by Paul Dekkers.
2006-08-03 20:49:11 +00:00
66644e0749
+ add support for IPv6 in the target (CIDR scoping has still to be
...
implemented for IPv6, but works fine for IPv4)
+ now poll any connections opened in the target. select is used if
poll is not available
+ remove ramdisk type of backing store, since it was never used, and
is of no use for our needs
+ bump version to 20060727
2006-08-03 20:21:59 +00:00
a6fd778155
don't zerodivide when "backoff-cutoff 0;" tested by zafer
2006-08-03 20:17:43 +00:00
a1291ab337
cope with struct timeval tv_sec being defined as long instead
...
of the SUS mandated time_t.
2006-07-29 19:22:25 +00:00
55fde488db
using the correct type makes it compile on alpha too - found by Kurt Schreiner
2006-07-29 14:56:57 +00:00
af2ffb8cb1
backout change from import.
...
was introduced within ntp and causing
grief there too (partly reason for p3).
this change is not necessary for NetBSD.
2006-07-29 10:21:37 +00:00
f2de40854d
merge 4.2.2p2
...
signedness fixes
fd re-allocation for stdio
PPSAPI fixes in refclock_parse.c
while there clean up last signedness problems for gcc4 compilation
2006-07-29 08:15:29 +00:00
36f7d8cda6
Import ntp 4.2.2p2
2006-07-29 07:10:38 +00:00
407a09df84
strdup/strlcat/snprintf changes from Aleksey Cheusov
2006-07-26 20:46:37 +00:00
79d79919df
Coverity CID: 682 -- remove dead code
2006-07-26 06:23:59 +00:00
f45b14fd95
add ytab.[ch]
2006-07-25 21:25:55 +00:00
cc3156aaa2
Change the meaning of state count to be the number allocated (like c does)
...
instead of the highest number allocated (fortran). Fixes off-by-one errors.
Also change the overallocation of n * 5 / 4 + 10 to just n + 10.
2006-07-25 20:52:57 +00:00
3942d3e2ab
Revert previous and fix properly.
...
- The array must be NULL terminated because other code depends on it.
- Use this terminator to check if we're at the end of the array instead
of doing sizeof(pf_timeouts) / sizeof(pf_timeouts[0]).
2006-07-03 20:26:19 +00:00
847ba49a2c
fix typo.
2006-06-29 21:53:33 +00:00
561776c05e
resolve conflicts.
2006-06-29 21:50:16 +00:00
1edf903634
Import pppd-2.4.4
2006-06-29 21:46:38 +00:00
295eac6574
make the gototab unsigned int
2006-06-26 17:58:25 +00:00
80f0134faf
- widen gototab so NCHARS states fits.
...
- don't allocate more space than we need.
From Aleksey Cheusov
2006-06-26 13:10:47 +00:00
a504bbc8d8
Don't forget to free gototab[i]; pointed out by Aleksey Cheusov
2006-06-25 22:37:45 +00:00
5609a371c9
make MKCRYPTO=no work again.
2006-06-25 03:02:19 +00:00
ab7ad9579e
PR/33392: Aleksey Cheusov: Incorrect matching due to hard-coded limit in
...
number of states. Adapted from patch supplied.
2006-06-22 21:25:14 +00:00
d66ddb6f9c
use the version that is now in ntp-stable (4.2.2 release branch)
2006-06-18 22:48:51 +00:00
7d46a5bb55
NetBSD Coverity CID 3804: avoid file pointer leak
2006-06-18 21:35:57 +00:00
50fd338dac
NetBSD Coverity CID 3799: overrun static array (off by one) fixed
2006-06-18 21:30:19 +00:00
e1a3a74084
NetBSD Coverity CID 3797: bad return code check for open(2) fixed
...
(!fd replaced with fd < 0)
2006-06-18 21:25:13 +00:00
b58f2a229e
NetBSD Coverity CID 3796: possible NULL deref
2006-06-18 21:20:35 +00:00
d58917ea1c
cope with situations where interface are UP and bound to
...
INADDR_ANY - ntpd will ignore those interfaces
(bug 637 @bugs.ntp.isc.org)
2006-06-17 12:11:55 +00:00
b7414305ba
Update the manual section
2006-06-14 16:23:46 +00:00
3e2e64af97
Regen
2006-06-14 16:22:54 +00:00
826ade140d
Use /dev/tty if possible and only fall back to stdin/stderr if that is not
...
available like getpass(3) does.
2006-06-14 16:17:01 +00:00
2e91d940da
PR/33724: Scott Ellis: Building a release with MKINET6=no stops in libisc due
...
to compiler warnings. Fixed misplaced and miscommented #endif
2006-06-13 22:36:36 +00:00
f503e58dd8
PR/33723: Arthur Townsend: file command doesn't show 'executable' for
...
statically linked sun3 exec
2006-06-13 22:20:20 +00:00
d8cec01f6f
PR/33722: Scott Presnell: pppd 2.4.3 active-filter functions botched
2006-06-13 22:12:37 +00:00
d5b727f28d
correct pointer advances broken by previous fix
2006-06-13 21:03:53 +00:00
3dfb395215
sort out pointer types - found & fix by jmmv
2006-06-12 10:46:19 +00:00
b51cdf6b08
fix pointer deref - found by jmmv
2006-06-12 10:45:27 +00:00
8704ff927b
import and integrate NTP 4.2.2
2006-06-11 19:34:07 +00:00
martti