Commit Graph

1688 Commits

Author SHA1 Message Date
christos 91805f2d22 Fix CVE-2009-1252: Buffer overflow in ntpd crypto code. A remote
attacker can send a specially constructed request packet that would
overflow the sprintf()'ed buffer causing ntpd to crash.

XXX: Pullup to 5.x
2009-05-20 01:37:36 +00:00
wiz 983cc93f85 Sort SEE ALSO. 2009-05-18 14:11:30 +00:00
roy 45d9fd18a3 Use new way of associating, which fixes wpa with ral(4) 2009-05-13 11:57:16 +00:00
he e437fa175c Now that we have strnlen() in libc, get rid of the local
and type-conflicting implementation here instead of fixing
it locally.  I don't think (hope!) this is size-critical.
2009-05-10 22:03:22 +00:00
christos 9371e91bff reorder code to avoid uninitalized variable. 2009-05-08 12:06:11 +00:00
christos 3fde99f00c - prevent buffer overflow from Maksymilian Arciemowicz (worst case was 1041
characters and we allocated only 1024.
While here:
- use snprintf to prevent this from happening in the future.
- don't close fd twice on error.
- pass unsigned char to ctype.h functions.
2009-05-07 21:07:34 +00:00
wiz 8da40e7f0e Remove trailing whitespace. 2009-05-04 21:09:12 +00:00
wiz b10ceebb6d New sentence, new line. 2009-05-04 19:52:34 +00:00
reed 9fc4d3902e Fix roff formatting for ->
by adding an \ such as document in mdoc.7

This was reported in 41276
2009-04-24 16:48:58 +00:00
mrg 8cf404da0f add a NetBSD_DISABLED_* target for config.h.in. 2009-04-19 10:22:10 +00:00
tnozaki 41a9bd5969 fix reliability issue.
if wcwidth(3) return -1, nvi may crash by memory fault.
2009-04-19 02:28:19 +00:00
christos 6757e2669a delete old bind 2009-04-18 13:06:47 +00:00
dogcow c96865e412 more -Wsign-compare fixes. 2009-04-18 06:37:35 +00:00
christos 39a569fdc2 Fix:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0159
Using:
    https://support.ntp.org/bugs/show_bug.cgi?id=1144
XXX: Pullup to 5.x
2009-04-17 02:45:55 +00:00
tnozaki 4bdba43474 fix PR/41136: \<word search doesn't work in vi
don't reuse RCHAR_T(=wchar_t)'s bits, CSI wchar_t is opaque object.
2009-04-12 14:47:51 +00:00
lukem eb2de0beef Resolve -Wcast-qual issues. 2009-04-11 11:10:43 +00:00
kefren 430d7ee47c fix null references introduced while merging bzip2 1.0.5
fixes PR/41032
ok christos@
2009-04-06 19:33:22 +00:00
joerg 3e0637e9dd libarchive moved to src/external a while ago. 2009-04-06 15:05:52 +00:00
christos b01113f755 use the proper status variable. 2009-04-05 17:33:11 +00:00
jld 09d4e48298 Make vi's '@' command work again; a precedence warning fix in r1.2 added
parens in the wrong place such that '@' did nothing.  Needs pullup to -5.

Reported by Ed Ravin; fixes PR 41134.
2009-04-04 01:13:42 +00:00
perry 4bfc10355c add missing commas to .Dd fix, pointed out by wiz 2009-03-22 14:29:34 +00:00
perry c8a35b6227 OpenBSD uses a custom CVS hack to handle Dd fields ($Mdocdate$) which
we don't have. Replace ".Dd $Mdocdate" with ".Dd Month Day Year" so
that the date comes out right when man pages get built. This will
doubtless need hand conflict resolution whenever these pages are
re-imported.

Note that it would be interesting to have some similar facility for
NetBSD, but I don't think a custom rcs keyword is the right thing --
maybe we can teach groff to parse $Date$
2009-03-21 00:15:52 +00:00
perry 74c461bcb0 Disable inclusion of __DATE__ in the version string. 2009-03-20 21:25:24 +00:00
tsutsui ce059cd609 Fix bad TCP checksum in packets with IP option header. 2009-03-17 10:10:20 +00:00
joerg 9a62852c21 Specify width for tag list. 2009-03-15 15:16:58 +00:00
njoly 56695ef522 In is_number(), do not check strtod() result against HUGE_VAL which
will result in a SIGFPE on non IEEE hardware. Instead, check the
provided buffer for "nan" string.

This make native build work again on alpha.
2009-03-12 13:04:01 +00:00
christos ba6a866c95 semi-colon before charset. From Anon Ymous 2009-03-11 01:08:23 +00:00
joerg 997634fe14 Fix preamble to match order set out by mdoc(7). Discussed with wiz. 2009-03-09 19:24:26 +00:00
christos 29e4b0fb40 eliminate hacky memory allocation that loses on 64 bit archs with alignment
issues.
2009-03-06 21:36:25 +00:00
apb 55a5451b03 #include <sys/param.h>, in case it defined MIN and MAX. (Later in this
file, we conditionally define MIN and MAX.)

Including sys/param.h unconditionally like this seems unportable (in
view of the fact that file is built as a host tool), but other parts of
the file sources already include sys/param.h, so this change doesn't
make it worse.

This might fix PR 40539 from Brad Parker.
2009-03-06 19:42:54 +00:00
christos e5fb0732fe Use siginfo to print more details about the sigfpe. 2009-03-01 23:30:52 +00:00
kenh 83e1006d39 Revert back to previous version 2009-02-27 03:01:57 +00:00
kenh 05970a1d19 This didn't change ... what's the deal? 2009-02-27 02:59:11 +00:00
sketch 1e56a266d4 regen. 2009-02-24 22:27:02 +00:00
sketch 7ce9d1c8ea Make 'build.sh tools' work with the Sun Studio compiler, although bugs in
some of the generated tools still prevent building a full release using them.
2009-02-24 22:25:24 +00:00
tnozaki 63b0517c27 fix following wregexp bug reported in current-user:
- . doesn't match anything
  - [] groups containing more than one character don't match anything
introduced by -Wsign-compare fix.
2009-02-22 11:34:53 +00:00
drochner 7cd24411fd Make ntpd drop supplementary group memberships when dropping privileges
due to a "-u" option.
(There is a bug report to the subcect in ntp's bugzilla, listed
as "closed", almost two years old. Don't know what happed. My patch
is not derived from that one because the code changed.)
2009-02-03 12:51:13 +00:00
jmcneill cdbce806da Make os_time_t a time_t instead of a long. 2009-01-29 01:02:48 +00:00
jmcneill 464bb4625b Merge http://cvsweb.netbsd.org/bsdweb.cgi/src/usr.sbin/wpa/wpa_supplicant/Attic/driver_netbsd.c.diff?r1=1.7&r2=1.8
PR# 39364: wpa_cli scan_results shows '0' signal level

Use rssi for level (instead of qual) in scan results, following examples
set by the wpa_supplicant ndis and iphone drivers.
2009-01-29 00:17:22 +00:00
christos 7842bfc111 check for memcpy too 2009-01-27 16:50:08 +00:00
lukem 293645aa72 sign-compare fixes 2009-01-25 14:25:27 +00:00
lukem 53fcdb3604 sign-compare fixes for amd64 2009-01-22 10:33:58 +00:00
christos cce9197201 revert __func__ -> __FUNCTION__ 2009-01-21 23:31:31 +00:00
jmmv 0cdcf7cea6 Remove ATF 0.5 from dist/atf and all of the reachover Makefiles used to
build it.  0.6 is going to be imported in external/bsd/atf, with all the
necessary Makefiles in that same hierarchy.
2009-01-19 07:08:14 +00:00
lukem cadac39416 fix -Wsign-compare issues 2009-01-18 03:43:45 +00:00
christos 45220987b8 PR/40414: Peter Bex: nvi abort()s in autoindent/autoindent differs from
historical vi
2009-01-16 15:05:55 +00:00
christos c06deb4e8c PR/40386: M. Levinson: vi(1) filename completion no longer works, fix bug
introduced by shadow variable fix.
2009-01-13 15:43:27 +00:00
drochner bc4339482e sync the last commit with the official 9.5.1-P1 release,
thanks to Adrian Portelli for the upstream patch
2009-01-09 17:44:20 +00:00
kardel 300f8f3036 merge ntp 4.2.4p6 2009-01-08 20:09:03 +00:00
kardel 0fee6ba94f Import ntp 4.2.4p6 2009-01-08 19:17:53 +00:00