Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/usr.bin
History
elad 04d63f90b5 Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen 
W^X mappings.

Disabled by default.

First proposed in:

	http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html

More information in:

	http://pax.grsecurity.net/docs/mprotect.txt

Read relevant parts of options(4) and sysctl(3) before using!

Lots of thanks to the PaX author and Matt Thomas.
2006-05-16 00:08:24 +00:00
..
apply
…
apropos
modified man(1):
2006-04-10 14:39:06 +00:00
asa
…
at
Kill NULL deref (CID: 871)
2006-03-21 21:59:56 +00:00
audio
Recording to standard output is specified by a file name of -,
2006-05-15 02:21:37 +00:00
awk
use -Wno-pointer-sign for GCC4.
2006-05-11 01:19:55 +00:00
banner
…
basename
…
bdes
…
biff
…
bzip2
…
bzip2recover
…
cal
…
calendar
Correct logic error in wildcard handling, which was causing the
2006-03-24 23:30:08 +00:00
cap_mkdb
…
cdplay
New sentence, new line. Bump date for previous.
2006-01-12 21:00:58 +00:00
checknr
Coverity CID 2969: Check for negative stack in the 'P' case like we do in
2006-04-25 19:25:19 +00:00
chflags
…
chpass
…
cksum
Be more liberal about whitespaces when verifying checksums.
2006-05-07 12:22:55 +00:00
cmp
Coverity CID 1624: Plug memory leak.
2006-04-09 19:47:43 +00:00
col
…
colcrt
…
colrm
…
column
Coverity CID 1596: Plug memory leak.
2006-04-09 19:51:23 +00:00
comm
…
compile_et
…
compress
Coverity CID 2536: Clarify the error path further.
2006-04-09 20:01:40 +00:00
config
gcc-4.0 needs attribute used. Variables with attribute unused get removed.
2006-05-14 23:47:34 +00:00
crontab
apply -Wno-pointer-sign with GCC4.
2006-05-12 03:29:11 +00:00
crunch
need <stdlib.h> for exit(3).
2006-05-10 21:34:20 +00:00
ctags
don't do the -Wno-pointer-sign dance for host programs.
2006-05-12 01:18:25 +00:00
cut
Coverity CID 2790: Always free tmp buffer, not somethimes.
2006-04-25 19:34:42 +00:00
db
…
deroff
…
dirname
…
du
Add -n to the usage message.
2006-05-10 23:35:03 +00:00
eject
…
elf2aout
…
elf2ecoff
…
env
…
error
Coverity CID 2331: Plug memory leak.
2006-04-09 19:27:22 +00:00
expand
…
extattr
…
false
…
fdformat
…
fgen
Coverity CID 1748: Free alias on error.
2006-04-22 17:51:09 +00:00
file
…
find
quell GCC 4.1 uninitialised variable warnings.
2006-05-10 21:53:14 +00:00
finger
no need to cast setlocale()'s return value.
2006-05-11 01:20:33 +00:00
fmt
warns=4
2006-03-16 16:49:07 +00:00
fold
…
fpr
…
from
…
fsplit
…
fstat
tweak for user.h cleanup.
2006-05-11 11:56:38 +00:00
ftp
quell GCC 4.1 uninitialised variable warnings.
2006-05-10 21:53:14 +00:00
gcore
PR/26804: Jason Thorpe: Make PT_DUMPCORE require the process to be PT_ATTACH'ed
2006-04-01 22:34:00 +00:00
genassym
…
gencat
MCDelSet() contains an infinite loop!
2006-03-30 20:32:10 +00:00
getconf
…
getent
getservbyport(3) wants the port in network order.
2006-05-04 23:22:21 +00:00
getopt
…
gprof
…
grep
Changed the type of some size variables from int to size_t. Added const
2006-05-15 21:12:21 +00:00
gzip
apply -Wno-pointer-sign with GCC4.
2006-05-12 02:01:15 +00:00
head
…
hesinfo
…
hexdump
Simplify the way the end of a singly linked list is followed (for adding
2006-03-30 19:53:58 +00:00
iconv
…
id
PR/33054: Nicolas Joly: id(1) sometimes report a duplicate group when a user
2006-03-11 17:16:01 +00:00
indent
…
innetgr
…
ipcrm
…
ipcs
Coverity CID 1858, 1857: Fix leaks. While here, pass lint use warn/warnx
2006-04-28 20:35:15 +00:00
join
…
jot
…
kdestroy
Remove some more kerberosIV references.
2006-03-23 21:48:18 +00:00
kdump
Handle aout m68k; from Izumi Tsutsui.
2006-05-04 18:06:29 +00:00
kgetcred
…
kinit
Remove some more kerberosIV references.
2006-03-23 21:48:18 +00:00
klist
Remove some more kerberosIV references.
2006-03-23 21:48:18 +00:00
ktrace
#include a necessary header directly, rather than via user.h.
2006-05-11 11:58:04 +00:00
ktruss
…
lam
…
last
Code indentation fix up.
2006-02-28 17:17:43 +00:00
lastcomm
…
ldd
Coverity CID 922: Fix check against NULL.
2006-04-02 03:50:38 +00:00
leave
…
less
XXX: GCC uninitialized variables
2006-05-14 02:51:03 +00:00
lex
Coverity CID 522: Clarify that there is no overrun here.
2006-04-22 20:51:09 +00:00
locale
make "locale -a" read locale.alias file.
2006-02-16 19:19:49 +00:00
locate
Redo the previous change so that we can ignore access errors from find,
2006-04-23 03:04:08 +00:00
lock
clear errno before using strtol
2006-05-11 12:02:08 +00:00
logger
…
login
GC old signal handling and merge it in 4 places:
2006-04-17 16:29:44 +00:00
logname
…
look
…
lorder
…
m4
exp() -> m4_exp().
2006-05-11 01:22:20 +00:00
machine
…
mail
include "rcv.h" so that extern array types are well-known.
2006-05-11 10:45:48 +00:00
make
Remove the modterm case from moderrs, the syntax errors
2006-05-11 18:48:33 +00:00
man
Coverity CID 2996: Don't return without closing fp.
2006-05-01 23:22:48 +00:00
menuc
Allow menu entry option names to be code fragments that (should) call
2006-02-20 21:06:40 +00:00
mesg
…
midiplay
…
mixerctl
Two improvements, from a diff from jmc@openbsd.
2006-02-25 01:19:22 +00:00
mk_cmds
…
mkcsmapper
change #include <sys/endian.h> => #include <machine/endian.h> so that
2006-02-09 22:03:15 +00:00
mkdep
make this compile again.
2006-03-20 23:13:51 +00:00
mkesdb
change #include <sys/endian.h> => #include <machine/endian.h> so that
2006-02-09 22:03:15 +00:00
mkfifo
…
mklocale
…
mkstr
…
mktemp
New sentence, new line. Bump date for previous.
2006-01-12 21:54:06 +00:00
modstat
WARNS=4, ansi pass lint.
2006-05-15 14:30:38 +00:00
moduli
Bring over changes I had committed to qsieve.6.
2006-01-24 19:17:19 +00:00
msgc
Sorry, fix syntax error in previous.
2006-05-12 07:20:13 +00:00
msgs
…
netgroup
…
netstat
nfiles -> ns_nfiles (conflicts with kernel header files and _KERNEL.)
2006-05-11 01:23:20 +00:00
newsyslog
…
nfsstat
…
nice
…
nl
quell GCC 4.1 uninitialised variable warnings.
2006-05-10 21:53:14 +00:00
nohup
…
openssl
libcompat isn't needed any more here.
2006-02-25 12:00:24 +00:00
pagesize
…
passwd
Get rid of more Kerberos 4 code.
2006-03-23 23:33:28 +00:00
paste
cast line_len to (int) to avoid warn.
2006-04-01 06:36:58 +00:00
patch
Coverity CID 1253, 1254: Don't assign the return of read or write to size_t.
2006-04-09 19:12:17 +00:00
pathchk
…
paxctl
Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
2006-05-16 00:08:24 +00:00
pkill
Fix cross-reference to grep(1).
2006-04-01 16:12:23 +00:00
pmap
…
pmc
Coverity CID 2355: Checking event for NULL is supefluous; restructure the
2006-04-09 18:57:10 +00:00
pr
Coverity CID 2989: Use the error path to return.
2006-05-01 23:31:10 +00:00
printenv
…
printf
…
progress
Don't try to determining the size of what's coming when reading from a pipe.
2006-04-20 23:20:55 +00:00
pwhash
PR/31144: YOMURA Masanori: pwhash -S/-b never use optarg
2006-03-05 08:50:58 +00:00
qsubst
…
quota
…
radioctl
u_long -> u_int in many places. i guess radioctl(1) was broken on sparc64.
2006-05-11 01:24:14 +00:00
rdist
end the argument list to exec*(3) with a NULL instead of a bare '0', as
2006-05-11 00:22:52 +00:00
renice
…
rev
…
rlogin
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
2006-05-09 20:18:05 +00:00
rpcgen
xdr sucks. sprinkle some (void *) casts into it's functions taking void **,
2006-05-11 17:11:57 +00:00
rpcinfo
make sure that netid always points to an allocated string. Pointed out by
2006-04-05 12:57:29 +00:00
rs
…
rsh
Remove some more old kerberos4 code. Simplify usage.
2006-03-23 23:49:07 +00:00
rup
…
ruptime
reference uptime(1) correctly
2006-05-13 12:41:54 +00:00
rusers
call ctime() with an actual time_t *.
2006-05-11 01:25:23 +00:00
rwall
…
rwho
…
script
ANSIfy. de-P.
2006-03-29 15:40:49 +00:00
sed
Clarify location of `}'. Requested by joerg. Bump date.
2006-05-14 14:34:49 +00:00
seq
…
shar
…
shlock
…
showmount
…
shuffle
…
skey
…
skeyinfo
…
skeyinit
…
sockstat
…
soelim
…
sort
char -> u_char in a couple of places to match other variables.
2006-05-11 19:16:42 +00:00
spell
…
split
…
ssh
Only use -Wno-pointer-sign for gcc4.
2006-05-12 03:52:05 +00:00
stat
…
string2key
Remove some more kerberosIV references.
2006-03-23 21:48:18 +00:00
su
restore elevated priority before launching command in
2006-05-14 21:18:31 +00:00
systat
Gcc 4 needs to have the enum declaration in scope to determine the enum size.
2006-05-14 02:56:27 +00:00
tail
Coverity CID 2986: Free lines before returning.
2006-04-30 23:27:15 +00:00
talk
Fix Coverity CID 1248, negative return from read() passed() to write()
2006-03-18 03:40:51 +00:00
tcopy
Coverity CID 1565: Fix memory leak.
2006-04-30 23:30:13 +00:00
tee
…
telnet
sprinkle some -fno-strict-aliasing and -Wno-pointer-sign with GCC4.
2006-05-11 23:16:28 +00:00
tftp
Coverity CID 894: Avoid NULL dereference that cannot really happen.
2006-04-09 18:47:49 +00:00
time
…
tip
end the argument list to exec*(3) with a NULL instead of a bare '0', as
2006-05-11 00:22:52 +00:00
tn3270
sprinkle some -fno-strict-aliasing and -Wno-pointer-sign with GCC4.
2006-05-11 23:16:28 +00:00
top
XXX: GCC uninitialized.
2006-05-14 03:00:45 +00:00
touch
Coverty 1212: Avoid close(-1).
2006-03-18 11:15:00 +00:00
tput
…
tr
use -Wno-pointer-sign with GCC4.
2006-05-12 01:26:05 +00:00
true
…
tset
Rename cat to tset_cat so that coverity does not get confused by the global
2006-05-01 23:18:37 +00:00
tsort
…
tty
…
ul
…
uname
…
unexpand
…
unifdef
Coverity CID 1206: Confusion between && and || leads to indexing an array
2006-04-30 23:56:42 +00:00
uniq
…
units
Coverity CID 814: Add extraneous checks to shut up Coverity.
2006-05-01 00:00:12 +00:00
unvis
…
usbhidaction
Coverity CID 1772: Close file on error return.
2006-05-01 00:03:15 +00:00
usbhidctl
quell GCC 4.1 uninitialised variable warnings.
2006-05-10 21:53:14 +00:00
users
…
utoppya
Sort SEE ALSO; mark up -; end sentence with dot.
2006-04-04 20:45:41 +00:00
uudecode
…
uuencode
…
uuidgen
…
vacation
…
vgrind
Need assert.h now.
2006-05-01 05:14:22 +00:00
vi
XXX: GCC uninitialized
2006-05-14 03:05:47 +00:00
vis
…
vmstat
Coverity CID 884: Avoid NULL deref.
2006-05-02 22:19:12 +00:00
vndcompress
Fix typo ("program").
2006-02-23 20:57:03 +00:00
w
…
wall
…
wc
…
what
…
whatis
modified man(1):
2006-04-10 14:39:06 +00:00
whereis
…
who
Another overrun forgotten in previous commit, also found by Coverity.
2006-03-17 20:44:28 +00:00
whois
Coverity CID 1736: close files before returning.
2006-05-02 22:26:46 +00:00
window
Coverity CID 1184: Avoid NULL deref.
2006-05-02 22:35:07 +00:00
write
…
xargs
Query kernel for maximum argument size instead of using ARG_MAX.
2006-03-28 14:27:41 +00:00
xinstall
char -> u_char for a buffer passed to MD5*().
2006-05-11 06:09:44 +00:00
xlint
Add RCSId.
2006-04-17 06:53:06 +00:00
xstr
…
yacc
Sprinkle __dead
2006-05-03 18:08:24 +00:00
yes
Make yes exit if a write fails (due to, e.g., EPIPE or revocation).
2006-04-24 05:24:03 +00:00
ypcat
…
ypmatch
…
ypwhich
…
Makefile
Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
2006-05-16 00:08:24 +00:00
Makefile.inc
…