| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
This works around a bug in HP-UX's telnet client and also gives a much
saner user experience when using FreeBSD's telnet client.
PR: bin/19405
Submitted by: Joel Ray Holveck joelh of gnu.org
MFC after: 1 month
|
|
|
|
|
|
| |
Approved by: darrenr
MFC after: 1 week
Security: CERT VU#521769
|
|
|
|
|
|
|
|
|
|
|
| |
own purposes. To pull this off, it defines _KERNEL before including the
headers where these structures are defined. This leads to no end of
trouble when some of these headers, or other headers that they include,
change, as demonstrated by r180755.
The quick fix in this particular case is to define _WANT_FILE instead of
_KERNEL, conditional on __FreeBSD__. A better long-term fix is left as
an exercise to the reader.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The xgetpass() function pushes a cleanup entry for &osa, but then
attempts to flush the stack until an entry matching &sa. The two
object pointers do not match, so the stack is popped too much,
and then cleanup_until calls abort() when it unexpectedly hits
the bottom of the cleanup stack.
Reported by: Paul B. Mahol, onemda at gmail.com,
Pietro Cerutti, gahr at gahr.ch
PR: bin/124191
Reviewed by: mp, kris
MFC after: 2 days
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the patch from ISC for lib/bind9/check.c and deletion of unused
files in lib/bind.
This version will by default randomize the UDP query source port
(and sequence number of course) for every query.
In order to take advantage of this randomization users MUST have an
appropriate firewall configuration to allow UDP queries to be sent and
answers to be received on random ports; and users MUST NOT specify a
port number using the query-source[-v6] options.
The avoid-v[46]-udp-ports options exist for users who wish to eliminate
certain port numbers from being chosen by named for this purpose. See
the ARM Chatper 6 for more information.
Also please note, this issue applies only to UDP query ports. A random
ephemeral port is always chosen for TCP queries.
This issue applies primarily to name servers whose main purpose is to
resolve random queries (sometimes referred to as "caching" servers, or
more properly as "resolving" servers), although even an "authoritative"
name server will make some queries, primarily at startup time.
All users of BIND are strongly encouraged to upgrade to the latest
version, and to utilize the source port randomization feature.
This update addresses issues raised in:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447
http://www.kb.cert.org/vuls/id/800113
http://tools.ietf.org/html/draft-ietf-dnsext-forgery-resilience
|
| |
|
|\
| |
| |
| |
| |
| | |
conflicts due to radically different approaches to security and bug fixes.
In some cases I re-started from the vendor version and reimplemented our
patches. Fortunately, this is not enabled by default in -current.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
strtod("0xyz", &endp) resulted in endp pointing to "0xyz"
instead of "xyz".
Reported by: Tony Finch <dot@dotat.at>
MFC after: 1 week
|
| |
| |
| |
| | |
MFC after: 3 days
|
| | |
|
| |
| |
| |
| |
| |
| | |
with respect to sticky options. (r179561 was WRT sticky and branch tags)
Consulted with: Mark Baushke <mdb@gnu.org>
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
This is useful for things like *.pdf files that svn needs
to know about, and will probably be useful down the road
for other things.
|
| |
| |
| |
| |
| | |
(I thought ncvs@ had rm'ed these MIPS files a long time ago... SVN had
better work out - else 7 more files off the vendor branch.)
|
|\ \
| | |
| | |
| | | |
which included commits to RCS files with non-trunk default branches.
|
| | |
| | |
| | |
| | | |
These bits are taken from the FSF anoncvs repo on 23-May-2004 04:41:00 UTC.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- sort the options
- document -o and -O everywhere
Reviewed by: delphij
Approved by: rwatson (mentor)
|
| | | |
|
| | | |
|
|\ \ \
| | | |
| | | |
| | | | |
which included commits to RCS files with non-trunk default branches.
|
| | | | |
|
| | | |
| | | |
| | | |
| | | | |
Approved by: sam, phk
|
|\ \ \ \
| | | | |
| | | | |
| | | | | |
which included commits to RCS files with non-trunk default branches.
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
sam and phk who are the two consumers of this library. If there is
any other fallout, email me and I will take care of it.
Approved by: sam, phk
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | | |
which included commits to RCS files with non-trunk default branches.
|
| | | | | | |
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
files.
|
| | | | | | |
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | |
| | | | | | | |
which included commits to RCS files with non-trunk default branches.
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
for FreeBSD as well.
This is the fix for __gthread_active_p() returning false positives
which was committed as rev. 1.1.1.8.2.1 to RELENG_7 but now looped
back to the vendor branch via the GCC repository and relicensed to
be GPLv2 by me.
Thanks go to gerald@ for getting the fix approved upstream and for
committing to the GCC repository.
PR: 119289
Approved by: core
|
| | | | | | | |
|
| | | | | | | |
|
| | | | | | | |
|
|\ \ \ \ \ \ \
| | | | | | | |
| | | | | | | |
| | | | | | | | |
which included commits to RCS files with non-trunk default branches.
|
| | | | | | | | |
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
which included commits to RCS files with non-trunk default branches.
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
is redundant (I think it's a leftover from an older implementation).
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Do this for active and passive (-l switch) TCP sessions.
MFC after: 1 week
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
and netgraph in gernal). This also allows to add queues for an interface
that is not yet existing (you have to provide the bandwidth for the
interface, however).
PR: kern/106400, kern/117827
MFC after: 2 weeks
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
in cddl-specific parts of the source tree.
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
were off the branch so we need to pull the changes back up
|
|\ \ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
which included commits to RCS files with non-trunk default branches.
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
been sent upstream)
Submitted by: Chris Zimmermann
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
MFC after: 3 weeks
|