summaryrefslogtreecommitdiffstats
path: root/crypto/telnet/telnetd
Commit message (Collapse)AuthorAgeFilesLines
* Very big makeover in the way telnet, telnetd and libtelnet are built.markm2003-07-1613-7703/+0
| | | | | | | | | | | | | | | | | | | | | | | Previously, there were two copies of telnet; a non-crypto version that lived in the usual places, and a crypto version that lived in crypto/telnet/. The latter was built in a broken manner somewhat akin to other "contribified" sources. This meant that there were 4 telnets competing with each other at build time - KerberosIV, Kerberos5, plain-old-secure and base. KerberosIV is no longer in the running, but the other three took it in turns to jump all over each other during a "make buildworld". As the crypto issue has been clarified, and crypto _calls_ are not a problem, crypto/telnet has been repo-copied to contrib/telnet, and with this commit, all telnets are now "contribified". The contrib path was chosen to not destroy history in the repository, and differs from other contrib/ entries in that it may be worked on as "normal" BSD code. There is no dangerous crypto in these sources, only a very weak system less strong than enigma(1). Kerberos5 telnet and Secure telnet are now selected by using the usual macros in /etc/make.conf, and the build process is unsurprising and less treacherous.
* Fix up external variables named "debug" that have a horrible habitmarkm2003-05-111-1/+1
| | | | | | | | of conflicting with other, similarly named functions in static libraries. This is done mostly by renaming the var if it is shared amongst modules, or making it static otherwise. OK'ed by: re(scottl)
* Use __FBSDID vs. rcsid[]. Also protect sccs[] and copyright[] from GCC 3.3.obrien2003-05-048-32/+32
|
* Catch up with "base" telnet.markm2002-09-251-3/+3
| | | | s/FALL THROUGH/FALLTHROUGH/ for lint(1).
* Don't risk catching a signal while handling a signal for a dying child, as wejmallett2002-05-271-0/+8
| | | | | | | | | can then end up not properly clearing wtmp/utmp entries. PR: bin/37934 Submitted by: Sandeep Kumar <skumar@juniper.net> Reviewed by: markm MFC after: 2 weeks
* Don't use non-signal-safe functions (exit(3) in this case) insheldonh2002-02-051-1/+1
| | | | | | | | | | | signal handlers. In this case, use _exit(2) instead, following the call to shutdown(2). This fixes rare telnetd hangs. PR: misc/33672 Submitted by: Umesh Krishnaswamy <umesh@juniper.net> MFC after: 1 month
* mdoc(7) police: remove -r from SYNOPSIS, sort -p in DESCRIPTION.ru2001-12-141-6/+5
|
* Fixed bugs from previous revision.ru2001-12-041-1/+2
| | | | Removed -s from SYNOPSIS and restored -S in DESCRIPTION.
* More help for alpha WARNS=2. This code is, erm, unusual. Anyone whomarkm2001-12-031-4/+4
| | | | feels like rewriting it will meet no objection from me.
* Damn. The previous mega-commit was incomplete WRT ANSIfication. Thismarkm2001-11-303-104/+96
| | | | fixes that.
* Very large style makeover.markm2001-11-3010-1134/+388
| | | | | | | | | | | | | 1) ANSIfy. 2) Clean up ifdefs so that a) ones that never/always apply are appropriately either fully removed, or just the #if junk is removed. b) change #if defined(FOO) for appropiate values of FOO. (currently AUTHENTICATION and ENCRYPTION) 3) WARNS=2 fixing 4) GC other unused stuff This code can now be unifdef(1)ed to make non-crypto telnet.
* Manually unifdef(1) CRAY, UNICOS, hpux and sun uselsess code.markm2001-08-297-885/+5
|
* Remove description of an option that only applies to UNICOS < 7.0.dd2001-08-251-13/+0
| | | | | | | That define may still be present in the source, but I don't think anyone has plans to try to use it. Obtained from: NetBSD
* Code merge and diff reduce with "base" telnet. This is the "later"markm2001-08-208-50/+76
| | | | | telnet, so it was treated as the reference code, except where later commits were made to "base" telnet.
* mdoc(7) police: s/BSD/.Bx/ where appropriate.ru2001-08-141-3/+6
|
* output_data(), output_datalen() and netflush() didn't actually guaranteekris2001-07-236-45/+50
| | | | | | | | | | | | | to do what they are supposed to: under some circumstances output data would be truncated, or the buffer would not actually be flushed (possibly leading to overflows when the caller assumes the operation succeeded). Change the semantics so that these functions ensure they complete the operation before returning. Comment out diagnostic code enabled by '-D reports' which causes an infinite recursion and an eventual crash. Patch developed with assistance from ru and assar.
* More potential buffer overflow fixes.ru2001-07-204-35/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | o Fixed `nfrontp' calculations in output_data(). If `remaining' is initially zero, it was possible for `nfrontp' to be decremented. Noticed by: dillon o Replaced leaking writenet() with output_datalen(): : * writenet : * : * Just a handy little function to write a bit of raw data to the net. : * It will force a transmit of the buffer if necessary : * : * arguments : * ptr - A pointer to a character string to write : * len - How many bytes to write : */ : void : writenet(ptr, len) : register unsigned char *ptr; : register int len; : { : /* flush buffer if no room for new data) */ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ : if ((&netobuf[BUFSIZ] - nfrontp) < len) { : /* if this fails, don't worry, buffer is a little big */ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ : netflush(); : } : : memmove(nfrontp, ptr, len); : nfrontp += len; : : } /* end of writenet */ What an irony! :-) o Optimized output_datalen() a bit.
* vsnprintf() can return a value larger than the buffer size.ru2001-07-191-1/+1
| | | | | Submitted by: assar Obtained from: OpenBSD
* Fixed the exploitable remote buffer overflow.ru2001-07-196-314/+219
| | | | | | Reported on: bugtraq Obtained from: Heimdal, NetBSD Reviewed by: obrien, imp
* mdoc(7) police: removed HISTORY info from the .Os call.ru2001-07-101-2/+1
|
* Synch: Add $FreeBSD$.asmodai2001-02-071-0/+1
|
* Fix typo: seperate -> separate.asmodai2001-02-061-1/+1
| | | | | | Seperate does not exist in the english language. Submitted to look at by: kris
* Fix typo: wierd -> weird.asmodai2001-02-061-1/+1
| | | | There is no such thing as wierd in the english language.
* mdoc(7) police: split punctuation characters + misc fixes.ru2001-02-011-9/+9
|
* Prepare for mdoc(7)NG.ru2001-01-101-2/+6
|
* (scrub_env): change to only accept a listed set of variables,assar2000-12-101-23/+37
| | | | including only non-filename contents for TERMCAP
* Add more environment variables to be filtered through scrub_env().asmodai2000-11-301-0/+7
| | | | Synched from normal telnet.
* String paranoia fix. Synched from normal telnet.asmodai2000-11-301-2/+2
|
* String paranoia. Merged from regular telnet.asmodai2000-11-301-2/+2
|
* Correct definition of MAXHOSTNAMELEN in ifdef'ed code.kris2000-11-261-1/+1
| | | | | Submitted by: Edwin Groothuis <mavetju@chello.nl> PR: bin/22787
* mdoc(7) police: use the new features of the Nm macro.ru2000-11-201-2/+2
|
* Avoid use of direct troff requests in mdoc(7) manual pages.ru2000-11-101-2/+0
|
* Add missing $FreeBSD$ to files that are NOT still on vendor a branch.peter2000-07-161-0/+1
|
* Freefall/Internat diff reducer.markm2000-02-241-1/+1
|
* another tcp apps IPv6 updates.(should be make world safe)shin2000-01-272-36/+59
| | | | | | | ftp, telnet, ftpd, faithd also telnet related sync with crypto, secure, kerberosIV Obtained from: KAME project
* $Id$ -> $FreeBSD$peter1999-08-288-8/+8
|
* According to Mark Murray, Makefiles do not belong here. I guess we'rensayer1999-08-161-24/+0
| | | | going to have to figure something else out.
* Add SRA authentication to src/crypto/telnet.nsayer1999-08-161-0/+24
| | | | | | | | | | | | | | | | | | | | SRA does a Diffie-Hellmen exchange and then DES-encrypts the authentication data. If the authentication is successful, it also sets up a session key for DES encryption. SRA was originally developed at Texas A&M University. This code is probably export restricted (despite the fact that I originally found it at a University in Germany). SRA is not perfect. It is vulnerable to monkey-in-the-middle attacks and does not use tremendously large DH constants (and thus an individual exchange probably could be factored in a few days on modern CPU horsepower). It does not, however, require any changes in user or administrative behavior and foils session hijacking and sniffing. The goal of this commit is that telnet and telnetd end up in the DES distribution and that therefore an encrypted session telnet becomes standard issue for FreeBSD.
* MF libexec/telnetd: Determine the host name using an array size ofbrian1999-04-081-2/+3
| | | | | MAXHOSTNAMELEN and call trimdomain() before implementing the -u option.
* MF libexec/telnetd: MAXHOSTNAMELEN & -u fixes.brian1999-04-072-8/+16
|
* Use realhostname().brian1999-04-061-39/+9
|
* MF src/libexec/telnetd: Verify the reverse DNS lookupbrian1999-04-061-2/+18
| | | | | ala rlogind. Suggested by: markm
* Old stuff laying around: Don't use getstr which can conflict with somepeter1998-12-161-5/+5
| | | | curses/termcap/terminfo implementations and causes recursion.
* Old stuff from a source tree: copy (verbatum) the code to expand thepeter1998-12-161-2/+31
| | | | %s/%m in the default /etc/gettytab.
* Remove redundant decl. of time(). Causes problems on alphagpalmer1998-09-011-2/+1
|
* MFC: sprintf paranoiaimp1998-01-221-7/+8
|
* MFC: no \n in syslog strings. Change -P to -p in flags. EOF -> -1. Use err(3).charnier1997-12-089-139/+165
|
* PR: bin/771 and bin/1037 are resolved by this changeuhclem1997-10-081-0/+16
| | | | | | | | | | | | | | | | This change changes the default handling of linemode so that older and/or stupider telnet clients can still get wakeup characters like <ESC> and <CTRL>D to work correctly multiple times on the same line, as in csh "set filec" operations. It also causes CR and LF characters to be read by apps in certain terminal modes consistently, as opposed to returning CR sometimes and LF sometimes, which broke existing apps. The change was shown to fix the problem demonstrated in the FreeBSD telnet client, along with the telnet client in Solaris, SCO, Windows '95 & NT, DEC OSF, NCSA, and others. A similar change was incorporated in the non-crypto version of telnetd. This resolves bin/771 and bin/1037.
* Bring the FreeBSD changes to the virgin sources.markm1997-09-0710-108/+174
|
* Initial import of BSD telnet. This will be used to build the kerberisedmarkm1997-09-0413-0/+9252
telnet, and after userland diffs have been merged in, will be used to build the non-kerberised sources as well. (See unifdef(1) for details)
OpenPOWER on IntegriCloud