| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
an unprototyped argument to a function.
|
|
|
|
|
|
|
|
|
| |
says they may not modify existing files through FTP.
Renaming a file is effectively a way to modify it.
For instance, if a malicious party is unable to delete or overwrite
a sensitive file, they can nevertheless rename it to a hidden name
and then upload a troyan horse under the guise of the old file name.
|
| |
|
|
|
|
|
|
|
|
|
| |
contents in reply to a RETR command. Such clients consider RETR
as a way to tell a file from a directory. Mozilla is an example.
PR: bin/62232
Submitted by: Bob Finch <bob+freebsd <at> nas <dot> com>
MFC after: 1 week
|
| |
|
|
|
|
| |
Prodded by: des
|
| |
|
|
|
|
|
|
| |
- Unbreak -DNOPAM -DNOSHARED build by putting -lmd after -lopie.
(Static build with PAM remains broken.)
|
|
|
|
| |
Found by: gcc 2.95.4 [FreeBSD]
|
| |
|
|
|
|
| |
Submitted by: lorder(1)
|
|
|
|
|
| |
PR: bin/2442
Reviewed by: Friedemann Becker <zxmxy33@mail.uni-tuebingen.de>
|
|
|
|
|
|
|
|
|
|
| |
- Unify the conditional assignments section so that architectural
exclusions come first, then options and !options, sorted by the
option name, also in directory order, then architecture specific
sections, sorted by the architecture name, with i386 being a
traditional exception.
Prodded by: bde
|
|
|
|
|
|
|
|
| |
However, the code did allow deletion of files. Make deleting require the -m
flag, too.
PR: bin/60809
Submitted by: Alexander Melkov <melkov@comptek.ru>
|
|
|
|
| |
Thanks to: valgrind
|
|
|
|
| |
which is how to rsh as root into a machine.
|
|
|
|
|
|
| |
dig up the patches for amd64 support for it.
Note to self: do not put a 64 bit value in a 32 bit space.
|
|
|
|
|
|
| |
Change it to 64 while here.
Reported by: ps
|
| |
|
|
|
|
|
| |
probably be 128 since that is what the hardware prefetch fill size is
on both the p3, p4 and athlon* cpus.
|
|
|
|
|
|
|
| |
in the case when client sends request with RFC2347 options.
Approved by: re
MFC After: 2 weeks
|
|
|
|
|
|
| |
constants NG_*SIZ that include the trailing NUL byte. This change
is mostly mechanical except for the replacement of a couple of snprintf()
and sprintf() calls with strlcpy.
|
|
|
|
|
|
|
|
| |
don't add excessive CR on the wire.
PR: bin/59285
Submitted by: Andrey Beresovsky <and at rsu.ru>
MFC after: 1 week
|
|
|
|
| |
MFC after: 1 week
|
| |
|
| |
|
| |
|
|
|
|
| |
last in-tree consumer has gone.
|
|
|
|
|
|
| |
so that talkd works without COMPAT_43.
Obtained from: NetBSD (christos), Rumi Szabolcs
|
|
|
|
|
|
|
|
| |
and IPv6.
Wrote at: Hakone.
Powered by: Warner Losh's scotch whisky.
Requested by: nork
|
| |
|
|
|
|
|
|
|
|
| |
(libmap available) and 1 for failure. Assign this return to the
global 'libmap_disable' variable in rtld.c.
This totally prevents any libmap functions from being called after
lm_init() if no config file is present.
|
|
|
|
| |
translation^H^H^Hhack layer.
|
| |
|
| |
|
|
|
|
|
| |
were including varargs.h file but did not use any of its macros,
so they escaped the clean-up before.
|
|
|
|
|
| |
PR: docs/56017
Submitted by: Josef El-Rayes <j.el-rayes@daemon.li>
|
| |
|
| |
|
|
|
|
| |
Pointed out by: obrien
|
|
|
|
| |
the binary name directly.
|
|
|
|
|
|
| |
over it safely.
Pointed out by: yosimoto@waishi.jp
|
|
|
|
| |
Install rtld into /libexec.
|
| |
|
|
|
|
|
| |
the crunched binary) get a non-cryptographic telnet. This is overkill
in that it covers stuff that is not normally used in a crunched binary.
|
|
|
|
| |
distribution is used. This only affects release-building.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously, there were two copies of telnet; a non-crypto version
that lived in the usual places, and a crypto version that lived in
crypto/telnet/. The latter was built in a broken manner somewhat akin
to other "contribified" sources. This meant that there were 4 telnets
competing with each other at build time - KerberosIV, Kerberos5,
plain-old-secure and base. KerberosIV is no longer in the running, but
the other three took it in turns to jump all over each other during a
"make buildworld".
As the crypto issue has been clarified, and crypto _calls_ are not
a problem, crypto/telnet has been repo-copied to contrib/telnet,
and with this commit, all telnets are now "contribified". The contrib
path was chosen to not destroy history in the repository, and differs
from other contrib/ entries in that it may be worked on as "normal"
BSD code. There is no dangerous crypto in these sources, only a
very weak system less strong than enigma(1).
Kerberos5 telnet and Secure telnet are now selected by using the usual
macros in /etc/make.conf, and the build process is unsurprising and
less treacherous.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Rationale:
SIGURG is configured by ftpd to interrupt system calls, which is useful
during data transfers. However, SIGURG could interrupt I/O on the
control channel as well, which was mistaken for the end of the session.
A practical example could be aborting the download of a tiny file,
when the abort sequence reached ftpd after ftpd had passed the file
data to the system and returned to its command loop.
Reported by: ceri
MFC after: 1 week
|