Commit Graph

3684 Commits

Author SHA1 Message Date
Simon L. B. Nielsen
0a389eab22 Fix ipfw packet matching errors with address tables.
The ipfw tables lookup code caches the result of the last query.  The
kernel may process multiple packets concurrently, performing several
concurrent table lookups.  Due to an insufficient locking, a cached
result can become corrupted that could cause some addresses to be
incorrectly matched against a lookup table.

Submitted by:	ru
Reviewed by:	csjp, mlaier
Security:	CAN-2005-2019
Security:	FreeBSD-SA-05:13.ipfw

Correct bzip2 permission race condition vulnerability.

Obtained from:	Steve Grubb via RedHat
Security:	CAN-2005-0953
Security:	FreeBSD-SA-05:14.bzip2
Approved by:	obrien

Correct TCP connection stall denial of service vulnerability.

A TCP packets with the SYN flag set is accepted for established
connections, allowing an attacker to overwrite certain TCP options.

Submitted by:	Noritoshi Demizu
Reviewed by:	andre, Mohan Srinivasan
Security:	CAN-2005-2068
Security:	FreeBSD-SA-05:15.tcp

Approved by:	re (security blanket), cperciva
2005-06-29 21:36:49 +00:00
Brooks Davis
b97b7bab6b Remove isc-dhcp files from HEAD now that we're using the OpenBSD
dhclient.

Reminded by:	ru
Approved by:	re (blanket dhclient)
2005-06-29 01:46:40 +00:00
Ruslan Ermilov
4bdc233895 Fix markup in local FreeBSD additions.
Approved by:	re (blanket manpages)
2005-06-27 07:07:55 +00:00
Darren Reed
0e6e3d9f1c Remove these files from src/contrib/ipfilter as they are already present
in src/sys/contrib/ipfilter/netinet.  Makefile's reachover bits find what
they need so building is unaffected.

Approved by: re (dwhite)
2005-06-23 14:22:02 +00:00
Darren Reed
721c3c7cc6 Fix some minor problems before release:
(1) "ipf -T" is broken for fetching single entries and
(2) loading rules with numbered collections does not order insertion right.
(3) stats aren't accumulated for hash table memory failures

Approved by: re (dwhite)
2005-06-23 14:19:02 +00:00
Dag-Erling Smørgrav
f9165282ef This commit was generated by cvs2svn to compensate for changes in r147466,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:39:09 +00:00
Dag-Erling Smørgrav
9bc006de0e Fix markup errors caused by a bug in gendoc.pl (see P4 change #78671)
Approved by:	re (kensmith)
2005-06-17 14:39:09 +00:00
Dag-Erling Smørgrav
bfa13ec9be This commit was generated by cvs2svn to compensate for changes in r147464,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:37:52 +00:00
Dag-Erling Smørgrav
ba619a26fa MFP4: (#78671) correctly escape \& in Perl strings.
Submitted by:	ru
Approved by:	re (kensmith)
2005-06-17 14:37:52 +00:00
Dag-Erling Smørgrav
0af72343f9 This commit was generated by cvs2svn to compensate for changes in r147462,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:37:16 +00:00
Dag-Erling Smørgrav
347c3b1ea0 MFP4: (#78670) markup nits
MFP4: (#78673) bump date

Submitted by:	ru
Approved by:	re (kensmith)
2005-06-17 14:37:16 +00:00
Dag-Erling Smørgrav
0d0962dc0d This commit was generated by cvs2svn to compensate for changes in r147460,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:35:37 +00:00
Dag-Erling Smørgrav
05640c12fc MFP4: (#78672) markup nits.
Submitted by:	ru
Approved by:	re (kensmith)
2005-06-17 14:35:37 +00:00
Dag-Erling Smørgrav
556dce83d8 Vendor import of OpenPAM Figwort. 2005-06-17 08:11:43 +00:00
Dag-Erling Smørgrav
2f0f4f3784 This commit was generated by cvs2svn to compensate for changes in r147455,
which included commits to RCS files with non-trunk default branches.
2005-06-17 08:11:43 +00:00
Ruslan Ermilov
d429ea3323 Markup fixes.
Approved by:	re (blanket)
2005-06-16 20:51:10 +00:00
Ruslan Ermilov
c1c9502bf7 Apply a series of scripts to automatically fix some markup bugs.
Approved by:	re (blanket)
2005-06-16 20:21:03 +00:00
Gregory Neil Shapiro
9f0725482c This commit was generated by cvs2svn to compensate for changes in r147353,
which included commits to RCS files with non-trunk default branches.
2005-06-14 02:23:14 +00:00
Gregory Neil Shapiro
0c97652c0b Import OSTYPE(freebsd6) support from sendmail open source repo for FreeBSD 6.0.
Approved by: re (scottl)
Requested by: keramida
2005-06-14 02:23:14 +00:00
Sam Leffler
fb74d4fdc8 resolve merge conflicts
Approved by:	re (dwhite)
2005-06-13 17:07:31 +00:00
Sam Leffler
d2f530490d This commit was generated by cvs2svn to compensate for changes in r147341,
which included commits to RCS files with non-trunk default branches.
2005-06-13 17:00:32 +00:00
Sam Leffler
fd7895c8dd stripped down import of hostapd 0.3.9
Approved by:	re (dwhite)
2005-06-13 17:00:32 +00:00
Sam Leffler
aff0e28457 resolve merge conflicts 2005-06-13 16:54:21 +00:00
Sam Leffler
f59037e440 This commit was generated by cvs2svn to compensate for changes in r147338,
which included commits to RCS files with non-trunk default branches.
2005-06-13 16:43:14 +00:00
Sam Leffler
1c3c13af99 stripped down import of wpa_supplicant v0.3.9
Approved by:	re (dwhite)
2005-06-13 16:43:14 +00:00
Sam Leffler
dd9c1736f5 pullup security fix on vendor branch 2005-06-09 15:54:42 +00:00
Sam Leffler
fa2afacabb This commit was generated by cvs2svn to compensate for changes in r147173,
which included commits to RCS files with non-trunk default branches.
2005-06-09 15:42:58 +00:00
Sam Leffler
cc157742d1 Correct several denial-of-service vulnerabilities in tcpdump.
Security:	FreeBSD-SA-05:10.tcpdump
Security:	CAN-2005-1267, CAN-2005-1278, CAN-2005-1279, CAN-2005-1280
Obtained from:	tcpdump.org
2005-06-09 15:42:58 +00:00
Sam Leffler
4f735865c7 fix byte order handling: FreeBSD != Linux 2005-06-07 23:33:13 +00:00
Gregory Neil Shapiro
50bd7c73f6 Note the sendmail 8.13.4 upgrade
MFC after:	4 days
2005-06-07 04:22:21 +00:00
Gregory Neil Shapiro
188b7d28c9 Resolve conflicts from sendmail 8.13.4 import 2005-06-07 04:17:21 +00:00
Gregory Neil Shapiro
13d8826863 Import sendmail 8.13.4 2005-06-07 04:14:59 +00:00
Gregory Neil Shapiro
b1b29dff01 This commit was generated by cvs2svn to compensate for changes in r147078,
which included commits to RCS files with non-trunk default branches.
2005-06-07 04:14:59 +00:00
Sam Leffler
4e40980e6f apply important fixes from development branch 2005-06-05 22:41:14 +00:00
cvs2svn
6f38331fdd This commit was manufactured by cvs2svn to create branch
'VENDOR-hostapd'.
2005-06-05 22:36:47 +00:00
Sam Leffler
3807a45d8a import/upgrade instructions 2005-06-05 22:36:46 +00:00
Sam Leffler
5d48cb5da2 Stripped down import of hostapd v0.3.7 2005-06-05 22:35:03 +00:00
Sam Leffler
523fd026bd This commit was generated by cvs2svn to compensate for changes in r147021,
which included commits to RCS files with non-trunk default branches.
2005-06-05 22:35:03 +00:00
Sam Leffler
b1bb8b1684 fix for ctrl interface socket setup
Submitted by:	brooks
2005-06-05 21:13:08 +00:00
cvs2svn
4df0b3fb12 This commit was manufactured by cvs2svn to create branch
'VENDOR-wpa_supplicant'.
2005-06-05 20:55:02 +00:00
Sam Leffler
75c61a94a4 import/ugprade instructions 2005-06-05 20:55:01 +00:00
Sam Leffler
f1fb6907ab Stripped down import of wpa_supplicant v0.3.8 2005-06-05 20:52:14 +00:00
Sam Leffler
e66286908c This commit was generated by cvs2svn to compensate for changes in r147013,
which included commits to RCS files with non-trunk default branches.
2005-06-05 20:52:14 +00:00
Alexander Kabaev
b297022008 Enable handling of MS-compatible packing push and pop pragmas. This change was
inadvertedly left out of the last import.
2005-06-03 17:35:13 +00:00
David E. O'Brien
28832e4b79 Make diff(1) follow traditional UNIX SOP of later options nullify earlier
options that are mutually exclusive.
2005-06-03 06:46:56 +00:00
Alexander Kabaev
441d901f19 Fix a typo from previos commit. 2005-06-03 05:58:56 +00:00
Alexander Kabaev
65bbb3030a Catch up with changes in BDX_OUTPUT_[LR]BRAC callers. 2005-06-03 04:19:23 +00:00
Alexander Kabaev
c3cbf7fdb9 Merge conflicts for GCC 3.4.4. 2005-06-03 04:02:20 +00:00
Alexander Kabaev
d14a001770 Localize GCC version string for FreeBSD. 2005-06-03 03:52:25 +00:00
Alexander Kabaev
31a119f3ed Stock files. 2005-06-03 03:50:42 +00:00