freebsd-dev/contrib
Cy Schubert b266d2f206 MFV r361937:
Upstream commit message:

[PATCH 2/3] WPS UPnP: Fix event message generation using a long URL path

More than about 700 character URL ended up overflowing the wpabuf used
for building the event notification and this resulted in the wpabuf
buffer overflow checks terminating the hostapd process. Fix this by
allocating the buffer to be large enough to contain the full URL path.
However, since that around 700 character limit has been the practical
limit for more than ten years, start explicitly enforcing that as the
limit or the callback URLs since any longer ones had not worked before
and there is no need to enable them now either.

Obtained from:	https://w1.fi/security/2020-1/\
	0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch
MFC after:	3 days
Security:	VU#339275 and CVE-2020-12695
2020-06-09 05:38:12 +00:00
..
apr Update apr to 1.7.0. See contrib/apr/CHANGES for a summary of changes. 2020-05-31 22:12:56 +00:00
apr-util Update apr-util to 1.6.1. See contrib/apr-util/CHANGES for a summary of 2020-06-01 10:14:45 +00:00
atf
bearssl Add libbearssl 2019-02-26 05:59:22 +00:00
binutils GNU as: move deprecation message after option parsing 2020-05-18 16:07:14 +00:00
blacklist blacklistd.conf.5: typo/grammar fixes 2020-05-19 00:15:19 +00:00
bmake Merge bmake-20200517 2020-05-20 22:25:46 +00:00
bsnmp Fix immediate crash when snmpd is bound to a specific IP address. 2020-04-20 23:32:49 +00:00
byacc
bzip2 Upgrade to Bzip2 version 1.0.8. 2019-08-11 06:26:03 +00:00
capsicum-test Really skip the tests in capsicum tests 2020-02-17 20:25:33 +00:00
com_err
cortex-strings
dialog
diff
dma
ee
elftoolchain readelf: add more DT_FLAGS_1 flags 2020-05-31 15:31:47 +00:00
expat MFV r355071: libbsdxml (expat) 2.2.9. 2019-11-25 07:48:16 +00:00
file MFV r357712: file 5.38. 2020-02-11 07:02:48 +00:00
flex
gdb [PPC64] Fix GDB sigtramp detection 2019-11-01 11:28:43 +00:00
gdtoa
googletest googletest: pick from upstream: Don't allow signed/unsigned wchar_t in gcc 9 and later 2019-12-21 02:44:50 +00:00
hyperv/tools
ipfilter Per-rule hit counts (-h) can be used with either -i (input) or -o (output) 2020-06-02 03:44:22 +00:00
jemalloc Set LG_VADDR to 48 on RISC-V. 2020-05-04 17:16:30 +00:00
kyua Revert r359385-r359387 2020-03-29 02:40:03 +00:00
ldns
ldns-host
less MFV r349535: less v551. 2019-06-29 18:41:40 +00:00
lib9p Import lib9p 7ddb1164407da19b9b1afb83df83ae65a71a9a66. 2020-05-14 19:57:52 +00:00
libarchive MFV r361280: 2020-05-20 20:58:48 +00:00
libbegemot
libc-pwcache pwcache.3: Explicitly document OOM condition 2020-05-05 17:55:45 +00:00
libc-vis
libcxxrt Include <stdint.h> in unwind-arm.h, since it uses uint32_t and uint64_t 2019-09-13 21:00:19 +00:00
libdivsufsort
libedit Fix arm and aarch64 builds of libedit after r352275 2019-09-14 21:49:42 +00:00
libevent
libexecinfo Sync up with NetBSD libexecinfo changes 2014-2019 2019-10-26 06:59:59 +00:00
libgnuregex
libpcap MFV r355890: 2019-12-21 21:05:53 +00:00
libucl
libxo Import libxo-1.4.0: 2020-01-25 21:16:45 +00:00
llvm-project lld: Set DF_1_PIE for -pie 2020-06-02 22:57:13 +00:00
lua
lutok Add liblutok a lightweight C++ API for lua. 2020-03-23 18:26:23 +00:00
mandoc Update mandoc to cvs snapshot 2019-07-23 2019-07-26 10:00:33 +00:00
mknod
mtree mtree -O: Fix not descending on hash collisions 2019-09-12 20:46:46 +00:00
ncurses Update to 6.2-20200215 2020-02-19 17:09:08 +00:00
netbsd-tests Temporarily disable failing case in CI of amd64: 2020-05-18 12:36:28 +00:00
netcat Add -M option to nc(1), which makes it print the TCP connection 2019-12-14 10:53:52 +00:00
ngatm
ntp ntpd: fix build with -fno-common 2020-04-06 23:11:43 +00:00
nvi vi.1: Fix a typo 2019-12-09 17:58:22 +00:00
ofed Add ConnectX-6 DX HCA ID to libmlx5. 2019-05-08 11:04:09 +00:00
one-true-awk Another partial revert of r301289. 2019-06-03 05:25:22 +00:00
openbsm libauditd: make it a PRIVATELIB 2020-04-19 02:20:39 +00:00
opencsd/decoder Remove a stale file left after merging. 2019-10-10 13:44:12 +00:00
openpam Upgrade to OpenPAM Tabebuia. 2019-02-25 18:41:16 +00:00
openresolv MFV 354917, 354918, 354919 2019-11-20 23:56:20 +00:00
opie
pam_modules/pam_passwdqc
pf
pjdfstest
pnpinfo
processor-trace Update Intel Processor Trace decoder library. 2019-10-10 12:46:34 +00:00
sendmail Plug possible memory leaks in the previous patch. 2020-02-27 23:06:12 +00:00
serf
smbfs mount_smbfs: Issue a warning when .nsmbrc section name contains lowercase characters. 2020-01-03 12:54:14 +00:00
sqlite3 Fix PowerPC segfault. 2020-04-23 14:08:40 +00:00
subversion Update Subversion to 1.14.0 LTS. See contrib/subversion/CHANGES for a 2020-06-01 10:27:05 +00:00
tcp_wrappers Remove a duplicate global (rfc931_timeout). 2019-07-17 23:43:14 +00:00
tcpdump MFV r353143 (phillip): 2019-12-21 21:02:50 +00:00
tcsh MFV r359393: tcsh: import 6974bc35a5cd 2020-03-28 15:00:55 +00:00
telnet telnet: kill off remaining duplicate definition 2020-03-28 20:43:15 +00:00
tnftp Fix poor performance of ftp(1) due to small SO_SNDBUF and SO_RCVBUF. 2020-02-27 19:49:59 +00:00
traceroute The variable names in the description of the port number usage is 2019-06-20 12:38:41 +00:00
tzcode ctime.3: Use ASCII asterisks for C, not special unicode math glyphs 2020-05-22 15:30:14 +00:00
tzdata Import tzdata 2020a 2020-04-24 05:05:58 +00:00
unbound MFV r361322: 2020-05-21 21:00:46 +00:00
unvis
vis
wpa MFV r361937: 2020-06-09 05:38:12 +00:00
xz MFV r359197: xz 5.2.5. 2020-03-22 01:27:38 +00:00