Commit Graph

3902 Commits

Author SHA1 Message Date
Robert Watson
1b05b2d9e7 This commit was generated by cvs2svn to compensate for changes in r155290,
which included commits to RCS files with non-trunk default branches.
2006-02-04 13:17:48 +00:00
Robert Watson
ca0716f571 Initial vendor import of the TrustedBSD OpenBSM distribution, version
1.0 alpha 1, an implementation of the documented Sun Basic Security
Module (BSM) Audit API and file format, as well as local extensions to
support the Mac OS X and FreeBSD operating systems.  Also included are
command line tools for audit trail reduction and conversion to text,
as well as documentation of the commands, file format, and APIs.  This
distribution is the foundation for the TrustedBSD Audit implementation,
and is a pre-release.

This is the first in a series of commits to introduce support for
Common Criteria CAPP security event audit support.

This software has been made possible through the generous
contributions of Apple Computer, Inc., SPARTA, Inc., as well as
members of the TrustedBSD Project, including Wayne Salamon <wsalamon>
and Tom Rhodes <trhodes>.  The original OpenBSM implementation was
created by McAfee Research under contract to Apple Computer, Inc., as
part of their CC CAPP security evaluation.

Many thanks to:	wsalamon, trhodes
Obtained from:	TrustedBSD Project
2006-01-31 19:40:12 +00:00
Robert Watson
a3d614b7e0 This commit was generated by cvs2svn to compensate for changes in r155131,
which included commits to RCS files with non-trunk default branches.
2006-01-31 19:40:12 +00:00
Hartmut Brandt
5105400329 Vendor patch: prevent a core dump when the trace option is not followed
by an option value.

Submitted by:	Shteryana Shopova <shteryana@yahoo.com>
2006-01-31 14:59:07 +00:00
Hartmut Brandt
3dc7424242 This commit was generated by cvs2svn to compensate for changes in r155094,
which included commits to RCS files with non-trunk default branches.
2006-01-31 14:59:07 +00:00
Brooks Davis
c283464ab7 s/predefine/predefined/
PR:		gnu/86627
Submitted by:	Arne Woerner <arne_woerner at yahoo dot com>
MFC After:	6 days
2006-01-24 06:38:35 +00:00
Sam Leffler
d5807d9482 This commit was generated by cvs2svn to compensate for changes in r154439,
which included commits to RCS files with non-trunk default branches.
2006-01-16 20:33:23 +00:00
Sam Leffler
04679efc46 correct dlt buffer alloc; this goes on the vendor branch as it
will be committed there shortly

MFC after:	3 days
2006-01-16 20:33:23 +00:00
Doug Barton
a008796617 Add a reminder to remove obsolete files from the vendor branch. 2006-01-14 02:45:49 +00:00
Ruslan Ermilov
b281aca4ad Pull up from the FSF branch. 2006-01-12 15:31:41 +00:00
Ruslan Ermilov
401070f083 This commit was generated by cvs2svn to compensate for changes in r154258,
which included commits to RCS files with non-trunk default branches.
2006-01-12 15:26:11 +00:00
Ruslan Ermilov
b99439c39a Merge support for new BSD releases from upstream:
- Darwin 8.[0-3].0
- FreeBSD 4.11, 5.4, 6.0, 6.1
- NetBSD 3.0
2006-01-12 15:26:11 +00:00
Colin Percival
9ed97bee65 Correct insecure temporary file usage in texindex. [06:01]
Correct insecure temporary file usage in ee. [06:02]
Correct a race condition when setting file permissions, sanitize file
names by default, and fix a buffer overflow when handling files
larger than 4GB in cpio. [06:03]
Fix an error in the handling of IP fragments in ipfw which can cause
a kernel panic. [06:04]

Security:	FreeBSD-SA-06:01.texindex
Security:	FreeBSD-SA-06:02.ee
Security:	FreeBSD-SA-06:03.cpio
Security:	FreeBSD-SA-06:04.ipfw
2006-01-11 08:02:16 +00:00
Pav Lucistnik
811c0f2ed0 - Update pretty print of multipath routes to better handle timeout of first
probe

  Before:
   5  *
    freebsd (195.250.137.134)  19.086 ms  24.694 ms

  After:
   5  * freebsd (195.250.137.134)  19.086 ms  24.694 ms

Fixes:		bin/90098
Reported by:	Jeremy Chadwick <freebsd@jdc.parodius.com>
Approved by:	andre
MFC after:	1 day
2006-01-10 16:48:52 +00:00
Hartmut Brandt
9d165d9f13 Vendor fix: the routing table can change while we are fetching it from
the kernel. Instead of complaining if we get an ENOMEM (meaning it got
larger than our buffer is) reallocate the buffer and loop.

Submitted by: maxim
2006-01-10 11:59:31 +00:00
Hartmut Brandt
1d6d1f6fa8 This commit was generated by cvs2svn to compensate for changes in r154184,
which included commits to RCS files with non-trunk default branches.
2006-01-10 11:59:31 +00:00
Hartmut Brandt
2a9284a7c0 Vendor fix: initialize the flag field of a newly created node to be 0.
Submitted by:	jasone
2006-01-10 11:52:51 +00:00
Hartmut Brandt
d96dd77460 This commit was generated by cvs2svn to compensate for changes in r154182,
which included commits to RCS files with non-trunk default branches.
2006-01-10 11:52:51 +00:00
Hartmut Brandt
d4199d75a1 Vendor fix: make the default read and write communities NULL. This
basically disables any access unless other strings are set in the config
file. Note, that there is no way to set the communities back to NULL once
they're set to something not NULL.
2006-01-10 11:49:26 +00:00
Hartmut Brandt
5b1d3a5c13 This commit was generated by cvs2svn to compensate for changes in r154180,
which included commits to RCS files with non-trunk default branches.
2006-01-10 11:49:26 +00:00
Hartmut Brandt
e9d4cb69e2 Vendor patch: fix a bug when parsing the include path. 2006-01-10 11:47:56 +00:00
Hartmut Brandt
2bc6540439 This commit was generated by cvs2svn to compensate for changes in r154178,
which included commits to RCS files with non-trunk default branches.
2006-01-10 11:47:56 +00:00
Doug Barton
5a15ecd550 This commit was generated by cvs2svn to compensate for changes in r154032,
which included commits to RCS files with non-trunk default branches.
2006-01-04 19:18:43 +00:00
Doug Barton
b824835191 After some discussion with the folks at ISC, it turns out that the _ai_pad
part of the structure was a hack to maintain binary compatibility with
Sun binaries, and my understanding is that it's not needed generally
on sparc systems running other operating systems. Therefore, hide this
code behind the same set of tests as in lib/bind/include/netdb.h.

This file is being imported on the vendor branch because a similar change
(or change with similar effect) will be in the next version of BIND 9.

This change will not affect other platforms in any way.
2006-01-04 19:18:43 +00:00
Guido van Rooij
25508d6cfb Resolve conflicts (and believe me...you don't want to know). 2005-12-30 11:52:26 +00:00
Guido van Rooij
855921cec5 This commit was generated by cvs2svn to compensate for changes in r153877,
which included commits to RCS files with non-trunk default branches.
2005-12-30 11:34:54 +00:00
Guido van Rooij
e246b3be6f Import IP Filter 4.1.10 2005-12-30 11:34:54 +00:00
Doug Barton
15fe416f9d Minor updates relative to the 9.2.3 import 2005-12-29 04:41:09 +00:00
Doug Barton
3b68468894 Remove files no longer in the BIND 9 distribution 2005-12-29 04:26:13 +00:00
Doug Barton
a00aca3467 Vendor import of BIND 9.3.2 2005-12-29 04:22:58 +00:00
Doug Barton
51396b745e This commit was generated by cvs2svn to compensate for changes in r153816,
which included commits to RCS files with non-trunk default branches.
2005-12-29 04:22:58 +00:00
Max Laier
8d13037cda Fix build after timeval.tv_sec changed from long to time_t. 2005-12-25 22:57:08 +00:00
Ruslan Ermilov
78ad54210f -mdoc sweep. 2005-11-18 10:56:28 +00:00
Ruslan Ermilov
1a6c5d9fac Unbreak on amd64. 2005-11-16 12:33:04 +00:00
Craig Rodrigues
c76b3c840a Convert mount_smbfs to use nmount().
Reviewed by:	bp (smbfs maintainer)
2005-11-16 02:47:12 +00:00
Sam Leffler
d954c733ba This commit was generated by cvs2svn to compensate for changes in r152390,
which included commits to RCS files with non-trunk default branches.
2005-11-13 19:28:17 +00:00
Sam Leffler
06885fed80 correct check for whether or not md5 signature matches; applied
to vendor branch since this is already in their depot
2005-11-13 19:28:17 +00:00
Hartmut Brandt
361b40a30d Vendor patch: fix the reporting of ifOperStatus. We now consider an
interface up when it is running AND the link is not down (that is, it is
up or unknown). If the interface is running but the link is down, we return
state 'dormant', because we're waiting for an external event. Otherwise
the interface is 'down'.

Submitted by:	csjp
Reviewed by:	glebius
2005-11-02 14:05:49 +00:00
Hartmut Brandt
1f467eaaf8 This commit was generated by cvs2svn to compensate for changes in r151970,
which included commits to RCS files with non-trunk default branches.
2005-11-02 14:05:49 +00:00
Tom Rhodes
6b1f5e5661 Quick kill links to the nsmb(8) manual page, there is no such
utility that I can find.
2005-11-01 21:16:39 +00:00
David E. O'Brien
a1cfcf9970 Locate __FreeBSD_cc_version's value beside __FreeBSD__'s value to make it
easier to keep them in sync.
2005-10-30 19:04:47 +00:00
David E. O'Brien
67ae096798 Catch up with FreeBSD 7. 2005-10-29 09:13:31 +00:00
Craig Rodrigues
5dbed42856 Submitted following patch to FSF GCC:
* freebsd-spec.h (FBSD_TARGET_OS_CPP_BUILTINS):
	  Use builtin_define_with_int_value() instead of
	  adding a new check for every new major FreeBSD version.

Motivated by:	simon
Discussed with:	obrien, kan
2005-10-27 23:57:55 +00:00
Giorgos Keramidas
5967e9a271 Typo.
PR:		docs/88015
Submitted by:	Marian Cerny <jojo@matfyz.cz>
MFC after:	3 days
2005-10-26 12:07:23 +00:00
Bill Paul
e00d94fa7c Import a fixed version of driver_ndis.c from the vendor. The existing
version has a bug where it fails to properly cancel the polling loop
that periodically queries the BSSID (this is done to detect the
association/disassociation state). The timeout is supposed to fire
once a second, but the eloop_cancel_timeout() call uses a different
'user data' value than what was passed to eloop_register_timeout(),
so cancelling the timeouts fails. This results in an additional timeout
being created each time an EAPOL packet is received, which can lead
to dozens of unwanted timeouts firing every second instead of just one.
2005-10-20 16:31:54 +00:00
Bill Paul
a36bb70da8 This commit was generated by cvs2svn to compensate for changes in r151513,
which included commits to RCS files with non-trunk default branches.
2005-10-20 16:31:54 +00:00
Ruslan Ermilov
5ca88fcbc5 Update upgrade instructions. 2005-10-20 11:18:24 +00:00
Ruslan Ermilov
ed6ac7236a Merge Groff 1.19.2 changes. 2005-10-20 10:53:15 +00:00
Ruslan Ermilov
982fd8a3e4 Use stock (FSF) version of this file. 2005-10-20 10:52:34 +00:00
Ruslan Ermilov
22481ce32f Removed files not present in v1.19.2 import. 2005-10-20 10:47:26 +00:00
Ruslan Ermilov
d870518220 This commit was generated by cvs2svn to compensate for changes in r151500,
which included commits to RCS files with non-trunk default branches.
2005-10-20 10:47:26 +00:00
Ruslan Ermilov
22e7cbb874 Virgin import of FSF groff v1.19.2 2005-10-20 10:45:19 +00:00
Ruslan Ermilov
1c7b34d8d7 This commit was generated by cvs2svn to compensate for changes in r151497,
which included commits to RCS files with non-trunk default branches.
2005-10-20 10:45:19 +00:00
Tim J. Robbins
4c2501483a In __option_is_short(), avoid calling isprint() on key characters outside
the range allowed by that function, resulting in undefined behaviour.
Our undefined behaviour in multibyte locales happened to differ from
glibc's, resulting in errors parsing option strings.

Obtained from:	Corinna Vinschen (Red Hat)
2005-10-17 12:20:05 +00:00
Bill Paul
7f4269563a Remove the driver_ndis files from the exclusion list 2005-10-10 17:48:01 +00:00
Bill Paul
909537c101 Import the driver_ndis files from the 0.3.9 distribution. 2005-10-10 17:46:15 +00:00
Bill Paul
639338313b This commit was generated by cvs2svn to compensate for changes in r151208,
which included commits to RCS files with non-trunk default branches.
2005-10-10 17:46:15 +00:00
Hartmut Brandt
4c0a7af955 Vendor fix for the build problem of snmp_pf. Move the fallback definitions
for U?INT32_{MAX,MIN} from asn1.h into the .c files that actually require
them (the .h file doesn't refer to these macros).
2005-10-05 15:19:56 +00:00
Hartmut Brandt
bb5e059e0d This commit was generated by cvs2svn to compensate for changes in r150974,
which included commits to RCS files with non-trunk default branches.
2005-10-05 15:19:56 +00:00
Hartmut Brandt
86c5d92d71 Add snmp_ntp/Makefile.in to the exclude list. 2005-10-04 14:53:06 +00:00
Hartmut Brandt
e50dd7e071 These files are not needed and were imported by accident in the
previous import.
2005-10-04 14:51:55 +00:00
Hartmut Brandt
165c5d31cb Virgin import of bsnmpd 1.11 2005-10-04 14:41:06 +00:00
Hartmut Brandt
28bd1fdc0b This commit was generated by cvs2svn to compensate for changes in r150920,
which included commits to RCS files with non-trunk default branches.
2005-10-04 14:41:06 +00:00
Yaroslav Tykhiy
c8a0dfab83 Add an rc.d script to start pfsync at the right moment of the
system boot, and hook it up in the system.

The separate script is needed because in the presence of various
interface lists in rc.conf ($network_interfaces, $cloned_interfaces,
$sppp_interfaces, $gif_interfaces, more to come) it is hard to start
them orderly, so that pfsync is brought up after its syncdev, which
is required for the proper startup of pfsync.

Discussed with:	mlaier on -pf
MFC after:	5 days
2005-10-02 18:59:02 +00:00
Boris Popov
ef29b0f6a1 Allow user to override default port numbers used by communication
protocols.  This is very useful for tunneled SMB connections.

MFC after:	4 weeks
2005-10-02 08:32:49 +00:00
Tim J. Robbins
e5c4d568a6 Update for GNU cpio 2.6. 2005-10-01 06:41:34 +00:00
Tim J. Robbins
4281e6e322 Merge long_format() time formatting code and fixes for printf() format
errors from old copyin.c.
2005-10-01 06:37:41 +00:00
Tim J. Robbins
6ce79ca88c Merge from old copyout.c rev 1.2: Output a zero rdev except for bdevs,
cdevs, fifos and sockets. Don't output a file if the major, minor or
totality of its rdev would be truncated.
2005-10-01 06:09:55 +00:00
Tim J. Robbins
535cc481e6 Merge from old copypass.c rev 1.3: If we must yell at the user than a
file cannot be linked into place when requested (not required) to do it,
reassure them that cpio is still intelligent enough that it will perform
a full copy instead.
2005-10-01 05:54:39 +00:00
Tim J. Robbins
a14da79146 Merge from old util.c rev 1.2: say "volume" instead of "tape". 2005-10-01 05:52:40 +00:00
Tim J. Robbins
70a976e111 Merge from old main.c rev 1.2: Don't set the umask until after we have
processed the arguments and opened the archive file.
2005-10-01 05:49:29 +00:00
Tim J. Robbins
56160607b6 Merge from old tar.c rev 1.2: Recognize and skip 'x' and 'g' pax
extension entries.
2005-10-01 05:42:44 +00:00
Tim J. Robbins
2437584cf0 Merge from old copyin.c rev 1.5, copypass.c rev 1.2: Create fifos using
mkfifo() instead of attempting to create them using mknod().
2005-10-01 05:36:39 +00:00
Tim J. Robbins
920a75c2f3 Rename isnumber() to cpio_isnumber() to avoid clashing with the
<ctype.h> library function of the same name.
2005-10-01 04:56:09 +00:00
Tim J. Robbins
8f7188ccdd Remove files no longer present in GNU cpio distribution. Most of these
were actually moved into subdirectories.
2005-10-01 04:47:43 +00:00
Tim J. Robbins
5c4ae9e5f8 This commit was generated by cvs2svn to compensate for changes in r150765,
which included commits to RCS files with non-trunk default branches.
2005-10-01 04:37:08 +00:00
Tim J. Robbins
fc540ebd38 Import GNU cpio 2.6 (trimmed) 2005-10-01 04:37:08 +00:00
Max Laier
7badd6a5e5 Redirect bridge(4) to if_bridge(4). These should have pointed to if_bridge
from the begining.

Reminded by:	ru
2005-09-28 08:11:15 +00:00
Brooks Davis
92b4183c54 s/routnes/routines/ in help message.
This file is already off the vendor branch and there hasn't been a bc
release in more than 4 years so I can't see any harm in fixing this.

Submitted by:	Arne Woerner <arne_woerner at yahoo dot com>
PR:		gnu/86627
2005-09-27 18:52:17 +00:00
R. Imura
bb6275a869 Fix get{w,d}{l,b}e, set{w,d}{l,b}e macros on big endian systems.
Obtained from:	NetBSD
2005-09-19 08:11:04 +00:00
R. Imura
4d79445aaf Remove macros
htole{s,l,q}, letoh{s,l,q},  htobe{s,l,q}, betoh{s,l,q}
and replace it with more standard byteorder macros in our system.
2005-09-19 08:07:18 +00:00
Colin Percival
9020d67cf5 Correct insecure temporary file usage.
Security:	FreeBSD-SA-05:20.cvsbug
2005-09-07 13:39:44 +00:00
David E. O'Brien
d109621656 Fix bug where static forward declarations weren't accepted.
This allows us to fix non-ISO-C constructs in our kernel to legal ISO-C.

Submitted by:	rodrigc
Obtained from:	http://gcc.gnu.org/ml/gcc-patches/2005-09/msg00006.html
2005-09-07 09:23:39 +00:00
Jesus R. Camou
93cf1a68a6 Update URL and email address.
Approved by:	trhodes (mentor)
20 day timeout:	mbr (did not reply, mentor approved commit)
2005-09-02 06:30:41 +00:00
Andre Oppermann
9e24bd90fe Pretty print multipath routes.
Before (backslash in c syntax meaning):
 6  p16-2-0-0.r21.sttlwa01.us.bb.verio.net (129.250.2.180)  71.027 ms \
p16-1-1-3.r20.sttlwa01.us.bb.verio.net (129.250.2.6)  66.730 ms  66.535 ms
 7  xe-0-2-0.r20.sttlwa01.us.bb.verio.net (129.250.4.16)  71.092 ms \
xe-3-1.r00.sttlwa01.us.bb.verio.net (129.250.2.205)  66.598 ms \
xe-0-2-0.r20.sttlwa01.us.bb.verio.net (129.250.4.16)  71.024 ms

After:
 6  p16-2-0-0.r21.sttlwa01.us.bb.verio.net (129.250.2.180)  71.027 ms
    p16-1-1-3.r20.sttlwa01.us.bb.verio.net (129.250.2.6)  66.730 ms  66.535 ms
 7  xe-0-2-0.r20.sttlwa01.us.bb.verio.net (129.250.4.16)  71.092 ms
    xe-3-1.r00.sttlwa01.us.bb.verio.net (129.250.2.205)  66.598 ms
    xe-0-2-0.r20.sttlwa01.us.bb.verio.net (129.250.4.16)  71.024 ms

Submitted by:	Richard A Steenbergen <ras at e-gerbil.net>
MFC after:	3 days
2005-08-26 18:08:24 +00:00
Tim J. Robbins
1d5cfebaca Fix a one byte off error which causes "less" to crash if you view a
large file, jump to the end, scroll backwards with "b" and try to search
backwards afterwards.

Submitted by:	Matthias Scheler
2005-08-26 10:05:59 +00:00
R. Imura
f373a82454 - Fix checking range of strings of struct iconv_add_in in libsmb and libkiconv,
- Add checking range of strings to iconv_sysctl_add().

Submitted by:	Rudolf Cejka
2005-08-24 12:38:26 +00:00
Christian S.J. Peron
5f305d1bf2 FreeBSD now supports BIOCLOCK. So we can use it now.
Reviewed by:	mlaier
2005-08-23 00:03:58 +00:00
Doug Barton
adaaaab975 Update the vendor branch with a patch to this file that was
researched by glebius, and incorporated by ISC into the next
version of BIND. Unfortunately, it looks like their release
will come after the release of FreeBSD 6, so we will bring
this in now.

The patch addresses a problem with high-load resolvers which
hit memory barriers. Without this patch, running the resolving
name server out of memory would lead to "unpredictable results."

Of course, the canonical answer to this problem is to put more
memory into the system, however that is not always possible, and
the code should be able to handle this situation gracefully in
any case.
2005-08-18 18:39:31 +00:00
Doug Barton
6b691ca859 This commit was generated by cvs2svn to compensate for changes in r149245,
which included commits to RCS files with non-trunk default branches.
2005-08-18 18:39:31 +00:00
Colin Percival
816e551836 Remove the dates from these files. They serve no purpose and result in
these files spuriously changing each time they are built.

Also, add $FreeBSD$ tags, because cvs is unhappy otherwise.
2005-08-17 15:56:04 +00:00
R. Imura
19434a77d6 Tell nls_setlocale() the very locale name from command line option,
rather than using optarg variable which would be allways NULL.
2005-08-07 08:46:56 +00:00
Christian Brueffer
819f8dfa2b More tcpdump 8->1 cleanup.
Approved by:	mlaier
MFC after:	3 days
2005-08-06 13:03:03 +00:00
R. Imura
f0a446ea10 Correct argument order of kiconv_add_xlat16_cspairs().
Security:
2005-07-29 14:56:16 +00:00
Andrey A. Chernov
85ca5e684e Create /etc/opiekeys with 0600, not 0644
PR:     84221
2005-07-29 09:59:24 +00:00
Sam Leffler
87a1a1a2eb terminate when all interfaces have been removed; since we do not
do interface discovery there's no point in sticking around

MFC after:	3 days
2005-07-29 05:58:35 +00:00
R. Imura
76efe32555 Fix core dump when "smbutil lc".
OK'ed by:	bp
2005-07-28 22:35:38 +00:00
Giorgos Keramidas
d136945536 Spell "committing" correctly. 2005-07-28 13:53:45 +00:00
Giorgos Keramidas
56a436ed7b Spell "referred" correctly. 2005-07-28 13:03:19 +00:00
Dag-Erling Smørgrav
af3826b765 Update (correct autotools usage, copy generated headers, --disable-threads) 2005-07-25 17:14:00 +00:00
David E. O'Brien
8d85d711c3 Fix bug where GCC thought athlon-tbird had SSE support. 2005-07-19 21:53:22 +00:00
Poul-Henning Kamp
879e5da3b4 Switch to contemporary TTY interface. 2005-07-15 07:41:26 +00:00
Christian Brueffer
f0ea72a038 - Remove MLINKS to nonexistant manpages
- Change some section numbers to match reality
- For MLINKS to manpages from ports, mention which port installs them

MFC after:	3 days
2005-07-14 20:29:08 +00:00
Sam Leffler
29292c17af resolve merge conflicts
Approved by:	re (scottl)
2005-07-11 04:14:02 +00:00
Sam Leffler
f4d0c64a1d Virgin import of tcpdump v3.9.1 (release) from tcpdump.org
Approved by:	re (scottl)
2005-07-11 03:54:22 +00:00
Sam Leffler
f6fb7a2cfe This commit was generated by cvs2svn to compensate for changes in r147899,
which included commits to RCS files with non-trunk default branches.
2005-07-11 03:54:22 +00:00
Sam Leffler
4238c2cd94 resolve merge conflicts
Approved by:	re (scottl)
2005-07-11 03:43:25 +00:00
Sam Leffler
ee2dd488bf Virgin import of libpcap v0.9.1 (release) from tcpdump.org
Approved by:	re (scottl)
2005-07-11 03:24:53 +00:00
Sam Leffler
8930d062b6 This commit was generated by cvs2svn to compensate for changes in r147894,
which included commits to RCS files with non-trunk default branches.
2005-07-11 03:24:53 +00:00
David E. O'Brien
362c19dcb0 Fix bogus fmov* SPARC opcodes.
(Note this makes the vendor branch not represent Binutils in the vendor's
CVS repository at any point in time.  Portmgr did not like the state of
Binutils on Sparc that represented the point in time the vendor fixed this
issue.  I'd rather have fixed this on RELENG_6.)

Approved by:	re
2005-07-07 22:06:54 +00:00
David E. O'Brien
43c1498efa This commit was generated by cvs2svn to compensate for changes in r147824,
which included commits to RCS files with non-trunk default branches.
2005-07-07 22:06:54 +00:00
Scott Long
98e104cbc9 Patch the freebsd spec file for PowerPC so that PIC code builds correctly.
This allows FreeBSD/PPC to build and run out of stock CVS sources.  This
also takes the file off of the vendor branch.

Submitted by: kan, grehan
Approved by: re, kan
2005-07-07 21:40:37 +00:00
Sam Leffler
a593614af4 clr ptr after freeing state to avoid subsequent null ptr deref
(on vendor branch since this change already exists in Jouni's cvs).

Approved by:	re (scottl)
2005-07-06 22:06:27 +00:00
Sam Leffler
1729745e80 This commit was generated by cvs2svn to compensate for changes in r147801,
which included commits to RCS files with non-trunk default branches.
2005-07-06 22:06:27 +00:00
Simon L. B. Nielsen
0a389eab22 Fix ipfw packet matching errors with address tables.
The ipfw tables lookup code caches the result of the last query.  The
kernel may process multiple packets concurrently, performing several
concurrent table lookups.  Due to an insufficient locking, a cached
result can become corrupted that could cause some addresses to be
incorrectly matched against a lookup table.

Submitted by:	ru
Reviewed by:	csjp, mlaier
Security:	CAN-2005-2019
Security:	FreeBSD-SA-05:13.ipfw

Correct bzip2 permission race condition vulnerability.

Obtained from:	Steve Grubb via RedHat
Security:	CAN-2005-0953
Security:	FreeBSD-SA-05:14.bzip2
Approved by:	obrien

Correct TCP connection stall denial of service vulnerability.

A TCP packets with the SYN flag set is accepted for established
connections, allowing an attacker to overwrite certain TCP options.

Submitted by:	Noritoshi Demizu
Reviewed by:	andre, Mohan Srinivasan
Security:	CAN-2005-2068
Security:	FreeBSD-SA-05:15.tcp

Approved by:	re (security blanket), cperciva
2005-06-29 21:36:49 +00:00
Brooks Davis
b97b7bab6b Remove isc-dhcp files from HEAD now that we're using the OpenBSD
dhclient.

Reminded by:	ru
Approved by:	re (blanket dhclient)
2005-06-29 01:46:40 +00:00
Ruslan Ermilov
4bdc233895 Fix markup in local FreeBSD additions.
Approved by:	re (blanket manpages)
2005-06-27 07:07:55 +00:00
Darren Reed
0e6e3d9f1c Remove these files from src/contrib/ipfilter as they are already present
in src/sys/contrib/ipfilter/netinet.  Makefile's reachover bits find what
they need so building is unaffected.

Approved by: re (dwhite)
2005-06-23 14:22:02 +00:00
Darren Reed
721c3c7cc6 Fix some minor problems before release:
(1) "ipf -T" is broken for fetching single entries and
(2) loading rules with numbered collections does not order insertion right.
(3) stats aren't accumulated for hash table memory failures

Approved by: re (dwhite)
2005-06-23 14:19:02 +00:00
Dag-Erling Smørgrav
f9165282ef This commit was generated by cvs2svn to compensate for changes in r147466,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:39:09 +00:00
Dag-Erling Smørgrav
9bc006de0e Fix markup errors caused by a bug in gendoc.pl (see P4 change #78671)
Approved by:	re (kensmith)
2005-06-17 14:39:09 +00:00
Dag-Erling Smørgrav
bfa13ec9be This commit was generated by cvs2svn to compensate for changes in r147464,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:37:52 +00:00
Dag-Erling Smørgrav
ba619a26fa MFP4: (#78671) correctly escape \& in Perl strings.
Submitted by:	ru
Approved by:	re (kensmith)
2005-06-17 14:37:52 +00:00
Dag-Erling Smørgrav
0af72343f9 This commit was generated by cvs2svn to compensate for changes in r147462,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:37:16 +00:00
Dag-Erling Smørgrav
347c3b1ea0 MFP4: (#78670) markup nits
MFP4: (#78673) bump date

Submitted by:	ru
Approved by:	re (kensmith)
2005-06-17 14:37:16 +00:00
Dag-Erling Smørgrav
0d0962dc0d This commit was generated by cvs2svn to compensate for changes in r147460,
which included commits to RCS files with non-trunk default branches.
2005-06-17 14:35:37 +00:00
Dag-Erling Smørgrav
05640c12fc MFP4: (#78672) markup nits.
Submitted by:	ru
Approved by:	re (kensmith)
2005-06-17 14:35:37 +00:00
Dag-Erling Smørgrav
556dce83d8 Vendor import of OpenPAM Figwort. 2005-06-17 08:11:43 +00:00
Dag-Erling Smørgrav
2f0f4f3784 This commit was generated by cvs2svn to compensate for changes in r147455,
which included commits to RCS files with non-trunk default branches.
2005-06-17 08:11:43 +00:00
Ruslan Ermilov
d429ea3323 Markup fixes.
Approved by:	re (blanket)
2005-06-16 20:51:10 +00:00
Ruslan Ermilov
c1c9502bf7 Apply a series of scripts to automatically fix some markup bugs.
Approved by:	re (blanket)
2005-06-16 20:21:03 +00:00
Gregory Neil Shapiro
0c97652c0b Import OSTYPE(freebsd6) support from sendmail open source repo for FreeBSD 6.0.
Approved by: re (scottl)
Requested by: keramida
2005-06-14 02:23:14 +00:00
Gregory Neil Shapiro
9f0725482c This commit was generated by cvs2svn to compensate for changes in r147353,
which included commits to RCS files with non-trunk default branches.
2005-06-14 02:23:14 +00:00
Sam Leffler
fb74d4fdc8 resolve merge conflicts
Approved by:	re (dwhite)
2005-06-13 17:07:31 +00:00
Sam Leffler
fd7895c8dd stripped down import of hostapd 0.3.9
Approved by:	re (dwhite)
2005-06-13 17:00:32 +00:00
Sam Leffler
d2f530490d This commit was generated by cvs2svn to compensate for changes in r147341,
which included commits to RCS files with non-trunk default branches.
2005-06-13 17:00:32 +00:00
Sam Leffler
aff0e28457 resolve merge conflicts 2005-06-13 16:54:21 +00:00
Sam Leffler
1c3c13af99 stripped down import of wpa_supplicant v0.3.9
Approved by:	re (dwhite)
2005-06-13 16:43:14 +00:00
Sam Leffler
f59037e440 This commit was generated by cvs2svn to compensate for changes in r147338,
which included commits to RCS files with non-trunk default branches.
2005-06-13 16:43:14 +00:00
Sam Leffler
dd9c1736f5 pullup security fix on vendor branch 2005-06-09 15:54:42 +00:00
Sam Leffler
cc157742d1 Correct several denial-of-service vulnerabilities in tcpdump.
Security:	FreeBSD-SA-05:10.tcpdump
Security:	CAN-2005-1267, CAN-2005-1278, CAN-2005-1279, CAN-2005-1280
Obtained from:	tcpdump.org
2005-06-09 15:42:58 +00:00
Sam Leffler
fa2afacabb This commit was generated by cvs2svn to compensate for changes in r147173,
which included commits to RCS files with non-trunk default branches.
2005-06-09 15:42:58 +00:00
Sam Leffler
4f735865c7 fix byte order handling: FreeBSD != Linux 2005-06-07 23:33:13 +00:00
Gregory Neil Shapiro
50bd7c73f6 Note the sendmail 8.13.4 upgrade
MFC after:	4 days
2005-06-07 04:22:21 +00:00
Gregory Neil Shapiro
188b7d28c9 Resolve conflicts from sendmail 8.13.4 import 2005-06-07 04:17:21 +00:00
Gregory Neil Shapiro
13d8826863 Import sendmail 8.13.4 2005-06-07 04:14:59 +00:00
Gregory Neil Shapiro
b1b29dff01 This commit was generated by cvs2svn to compensate for changes in r147078,
which included commits to RCS files with non-trunk default branches.
2005-06-07 04:14:59 +00:00
Sam Leffler
4e40980e6f apply important fixes from development branch 2005-06-05 22:41:14 +00:00
cvs2svn
6f38331fdd This commit was manufactured by cvs2svn to create branch
'VENDOR-hostapd'.
2005-06-05 22:36:47 +00:00
Sam Leffler
3807a45d8a import/upgrade instructions 2005-06-05 22:36:46 +00:00