d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
freebsd-nq/sbin
History
Jessica Clarke 2986638550 pfctl: fix out-of-bounds access 
If pfctl is called with "pfctl -a ''" we read outside of the anchoropt
buffer. Check that the buffer is sufficiently long to avoid that.

Maintain the existing (and desired, because it's used as such in
/etc/periodic/security/520.pfdenied) behaviour of treating "-a ''" as a
request for the root anchor (or no anchor specified).

PR:		264128
Reviewed by:	kp
2022-05-22 10:31:42 +02:00
..
adjkerntz
…
bectl
bectl: push space-in-name check down into libbe
2022-04-02 21:04:31 -05:00
bsdlabel
*: Do not use the no-op -r flag for bsdlabel(8)
2022-03-17 17:28:07 +01:00
camcontrol
camcontrol(8): Fix typo in a source code comment
2022-03-28 19:36:01 +02:00
ccdconfig
*: Do not use the no-op -r flag for bsdlabel(8)
2022-03-17 17:28:07 +01:00
clri
…
comcontrol
…
conscontrol
…
ddb
…
decryptcore
decryptcore: do not include sys/sysctl.h
2021-03-07 17:29:03 -06:00
devd
pkgbase: move devd's hyperv.conf to hyperv-tools package
2022-05-03 18:15:54 +02:00
devfs
sbin/devfs: Correct usage
2022-04-30 11:00:11 -07:00
devmatch
devmatch: Allow devmatch_blocklist to be set in kenv too
2021-11-21 08:54:45 -07:00
dhclient
dhclient(8): Fix a typo in a source code comment
2022-04-09 09:28:06 +02:00
dmesg
dmesg: Better wording from review
2022-05-07 09:55:40 -06:00
dump
ufs: Rework shortlink handling to avoid subobject overflows
2022-01-02 20:55:36 +00:00
dumpfs
dumpfs(8): add option to only print superblock information
2021-07-02 14:18:17 -08:00
dumpon
dumpon: warn if the configured netdump link is down
2022-05-14 10:27:54 -03:00
etherswitchcfg
etherswitch: Add a new striptagingress port flag
2021-08-03 12:07:48 +02:00
fdisk
…
ffsinfo
ffsinfo: Update example to avoid to-be-deprecated vinum
2021-04-03 16:29:14 -04:00
fsck
fsck(8): Fix typo
2022-01-12 13:52:23 +08:00
fsck_ffs
Clean up comments in fsck.h.
2022-05-10 16:06:15 -07:00
fsck_msdosfs
fsck_msdosfs: truncate directory entry when the head pointer is invalid.
2021-11-03 22:09:32 -07:00
fsdb
Update fsdb(8) to reflect new structure of fsck_ffs(8).
2022-02-23 15:40:58 -08:00
fsirand
Filesystem utilities that modify the filesystem (growfs(8), tunefs(8),
2020-10-25 01:36:33 +00:00
gbde
…
geom
geom(4): Fix a typo in a source code comment
2022-03-28 19:28:08 +02:00
ggate
ggatec: Use ANSI C definition for init_initial_buffer_size.
2022-01-31 17:12:04 -08:00
growfs
growfs: do not error if filesystem is already requested size
2021-11-15 15:40:57 -05:00
gvinum
GEOM: Introduce gctl_add_param() API.
2022-03-07 11:12:25 -05:00
hastctl
…
hastd
hastd(8): Fix a typo in a source code comment
2022-04-09 14:06:30 +02:00
ifconfig
ifconfig: Fix spelling error
2022-04-20 17:57:42 -06:00
init
init(8): use proper boolean type for globals
2022-02-21 20:16:13 -04:00
ipf
ipnat(5): Fix a double word in the manual page
2022-04-09 09:28:43 +02:00
ipfw
ipfw.8: spell "layer2" consistently throughout the manual page
2022-05-14 04:30:29 +07:00
kldconfig
kldconfig(8): Add EXAMPLES to the man page
2020-09-29 17:52:15 +00:00
kldload
kldload(8): Improve phrasing
2021-02-11 06:03:53 +01:00
kldstat
kldstat(8): style(9) fixes.
2021-12-07 11:40:22 +01:00
kldunload
…
ldconfig
ldconfig: remove two symbols
2022-01-08 12:45:46 +02:00
md5
update external URLs
2022-02-05 08:19:56 +00:00
mdconfig
md: Add MD_MUSTDEALLOC support
2021-09-11 20:04:52 +08:00
mdmfs
mdmfs(8): Fix an issue reported by mandoc
2020-10-03 18:47:50 +00:00
mknod
…
mksnap_ffs
Remove #define _KERNEL hacks from libprocstat
2021-02-21 11:38:21 +02:00
mount
mount: use pidfile_signal
2022-04-09 15:59:43 +00:00
mount_cd9660
…
mount_fusefs
fusefs: use the fsname mount option if set
2022-04-29 11:10:03 -06:00
mount_msdosfs
Fix a few mandoc issues
2020-10-09 14:03:45 +00:00
mount_nfs
mount_nfs: Add a "bgnow" NFS mount option
2022-01-11 08:21:35 -08:00
mount_nullfs
Improve description of the nocache option.
2022-05-06 13:03:30 +02:00
mount_udf
…
mount_unionfs
…
natd
natd: Remove uneeded in_cksum.h includes
2021-11-24 13:31:16 -05:00
newfs
*: Do not use the no-op -r flag for bsdlabel(8)
2022-03-17 17:28:07 +01:00
newfs_msdos
newfs_msdos: Fix warnings that arise when compiled for makefs
2022-05-10 17:26:50 -04:00
nfsiod
pkgbase: Add nfsiod to the FreeBSD-nfs package
2021-08-06 14:37:35 +02:00
nos-tun
…
nvmecontrol
nvme: fix spelling of Namespace
2022-02-21 10:34:46 -08:00
pfctl
pfctl: fix out-of-bounds access
2022-05-22 10:31:42 +02:00
pfilctl
pfilctl: improve formatting of "hooks" and "heads" command output.
2021-03-19 11:18:05 -07:00
pflogd
…
ping
ping: add missing test files to Makefile
2022-05-20 22:13:02 -05:00
ping6
Merge ping6 to ping
2020-11-26 04:29:30 +00:00
quotacheck
…
rcorder
[rcorder] [crunch] Fix C function declarations to include void
2020-09-21 17:59:45 +00:00
reboot
Cross-reference nextboot(8) and freebsd-update(8)
2022-03-29 15:15:35 +02:00
recoverdisk
Register the bad read before bailing on terminal errors.
2021-02-02 12:01:38 +00:00
resolvconf
…
restore
Clean up global variable declarations in the dump and restore
2020-04-04 00:56:56 +00:00
route
route: remove write-only struct hostent from getaddr()
2022-01-06 10:45:44 -05:00
routed
routed(8): Remove a double word in a source code comment
2022-04-09 14:36:20 +02:00
rtsol
…
savecore
savecore: add an option to save a live minidump
2022-04-18 12:56:16 -03:00
sconfig
pkgbase: Put sconfig in FreeBSD-utilities
2021-12-21 10:16:08 +01:00
setkey
If setkey(8) is used without ipsec.ko loaded beforehand,
2022-05-05 19:02:29 +07:00
shutdown
boottrace: annotate init and shutdown utilities
2022-02-21 20:16:07 -04:00
swapon
swapon(8): adapt to the new swapoff(2) interface
2021-12-09 02:48:59 +02:00
sysctl
sysctl(8): Mention CTLFLAG_SKIP
2022-03-20 11:30:43 -07:00
tests
…
tunefs
Remove #define _KERNEL hacks from libprocstat
2021-02-21 11:38:21 +02:00
umount
umount(8): Remove a double word in a source code comment
2022-04-09 10:13:45 +02:00
veriexec
veriexec(8): explain that only a unique prefix is required
2022-02-14 13:54:22 -08:00
zfsbootcfg
loader: zfs should support bootonce an nextboot
2020-09-21 09:01:10 +00:00
Makefile
sbin: build ping if at least one of INET & INET6 is enabled
2021-11-28 13:05:39 -05:00
Makefile.amd64
Revert "amd64: Do not build sconfig"
2021-12-21 10:14:45 +01:00
Makefile.arm
…
Makefile.i386
…
Makefile.inc
build: provide a default WARNS for all in-tree builds
2020-09-18 17:17:46 +00:00
Makefile.mips
…
Makefile.powerpc64
…