Pedro F. Giffuni 0f23ab8aac Fix out-of-bounds read in libc/regex. ...

The bug is an out-of-bounds read detected with address sanitizer that
happens when 'sp' in p_b_coll_elems() includes NUL byte[s], e.g. if it's
equal to "GS\x00". In that case len will be equal to 4, and the
strncmp(cp->name, sp, len) call will succeed when cp->name is "GS" but the
cp->name[len] == '\0' comparison will cause the read to go out-of-bounds.

Checking the length using strlen() instead eliminates the issue.

The bug was found in LLVM with oss-fuzz:
	https://reviews.llvm.org/D39380

MFC after:	1 week
Obtained from:	Vlad Tsyrklevich through posting on openbsd-tech

2017-10-28 20:09:34 +00:00

..

atf

Add HAS_TESTS to all Makefiles that are currently using the

2017-08-02 08:50:42 +00:00

clang

Prefix {TARGET,BUILD}_TRIPLE with LLVM_ to avoid Makefile.inc1 collision.

2017-10-25 21:45:55 +00:00

csu

Don't include GNU object attributes when building with clang.

2017-08-30 19:19:31 +00:00

lib80211

Don't end up manpage titles with a full stop.

2017-05-24 21:02:53 +00:00

libalias

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 03:34:59 +00:00

libarchive

MFV r324145,324147:

2017-10-01 00:40:23 +00:00

libauditd

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 03:55:21 +00:00

libbegemot

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 03:55:43 +00:00

libblacklist

…

libblocksruntime

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 03:56:10 +00:00

libbluetooth

Make cached Bluetooth LE host advertise information visible from userland.

2017-04-27 15:03:24 +00:00

libbsdstat

…

libbsm

Merge OpenBSM 1.2-alpha5 from vendor branch to FreeBSD -CURRENT:

2017-03-26 21:14:49 +00:00

libbsnmp

DIRDEPS_BUILD: Update dependencies.

2017-05-09 01:48:23 +00:00

libbz2

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 03:58:50 +00:00

libc

Fix out-of-bounds read in libc/regex.

2017-10-28 20:09:34 +00:00

libc_nonshared

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:04:25 +00:00

libc++

Merge llvm, clang, lld, lldb, compiler-rt and libc++ r307894, and update

2017-07-13 21:58:45 +00:00

libc++experimental

DIRDEPS_BUILD: Connect more libraries.

2017-07-11 00:32:48 +00:00

libcalendar

…

libcam

Add HAS_TESTS to all Makefiles that use the SUBDIR.${MK_TESTS}+= tests idiom

2017-08-02 08:14:06 +00:00

libcapsicum

capsicum_helpers: Add EVENT to default stdio rights set

2017-10-08 17:29:43 +00:00

libcasper

Introduce caspermocks.

2017-10-28 19:23:57 +00:00

libclang_rt

Merge ^/head r320573 through r320970.

2017-07-13 22:01:38 +00:00

libcom_err

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:51:36 +00:00

libcompat

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

libcompiler_rt

Support armv7 builds for userland

2017-10-05 23:01:33 +00:00

libcrypt

MFhead@r321916

2017-08-02 09:00:59 +00:00

libcuse

Add support for new cuse(3) error code, CUSE_ERR_NO_DEVICE.

2017-10-05 16:42:02 +00:00

libcxxrt

Surround any unmangled C++ names in libcxxrt's version map with 'extern

2017-02-22 18:44:57 +00:00

libdevctl

…

libdevdctl

Partially revert r325011: restore Guid's default constructor

2017-10-26 17:56:34 +00:00

libdevinfo

…

libdevstat

…

libdl

DIRDEPS_BUILD: Connect more libraries.

2017-07-11 00:32:48 +00:00

libdpv

…

libdwarf

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:54:21 +00:00

libedit

libedit: raise the warning level to 3.

2017-09-14 19:50:07 +00:00

libefivar

Minor fixes to edge cases in efi_get_next_variable_name

2017-09-13 04:32:23 +00:00

libelf

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:54:09 +00:00

libelftc

libelftc: bump version, tracking import in r320343

2017-07-05 02:58:46 +00:00

libevent

[private] add libevent1 and sqlite3 include files for our private libraries.

2017-03-27 22:34:43 +00:00

libexecinfo

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:53:40 +00:00

libexpat

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:53:45 +00:00

libfetch

In fetch_resolve(), if the port number or service name is included in

2017-08-18 18:20:36 +00:00

libfigpar

…

libgcc_eh

…

libgcc_s

Sort entries in libgcc_s Version.map

2017-07-05 13:13:38 +00:00

libgeom

Add a quick description of the geom_getxml(3), geom_xml2tree(3),

2017-10-16 17:21:52 +00:00

libgpio

…

libgssapi

lib: initial use of reallocarray(3).

2017-04-21 19:27:33 +00:00

libiconv_modules

lib: initial use of reallocarray(3).

2017-04-21 19:27:33 +00:00

libifconfig

libifconfig: allow to get original interface name via ifconfig_get_orig_name()

2017-10-16 06:54:26 +00:00

libipsec

Add large replay widow support to setkey(8) and libipsec.

2017-04-13 14:44:17 +00:00

libjail

libjail: make allocation in jailparam_all() somewhat more robust.

2017-04-16 19:23:10 +00:00

libkiconv

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:50:46 +00:00

libkvm

Add HAS_TESTS to all Makefiles that use the SUBDIR.${MK_TESTS}+= tests idiom

2017-08-02 08:14:06 +00:00

libldns

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:50:19 +00:00

liblzma

Use SRCTOP-relative paths and .CURDIR with :H instead of ".." specified paths

2017-01-20 04:46:20 +00:00

libmagic

MFV r323678: file 5.32

2017-09-17 19:14:38 +00:00

libmd

Increase loop unrolling for skein hashes

2017-07-01 21:18:06 +00:00

libmemstat

…

libmilter

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

libmp

Add HAS_TESTS to all Makefiles that are currently using the

2017-08-02 08:50:42 +00:00

libmt

Add IBM TS1155 density codes to libmt and the mt(1) man page.

2017-07-14 16:45:46 +00:00

libnandfs

…

libnetbsd

libnetbsd: add emalloc and friends

2017-04-06 14:36:08 +00:00

libnetgraph

…

libngatm

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:41:53 +00:00

libnv

Remove redundant initialization. Don't use variable - just return the value.

2017-09-21 10:00:16 +00:00

libopenbsd

…

libopie

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:40:10 +00:00

libpam

If the user-provided password exceeds the maximum password length, don't

2017-10-26 13:23:13 +00:00

libpathconv

Add HAS_TESTS to all Makefiles that are currently using the

2017-08-02 08:50:42 +00:00

libpcap

Stop installing pcap-int.h, which is the internal interface for libpcap.

2017-03-07 16:06:53 +00:00

libpe

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:37:03 +00:00

libpjdlog

…

libpmc

Skylake server core PMC support for hwpmc(4).

2017-09-06 17:19:48 +00:00

libpmcstat

Extract a set of pmcstat functions and interfaces to the new internal

2017-10-24 16:28:00 +00:00

libproc

Avoid keeping a dangling pointer when the mappings array is resized.

2017-09-06 16:24:34 +00:00

libprocstat

Make procstat(1) recognize process descriptors, so that it shows

2017-10-03 11:45:24 +00:00

libradius

…

librpcsec_gss

Fix a potential problem where we might try to shift by more than 31 bits

2017-04-25 10:29:08 +00:00

librpcsvc

Utilize SYSROOT from r320119 in places where DESTDIR may be wanting WORLDTMP.

2017-06-19 20:47:24 +00:00

librss

DIRDEPS_BUILD: Connect more libraries.

2017-07-11 00:32:48 +00:00

librt

Add HAS_TESTS to all Makefiles that are currently using the

2017-08-02 08:50:42 +00:00

librtld_db

Avoid double-closing an fd if elf_begin() fails.

2017-03-22 18:14:55 +00:00

libsbuf

Add HAS_TESTS to all Makefiles that use the SUBDIR.${MK_TESTS}+= tests idiom

2017-08-02 08:14:06 +00:00

libsdp

…

libsm

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:35:36 +00:00

libsmb

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:35:00 +00:00

libsmdb

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:35:18 +00:00

libsmutil

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:34:34 +00:00

libsqlite3

[private] add libevent1 and sqlite3 include files for our private libraries.

2017-03-27 22:34:43 +00:00

libstdbuf

…

libstdthreads

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:33:45 +00:00

libsysdecode

RB_POWERCYCLE needs to be handled like RB_POWEROFF for decoding.

2017-10-25 15:30:25 +00:00

libtacplus

…

libtelnet

Remove redundant include directories which expand to a noop,

2017-07-31 19:07:45 +00:00

libthr

[libthr] revert change of visibility of _thread_keytable to unbreak debugger

2017-10-02 20:33:16 +00:00

libthread_db

libthread_db: unbreak build due to sign/unsigned comparison.

2017-04-20 21:01:59 +00:00

libucl

…

libufs

Continuing efforts to provide hardening of FFS, this change adds a

2017-09-22 12:45:15 +00:00

libugidfw

Clean up trailing whitespace

2017-10-23 16:55:22 +00:00

libulog

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:29:23 +00:00

libunbound

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:31:19 +00:00

libusb

libusb(3): Expose device caps as libusb_bos_descriptor::dev_capability

2017-08-09 18:06:27 +00:00

libusbhid

Sync ^/vendor/NetBSD/tests/dist with upstream

2017-01-12 07:26:39 +00:00

libutil

Add caveat to kinfo_getvmmap(3) explaining high CPU utilisation.

2017-08-18 16:42:58 +00:00

libvgl

…

libvmmapi

Capsicum support for bhyve(8).

2017-02-14 13:35:59 +00:00

libwrap

Use SRCTOP instead of .CURDIR-relative path in .PATH directive

2017-01-18 18:14:50 +00:00

libxo

MFhead@r322023

2017-08-03 18:07:01 +00:00

liby

Renumber copyright clause 4

2017-02-28 23:42:47 +00:00

libypclnt

Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones

2017-01-20 04:28:41 +00:00

libz

Add missing double quote to fix r316635 commit.

2017-04-09 03:50:48 +00:00

libzstd

DIRDEPS_BUILD: Connect new directories.

2017-05-09 01:48:14 +00:00

msun

Support armv7 builds for userland

2017-10-05 23:01:33 +00:00

ncurses

Hide sccsid under #if 0, per example in style(9)

2017-08-12 22:20:08 +00:00

tests

…

Makefile

Introduce caspermocks.

2017-10-28 19:23:57 +00:00

Makefile.inc

…