d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
16cbf13b53
freebsd-skq/contrib
History
Gleb Smirnoff 0cf0d912b7 The first part of check_priv() function, that attempts to obtain creds 
from the control message, actually never worked. This means check_priv()
didn't work for local dgram sockets.

The SCM_CREDS control messages is received only in two cases:

1) If we did setsockopt(LOCAL_CREDS) on our socket, and in this case
   the message is struct sockcred.
2) If sender did supplied SCM_CREDS control message in his sendmsg()
   syscall. In this case the message is struct cmsgcred.

We can't rely on 2), so we will use 1) for dgram sockets. For stream
sockets it is more reliable to obtain accept-time credentials, since
SCM_CREDS control message is attached only on first read. Thus:

o Do setsockopt(LOCAL_CREDS) on local dgram sockets.
o Split check_priv() into check_priv_stream() and check_priv_dgram(),
  and call them from recv_stream() and recv_dgram() respectively.
o Don't provide space for SCM_CREDS control message in recv_stream().
o Provide space for SCM_CREDS control message in recv_dgram(), but there
  is no need to initialize anything in it.
o In recv_dgram() do not blindly expect that first message is SCM_CREDS,
  instead use correct search cycle through control messages.
2012-09-08 07:12:00 +00:00
..
amd
atf Update to a pruned 0.16. 2012-09-05 16:01:08 +00:00
bind9 Heavy DNSSEC Validation Load Can Cause a "Bad Cache" Assertion Failure 2012-07-24 18:53:28 +00:00
binutils Fix a twelve year old bug in readelf: when process_dynamic_segment() 2012-08-31 23:28:41 +00:00
bsnmp The first part of check_priv() function, that attempts to obtain creds 2012-09-08 07:12:00 +00:00
byacc Import byacc from invisible island, it brings us lots of compatibilities with 2012-05-21 13:31:26 +00:00
bzip2 In contrib/bzip2/bzip2recover.c, use the correct printf length modifier 2011-12-17 12:52:58 +00:00
com_err - On FreeBSD, com_err.h is installed into /usr/include, not /usr/include/krb5. 2012-05-21 04:29:11 +00:00
compiler-rt Import compiler-rt r160957. 2012-08-08 09:42:44 +00:00
cvs
dialog Update dialog to 1.1-20110707. 2011-07-14 14:01:36 +00:00
diff Catch up with the subversion conversion and apply these build-time patches. 2012-08-17 18:20:38 +00:00
dtc Fix a logic inversion in an assert to allow us to use dts files that 2012-09-02 01:48:47 +00:00
ee In contrib/ee/ee.c, fix a few warnings about format strings not being 2011-12-17 14:26:16 +00:00
expat
file Correct a regression introduced during the import of file(1) 5.11. 2012-08-17 02:27:17 +00:00
gcc Merging of projects/armv6, part 3 2012-08-15 03:21:56 +00:00
gcclibs Add support for __COUNTER__. 2011-12-13 17:34:47 +00:00
gdb Fix "Corrupted DWARF expression" from (k)gdb. 2012-09-06 13:47:42 +00:00
gdtoa Implement xlocale APIs from Darwin, mainly for use by libc++. This adds a 2011-11-20 14:45:42 +00:00
gnu-sort
gperf In contrib/gperf/src/output.cc, use the correct printf length modifier 2011-12-16 23:15:11 +00:00
groff Pull up vendor changes to mdoc(7). 2012-07-26 11:12:38 +00:00
ipfilter
jemalloc Since our clang now supports the tls_model attribute, remove the 2012-08-23 17:58:22 +00:00
less MFV: less v451. 2012-07-24 01:09:11 +00:00
libarchive Apply fix for vendor pull request #17: 2012-08-23 19:40:28 +00:00
libbegemot
libc++ Fix dangling else in libc++'s __bit_reference header. This has also 2012-06-01 06:55:01 +00:00
libcxxrt Import new version of libcxxrt. Now works correctly with libobjc2 to implement 2012-03-20 17:58:15 +00:00
libpcap Add 3 missing files that was generated but not included with the initial 2012-05-14 09:32:10 +00:00
libreadline
libstdc++ Bring a couple of libstdc++ patches from Apple's llvm-gcc project. 2012-06-10 02:04:11 +00:00
llvm Pull in r162360 from upstream clang trunk: 2012-08-23 18:14:59 +00:00
lukemftpd Make lukemftpd properly set login class and cpumask. 2011-06-30 20:58:38 +00:00
ncurses Correct use_screen() and use_window() prototypes in curs_threads(3x). 2012-05-22 06:28:53 +00:00
netcat Update FREEBSD-vendor to reflect the current version. 2012-05-04 21:06:53 +00:00
ngatm
ntp Remove extraneous log message 2012-03-12 01:06:29 +00:00
nvi
ofed - Merge in OFED 1.5.3 from projects/ofed/head 2011-03-21 09:58:24 +00:00
one-true-awk - Merged awk upstream that includes a fix for a bug exposed by kmod_syms.mk. 2011-08-11 10:29:10 +00:00
openbsm Merge a local fix to OpenBSM's libauditd to avoid a directory descriptor 2012-04-08 11:05:22 +00:00
openpam OpenPAM Micrampelis was re-rolled due to a showstopper bug. 2012-05-26 23:10:21 +00:00
openresolv According to resolvconf.conf(5) manpage and sources, there is no 2012-08-21 06:14:08 +00:00
opie RFC 2289 requires all hashes be stored in little endian format before 2012-08-10 04:48:58 +00:00
pam_modules/pam_passwdqc
pf Merge the projects/pf/head branch, that was worked on for last six months, 2012-09-08 06:41:54 +00:00
pnpinfo In contrib/pnpinfo/pnpinfo.c, remove an extraneous parameter from the 2011-12-17 23:43:40 +00:00
sendmail Shut up warnings with Cyrus SASL 2.1.25. 2011-10-01 18:20:10 +00:00
smbfs Bump .Dd date for previous revision. 2011-09-17 22:53:05 +00:00
tcp_wrappers
tcpdump Merge tcpdump 4.2.1. 2012-05-17 05:11:57 +00:00
tcsh Update to tcsh 6.18.01. 2012-02-22 03:36:15 +00:00
telnet Remove superfluous paragraph macro. 2012-06-17 11:04:38 +00:00
texinfo Fix stack smash problem in makeinfo, by increasing buffer sizes in 2011-05-03 14:43:16 +00:00
tnftp Move determination of socket buffer sizes from startup to the first time a 2012-03-10 11:25:53 +00:00
top Add a new line to top that provides a brief summary of the ZFS ARC memory 2012-06-27 18:08:48 +00:00
traceroute mdocify and update the traceroute(8) manual page. 2012-06-27 07:41:21 +00:00
tzcode - set progname for use in usage() 2011-12-08 02:40:46 +00:00
tzdata MFV of 233442, tzdata2012a 2012-03-25 02:10:31 +00:00
wpa
xz Update xz to git snapshot of v5.0 branch as of 20110711 (post-5.0.3) 2011-07-11 14:15:27 +00:00