jilles 05d82765f3 fts: Use O_DIRECTORY when opening name that might be changed by attacker. ...

There are uncommon cases where fts_safe_changedir() may be called with a
non-NULL name that is not "..". Do not block or worse if an attacker put (a
(symlink to) a fifo or device where a directory used to be.

MFC after:	1 week

2013-02-10 23:09:15 +00:00

..

__getosreldate.c

…

__xuname.c

…

_once_stub.c

…

_pthread_stubs.c

style(9) fix.

2011-11-26 16:49:25 +00:00

_rand48.c

…

_spinlock_stub.c

…

_thread_init.c

…

alarm.3

…

alarm.c

…

arc4random.3

Globally replace u_int*_t from (non-contributed) man pages.

2012-02-12 18:29:56 +00:00

arc4random.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

assert.c

…

auxv.c

Rename aux.c to auxv.c.

2012-08-11 12:07:24 +00:00

basename.3

Sync with OpenBSD, primarily make the code easier to read, and a license

2011-06-18 00:33:34 +00:00

basename.c

Sync with OpenBSD, primarily make the code easier to read, and a license

2011-06-18 00:33:34 +00:00

check_utility_compat.3

…

check_utility_compat.c

- Reduce buffer size from LINE_MAX to PATH_MAX, there is no point to store

2012-12-21 22:20:59 +00:00

clock_getcpuclockid.3

Remove trailing whitespace.

2012-08-21 13:33:48 +00:00

clock_getcpuclockid.c

Fix prototype. Also the function should return error code instead of

2012-08-21 09:17:13 +00:00

clock.3

…

clock.c

…

closedir.c

Hide DIR definition by making it an opaque struct typedef.

2012-05-19 12:44:27 +00:00

confstr.3

…

confstr.c

…

crypt.c

…

ctermid.3

Reimplement ctermid().

2011-10-01 12:19:48 +00:00

ctermid.c

Reimplement ctermid().

2011-10-01 12:19:48 +00:00

daemon.3

…

daemon.c

…

devname.3

…

devname.c

Get rid of major/minor number distinction.

2011-09-28 18:53:36 +00:00

directory.3

Document the behavior (from 4.4-lite) that tokens returned by telldir() are

2012-07-05 17:02:20 +00:00

dirfd.c

Put my name as copyright owner of lib/libc/gen/dirfd.c added in r235647.

2012-05-19 14:30:49 +00:00

dirname.3

…

dirname.c

…

disklabel.c

…

dl_iterate_phdr.3

Fix cross-references.

2012-02-17 12:40:27 +00:00

dladdr.3

…

dlfcn.c

Fetch the aux vector for the static libc, and use the entries to

2012-02-17 10:49:29 +00:00

dlinfo.3

…

dllockinit.3

…

dlopen.3

Implement fdlopen(3), an rtld interface to load shared object by file

2012-01-07 10:33:01 +00:00

drand48.c

…

elf_utils.c

…

erand48.c

…

err.3

Use the .Bx macro instead of BSD

2012-04-26 19:21:58 +00:00

err.c

…

errlst.c

…

errno.c

…

exec.3

…

exec.c

Replace index() and rindex() calls with strchr() and strrchr().

2012-01-03 18:51:58 +00:00

fdevname.c

…

feature_present.3

…

feature_present.c

…

fmtcheck.3

…

fmtcheck.c

…

fmtmsg.3

…

fmtmsg.c

libc: Make various internal file descriptors close-on-exec.

2012-12-10 17:56:51 +00:00

fnmatch.3

…

fnmatch.c

Implement xlocale APIs from Darwin, mainly for use by libc++. This adds a

2011-11-20 14:45:42 +00:00

fpclassify.3

…

fpclassify.c

…

frexp.3

…

frexp.c

…

fstab.c

libc: Use the new 'e' fopen() mode option to simplify fstab.c.

2012-12-04 16:54:43 +00:00

ftok.3

…

ftok.c

…

fts-compat.c

libc/fts: Use O_CLOEXEC for internal file descriptors.

2012-09-27 22:05:54 +00:00

fts-compat.h

…

fts.3

Remove trailing whitespace per mdoc lint warning

2012-03-29 05:02:12 +00:00

fts.c

fts: Use O_DIRECTORY when opening name that might be changed by attacker.

2013-02-10 23:09:15 +00:00

ftw.3

…

ftw.c

ftw(): Do not check the maxfds argument against OPEN_MAX.

2012-08-09 15:11:38 +00:00

gen-private.h

Hide DIR definition by making it an opaque struct typedef.

2012-05-19 12:44:27 +00:00

getbootfile.3

…

getbootfile.c

…

getbsize.3

mdoc: Use the Ev macro for environmental variables.

2012-11-16 12:03:50 +00:00

getbsize.c

…

getcap.3

…

getcap.c

libc: Make various internal file descriptors close-on-exec.

2012-12-10 17:56:51 +00:00

getcontext.3

Add API for obtaining extended machine context states that cannot be

2012-01-21 18:00:28 +00:00

getcwd.3

…

getcwd.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

getdiskbyname.3

…

getdomainname.3

…

getdomainname.c

…

getfsent.3

…

getgrent.3

…

getgrent.c

libc: Make various internal file descriptors close-on-exec.

2012-12-10 17:56:51 +00:00

getgrouplist.3

Document the fact that getgrouplist(3) returns 0 on success.

2012-02-20 20:46:27 +00:00

getgrouplist.c

…

gethostname.3

…

gethostname.c

…

getloadavg.3

…

getloadavg.c

…

getlogin.c

…

getmntinfo.3

…

getmntinfo.c

…

getnetgrent.3

…

getnetgrent.c

libc: Make various internal file descriptors close-on-exec.

2012-12-10 17:56:51 +00:00

getosreldate.3

…

getosreldate.c

Clean up includes; the prototype for getosreldate() has moved to

2011-12-14 08:35:08 +00:00

getpagesize.3

…

getpagesize.c

…

getpagesizes.3

Remove trailing whitespace per mdoc lint warning

2012-03-29 05:02:12 +00:00

getpagesizes.c

…

getpass.3

…

getpeereid.3

…

getpeereid.c

…

getprogname.3

…

getprogname.c

…

getpwent.3

…

getpwent.c

…

getttyent.3

…

getttyent.c

libc: Make various internal file descriptors close-on-exec.

2012-12-10 17:56:51 +00:00

getusershell.3

…

getusershell.c

libc: Make various internal file descriptors close-on-exec.

2012-12-10 17:56:51 +00:00

getutxent.3

Replace utxrm(8) by utx(8).

2012-02-11 20:28:42 +00:00

getutxent.c

libc: Make various internal file descriptors close-on-exec.

2012-12-10 17:56:51 +00:00

getvfsbyname.3

…

getvfsbyname.c

…

glob.3

- Add restrict keyword to glob(3)

2011-12-20 22:56:13 +00:00

glob.c

Protect against DoS attacks, such as being described in CVE-2010-2632.

2012-12-01 21:26:46 +00:00

initgroups.3

…

initgroups.c

…

isatty.c

…

isgreater.3

…

isinf.c

…

isnan.c

Add an explanatory comment to lib/libc/gen/isnan.c about the fix to make

2012-11-11 13:28:04 +00:00

jrand48.c

…

lcong48.c

…

ldexp.3

…

ldexp.c

…

libc_dlopen.c

Fix a problem whereby a corrupt DNS record can cause named to crash. [11:06]

2011-12-23 15:00:37 +00:00

lockf.3

…

lockf.c

…

lrand48.c

…

makecontext.3

…

Makefile.inc

Add contrib/libc-vis to the include path so we reliably pick up the right

2013-01-11 17:51:03 +00:00

modf.3

…

modf.c

Replace a proliferation of buggy MD implementations of modf() with a

2011-10-21 06:40:36 +00:00

mrand48.c

…

nftw.c

nftw(): POSIX says directories causing loops should be silently skipped.

2012-08-09 22:05:40 +00:00

nice.3

…

nice.c

…

nlist.3

…

nlist.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

nrand48.c

…

opendir.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

pause.3

…

pause.c

…

pmadvise.c

…

popen.3

…

popen.c

…

posix_spawn_file_actions_addopen.3

…

posix_spawn_file_actions_init.3

…

posix_spawn.3

Fix whitespace inconsistencies in libc in files copyrighted by me.

2011-06-26 18:27:17 +00:00

posix_spawn.c

posix_spawn: If an error is detected in the child process, reap the zombie.

2011-07-10 14:20:11 +00:00

posix_spawnattr_getflags.3

mdoc: minor Bl improvements.

2012-06-02 08:47:26 +00:00

posix_spawnattr_getpgroup.3

…

posix_spawnattr_getschedparam.3

…

posix_spawnattr_getschedpolicy.3

…

posix_spawnattr_getsigdefault.3

…

posix_spawnattr_getsigmask.3

…

posix_spawnattr_init.3

…

psignal.3

mdoc: terminate quoted strings.

2012-03-26 15:18:14 +00:00

psignal.c

…

pututxline.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

pw_scan.c

…

pw_scan.h

…

raise.3

…

raise.c

…

rand48.3

Add the same warning to rand48(3) as to rand(3) and random(3).

2012-09-11 12:55:15 +00:00

rand48.h

…

readdir.c

Hide DIR definition by making it an opaque struct typedef.

2012-05-19 12:44:27 +00:00

readpassphrase.3

…

readpassphrase.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

rewinddir.c

Hide DIR definition by making it an opaque struct typedef.

2012-05-19 12:44:27 +00:00

rfork_thread.3

…

scandir.3

…

scandir.c

…

seed48.c

…

seekdir.c

Hide DIR definition by making it an opaque struct typedef.

2012-05-19 12:44:27 +00:00

sem_destroy.3

…

sem_getvalue.3

…

sem_init.3

…

sem_new.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

sem_open.3

…

sem_post.3

…

sem_timedwait.3

…

sem_wait.3

…

sem.c

In revision 231989, we pass a 16-bit clock ID into kernel, however

2012-02-25 02:12:17 +00:00

semctl.c

…

setdomainname.c

…

sethostname.c

…

setjmp.3

…

setjmperr.c

…

setmode.3

…

setmode.c

…

setproctitle.3

…

setproctitle.c

…

setprogname.c

…

siginterrupt.3

…

siginterrupt.c

…

siglist.c

…

signal.3

mandoc fixes.

2012-06-16 06:38:11 +00:00

signal.c

…

sigsetops.3

…

sigsetops.c

…

sleep.3

…

sleep.c

…

srand48.c

…

statvfs.3

…

statvfs.c

…

stringlist.3

…

stringlist.c

…

strtofflags.3

…

strtofflags.c

Add some additional const poison after r228972. The 'mapping' array in

2011-12-30 20:41:24 +00:00

swapcontext.c

…

Symbol.map

In r244401 I accidently moved strunvis and strunvisx from version 1.0 to

2013-01-11 15:50:01 +00:00

sysconf.3

Remove trailing whitespace per mdoc lint warning

2012-03-29 05:02:12 +00:00

sysconf.c

Implement syscall clock_getcpuclockid2, so we can get a clock id

2012-08-17 02:26:31 +00:00

sysctl.3

Introduce a new NET_RT_IFLISTL API to query the address list. It works

2012-02-11 06:02:16 +00:00

sysctl.c

Avoid segfault if name is invalid. Basically, only

2012-09-06 20:15:44 +00:00

sysctlbyname.c

Eliminate redundant variable.

2012-12-12 15:27:33 +00:00

sysctlnametomib.c

…

syslog.3

…

syslog.c

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29 11:54:34 +00:00

tcgetpgrp.3

…

tcgetsid.3

…

tcsendbreak.3

…

tcsetattr.3

…

tcsetpgrp.3

…

tcsetsid.3

…

telldir.c

Hide DIR definition by making it an opaque struct typedef.

2012-05-19 12:44:27 +00:00

telldir.h

…

termios.c

…

time.3

…

time.c

…

times.3

…

times.c

…

timezone.3

…

timezone.c

Replace index() and rindex() calls with strchr() and strrchr().

2012-01-03 18:51:58 +00:00

tls.c

Import jemalloc a8f8d7540d66ddee7337db80c92890916e1063ca (dev branch,

2012-04-22 08:49:13 +00:00

ttyname.3

…

ttyname.c

…

ttyslot.c

…

tzset.3

…

ualarm.3

…

ualarm.c

…

ucontext.3

Add API for obtaining extended machine context states that cannot be

2012-01-21 18:00:28 +00:00

ulimit.3

…

ulimit.c

…

uname.3

…

uname.c

…

unvis-compat.c

Replace our implementation of the vis(3) and unvis(3) APIs with

2012-12-18 16:37:24 +00:00

usleep.3

…

usleep.c

…

utime.3

…

utime.c

…

utxdb.c

Make utmpx(3) thread safe if we support TLS.

2012-03-23 08:26:31 +00:00

utxdb.h

…

valloc.3

…

valloc.c

…

wait3.c

…

wait.c

…

waitid.c

Implement the waitid() SUSv4 function using wait6() system call.

2012-11-13 12:55:52 +00:00

waitpid.c

…

wordexp.3

…

wordexp.c

…