freebsd-skq/usr.bin
Ed Maste e3d9ae4c56 bspatch: add sanity checks on sizes to avoid integer overflow
Note that this introduces an explicit 2GB limit, but this was already
implicit in variable and function argument types.

This is based on the "non-cryptanalytic attacks against freebsd
update components" anonymous gist. Further refinement is planned.

Reviewed by:	allanjude, cem, kib
Obtained from:	anonymous gist
MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D7619
2016-09-06 19:00:37 +00:00
..
addr2line
alias
apply Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
ar ar: enable reproducible output by default when invoked as 'ar -s' 2016-06-16 21:22:26 +00:00
asa
at Use nitems() from sys/param.h 2016-07-30 06:32:18 +00:00
atm
awk WITH_META_MODE: Fix rebuilding maketab outside of build-tools. 2016-06-14 16:20:05 +00:00
banner
basename Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
bc
biff
bluetooth
bmake Merge bmake-20160606 2016-06-08 17:51:21 +00:00
brandelf
bsdcat DIRDEPS_BUILD: Add some missing dirctories to the build. 2016-08-31 19:30:59 +00:00
bsdiff bspatch: add sanity checks on sizes to avoid integer overflow 2016-09-06 19:00:37 +00:00
bzip2
bzip2recover
c89
c99
caesar
calendar Fix TAB replaced with spaces in prev. commit. 2016-08-18 10:18:11 +00:00
cap_mkdb
catman Instead of ignoring the EEXIST from link(), unconditionally unlink 2016-05-13 05:49:02 +00:00
chat Fix off by one error that overflowed the rep_len array when doing 2016-05-16 19:48:02 +00:00
checknr Remove usage of _WITH_GETLINE from usr.bin 2016-07-30 01:07:47 +00:00
chkey
chpass
cksum
clang Add clang-format under WITH_CLANG_EXTRAS. 2016-06-17 16:46:58 +00:00
cmp Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
col Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
colcrt
colldef
colrm
column
comm Remove usage of _WITH_GETLINE from usr.bin 2016-07-30 01:07:47 +00:00
compile_et
compress
cpio MFV r302003,r302037,r302038,r302056: 2016-06-22 07:49:59 +00:00
cpuset Fix markup for -j in cpuset(1) synopsis 2016-07-29 21:18:20 +00:00
csplit Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:11:23 +00:00
ctags Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:11:23 +00:00
ctlstat
cut Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
cxxfilt
dc
dirname Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
dpv
drill
dtc
du
ee
elf2aout
elfcopy Use the in-tree sys/elf_common.h 2016-06-05 23:34:19 +00:00
elfdump
enigma
env
expand
factor
false
fetch
file
file2c Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
find
finger
fmt
fold
fortune Avoid buffer overflow when copying the input file name and appending .dat. 2016-05-26 01:33:24 +00:00
from
fstat
fsync
ftp
gcore Mirror r303120 to gcore 2016-07-21 00:53:14 +00:00
gencat Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:12:31 +00:00
getconf Add non-TRUSTEDBSD prefixed knobs for the _PC_ACL* and {CAP,INF,MAC}_PRESENT knobs 2016-08-25 17:07:43 +00:00
getent Document getent(1)'s ability to enumerate netgroup members. 2016-06-04 21:34:06 +00:00
getopt
gprof Use NULL instead of 0 for pointers. 2016-05-16 01:11:02 +00:00
grdc
grep Fix a segfault in bsdgrep when parsing the invalid extended regexps "?" 2016-08-02 20:25:22 +00:00
gzip Use printable ASCII instead of octal representation. 2016-08-27 00:56:37 +00:00
head
hesinfo
hexdump
host
iconv
id
ident Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
indent indent(1): have the memset invocation somewhat more canonical. 2016-08-23 15:49:31 +00:00
ipcrm
ipcs
iscsictl Make the iSCSI parameter negotiation more flexible. 2016-08-25 05:22:53 +00:00
join Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
jot Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
kdump Remove unused prototypes. 2016-08-12 07:52:13 +00:00
keylogin
keylogout
killall
ktrace
ktrdump
lam
last
lastcomm Fix .../usr.bin/lastcomm/legacy_test:main on i386 2016-07-03 17:52:21 +00:00
ldd Increase size of argv[] array to avoid running off the end. 2016-05-16 16:01:46 +00:00
leave
less
lessecho
lesskey
lex
limits Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
locale Use nitems() from sys/param.h. 2016-07-30 07:04:46 +00:00
localedef - Invert calloc(3) argument order. 2016-09-01 15:23:33 +00:00
locate
lock
lockf
logger
login
logins
logname
look
lorder lorder: produce locale-independent symbol ordering 2016-07-07 20:50:59 +00:00
lsvfs
lzmainfo
m4 Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
mail mail(1): Minor declaration updates. 2016-07-15 20:27:21 +00:00
makewhatis
man
mandoc Remove usage of _WITH_GETLINE from usr.bin 2016-07-30 01:07:47 +00:00
mesg
minigzip
ministat
mkcsmapper Revert the change from errx/strerror to errc to appease gcc 4.2 2016-07-09 06:52:55 +00:00
mkcsmapper_static
mkdep
mkesdb
mkesdb_static
mkfifo
mkimg mkimg(1): minor cleanups with argument order in calloc(3). 2016-07-12 15:46:53 +00:00
mklocale Use strlcpy() instead of strncpy() when copying the encoding value 2016-05-12 08:41:22 +00:00
mkstr
mktemp
mkuzip DIRDEPS_BUILD: Update dependencies. 2016-05-04 03:14:34 +00:00
morse
msgs Use strlcpy() instead of strncpy() when copying date and subj 2016-05-12 08:55:57 +00:00
mt Add the density code for LTO-7 to libmt and the mt(1) man page. 2016-05-20 19:30:52 +00:00
nc
ncal swprintf() and apparently wcsftime() want the their output buffer size 2016-05-17 05:05:30 +00:00
netstat Fix build without INET6 and with gcc. A function definition was ifdefed 2016-08-27 11:06:06 +00:00
newgrp
newkey Squelch clang 3.9.0 warnings about BASE (which is 32768) being converted 2016-08-30 19:02:15 +00:00
nfsstat DIRDEPS_BUILD: Update dependencies. 2016-08-31 19:30:46 +00:00
nice
nl Remove another occurence of _WITH_GETLINE 2016-07-31 19:02:19 +00:00
nm
nohup
numactl Don't repeat the the word 'the' 2016-05-17 12:52:31 +00:00
number
opieinfo
opiekey
opiepasswd
pagesize
pamtest
passwd
paste
patch
pathchk Add -P to pathchk usage 2016-07-09 04:56:28 +00:00
perror
pom
pr
primes
printenv
printf Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
procstat Use nitems() from sys/param.h. 2016-07-30 07:15:54 +00:00
protect
quota
random Fix a (false positive?) Argument cannot be negative coverity defect. 2016-06-08 02:14:05 +00:00
rctl
readelf
renice
resizewin Make resizewin.1 manpage use .Fx macro 2016-07-29 21:05:17 +00:00
rev
revoke
rlogin
rpcgen Use nitems() from sys/param.h. 2016-08-16 15:53:05 +00:00
rpcinfo Simplify some overly complex code so that both humans and Coverity 2016-05-13 00:50:53 +00:00
rs Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:17:36 +00:00
rsh
rup
ruptime
rusers
rwall
rwho
script
sdiff DIRDEPS_BUILD: Add some missing dirctories to the build. 2016-08-31 19:30:59 +00:00
sed sed(1): Revert r303047 "cleanup" and therefore r303572. 2016-08-02 15:35:53 +00:00
send-pr
seq
setchannel
shar
showmount
size
smbutil
sockstat This patch fixes two bugs: 2016-06-25 12:46:18 +00:00
soelim Remove usage of _WITH_GETLINE from usr.bin 2016-07-30 01:07:47 +00:00
sort
split
ssh-copy-id
stat
stdbuf
strings
su
svn
systat Use nitems() from sys/param.h. 2016-08-16 15:52:10 +00:00
tabs
tail
talk
tar DIRDEPS_BUILD: Update dependencies. 2016-08-31 19:30:46 +00:00
tcopy
tee
telnet
tests Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
tftp
time
timeout Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
tip
top Add a toggle to display the approximate amount of swap used by each 2016-09-05 08:27:04 +00:00
touch
tput
tr Optimize [Cc]flag case: don't repeatedly add the last character of 2016-07-14 09:26:53 +00:00
true
truncate Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
truss Import the new automatically generated system call table for CloudABI. 2016-08-19 17:49:35 +00:00
tset
tsort
tty tty: Use proper definition of exit status code and stdin macro 2016-08-16 14:15:09 +00:00
ul Do not truncate lines longer than 512 chars. 2016-07-11 08:05:46 +00:00
uname
unexpand
unifdef
uniq Remove usage of _WITH_GETLINE from usr.bin 2016-07-30 01:07:47 +00:00
units Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
unvis
unzip
usbhidaction
usbhidctl
users
uudecode Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:12:31 +00:00
uuencode Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
vacation
vgrind
vi DIRDEPS_BUILD: Run the staged bootstrap-tools version of build-tools. 2016-05-09 22:21:09 +00:00
vis
vmstat
vtfontcvt
w When -n is specified, don't make bogus DNS queries. Instead, 2016-09-02 18:28:14 +00:00
wall
wc
what
whereis
which
who
whois Send whois queries for gov.uk names to JANET. 2016-05-25 13:09:06 +00:00
write
xargs Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
xinstall DIRDEPS_BUILD: Add some missing dirctories to the build. 2016-08-31 19:30:59 +00:00
xlint Fix with external GCC after r300886. 2016-05-29 01:15:15 +00:00
xo Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
xstr
xz
xzdec
yacc Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
yes
ypcat
ypmatch
ypwhich
Makefile users: don't build when we don't have a C++ toolchain 2016-08-31 21:12:50 +00:00
Makefile.amd64
Makefile.arm
Makefile.i386
Makefile.inc
Makefile.powerpc
Makefile.sparc64