Stanislav Sedov 6760b335c6 - Prevent buffer overflow in IPFilter's load_http function used to load ...

ipfilter tables via http by the user-level ippool utility. Previously
  the 1024-byte buffer used to store a http request coudld easily overflow
  if the length of the hostname part of the url passes exceeded 496 bytes. [1]
- Use snprintf to prevent possieble buffer overflows in future. [2]
- Do not try to close the descriptor twice on failure. [2]

Reported by:	Maksymilian Arciemowicz <cxib@securityreason.com> [1]
Obtained from:	NetBSD CVS [2]
MFC after:	2 weeks

2009-05-29 16:24:23 +00:00

..

amd

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

bc

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

bind9

Merge from vendor/bind9/dist as of the 9.4.3-P2 import

2009-03-21 23:00:40 +00:00

binutils

Push mips support into the tree.

2008-12-11 08:22:20 +00:00

bsnmp

Add an extra (void *) cast. The struct if_msghdr has an 8 byte

2009-02-18 19:59:27 +00:00

bzip2

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

com_err

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

cpio

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

csup

- Add proper error checking and printing to the CVSMode code when reading and

2009-03-25 20:15:48 +00:00

cvs

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

diff

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

ee

char can be unsigned, like on ARM and PowerPC. Unbreak the

2009-05-28 04:25:38 +00:00

expat

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

file

Merge vendor/file/dist@192348, bringing FILE 5.03 to 8-CURRENT.

2009-05-18 22:34:33 +00:00

gcc

Merge an important change that I mistakenly left out when merging C99

2009-03-25 05:10:32 +00:00

gcclibs

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

gdb

- Use gdb-* glob instead of gdb-6.1.1, to simplify future imports.

2009-04-07 20:15:51 +00:00

gdtoa

Remove some unused vendor files.

2009-03-04 03:45:02 +00:00

gnu-sort

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

gperf

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

groff

When man pages are formatted in UTF-8, .Fl is encoded as U+2212 "MINUS

2009-05-21 17:56:00 +00:00

ipfilter

- Prevent buffer overflow in IPFilter's load_http function used to load

2009-05-29 16:24:23 +00:00

less

Update to less v429.

2009-05-09 01:35:27 +00:00

libbegemot

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

libf2c

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

libobjc

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

libpcap

Revert previous commit that commented out some bpf functions.

2009-04-11 17:36:11 +00:00

libreadline

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

libstdc++

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

lukemftp

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

lukemftpd

Prevent cross-site forgery attacks on lukemftpd(8) due to splitting

2009-01-07 20:17:55 +00:00

ncurses

- Update instructions for Subversion import

2008-11-15 09:30:09 +00:00

netcat

Add an EXIT STATUS section to the manual page. Currently, nc(1)

2009-05-29 07:18:31 +00:00

ngatm

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

ntp

Merge r191298 into HEAD.

2009-04-20 09:59:08 +00:00

nvi

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

one-true-awk

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

openbsm

Merge OpenBSM 1.1 from OpenBSM vendor branch to head.

2009-04-19 16:17:13 +00:00

openpam

Don't try to auto-detect dynamic linking; it fails on mips. The Makefile

2009-02-17 16:35:19 +00:00

opie

- Remove non-existing reference

2009-01-30 15:43:55 +00:00

pam_modules/pam_passwdqc

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

pf

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

pnpinfo

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

sendmail

Merge from vendor dist: Bring in a change already in the sendmail

2008-11-15 04:43:54 +00:00

smbfs

Document the "-U" option. While it is not part of the

2009-01-22 08:29:39 +00:00

tcp_wrappers

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

tcpdump

Fix WITHOUT_IPV6=yes build.

2009-03-21 21:56:23 +00:00

tcsh

Actually fix pty detection for autologout setting.

2008-10-20 08:44:14 +00:00

telnet

Rename all symbols in libmp(3) to mp_*, just like Solaris.

2009-02-26 21:43:15 +00:00

texinfo

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

top

Merge r183430 from vendor/top/dist to head/contrib/top, although with

2009-03-10 11:46:41 +00:00

traceroute

- Import the HEAD csup code which is the basis for the cvsmode work.

2008-10-19 08:41:10 +00:00

wpa

Add some notes and clarify a few sections:

2009-03-16 23:56:28 +00:00