Author: des
Date: Mon Oct 3 08:15:58 2016
New Revision: 306623
URL: https://svnweb.freebsd.org/changeset/base/306623
Log:
MFH (r292408): use correct length in calloc() call
Modified:
stable/9/crypto/openssh/digest-libc.c
Directory Properties:
stable/9/ (props changed)
Author: des
Date: Mon Mar 14 13:13:07 2016
New Revision: 296856
URL: https://svnweb.freebsd.org/changeset/base/296856
Log:
Belatedly bump VersionAddendum for the xauth bugfix.
Modified:
stable/9/crypto/openssh/ssh_config
stable/9/crypto/openssh/ssh_config.5
Author: des
Date: Sat Mar 12 23:50:19 2016
New Revision: 296780
URL: https://svnweb.freebsd.org/changeset/base/296780
Log:
Apply patch from 7.2p2 for xauth command injection bug.
Security: CVE-2016-3115
Modified:
stable/9/crypto/openssh/session.c
Modified:
Author: des
Date: Sat Feb 20 13:36:24 2016
New Revision: 295840
URL: https://svnweb.freebsd.org/changeset/base/295840
Log:
MFH (r273114, r273124): turn SSLv3 off by default
MFH (r294326): fall back to standard / configured CA store
MFH (r295536): fix double-free when SSL connection fails
Author: des
Date: Tue Jan 26 07:44:26 2016
New Revision: 294776
URL: https://svnweb.freebsd.org/changeset/base/294776
Log:
MFH (r261233): cleanup
MFH (r261234): increase buffer size
MFH (r280630): remove all traces of SSLv2 support
MFH (r285141): remove unused variable
MFH (r288217):
Author: des
Date: Wed Jul 1 08:06:15 2015
New Revision: 284995
URL: https://svnweb.freebsd.org/changeset/base/284995
Log:
MFH (r228976): UTFize
MFH (r243076): check range of gid
MFH (r243083): fix possible overflow in error counter
MFH (r275765): clean up, reindent, add special case for
Author: des
Date: Tue Jun 30 13:34:46 2015
New Revision: 284953
URL: https://svnweb.freebsd.org/changeset/base/284953
Log:
MFH (r270391): don't set rc_debug in /etc/defaults/rc.conf
Modified:
stable/9/etc/defaults/rc.conf
Directory Properties:
stable/9/ (props changed)
stable/9/etc/
Author: des
Date: Tue Jun 30 15:21:18 2015
New Revision: 284955
URL: https://svnweb.freebsd.org/changeset/base/284955
Log:
MFH (r277695): allow tracing dlfunc() / dlsym() events
Modified:
stable/9/libexec/rtld-elf/rtld.c
stable/9/usr.bin/kdump/kdump.c
Directory Properties:
stable/9/
Author: des
Date: Thu Jan 29 09:06:21 2015
New Revision: 277874
URL: https://svnweb.freebsd.org/changeset/base/277874
Log:
MFH (r277237): pass PAM_RHOST to RADIUS server as Calling-Station-ID
Modified:
stable/9/lib/libpam/modules/pam_radius/pam_radius.c
Directory Properties:
Author: des
Date: Mon Dec 22 22:11:50 2014
New Revision: 276090
URL: https://svnweb.freebsd.org/changeset/base/276090
Log:
Strip trailing / characters from paths in not present index entries.
Errata: FreeBSD-EN-14:13.freebsd-update
Approved by: so@
Modified:
Author: des
Date: Tue Nov 4 23:30:47 2014
New Revision: 274109
URL: https://svnweb.freebsd.org/changeset/base/274109
Log:
[SA-14:25] Fix kernel stack disclosure in setlogin(2) / getlogin(2).
[SA-14:26] Fix remote command execution in ftp(1).
Approved by: so (des)
Modified:
Author: des
Date: Tue Oct 28 18:19:22 2014
New Revision: 273798
URL: https://svnweb.freebsd.org/changeset/base/273798
Log:
Merge upstream r825: fix line continuation in whitespace
Modified:
stable/9/contrib/openpam/lib/libpam/openpam_readword.c
Directory Properties:
Author: des
Date: Wed Oct 1 10:29:14 2014
New Revision: 272352
URL: https://svnweb.freebsd.org/changeset/base/272352
Log:
MFH (r272280, r272281, r272348): allow use with null user and rhost
PR: 83099 193927
Modified:
Author: des
Date: Thu Sep 18 14:31:18 2014
New Revision: 271767
URL: http://svnweb.freebsd.org/changeset/base/271767
Log:
MFH (r271256, r271617): avoid segfault if PAM_RHOST nor PAM_TTY are unset.
PR: 83099
Modified:
Author: des
Date: Sun Aug 24 14:00:44 2014
New Revision: 270459
URL: http://svnweb.freebsd.org/changeset/base/270459
Log:
MFH (r270458): print numeric file mode unless -r was specified
Modified:
stable/9/usr.bin/kdump/kdump.c
Directory Properties:
stable/9/usr.bin/kdump/ (props changed)
Author: des
Date: Sun Aug 24 14:04:23 2014
New Revision: 270461
URL: http://svnweb.freebsd.org/changeset/base/270461
Log:
MFH (r267127): don't send User-Agent if HTTP_USER_AGENT is empty
Modified:
stable/9/lib/libfetch/fetch.3
stable/9/lib/libfetch/http.c
Directory Properties:
Author: des
Date: Sat Aug 23 11:34:55 2014
New Revision: 270397
URL: http://svnweb.freebsd.org/changeset/base/270397
Log:
MFH (r269115): remove useless getpwnam() call
Modified:
stable/9/lib/libpam/modules/pam_lastlog/pam_lastlog.c
Directory Properties:
stable/9/lib/libpam/ (props
Author: des
Date: Sat Aug 23 15:07:02 2014
New Revision: 270414
URL: http://svnweb.freebsd.org/changeset/base/270414
Log:
MFH (r263160): remove lukemftpd
Deleted:
stable/9/contrib/lukemftpd/
stable/9/libexec/lukemftpd/
Modified:
stable/9/MAINTAINERS (contents, props changed)
Directory
==
--- stable/9/lib/libfetch/common.c Sun May 25 16:17:41 2014
(r266653)
+++ stable/9/lib/libfetch/common.c Sun May 25 16:20:53 2014
(r266654)
@@ -1,5 +1,5 @@
/*-
- * Copyright (c) 1998-2011 Dag-Erling Smørgrav
+ * Copyright (c) 1998
==
--- stable/9/usr.bin/fetch/fetch.1 Sun May 25 16:20:53 2014
(r266654)
+++ stable/9/usr.bin/fetch/fetch.1 Sun May 25 16:21:12 2014
(r266655)
@@ -1,5 +1,6 @@
.\-
-.\ Copyright (c) 2000-2011 Dag-Erling Smørgrav
.
+/*-
+ * Copyright (c) 1999 Mark Murray
+ * Copyright (c) 2014 Dag-Erling Smørgrav
+ * All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
@@ -28,114 +29,88 @@
__FBSDID($FreeBSD$);
#include sys
Author: des
Date: Sun Apr 20 13:12:32 2014
New Revision: 264693
URL: http://svnweb.freebsd.org/changeset/base/264693
Log:
MFH (r264691): merge upstream patch for EC calculation bug
Modified:
stable/9/crypto/openssh/bufaux.c
stable/9/crypto/openssh/compat.c
Author: des
Date: Thu Apr 17 12:11:00 2014
New Revision: 264597
URL: http://svnweb.freebsd.org/changeset/base/264597
Log:
MFH (r261511, r261542): add an example to the man page
Modified:
stable/9/usr.sbin/pwd_mkdb/pwd_mkdb.8
Directory Properties:
stable/9/usr.sbin/pwd_mkdb/ (props
Author: des
Date: Thu Apr 17 12:16:51 2014
New Revision: 264599
URL: http://svnweb.freebsd.org/changeset/base/264599
Log:
MFH (r262555): install the sntp(1) man page
Modified:
stable/9/usr.sbin/ntp/sntp/Makefile
Directory Properties:
stable/9/usr.sbin/ntp/ (props changed)
Modified:
Author: des
Date: Tue Mar 25 15:35:33 2014
New Revision: 263739
URL: http://svnweb.freebsd.org/changeset/base/263739
Log:
MFH (r256768): don't report an error for no-op add / remove
Modified:
stable/9/sbin/ifconfig/ifgroup.c
Directory Properties:
stable/9/sbin/ifconfig/ (props changed)
Author: des
Date: Thu Mar 20 11:09:20 2014
New Revision: 263422
URL: http://svnweb.freebsd.org/changeset/base/263422
Log:
MFH (r255590): list OpenSSH in OptionalObsoleteFiles.inc
Also fix the libssh-went-private bit in ObsoleteFiles.inc, which was
incomplete.
Modified:
==
--- stable/9/share/man/man5/libmap.conf.5 Tue Mar 11 15:46:03 2014
(r263030)
+++ stable/9/share/man/man5/libmap.conf.5 Tue Mar 11 16:13:03 2014
(r263031)
@@ -1,4 +1,5 @@
.\ Copyright (c) 2003 Matthew N. Dodd win...@jurai.net
+.\ Copyright (c) 2013 Dag-Erling Smørgrav
.\ All
Author: des
Date: Tue Sep 10 10:07:21 2013
New Revision: 255443
URL: http://svnweb.freebsd.org/changeset/base/255443
Log:
Fix the length calculation for the final block of a sendfile(2)
transmission which could be tricked into rounding up to the nearest
page size, leaking up to a page of
Author: des
Date: Sun Sep 8 11:35:56 2013
New Revision: 255388
URL: http://svnweb.freebsd.org/changeset/base/255388
Log:
MFH (r254684, r254955): fix segfault on reload.
MFH (r255156): silence an error message on non-IPv6 interfaces.
Modified:
stable/9/usr.sbin/rtadvd/config.c
Author: des
Date: Sun Sep 8 17:28:11 2013
New Revision: 255394
URL: http://svnweb.freebsd.org/changeset/base/255394
Log:
MFH (r255243): create /var/authpf with correct ownership and permissions.
Modified:
stable/9/etc/mtree/BSD.var.dist
Directory Properties:
stable/9/etc/mtree/ (props
, even if they're
identical. That is arguably a bug in gcc, but in the meantime, it
should be fixed either by reverting this commit or removing the extra
prototype in expr.y.
DES
--
Dag-Erling Smørgrav - d...@des.no
___
svn-src-stable-9@freebsd.org
Dag-Erling Smørgrav d...@des.no writes:
This breaks the build in usr.bin/expr because expr.y already provides a
prototype, and gcc does not accept multiple prototypes, even if they're
identical. That is arguably a bug in gcc,
Oh, it's actually our own fault for including -Wredundant-decls
Bruce Evans b...@optusnet.com.au writes:
Dag-Erling Smørgrav d...@des.no writes:
Oh, it's actually our own fault for including -Wredundant-decls in
CFLAGS. Is there a good reason to keep it?
How else would you detect bogus declarations of library functions? Almost
all -W flags
Author: des
Date: Tue Aug 20 07:22:20 2013
New Revision: 254554
URL: http://svnweb.freebsd.org/changeset/base/254554
Log:
MFH (r254278): fix relative symlinks
Modified:
stable/9/crypto/openssh/sftp.c
Directory Properties:
stable/9/crypto/openssh/ (props changed)
Modified:
Author: des
Date: Sat Jul 13 10:47:17 2013
New Revision: 253320
URL: http://svnweb.freebsd.org/changeset/base/253320
Log:
MFH (r253138,r253258): install authpf-noip
Approved by: re (delphij)
Modified:
stable/9/tools/build/mk/OptionalObsoleteFiles.inc
stable/9/usr.sbin/authpf/Makefile
Author: des
Date: Thu Jul 11 12:47:06 2013
New Revision: 253205
URL: http://svnweb.freebsd.org/changeset/base/253205
Log:
MFH (r246553): document and explain need for setuid bit.
PR: docs/167741
Modified:
stable/9/usr.bin/newgrp/newgrp.1
stable/9/usr.bin/newgrp/newgrp.c
Author: des
Date: Thu Jul 11 12:49:12 2013
New Revision: 253206
URL: http://svnweb.freebsd.org/changeset/base/253206
Log:
MFH (r246552): mention newgrp(1) and how to change the group password.
PR: docs/167741
Modified:
stable/9/share/man/man5/group.5
Directory Properties:
Author: des
Date: Wed Jul 10 14:06:35 2013
New Revision: 253152
URL: http://svnweb.freebsd.org/changeset/base/253152
Log:
MFH (r252375): remove useless side effect which triggers a clang bug.
Modified:
stable/9/lib/libfetch/fetch.c
Directory Properties:
stable/9/lib/libfetch/ (props
Author: des
Date: Wed Jul 10 14:11:13 2013
New Revision: 253153
URL: http://svnweb.freebsd.org/changeset/base/253153
Log:
MFH (r249479): OPENPAM_DEBUG enables debugging but does not turn it on
Modified:
stable/9/contrib/openpam/lib/openpam_log.c
Directory Properties:
Author: des
Date: Wed Jul 10 14:11:51 2013
New Revision: 253154
URL: http://svnweb.freebsd.org/changeset/base/253154
Log:
MFH (r249479): OPENPAM_DEBUG enables debugging but does not turn it on
Modified:
stable/9/lib/libpam/Makefile.inc
Directory Properties:
stable/9/lib/libpam/ (props
Author: des
Date: Wed Jul 10 14:16:39 2013
New Revision: 253157
URL: http://svnweb.freebsd.org/changeset/base/253157
Log:
MFH (r252556): allow setting expiry to current date / time
MFH (r252688): fall back to sha512 if passwd_format is not set
Modified:
stable/9/usr.sbin/pw/pw_user.c
Author: des
Date: Wed Jul 10 14:13:37 2013
New Revision: 253155
URL: http://svnweb.freebsd.org/changeset/base/253155
Log:
MFH (r250056,r250057): add -Z option to zero unused blocks.
Modified:
stable/9/sbin/fsck_ffs/fsck.h
stable/9/sbin/fsck_ffs/fsck_ffs.8
stable/9/sbin/fsck_ffs/fsutil.c
Author: des
Date: Thu Jul 4 14:26:42 2013
New Revision: 252699
URL: http://svnweb.freebsd.org/changeset/base/252699
Log:
Protect the #define MALLOC_PRODUCTION directive in case it was also
defined on the command line (due to MALLOC_PRODUCTION=yes in src.conf).
Modified:
Author: des
Date: Fri Jun 28 09:55:00 2013
New Revision: 252339
URL: http://svnweb.freebsd.org/changeset/base/252339
Log:
Insta-MFH (r252338): update docs to reflect correct default privsep setting
Modified:
stable/9/crypto/openssh/sshd_config
stable/9/crypto/openssh/sshd_config.5
Author: des
Date: Tue Jun 18 07:04:19 2013
New Revision: 251902
URL: http://svnweb.freebsd.org/changeset/base/251902
Log:
Fix a bug that allowed a tracing process (e.g. gdb) to write
to a memory-mapped file in the traced process's address space
even if neither the traced process nor the
Mike Tancsa m...@sentex.net writes:
For the archives, this is fixed in
http://lists.freebsd.org/pipermail/svn-src-head/2013-May/047921.html
Fixed in head, but not stable/9 yet. I'll pull 6.2p2 from head to
stable/9 later this week.
DES
--
Dag-Erling Smørgrav - d...@des.no
Author: des
Date: Sun May 26 16:48:51 2013
New Revision: 251001
URL: http://svnweb.freebsd.org/changeset/base/251001
Log:
MFH (r243149): fix indentation
MFH (r249431): use CONNECT to proxy HTTPS over HTTP
PR: bin/80176
Modified:
stable/9/lib/libfetch/http.c
Directory
Author: des
Date: Mon Apr 29 20:15:55 2013
New Revision: 250060
URL: http://svnweb.freebsd.org/changeset/base/250060
Log:
Fix a bug that allows NFS clients to issue READDIR on files.
PR: kern/178016
Security: CVE-2013-3266
Security: FreeBSD-SA-13:05.nfsserver
Author: des
Date: Mon Apr 29 21:11:01 2013
New Revision: 250070
URL: http://svnweb.freebsd.org/changeset/base/250070
Log:
Fix a bug that allows NFS clients to issue READDIR on files.
(files missing from previous commit)
PR: kern/178016
Security: CVE-2013-3266
Author: des
Date: Wed Apr 3 11:00:50 2013
New Revision: 249046
URL: http://svnweb.freebsd.org/changeset/base/249046
Log:
MFH (r246358): load pfsync.ko if necessary.
Modified:
stable/9/etc/rc.d/pfsync
Directory Properties:
stable/9/etc/ (props changed)
Modified: stable/9/etc/rc.d/pfsync
Author: des
Date: Wed Apr 3 12:17:35 2013
New Revision: 249050
URL: http://svnweb.freebsd.org/changeset/base/249050
Log:
MFH (r247810): correctly parse mixed quoted / unquoted text.
Modified:
stable/9/contrib/openpam/doc/man/openpam_straddch.3
Author: des
Date: Fri Mar 29 21:08:20 2013
New Revision: 248915
URL: http://svnweb.freebsd.org/changeset/base/248915
Log:
Remove (harmless) duplicate entry for VersionAddendum.
Noticed by: dim@
MFC after:1 week
Modified:
stable/9/crypto/openssh/servconf.c
Modified:
Author: des
Date: Fri Mar 1 09:49:55 2013
New Revision: 247541
URL: http://svnweb.freebsd.org/changeset/base/247541
Log:
MFH (r240278): document -quit
Modified:
stable/9/usr.bin/find/find.1
Directory Properties:
stable/9/usr.bin/find/ (props changed)
Modified:
Mar 1 19:40:02 2013
(r247567)
+++ stable/9/contrib/openpam/CREDITSFri Mar 1 19:42:50 2013
(r247568)
@@ -6,32 +6,41 @@ Network Associates, Inc. under DARPA/SP
Principal design and development by:
-Dag-Erling Sm�rgrav d...@freebsd.org
+Dag-Erling Smørgrav d
days ago? Can you try to roll back to r247484?
DES
--
Dag-Erling Smørgrav - d...@des.no
___
svn-src-stable-9@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-stable-9
To unsubscribe, send any mail to svn-src-stable-9-unsubscr
Mike Tancsa m...@sentex.net writes:
Dag-Erling Smørgrav d...@des.no writes:
Are you sure this was due to the OpenSSH update, and not the OpenSSL
update a few days ago? Can you try to roll back to r247484?
I didnt think openssl got updated on RELENG_9 ?
Ah, you're right
Author: des
Date: Thu Feb 28 18:43:50 2013
New Revision: 247485
URL: http://svnweb.freebsd.org/changeset/base/247485
Log:
Pull in OpenSSH 6.1 from head.
Added:
stable/9/crypto/openssh/sandbox-darwin.c
- copied unchanged from r226046, head/crypto/openssh/sandbox-darwin.c
Author: des
Date: Fri Mar 1 00:52:57 2013
New Revision: 247512
URL: http://svnweb.freebsd.org/changeset/base/247512
Log:
MFH (r240107,240111,240361): warn against using weak PRNGs
Modified:
stable/9/lib/libc/gen/rand48.3
stable/9/lib/libc/stdlib/random.3
Directory Properties:
Author: des
Date: Fri Mar 1 01:02:26 2013
New Revision: 247515
URL: http://svnweb.freebsd.org/changeset/base/247515
Log:
MFH (r245527): add OPENSSH_NONE_CIPHER build option
Added:
stable/9/tools/build/options/WITH_OPENSSH_NONE_CIPHER
- copied unchanged from r245527,
Author: des
Date: Fri Mar 1 01:03:27 2013
New Revision: 247518
URL: http://svnweb.freebsd.org/changeset/base/247518
Log:
Regenerate
Modified:
stable/9/share/man/man5/src.conf.5
Modified: stable/9/share/man/man5/src.conf.5
Author: des
Date: Mon Feb 4 16:13:55 2013
New Revision: 246322
URL: http://svnweb.freebsd.org/changeset/base/246322
Log:
MFH (r228082): add missing documentation for WITH_LIBCPLUSPLUS
MFH (r228159): add missing documentation for WITH_CTF
Added:
stable/9/tools/build/options/WITH_CTF
-
Author: des
Date: Mon Feb 4 16:20:13 2013
New Revision: 246323
URL: http://svnweb.freebsd.org/changeset/base/246323
Log:
Regenerate
Modified:
stable/9/share/man/man5/src.conf.5
Modified: stable/9/share/man/man5/src.conf.5
Gavin Atkinson ga...@freebsd.org writes:
Although I do think this merge is a good idea, I think that this deserves
an entry in UPDATING, as it is a stable branch.
Will do.
DES
--
Dag-Erling Smørgrav - d...@des.no
___
svn-src-stable-9@freebsd.org
Author: des
Date: Mon Nov 5 10:42:31 2012
New Revision: 242606
URL: http://svnweb.freebsd.org/changeset/base/242606
Log:
MFH (r240496): use libmd if and only if OpenSSL is not available
Modified:
stable/9/lib/libfetch/Makefile
stable/9/lib/libfetch/http.c
Directory Properties:
Author: des
Date: Mon Nov 5 12:41:55 2012
New Revision: 242609
URL: http://svnweb.freebsd.org/changeset/base/242609
Log:
MFH r240496: use libmd if and only if OpenSSL is not available
Modified:
stable/9/usr.bin/fetch/Makefile
Directory Properties:
stable/9/usr.bin/fetch/ (props changed)
+1,5 @@
.\-
-.\ Copyright (c) 2000-2012 Dag-Erling Smørgrav
+.\ Copyright (c) 2000-2011 Dag-Erling Smørgrav
.\ All rights reserved.
.\ Portions Copyright (c) 1999 Massachusetts Institute of Technology; used
.\ by permission.
@@ -29,7 +29,7 @@
.\
.\ $FreeBSD$
.\
-.Dd February 28, 2012
+.Dd
66 matches
Mail list logo