Module Name: src Committed By: bouyer Date: Thu May 19 19:50:54 UTC 2011
Modified Files: src/external/bsd/dhcpcd/dist [netbsd-5]: dhcp.c dhcpcd-run-hooks.8.in dhcpcd-run-hooks.in src/external/bsd/dhcpcd/dist/dhcpcd-hooks [netbsd-5]: 20-resolv.conf 30-hostname Log Message: Pull up following revision(s) (requested by spz in ticket #1603): external/bsd/dhcpcd/dist/dhcp.c patch external/bsd/dhcpcd/dist/dhcpcd-run-hooks.8.in patch external/bsd/dhcpcd/dist/dhcpcd-run-hooks.in patch external/bsd/dhcpcd/dist/dhcpcd-hooks/20-resolv.conf patch external/bsd/dhcpcd/dist/dhcpcd-hooks/30-hostname patch Escape | and & characters before passing the value to the shell Ensure we set a valid hostname, DNS domain and NIS domain. Document the need for input validation in dhcpcd-run-hooks(8). Fixes CVE-2011-996 To generate a diff of this commit: cvs rdiff -u -r1.1.1.2.6.4 -r1.1.1.2.6.5 src/external/bsd/dhcpcd/dist/dhcp.c cvs rdiff -u -r1.1.1.2.6.3 -r1.1.1.2.6.4 \ src/external/bsd/dhcpcd/dist/dhcpcd-run-hooks.8.in \ src/external/bsd/dhcpcd/dist/dhcpcd-run-hooks.in cvs rdiff -u -r1.1.1.2.6.2 -r1.1.1.2.6.3 \ src/external/bsd/dhcpcd/dist/dhcpcd-hooks/20-resolv.conf \ src/external/bsd/dhcpcd/dist/dhcpcd-hooks/30-hostname Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.