src-test2/contrib/bzip2, branch stable/6 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=stable%2F6 2010-09-20T14:58:08Z Fix an integer overflow in RLE length parsing when decompressing 2010-09-20T14:58:08Z Colin Percival cperciva@FreeBSD.org 2010-09-20T14:58:08Z urn:sha1:7139240c074f0e8dbc5baf23fe15f1ecd51b5091 corrupt bzip2 data. Approved by: so (cperciva) Security: FreeBSD-SA-10:08.bzip2 MFC: bzip2 1.0.5 2008-04-17T00:53:13Z Xin LI delphij@FreeBSD.org 2008-04-17T00:53:13Z urn:sha1:0f7923e144de81f51295b3ad9a09d38b8213f357 MFC: bzip2 1.0.4. 2007-07-11T07:04:07Z Xin LI delphij@FreeBSD.org 2007-07-11T07:04:07Z urn:sha1:9ae49a84397a5991b29538ae9654f63ab001777a Fix ipfw packet matching errors with address tables. 2005-06-29T21:36:49Z Simon L. B. Nielsen simon@FreeBSD.org 2005-06-29T21:36:49Z urn:sha1:0a389eab226dfe89be0b831fe454e2cd9a9e9705 The ipfw tables lookup code caches the result of the last query. The kernel may process multiple packets concurrently, performing several concurrent table lookups. Due to an insufficient locking, a cached result can become corrupted that could cause some addresses to be incorrectly matched against a lookup table. Submitted by: ru Reviewed by: csjp, mlaier Security: CAN-2005-2019 Security: FreeBSD-SA-05:13.ipfw Correct bzip2 permission race condition vulnerability. Obtained from: Steve Grubb via RedHat Security: CAN-2005-0953 Security: FreeBSD-SA-05:14.bzip2 Approved by: obrien Correct TCP connection stall denial of service vulnerability. A TCP packets with the SYN flag set is accepted for established connections, allowing an attacker to overwrite certain TCP options. Submitted by: Noritoshi Demizu Reviewed by: andre, Mohan Srinivasan Security: CAN-2005-2068 Security: FreeBSD-SA-05:15.tcp Approved by: re (security blanket), cperciva Make bzip2 support working again after bzip2 upgrade. This time commit 2005-05-29T21:56:38Z Maxim Sobolev sobomax@FreeBSD.org 2005-05-29T21:56:38Z urn:sha1:55f88dd25e8b4fad6bb2effd3ae55dd687b0903e BZ_NO_COMPRESS support to the bzip2 sources directly (yes, this takes file off the vendor branch, but looks like bzip2 maintainer doesn't care), so that it will not be removed when the next upgrade is performed. Also, add a short note on how to test bzip2 support. Pointy hat to: obrien Correct comment (libz -> libbz2) and remove useless full path to zutil.h while I am here. Update to match the 1.0.3 import. 2005-05-16T18:56:30Z David E. O'Brien obrien@FreeBSD.org 2005-05-16T18:56:30Z urn:sha1:d87b8d2a1b7fb576bf6a32f2baff65d1f368552b This commit was generated by cvs2svn to compensate for changes in r146293, 2005-05-16T18:31:55Z David E. O'Brien obrien@FreeBSD.org 2005-05-16T18:31:55Z urn:sha1:9dba3024c3f1a2df6f42689aac5a2ab4acc7561d which included commits to RCS files with non-trunk default branches. Virgin import (trimmed) of Bzip2 version 1.0.3. 2005-05-16T18:31:55Z David E. O'Brien obrien@FreeBSD.org 2005-05-16T18:31:55Z urn:sha1:f7a4f99f70313385df697229c92ab37cb671d8ea Add upgrade instructions. 2002-02-01T16:34:13Z Maxim Sobolev sobomax@FreeBSD.org 2002-02-01T16:34:13Z urn:sha1:e5826fad5761da4037aa69e85b789ca258cc8c21 Virgin import (trimmed) of Bzip2 version 1.0.2 2002-02-01T16:28:01Z Maxim Sobolev sobomax@FreeBSD.org 2002-02-01T16:28:01Z urn:sha1:ed14b6e01afaf82e6d03c114f68404bbb1aaa47a