src/lib/libc/yp, branch releng/10.2

o Fix filemon and bmake meta-mode stability issues. [EN-16:01]

2016-01-14T09:10:46Z

o Fix invalid TCP checksums with pf(4). [EN-16:02.pf] o Fix YP/NIS client library critical bug. [EN-16:03.yplib] o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp] o Fix ntp panic threshold bypass vulnerability. [SA-16:02.ntp] o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd] Errata: FreeBSD-EN-16:01.filemon Errata: FreeBSD-EN-16:02.pf Errata: FreeBSD-EN-16:03.yplib Security: FreeBSD-SA-16:01.sctp, CVE-2016-1879 Security: FreeBSD-SA-16:02.ntp, CVE-2015-5300 Security: FreeBSD-SA-16:03.linux, CVE-2016-1880 Security: FreeBSD-SA-16:04.linux, CVE-2016-1881 Security: FreeBSD-SA-16:05.tcp, CVE-2016-1882 Security: FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677 Approved by: so

libc: Use O_CLOEXEC for various internal file descriptors.

2012-09-29T11:54:34Z

This fixes a race condition where another thread may fork() before CLOEXEC is set, unintentionally passing the descriptor to the child process. This commit only adds O_CLOEXEC flags to open() or openat() calls where no fcntl(fd, F_SETFD, FD_CLOEXEC) follows. The separate fcntl() call still leaves a race window so it should be fixed later.

Consistently set RPCGEN_CPP when running rpcgen, so the C preprocessor

2012-02-07T09:27:07Z

set via ${CPP} is used, instead of always using hardcoded /usr/bin/cpp. MFC after: 1 week

Handle malloc failures in yplib.c.

2011-12-23T02:13:42Z

PR: bin/83349

Handle failures to malloc memory to hold key or val copies.

2011-12-23T01:56:25Z

PR: bin/83348

Remove duplicate "in".

2011-03-01T11:47:51Z

Suggested by: Rob Farmer MFC after: 3 days

Revert some of r177626. "in in" is valid in certain sentences.

2011-02-28T10:03:48Z

PR: 121490 MFC after: 3 days

Eliminate more dead stores.

2009-11-25T04:45:45Z

Found by: Clang static analyzer MFC after: 7 days

Fix some "in in" typos in comments.

2008-03-26T07:32:08Z

PR: 121490 Submitted by: Anatoly Borodin Approved by: rwatson (mentor), jkoshy MFC after: 3 days

Set timeout for all NIS RPC requests to 1 second and not just for

2007-07-24T13:06:08Z

yp_next as revision 1.50 did. This should fix, or at least very much reduce the risk of, NIS timing out due to UDP packet loss for NIS functions. See also revision 1.50 for more details about the general problem. Tested by: nosedive, freefall, hub, mx1, brooks MFC after: 1 week Approved by: re (mux)