src/lib/libfetch, branch releng/11.3FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F11.32020-01-28T18:55:25ZFix libfetch buffer overflow2020-01-28T18:55:25ZGordon Tetlowgordon@FreeBSD.org2020-01-28T18:55:25Zurn:sha1:2beaaa98bab310582fea50efba9f40251fbbcde1
Reported by: Duncan Overbruck
Approved by: so
Security: FreeBSD-SA-20:01.libfetch
Security: CVE-2020-7450
MFH (r314778): use reallocarray(3) for extra bounds checks2018-10-09T10:49:19ZDag-Erling Smørgravdes@FreeBSD.org2018-10-09T10:49:19Zurn:sha1:a30a102ea286c7b4b8482d6cdcbd7f46f870c743
MFH (r333306): fix typo in man page
MFH (r333571, r333572): preserve if-modified-since across redirects
MFH (r334317): simplify the DEBUG macro
MFH (r334319): style bug roundup
MFH (r334326): fix netrc file location logic, improve netrcfd handling
MFH (r338572): fix end-of-transfer statistics, improve no-tty display
PR: 202424, 224426, 228017
Revert r330897:2018-03-29T02:50:57ZEitan Adlereadler@FreeBSD.org2018-03-29T02:50:57Zurn:sha1:4ab2e064d7950be84256d671a7ae93f87cc6aa36
This was intended to be a non-functional change. It wasn't. The commit
message was thus wrong. In addition it broke arm, and merged crypto
related code.
Revert with prejudice.
This revert skips files touched in r316370 since that commit was since
MFCed. This revert also skips files that require $FreeBSD$ property
changes.
Thank you to those who helped me get out of this mess including but not
limited to gonzo, kevans, rgrimes.
Requested by: gjb (re)
Partial merge of the SPDX changes2018-03-14T03:19:51ZEitan Adlereadler@FreeBSD.org2018-03-14T03:19:51Zurn:sha1:be5d0b9566b13fdf8cabebb63334cbec12bfc409
These changes are incomplete but are making it difficult
to determine what other changes can/should be merged.
No objections from: pfg
MFC: r3226692017-09-17T01:32:38ZMarius Stroblmarius@FreeBSD.org2017-09-17T01:32:38Zurn:sha1:7ed06e5fb35381e5b62891e126c1894dcc6ab003
In fetch_resolve() if the port number or service name is included
in the host argument (e. g. "www.freebsd.org:443"), correctly set
the service pointer accordingly. Previously, the service pointer
was set to the separator instead, causing getaddrinfo(3) to fail.
MFH (r313974,r314596): open .netrc early in case we want to drop privs2017-03-24T14:19:52ZDag-Erling Smørgravdes@FreeBSD.org2017-03-24T14:19:52Zurn:sha1:4614862b22ad5c216188daf8fb1b1b748d54a275
MFH (r314396,r315143): fix a crash caused by an incorrect format string
MFH (r314701): fix handling of 416 errors when requesting a range
MFH (r315455): fix parsing of IP literals (square brackets)
PR: 212065, 217723
MFH (r310823): fix multi-line CONNECT responses2017-01-09T14:13:47ZDag-Erling Smørgravdes@FreeBSD.org2017-01-09T14:13:47Zurn:sha1:828a4289013bbdbfe8048697bbbd81e78537701b
PR: 194483
MFH (r308996, r309051, r309738): refactor, avoid repeating DNS requests2016-12-14T14:20:32ZDag-Erling Smørgravdes@FreeBSD.org2016-12-14T14:20:32Zurn:sha1:a2880da9dd64ef0e484eb66c15720178d0439a54r169386 (PR 112515) was incomplete: it treated 307 as an error except2016-05-31T08:27:39ZDag-Erling Smørgravdes@FreeBSD.org2016-05-31T08:27:39Zurn:sha1:a5fc9a29bb6a5df7a9444a9d93408a6303195aee
in verbose mode, and did not handle 308 at all.
r241840 (PR 172451) added support for 308, but with the same bug.
Correctly handle both by recognizing them as redirects in all places
where we check the HTTP result code.
PR: 112515 173451 209546
Submitted by: novel@
MFC after: 1 week
Call closedir() before returning from fetchListFile() to avoid a leak.2016-05-25T07:43:32ZDon Lewistruckman@FreeBSD.org2016-05-25T07:43:32Zurn:sha1:65380b5f2f0a06d1aaa9e26282b2d7270b375d07
Reported by: Coverity
CID: 1016697
MFC after: 1 week