src/lib/libfetch, branch releng/12.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F12.02020-01-28T18:55:25ZFix libfetch buffer overflow2020-01-28T18:55:25ZGordon Tetlowgordon@FreeBSD.org2020-01-28T18:55:25Zurn:sha1:8540c2ad8572b163d3a4cafee9f19933bf81a46a
Reported by: Duncan Overbruck
Approved by: so
Security: FreeBSD-SA-20:01.libfetch
Security: CVE-2020-7450
Make libfetch buildable.2018-09-19T07:04:15ZJung-uk Kimjkim@FreeBSD.org2018-09-19T07:04:15Zurn:sha1:3fd49fe2d4843ceaa8c9b3bc4c77bafe1a0e5091Fix an inverted conditional in the netrc code, which would ignore the2018-05-29T13:07:36ZDag-Erling Smørgravdes@FreeBSD.org2018-05-29T13:07:36Zurn:sha1:5f04ebd4d3ed2b5970913c8b02b2b251a897a3c0
value of $HOME and always use the home directory from the passwd
database, unless $HOME was unset, in which case it would use (null).
While there, clean up handling of netrcfd and add debugging aids.
MFC after: 3 weeks
Fix a few (but far from all) style issues.2018-05-29T10:29:43ZDag-Erling Smørgravdes@FreeBSD.org2018-05-29T10:29:43Zurn:sha1:f2eac2024690289a5de4c0616fc423964d26092d
MFC after: 3 weeks
Use __VA_ARGS__ to simplify the DEBUG macro.2018-05-29T10:28:20ZDag-Erling Smørgravdes@FreeBSD.org2018-05-29T10:28:20Zurn:sha1:c5712d6da1ce9006a3147ab7c8be3b326d3dbc71
MFC after: 3 weeks
Preserve if-modified-since timestamps across redirects.2018-05-12T17:02:27ZDag-Erling Smørgravdes@FreeBSD.org2018-05-12T17:02:27Zurn:sha1:b847b083a865fc2ace237bb9d7aec1f6a7b916b1
PR: 224426
MFC after: 1 week
SPDX: use the Beerware identifier.2017-11-30T20:33:45ZPedro F. Giffunipfg@FreeBSD.org2017-11-30T20:33:45Zurn:sha1:64de3fdd5893e55c8aa20df2dcf1d9e86d851b34lib: further adoption of SPDX licensing ID tags.2017-11-26T02:00:33ZPedro F. Giffunipfg@FreeBSD.org2017-11-26T02:00:33Zurn:sha1:5e53a4f90f82c4345f277dd87cc9292f26e04a29
Mainly focus on files that use BSD 2-Clause license, however the tool I
was using mis-identified many licenses so this was mostly a manual - error
prone - task.
The Software Package Data Exchange (SPDX) group provides a specification
to make it easier for automated tools to detect and summarize well known
opensource licenses. We are gradually adopting the specification, noting
that the tags are considered only advisory and do not, in any way,
superceed or replace the license texts.
DIRDEPS_BUILD: Update dependencies.2017-10-31T00:07:04ZBryan Drewerybdrewery@FreeBSD.org2017-10-31T00:07:04Zurn:sha1:ea825d02749f382c3f7e17f28247f20a48733eab
Sponsored by: Dell EMC Isilon
In fetch_resolve(), if the port number or service name is included in2017-08-18T18:20:36ZDag-Erling Smørgravdes@FreeBSD.org2017-08-18T18:20:36Zurn:sha1:3954b52f282721e2aa32cdc81ebd81580ab1582b
the host argument (e.g. "www.freebsd.org:443"), the service pointer,
which is supposed to point to the port or service part, instead points
to the separator, causing getaddrinfo() to fail.
Note that I have not been able to trigger this bug with fetch(1), nor
do I believe it is possible, as libfetch always parses the host:port
specification itself. I discovered it when I copied fetch_resolve()
into an unrelated project.
MFC after: 3 days