src/lib, branch releng/7.4 FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=releng%2F7.4 2013-02-19T13:27:20Z Fix Denial of Service vulnerability in named(8) with DNS64. [13:01] 2013-02-19T13:27:20Z Bjoern A. Zeeb bz@FreeBSD.org 2013-02-19T13:27:20Z urn:sha1:1c7fe7463d0204f08806b9da6d5d50fb7f75c5ad Fix Denial of Service vulnerability in libc's glob(3) functionality. [13:02] Security: CVE-2012-5688 Security: FreeBSD-SA-13:01.bind Security: CVE-2010-2632 Security: FreeBSD-SA-13:02.libc Approved by: so (simon, bz) Fix a problem whereby a corrupt DNS record can cause named to crash. [11:06] 2011-12-23T15:00:37Z Colin Percival cperciva@FreeBSD.org 2011-12-23T15:00:37Z urn:sha1:60183881171350323c0540e0a78442f67fbb8797 Add an API for alerting internal libc routines to the presence of "unsafe" paths post-chroot, and use it in ftpd. [11:07] Fix a buffer overflow in telnetd. [11:08] Make pam_ssh ignore unpassphrased keys unless the "nullok" option is specified. [11:09] Add sanity checking of service names in pam_start. [11:10] Approved by: so (cperciva) Approved by: re (bz) Security: FreeBSD-SA-11:06.bind Security: FreeBSD-SA-11:07.chroot Security: FreeBSD-SA-11:08.telnetd Security: FreeBSD-SA-11:09.pam_ssh Security: FreeBSD-SA-11:10.pam MFC r217383: 2011-01-22T19:15:39Z Konstantin Belousov kib@FreeBSD.org 2011-01-22T19:15:39Z urn:sha1:9951a0e1fadeb349f2488885fb5c75a5aa041d76 The (%esp & 0xf) == 0 should be true before the call instruction is executed, for the properly aligned stack. Approved by: re (bz) MFC r216351: 2010-12-14T15:35:44Z Tijl Coosemans tijl@FreeBSD.org 2010-12-14T15:35:44Z urn:sha1:ebd10f733f06fb948fdc908e792eaabc5b4e3ea2 Add a .note.ABI-tag section to ia64 startup files by linking crtbrand.c in crt1.o. On other architectures crtbrand.c is included from crt1.c, but that's not a C source code file on ia64. Instead it is compiled separately and included in crt1.o using incremental linking. Approved by: re (kensmith), kib (mentor) MFC r215236: 2010-11-27T06:35:15Z Xin LI delphij@FreeBSD.org 2010-11-27T06:35:15Z urn:sha1:2cc6890dbc74a5e343a3734532aa1feafd535aee Sync with OpenBSD, primarily better signal and terminal handling. Obtained from: OpenBSD MFC r215133: amd64: introduce minidump version 2 2010-11-26T16:24:55Z Andriy Gapon avg@FreeBSD.org 2010-11-26T16:24:55Z urn:sha1:6dbe22e4f9ddb987bb414ceaf3ea9ff84629b3d2 This should reduce size of the minidump. Compatibility with version 1 should be preserved in libkvm. MFC r215237: Fix bug in jn(3) and jnf(3) that led to -inf results 2010-11-23T18:48:57Z Ulrich Spörlein uqs@FreeBSD.org 2010-11-23T18:48:57Z urn:sha1:d91b4b7bb119d7aaab6a19a28a2f0eac0651f55f MFC r198406: wordexp(3): fix some bugs with signals and long outputs 2010-11-17T21:45:11Z Jilles Tjoelker jilles@FreeBSD.org 2010-11-17T21:45:11Z urn:sha1:96bd55f7972d969f1f98a24780f1d38326149d6f * retry various system calls on EINTR * retry the rest after a short read (common if there is more than about 1K of output) * block SIGCHLD like system(3) does (note that this does not and cannot work fully in threaded programs, they will need to be careful with wait functions) PR: 90580 MFC r213453: When no protocol entry is found, getproto*_r(3) 2010-10-30T10:38:23Z Hajimu UMEMOTO ume@FreeBSD.org 2010-10-30T10:38:23Z urn:sha1:38a897256c86a7cfa9addece3df29be6c34ccbdc should return zero. MFC r213403: Clear errno for each method dispatch. 2010-10-30T10:37:11Z Hajimu UMEMOTO ume@FreeBSD.org 2010-10-30T10:37:11Z urn:sha1:639315ad9b9cf8fbc65f586475d2c67458cab363