<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/usr.bin, branch stable/9</title>
<subtitle>FreeBSD source tree</subtitle>
<id>https://cgit-dev.freebsd.org/src/atom?h=stable%2F9</id>
<link rel='self' href='https://cgit-dev.freebsd.org/src/atom?h=stable%2F9'/>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/'/>
<updated>2016-11-26T02:53:35Z</updated>
<entry>
<title>MFC r308808, r308809: Lookup locale when print all keywords as well.</title>
<updated>2016-11-26T02:53:35Z</updated>
<author>
<name>Hajimu UMEMOTO</name>
<email>ume@FreeBSD.org</email>
</author>
<published>2016-11-26T02:53:35Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=7b17877bf6903dea57f90938bbe4286fdeda1bcc'/>
<id>urn:sha1:7b17877bf6903dea57f90938bbe4286fdeda1bcc</id>
<content type='text'>
</content>
</entry>
<entry>
<title>MFC bspatch Capsicumization and improvements</title>
<updated>2016-09-23T01:52:06Z</updated>
<author>
<name>Ed Maste</name>
<email>emaste@FreeBSD.org</email>
</author>
<published>2016-09-23T01:52:06Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=23610b6da89ac4d16a06bf75e6c56d196b16afd7'/>
<id>urn:sha1:23610b6da89ac4d16a06bf75e6c56d196b16afd7</id>
<content type='text'>
r304691: bspatch: apply style(9)

Make style changes (and trivial refactoring of open calls) now in order
to reduce noise in diffs for future capsicum changes.

r304807 (allanjude): Capsicumize bspatch

Move all of the fopen() and open() calls to the top of main()

Restrict each FD to least privilege (read/seek only, write only, etc)

cap_enter(), and make all except the output FD read/seek only.

r304821: bspatch: remove output file in the case of error

r305486: bspatch: add sanity checks on sizes to avoid integer overflow

Note that this introduces an explicit 2GB limit, but this was already
implicit in variable and function argument types.

This is based on the "non-cryptanalytic attacks against freebsd
update components" anonymous gist. Further refinement is planned.

r305737: bspatch: remove superfluous newlines from errx strings

r305822: bspatch: use #define for header size instead of magic number

r306026: bspatch: Remove backwards-compatibility sys/capability.h support

bspatch previously included sys/capability.h or sys/capsicum.h based
on __FreeBSD_version, as FreeBSD is the upstream for bsdiff and we may
see this file incorporated into other third-party software.

The Capsicum header is now installed as sys/capsicum.h in stable/10 and
FreeBSD 10.3, so we can just use sys/capsicum.h and simplify the logic.
</content>
</entry>
<entry>
<title>MFC r264823 (ed): Make usage printing more consistent with other tools.</title>
<updated>2016-09-22T21:23:28Z</updated>
<author>
<name>Ed Maste</name>
<email>emaste@FreeBSD.org</email>
</author>
<published>2016-09-22T21:23:28Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=c06fad859acd8ad58b6a529a72132f096433e1a0'/>
<id>urn:sha1:c06fad859acd8ad58b6a529a72132f096433e1a0</id>
<content type='text'>
- Introduce a separate usage() function.
- Don't use argv[0]. Directly name the application, as we do elsewhere.
- Don't prepend the application name.
- Don't print two newlines.

Also apply the unnecessary semicolon cleanup from r298089
</content>
</entry>
<entry>
<title>MFC r305077:</title>
<updated>2016-09-07T18:22:08Z</updated>
<author>
<name>Dimitry Andric</name>
<email>dim@FreeBSD.org</email>
</author>
<published>2016-09-07T18:22:08Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=56456d49781bfde93a95848284e74133fc141646'/>
<id>urn:sha1:56456d49781bfde93a95848284e74133fc141646</id>
<content type='text'>
Squelch clang 3.9.0 warnings about BASE (which is 32768) being converted
to -32768 when it is used as an argument to mp_itom(), in both libtelnet
and newkey.  This code has been wrong since r26238 (!), so after almost
20 years it is rather useless to try to correct it.

MFC r305086:

Fix warnings in telnet about invalid constant conversions, e.g.:

contrib/telnet/telnet/commands.c:2914:13: error: implicit conversion
from 'int' to 'char' changes value from 137 to -119
[-Werror,-Wconstant-conversion]
		*lsrp++ = IPOPT_SSRR;
			~ ^~~~~~~~~~
/usr/include/netinet/ip.h:152:21: note: expanded from macro 'IPOPT_SSRR'
#define IPOPT_SSRR              137             /* strict source route */
				^~~
contrib/telnet/telnet/commands.c:2916:13: error: implicit conversion
from 'int' to 'char' changes value from 131 to -125
[-Werror,-Wconstant-conversion]
		*lsrp++ = IPOPT_LSRR;
			~ ^~~~~~~~~~
/usr/include/netinet/ip.h:148:21: note: expanded from macro 'IPOPT_LSRR'
#define IPOPT_LSRR              131             /* loose source route */
				^~~

Use unsigned char buffers instead.
</content>
</entry>
<entry>
<title>MFstable/10 r305229:</title>
<updated>2016-09-01T19:11:50Z</updated>
<author>
<name>Enji Cooper</name>
<email>ngie@FreeBSD.org</email>
</author>
<published>2016-09-01T19:11:50Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=d3bf16fefa20d945a32a8e27bbe816a05909c1f3'/>
<id>urn:sha1:d3bf16fefa20d945a32a8e27bbe816a05909c1f3</id>
<content type='text'>
MFstable/11 r304949,r305226:

r304949:

MFC r303830,r304693,r304694,r304698:

r303830:

Remove vestigal references to __alpha__

Replace alpha reference in getconf(1) with amd64 [*]

PR:	 	211300 [*]

r304693:

Clean up trailing whitespace

r304694:

Add `MIN_HOLE_SIZE` pathconf(2) support to getconf

This allows shell programs to programmatically determine whether
or not a filesystem supports sparse files

r304698:

Add support for _PC_ACL_NFS4 as TRUSTEDBSD_ACL_NFS4

The TRUSTEDBSD prefix was chosen for consistency with the other
related `_PC_ACL*` prefixed variables.

r305226:

MFC r304809:

Add non-TRUSTEDBSD prefixed knobs for the _PC_ACL* and {CAP,INF,MAC}_PRESENT knobs

It's not necessarily intuitive that the variables to query contain TRUSTEDBSD
in the prefix. Add non-TRUSTEDBSD prefixed knobs for querying things like
"_PC_ACL_NFS4".

Relnotes:	yes
</content>
</entry>
<entry>
<title>MFstable/10 r304210:</title>
<updated>2016-08-16T08:48:41Z</updated>
<author>
<name>Enji Cooper</name>
<email>ngie@FreeBSD.org</email>
</author>
<published>2016-08-16T08:48:41Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=b7545845d963e8597e51994aa77aac41cb00b3ef'/>
<id>urn:sha1:b7545845d963e8597e51994aa77aac41cb00b3ef</id>
<content type='text'>
MFstable/11 r304208:

MFC r303830:

Remove vestigal references to __alpha__

Replace alpha reference in getconf(1) with amd64 [*]

PR:	 	211300 [*]
</content>
</entry>
<entry>
<title>MFC r228395 (by ed):</title>
<updated>2016-08-09T18:53:57Z</updated>
<author>
<name>Dimitry Andric</name>
<email>dim@FreeBSD.org</email>
</author>
<published>2016-08-09T18:53:57Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=198c64043ac009727e751c463b4f59e96fba428d'/>
<id>urn:sha1:198c64043ac009727e751c463b4f59e96fba428d</id>
<content type='text'>
Add missing "static const" to long options table.

This table is only used in this C file and passed to getopt_long(), so
we can safely add static and const to it.

MFC r241737 (by ed):

More -Wmissing-variable-declarations fixes.

MFC r270132 (by gabor):

- Do not look for more matching lines if -L is specified

Submitted by:   eadler (based on)

MFC r296799 (by ian):

Fix a bug in bsdgrep that caused the program to hang in a tight loop for
some combinations of command line options and search patterns.  The code was
examining regexec flags looking for a regcomp flag value.  The fix is to
look in the struct field where the decoded regcomp flag was stored when the
regex was compiled.

With this fix, it's possible to build WITHOUT_GNU_GREP_COMPAT and
WITH_BSDGREP and have a usable GPL-free grep (which of course lacks gnugrep
extensions).  It now passes the kyua tests except for one test that requires
the -z/--null-data gnu extension, and one test involving outputting context
lines across multiple files which appears to sometimes output an extra
delimiter line ("--") between matches (a rather obscure failure of a rather
obscure feature, so bsdgrep should be generally usable now).

MFC r303676:

Fix a segfault in bsdgrep when parsing the invalid extended regexps "?"
or "+" (these are invalid, because there is no preceding operand).

When bsdgrep attempts to emulate GNU grep in discarding and ignoring the
invalid ? or + operators, some later logic in tre_compile_fast() goes
beyond the end of the buffer, leading to a crash.

Fix this by bailing out, and reporting a bad pattern instead.

Reported by:	Steve Kargl
</content>
</entry>
<entry>
<title>MFC r302911:</title>
<updated>2016-07-25T15:05:01Z</updated>
<author>
<name>Pedro F. Giffuni</name>
<email>pfg@FreeBSD.org</email>
</author>
<published>2016-07-25T15:05:01Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=51219dcb6af3b25058fa550634b8c8c523e04a28'/>
<id>urn:sha1:51219dcb6af3b25058fa550634b8c8c523e04a28</id>
<content type='text'>
mail(1): Avoid closing negative file descriptors.

CID:		1008105, 1008106
</content>
</entry>
<entry>
<title>Fix bspatch heap overflow vulnerability.</title>
<updated>2016-07-25T14:53:04Z</updated>
<author>
<name>Xin LI</name>
<email>delphij@FreeBSD.org</email>
</author>
<published>2016-07-25T14:53:04Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=cb3927918edda846c68e56bf0b7621f6eb7087ea'/>
<id>urn:sha1:cb3927918edda846c68e56bf0b7621f6eb7087ea</id>
<content type='text'>
Obtained from:	Chromium
Reported by:	Lu Tung-Pin
Security:	FreeBSD-SA-16:25.bspatch
</content>
</entry>
<entry>
<title>MFC r302542:</title>
<updated>2016-07-25T00:46:45Z</updated>
<author>
<name>Xin LI</name>
<email>delphij@FreeBSD.org</email>
</author>
<published>2016-07-25T00:46:45Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=bcfc5381705a017f62addad24ac6605e6febda9a'/>
<id>urn:sha1:bcfc5381705a017f62addad24ac6605e6febda9a</id>
<content type='text'>
Use _PATH_DEVNULL instead of hardcoding.
</content>
</entry>
</feed>
