aboutsummaryrefslogtreecommitdiff
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* Fix a problem whereby a corrupt DNS record can cause named to crash. [11:06]Colin Percival2011-12-237-10/+102
| | | | | | | | | | | | | | | | | | | | | | | Add an API for alerting internal libc routines to the presence of "unsafe" paths post-chroot, and use it in ftpd. [11:07] Fix a buffer overflow in telnetd. [11:08] Make pam_ssh ignore unpassphrased keys unless the "nullok" option is specified. [11:09] Add sanity checking of service names in pam_start. [11:10] Approved by: so (cperciva) Approved by: re (bz) Security: FreeBSD-SA-11:06.bind Security: FreeBSD-SA-11:07.chroot Security: FreeBSD-SA-11:08.telnetd Security: FreeBSD-SA-11:09.pam_ssh Security: FreeBSD-SA-11:10.pam Notes: svn path=/releng/7.3/; revision=228843
* Change the current working directory to be inside the jail created byColin Percival2010-05-271-1/+8
| | | | | | | | | | | | | | | | | the jail(8) command. [10:04] Fix a one-NUL-byte buffer overflow in libopie. [10:05] Correctly sanity-check a buffer length in nfs mount. [10:06] Approved by: so (cperciva) Approved by: re (kensmith) Security: FreeBSD-SA-10:04.jail Security: FreeBSD-SA-10:05.opie Security: FreeBSD-SA-10:06.nfsclient Notes: svn path=/releng/7.3/; revision=208586
* MFC r203441:Konstantin Belousov2010-02-174-22/+34
| | | | | | | | | | | Placate new binutils, by using 16-bit %ax instead of 32-bit %eax as an argument for fnstsw. Explicitely specify sizes for the XMM control and status word and X87 control and status words. Approved by: re (bz) Notes: svn path=/releng/7.3/; revision=204000
* Merge from stable/7, version 203948:Doug Barton2010-02-169-45/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to BIND 9.4-ESV. This version incorporates all bug and security fixes since the release of 9.4.3, including the most recent -P5 security fix detailed below. From the README: BIND 9.4-ESV will be supported until December 31, 2010, at which time you will need to upgrade to the current release of BIND. This versions address the following vulnerabilities: BIND 9 Cache Update from Additional Section https://www.isc.org/advisories/CVE-2009-4022v6 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022 A nameserver with DNSSEC validation enabled may incorrectly add unauthenticated records to its cache that are received during the resolution of a recursive client query BIND 9 DNSSEC validation code could cause bogus NXDOMAIN responses https://www.isc.org/advisories/CVE-2010-0097 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097 There was an error in the DNSSEC NSEC/NSEC3 validation code that could cause bogus NXDOMAIN responses (that is, NXDOMAIN responses for records proven by NSEC or NSEC3 to exist) to be cached as if they had validated correctly These issues only affect systems with DNSSEC validation enabled. Approved by: re (kensmith) Notes: svn path=/releng/7.3/; revision=203961
* MFC 197331, 197394:John Baldwin2010-01-294-3/+184
| | | | | | | | | | Add getpagesizes(3) function that returns either the number of page sizes supported by the system or a specified subset of the supported page sizes. Approved by: re (kib) Notes: svn path=/stable/7/; revision=203170
* Synch with head: avoid namespace collisions (r177447), plug resource leakDag-Erling Smørgrav2010-01-275-94/+859
| | | | | | | | | | in FTP code (r199801), add support for HTTP (r202613, r202623, r203028). Also record mergeinfo for previously merged patches (r174752, r174588). Approved by: re (kib) Notes: svn path=/stable/7/; revision=203071
* MFC r201892:Xin LI2010-01-232-4/+8
| | | | | | | | | Add a set of manual pages for pthread[_attr]_[sg]etaffinity(3). Reviewed by: davidxu Notes: svn path=/stable/7/; revision=202856
* MFC r202585: fix a comment typoAndriy Gapon2010-01-221-1/+1
| | | | Notes: svn path=/stable/7/; revision=202788
* MFC r200799:Xin LI2010-01-201-8/+3
| | | | | | | K&R -> ANSI prototype. Notes: svn path=/stable/7/; revision=202667
* MFC 202157:Fabien Thomas2010-01-191-0/+1
| | | | | | | Bug fix: add a missing initializer. Notes: svn path=/stable/7/; revision=202655
* MFC r200038:Konstantin Belousov2010-01-198-34/+89
| | | | | | | | | | | | Properly support -fPIE by linking PIE binaries with specially-built Scrt1.o instead of crt1.o. Separate i386-elf crt1.c into the pure assembler part and C code. Tested by: Mykola Dzham <i levsha me> Notes: svn path=/stable/7/; revision=202648
* MFC: r202176Christian Brueffer2010-01-1912-45/+54
| | | | | | | Miscellaneous mdoc, spelling and inconsistency fixes. Notes: svn path=/stable/7/; revision=202633
* MFC: r201603Christian Brueffer2010-01-191-1/+1
| | | | | | | Fix a double free(). Notes: svn path=/stable/7/; revision=202631
* MFC: r202159Christian Brueffer2010-01-151-1/+0
| | | | | | | Remove useless .TE groff macro. Notes: svn path=/stable/7/; revision=202417
* MFC: r201836Christian Brueffer2010-01-151-3/+2
| | | | | | | Remove unnecessary quoting and markup, add missing punctuation. Notes: svn path=/stable/7/; revision=202414
* MFC 199607, 200797, 201270, 201669:John Baldwin2010-01-131-35/+41
| | | | | | | | | Use pthread_once() to initialize the thread-local storage for localtime() and gmtime() and _once() to initialize gmt state rather than home-rolled versions using pthread mutex locks. Notes: svn path=/stable/7/; revision=202202
* MFC r197163Alan Cox2010-01-041-1/+11
| | | | | | | | | Add the FBSD_1.2 namespace. Discussed with: deischen Notes: svn path=/stable/7/; revision=201519
* MFC r201137Xin LI2010-01-041-1/+1
| | | | | | | | | Grammar fix. Submitted by: Kenyon Ralph <kenyon kenyonralph com> Notes: svn path=/stable/7/; revision=201466
* MFC r201201:Konstantin Belousov2010-01-012-11/+45
| | | | | | | | | | Document CLOCK_SECOND, add cross-reference from time(3) to clock_gettime(2). MFC r201204: Document _FAST and _PRECISE clocks. Notes: svn path=/stable/7/; revision=201363
* MFC 174741,200919:John Baldwin2009-12-302-17/+114
| | | | | | | | | | | | | | | - Fix logical bug in the bzip2 reading code, which results in bogus EIO returned on a perfectly valid bzip2 stream whose decompressed size is multiple of read-ahead buffer size. - Add a similar fix to the gzipfs code to be safe (along with a subsequent bugfix to un-break seeking of gzip streams). - Add some ifdef'ed code to enable testing bzipfs.c from witin normal FreeBSD environment as opposed to the restricted loader one, so that one can use gdb and whatnot. - Add lseek() support to bzip2fs. Notes: svn path=/stable/7/; revision=201268
* MFC of r200832, tzdata2009tEdwin Groothuis2009-12-291-1/+1
| | | | | | | | | | | zic: - Fix URL / reference to Calendrical Calculations: Third Edition libc/stdtime: - Fix typo in tzfile.5 (no changes in our part) Notes: svn path=/stable/7/; revision=201184
* Explicitly say that this is an internal library which is intended to beXin LI2009-12-271-1/+10
| | | | | | | | | | | used within FreeBSD base system only, and discourage user applications from using it. User applications should use the expat version from the ports/package collection. Reviewed by: simon (earlier version) Notes: svn path=/stable/7/; revision=201042
* MFC r199244:Peter Pentchev2009-12-241-1/+1
| | | | | | | | | | Fix the grammar in the isgraph(3) description, almost as per the PR. PR: 140455 Submitted by: Jeremy Huddleston <jeremyhu@apple.com> Notes: svn path=/stable/7/; revision=200963
* MFC r200589: cpuset(2): fix a typo and a markup error in the man pageJilles Tjoelker2009-12-221-2/+2
| | | | Notes: svn path=/stable/7/; revision=200837
* Merge from head to stable/7:Sean Farley2009-12-181-2/+2
| | | | | | | | r200423: Remove a dead store. Notes: svn path=/stable/7/; revision=200684
* MFC 199606, 199614:John Baldwin2009-12-173-1/+73
| | | | | | | | | | | | Add an internal _once() method. This works identical to pthread_once(3) with the additional property that it is safe for routines in libc to use in both single-threaded and multi-threaded processes. Multi-threaded processes use the pthread_once() implementation from the threading library while single-threaded processes use a simplified "stub" version internal to libc. Notes: svn path=/stable/7/; revision=200649
* MFC 193809:Fabien Thomas2009-12-111-7/+7
| | | | | | | Fix parsing of Core2 event qualifiers. Notes: svn path=/stable/7/; revision=200410
* MFC 198433:Fabien Thomas2009-12-071-12/+47
| | | | | | | | | Not all Intel Core (TM) CPUs implement PMC_CLASS_IAF fixed-function counters. For such CPUs, use an alternate mapping of convenience names to events supported by PMC_CLASS_IAP programmable counters. Notes: svn path=/stable/7/; revision=200235
* MFC 200061:John Baldwin2009-12-071-2/+2
| | | | | | | | | | The fd_mask type is an unsigned long, not an int, so treat the mask as a long instead of an int when examining the results of select() to look for RPC requests. Previously this routine would ignore RPC requests to sockets whose file descriptor mod 64 was greater than 31 on a 64-bit platform. Notes: svn path=/stable/7/; revision=200225
* MFC: r199988Christian Brueffer2009-12-041-2/+3
| | | | | | | Add an .Nm for strncat. Notes: svn path=/stable/7/; revision=200093
* MFC revs 199781,199782,199784,199786:Garrett Wollman2009-12-0210-16/+18
| | | | | | | | | | | | | | | | | | | | Eliminate dead stores. In __mbsconv(), if prec was zero, nconv could have been used uninitialized. Initialize it to a safe value so that there's no chance of returning an error if stack garbage happens to be equal to (size_t)-1 or (size_t)-2. In clnt_raw_create(), avoid minor race condition initializing the file-scope variable clntraw_private. Mark head rev 199785 as merged; 7-STABLE's version of svc_raw_reply() doesn't have the same bug (or even look all that similar). Found by: Clang static analyzer Notes: svn path=/stable/7/; revision=200017
* MFC 198339:Fabien Thomas2009-12-011-1/+1
| | | | | | | | | Fix the NO_PROXY handling. PR: 139751 Notes: svn path=/stable/7/; revision=200013
* Merge rev. 199180 to 7.x-STABLE, the change to isblank(3):Peter Pentchev2009-11-251-2/+2
| | | | | | | | | | Fix the grammar as in the PR, and then some. PR: 140454 Submitted by: Jeremy Huddleston <jeremyhu@apple.com> Notes: svn path=/stable/7/; revision=199794
* MFC: r199320Christian Brueffer2009-11-231-1/+1
| | | | | | | Fix grammar. Notes: svn path=/stable/7/; revision=199710
* MFC: r199317Christian Brueffer2009-11-231-0/+1
| | | | | | | Fix a memory leak in acl_from_text() in case the conversion succeeded. Notes: svn path=/stable/7/; revision=199702
* MFC: r199255, r199257Christian Brueffer2009-11-201-10/+2
| | | | | | | | | | Improved the manpage description. The committed wording was provided by jhb. Remove a note about vfork(4) going to be eliminated, it's here to stay. Notes: svn path=/stable/7/; revision=199569
* MFC 198986:John Baldwin2009-11-171-6/+6
| | | | | | | | Fix a copy-paste bug when reading data from the last 3 (7 for PAE) bytes of a page mapped by a large page in the kernel. Notes: svn path=/stable/7/; revision=199409
* MFC: r199046Christian Brueffer2009-11-161-1/+1
| | | | | | | Fix a copy+paste error by checking the correct variable against MM_NULLACT. Notes: svn path=/stable/7/; revision=199315
* MFC r195747Navdeep Parhar2009-11-111-2/+2
| | | | Notes: svn path=/stable/7/; revision=199191
* MFC: r198542Christian Brueffer2009-11-041-0/+1
| | | | | | | | Initialize f_rabuf in the raw device case. A subsequent close() later on would try to free it, leading to a crash. Notes: svn path=/stable/7/; revision=198889
* MFC rev. 197621:Alexander Motin2009-10-301-9/+4
| | | | | | | | | | Fix bug, when RADIUS client gave up after single sendto() error, do not trying backup servers. PR: kern/103764, misc/139214 Notes: svn path=/stable/7/; revision=198675
* MFC rev. 197086:Alexander Motin2009-10-304-90/+334
| | | | | | | | | | | Add simple embedded RADIUS server support to libradius, by extending existing API, keeping backward compatibility. First consumer for this functionality is going to become forthcoming MPD-5.4, supporting CoA and DR of RFC 3576: Dynamic Authorization Extensions to RADIUS. Notes: svn path=/stable/7/; revision=198673
* MFC of r197189Edwin Groothuis2009-10-291-2/+8
| | | | | | | | | | Improve the way failure of pthread_key_create() gets detected. PR: threads/138603 Submitted by: Mikulas Patocka Notes: svn path=/stable/7/; revision=198579
* MFC r197958:Konstantin Belousov2009-10-141-1/+3
| | | | | | | | | In nanosleep(2), note that the calling thread is put to sleep, not the whole process. Also explicitely name the parameter that specifies sleep interval. Notes: svn path=/stable/7/; revision=198081
* MFC: r197312Christian Brueffer2009-10-121-2/+2
| | | | | | | Fix setfib(1) section number. Notes: svn path=/stable/7/; revision=197979
* MFC: rev. 197681Joe Marcus Clarke2009-10-041-1/+1
| | | | | | | | | | | Correct the pthread stub prototype for pthread_mutexattr_settype to allow for the type argument. This is known to fix some pthread_mutexattr_settype() invocations, especially when it comes to pulseaudio. Approved by: kib Notes: svn path=/stable/7/; revision=197759
* MFC 193023+193024:Xin LI2009-09-282-1/+18
| | | | | | | | | | Add an option to enforce strict RFC 1034 compliance. Document how to enable strict RFC 1034 enforcements. PR: kern/129477 Notes: svn path=/stable/7/; revision=197601
* MFC r195403:Attilio Rao2009-09-072-1/+4
| | | | | | | | Fix a bug in read lock acquisition for rwlocks by bumping rdlock_count when a successfull rwlock_rdlock_common() take place. Notes: svn path=/stable/7/; revision=196913
* MFC of r192625, r192890, r194783, r196587:Edwin Groothuis2009-08-318-375/+921
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r192625: MFC of tzcode2009e: Upgrade of the tzcode from 2004a to 2009e. Changes are numerous, but include... - New format of the output of zic, which supports both 32 and 64 bit time_t formats. - zdump on 64 bit platforms will actually produce some output instead of doing nothing for a looooooooong time. - linux_base-fX, with X >= at least 8, will work without problems related to the local time again. The original patch, based on the 2008e, has been running for a long time on both my laptop and desktop machine and have been tested by other people. After the installation of this code and the running of zic(8), you need to run tzsetup(8) again to install the new datafile. r192890: MFC of tzcode2009h - Clarify the license for the tzcode: public domain r194783: Remove duplicate if-statement on gmt_is_set in gmtsub(). r196587: MFC of tzcode2009k zic.c: Do not end a binary file with a POSIX-style time zone string for locations that end up in permanent DST (thanks to Andreas Schwab). Notes: svn path=/stable/7/; revision=196683
* - MFC r194583:Stanislav Sedov2009-08-151-5/+9
| | | | | | | | | Fix strncmp on arm. Return 0 as result without performing the main cycle only if the len passed is equal to 0. If end address overflows use last possible address as the end address. Notes: svn path=/stable/7/; revision=196249
generated by cgit v1.3 (git 2.53.0) at 2026-08-01 00:12:09 +0000