aboutsummaryrefslogtreecommitdiff
path: root/sys
Commit message (Collapse)AuthorAgeFilesLines
* Correct a remote denial-of-service attack in named(8).releng/4.5Jacques Vidrine2003-11-271-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=123008
* MFS 1.10.2.5: Unbreak read/write behavior (introduced in previous revision).Jacques Vidrine2003-10-041-3/+1
| | | | Notes: svn path=/releng/4.5/; revision=120752
* Merge from RELENG_4: kern_subr.c 1.31.2.3, procfs_dbregs.c 1.4.2.4,Jacques Vidrine2003-10-039-122/+44
| | | | | | | | | | procfs_fpregs.c 1.11.2.4, procfs_regs.c 1.10.2.4, procfs_rlimit.c 1.5.2.1, procfs_status.c 1.20.2.5, uio.h 1.11.2.2, linprocfs_misc.c 1.3.2.9. Correct several integer underflows/overflows in procfs and linprocfs. Notes: svn path=/releng/4.5/; revision=120689
* MFS 1.55.2.11: Correct a reference counting bug in readv(2).Jacques Vidrine2003-10-022-7/+7
| | | | Notes: svn path=/releng/4.5/; revision=120667
* Bump patch level for updated arplookup fix.Jacques Vidrine2003-09-251-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=120433
* Fix a logic error in the check to see if arplookup() should free the route.Bruce M Simpson2003-09-241-1/+1
| | | | | | | | Noticed by: Mike Hogsett Reviewed by: ru Notes: svn path=/releng/4.5/; revision=120420
* Fix a bug in arplookup(), whereby a hostile party on a locallyBruce M Simpson2003-09-232-7/+15
| | | | | | | | | | | attached network could exhaust kernel memory, and cause a system panic, by sending a flood of spoofed ARP requests. Approved by: security-officer, jake (mentor) Reported by: Apple Product Security <product-security@apple.com> Notes: svn path=/releng/4.5/; revision=120385
* MFC: sendmail address parsing bug fixGregory Neil Shapiro2003-09-171-1/+1
| | | | | | | Approved by: so (nectar) Notes: svn path=/releng/4.5/; revision=120179
* MFC buffer.c 1.2, channels.c 1.16, deattack.c 1.1.1.6, misc.c 1.1.1.5,Jacques Vidrine2003-09-171-1/+1
| | | | | | | | session.c 1.41, ssh-agent.c 1.19: Correct more cases of allocation size bookkeeping errors. Notes: svn path=/releng/4.5/; revision=120167
* MFC buffer.c 1.1.1.7: Do not record expanded size before attempting toJacques Vidrine2003-09-161-1/+1
| | | | | | | reallocate associated memory. Notes: svn path=/releng/4.5/; revision=120133
* Merge from RELENG_4_7 1.51.2.4.2.2:Jacques Vidrine2003-08-121-1/+1
| | | | | | | Fix typo: `uap->data' versus `data'. Notes: svn path=/releng/4.5/; revision=118841
* MFC 1.24: Validate the iBCS2 statfs(2) length parameter.Jacques Vidrine2003-08-102-1/+5
| | | | Notes: svn path=/releng/4.5/; revision=118755
* MFC sys_process.c 1.113, spigot.c 1.60:Jacques Vidrine2003-08-103-2/+5
| | | | | | | | Add or correct range checking of signal numbers in system calls and ioctls. Notes: svn path=/releng/4.5/; revision=118753
* realpath(3) bug fix: There was an off-by-one error in computing theJacques Vidrine2003-08-031-1/+1
| | | | | | | size of the resulting canonical path. Notes: svn path=/releng/4.5/; revision=118401
* sendmail parsing buffer overflow fixGregory Neil Shapiro2003-03-291-1/+1
| | | | | | | | | Advisory number to be filled in later Approved by: so (nectar) Notes: svn path=/releng/4.5/; revision=112818
* FreeBSD-SA-03:04.sendmail: sendmail header parsing buffer overflowGregory Neil Shapiro2003-03-031-1/+1
| | | | | | | Approved by: security-officer (nectar) Notes: svn path=/releng/4.5/; revision=111828
* MFC 1.114: Fix a file descriptor leak in fpathconf(2).Jacques Vidrine2003-01-072-5/+7
| | | | Notes: svn path=/releng/4.5/; revision=108880
* Correct recent name server vulnerabilities as documented atJacques Vidrine2002-11-141-1/+1
| | | | | | | | | | <URL:http://www.isc.org/products/BIND/bind-security.html> and <URL:http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469>. Obtained from: ISC Notes: svn path=/releng/4.5/; revision=106889
* MFC: Fix smrsh bypass bug.Gregory Neil Shapiro2002-10-261-1/+1
| | | | | | | Approved by: security-officer Notes: svn path=/releng/4.5/; revision=106004
* Update UPDATING and bump patch level for kadmind fix.Chris D. Faulhaber2002-10-231-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=105796
* MFC src/lib/libkvm/kvm.c 1.23: mark file descriptors close-on-exec.Jacques Vidrine2002-09-131-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=103292
* MFC of upc_syscalls:1.123,1.124 and vesa.c:1.37.Jacques Vidrine2002-08-133-2/+14
| | | | | | | Submitted by: Silvio Cesare <silvio@qualys.com> (1.123, 1.37) Notes: svn path=/releng/4.5/; revision=101797
* MFC src/crypto/openssl/crypto/asn1/asn1_lib.c rev 1.1.1.6:Jacques Vidrine2002-08-051-1/+1
| | | | | | | Correct a bug in the ASN.1 decoder. Notes: svn path=/releng/4.5/; revision=101389
* MFS: check far end of pipe.Dag-Erling Smørgrav2002-08-052-1/+4
| | | | Notes: svn path=/releng/4.5/; revision=101384
* Update UPDATING and bump patch level for NFS fix.Dag-Erling Smørgrav2002-08-011-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=101188
* MFC (1.78): avoid infinite loop upon receipt of zero-length RPCDag-Erling Smørgrav2002-08-011-1/+5
| | | | Notes: svn path=/releng/4.5/; revision=101179
* The fix applied to the XDR decoder in lib/libc/xdr/xdr_array.c revisionJacques Vidrine2002-08-011-1/+1
| | | | | | | 1.8.8.1 was incorrect. Notes: svn path=/releng/4.5/; revision=101150
* Correct bounds checking error in FFS filesize limits.Chris D. Faulhaber2002-07-312-1/+4
| | | | Notes: svn path=/releng/4.5/; revision=101098
* MFC: OpenSSL 0.9.6eJacques Vidrine2002-07-311-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=101056
* MFC lib/libc/xdr/xdr_array.c 1.11: Patch to fix bounds checking/overflow.Jacques Vidrine2002-07-311-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=101051
* MFC 1.20: Use fchmod() to restore the tty modes.Jacques Vidrine2002-07-301-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=100965
* MFC sys/kern/kern_exec.c 1.178: Fix ordering of set-(user|group)-ID checks.Jacques Vidrine2002-07-302-2/+3
| | | | Notes: svn path=/releng/4.5/; revision=100952
* Bump patchlevel to reflect upgrade to BIND 8.3.3Doug Barton2002-07-181-1/+1
| | | | | | | Approved by: security-officer Notes: svn path=/releng/4.5/; revision=100300
* Bump patch level for the ktrace issue. I intentionally did not do thisDag-Erling Smørgrav2002-07-111-1/+1
| | | | | | | for RELENG_4_6, then unintentionally forgot for RELENG_4_5. Notes: svn path=/releng/4.5/; revision=99780
* MFS: prevent tracing of previously privileged processes.Dag-Erling Smørgrav2002-07-111-1/+2
| | | | Notes: svn path=/releng/4.5/; revision=99778
* MFC: fix libc resolver buffer overflow.Jacques Vidrine2002-06-261-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=98889
* MFC src/sys/kern/uipc_socket.c rev 1.116Jacques Vidrine2002-05-282-3/+8
| | | | | | | | | | src/sys/kern/uipc_socket2.c rev 1.87, 1.94 Make sure that sockets undergoing accept filtering are aborted in a LRU fashion when the listen queue fills up. Notes: svn path=/releng/4.5/; revision=97415
* Bump patch level.Jacques Vidrine2002-05-281-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=97414
* Bump patch level for k5su issue.Jacques Vidrine2002-05-151-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=96665
* Fix bogon introduced when MFCing: In FreeBSD 4.x, the second argumentJacques Vidrine2002-04-221-1/+1
| | | | | | | to vn_open is type `int', not `int *'. Notes: svn path=/releng/4.5/; revision=95279
* MFC 1.137 src/sys/kern/kern_descrip.cJacques Vidrine2002-04-214-1/+64
| | | | | | | | | | | | 1.162 src/sys/kern/kern_exec.c 1.41 src/sys/sys/filedesc.h When exec'ing a set[ug]id program, make sure that the stdio file descriptors (0, 1, 2) are allocated by opening /dev/null for any which are not already open. Notes: svn path=/releng/4.5/; revision=95206
* Note fixes for:Jacques Vidrine2002-04-161-1/+1
| | | | | | | | | = IP routing table leak in icmp_relect(). = mmap/msync bug which can panic the kernel. = TCP broadcast connection bug. Notes: svn path=/releng/4.5/; revision=94877
* MFC 1.148, 1.149: The TCP code did not do sufficient checks on whetherJacques Vidrine2002-04-151-7/+8
| | | | | | | incoming packets were destined for a broadcast IP address. Notes: svn path=/releng/4.5/; revision=94783
* MFC 1.213: Fix mmap/msync bug which can panic the kernel.Jacques Vidrine2002-04-151-1/+4
| | | | Notes: svn path=/releng/4.5/; revision=94782
* MFC ip_icmp.c 1.69, ip_mroute.c 1.72, ip_output.c 1.153:Jacques Vidrine2002-04-153-9/+8
| | | | | | | Fixed IP routing table leak in icmp_reflect(). Notes: svn path=/releng/4.5/; revision=94780
* Back out until it passes by re.Coleman Kane2002-04-122-52/+7
| | | | Notes: svn path=/releng/4.5/; revision=94529
* This should fix the lock-ups associated with AGP and AMD761 chips.Coleman Kane2002-04-122-7/+52
| | | | | | | | | | The previous revision was rather hastily MFC'd before the 761 got any real testing. Obtained from: Eirc Anholt <eanholt@gladstone.uoregon.edu> Notes: svn path=/releng/4.5/; revision=94528
* MFC 1.12: correct bug introduced in 1.11 where ZFREE was moved to aChris D. Faulhaber2002-03-241-2/+6
| | | | | | | | | point after the structural members were clobbered by stores into a union'd structure. MFC 1.13: correct deflate window size check. Notes: svn path=/releng/4.5/; revision=93114
* Bump patch level for FreeBSD-SA-02:13 (OpenSSH off-by-one bug).Jacques Vidrine2002-03-071-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=91811
* Bump patch level (-p1) for zlib and syncache fixes and bzip2 update.Chris D. Faulhaber2002-02-231-1/+1
| | | | Notes: svn path=/releng/4.5/; revision=91149