src

Checkout Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
document some patches

tweak updating

A function extracting the length from type-length-value encoding is not

properly validating the submitted length.

A function extracting the length from type-length-value encoding is not

properly validating the submitted length.

update

update build config

    • -62
    • +268
    /trunk/crypto/openssh/config.h
update config for ssh builds

    • -7
    • +10
    /trunk/secure/usr.sbin/sshd/Makefile
    • -11
    • +15
    /trunk/secure/lib/libssh/Makefile
update

    • -1285
    • +8
    /trunk/crypto/openssh/umac128.c
update to 7.9p1

    • -12
    • +14
    /trunk/crypto/openssh/monitor_wrap.h
    • -73
    • +109
    /trunk/crypto/openssh/auth2-gss.c
    • -142
    • +435
    /trunk/crypto/openssh/auth.c
    • -10
    • +18
    /trunk/crypto/openssh/openbsd-compat/port-aix.c
    • -508
    • +457
    /trunk/crypto/openssh/ssh.c
    • -126
    • +93
    /trunk/crypto/openssh/ttymodes.c
    • -0
    • +374
    /trunk/crypto/openssh/openbsd-compat/port-net.c
  1. … 363 more files in changeset.
fix a bug where some devices lie about support

    • -11
    • +21
    /trunk/sys/dev/jedec_dimm/jedec_dimm.c
update to 1.0.7

    • -1
    • +1
    /stable/1.1/contrib/bzip2/bzip2recover.c
    • too large
    /stable/1.1/contrib/bzip2/sample2.ref.gz.uu
    • -0
    • +9
    /stable/1.1/contrib/bzip2/sample3.bz2.uu
    • -0
    • +1642
    /stable/1.1/contrib/bzip2/sample2.bz2.uu
    • -0
    • +722
    /stable/1.1/contrib/bzip2/sample1.bz2.uu
update bzip2

    • -9
    • +0
    /stable/1.1/contrib/bzip2/sample3.bz2.uu
    • too large
    /stable/1.1/contrib/bzip2/manual.xml
    • too large
    /stable/1.1/contrib/bzip2/sample3.ref
    • -4
    • +6
    /stable/1.1/contrib/bzip2/bzip2recover.c
    • binary
    /stable/1.1/contrib/bzip2/manual.ps
    • -0
    • +68
    /stable/1.1/contrib/bzip2/format.pl
  1. … 42 more files in changeset.
update files

    • -15
    • +0
    /trunk/contrib/bzip2/Makefile-libbz2_so
    • -0
    • +1642
    /trunk/contrib/bzip2/sample2.bz2.uu
    • too large
    /trunk/contrib/bzip2/manual.html
    • too large
    /trunk/contrib/bzip2/sample2.ref.gz.uu
    • -399
    • +0
    /trunk/contrib/bzip2/bzip2.1.preformatted
  1. … 29 more files in changeset.
update bzip2

    • -1934
    • +0
    /trunk/contrib/bzip2/sample2.ref.gz.uu
    • -0
    • +399
    /trunk/contrib/bzip2/bzip2.1.preformatted
    • -0
    • +45
    /trunk/contrib/bzip2/README.XML.STUFF
  1. … 42 more files in changeset.
tag 1.0.7

    • -0
    • +516
    /vendor/bzip2/1.0.7/bzip2recover.c
    • -0
    • +58
    /vendor/bzip2/1.0.7/README.COMPILATION.PROBLEMS
    • too large
    /vendor/bzip2/1.0.7/manual.html
    • -0
    • +45
    /vendor/bzip2/1.0.7/README.XML.STUFF
    • -0
    • +646
    /vendor/bzip2/1.0.7/decompress.c
  1. … 42 more files in changeset.
Update bzip2 to 1.0.7

    • -0
    • +93
    /vendor/bzip2/dist/dlltest.dsp
    • -0
    • +0
    /vendor/bzip2/dist/bzdiff
    • too large
    /vendor/bzip2/dist/manual.html
    • binary
    /vendor/bzip2/dist/sample2.bz2
    • -0
    • +23
    /vendor/bzip2/dist/bz-html.xsl
    • -0
    • +31
    /vendor/bzip2/dist/mk251.c
    • -0
    • +47
    /vendor/bzip2/dist/bzdiff.1
    • -0
    • +45
    /vendor/bzip2/dist/README.XML.STUFF
    • -0
    • +56
    /vendor/bzip2/dist/bzgrep.1
  1. … 41 more files in changeset.
fix path for perl

update path for 5.28.0

bump version for security patches

If a process attempts to transmit rights over a UNIX-domain socket and

an error causes the attempt to fail, references acquired on the rights

are not released and are leaked. This bug can be used to cause the

reference counter to wrap around and free the corresponding file

structure.

If a process attempts to transmit rights over a UNIX-domain socket and

an error causes the attempt to fail, references acquired on the rights

are not released and are leaked. This bug can be used to cause the

reference counter to wrap around and free the corresponding file

structure.

document mqueuefs(5) issue

System calls operating on file descriptors obtain a reference to

relevant struct file which due to a programming error was not always put

back, which in turn could be used to overflow the counter of affected

struct file.

System calls operating on file descriptors obtain a reference to

relevant struct file which due to a programming error was not always put

back, which in turn could be used to overflow the counter of affected

struct file.

Due to insufficient initialization of memory copied to userland in the

components listed above small amounts of kernel memory may be disclosed

to userland processes.

document compat issue

Due to insufficient initialization of memory copied to userland in the

components listed above small amounts of kernel memory may be disclosed

to userland processes.

The code which handles a close(2) of a descriptor created by

posix_openpt(2) fails to undo the configuration which causes SIGIO to be

raised. This bug can lead to a write-after-free of kernel memory.

The code which handles a close(2) of a descriptor created by

posix_openpt(2) fails to undo the configuration which causes SIGIO to be

raised. This bug can lead to a write-after-free of kernel memory.

Fix some buffer overflows in telnet client.

    • -4
    • +8
    /trunk/contrib/telnet/telnet/commands.c
    • -1
    • +1
    /trunk/contrib/telnet/telnet/utilities.c