svn commit: r294929 - in user/cperciva/freebsd-update-build/patches: 10.1-RELEASE 10.2-RELEASE 9.3-RELEASE
Gleb Smirnoff
glebius at FreeBSD.org
Wed Jan 27 17:53:28 UTC 2016
Author: glebius
Date: Wed Jan 27 17:53:26 2016
New Revision: 294929
URL: https://svnweb.freebsd.org/changeset/base/294929
Log:
Add patches for the last update batch.
Added:
user/cperciva/freebsd-update-build/patches/10.1-RELEASE/27-SA-16:07.openssh
user/cperciva/freebsd-update-build/patches/10.1-RELEASE/28-SA-16:09.ntp
user/cperciva/freebsd-update-build/patches/10.1-RELEASE/28-SA-16:10.linux
user/cperciva/freebsd-update-build/patches/10.2-RELEASE/10-SA-16:07.openssh
user/cperciva/freebsd-update-build/patches/10.2-RELEASE/11-SA-16:09.ntp
user/cperciva/freebsd-update-build/patches/10.2-RELEASE/11-SA-16:10.linux
user/cperciva/freebsd-update-build/patches/9.3-RELEASE/34-SA-16:07.openssh
user/cperciva/freebsd-update-build/patches/9.3-RELEASE/35-SA-16:08.bind
user/cperciva/freebsd-update-build/patches/9.3-RELEASE/35-SA-16:09.ntp
user/cperciva/freebsd-update-build/patches/9.3-RELEASE/35-SA-16:10.linux
Added: user/cperciva/freebsd-update-build/patches/10.1-RELEASE/27-SA-16:07.openssh
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ user/cperciva/freebsd-update-build/patches/10.1-RELEASE/27-SA-16:07.openssh Wed Jan 27 17:53:26 2016 (r294929)
@@ -0,0 +1,21 @@
+--- crypto/openssh/readconf.c.orig
++++ crypto/openssh/readconf.c
+@@ -1610,7 +1610,7 @@
+ options->tun_remote = -1;
+ options->local_command = NULL;
+ options->permit_local_command = -1;
+- options->use_roaming = -1;
++ options->use_roaming = 0;
+ options->visual_host_key = -1;
+ options->ip_qos_interactive = -1;
+ options->ip_qos_bulk = -1;
+@@ -1788,8 +1788,7 @@
+ options->tun_remote = SSH_TUNID_ANY;
+ if (options->permit_local_command == -1)
+ options->permit_local_command = 0;
+- if (options->use_roaming == -1)
+- options->use_roaming = 1;
++ options->use_roaming = 0;
+ if (options->visual_host_key == -1)
+ options->visual_host_key = 0;
+ if (options->ip_qos_interactive == -1)
Added: user/cperciva/freebsd-update-build/patches/10.1-RELEASE/28-SA-16:09.ntp
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ user/cperciva/freebsd-update-build/patches/10.1-RELEASE/28-SA-16:09.ntp Wed Jan 27 17:53:26 2016 (r294929)
@@ -0,0 +1,17352 @@
+Index: contrib/ntp/ChangeLog
+===================================================================
+--- contrib/ntp/ChangeLog (revision 294707)
++++ contrib/ntp/ChangeLog (working copy)
+@@ -1,4 +1,38 @@
+ ---
++(4.2.8p6) 2016/01/20 Released by Harlan Stenn <stenn at ntp.org>
++
++* [Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode. HStenn.
++* [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++* [Sec 2937] ntpq: nextvar() missing length check. perlinger at ntp.org
++* [Sec 2938] ntpq saveconfig command allows dangerous characters
++ in filenames. perlinger at ntp.org
++* [Sec 2939] reslist NULL pointer dereference. perlinger at ntp.org
++* [Sec 2940] Stack exhaustion in recursive traversal of restriction
++ list. perlinger at ntp.org
++* [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++* [Sec 2945] Zero Origin Timestamp Bypass. perlinger at ntp.org
++* [Sec 2948] Potential Infinite Loop in ntpq ( and ntpdc) perlinger at ntp.org
++* [Bug 2772] adj_systime overflows tv_usec. perlinger at ntp.org
++* [Bug 2814] msyslog deadlock when signaled. perlinger at ntp.org
++ - applied patch by shenpeng11 at huawei.com with minor adjustments
++* [Bug 2882] Look at ntp_request.c:list_peers_sum(). perlinger at ntp.org
++* [Bug 2891] Deadlock in deferred DNS lookup framework. perlinger at ntp.org
++* [Bug 2892] Several test cases assume IPv6 capabilities even when
++ IPv6 is disabled in the build. perlinger at ntp.org
++ - Found this already fixed, but validation led to cleanup actions.
++* [Bug 2905] DNS lookups broken. perlinger at ntp.org
++ - added limits to stack consumption, fixed some return code handling
++* [Bug 2971] ntpq bails on ^C: select fails: Interrupted system call
++ - changed stacked/nested handling of CTRL-C. perlinger at ntp.org
++ - make CTRL-C work for retrieval and printing od MRU list. perlinger at ntp.org
++* [Bug 2980] reduce number of warnings. perlinger at ntp.org
++ - integrated several patches from Havard Eidnes (he at uninett.no)
++* [Bug 2985] bogus calculation in authkeys.c perlinger at ntp.org
++ - implement 'auth_log2()' using integer bithack instead of float calculation
++* Make leapsec_query debug messages less verbose. Harlan Stenn.
++* Disable incomplete t-ntp_signd.c test. Harlan Stenn.
++
++---
+ (4.2.8p5) 2016/01/07 Released by Harlan Stenn <stenn at ntp.org>
+
+ * [Sec 2956] small-step/big-step. Close the panic gate earlier. HStenn.
+@@ -47,6 +81,7 @@
+ lots of clients. perlinger at ntp.org
+ * [Bug 2971] ntpq bails on ^C: select fails: Interrupted system call
+ - changed stacked/nested handling of CTRL-C. perlinger at ntp.org
++ - make CTRL-C work for retrieval and printing od MRU list. perlinger at ntp.org
+ * Unity cleanup for FreeBSD-6.4. Harlan Stenn.
+ * Unity test cleanup. Harlan Stenn.
+ * Libevent autoconf pthread fixes for FreeBSD-10. Harlan Stenn.
+@@ -55,9 +90,8 @@
+ * Quiet a warning from clang. Harlan Stenn.
+ * Update the NEWS file. Harlan Stenn.
+ * Update scripts/calc_tickadj/Makefile.am. Harlan Stenn.
++
+ ---
+-(4.2.8p4) 2015/10/21 Released by Harlan Stenn <stenn at ntp.org>
+-(4.2.8p4-RC1) 2015/10/06 Released by Harlan Stenn <stenn at ntp.org>
+
+ * [Sec 2899] CVE-2014-9297 perlinger at ntp.org
+ * [Sec 2901] Drop invalid packet before checking KoD. Check for all KoD's.
+Index: contrib/ntp/CommitLog
+===================================================================
+--- contrib/ntp/CommitLog (revision 294707)
++++ contrib/ntp/CommitLog (working copy)
+@@ -1,8 +1,633 @@
+-ChangeSet at 1.3623, 2016-01-07 23:33:11+00:00, stenn at deacon.udel.edu
++ChangeSet at 1.3628, 2016-01-20 04:20:12-05:00, stenn at deacon.udel.edu
++ NTP_4_2_8P6
++ TAG: NTP_4_2_8P6
++
++ ChangeLog at 1.1793 +1 -0
++ NTP_4_2_8P6
++
++ ntpd/invoke-ntp.conf.texi at 1.196 +1 -1
++ NTP_4_2_8P6
++
++ ntpd/invoke-ntp.keys.texi at 1.188 +1 -1
++ NTP_4_2_8P6
++
++ ntpd/invoke-ntpd.texi at 1.504 +2 -2
++ NTP_4_2_8P6
++
++ ntpd/ntp.conf.5man at 1.230 +3 -3
++ NTP_4_2_8P6
++
++ ntpd/ntp.conf.5mdoc at 1.230 +2 -3
++ NTP_4_2_8P6
++
++ ntpd/ntp.conf.html at 1.183 +60 -2
++ NTP_4_2_8P6
++
++ ntpd/ntp.conf.man.in at 1.230 +3 -3
++ NTP_4_2_8P6
++
++ ntpd/ntp.conf.mdoc.in at 1.230 +2 -3
++ NTP_4_2_8P6
++
++ ntpd/ntp.keys.5man at 1.222 +2 -2
++ NTP_4_2_8P6
++
++ ntpd/ntp.keys.5mdoc at 1.222 +3 -3
++ NTP_4_2_8P6
++
++ ntpd/ntp.keys.html at 1.184 +21 -33
++ NTP_4_2_8P6
++
++ ntpd/ntp.keys.man.in at 1.222 +2 -2
++ NTP_4_2_8P6
++
++ ntpd/ntp.keys.mdoc.in at 1.222 +3 -3
++ NTP_4_2_8P6
++
++ ntpd/ntpd-opts.c at 1.526 +10 -10
++ NTP_4_2_8P6
++
++ ntpd/ntpd-opts.h at 1.525 +4 -4
++ NTP_4_2_8P6
++
++ ntpd/ntpd.1ntpdman at 1.333 +4 -4
++ NTP_4_2_8P6
++
++ ntpd/ntpd.1ntpdmdoc at 1.333 +3 -3
++ NTP_4_2_8P6
++
++ ntpd/ntpd.html at 1.177 +2 -2
++ NTP_4_2_8P6
++
++ ntpd/ntpd.man.in at 1.333 +4 -4
++ NTP_4_2_8P6
++
++ ntpd/ntpd.mdoc.in at 1.333 +3 -3
++ NTP_4_2_8P6
++
++ ntpdc/invoke-ntpdc.texi at 1.501 +2 -2
++ NTP_4_2_8P6
++
++ ntpdc/ntpdc-opts.c at 1.519 +10 -10
++ NTP_4_2_8P6
++
++ ntpdc/ntpdc-opts.h at 1.518 +4 -4
++ NTP_4_2_8P6
++
++ ntpdc/ntpdc.1ntpdcman at 1.332 +4 -4
++ NTP_4_2_8P6
++
++ ntpdc/ntpdc.1ntpdcmdoc at 1.332 +3 -3
++ NTP_4_2_8P6
++
++ ntpdc/ntpdc.html at 1.345 +2 -2
++ NTP_4_2_8P6
++
++ ntpdc/ntpdc.man.in at 1.332 +4 -4
++ NTP_4_2_8P6
++
++ ntpdc/ntpdc.mdoc.in at 1.332 +3 -3
++ NTP_4_2_8P6
++
++ ntpq/invoke-ntpq.texi at 1.508 +2 -2
++ NTP_4_2_8P6
++
++ ntpq/ntpq-opts.c at 1.525 +10 -10
++ NTP_4_2_8P6
++
++ ntpq/ntpq-opts.h at 1.523 +4 -4
++ NTP_4_2_8P6
++
++ ntpq/ntpq.1ntpqman at 1.336 +4 -4
++ NTP_4_2_8P6
++
++ ntpq/ntpq.1ntpqmdoc at 1.336 +3 -3
++ NTP_4_2_8P6
++
++ ntpq/ntpq.html at 1.174 +2 -2
++ NTP_4_2_8P6
++
++ ntpq/ntpq.man.in at 1.336 +4 -4
++ NTP_4_2_8P6
++
++ ntpq/ntpq.mdoc.in at 1.336 +3 -3
++ NTP_4_2_8P6
++
++ ntpsnmpd/invoke-ntpsnmpd.texi at 1.503 +2 -2
++ NTP_4_2_8P6
++
++ ntpsnmpd/ntpsnmpd-opts.c at 1.521 +10 -10
++ NTP_4_2_8P6
++
++ ntpsnmpd/ntpsnmpd-opts.h at 1.520 +4 -4
++ NTP_4_2_8P6
++
++ ntpsnmpd/ntpsnmpd.1ntpsnmpdman at 1.332 +4 -4
++ NTP_4_2_8P6
++
++ ntpsnmpd/ntpsnmpd.1ntpsnmpdmdoc at 1.332 +3 -3
++ NTP_4_2_8P6
++
++ ntpsnmpd/ntpsnmpd.html at 1.172 +1 -1
++ NTP_4_2_8P6
++
++ ntpsnmpd/ntpsnmpd.man.in at 1.332 +4 -4
++ NTP_4_2_8P6
++
++ ntpsnmpd/ntpsnmpd.mdoc.in at 1.332 +3 -3
++ NTP_4_2_8P6
++
++ packageinfo.sh at 1.524 +2 -2
++ NTP_4_2_8P6
++
++ scripts/calc_tickadj/calc_tickadj.1calc_tickadjman at 1.93 +3 -3
++ NTP_4_2_8P6
++
++ scripts/calc_tickadj/calc_tickadj.1calc_tickadjmdoc at 1.94 +2 -2
++ NTP_4_2_8P6
++
++ scripts/calc_tickadj/calc_tickadj.html at 1.95 +1 -1
++ NTP_4_2_8P6
++
++ scripts/calc_tickadj/calc_tickadj.man.in at 1.92 +3 -3
++ NTP_4_2_8P6
++
++ scripts/calc_tickadj/calc_tickadj.mdoc.in at 1.94 +2 -2
++ NTP_4_2_8P6
++
++ scripts/calc_tickadj/invoke-calc_tickadj.texi at 1.97 +1 -1
++ NTP_4_2_8P6
++
++ scripts/invoke-plot_summary.texi at 1.114 +2 -2
++ NTP_4_2_8P6
++
++ scripts/invoke-summary.texi at 1.114 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntp-wait/invoke-ntp-wait.texi at 1.324 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntp-wait/ntp-wait-opts at 1.60 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntp-wait/ntp-wait.1ntp-waitman at 1.321 +3 -3
++ NTP_4_2_8P6
++
++ scripts/ntp-wait/ntp-wait.1ntp-waitmdoc at 1.322 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntp-wait/ntp-wait.html at 1.341 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntp-wait/ntp-wait.man.in at 1.321 +3 -3
++ NTP_4_2_8P6
++
++ scripts/ntp-wait/ntp-wait.mdoc.in at 1.322 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntpsweep/invoke-ntpsweep.texi at 1.112 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntpsweep/ntpsweep-opts at 1.62 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntpsweep/ntpsweep.1ntpsweepman at 1.100 +3 -3
++ NTP_4_2_8P6
++
++ scripts/ntpsweep/ntpsweep.1ntpsweepmdoc at 1.100 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntpsweep/ntpsweep.html at 1.113 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntpsweep/ntpsweep.man.in at 1.100 +3 -3
++ NTP_4_2_8P6
++
++ scripts/ntpsweep/ntpsweep.mdoc.in at 1.101 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntptrace/invoke-ntptrace.texi at 1.113 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntptrace/ntptrace-opts at 1.62 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntptrace/ntptrace.1ntptraceman at 1.100 +3 -3
++ NTP_4_2_8P6
++
++ scripts/ntptrace/ntptrace.1ntptracemdoc at 1.101 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntptrace/ntptrace.html at 1.114 +2 -2
++ NTP_4_2_8P6
++
++ scripts/ntptrace/ntptrace.man.in at 1.100 +3 -3
++ NTP_4_2_8P6
++
++ scripts/ntptrace/ntptrace.mdoc.in at 1.102 +2 -2
++ NTP_4_2_8P6
++
++ scripts/plot_summary-opts at 1.62 +2 -2
++ NTP_4_2_8P6
++
++ scripts/plot_summary.1plot_summaryman at 1.112 +3 -3
++ NTP_4_2_8P6
++
++ scripts/plot_summary.1plot_summarymdoc at 1.112 +2 -2
++ NTP_4_2_8P6
++
++ scripts/plot_summary.html at 1.115 +2 -2
++ NTP_4_2_8P6
++
++ scripts/plot_summary.man.in at 1.112 +3 -3
++ NTP_4_2_8P6
++
++ scripts/plot_summary.mdoc.in at 1.112 +2 -2
++ NTP_4_2_8P6
++
++ scripts/summary-opts at 1.62 +2 -2
++ NTP_4_2_8P6
++
++ scripts/summary.1summaryman at 1.112 +3 -3
++ NTP_4_2_8P6
++
++ scripts/summary.1summarymdoc at 1.112 +2 -2
++ NTP_4_2_8P6
++
++ scripts/summary.html at 1.115 +2 -2
++ NTP_4_2_8P6
++
++ scripts/summary.man.in at 1.112 +3 -3
++ NTP_4_2_8P6
++
++ scripts/summary.mdoc.in at 1.112 +2 -2
++ NTP_4_2_8P6
++
++ scripts/update-leap/invoke-update-leap.texi at 1.13 +1 -1
++ NTP_4_2_8P6
++
++ scripts/update-leap/update-leap-opts at 1.13 +2 -2
++ NTP_4_2_8P6
++
++ scripts/update-leap/update-leap.1update-leapman at 1.13 +3 -3
++ NTP_4_2_8P6
++
++ scripts/update-leap/update-leap.1update-leapmdoc at 1.13 +2 -2
++ NTP_4_2_8P6
++
++ scripts/update-leap/update-leap.html at 1.13 +1 -1
++ NTP_4_2_8P6
++
++ scripts/update-leap/update-leap.man.in at 1.13 +3 -3
++ NTP_4_2_8P6
++
++ scripts/update-leap/update-leap.mdoc.in at 1.13 +2 -2
++ NTP_4_2_8P6
++
++ sntp/invoke-sntp.texi at 1.501 +2 -2
++ NTP_4_2_8P6
++
++ sntp/sntp-opts.c at 1.520 +10 -10
++ NTP_4_2_8P6
++
++ sntp/sntp-opts.h at 1.518 +4 -4
++ NTP_4_2_8P6
++
++ sntp/sntp.1sntpman at 1.336 +4 -4
++ NTP_4_2_8P6
++
++ sntp/sntp.1sntpmdoc at 1.336 +3 -3
++ NTP_4_2_8P6
++
++ sntp/sntp.html at 1.516 +2 -2
++ NTP_4_2_8P6
++
++ sntp/sntp.man.in at 1.336 +4 -4
++ NTP_4_2_8P6
++
++ sntp/sntp.mdoc.in at 1.336 +3 -3
++ NTP_4_2_8P6
++
++ util/invoke-ntp-keygen.texi at 1.504 +2 -2
++ NTP_4_2_8P6
++
++ util/ntp-keygen-opts.c at 1.522 +10 -10
++ NTP_4_2_8P6
++
++ util/ntp-keygen-opts.h at 1.520 +4 -4
++ NTP_4_2_8P6
++
++ util/ntp-keygen.1ntp-keygenman at 1.332 +4 -4
++ NTP_4_2_8P6
++
++ util/ntp-keygen.1ntp-keygenmdoc at 1.332 +3 -3
++ NTP_4_2_8P6
++
++ util/ntp-keygen.html at 1.178 +2 -2
++ NTP_4_2_8P6
++
++ util/ntp-keygen.man.in at 1.332 +4 -4
++ NTP_4_2_8P6
++
++ util/ntp-keygen.mdoc.in at 1.332 +3 -3
++ NTP_4_2_8P6
++
++ChangeSet at 1.3627, 2016-01-20 04:14:51-05:00, stenn at deacon.udel.edu
++ solaris hack
++
++ libntp/work_thread.c at 1.20 +2 -0
++ solaris hack
++
++ChangeSet at 1.3626, 2016-01-20 01:50:09-05:00, stenn at deacon.udel.edu
++ 4.2.8p6
++
++ packageinfo.sh at 1.523 +1 -1
++ 4.2.8p6
++
++ChangeSet at 1.3625, 2016-01-20 00:34:15+00:00, stenn at psp-deb1.ntp.org
++ updates
++
++ NEWS at 1.160 +24 -24
++ updates
++
++ChangeSet at 1.3624, 2016-01-19 22:28:41+00:00, stenn at psp-deb1.ntp.org
++ typo
++
++ NEWS at 1.159 +1 -1
++ typo
++
++ChangeSet at 1.3623, 2016-01-18 11:55:56+00:00, stenn at psp-deb1.ntp.org
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ChangeLog at 1.1792 +1 -0
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ NEWS at 1.158 +40 -0
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ include/Makefile.am at 1.54 +1 -0
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ include/ntp_io.h at 1.23 +2 -1
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ include/ntp_keyacc.h at 1.1 +13 -0
++ BitKeeper file /home/stenn/ntp-stable-2936/include/ntp_keyacc.h
++
++ include/ntp_keyacc.h at 1.0 +0 -0
++
++ include/ntp_stdlib.h at 1.81 +4 -1
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ include/ntp_types.h at 1.36 +1 -0
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ libntp/Makefile.am at 1.77 +1 -0
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ libntp/authkeys.c at 1.31 +60 -6
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ libntp/authreadkeys.c at 1.25 +50 -1
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ libntp/authusekey.c at 1.11 +1 -1
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ libntp/is_ip_address.c at 1.1 +129 -0
++ BitKeeper file /home/stenn/ntp-stable-2936/libntp/is_ip_address.c
++
++ libntp/is_ip_address.c at 1.0 +0 -0
++
++ ntpd/invoke-ntp.keys.texi at 1.187 +11 -3
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp.keys.5man at 1.221 +13 -5
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp.keys.5mdoc at 1.221 +14 -6
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp.keys.def at 1.11 +10 -2
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp.keys.html at 1.183 +42 -22
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp.keys.man.in at 1.221 +13 -5
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp.keys.mdoc.in at 1.221 +14 -6
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp_crypto.c at 1.186 +1 -1
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp_io.c at 1.412 +0 -72
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ ntpd/ntp_proto.c at 1.373 +34 -0
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ tests/libntp/authkeys.c at 1.15 +1 -1
++ [Sec 2936] Skeleton Key: Any trusted key system can serve time. HStenn.
++
++ChangeSet at 1.3622, 2016-01-17 09:03:57+00:00, stenn at psp-deb1.ntp.org
++ Disable incomplete t-ntp_signd.c test. Harlan Stenn.
++
++ ChangeLog at 1.1791 +1 -0
++ Disable incomplete t-ntp_signd.c test. Harlan Stenn.
++
++ tests/ntpd/t-ntp_signd.c at 1.16 +4 -0
++ Disable incomplete t-ntp_signd.c test. Harlan Stenn.
++
++ChangeSet at 1.3621, 2016-01-17 05:51:14+00:00, stenn at psp-deb1.ntp.org
++ Update NEWS file for 2942
++
++ NEWS at 1.157 +22 -0
++ Update NEWS file for 2942
++
++ChangeSet at 1.3615.13.1, 2016-01-17 05:07:22+00:00, stenn at psp-deb1.ntp.org
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ChangeLog at 1.1786.13.1 +4 -0
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ html/miscopt.html at 1.85 +11 -3
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ include/ntp.h at 1.213.1.1 +3 -0
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/invoke-ntp.conf.texi at 1.195 +64 -3
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/keyword-gen-utd at 1.27 +1 -1
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/keyword-gen.c at 1.33 +3 -0
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp.conf.5man at 1.229 +71 -7
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp.conf.5mdoc at 1.229 +71 -7
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp.conf.def at 1.21 +67 -4
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp.conf.man.in at 1.229 +71 -7
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp.conf.mdoc.in at 1.229 +71 -7
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp_config.c at 1.335.1.1 +12 -0
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp_keyword.h at 1.29 +505 -468
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp_parser.c at 1.101 +1762 -1513
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp_parser.h at 1.65 +257 -235
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp_parser.y at 1.91 +6 -0
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ ntpd/ntp_proto.c at 1.368.2.1 +40 -4
++ [Sec 2942]: Off-path DoS attack on auth broadcast mode. HStenn.
++
++ChangeSet at 1.3619, 2016-01-14 12:19:16+00:00, stenn at psp-at1.ntp.org
++ NEWS file updates
++
++ NEWS at 1.156 +21 -0
++ NEWS file updates
++
++ChangeSet at 1.3615.1.9, 2016-01-14 11:33:43+00:00, stenn at psp-at1.ntp.org
++ merge cleanup
++
++ ChangeLog at 1.1786.1.9 +3 -0
++ merge cleanup
++
++ChangeSet at 1.3615.1.5, 2016-01-14 10:44:13+00:00, stenn at psp-at1.ntp.org
++ merge cleanup
++
++ ChangeLog at 1.1786.1.5 +0 -1
++ merge cleanup
++
++ChangeSet at 1.3615.12.4, 2016-01-14 10:27:23+00:00, stenn at psp-at1.ntp.org
++ merge cleanup
++
++ ChangeLog at 1.1786.12.4 +1 -1
++ merge cleanup
++
++ChangeSet at 1.3615.12.2, 2016-01-14 09:49:52+00:00, stenn at psp-at1.ntp.org
++ merge cleanup
++
++ ChangeLog at 1.1786.12.2 +2 -2
++ merge cleanup
++
++ChangeSet at 1.3615.3.17, 2016-01-14 09:33:56+00:00, stenn at psp-at1.ntp.org
++ merge cleanup
++
++ ChangeLog at 1.1786.3.14 +1 -1
++ merge cleanup
++
++ChangeSet at 1.3615.3.14, 2016-01-14 07:36:57+00:00, stenn at psp-at1.ntp.org
++ NEWS update
++
++ NEWS at 1.155 +98 -7
++ NEWS update
++
++ChangeSet at 1.3615.3.12, 2016-01-13 08:07:30+00:00, stenn at psp-deb1.ntp.org
++ typo
++
++ ChangeLog at 1.1786.3.10 +1 -1
++ typo
++
++ChangeSet at 1.3615.3.10, 2016-01-13 06:08:29+00:00, stenn at psp-deb1.ntp.org
++ Update NEWS file for bug 2938
++
++ NEWS at 1.154 +29 -2
++ Update NEWS file for bug 2938
++
++ChangeSet at 1.3615.3.8, 2016-01-13 04:23:46+00:00, stenn at psp-deb1.ntp.org
++ Update NEWS file for bug 2935
++
++ NEWS at 1.153 +52 -0
++ Update NEWS file for bug 2935
++
++ChangeSet at 1.3615.7.12, 2016-01-12 09:53:06+00:00, stenn at psp-at1.ntp.org
++ [Sec 2935] use L_SUB instead of L_ISGT. Juergen Perlinger
++
++ ntpd/ntp_proto.c at 1.368.1.5 +4 -1
++ [Sec 2935] use L_SUB instead of L_ISGT. Juergen Perlinger
++
++ChangeSet at 1.3615.7.11, 2016-01-11 03:02:53-08:00, harlan at max.pfcs.com
++ [Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode.
++
++ ChangeLog at 1.1786.9.1 +4 -0
++ [Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode.
++
++ include/ntp.h at 1.215 +1 -0
++ [Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode.
++
++ ntpd/ntp_proto.c at 1.368.1.4 +67 -0
++ [Sec 2935] Deja Vu: Replay attack on authenticated broadcast mode.
++
++ChangeSet at 1.3615.7.10, 2016-01-11 02:44:25-08:00, harlan at max.pfcs.com
++ make leapsec_query messages less verbose.
++
++ ntpd/ntp_timer.c at 1.93.1.1 +6 -4
++ make leapsec_query messages less verbose.
++
++ChangeSet at 1.3615.9.1, 2016-01-11 10:26:12+01:00, jnperlin at hydra.localnet
++ [Bug 2985] bogus calculation in authkeys.c
++ - implement 'auth_log2()' using integer bithack instead of float calculation
++
++ ChangeLog at 1.1786.7.5 +2 -0
++ [Bug 2985] bogus calculation in authkeys.c
++ - implement 'auth_log2()' using integer bithack instead of float calculation
++
++ libntp/authkeys.c at 1.30 +33 -10
++ [Bug 2985] bogus calculation in authkeys.c
++ - implement 'auth_log2()' using integer bithack instead of float calculation
++
++ tests/libntp/authkeys.c at 1.14 +38 -0
++ [Bug 2985] bogus calculation in authkeys.c
++ - test bithack implementation of 'auth_log2()'
++
++ tests/libntp/run-authkeys.c at 1.12 +9 -6
++ [Bug 2985] bogus calculation in authkeys.c
++ - update auto-generated file
++
++ChangeSet at 1.3615.7.9, 2016-01-09 09:52:44+00:00, stenn at psp-at1.ntp.org
++ Add timelastrec to the peer structure
++
++ include/ntp.h at 1.214 +2 -1
++ Add timelastrec to the peer structure
++
++ChangeSet at 1.3615.3.6, 2016-01-08 10:00:03+00:00, stenn at psp-at1.ntp.org
++ 4.2.8p5 merge cleanup
++
++ ChangeLog at 1.1786.3.6 +1 -1
++ 4.2.8p5 merge cleanup
++
++ChangeSet at 1.3615.7.8, 2016-01-08 00:26:09+00:00, stenn at deacon.udel.edu
++ Update copyright year
++
++ sntp/include/copyright.def at 1.26 +1 -1
++ Update copyright year
++
++ChangeSet at 1.3615.7.7, 2016-01-07 23:33:11+00:00, stenn at deacon.udel.edu
+ NTP_4_2_8P5
+ TAG: NTP_4_2_8P5
+
+- ChangeLog at 1.1791 +1 -0
++ ChangeLog at 1.1786.7.4 +1 -0
+ NTP_4_2_8P5
+
+ ntpd/invoke-ntp.conf.texi at 1.194 +1 -1
+@@ -332,60 +957,349 @@
+ util/ntp-keygen.mdoc.in at 1.331 +2 -2
+ NTP_4_2_8P5
+
+-ChangeSet at 1.3622, 2016-01-07 17:52:24-05:00, stenn at deacon.udel.edu
++ChangeSet at 1.3615.7.6, 2016-01-07 17:52:24-05:00, stenn at deacon.udel.edu
+ ntp-4.2.8p5
+
+ packageinfo.sh at 1.521 +1 -1
+ ntp-4.2.8p5
+
+-ChangeSet at 1.3621, 2016-01-07 22:20:05+00:00, stenn at psp-at1.ntp.org
++ChangeSet at 1.3615.7.5, 2016-01-07 22:20:05+00:00, stenn at psp-at1.ntp.org
+ cleanup
+
+ NEWS at 1.152 +2 -2
+ cleanup
+
+-ChangeSet at 1.3620, 2016-01-07 09:33:11+00:00, stenn at psp-at1.ntp.org
++ChangeSet at 1.3615.7.4, 2016-01-07 09:33:11+00:00, stenn at psp-at1.ntp.org
+ typo in ntp_proto.c - leap smear. Reported by Martin Burnicki
+
+- ntpd/ntp_proto.c at 1.371 +1 -1
++ ntpd/ntp_proto.c at 1.368.1.3 +1 -1
+ typo in ntp_proto.c - leap smear. Reported by Martin Burnicki
+
+-ChangeSet at 1.3619, 2016-01-07 06:33:08+00:00, stenn at psp-at1.ntp.org
++ChangeSet at 1.3615.7.3, 2016-01-07 06:33:08+00:00, stenn at psp-at1.ntp.org
+ Update scripts/calc_tickadj/Makefile.am. Harlan Stenn.
+
+- ChangeLog at 1.1790 +1 -0
++ ChangeLog at 1.1786.7.3 +1 -0
+ Update scripts/calc_tickadj/Makefile.am. Harlan Stenn.
+
+ scripts/calc_tickadj/Makefile.am at 1.11 +2 -0
+ Update scripts/calc_tickadj/Makefile.am. Harlan Stenn.
+
+-ChangeSet at 1.3616.1.1, 2016-01-05 10:57:45+00:00, stenn at psp-at1.ntp.org
++ChangeSet at 1.3615.3.2, 2016-01-05 12:34:56+00:00, stenn at psp-at1.ntp.org
++ ntp-4.2.8p6
++
++ ChangeLog at 1.1786.3.2 +2 -0
++ ntp-4.2.8p6
++
++ChangeSet at 1.3615.8.1, 2016-01-05 10:57:45+00:00, stenn at psp-at1.ntp.org
+ Bug 2952 fixes
+
+- ChangeLog at 1.1787.1.1 +1 -0
++ ChangeLog at 1.1786.8.1 +1 -0
+ Bug 2952 fixes
+
+- ntpd/ntp_proto.c at 1.370 +165 -152
++ ntpd/ntp_proto.c at 1.368.1.2 +165 -152
+ Bug 2952 fixes
+
+-ChangeSet at 1.3617, 2016-01-05 09:56:31+00:00, stenn at psp-at1.ntp.org
++ChangeSet at 1.3615.7.1, 2016-01-05 09:56:31+00:00, stenn at psp-at1.ntp.org
+ ntp-4.2.8p5 prep
+
+- ChangeLog at 1.1788 +2 -1
++ ChangeLog at 1.1786.7.1 +2 -1
+ ntp-4.2.8p5 prep
+
+ NEWS at 1.151 +104 -3
+ ntp-4.2.8p5 prep
+
+-ChangeSet at 1.3616, 2015-12-06 11:20:02+00:00, stenn at psp-deb1.ntp.org
++ChangeSet at 1.3615.5.1, 2015-12-13 13:35:12+01:00, jnperlin at hydra.localnet
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ Found this already fixed, but validation lead to further cleanup:
++ - source code formatting
++ - inline variable definitions moved to start of block
++ - made some pure input data pointers 'const void*' instead of 'char*'; avoids casts and warnings
++
++ ChangeLog at 1.1786.5.1 +3 -0
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++
++ sntp/crypto.c at 1.19 +13 -12
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - sidekick: make pure input pointers 'const void*' instead of 'char*'
++ - sidekick: remove unnecessary casts
++
++ sntp/crypto.h at 1.11 +11 -9
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - sidekick: make pure input pointers 'const void*' instead of 'char*'
++ - source formatting
++
++ sntp/main.c at 1.99 +1 -1
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - no need to cast input to 'make_mac()' any more
++
++ sntp/networking.c at 1.68 +1 -1
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - no need to cast input to 'auth_md5()' any more
++
++ sntp/tests/crypto.c at 1.10 +41 -27
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - remove unnecessary casts
++ - source code formatting
++
++ sntp/tests/fileHandlingTest.c at 1.4 +43 -20
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - create 'DestroyPath()' companion to 'CreatePath()' to avoid trouble with 'free()' on 'const char*'
++
++ sntp/tests/fileHandlingTest.h.in at 1.15 +6 -15
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - create 'DestroyPath()' companion to 'CreatePath()' to avoid trouble with 'free()' on 'const char*'
++
++ sntp/tests/keyFile.c at 1.13 +66 -46
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - use 'DestroyPath()' avoid trouble with 'free()' on 'const char*'
++ - printf() combined
++ - source code formatting
++ - move variable declarations to front
++
++ sntp/tests/packetHandling.c at 1.6 +75 -64
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - move variable declarations to front
++ - source code formatting
++
++ sntp/tests/packetProcessing.c at 1.9 +124 -90
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - move variable declarations to front
++ - source code formatting
++ - drop unnecessary casts
++
++ sntp/tests/run-packetProcessing.c at 1.10 +18 -18
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++
++ sntp/unity/unity_internals.h at 1.6 +1 -1
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - added missing 'const' in pointer casts
++
++ tests/libntp/decodenetnum.c at 1.11 +33 -23
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - source code formatting + cleanup
++
++ tests/libntp/run-decodenetnum.c at 1.11 +4 -4
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++
++ tests/libntp/run-socktoa.c at 1.14 +5 -5
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++
++ tests/libntp/socktoa.c at 1.12 +23 -17
++ [Bug 2892] Several test cases assume IPv6 capabilities even when IPv6 is disabled in the build
++ - source code formatting + cleanup
++
++ChangeSet at 1.3615.4.1, 2015-12-11 18:24:16+01:00, jnperlin at hydra.localnet
++ [Bug 2882] Look at ntp_request.c:list_peers_sum()
++
++ ChangeLog at 1.1786.4.1 +1 -0
++ [Bug 2882] Look at ntp_request.c:list_peers_sum()
++
++ ntpd/ntp_request.c at 1.116 +57 -72
++ [Bug 2882] Look at ntp_request.c:list_peers_sum()
++ - 'list_peers()' and 'list_peers_sum()' skip IPv6 entires if client does not support them,
++ but continue processing until end of list now.
++
++ChangeSet at 1.3615.1.3, 2015-12-09 18:23:31+01:00, jnperlin at hydra.localnet
++ [Bug 2891] Deadlock in deferred DNS lookup framework.
++
++ ChangeLog at 1.1786.1.3 +1 -0
++ [Bug 2891] Deadlock in deferred DNS lookup framework.
++
++ include/ntp_worker.h at 1.5 +31 -22
++ [Bug 2891] Deadlock in deferred DNS lookup framework.
++ - provide signal-safe result-ready detection
++
++ libntp/ntp_worker.c at 1.7 +27 -0
++ [Bug 2891] Deadlock in deferred DNS lookup framework.
++ - support signal-safe result-ready detection
++ - provide function to harvest async results from mainloop
++
++ ntpd/ntp_io.c at 1.409.1.1 +160 -133
++ [Bug 2891] Deadlock in deferred DNS lookup framework.
++ - do not process async-resolver results from signal handler
++ - set notification tags to harvest asyn-resolver results from mainloop
++ - avoid double select for synchronous IO
++ - avoid several syslog calls in signal-handler context
++ - refactor / conditionalize some functions that cannot be used in signal-driven IO
++
++ ntpd/ntpd.c at 1.169 +4 -0
++ [Bug 2891] Deadlock in deferred DNS lookup framework.
++ - reap/harvest async resolver results from mainloop
++
++ChangeSet at 1.3615.1.2, 2015-12-06 21:33:26+01:00, jnperlin at hydra.localnet
++ [Bug 2814] msyslog deadlock when signaled. perlinger at ntp.org
++ - applied patch by shenpeng11 at huawei.com with minor adjustments
++
++ ChangeLog at 1.1786.1.2 +2 -0
++ [Bug 2814] msyslog deadlock when signaled. perlinger at ntp.org
++ - applied patch by shenpeng11 at huawei.com with minor adjustments
++
++ ntpd/ntpd.c at 1.168 +26 -3
++ [Bug 2814] msyslog deadlock when signaled. perlinger at ntp.org
++ - applied patch by shenpeng11 at huawei.com with minor adjustments
++
++ChangeSet at 1.3615.2.1, 2015-12-06 20:19:32+01:00, jnperlin at hydra.localnet
++ [Bug 2772] adj_systime overflows tv_usec
++
++ ChangeLog at 1.1786.2.1 +1 -0
++ [Bug 2772] adj_systime overflows tv_usec
++
++ libntp/systime.c at 1.71 +12 -3
++ [Bug 2772] adj_systime overflows tv_usec
++ - add missing normalisation for nitpicking implementations of 'adjtime()'
++
++ChangeSet at 1.3615.1.1, 2015-12-06 11:20:02+00:00, stenn at psp-deb1.ntp.org
+ Quiet a warning from clang. Harlan Stenn.
+
+- ChangeLog at 1.1787 +1 -0
++ ChangeLog at 1.1786.1.1 +1 -0
+ Quiet a warning from clang. Harlan Stenn.
+
+ libntp/ntp_rfc2553.c at 1.50 +3 -2
+ Quiet a warning from clang. Harlan Stenn.
+
++ChangeSet at 1.3616, 2015-12-05 20:28:19+00:00, perlinger at psp-deb1.ntp.org
++ [Bug 2980] reduce number of warnings
++ - string formatting(arguments should be literals)
++ - applying constness where necessary
++ - removing bad consts that are superfluous
++ - avoid signed/unsigned clashes in conditionals (either by cast or type change)
++ - signed/unsigned and promotion conflicts
++ - add prototypes for function pointer tables
++ - force unsigned argument promotion in calls to 'ctype' functions (is{digit,cntrl,...})
++
++ ChangeLog at 1.1787 +2 -0
++ [Bug 2980] reduce number of warnings
++
++ include/parse.h at 1.14 +3 -3
++ [Bug 2980] reduce number of warnings
++ - make GPSWRAP and GPSWEEK unqualified literals to avoid signed/unsigned clashes
++
++ ntpd/ntp_config.c at 1.336 +2 -0
++ [Bug 2980] reduce number of warnings
++ - add forward declaration of yyparse()
++
++ ntpd/ntp_io.c at 1.410 +1 -1
++ [Bug 2980] reduce number of warnings
++ - fix a signedness comparison by adding a cast to size_t
++
++ ntpd/ntp_scanner.c at 1.49 +1 -1
++ [Bug 2980] reduce number of warnings
++ - for type compatibility, make counter 'i' a size_t
++
++ ntpd/ntp_timer.c at 1.94 +5 -6
++ [Bug 2980] reduce number of warnings
++ - fix a signed / unsigned compare
++
++ ntpd/refclock_chu.c at 1.58 +1 -1
++ [Bug 2980] reduce number of warnings
++ - rewrite check to avoid warning about integer overflow
++
++ ntpd/refclock_gpsdjson.c at 1.24 +13 -15
++ [Bug 2980] reduce number of warnings
++ - reshuffle to use a literal format string
++ - fix signed/unsigned clashes in compare
++
++ ntpd/refclock_jjy.c at 1.30 +47 -44
++ Bug 2980 - reduce number of warnings
++ - make several pointers 'const char*'
++ - add prototypes for function pointer tables
++ - force unsigned argument promotion in calls to 'ctype' functions (is{digit,cntrl,...})
++
++ ntpd/refclock_shm.c at 1.39 +1 -1
++ [Bug 2980] reduce number of warnings
++ - fix signed/unsigned clashes in compare
++
++ ntpq/ntpq-subs.c at 1.114.1.1 +1 -1
++ [Bug 2980] reduce number of warnings
*** DIFF OUTPUT TRUNCATED AT 1000 LINES ***
More information about the svn-src-user
mailing list