CVS commit: pkgsrc/net/iperf3

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep 30 08:43:20 UTC 2026

Modified Files:
        pkgsrc/net/iperf3: Makefile distinfo

Log Message:
iperf3: updated to 3.22

3.22

Security notes

Thanks to Claude and Ada Logics for finding and reporting two
potential security vulnerabilities. One is a remote
use-after-free in iperf_server_api.c (ANT-2026-E5BA80X9 /
CVE-2026-101283) and the other is a heap buffer overflow in
iperf_auth.c (ANT-2026-FXH14FHV / CVE-2026-101276).

Thanks to Justin Stitt for reporting and fixing a heap-buffer
overflow was fixed in iperf_auth.c.

Thanks to Ravindu Lakmina Munaweera (Github: @Ravi-lk) for
reporting and fixing a DOS infinite-loop (CVE-2026-102253).

Thanks to Dirk Müller for finding and reporting an issue with
test parameters (CVE-2026-71217).

The iperf-3.18 release notes were updated to reflect that a code
change in that version addresses CVE-2026-71218.

Notable user-visible changes

Attempting to set zero parallel streams is no longer allowed.

Zerocopy and rx-copy are now allowed in the case of reverse
direction tests and the server (sending side) supports these
features but the client (receiving side) does not.

The limit on GSO_MAX_DG_IN_BF was fixed to limit the number of segments
to the maximum allowed
GSO for small message sizes.

Notable developer-visible changes

In iperf_auth.c, in addition to fixing the heap buffer overflow, the
return value of several functions is checked.

Several file descriptor leaks have been fixed.

In iperf_tcp, connections now timeout to prevent a race condition in
accepting new connections to avoid a deadlock

Periodic timers are now cancelled at the end of a test

DSCP/TOS is now correctly set in the first UDP/TCP stream packet


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.28 pkgsrc/net/iperf3/Makefile
cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/iperf3/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/iperf3/Makefile
diff -u pkgsrc/net/iperf3/Makefile:1.27 pkgsrc/net/iperf3/Makefile:1.28
--- pkgsrc/net/iperf3/Makefile:1.27     Fri Apr 10 12:55:13 2026
+++ pkgsrc/net/iperf3/Makefile  Wed Sep 30 08:43:20 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2026/04/10 12:55:13 adam Exp $
+# $NetBSD: Makefile,v 1.28 2026/09/30 08:43:20 adam Exp $
 
-DISTNAME=      iperf-3.21
+DISTNAME=      iperf-3.22
 PKGNAME=       ${DISTNAME:S/iperf/iperf3/}
 CATEGORIES=    net benchmarks
 MASTER_SITES=  https://downloads.es.net/pub/iperf/
@@ -19,6 +19,6 @@ TEST_TARGET=          check
 
 LDFLAGS.SunOS+=                -lsocket -lnsl
 
-.include "../../mk/atomic64.mk"
 .include "../../security/openssl/buildlink3.mk"
+.include "../../mk/atomic64.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/net/iperf3/distinfo
diff -u pkgsrc/net/iperf3/distinfo:1.26 pkgsrc/net/iperf3/distinfo:1.27
--- pkgsrc/net/iperf3/distinfo:1.26     Fri Apr 10 12:55:13 2026
+++ pkgsrc/net/iperf3/distinfo  Wed Sep 30 08:43:20 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.26 2026/04/10 12:55:13 adam Exp $
+$NetBSD: distinfo,v 1.27 2026/09/30 08:43:20 adam Exp $
 
-BLAKE2s (iperf-3.21.tar.gz) = 99a2b571b48a668e3c15006739a9cbae53c8e447053e102f5551d20d6d44a30f
-SHA512 (iperf-3.21.tar.gz) = c86888809f47d0a9eb7fb81d0e442ef27c04a3ec21b93fa7028917940265666effd30bd203e2d4b3e7018a1ae6fd513546563b84a7ae8c87de469db8adeac272
-Size (iperf-3.21.tar.gz) = 708031 bytes
+BLAKE2s (iperf-3.22.tar.gz) = 79e9df6f551ef47952eb31fe7b55eb496f3f34b4170fde8b31a4816c372ac229
+SHA512 (iperf-3.22.tar.gz) = afa690cfdc0b05498778d6853c01d7bee02e86ba8b2af8f498d0b545eae2c407c25bc524bf52299bcd2875e9b123d855a9360a841014388b31cd8760bc7be15a
+Size (iperf-3.22.tar.gz) = 849295 bytes