Subject: Re: Problem applying Security Advisory 2007-003 fix *SOLVED*
To: None <netbsd-help@netbsd.org>
From: Jeff_W <jgw@tx0.org>
List: netbsd-help
Date: 03/15/2007 11:39:39
"David H. Gutteridge" <dhgutteridge@sympatico.ca> wrote:
> > > The macro PORT_NONBLOCK isn't getting defined anywhere for some
> > > reason. What version of dist/bind/lib/bind/configure.in is in your
> >tree?
> ...
> >from my copy of /usr/src/dist/bind/lib/bind/configure.in:
> >...
> >AC_REVISION($Revision: 1.1.1.2.4.1 $)
> >
> >AC_INIT(resolv/herror.c)
> >AC_PREREQ(2.13)
> >...
> >PORT_NONBLOCK="#define PORT_NONBLOCK O_NONBLOCK"
> >...
> >
> >So it is getting defined here but not coming into the build process prior
> >to /usr/src/dist/bind/lib/isc/unix/entropy.c .
>
> Ugh. I think I have the answer. There are also make files for
> BIND in the tree under usr.sbin/bind. When updating your source
> tree try bumping those files too. There appears to be a relevant
> file here: usr.sbin/bind/include/config.h
I went ahead and just updated all of /usr/src/usr.sbin/bind and
- BINGO! - it built!
So to recap (as root):
# cd ../src
# cvs update -r <branch> -dP usr.sbin/bind dist/bind
# cd usr.sbin/bind
# make USETOOLS=no cleandir dependall
# make USETOOLS=no install
> I would recommend you PR this so that the NetBSD developers know
> there's a problem here. (At a minimum, their security advisory appears
> incomplete for the 3.0 branch.) If my latest suggestion above doesn't
> work, you'll probably be able to find someone more helpful than me
> through that process. ;)
I'll go ahead and file a PR on this.
Thanks for solving this mystery!
Jeff