[src/netbsd-1-5]: src Today's set:

[he <he%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/f8acd56e8f89
branches:  netbsd-1-5
changeset: 493073:f8acd56e8f89
user:      he <he%NetBSD.org@localhost>
date:      Wed Apr 17 12:26:06 2002 +0000

description:
Today's set:
 o libc getpwent(): return error if username too long
 o libc bt_open(): don't respect TMPDIR when set[ug]id
 o libc fstab, getcwd, getpwent: replace strncpy() with strlcpy()
 o libc getcap(): detect long lines
 o libc hesiod functions: cast isspace() args, replace strcpy() with strlcpy(),
   proper end of string detection
 o libc rcmd: replace strn* functions with strl* functions
 o libc res_debug.c: replace strncpy() with strlcpy()
 o libc getnetpath.c: make sure not to look before start of string
 o libc localtime.c / zdump.c: replace strncpy() with strlcpy()
 o ifmedia(4) typo correction

diffstat:

 CHANGES-1.5.3 |  56 +++++++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 files changed, 55 insertions(+), 1 deletions(-)

diffs (67 lines):

diff -r d0888913c5ea -r f8acd56e8f89 CHANGES-1.5.3
--- a/CHANGES-1.5.3     Wed Apr 17 12:20:04 2002 +0000
+++ b/CHANGES-1.5.3     Wed Apr 17 12:26:06 2002 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-1.5.3,v 1.1.2.62 2002/04/11 22:44:18 he Exp $
+#      $NetBSD: CHANGES-1.5.3,v 1.1.2.63 2002/04/17 12:26:06 he Exp $
 
 A complete list of changes from NetBSD 1.5.2 to NetBSD 1.5.3:
 
@@ -2696,3 +2696,57 @@
 distrib/notes/common/postinstall               patch
 
   Modify PKG_PATH in example so it is suitable for 1.5.3.
+
+lib/libc/gen/getpwent.c                                1.49
+
+  Return an error if we try to look up a user name that is too long,
+  rather than trying to truncate.  Fixes non-exploitable core dump
+  problem inside DB.
+
+lib/libc/db/btree/bt_open.c                    1.15 via patch
+
+  Do not respect TMPDIR when setuid or setgid.
+
+lib/libc/gen/fstab.c                           1.24
+lib/libc/gen/getcwd.c                          1.25
+lib/libc/gen/getpwent.c                                1.50
+
+  Replace an instance of erroneous usage of strncpy() with strlcpy().
+
+lib/libc/gen/getcap.c                          1.35
+
+  Detect if line length exceeds buffer size.
+
+lib/libc/net/hesiod.c                          1.14
+
+  Cast arguments to isspace() to u_char.
+
+lib/libc/net/hesiod.c                          1.16
+
+  Replace strcpy() with strlcpy() and bounds check.
+
+lib/libc/net/hesiod.c                          1.17
+
+  Minor style adjustments, and do proper end of string detection
+  in read_config_file().
+
+lib/libc/net/rcmd.c                            1.46
+
+  Replace two instances of strn* functions with strl* functions.
+
+lib/libc/net/res_debug.c                       1.31
+
+  Replace an instance of strncpy() with strlcpy().
+
+lib/libc/rpc/getnetpath.c                      1.6 via patch
+
+  Make sure we do not look before the beginning of the string.
+
+lib/libc/time/localtime.c                      1.30
+lib/libc/time/zdump.c                          1.12
+
+  Replace strncpy() with strlcpy().
+
+share/man/man4/ifmedia.4                       1.7
+
+  Correct a minor typo.  Fixes PR#16383.