CVS commit: src/tools/compat

2016-03-01 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Tue Mar  1 10:09:00 UTC 2016

Modified Files:
src/tools/compat: Makefile

Log Message:
Revert to rev 1.77 for now on Aymeric's request


To generate a diff of this commit:
cvs rdiff -u -r1.79 -r1.80 src/tools/compat/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/tools/compat

2016-03-01 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Tue Mar  1 10:11:07 UTC 2016

Removed Files:
src/tools/compat: regex.h

Log Message:
Remove regexp.h here temporarily


To generate a diff of this commit:
cvs rdiff -u -r1.1 -r0 src/tools/compat/regex.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/share/mk

2016-03-01 Thread Valeriy E. Ushakov
Module Name:src
Committed By:   uwe
Date:   Tue Mar  1 10:29:40 UTC 2016

Modified Files:
src/share/mk: bsd.own.mk

Log Message:
Switch sh3 to the new binutils and gdb.  Lightly tested on landisk.
sh3eb compile-tested only.


To generate a diff of this commit:
cvs rdiff -u -r1.904 -r1.905 src/share/mk/bsd.own.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/tests/bin/sh

2016-03-01 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Tue Mar  1 12:39:36 UTC 2016

Modified Files:
src/tests/bin/sh: t_exit.sh t_here.sh t_option.sh t_redir.sh

Log Message:
Improved handling of TEST_SH so that it is possible to define it
to the name of a shell, plus options that shell needs to run it
in the correct mode to be tested: eg: TEST_SH='bash -o posix'
Also finished the implementation of tests of "set -n" now that
the NetBSD shell supports that as it should. (from kre)


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 src/tests/bin/sh/t_exit.sh
cvs rdiff -u -r1.2 -r1.3 src/tests/bin/sh/t_here.sh \
src/tests/bin/sh/t_redir.sh
cvs rdiff -u -r1.1 -r1.2 src/tests/bin/sh/t_option.sh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [nick-nhusb] src/sys/external/bsd/dwc2

2016-03-01 Thread Nick Hudson
Module Name:src
Committed By:   skrll
Date:   Tue Mar  1 14:38:47 UTC 2016

Modified Files:
src/sys/external/bsd/dwc2 [nick-nhusb]: dwc2.c

Log Message:
Whitespace


To generate a diff of this commit:
cvs rdiff -u -r1.32.2.18 -r1.32.2.19 src/sys/external/bsd/dwc2/dwc2.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [nick-nhusb] src/sys/external/bsd/dwc2

2016-03-01 Thread Nick Hudson
Module Name:src
Committed By:   skrll
Date:   Tue Mar  1 14:45:10 UTC 2016

Modified Files:
src/sys/external/bsd/dwc2 [nick-nhusb]: dwc2.c

Log Message:
Re-initialise dwc2_urb->packet_count after the memset(dwc2_urb, 0, ...)


To generate a diff of this commit:
cvs rdiff -u -r1.32.2.19 -r1.32.2.20 src/sys/external/bsd/dwc2/dwc2.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/external/cddl/osnet/dist/tools/ctf/cvt

2016-03-01 Thread Joerg Sonnenberger
Module Name:src
Committed By:   joerg
Date:   Tue Mar  1 14:52:14 UTC 2016

Modified Files:
src/external/cddl/osnet/dist/tools/ctf/cvt: dwarf.c

Log Message:
Merge r274564 from FreeBSD:
Fix a couple of bugs around the handling of structs and unions of size zero.
These would cause ctfconvert(1) to return an error when attempting to
resolve valid C types.


To generate a diff of this commit:
cvs rdiff -u -r1.18 -r1.19 src/external/cddl/osnet/dist/tools/ctf/cvt/dwarf.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [nick-nhusb] src/sys/external/bsd/dwc2

2016-03-01 Thread Nick Hudson
Module Name:src
Committed By:   skrll
Date:   Tue Mar  1 15:19:37 UTC 2016

Modified Files:
src/sys/external/bsd/dwc2 [nick-nhusb]: dwc2var.h

Log Message:
Remove unused struct member.


To generate a diff of this commit:
cvs rdiff -u -r1.3.12.8 -r1.3.12.9 src/sys/external/bsd/dwc2/dwc2var.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/evbarm/stand/gzboot

2016-03-01 Thread Joerg Sonnenberger
Module Name:src
Committed By:   joerg
Date:   Tue Mar  1 16:08:23 UTC 2016

Modified Files:
src/sys/arch/evbarm/stand/gzboot: Makefile.gzboot

Log Message:
Don't reuse LDFLAGS for arguments passed directly to ${LD}, share/mk
expects it to be passed to ${CC} or ${CXX}, so they will generally
prefix flags with -Wl.


To generate a diff of this commit:
cvs rdiff -u -r1.33 -r1.34 src/sys/arch/evbarm/stand/gzboot/Makefile.gzboot

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS import: src/crypto/external/bsd/openssl/dist

2016-03-01 Thread Christos Zoulas
=

Severity: High

This issue only affected versions of OpenSSL prior to March 19th 2015 at which
time the code was refactored to address vulnerability CVE-2015-0293.

s2_srvr.c did not enforce that clear-key-length is 0 for non-export ciphers. If
clear-key bytes are present for these ciphers, they *displace* encrypted-key
bytes. This leads to an efficient divide-and-conquer key recovery attack: if an
eavesdropper has intercepted an SSLv2 handshake, they can use the server as an
oracle to determine the SSLv2 master-key, using only 16 connections to the
server and negligible computation.

More importantly, this leads to a more efficient version of DROWN that is
effective against non-export ciphersuites, and requires no significant
computation.

This issue affected OpenSSL versions 1.0.2, 1.0.1l, 1.0.0q, 0.9.8ze and all
earlier versions.  It was fixed in OpenSSL 1.0.2a, 1.0.1m, 1.0.0r and 0.9.8zf
(released March 19th 2015).

This issue was reported to OpenSSL on February 10th 2016 by David Adrian and J.
Alex Halderman of the University of Michigan.  The underlying defect had by
then already been fixed by Emilia K�sper of OpenSSL on March 4th 2015.  The fix
for this issue can be identified by commits ae50d827 (1.0.2a), cd56a08d
(1.0.1m), 1a08063 (1.0.0r) and 65c588c (0.9.8zf).


Bleichenbacher oracle in SSLv2 (CVE-2016-0704)
==

Severity: Moderate

This issue only affected versions of OpenSSL prior to March 19th 2015 at which
time the code was refactored to address the vulnerability CVE-2015-0293.

s2_srvr.c overwrite the wrong bytes in the master-key when applying
Bleichenbacher protection for export cipher suites.  This provides a
Bleichenbacher oracle, and could potentially allow more efficient variants of
the DROWN attack.

This issue affected OpenSSL versions 1.0.2, 1.0.1l, 1.0.0q, 0.9.8ze and all
earlier versions.  It was fixed in OpenSSL 1.0.2a, 1.0.1m, 1.0.0r and 0.9.8zf
(released March 19th 2015).

This issue was reported to OpenSSL on February 10th 2016 by David Adrian and J.
Alex Halderman of the University of Michigan.  The underlying defect had by
then already been fixed by Emilia K�sper of OpenSSL on March 4th 2015.  The fix
for this issue can be identified by commits ae50d827 (1.0.2a), cd56a08d
(1.0.1m), 1a08063 (1.0.0r) and 65c588c (0.9.8zf).

Note


As per our previous announcements and our Release Strategy
(https://www.openssl.org/policies/releasestrat.html), support for OpenSSL
version 1.0.1 will cease on 31st December 2016. No security updates for that
version will be provided after that date. Users of 1.0.1 are advised to
upgrade.

Support for versions 0.9.8 and 1.0.0 ended on 31st December 2015. Those
versions are no longer receiving security updates.

References
==

URL for this Security Advisory:
https://www.openssl.org/news/secadv/20160301.txt

Note: the online version of the advisory may be updated with additional details
over time.

For details of OpenSSL severity classifications please see:
https://www.openssl.org/policies/secpolicy.html

Status:

Vendor Tag: OPENSSL
Release Tags:   openssl-1-0-1s

U src/crypto/external/bsd/openssl/dist/ACKNOWLEDGMENTS
U src/crypto/external/bsd/openssl/dist/appveyor.yml
U src/crypto/external/bsd/openssl/dist/CHANGES.SSLeay
C src/crypto/external/bsd/openssl/dist/CHANGES
C src/crypto/external/bsd/openssl/dist/Configure
U src/crypto/external/bsd/openssl/dist/config
U src/crypto/external/bsd/openssl/dist/FAQ
U src/crypto/external/bsd/openssl/dist/CONTRIBUTING
U src/crypto/external/bsd/openssl/dist/e_os2.h
U src/crypto/external/bsd/openssl/dist/e_os.h
U src/crypto/external/bsd/openssl/dist/install.com
U src/crypto/external/bsd/openssl/dist/INSTALL
U src/crypto/external/bsd/openssl/dist/INSTALL.VMS
U src/crypto/external/bsd/openssl/dist/INSTALL.DJGPP
U src/crypto/external/bsd/openssl/dist/INSTALL.MacOS
U src/crypto/external/bsd/openssl/dist/INSTALL.NW
U src/crypto/external/bsd/openssl/dist/INSTALL.OS2
U src/crypto/external/bsd/openssl/dist/INSTALL.W32
U src/crypto/external/bsd/openssl/dist/INSTALL.W64
U src/crypto/external/bsd/openssl/dist/INSTALL.WCE
U src/crypto/external/bsd/openssl/dist/LICENSE
C src/crypto/external/bsd/openssl/dist/Makefile
U src/crypto/external/bsd/openssl/dist/Makefile.shared
U src/crypto/external/bsd/openssl/dist/Makefile.org
U src/crypto/external/bsd/openssl/dist/makevms.com
U src/crypto/external/bsd/openssl/dist/PROBLEMS
C src/crypto/external/bsd/openssl/dist/NEWS
U src/crypto/external/bsd/openssl/dist/README.ENGINE
U src/crypto/external/bsd/openssl/dist/openssl.doxy
C src/crypto/external/bsd/openssl/dist/openssl.spec
C src/crypto/external/bsd/openssl/dist/README
U src/crypto/external/bsd/openssl/dist/README.ASN1
U src/crypto/external/bsd/openssl/dist/apps/app_rand.c
U src/crypto/external/bsd/openssl/dist/apps/apps.c
U src/crypto/external/bsd/openssl/dist/apps/apps.h
U src/crypto/external/bsd/openssl/dist/apps/asn1pars.c
U src/c

CVS commit: src/external/cddl/osnet/dist/lib/libdtrace/common

2016-03-01 Thread Joerg Sonnenberger
Module Name:src
Committed By:   joerg
Date:   Tue Mar  1 21:09:17 UTC 2016

Modified Files:
src/external/cddl/osnet/dist/lib/libdtrace/common: drti.c

Log Message:
Don't crash when relocbase was 0.


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.7 \
src/external/cddl/osnet/dist/lib/libdtrace/common/drti.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/bin/sh

2016-03-01 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Tue Mar  1 21:10:40 UTC 2016

Modified Files:
src/bin/sh: main.c

Log Message:
Fix wrong condition in previous causing bogus 'Use "exit" to leave
shell.' messages (from kre)


To generate a diff of this commit:
cvs rdiff -u -r1.61 -r1.62 src/bin/sh/main.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/external/cddl/osnet/lib/drti

2016-03-01 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Tue Mar  1 21:30:40 UTC 2016

Modified Files:
src/external/cddl/osnet/lib/drti: Makefile

Log Message:
Build as PIC if requested


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 src/external/cddl/osnet/lib/drti/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/external/cddl/osnet/lib/drti

2016-03-01 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Tue Mar  1 21:45:10 UTC 2016

Modified Files:
src/external/cddl/osnet/lib/drti: Makefile

Log Message:
remove comment I used to test.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 src/external/cddl/osnet/lib/drti/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/crypto/external/bsd/openssl

2016-03-01 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Wed Mar  2 01:52:36 UTC 2016

Modified Files:
src/crypto/external/bsd/openssl/dist: CHANGES Configure Makefile NEWS
README openssl.spec
src/crypto/external/bsd/openssl/dist/apps: s_server.c
src/crypto/external/bsd/openssl/dist/crypto: opensslconf.h opensslv.h
src/crypto/external/bsd/openssl/dist/crypto/bn: bn.h bn_exp.c
src/crypto/external/bsd/openssl/dist/crypto/dsa: dsa_ameth.c
src/crypto/external/bsd/openssl/dist/crypto/rsa: rsa_sign.c
src/crypto/external/bsd/openssl/dist/crypto/threads: mttest.c
src/crypto/external/bsd/openssl/dist/ssl: Makefile s2_lib.c s3_lib.c
ssl_lib.c
src/crypto/external/bsd/openssl/dist/util: mk1mf.pl
src/crypto/external/bsd/openssl/lib/libcrypto: shlib_version
src/crypto/external/bsd/openssl/lib/libcrypto_rc5: shlib_version
src/crypto/external/bsd/openssl/lib/libdes: shlib_version
src/crypto/external/bsd/openssl/lib/libssl: shlib_version

Log Message:
merge conflicts, bump libraries to 11 for consistency.


To generate a diff of this commit:
cvs rdiff -u -r1.9 -r1.10 src/crypto/external/bsd/openssl/dist/CHANGES \
src/crypto/external/bsd/openssl/dist/NEWS \
src/crypto/external/bsd/openssl/dist/README \
src/crypto/external/bsd/openssl/dist/openssl.spec
cvs rdiff -u -r1.14 -r1.15 src/crypto/external/bsd/openssl/dist/Configure
cvs rdiff -u -r1.10 -r1.11 src/crypto/external/bsd/openssl/dist/Makefile
cvs rdiff -u -r1.10 -r1.11 \
src/crypto/external/bsd/openssl/dist/apps/s_server.c
cvs rdiff -u -r1.11 -r1.12 \
src/crypto/external/bsd/openssl/dist/crypto/opensslconf.h
cvs rdiff -u -r1.18 -r1.19 \
src/crypto/external/bsd/openssl/dist/crypto/opensslv.h
cvs rdiff -u -r1.5 -r1.6 src/crypto/external/bsd/openssl/dist/crypto/bn/bn.h
cvs rdiff -u -r1.10 -r1.11 \
src/crypto/external/bsd/openssl/dist/crypto/bn/bn_exp.c
cvs rdiff -u -r1.4 -r1.5 \
src/crypto/external/bsd/openssl/dist/crypto/dsa/dsa_ameth.c
cvs rdiff -u -r1.5 -r1.6 \
src/crypto/external/bsd/openssl/dist/crypto/rsa/rsa_sign.c
cvs rdiff -u -r1.7 -r1.8 \
src/crypto/external/bsd/openssl/dist/crypto/threads/mttest.c
cvs rdiff -u -r1.4 -r1.5 src/crypto/external/bsd/openssl/dist/ssl/Makefile \
src/crypto/external/bsd/openssl/dist/ssl/s2_lib.c
cvs rdiff -u -r1.16 -r1.17 src/crypto/external/bsd/openssl/dist/ssl/s3_lib.c
cvs rdiff -u -r1.6 -r1.7 src/crypto/external/bsd/openssl/dist/ssl/ssl_lib.c
cvs rdiff -u -r1.6 -r1.7 src/crypto/external/bsd/openssl/dist/util/mk1mf.pl
cvs rdiff -u -r1.10 -r1.11 \
src/crypto/external/bsd/openssl/lib/libcrypto/shlib_version
cvs rdiff -u -r1.1 -r1.2 \
src/crypto/external/bsd/openssl/lib/libcrypto_rc5/shlib_version
cvs rdiff -u -r1.2 -r1.3 \
src/crypto/external/bsd/openssl/lib/libdes/shlib_version
cvs rdiff -u -r1.11 -r1.12 \
src/crypto/external/bsd/openssl/lib/libssl/shlib_version

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/distrib/sets/lists

2016-03-01 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Wed Mar  2 01:53:22 UTC 2016

Modified Files:
src/distrib/sets/lists/base: shl.mi
src/distrib/sets/lists/debug: shl.mi

Log Message:
bump OpenSSL for 1.0.1s (remove SSLv2 and weak "export" ciphers)


To generate a diff of this commit:
cvs rdiff -u -r1.763 -r1.764 src/distrib/sets/lists/base/shl.mi
cvs rdiff -u -r1.125 -r1.126 src/distrib/sets/lists/debug/shl.mi

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/doc

2016-03-01 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Wed Mar  2 01:54:19 UTC 2016

Modified Files:
src/doc: 3RDPARTY CHANGES

Log Message:
new openssl


To generate a diff of this commit:
cvs rdiff -u -r1.1308 -r1.1309 src/doc/3RDPARTY
cvs rdiff -u -r1.2138 -r1.2139 src/doc/CHANGES

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/doc

2016-03-01 Thread SAITOH Masanobu
Module Name:src
Committed By:   msaitoh
Date:   Wed Mar  2 07:06:10 UTC 2016

Modified Files:
src/doc [netbsd-7]: CHANGES-7.1

Log Message:
Fix typo.


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.59 -r1.1.2.60 src/doc/CHANGES-7.1

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.