Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Peter Pentchev
On Thu, Oct 04, 2001 at 01:02:56PM -0400, Garrett Wollman wrote: > < said: > > > - printf("%s\n", buf); > > + printf("%.*s\n", (int)len, buf); > > This is a *much* better patch. ..yet it needs more work: strstr() and strcspn() are used on a non-null-terminated string. And e

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Peter Pentchev
On Thu, Oct 04, 2001 at 01:47:10PM -0400, Mike Barcroft wrote: > Todd C. Miller <[EMAIL PROTECTED]> writes: > > In message <[EMAIL PROTECTED]> > > so spake Mike Barcroft (mike): > > > > > Would you please test the attached patch and confirm that it solves > > > the problem? If it does, I'll

Re: IPsec rekey question (bug in racoon?)

2001-10-04 Thread Shoichi Sakane
> > the freebsd's ipsec stack always uses old SA when there are some SAs for > > the communication. so the other side system used old SA even when the one > > had new SA. > With that I can fix my case. Is there a special reason to > default to the old one, because that breaks rebooting systems, d

Re: kernel welded??

2001-10-04 Thread dmp
Bill Fumerola wrote: > At 11:13 AM 10/4/2001 -0700, [EMAIL PROTECTED] wrote: >> I am completely blind and stuck: I was recompiling (2nd time) my kernel, when (make >install) suddenly I was surprised with the following message: >> >> mv /kernel /kernel.old >> Operation not permitted >> >> seriousl

Re: kernel welded??

2001-10-04 Thread Bill Fumerola
On Thu, Oct 04, 2001 at 12:47:05PM -0600, Mark J. Sommer wrote: > Sounds like you booted it and its locked. Does FreeBSD do that? No, of course not. You can remove the kernel once you've booted and it doesn't matter. At 11:13 AM 10/4/2001 -0700, [EMAIL PROTECTED] wrote: > I am completely blind

Re: kernel welded??

2001-10-04 Thread Mark J. Sommer
Sounds like you booted it and its locked. Does FreeBSD do that? At 11:13 AM 10/4/2001 -0700, [EMAIL PROTECTED] wrote: >I am completely blind and stuck: I was recompiling (2nd time) my kernel, when (make >install) suddenly I was surprised with the following message: > >[...] >mv /kernel /kernel.

kernel welded??

2001-10-04 Thread [EMAIL PROTECTED]
I am completely blind and stuck: I was recompiling (2nd time) my kernel, when (make install) suddenly I was surprised with the following message: [...] mv /kernel /kernel.old Operation not permitted So, I cannot rm it, cannot change it, can do nothing to it - and I am root. There are a limit (

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Mike Barcroft
Todd C. Miller <[EMAIL PROTECTED]> writes: > In message <[EMAIL PROTECTED]> > so spake Mike Barcroft (mike): > > > Would you please test the attached patch and confirm that it solves > > the problem? If it does, I'll commit it today. > > I doubt that is sufficient as "buf" is treated as a

X.25

2001-10-04 Thread João Alfredo
Hello, Does FreeBSD supports X.25?? Does it supports PAD?? Where I can find info about it? Thanks in advance. -- João Alfredo G. Batista <[EMAIL PROTECTED]> ou <[EMAIL PROTECTED]> * dotX Consultoria, Serviços e Conectividade * http://www.dotx.com.br * Departamento de Desenvolvimento To Unsub

Re: How to increase TCP and UDP buffers (for IPv4/IPv6)

2001-10-04 Thread Mike Tancsa
At 10:00 AM 10/4/01 -0700, Luigi Rizzo wrote: > > I guess in my case, the load average is general 0.00, but that is just > > measuring userland activity no ? Is there a way to allocate more CPU to > >yes... "top" should tell you how much time you spend in kernel space, >though, and that could be

Re: How to increase TCP and UDP buffers (for IPv4/IPv6)

2001-10-04 Thread Luigi Rizzo
> I guess in my case, the load average is general 0.00, but that is just > measuring userland activity no ? Is there a way to allocate more CPU to yes... "top" should tell you how much time you spend in kernel space, though, and that could be an indication. > measuring userland activity no ?

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Garrett Wollman
< said: > - printf("%s\n", buf); > + printf("%.*s\n", (int)len, buf); This is a *much* better patch. -GAWollman To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake Mike Barcroft (mike): > Would you please test the attached patch and confirm that it solves > the problem? If it does, I'll commit it today. I doubt that is sufficient as "buf" is treated as a NUL terminated string in the calls to strstr(). Also

Re: How to increase TCP and UDP buffers (for IPv4/IPv6)

2001-10-04 Thread Mike Tancsa
At 09:28 AM 10/4/01 -0700, Luigi Rizzo wrote: > > > sysctl -w net.inet.ip.intr_queue_maxlen=100 > > > > Hi, > > Are there any nasty side effects for increasing this value ? Also, how > > would one go about tracking down why net.inet.ip.intr_queue_drops is > > incrementing ? > >In general, if y

Re: How to increase TCP and UDP buffers (for IPv4/IPv6)

2001-10-04 Thread Luigi Rizzo
> > sysctl -w net.inet.ip.intr_queue_maxlen=100 > > Hi, > Are there any nasty side effects for increasing this value ? Also, how > would one go about tracking down why net.inet.ip.intr_queue_drops is > incrementing ? In general, if your system is unable to drain ipintrq fast enough then you

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Mike Barcroft
d patch and confirm that it solves the problem? If it does, I'll commit it today. Best regards, Mike Barcroft whois.20011004.diff A whois server may return a final line without a new line character. PR: 30968 Index: whois.c ===

test

2001-10-04 Thread Juan Fco Rodriguez Hervella
test -- * Juan F. Rodriguez Hervella Universidad Carlos III de Madrid To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: How to increase TCP and UDP buffers (for IPv4/IPv6)

2001-10-04 Thread Mike Tancsa
On Tue, 2 Oct 2001 15:54:44 + (UTC), in sentex.lists.freebsd.net you wrote: >> Hi: >> >> It's possible to increase the TCP and UDP buffers ? >> >> I've had problems with UDP packets of 64 bytes discarded with a bandwith >> of 2-3 Mbits, using a FreeBSD-4.3 router in a link of 10 Mbits. > >a

ifconfig(8) not counting per-IP-address outgoing statistics (was: Re: ifconfig question on the new 4.4)

2001-10-04 Thread Ruslan Ermilov
[Redirected to -net] On Tue, Oct 02, 2001 at 02:53:04PM -0400, [EMAIL PROTECTED] wrote: > I installed the new release 4.4 on one machine to check out a feature I have been >waiting for. > That is the ability to track bytes through one interface using several IP numbers. I >seem to have > misse

review request: new function sys/net/route.c:rt_resolv()

2001-10-04 Thread Matthew N. Dodd
Find attached for your review a patch implementing the rt_resolv() (better name requested if you can think of one.) function. This is intended to replace the ~25 lines of duplicated code currently in if_ethersubr.c, if_fddisubr.c, and if_iso88025subr.c in the respective output functions. Only th

Re: IPsec rekey question (bug in racoon?)

2001-10-04 Thread Guido van Rooij
On Thu, Oct 04, 2001 at 05:47:48PM +0900, Shoichi Sakane wrote: > the freebsd's ipsec stack always uses old SA when there are some SAs for > the communication. so the other side system used old SA even when the one > had new SA. > latest KAME has the flag, net.key.prefered_oldsa, which makes the

Re: IPsec rekey question (bug in racoon?)

2001-10-04 Thread Guido van Rooij
On Wed, Oct 03, 2001 at 08:20:53PM -0700, Crist J. Clark wrote: > > > > Why? Because if one system reboots, the key is gone so there is no way > > to decrypt the incoming traffic any more? > > "The key?" What key? Again, each direction is independent from the > other. Different keys will be used

Re: IPsec rekey question (bug in racoon?)

2001-10-04 Thread Guido van Rooij
On Thu, Oct 04, 2001 at 02:21:50PM +0900, JINMEI Tatuya / ?$B?@L@C#:H?(B wrote: > > Please clarify, are you using automatic key negotiation (e.g. using > IKE), or are you manually configuring the keys? The situation may > differ according to the configuration. Manual keys. -Guido To Unsubscri

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Peter Pentchev
On Thu, Oct 04, 2001 at 01:28:02PM +0400, Andrey A. Chernov wrote: > On Thu, Oct 04, 2001 at 12:16:40 +0300, Peter Pentchev wrote: > > + if ((len == 0) || !isspace(buf[len - 1])) { > > Must be isspace((unsigned char)) On Thu, Oct 04, 2001 at 01:30:42PM +0400, Andre

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Andrey A. Chernov
On Thu, Oct 04, 2001 at 12:16:40 +0300, Peter Pentchev wrote: > + abuf = calloc(1, len + 1); > + if (abuf == NULL) { > + errno = ENOMEM; > + err(1, "reallocating"); > + } To overwri

Re: [CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Andrey A. Chernov
On Thu, Oct 04, 2001 at 12:16:40 +0300, Peter Pentchev wrote: > + if ((len == 0) || !isspace(buf[len - 1])) { Must be isspace((unsigned char)) -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of t

[CFR] whois(1) out-of-bound access patch

2001-10-04 Thread Peter Pentchev
Hi, As described in PR bin/30968, whois(1) may access invalid data when the whois server returns a non-newline-terminated string. While it is true that the whois server maintainers should do a better job of following standards and such, still the 'be liberal in what you accept' mindset might be a

Re: IPsec rekey question (bug in racoon?)

2001-10-04 Thread Shoichi Sakane
> I am using Ipsec in tunnel mode. Everything works okay. Then I decide > to flush my SAD entries, on _one_ side of the tunnel. > Naturally, I see a key exchange going on. > Afterwards I see that the system on which I flushed the SAD entries does > have new ones. However the other side of the tunn