search for: itojun

attached please find patches to make vorbis kit (2000/8/18 daily tar.gz) to compile on netbsd. we need more tests and cleanups (like moving -lossaudio into AC_CHECK_LIB() in configure.in), but it should be good as starting point. thanks. itojun PS: i'm not on the list. if possible please cc: to me. $NetBSD: patch-aa,v 1.1.1.1 2000/08/17 16:56:18 itojun Exp $ --- vorbis-tools/libao/configure.in- Fri Aug 18 01:32:17 2000 +++ vorbis-tools/libao/configure.in Fri Aug 18 01:32:31 2000 @@ -97,3 +97,3 @@ case $host in - *-*-linux...

here are patches to compile portable openssh 2.1.1p2 on netbsd, and some other platforms I suppose. itojun -------------- next part -------------- $NetBSD: patch-aa,v 1.8 2000/07/02 22:07:56 itojun Exp $ --- configure.in.orig Sat Jul 1 15:52:55 2000 +++ configure.in Mon Jul 3 06:49:00 2000 @@ -647,2 +647,6 @@ +OSSH_CHECK_HEADER_FOR_FIELD(ut_name, utmp.h, HAVE_NAME_IN_UTMP) +OSSH_CHECK_HEADER_FOR_FI...

here's a patch to 3.3p1 for Solaris 2.6 - it does not handle mmap() with fd = -1. does it look okay? itojun --- work.i386/openssh-3.3p1/servconf.c- Tue Jun 25 23:43:22 2002 +++ work.i386/openssh-3.3p1/servconf.c Tue Jun 25 23:43:33 2002 @@ -257,7 +257,7 @@ if (use_privsep == -1) use_privsep = 1; -#if !defined(HAVE_MMAP) || !defined(MAP_ANON) +#if !defined(HAVE_MMAP) if (use_privsep &&...

these days many unix-based systems contain crypt() with more than DES support (for instance, MD5 in freebsd/openbsd/netbsd, bcrypt in openbsd/netbsd). we need to use crypt() in libcrypt, not in licrypto, as much as possible. itojun --- configure.ac.orig Tue Jun 25 10:56:47 2002 +++ configure.ac Tue Jun 25 10:57:25 2002 @@ -697,6 +702,9 @@ ) fi +# use libcrypt if there is +AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt") + # Search for OpenSSL saved_CPPFLAGS="$CPPFLAGS" saved_LDFLAGS="$LDFLAGS...

in configure.ac, we AC_DEFINE(BROKEN_GETADDRINFO) for *-darwin-* platforms. recent Darwin fixed getaddrinfo to work as specified in RFC2553, so the case clause is not needed for recent Darwin. still not sure when it was corrected. anyone has a clue? itojun

Greetings, Peter and the Security Officers team, There is a minor security vulnerability in cvs prior 1.11.10, as described in CAN-2003-0977: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0977 On December 10th, 2003, itojun has imported cvs 1.11.10 into NetBSD, as the follows: http://mail-index.netbsd.org/source-changes/2003/12/10/0025.html http://mail-index.netbsd.org/source-changes/2003/12/10/0026.html After a week it has been 'pulled-up' (MFC in our convention) to 1.6 branch: http://mail-index.netbsd.org/s...

...$ $OpenBSD: session.c,v 1.74 2001/04/17 19:34:25 markus Exp $ $OpenBSD: auth-chall.c,v 1.7 2001/04/05 10:42:47 markus Exp $ $OpenBSD: auth2-chall.c,v 1.4 2001/03/28 22:43:31 markus Exp $ $OpenBSD: auth-krb4.c,v 1.23 2001/01/22 08:15:00 markus Exp $ $OpenBSD: mpaux.c,v 1.16 2001/02/08 19:30:52 itojun Exp $ $OpenBSD: radix.c,v 1.15 2001/01/16 23:58:09 deraadt Exp $ $OpenBSD: ttymodes.c,v 1.13 2001/04/15 01:35:22 stevesk Exp $ $OpenBSD: authfile.c,v 1.32 2001/04/18 23:44:51 markus Exp $ $OpenBSD: hostfile.c,v 1.26 2001/04/12 19:15:24 markus Exp $ $OpenBSD: tildexpand.c,v 1.11 2001/02/08 19:3...

...01/06/26 05:33:34 [ssh-agent.c] more smartcard support. - mpech at cvs.openbsd.org 2001/06/26 05:48:07 [sshd.8] remove unnecessary .Pp between .It; millert@ ok - markus at cvs.openbsd.org 2001/06/26 05:50:11 [auth2.c] new interface for secure_filename() - itojun at cvs.openbsd.org 2001/06/26 06:32:58 [atomicio.h authfd.h authfile.h auth.h auth-options.h bufaux.h buffer.h canohost.h channels.h cipher.h clientloop.h compat.h compress.h crc32.h deattack.h dh.h dispatch.h groupaccess.h hostfile.h kex.h key.h log.h mac.h match.h misc.h mp...

...at startup. Other changes include: rsync 2.5.1 (2002-01-03) BUG FIXES: * Fix for segfault in --daemon mode configuration parser. (Paul Mackerras) * Correct string<->address parsing for both IPv4 and 6. (YOSHIFUJI Hideaki, SUMIKAWA Munechika and Jun-ichiro "itojun" Hagino) * Various fixes for IPv6 support. (Dave Dykstra) * rsync.1 typo fix. (Matt Kraai) * Test suite typo fixes. (Tom Schmidt) * rsync.1 grammar and clarity improvements. (Edward Welbourne) * Correction to ./configure tests for inet_ntop. (Jeff Garz...

...rvconf.h session.c sshd_config] [sshd_config.5] deprecate VerifyReverseMapping since it's dangerous if combined with IP based access control as noted by Mike Harding; replace with a UseDNS option, UseDNS is on by default and includes the VerifyReverseMapping check; with itojun@, provos@, jakob@ and deraadt@ ok deraadt@, djm@ Switch UseDNS off if you don't want any DNS lookups. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=859 Summary: getaddrinfo(host, "0", &hints, &res) may take extra cycles Product: Portable OpenSSH Version: 3.8p1 Platform: All OS/Version: other Status: NEW Severity: normal Priority: P2 Component: Miscellaneous

...the second getaddrinfo call is supposed to be called with 'name' and not 'ntop' - it is testing whether 'name' can be parsed as is a numeric address (see the comment immediately above it). The use of a "0" for servname is consistent with other calls in OpenSSH - Itojun explained it to me once a while ago, but I forget the rationale. What does a reverse lookup using 'dig' show for the offending host? ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

thanks for great package. configure.in shipped with 2.1.0p3 includes too few header files for detecting struct sockaddr_in6 and in6_addr, and the build will fail on netbsd-current (1.4Z). here's a tiny patch to make the build successful. itojun diff -u1 openssh-2.1.0p3/configure.in openssh-2.1.0p3+/configure.in --- openssh-2.1.0p3/configure.in Tue May 30 11:57:47 2000 +++ openssh-2.1.0p3+/configure.in Wed May 31 18:31:52 2000 @@ -447,3 +447,5 @@ [ +#include <sys/types.h> #include <netinet/in.h> +#include <sys/socket.h...

Description: getnameinfo() (confirmed for CVS version 1.14.2.1) does this sort of buffer size checks (these is just two of many cases): if (strlen(sp->s_name) > servlen) return ENI_MEMORY; strcpy(serv, sp->s_name); ... if (strlen(hp->h_name) > hostlen) {

http://bugzilla.mindrot.org/show_bug.cgi?id=180 djm at mindrot.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED ------- Additional Comments From djm at mindrot.org 2002-04-26 16:55

...e_localhost) { + if (num_socks == NUM_SOCKS) + break; + } else { + break; + } #endif } freeaddrinfo(aitop); In article <Pine.HPX.4.44.0204301333550.2022-100000 at jenny> (at Tue, 30 Apr 2002 13:35:52 -0700 (PDT)), Kevin Steves <kevin at atomicgears.com> says: > itojun, > > do you have any recommendations on this? > > http://bugzilla.mindrot.org/show_bug.cgi?id=164 > > ---------- Forwarded message ---------- > Date: Mon, 29 Apr 2002 11:32:21 +0200 > From: Stig Venaas <Stig.Venaas at uninett.no> > To: Kevin Steves <kevin at a...

http://bugzilla.mindrot.org/show_bug.cgi?id=164 ------- Additional Comments From cjwatson at debian.org 2002-10-27 00:16 ------- Marco d'Itri suggested in http://bugs.debian.org/153154 that ssh should only bind to AF_INET addresses in x11_create_display_inet(), since at least the xtrans code in XFree86 doesn't support IPv6. Is this a valid approach? ------- You are receiving this

...--------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED ------- Additional Comments From dtucker at zip.com.au 2003-05-04 10:09 ------- This is now fixed. From ChangeLog: 20030409 [snip] - itojun at cvs.openbsd.org 2003/04/08 20:21:29 [*.c *.h] rename log() into logit() to avoid name conflict. markus ok, from netbsd ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...at startup. Other changes include: rsync 2.5.1 (2002-01-03) BUG FIXES: * Fix for segfault in --daemon mode configuration parser. (Paul Mackerras) * Correct string<->address parsing for both IPv4 and 6. (YOSHIFUJI Hideaki, SUMIKAWA Munechika and Jun-ichiro "itojun" Hagino) * Various fixes for IPv6 support. (Dave Dykstra) * rsync.1 typo fix. (Matt Kraai) * Test suite typo fixes. (Tom Schmidt) * rsync.1 grammar and clarity improvements. (Edward Welbourne) * Correction to ./configure tests for inet_ntop. (Jeff Garz...

On a recent NetBSD commit I saw that they have imported cvs 1.11.10 as a security fix yesterday: http://mail-index.netbsd.org/source-changes/2003/12/10/0025.html http://mail-index.netbsd.org/source-changes/2003/12/10/0026.html itojun has clairfied the commit in a mail sent to tech-userlevel list of NetBSD: http://mail-index.netbsd.org/tech-userlevel/2003/12/10/0003.html Will this affect FreeBSD's version 1.11.5 cvs, too? If so, is it possible to import the 1.11.10 before 5.2-RELEASE is released? Thanks! Xin LI Frontfree...