summaryrefslogtreecommitdiff
path: root/gnu/usr.bin/cvs
AgeCommit message (Collapse)Author
2004-05-19Fix buffer overflow find by Stefan Esser, patch by Derek Robert Price.Todd C. Miller
2004-04-16- a malicious server may send path names that translate out of theOtto Moerbeek
local cvs tree on the client, enabling the server to overwrite files on the client. - a client may read files outside the repository using the -p flag with the checkout command. ok deraadt@
2004-04-09cvs does not need a private version of getopt(3), our in-tree getopt(3)Todd C. Miller
has compatible semantics.
2004-01-13Do not evaluate this->next after calling the handler; the handler mayOtto Moerbeek
have clobbered it. Resolves core dumps of cvs server on user ^C. ok millert@ deraadt@
2004-01-02Don't strip scripts; idea from mpech@; ok deraadt@Todd C. Miller
2003-12-29re-entrancy hack that is currently needed for cvs to work correctly.Theo de Raadt
well, almost. someone should track that down please.
2003-12-18Don't add -I$(srcdir)/zlib to CFLAGS since the version of zlib included withTodd C. Miller
cvs no longer matches ours. Fixes "compression initialization: error -6" as noticed by espie@ and others.
2003-12-18cvs uses zlib, not gzip; remove a lie. OK deraadt@Todd C. Miller
2003-12-17Quick fix for zlib's update.Marc Espie
2003-12-16Better fix for MALLOC_OPTIONS=J bug. Something had problems withTodd C. Miller
returning a NULL label so now we just the epoch for the timestamp if we cannot stat the file. OK deraadt@
2003-12-12Add a check for absolute pathnames; from cvs 1.11.10; deraadt@ OKTodd C. Miller
2003-09-25Free buffer and set it to NULL on error lest it be used.Todd C. Miller
Fixes a crash when MALLOC_OPTIONS includes 'J' found by david@.
2003-07-20No need to link with -lasn1 or -lcom_err anymore.Todd C. Miller
2003-06-10Install rcs2log, not a symlink to ../share/cvs/contrib/rcs2logTodd C. Miller
Fix from SUZUKI Hitoshi; closes PR 3298
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2003-05-16syncHans Insulander
2003-05-16Don't link with -lkrb -lkafs.Hans Insulander
ok jakob@
2003-05-12Disable krb4 support in preparation for krb4 removal.Magnus Holmberg
ok jakob@, hin@
2003-05-06minor string cleanings; tdeval okTheo de Raadt
2003-02-16a few missing man pages converted from info documents; work done by jmcTheo de Raadt
2003-01-23Add a "DisableXProg" option to CVSROOT/config that can be used toTodd C. Miller
disable support for Update-prog and Checkin-prog. This is a good idea for anonymouse cvs servers or anyone who doesn't need this feature. From Stefan Esser.
2003-01-20In dirswitch(), don't free dir_name until right before allocatingTodd C. Miller
it again. This removes a potential double-free problem, whereby this function could free dir_name and then immediately return due to invalid directory syntax (without ever reassigning dir_name), then re-enter and free dir_name again. Fix from Stefan Esser.
2002-12-09From Andrushock, s/sucess/success/gTodd C. Miller
2002-07-06dont deref NULL pointer in IPv6 pserver client operation.Jun-ichiro itojun Hagino
From: Moritz Jodeit <moritz@jodeit.org>
2002-06-21make pserver code IPv6 ready. markus okJun-ichiro itojun Hagino
2002-06-21Document CVSREADONLYFS and -R. ok henning@, tholo@Kjell Wooding
2002-06-03fix typoTodd T. Fries
2002-06-03make ro /usr/src work again, tholo@ okTodd T. Fries
while I'm here, make 'cleandir' cleanup all files
2002-06-03make ro /usr/src work againTodd T. Fries
while I'm here, make 'cleandir' cleanup all files
2002-05-31don't write CVSvn.texi to src.Wilbern Cobb
ok millert@.
2002-05-15syncTheo de Raadt
2002-05-15use -ldesTheo de Raadt
2002-04-20If $HOME/.cvspass does not exist and we're login, don't abort but createFederico G. Schwindt
the file. Based on a similar diff commited to cvs repository, except we don't warn if the file doesn't exist and we set cvsroot correctly in all the cases. tholo@ ok.
2002-01-08Allow a CVS tagname to be expanded during checkout, export and update to beThorsten Lockert
specified on the command line; ok niklas@ pval@
2001-11-21Dummy out aclocal, autoconf, automake, and autoheader since thereTodd C. Miller
are still things in cvs's Makefile.in files that will attempt to run e.g. autoheader. Doing this here should mean we don't get hosed again the next time cvs is updated. I believe Marc Espie suggested something similar a while ago.
2001-11-06start editor in an empty line as used to be; deraadt@ agrees.Federico G. Schwindt
2001-10-06Do not attempt to rebuild Makefile.in, configure, config.h.in orTodd C. Miller
stamp-h1.in. Modifying files in the source tree considered harmful.
2001-10-04avoid /tmp races by using mktemp(1)Todd C. Miller
2001-09-30Don't pass $DESTDIR where generated Makefiles already handle itThorsten Lockert
2001-09-30Install where we expectThorsten Lockert
2001-09-30Build in and install from obj directoryThorsten Lockert
2001-09-30Revert to distributed versionThorsten Lockert
2001-09-29Merge remaining local changes, correct build issuesThorsten Lockert
2001-09-28Merge local changes; work in progressThorsten Lockert
2001-09-28Latest from Cyclic SoftwareThorsten Lockert
2001-09-28Latest from Cyclic SoftwareThorsten Lockert
2001-09-25let configure script use GNUSYSTEM_AUX_DIRMarc Espie
2001-09-11yes this is a configure diff, but this library order is needed for static ↵Theo de Raadt
library linking
2001-08-30Fixed version of Matthieu's change from revision 1.12Todd C. Miller
OK matthieu@ && deraadt@
2001-08-29Nope, this makes cvs dump coreTheo de Raadt