Age | Commit message (Collapse) | Author |
|
|
|
|
|
ok florian
|
|
unprivileged user is not present instead of erroring out. This lets
ping and traceroute work in restricted enviornments like the bgplg
chroot.
Problem reported by sthen@
input & prodding deraadt@
|
|
It does not buy us much when called as a unpriv user. But if run as
root we can now lose privileges.
Input deraadt@
OK benno@, sthen@
|
|
We can get rid of inet_aton(3) and use the AF independent getaddrinfo(3).
OK natano@, krw@, millert@, claudio@
|
|
worker.c contains all other functions, and i tracked down which global
variables are used in which file and marked them accordingly with
static (or not). No functional change, just the basis of further work.
ok florian@, deraadt@
|
|
correctly - logically complete that now by removing MLINKS from base;
authors need only to ensure there is an entry in NAME for any function/
util being added. MLINKS will still work, and remain for perl to ease
upgrades;
ok nicm (curses) bcook (ssl)
ok schwarze, who provided a lot of feedback and assistance
ok tb natano jung
|
|
The -A (Look up the AS number for each hop address) use DNS service.
ok jca@ sthen@
|
|
is NULL.
Noticed while trying to hoist the source address selection from
traceroute into ping / ping6.
|
|
|
|
we can tame it substantially with "stdio inet", plus "dns" if the -n option
is missing. a successful exploit against it then cannot create files, or
perform a variety of other operations, as described in the tame(2) man page.
florian helped me a fair bit hoisting initization code upwards in ping,
ping6, and traceroute, to make tame work here.
|
|
In some cases, do additional cleanup in the immediate vicinity.
|
|
pointed out by deraadt@
|
|
No object change.
|
|
intervals from src/sbin/ping/ping.c r1.115.
> use clock_gettime(CLOCK_MONOTONIC) to get timestamps to measure the
> interval between sending a ping and getting a reply for it.
>
> this makes it resistant against local wall clock changes, which can
> skew the intervals reported or make them go negative.
this version puts clock_getting in a local gettime() function that
converts to a struct timeval that all the previous callers of
gettimeofday expect to get.
requested by deraadt@ florian@
|
|
OK krw@, tedu@, deraadt@
|
|
ok florian
|
|
been one char too big when it was defined in terms of MAXHOSTNAMELEN.
While here, NI_MAXHOST is big enough for getnameinfo(3).
OK benno@
|
|
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)
|
|
so we don't rely on undefined behavior. OK deraadt@
|
|
ok millert@
|
|
found with the new mandoc(1) MANDOCERR_AN_MISSING warning;
no text changes
|
|
Issue pointed out by, tweak and "looks ok" jmc@
|
|
first, remember which failed, drop privs and then decide which sockets
are needed and close the others.
Only error out if the creation of a needed socket failed. That is it
is non-fatal if tracerouting an INET4 address and the INET6 socket
creations failed.
prodding deraadt@; OK benno@
|
|
byte packets" in the first line of traceroute output is the length of
the complete IP packet, fix this for traceroute6.
OK benno@
|
|
OK benno@
|
|
ok florian@
|
|
and traceroute6; i also fudged the formatting to allow SYNOPSIS to display a
bit nicer, and for usage() to look like SYNOPSIS;
ok florian
|
|
help/ok florian
|
|
|
|
way;
|
|
I was originally sent on this little errand by deraadt@.
OK sthen@, benno@
(Committing from a bus somewhere in germany on its way to berlin.)
|
|
|
|
"sure" jmc@
|
|
"sure" jmc@
|
|
Not yet enabled in the build.
OK benno@
|
|
OK benno@
|
|
OK benno@
|
|
OK benno@
|
|
OK benno@
|
|
OK benno@
|
|
OK benno@
|
|
OK benno@
|
|
it failes with ENOMEM in traceroute.
OK benno@
|
|
the AF switch.
OK benno@
|
|
for the AF switch.
|
|
AF independet places.
OK benno@
|
|
OK benno@
|
|
OK benno@
|