Go to file
Martin Matuska 5ed7eb0d97 libarchive: merge security fix from vendor branch
This commit fixes a couple of security vulnerabilities in the PAX writer:
1. Heap overflow in url_encode() in archive_write_set_format_pax.c
2. NULL dereference in archive_write_pax_header_xattrs()
3. Another NULL dereference in archive_write_pax_header_xattrs()
4. NULL dereference in archive_write_pax_header_xattr()

Security:	No known reference yet
Obtained from:	https://github.com/libarchive/libarchive/commit/1b4e0d0f9
MFC after:	3 days

(cherry picked from commit f10f65999f)
2023-09-11 09:05:29 +02:00
bin MFC r367136: 2020-11-02 01:34:58 +00:00
cddl MFC r364412: 2020-08-30 18:21:54 +00:00
contrib libarchive: merge security fix from vendor branch 2023-09-11 09:05:29 +02:00
crypto openssl: MFC: Fix a bug in BN_mod_sqrt() that can cause it to loop forever. 2022-03-27 22:13:52 +07:00
etc MFC: rc.d/rctl: unbreak for distinct /usr filesystem 2021-11-23 15:32:05 +07:00
gnu MFC r330366 (by emaste): 2020-05-05 18:44:06 +00:00
include MFC r366781, r366866: Implement ptsname_r. 2020-11-09 01:56:06 +00:00
kerberos5 MFC: r343011 2019-02-16 03:18:52 +00:00
lib libarchive: merge from vendor branch 2022-12-28 23:16:47 +01:00
libexec ftpd: delete dead code 2021-08-22 17:22:00 -06:00
release Document recent SAs/ENs. 2020-12-10 17:48:30 +00:00
rescue MFC bectl(8)/libbe(3): r337663-337664,337667,337697-337699,337800,337805, 2019-04-20 04:16:51 +00:00
sbin dhclient(8): Verify lease-, renewal- and rebinding-time option sizes. 2022-11-21 21:51:18 +01:00
secure caroot: cumulative cert update 2021-09-04 02:42:27 -05:00
share netmap: add a tunable for the maximum number of VALE switches 2022-03-20 09:08:36 +00:00
stand pxeboot: improve and simplify rx handling 2021-09-04 02:45:19 -05:00
sys zlib: Fix a bug when getting a gzip header extra field with inflate(). 2023-01-24 17:27:50 -05:00
targets Merge llvm, clang, compiler-rt, libc++, libunwind, lld, lldb and openmp 2020-07-24 20:54:07 +00:00
testcode Apply upstream fix 08968baec1122a58bb90d8f97ad948a75f8a5d69: 2021-06-01 12:25:27 -07:00
tests tests/netgraph: Tests for ng_vlan_rotate 2021-06-16 14:04:06 +02:00
tools Update OptionalObsoleteFiles.inc with NTP docs 2021-09-22 19:11:09 -04:00
usr.bin fetch: MFC: make -S argument accept values > 2GB 2022-06-07 02:10:43 +07:00
usr.sbin bhyve: validate e82545 checksum offset field 2022-04-06 10:19:27 -04:00
.arcconfig MFC r306435: 2018-03-05 08:44:49 +00:00
.arclint MFC r326959: 2018-03-17 01:27:54 +00:00
.cirrus.yml Cirrus-CI: reduce VM memory to 8G 2021-09-02 15:23:19 -04:00
.gitattributes MFC GELI Loader Improvements: r336252, r336254, r336256, r336354, 2019-02-20 23:55:35 +00:00
.gitignore Ignore generated LINT files 2021-02-18 16:13:31 -08:00
COPYRIGHT copyrights: Happy New Year 2021 2020-12-31 10:44:24 -05:00
LOCKS Explicitly require Security Officer's approval for kernel PRNG bits. 2013-09-17 14:19:05 +00:00
MAINTAINERS MFC r355940: 2020-05-05 17:10:49 +00:00
Makefile MFC r352929: Add a top-level makeman target 2019-10-21 01:27:01 +00:00
Makefile.inc1 installworld: handle ldd including preloaded objects 2022-04-04 10:57:48 -04:00
Makefile.libcompat MFC r349548: 2019-07-04 10:41:09 +00:00
ObsoleteFiles.inc Merge llvm, clang, compiler-rt, libc++, libunwind, lld, lldb and openmp 2020-07-24 20:54:07 +00:00
README MFC r325834,r325997,326502: Move sys/boot to stand/ 2018-02-12 01:08:44 +00:00
UPDATING Follow-up r365662 (MFC of r365371 and r365373) by correctly setting 2020-09-12 19:40:04 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree.  See build(7)
and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
for more information, including setting make(1) variables.

The `buildkernel` and `installkernel` targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process.  See build(7), config(8),
and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
for more information.

Note: If you want to build and install the kernel with the
`buildkernel` and `installkernel` targets, you might need to build
world before.  More information is available in the handbook.

The kernel configuration files reside in the sys/<arch>/conf
sub-directory.  GENERIC is the default configuration used in release builds.
NOTES contains entries and documentation for all possible
devices, not just those commonly used.


Source Roadmap:
---------------

bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

stand		Boot loader sources.

sys		Kernel sources.

tests		Regression tests which can be run by Kyua.  See tests/README
		for additional information.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/updating-src.html