cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
123,724 Commits 1 Branch 0 Tags
Commit Graph

114 Commits

Author SHA1 Message Date
sthen
31ab6ccf63 Fix previous; avoid possible strdup segfault if netsnmp_ds_get_string 
returned NULL. From Andrea Biscuola at Zabbix.
 2017-10-18 13:13:43 +00:00
sthen
374dee5d10 Fix a crash in libnetsnmp client, occurring in some circumstances where 
a local IP address is set. Cause is a use-after-free, OpenBSD's malloc
helpfully often picks these up early (with relatively low impact on
performance), often turning what would be a hidden bug into a likely
crash.

Reported and analysis from Andrea Biscuola of Zabbix,
https://support.zabbix.com/browse/ZBX-12726
https://sourceforge.net/p/net-snmp/bugs/2803/

Diff from me. I was going to wait for confirmation from Andrea that it
fixes the issue, but having read more of the code I'm confident that this
change or something like it is needed, so committing now to make it pre 6.2.
ok naddy
 2017-09-29 22:49:41 +00:00
sthen
9959a05a25 add patches to net-snmp, from upstream via afresh1, that will be needed for perl 5.24+ 2016-10-12 10:50:33 +00:00
sthen
26816dc330 Use the -r flag in net-snmp's rc.d script, as figured out by 
Theodore Wynnychenko. This tells it not to exit when it can't open
/dev/kmem etc. Fixes startup now that this access is disabled by
default in OpenBSD.

Some MIBs won't work, but in general these should be rewritten
to use sysctl interfaces.
 2016-10-11 20:47:43 +00:00
sthen
3df3bb2138 bump ports that might pick up IP_SENDSRCADDR 2016-08-17 20:58:19 +00:00
sthen
bc11f5c3af missed bump, spotted by naddy 2016-07-09 08:25:14 +00:00
sthen
e7cb613eaf sync WANTLIB 2016-07-08 16:48:21 +00:00
sthen
fa88dde259 untangle net-snmp to stop using openbsd{4,5}.h etc. 2016-05-12 22:00:14 +00:00
naddy
071c34fd6f remove SHARED_ONLY from ports that use only the gnu module 2016-03-16 21:19:37 +00:00
naddy
ce859edcb4 garbage collect CONFIGURE_SHARED 2016-03-11 20:28:21 +00:00
sthen
d148dd7700 Set pexp="${daemon}.*" for net-snmp; avoids a long delay at boot if the 
user has set a command-line arguments containing '+' (not totally uncommon).
Otherwise rc_check() now waits for pexp to match, which fails due to
the + being handled as part of a regular expression.
 2016-01-07 12:35:53 +00:00
jca
f739190e22 Unbreak: stop using if_var.h/struct ifnet to retrieve ipv6 data. 
"looks fine to me" jasper@, ok sthen@
 2015-12-08 16:50:40 +00:00
sthen
7cee0b72d8 Run net-snmp as _netsnmp instead of root, doing this currently requires 
disabling the ipv6 mib - this is done in the rc script so it can be
overridden with netsnmpd_flags if required (but just run snmpd from base,
really ....)

Reported by Pierre Kim.

Drop unnecessary patch while there, the problem it was meant to fix was
already fixed in 5.7.3.
 2015-11-05 23:43:46 +00:00
sthen
fd5416f946 install net-snmp's sample snmpd.conf with mode 600, it may contain secrets. 
reported by Pierre Kim.
 2015-11-05 21:44:04 +00:00
sthen
691c83f9b2 Bump some ports which reference if_msghdr in their source, so that package 
updates are triggered. This is following the struct if_data ABI change a few
days ago; if_msghdr has an embedded if_data.  Some may be unnecessary, but
some are definitely needed and bumps are cheaper than debugging.
Problem reported with wpa_supplicant by Mikolaj Kucharski.
 2015-10-08 21:19:21 +00:00
sthen
1c94df2da7 handle ifmedia64 
interface_openbsd.c seems unused but patch there as well anyway in case
anything else uses it later..
 2015-09-11 16:33:05 +00:00
sthen
40854d3325 SECURITY fix, use calloc instead of malloc to zero the netsnmp_variable_list 
struct, to avoid issues when processing malicious PDUs.

Reported by Qinghao Tang on oss-sec.
http://www.openwall.com/lists/oss-security/2015/04/13/1
 2015-04-13 08:41:36 +00:00
sthen
a25d8226b4 update to Net-SNMP 5.7.3 
- roll -perl subpackage into -main, this greatly simplifies PLIST handling
for package updates. bumps to dependent ports to follow after this commit.
 2014-12-09 15:20:06 +00:00
sthen
26b647a798 @comment zero-byte perl .bs files in all packages which don't have p5-* PKGNAMEs 
and bump
 2014-06-14 10:34:44 +00:00
sthen
29c50acf14 disable tcp wrappers 2014-03-23 22:04:23 +00:00
sthen
b02b53695e fix pod errors 2014-03-20 12:46:15 +00:00
sthen
89fb74cf84 Update to Net-SNMP 5.7.2.1 and merge PLISTs (perl is shared arch only, 
so no need to split to PFRAG.shared-perl.

5.7.2.1 fixes a security issue on Linux (in ICMP-MIB), but is basically
a noop update for us.
 2014-03-12 23:52:14 +00:00
krw
11e2317fb5 Apply tedu@'s Christmas Miracle cure for TAILQ_PREV vs kvm_read() 
while traversing inpt_queue. Fix botch in previous commit by
initializing next and prev once each, rather than prev twice and next
not at all. Eliminate 'skip:' and use 'continue' instead, since code
after 'skip:' was pointless. Nuke now unused variable 'head'.
 2013-12-27 23:08:02 +00:00
krw
aca9fb9511 Adapt to change of inpt_queue to TAILQ from CIRCLEQ. 
ok sthen@
 2013-12-20 02:20:00 +00:00
naddy
792c32ed74 remove some gcc2 workarounds 2013-08-07 16:49:36 +00:00
espie
4b11dac8e5 net-snmp now builds on vax! but the perl packages do not build at all, 
not surprisingly
 2013-07-03 04:15:42 +00:00
espie
3456ffe6f5 fix the one 'declaration after statement' that prevents vax from building this. 2013-07-01 16:29:29 +00:00
sthen
1164a443f4 Add WANTLIB-perl+=perl to ensure this gets updated if Perl's ABI changes. 2013-06-28 22:33:19 +00:00
sthen
e4626c1453 handle removal of swapins/swapouts from struct uvmexp in uvm_extern.h 1.105 
similar to a diff from Pavel Korovin, also reported by Mark Patruck
 2013-05-17 22:42:24 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
sthen
40f5f67190 cope with sysctl.h changes 2012-12-18 21:38:12 +00:00
sthen
7b2ac5e4a1 disable notification-log-mib for now; causes an 8KB/trap leak in snmptrapd 2012-12-11 15:30:56 +00:00
sthen
c7f5986d4b update to Net-SNMP 5.7.2; lots of fixes and improvements 
- many of our local patches are now committed upstream
 2012-10-18 14:01:45 +00:00
sthen
9f9069554b sync wantlib 2012-08-23 15:50:05 +00:00
sthen
eb99f54925 Rename snmpd(8) and snmpd.conf(5) manpages to have a netsnmp- prefix, 
to avoid conflicting with manpages for base snmpd. Suggested by blambert@
 2012-05-11 13:14:43 +00:00
jasper
64bd2d9a22 Security fix for Security fix for CVE-2012-2141 net-snmp: Array index error, 
leading to out-of heap-based buffer read (snmpd crash)

ok sthen@ (MAINTAINER)
 2012-05-03 20:06:51 +00:00
sthen
276bf947ee Remove net-snmp workaround now that OPENBSD-PF-MIB is installed in the OS. 2012-04-11 16:31:14 +00:00
sthen
80d1f3325a Install OPENBSD-PF-MIB.txt in share/snmp/mibs to work around a bug with 
system mibs reported by krw@ and dhill@ (this should be fixed in base soon
when PF-MIB support is added to snmpd).
 2012-02-21 22:10:20 +00:00
sthen
310dd5ec36 various fixes to Net-SNMP, mostly from upstream repo, one chunk suggested 
by Joel Knight to avoid a segfault
 2011-11-28 22:40:25 +00:00
sthen
1cef5eeefa update net-snmp to 5.7.1 2011-11-18 12:39:06 +00:00
sthen
0c5b2a7fc7 bump, if.h 2011-11-16 00:11:35 +00:00
espie
d0fa01c846 normalize pkgpath 2011-09-16 11:13:37 +00:00
sthen
0b1e9c8e87 - remove an unnecessary hackish #define now we have 5.x in version strings 
- better fix for the mib parser error-message spam
 2011-07-19 21:32:38 +00:00
sthen
925f4f6525 better DESCRs 2011-07-08 11:53:28 +00:00
sthen
d757d8b184 zap pointless patch fragment 2011-07-07 21:51:22 +00:00
sthen
41728dbfa1 update to Net-SNMP 5.7 and clean up the patches a lot. 
- rc scripts added (names suggested by Nigel Taylor, I was having
a hard time coming up with something nice that avoid a conflict with
base snmpd now the rc.d namespace is shared).
 2011-07-07 20:02:02 +00:00
sthen
f4414ad075 update net-snmp to 5.6.1.1 2011-07-06 22:02:25 +00:00
sthen
7d7c74743c - convert kinfo_proc2 -> kinfo_procs 
- don't use "#if defined(openbsd3) || defined(openbsd4)" all over the place,
this is definitely not web scale

- zap some pointless ifdefs
 2011-07-06 21:32:57 +00:00
sthen
c667e4d069 remove some patch insanity 2011-07-06 13:06:10 +00:00