There is a use after free in kwbimage, found by building u-boot with the
use after free detection enabled in malloc. When building the clearfog target:
MKIMAGE u-boot-spl.kwb
Segmentation fault (core dumped)
kwbimage_generate -> image_version_file (alloc and free image_cfg global)
kwbimage_generate -> image_headersz_v1 -> image_count_options (image_cfg used)
It isn't clear to me if image_version_file should be inlined or another
approach taken, but as it stands it is clearly wrong.
The result of image_version_file is also never checked for -1 which multiple
paths in the function return.
I reported this on the u-boot list a week or so ago but no one has responded
so far.
previously /var/run/dmesg.boot or dmesg(8) would be parsed however that could
lead to bogus values (e.g. the full "Enhanced SpeedStep" line) if the buffer
contained multiple (partial) dmesgs
this is more in line with other platforms where the version fact is a numerical
value and the release an identification string:
"ansible_facts": {
"ansible_distribution": "OpenBSD",
"ansible_distribution_release": "current",
"ansible_distribution_version": "6.0"
},
- Drop processor_cores fact with bogus value (hardcoded 'NA')
- Implement DMI facts (product_name, product_version, product_uuid,
product_serial and system_vendor)
u-boot contains a static crc table with endian calls which requires the
endian calls to be macros.
lib/crc32.c:87: error: braced-group within expression allowed only inside a function
Define the glibc names in u-boot compiler.h as at least some parts of
the non-cross build assumes those names are present (ie crc32.c).
ok jca@
'content' if it didn't contain it yet.
while there have been various (stalled) attempts to get this upstream, i'd
rather not alter ansible's behaviour in ports as it would lead to non-portable
playbooks between openbsd and non-openbsd control nodes.
ok aja@ rpe@
also discussed with Patrik Lundin
cs is a program for concurrently executing ssh(1) or scp(1) on a number of
hosts. It is intended to automate running remote commands or copying files
between hosts on a network. Public key authentication is used for establishing
passwordless connection.
Note that the utility has been renamed from cs to go-cs to prevent a conflict
with the www/clearsilver port.
ok jasper@
