54 Commits

Author SHA1 Message Date
sthen
fa88dde259 untangle net-snmp to stop using openbsd{4,5}.h etc. 2016-05-12 22:00:14 +00:00
jca
f739190e22 Unbreak: stop using if_var.h/struct ifnet to retrieve ipv6 data.
"looks fine to me" jasper@, ok sthen@
2015-12-08 16:50:40 +00:00
sthen
7cee0b72d8 Run net-snmp as _netsnmp instead of root, doing this currently requires
disabling the ipv6 mib - this is done in the rc script so it can be
overridden with netsnmpd_flags if required (but just run snmpd from base,
really ....)

Reported by Pierre Kim.

Drop unnecessary patch while there, the problem it was meant to fix was
already fixed in 5.7.3.
2015-11-05 23:43:46 +00:00
sthen
1c94df2da7 handle ifmedia64
interface_openbsd.c seems unused but patch there as well anyway in case
anything else uses it later..
2015-09-11 16:33:05 +00:00
sthen
40854d3325 SECURITY fix, use calloc instead of malloc to zero the netsnmp_variable_list
struct, to avoid issues when processing malicious PDUs.

Reported by Qinghao Tang on oss-sec.
http://www.openwall.com/lists/oss-security/2015/04/13/1
2015-04-13 08:41:36 +00:00
sthen
a25d8226b4 update to Net-SNMP 5.7.3
- roll -perl subpackage into -main, this greatly simplifies PLIST handling
for package updates. bumps to dependent ports to follow after this commit.
2014-12-09 15:20:06 +00:00
sthen
b02b53695e fix pod errors 2014-03-20 12:46:15 +00:00
krw
11e2317fb5 Apply tedu@'s Christmas Miracle cure for TAILQ_PREV vs kvm_read()
while traversing inpt_queue. Fix botch in previous commit by
initializing next and prev once each, rather than prev twice and next
not at all. Eliminate 'skip:' and use 'continue' instead, since code
after 'skip:' was pointless. Nuke now unused variable 'head'.
2013-12-27 23:08:02 +00:00
krw
aca9fb9511 Adapt to change of inpt_queue to TAILQ from CIRCLEQ.
ok sthen@
2013-12-20 02:20:00 +00:00
naddy
792c32ed74 remove some gcc2 workarounds 2013-08-07 16:49:36 +00:00
espie
3456ffe6f5 fix the one 'declaration after statement' that prevents vax from building this. 2013-07-01 16:29:29 +00:00
sthen
e4626c1453 handle removal of swapins/swapouts from struct uvmexp in uvm_extern.h 1.105
similar to a diff from Pavel Korovin, also reported by Mark Patruck
2013-05-17 22:42:24 +00:00
sthen
40f5f67190 cope with sysctl.h changes 2012-12-18 21:38:12 +00:00
sthen
7b2ac5e4a1 disable notification-log-mib for now; causes an 8KB/trap leak in snmptrapd 2012-12-11 15:30:56 +00:00
sthen
c7f5986d4b update to Net-SNMP 5.7.2; lots of fixes and improvements
- many of our local patches are now committed upstream
2012-10-18 14:01:45 +00:00
jasper
64bd2d9a22 Security fix for Security fix for CVE-2012-2141 net-snmp: Array index error,
leading to out-of heap-based buffer read (snmpd crash)

ok sthen@ (MAINTAINER)
2012-05-03 20:06:51 +00:00
sthen
310dd5ec36 various fixes to Net-SNMP, mostly from upstream repo, one chunk suggested
by Joel Knight to avoid a segfault
2011-11-28 22:40:25 +00:00
sthen
1cef5eeefa update net-snmp to 5.7.1 2011-11-18 12:39:06 +00:00
sthen
0b1e9c8e87 - remove an unnecessary hackish #define now we have 5.x in version strings
- better fix for the mib parser error-message spam
2011-07-19 21:32:38 +00:00
sthen
d757d8b184 zap pointless patch fragment 2011-07-07 21:51:22 +00:00
sthen
41728dbfa1 update to Net-SNMP 5.7 and clean up the patches a lot.
- rc scripts added (names suggested by Nigel Taylor, I was having
a hard time coming up with something nice that avoid a conflict with
base snmpd now the rc.d namespace is shared).
2011-07-07 20:02:02 +00:00
sthen
f4414ad075 update net-snmp to 5.6.1.1 2011-07-06 22:02:25 +00:00
sthen
7d7c74743c - convert kinfo_proc2 -> kinfo_procs
- don't use "#if defined(openbsd3) || defined(openbsd4)" all over the place,
this is definitely not web scale

- zap some pointless ifdefs
2011-07-06 21:32:57 +00:00
sthen
c667e4d069 remove some patch insanity 2011-07-06 13:06:10 +00:00
sthen
f014fa3c88 - remove a patch which is a noop
- remove a CONFIGURE_ARGS which is a noop
- bump REVISION; gratuitous really, but there's no point in not doing so
at this time.
2011-03-16 22:45:20 +00:00
sthen
3698f9e335 update to 5.6.1 2011-01-15 09:38:31 +00:00
sthen
f3d1ed16b6 feed the right size to kvm_getproc2 2010-10-26 00:42:21 +00:00
sthen
6777cb023e update Net-SNMP to 5.6 and switch to kvm_getproc2, thanks landry for testing
"commit it!" landry@
2010-10-25 22:59:12 +00:00
sthen
420b23fcc5 update Net-SNMP to 5.4.3 and pick up OpenBSD mibs from /usr/share/snmp/mibs 2010-09-21 10:43:04 +00:00
sthen
6d90a631bc Build with --enable-mfd-rewrites to allow 64-bit counters to work.
Requested/tested by Johan Karlsson.
2010-05-19 15:50:00 +00:00
giovanni
8ff2e5415d Add a -tkmib package
ok ajacoutot@ with a similar diff
2009-08-17 14:58:45 +00:00
jasper
dedfb1acca - roll in a security fix for SA33884, which could disclose sensitive information
* patch taken from upstream svn

"<sthen_p> makes sense if you can get it in before lock" on rui's diff
ok rui@ (MAINTAINER) who came up with the same diff
2009-02-13 09:39:38 +00:00
sthen
c32f7d80bb teach net-snmp how to skip routing messages with the wrong version;
fixes route display in IP-MIB. from joel@.

"if it works for you go ahead" rui@ (maintainer).
2008-12-22 10:43:59 +00:00
sthen
6134570789 SECURITY fix, update to 5.4.2.1, CVE-2008-4309:
A bug in the getbulk handling code could let anyone with even minimal
access crash the agent.

(straight out of malloc(3) "be careful to avoid...")

ok rui@ (maintainer)
2008-11-07 09:48:40 +00:00
sthen
fa21bd3ed4 - re-enable kmem support, with 5.4.2 there don't seem to be
any problems on tested arch (including the ones that used to
have trouble).

- repair sysctl() use in cpu_sysctl.c, it was using the wrong
type and at least on some arch the system call was failing, so
because the code isn't careful about checking return codes and
thus used uninitialized space, it tried to allocate memory for
info structures for 128 million CPUs on one of my systems...

"definitely ok" rui@
2008-09-22 18:46:36 +00:00
rui
5315fbba5b - maintenance update to net-snmp 5.4.2. Check the Changelog for more information.
ok sthen@
2008-09-20 22:15:51 +00:00
sthen
bffc2c2c8c Avoid a divide-by-zero which kills Net-SNMP's snmpd running
on sparc64 when you snmpwalk against it.

From http://marc.info/?l=openbsd-ports&m=119175114720453&w=2

ok rui
2008-06-14 07:48:23 +00:00
sthen
b374203f48 SECURITY update to fix CVE-2008-0960, http://secunia.com/advisories/30574/
A vulnerability has been reported in Net-SNMP, which can be exploited
by malicious people to spoof authenticated SNMPv3 packets.

The authentication code reads the length to be checked from sender
input, this allows the sender to supply single byte HMAC code and
have a 1 in 256 chance of matching the correct HMAC and authenticating,
as only the first byte will be checked. The sender would need to
know a valid username.

ok rui (maintainer)
2008-06-10 18:00:35 +00:00
okan
dd181a31e6 HW_(PHYS|USER)MEM64 fix
ok naddy@
2008-02-28 18:26:28 +00:00
rui
11d8b0dd79 update net-snmp to 5.4.1, also adds a patch from claudio@ to allow 64bit network counters.
Changelog: http://net-snmp.sourceforge.net/about/ChangeLog.html

tested by Graeme Lee, ok mbalmer@
2007-09-26 20:03:42 +00:00
ajacoutot
f6e8f87061 - remove powerpc compile tweak now that drahn@ fixed vmparam.h
- regen patches while here
2007-06-14 18:19:24 +00:00
ajacoutot
24273ded69 - fix compilation under powerpc
discussed with and ok rui@
2007-06-13 15:15:01 +00:00
rui
fc2d401e39 update net-snmp to 5.4, maintainer timeout
- changelog: http://www.net-snmp.org/about/ChangeLog.html

ok steven@
2007-05-19 10:52:06 +00:00
steven
b3cfb1453f make access to various memory bits like the enterprises.ucdavis.memory tree
work again on OpenBSD 4.

from Jim Dew <jdew at yggdrasil.ca>
2006-09-30 22:03:56 +00:00
steven
b60ba531a5 - unbreak build which failed due to machine/types.h removal
- do not run ldconfig during fake, noticed by Moritz Grimm.

ok naddy@
2006-01-10 19:08:21 +00:00
steven
3c4f742dab remove LIBname_LTVERSION variables from patches 2006-01-08 11:36:04 +00:00
steven
b2a70fdd85 SHARED_LIBS and USE_LIBTOOL
ok bernd@
2006-01-03 17:37:18 +00:00
bernd
d172697737 Don't include -lwrap in 'net-snmp-config --libs' output. This unbreaks
some ports which depend on net-snmp. Bump PKGNAMEs.

found by naddy@

a lot of help & ok sturm@
2005-11-12 00:30:48 +00:00
bernd
5f484e443f Security update to net-snmp-5.1.3.
- fix potential race condition in fixproc script
- fix DOS vulnerability on tcp connections

help & ok sturm@
2005-11-05 19:09:38 +00:00
naddy
305d75f0f5 Fix for route addition/deletion.
Originally from Darwin, found by Alexandre Anriot.
2005-06-13 22:42:00 +00:00