wireguard-openbsd/lib/libc/gen/authenticate.c, branch jd/queueboosts

libc's authentication privsep layer performed insufficient username

2019-12-04T06:25:45Z

validation. Repair work mostly by markus and millert, first of all solving the primary problem, then adding some additional validation points. And then futher validation in login and su. This will be 6.5/021_libcauth.patch.sig and 6.6/010_libcauth.patch.sig Reported by Qualys

When system calls indicate an error they return -1, not some arbitrary

2019-06-28T13:32:41Z

value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.

Use S_ISDIR instead of doing it by hand. No binary change.

2016-05-26T15:51:37Z

Use reentrant versions of getpw{nam,uid} and getgr{nam,gid} within

2015-11-24T22:03:33Z

libc to avoid reusing the static buffers returned by the non-reentrant versions. Since this is inside libc we can use constants for the buffer sizes instead of having to call sysconf(). OK guenther@ deraadt@

remove null check before free. from Michael McConville

2015-09-14T16:09:13Z

ok semarie

Wrap so that calls go direct and the symbols are all weak

2015-09-12T15:20:14Z

Add framework for resolving (pun intended) libc namespace issues, using

2015-08-31T02:53:56Z

wrapper .h files and asm labels to let internal calls resolve directly and not be overridable or use the PLT. Then, apply that framework to most of the functions in stdio.h, string.h, err.h, and wchar.h. Delete the should-have-been-hidden-all-along _v?(err|warn)[cx]? symbols while here. tests clean on i386, amd64, sparc64, powerpc, and mips64 naming feedback from kettenis@ and millert@ ok kettenis@

use explicit_bzero to clear some memory that had creds in it instead of

2015-08-27T13:33:24Z

memset. ok deraadt@ millert@

most obvious unsigned char casts for ctype

2013-11-24T23:51:28Z

ok jca krw ingo

Use PATH_MAX, NAME_MAX and LOGIN_NAME_MAX not MAXPATHNAMELEN,

2013-09-30T12:02:30Z

MAXNAMLEN or MAXLOGNAME where possible. OK deraadt@