summaryrefslogtreecommitdiffstats
path: root/libexec/fingerd
AgeCommit message (Collapse)AuthorFilesLines
2019-06-28When system calls indicate an error they return -1, not some arbitraryderaadt1-3/+3
value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.
2018-08-03Move pledge to after getopt, when the finger program becomes knownderaadt1-4/+6
(defaults to /usr/bin/finger, but can be redefined with -P option). Then unveil that program for "x" (execution), and pledge as before. No other filesystem accesses occur after that point.
2015-11-134-step pledge in a program noone really uses anymore.deraadt1-1/+14
pledge "stdio inet dns proc exec" at startup. In the logging codepath, "stdio dns proc exec" after getpeername() drop to stdio proc exec(), before fork / execve Parent moving data out of the pipe only needs "stdio"
2015-11-13_exit() in the child; as a result, must use syslog() directly.deraadt1-2/+3
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers wherederaadt1-2/+3
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
2015-01-15remove .Tn; from Jan Stary <hans at stare dot cz>schwarze1-9/+7
2014-11-20user error is not a bug. fingerd is not responsible for filtering outtedu1-18/+3
incorrect client garbage. ok deraadt sthen
2013-11-14Add STANDARDS section to finger(1)/fingerd(8).bentley1-3/+10
tweaks/ok jmc@
2012-12-04remove some unnecessary sys/param.h inclusionsderaadt1-2/+1
2009-10-27rcsid[] and sccsid[] and copyright[] are essentially unmaintained (andderaadt1-15/+1
unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms
2008-08-11Prevent a buffer underrun if a line is received which only containstobias1-3/+3
(multiple) @. ok millert, otto
2007-09-25better wording; from Tamas TEVESZjmc1-4/+4
2007-05-31convert to new .Dd format;jmc1-3/+3
2006-08-19Don't shadow err(3).ray1-18/+17
Store strlen() results in a size_t. Add __dead to both usage() and logerr(). Get rid of /* NOTREACHED */. Get rid of extraneous _exit(). Calls err(3) on getpeername failure. ``reads well to me!'' avsm@
2006-01-17Incllude <sys/param.h> to get MAXHOSTNAMELENmillert1-3/+3
2003-11-02some corrections from wiz@netbsd;jmc1-5/+5
2003-10-17slight update for fingerd; sort options;jmc2-34/+37
2003-08-08refer to RFCs consistently (RFC XXXX);jmc1-4/+3
2003-06-02Remove the advertising clause in the UCB license which Berkeleymillert3-20/+8
rescinded 22 July 1999. Proofed by myself and Theo.
2002-09-06use socklen_t more; henning okderaadt1-3/+3
2002-07-03KNFderaadt1-6/+4
2002-06-02minor KNFderaadt1-3/+3
2002-02-19We live in an ANSI C world. Remove lots of gratuitous #ifdef __STDC__ cruft.millert1-18/+4
2002-02-16Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.millert1-4/+4
2001-12-07kill more registers;mpech1-4/+4
millert@ ok
2001-11-27When copying command line arguments to out new argument vector,millert1-8/+12
don't go past the end of the buffer. Not a security issue since root controls the fingerd arguments. Noticed by Brian Poole.
2001-11-13o) fix bogus .Xr usage;mpech1-3/+3
o) start new sentence on a new line; o) don't use .Xr instead of .Pa tag; o) minimal -mdoc design fixes; millert@ ok;
2001-08-18strlcpy invades the treederaadt1-3/+3
2001-07-08-Wallderaadt1-4/+6
2001-01-28$OpenBSD$niklas2-3/+3
2001-01-25KNFderaadt1-3/+3
2000-09-08Some miscellaneous man page repairs.aaron1-15/+16
2000-08-18check error result from getnameinfo.itojun1-4/+8
2000-08-02update other obsoleted rfcsprovos1-3/+3
2000-07-07Change fingerd back to using fgets(3), not fgetln(3). Using fgetln(3)millert1-25/+7
was a mistake since it allows an attacker to trivially drive up the load on a machine. Of course, this can still be done with multiple connections but there's no reason to make it easier than it needs to be. This also simplifies the logging a bit.
2000-03-14Suffix "i.e." and "e.g." with a comma. Just another really picky man pageaaron1-4/+4
commit, as we want our documentation to be as consistently formatted as possible (it's getting there :-)).
1999-11-15logging getpeername() failures is a waste of timederaadt1-4/+6
1999-08-02typopjanzen1-3/+3
1999-07-21use .Ar on later .It Fl linesderaadt1-3/+3
1999-07-20bad arguments? usage() should syslog()deraadt1-3/+13
1999-07-09- remove all trailing whitespaceaaron1-4/+4
* except when it is escaped with a `\' at the end of the line - fix remaining .Nm usage as well - this is from a patch I received from kwesterback@home.com, who has been working on some scripts for fixing formatting errors in mdoc'd man pages Ok, so there could be a cost/benefit debate with this commit, but since I have the patch we might as well commit it...
1999-07-03use getnameinfo()deraadt1-13/+9
1999-05-23remove argument from .Os macros so value in /usr/share/tmac/mdoc/doc-commonaaron1-3/+3
is used instead; kwesterback@home.com
1999-02-24fowarding -> forwardingaaron1-3/+3
1997-11-21Remove LOG_CONS from openlog() call so every darned finger connect messagegene1-3/+3
doesn't go to console. Change discussed and checked with millert.
1997-11-171) use fgetln for arbitrary sized linesmillert1-14/+42
2) do puts("foo\r") not puts("foo\r\n") as puts adds a \n itself 3) log the command given when -l is specified, replacing \r, \n, NULL with ' ' 4) with -l, log possible probes (ie: EOF) that were previously ignored
1997-08-16<string.h> not <strings.h>millert1-3/+3
1997-08-16OpenBSD tags and document assumption about finger(1) arg parsing.millert1-2/+11
1997-07-25#if __STDC__ --> #ifdef __STDC__mickey1-4/+4
1997-07-23tabifykstailey1-2/+2