ocsp: validate URI characters in OCSP
In OCSP_sendreq_new() and OCSP_parse_url() reject URIs containing control
characters. Since these APIs are typically used to create a POST request
to an untrusted cert's Authority Information Access accessLocation URI,
lack of sanitization meant that there is a path for header injection via
CRLF and similar tricks.
Reported by Aziz ELBELAYCHY (also for ocspcheck.c r1.40)
ok beck kenjiro
Wait up to 1 second for lite software reset to complete instead of 5 ms,
matching the Linux lan78xx driver. This fixes "timeout on lite software reset"
on a LAN7800.
ok kettenis@
Fix a kernel stack overflow in mue_init_ltm().
idx[] was uint8_t[6] but the LTM table read into it is 24 bytes.
Also handle mue_read_eeprom() errors like Linux does and byte swap
the values with letoh32().
Reported by Acts1631
ok kettenis@
Remove abandoned, broken setuid-root net/bing
No HOMEPAGE, multiple newer versions on the internet, distfile mirrored
and segfault on startup.
OK kirill sthen
Remove abandoned, broken setuid-root net/fping
No HOMEPAGE, multiple newer versions on the internet, distfile mirrored
and segfault on startup.
OK kirill sthen
lang/gcc/16: build stage1 compiler with -O2
By default it builds stage1 compilers as -g only which leads to large binaries
like ~350Mb on amd64, and replacing it by -O2 reduces size of them to ~50Mb.
What reduces build time at fast amd64 with NVME from ~28 to ~15 minutes.
ocspcheck: check all OCSP AIA URLs for invalid characters
Check every OCSP AIA URL in the certificate, rather than only the
first. The first URL remains the one used for the request.
pointed out by tb@
ok tb@ beck@
ocspcheck: reject control characters in OCSP URL
Reject OCSP URL containing non-ASCII or control characters before
using their path in an HTTP request. This prevents HTTP request
injection via a certificate's AIA URI.
ok tb@ beck@
sys/video: fix video buffer handling and mmap lifetime
Check dequeue errors and allocation bounds, correct the mmap buffer base,
and revoke user mappings before freeing capture buffers.
Based on diffs from Acts1631, thanks!
OK: mglocker@
