Add missing memcpy calls for auth_key_in / out in merge_auth_conf()
This was broken when refactoring the code for RTR and only affects
manual IPSec setups which are very uncommon.
OK tb@
Error handling the double reallocarray in ch_table_resize() is tricky.
In case of a realloc failure for the meta tables the ch_tables arrays
was already successfully reallocated. Doing the free(tables) in the error
path results in a use-after-free scenario and instead on error ch_tables
just needs to be updated to this new table. Since the ch_level is not
adjusted the next time, reallocarray will be called on a memory block
that is already big enough which is a NOP and so this is safe.
Further cleanup will follow.
OK tb@
bump -python; lang/python is added to MODULES after bsd.port.arch.mk is
inckuded, so it's unable to take full effect and _MODPY_SYSTEM_VERSION
is not reflected in PKG_ARGS.
avoid validating bad cipher or mac lists in config files / commandline
arguments as valid.
Identified by SUSE and reported by Camila Camargo de Matos
ok deraadt@ tb@
fix hard-to-reach NULL deref during pubkey auth
To hit this, the user must be using a PEM style private key with no
corresponding .pub key adjacent to it.
rpki-client: fix incomplete strncmp() check
The directory path in rp->repouri doesn't end in a '/' itself, so check
that the uri containing an unused file points at something below it.
Pointed out by Frank Denis
ok claudio job
update to cassette 0.2.2
Upstream moved from gitlab.gnome.org to altlinux.space, the latter using
forgejo with tarball generation disabled for tags and releases, i.e.
there is no way to fetch sources from such repos unless developers upload
static release assets.
The author kindly did that upon my request; new releases should come
with more conventional tarballs so our DISTFILES and WRKDIST goo can go.
Fix bad sizes in certain graceful restart imsgs.
The move to use more u_int for aid also changed the imsgs
IMSG_SESSION_STALE, IMSG_SESSION_NOGRACE, IMSG_SESSION_FLUSH, and
IMSG_SESSION_RESTARTED. The problem was that not all senders were
adjusted.
OK tb@
