vmd(8): restrict qcow2 cluster shifts at parse time.
Qcow2 minimum is 9 (512 bytes). Cap a maximum at 21 (2 MiB).
Report and diff by Andrew Griffiths.
ok hshoexer@
vmd(8): reject short qcow2 l2 metadata reads.
Prevents use of partially initialized buffer if the read is short.
Report and diff by Andrew Griffiths.
ok hshoexer@
Switch rad and ractl to use imsgbuf_get.
Trivial conversion since the imsg_get return value is only used to check
for error and an empty queue.
OK florian@
Exclude LOGIN_SETXDGENV from flags when pwd is NULL
This follows LOGIN_SETGROUP and LOGIN_SETLOGIN which do the same.
Calling setusercontext with a NULL pwd argument should not cause
a crash. Skipping LOGIN_SETXDGENV in this case is fine since the
combination of now pwd entry and LOGIN_SETXDGENV makes no sense.
Documentation change suggested by deraadt@
OK jca@
Rework error handling in rrdp_handle_file.
Do not alter the repo state to REPO_FAILED on system errors in
rrdp_handle_file. Instead use a new flag file_failed to mark the
repository as failed. In rrdp_clear reset the flag after removing
all files. In rrdp_finish double check the file_failed state and
ensure that the repo enters REPO_FAILED state.
The current code only worked if rrdp_clear was called which is only
the case for delta handling. For snapshots triggering an error in
rrdp_handle_file the code would directly call rrdp_finish but
exit early there which stalls progress.
Reported by Xin Wang
OK tb@
Ensure consistent states in persistent HTTP connections
Check for mutually exclusive headers and trailing data in
HTTP responses that ought not to contain a message-body.
Reported by Xin Wang (王鑫)
OK claudio@