ldd(1) has traditionally printed the command: header itself, before
starting the program with LD_TRACE_LOADED_OBJECTS. There are various
circumstances where the program does not properly trace, so the output
looks weird. It is also different from the manual "env LD_TRACE_LOADED_OBJECTS="
method. This change makes ld.so print the command header itself.
ok kettenis
using pledge execpromises here is pointless because ldd is just a wrapper
around setenv LD_TRACE_LOADED_OBJECTS. Because the setenv method is
available to everyone, ld.so has to protect the process itself.
ok kettenis
libc initialization now aborts if a setuid/setgid program does not
have the global variable _permit_setugid declaring that it is setuid/setgid.
The more important packages have been fixed, and the long tail will be
fixed by people who encounter this problem.
ok sthen
Enable _FFR_TLS_USE_CERTIFICATE_CHAIN_FILE so sendmail sends the full
certificate chain from ServerCertFile/ClientCertFile (e.g. Let's Encrypt
fullchain.pem) instead of the leaf only.
Enable _FFR_TLS_USE_CERTIFICATE_CHAIN_FILE so sendmail sends the full
certificate chain from ServerCertFile/ClientCertFile (e.g. Let's Encrypt
fullchain.pem) instead of the leaf only.
Handle errno properly when accepting a PPTP connection. Previously,
file descriptor exhaustion could cause the accept loop to spin
indefinitely.
From Acts1631
Reject a PPTP control packet with an invalid length field.
Previously, an invalid packet could cause the input event loop to spin
indefinitely, effectively hanging the process until it was terminated.
From Acts1631