CVS commit: [pkgsrc-2014Q2] pkgsrc/net/socat

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Fri Sep 19 11:30:10 UTC 2014

Modified Files:
        pkgsrc/net/socat [pkgsrc-2014Q2]: Makefile distinfo
        pkgsrc/net/socat/patches [pkgsrc-2014Q2]: patch-configure
            patch-mytypes.h
Removed Files:
        pkgsrc/net/socat/patches [pkgsrc-2014Q2]: patch-aa

Log Message:
Pullup ticket #4494 - requested by rodent
net/socat: security update

Revisions pulled up:
- net/socat/Makefile                                            1.32
- net/socat/distinfo                                            1.20
- net/socat/patches/patch-aa                                    deleted
- net/socat/patches/patch-configure                             1.2
- net/socat/patches/patch-mytypes.h                             1.2

---
   Module Name: pkgsrc
   Committed By:        rodent
   Date:                Sun Sep  7 23:24:56 UTC 2014

   Modified Files:
        pkgsrc/net/socat: Makefile distinfo
        pkgsrc/net/socat/patches: patch-configure patch-mytypes.h
   Removed Files:
        pkgsrc/net/socat/patches: patch-aa

   Log Message:
   Update to latest stable, 1.7.2.4, which is supposed to resolve CVE-2014-0019.
   patches/patch-aa seems to have been committed upstream. Passing readline
   location to configure and fixing CCOPTS in Makefile.in seems to not be
   necessary anymore. From CHANGES:

   ####################### V 1.7.2.4:

   corrections:
        LISTEN based addresses applied some address options, e.g. so-keepalive,
        to the listening file descriptor instead of the connected file
        descriptor

        make failed after configure with non gcc compiler due to missing
        include.

        configure checked for --disable-rawsocket but printed
        --disable-genericsocket in the help text.

        In xioshutdown() a wrong branch was chosen after RECVFROM type 
addresses.
        Probably no impact.

        procan could not cleanly format ulimit values longer than 16 decimal
        digits. Thanks to Frank Dana for providing a patch that increases field
        width to 24 digits.

        OPENSSL-CONNECT with bind option failed on some systems, eg.FreeBSD, 
with
        "Invalid argument"

        Changed some variable definitions to make gcc -O2 aliasing checker happy

        On big endian platforms with type long >32bit the range option applied a
        bad base address.

        Red Hat issue 1022070: missing length check in xiolog_ancillary_socket()

        Red Hat issue 1022063: out-of-range shifts on net mask bits

        Red Hat issue 1022062: strcpy misuse in xiosetsockaddrenv_ip4()

        Red Hat issue 1022048: strncpy hardening: corrected suspicious strncpy()
        uses

        Red Hat issue 1021958: fixed a bug with faulty buffer/data length
        calculation in xio-ascii.c:_xiodump()

        Red Hat issue 1021972: fixed a missing NUL termination in return string
        of sysutils.c:sockaddr_info() for the AF_UNIX case

        fixed some typos and minor issues, including:
        Red Hat issue 1021967: formatting error in manual page

        UNIX-LISTEN with fork option did not remove the socket file system entry
        when exiting. Other file system based passive address types had similar
        issues or failed to apply options umask, user e.a.

   porting:
        Red Hat issue 1020203: configure checks fail with some compilers.
        Use case: clang

        Performed changes for Fedora release 19

        Adapted, improved test.sh script

        Red Hat issue 1021429: getgroupent fails with large number of groups;
        use getgrouplist() when available instead of sequence of calls to
        getgrent()

        Red Hat issue 1021948: snprintf API change;
        Implemented xio_snprintf() function as wrapper that tries to emulate C99
        behaviour on old glibc systems, and adapted all affected calls
        appropriately

        Mike Frysinger provided a patch that supports long long for time_t,
        socklen_t and a few other libc types.

        Artem Mygaiev extended Cedril Priscals Android build script with pty 
code

        The check for fips.h required stddef.h

        Check for linux/errqueue.h failed on some systems due to lack of
        linux/types.h inclusion.

        autoconf now prefers configure.ac over configure.in

        type of struct cmsghdr.cmsg is system dependend, determine it with
        configure; some more print format corrections

   docu:
        libwrap always logs to syslog

        added actual text version of GPLv2

   ####################### V 1.7.2.3:

   security:
        CVE-2014-0019: socats PROXY-CONNECT address was vulnerable to a buffer
        overflow with data from command line (see socat-secadv5.txt)


To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.31.4.1 pkgsrc/net/socat/Makefile
cvs rdiff -u -r1.19 -r1.19.6.1 pkgsrc/net/socat/distinfo
cvs rdiff -u -r1.6 -r0 pkgsrc/net/socat/patches/patch-aa
cvs rdiff -u -r1.1 -r1.1.8.1 pkgsrc/net/socat/patches/patch-configure
cvs rdiff -u -r1.1 -r1.1.22.1 pkgsrc/net/socat/patches/patch-mytypes.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.