NetBSD Problem Report #30378

From www@netbsd.org  Mon May 30 15:37:13 2005
Return-Path: <www@netbsd.org>
Received: by narn.netbsd.org (Postfix, from userid 31301)
	id 9A0CD63B104; Mon, 30 May 2005 15:37:13 +0000 (UTC)
Message-Id: <20050530153713.9A0CD63B104@narn.netbsd.org>
Date: Mon, 30 May 2005 15:37:13 +0000 (UTC)
From: tonnerre@thundrix.ch
Reply-To: tonnerre@thundrix.ch
To: gnats-bugs@netbsd.org
Subject: tinc keeps exploding (Bugs and buffer overflows)
X-Send-Pr-Version: www-1.0

>Number:         30378
>Category:       pkg
>Synopsis:       tinc keeps exploding (Bugs and buffer overflows)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon May 30 15:38:00 +0000 2005
>Closed-Date:    Mon May 30 16:59:03 +0000 2005
>Last-Modified:  Mon May 30 17:01:01 +0000 2005
>Originator:     Tonnerre Lombard
>Release:        NetBSD 3.99.5
>Organization:
Chaos Control
>Environment:
NetBSD milk.thundrix.ch 3.99.5 NetBSD 3.99.5 (TONNERRE) #2: Sun May 29 21:06:21 CEST 2005  root@jules.thundrix.ch:/usr/obj/sys/arch/macppc/compile/TONNERRE macppc
>Description:
pkgsrc provides tinc 1.0.1, which is full of bugs and buffer overflows. It's impossible to operate this version, because it already crashes on key exchange. There's also tinc 1.0.4 which still crashes, but more silently: buffer overflows which make it crash a bit later.
>How-To-Repeat:
run tincd, and let two tincds connect to each other.
>Fix:
Apply http://users.thundrix.ch/~tonnerre/pkgsrc/net/tinc.diff.bz2 to pkgsrc

>Release-Note:

>Audit-Trail:
From: Thomas Klausner <wiz@NetBSD.org>
To: tonnerre@thundrix.ch
Cc: gnats-bugs@NetBSD.org
Subject: Re: pkg/30378: tinc keeps exploding (Bugs and buffer overflows)
Date: Mon, 30 May 2005 17:52:42 +0200

 On Mon, May 30, 2005 at 03:38:00PM +0000, tonnerre@thundrix.ch wrote:
 > Apply http://users.thundrix.ch/~tonnerre/pkgsrc/net/tinc.diff.bz2 to pkgsrc

 The PKGREVISION line should be removed during updates.
 Have you fed the patch back to the program's author?
 Will it be in the next version?
  Thomas

State-Changed-From-To: open->closed
State-Changed-By: wiz@netbsd.org
State-Changed-When: Mon, 30 May 2005 16:59:03 +0000
State-Changed-Why:
Committed, thank you!


From: Thomas Klausner <wiz@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: PR/30378 CVS commit: pkgsrc/net/tinc
Date: Mon, 30 May 2005 16:58:03 +0000 (UTC)

 Module Name:	pkgsrc
 Committed By:	wiz
 Date:		Mon May 30 16:58:03 UTC 2005

 Modified Files:
 	pkgsrc/net/tinc: Makefile distinfo
 Added Files:
 	pkgsrc/net/tinc/patches: patch-aa

 Log Message:
 Update to 1.0.4, including a patch by Tonnerre, provided
 in PR 30378.

 version 1.0.4                May  4 2005

  * Fix switch and hub modes.

  * Optionally start scripts when a Subnet becomes (un)reachable.

 version 1.0.3                Nov 11 2004

 * Show error message when failing to write a PID file.

 * Ignore spaces at end of lines in config files.

 * Fix handling of late packets.

 * Unify BSD tun/tap device handling. This allows IPv6 on tun devices and
   anything on tap devices as long as the underlying OS supports it.

 * Handle IPv6 on Solaris tun devices.

 * Allow tinc to work properly under Windows XP SP2.

 * Allow VLAN tagged Ethernet frames in switch and hub mode.

 * Experimental PMTUDiscovery, TunnelServer and BlockingTCP options.

 version 1.0.2                Nov  8 2003

 * Fix address and hostname resolving under Windows.

 * Remove warnings about non-existing scripts and unsupported address families.

 * Use the event logger under Windows.

 * Fix quoting of filenames and command line arguments under Windows.

 * Strict checks for length incoming network packets and return values of
   cryptographic functions,

 * Fix a bug in metadata handling that made the tinc daemon abort.


 To generate a diff of this commit:
 cvs rdiff -r1.4 -r1.5 pkgsrc/net/tinc/Makefile
 cvs rdiff -r1.2 -r1.3 pkgsrc/net/tinc/distinfo
 cvs rdiff -r0 -r1.1 pkgsrc/net/tinc/patches/patch-aa

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

>Unformatted:

Home	PR Database Search