libfetch: don't include fragments in HTTP requestsFragments are reserved for client-side processing, seehttps://www.rfc-editor.org/rfc/rfc9110.html#section-7.1Also, some servers don't like to re
libfetch: don't include fragments in HTTP requestsFragments are reserved for client-side processing, seehttps://www.rfc-editor.org/rfc/rfc9110.html#section-7.1Also, some servers don't like to receive HTTP requests with fragments.```$ fetch 'https://dropbox.com/a/b'fetch: https://dropbox.com/a/b: Not Found$ fetch 'https://dropbox.com/a/b#'fetch: https://dropbox.com/a/b#: Bad Request```Taken-from: https://github.com/freebsd/freebsd-src/commit/1af7d5f389536a2f391153513d95d92ffdf360e4
show more ...
Some trivial changes to better comply with strict aliasing. (2)Now that the warnings are fixed, do not pass -fno-strict-aliasinganymore.
Some trivial changes to better comply with strict aliasing.
Fix typos in libfetch and ext2fs.
libfetch: avoid dereferencing possibly uninitialized pointerFix -Werror=maybe-uninitialized exposed when building world with -Os.
libfetch: Add missing MLINK.
libfetch: sync with FreeBSD- document fetchReqHTTP() (revision 351573)- avoid invalid escape sequences in URL (revision 357579)- add SOCKS5 support (revisions 357968, 357977-9, 358227)
libfetch: Fix buffer overflow (CVE-2020-7450) - A remote attacker, who can supply a malicious URL to the application that uses libfetch(3), can trigger memory corruption and execute arbitrary
libfetch: Fix buffer overflow (CVE-2020-7450) - A remote attacker, who can supply a malicious URL to the application that uses libfetch(3), can trigger memory corruption and execute arbitrary code on the target system. - FreeBSD-SA-20:01.libfetchSubmitted-by: bapt, emaste
Sync libfetch and fetch(1) with FreeBSD.
Normalize libcrypto and libssl DPADD variable names and adjust Makefiles.
libfetch: Suppress fallthrough warning.
world: Avoid extended ASCII.Use UTF-8 where needed, use plain ASCII where possible.No functional change.
Remove the NO_CRYPT build option.It has been broken for a long time without anyone complaining about andwe don't want to maintain it either.In-discussion-with: zrj
Fix few typos.While there, make few whitespace adjustments.
ssl: Unhook internal usage of include/openssl/.Redirect all cases to include priv to take needed openssl headers andremove mistakenly added copying of private base LibreSSL headers back topublic
ssl: Unhook internal usage of include/openssl/.Redirect all cases to include priv to take needed openssl headers andremove mistakenly added copying of private base LibreSSL headers back topublic dir used previously by OpenSSL headers.After this make upgrade REMOVE_OPENSSL_FILES=yes should work as initiallyintended.It is still not clear if LIBMD places also miss the libprivate_crypto.For now just to prevent conflicts with base vs dports ssl libs and headers.
LIBPRIV: Add common PRIVATELIB_LDFLAGS definitions.Simply being able to change it in two places is easier than everywhere.Also add PRIVATELIB_BLDFLAGS that is intended for bootsrapping only.While
LIBPRIV: Add common PRIVATELIB_LDFLAGS definitions.Simply being able to change it in two places is easier than everywhere.Also add PRIVATELIB_BLDFLAGS that is intended for bootsrapping only.While there, perform some cleanup for dup entries.
build - Remove openssl from base (is now permanently replaced by ressl)* Remove openssl and related code that previous commits by John Marino replaced with libressl. Remove build hooks, base now
build - Remove openssl from base (is now permanently replaced by ressl)* Remove openssl and related code that previous commits by John Marino replaced with libressl. Remove build hooks, base now only uses libressl.* Remove crypto/openssl. This has been replaced by the openssl implementation from ressl.* Remove lib/libcrypto. This has been replaced by lib/librecrypto which generates a private_crypo library only used by base.* Remove lib/libssl. This has been replaced by lib/libressl which generates a private_ssl library only used by base.* NOTE: In addition, John has been working on updating dports to ensure that only the ports-based libssl and libcrypto (both nominally implemented via ressl and not openssl), and that dports packages no longer have any chance of using the private versions of these libraries from base.
Switch base to use private LibreSSL libariesAll base users of the OpenSSL libraries (libssl.so and libcrypto.so) havebeen modified to link against the new LibreSSL versions instead.The OpenSSL l
Switch base to use private LibreSSL libariesAll base users of the OpenSSL libraries (libssl.so and libcrypto.so) havebeen modified to link against the new LibreSSL versions instead.The OpenSSL libraries are still built by default, but nothing in base willuse them. However, its certain that a myriad of dports link to OpenSSLalthough this may change in the future.The OpenSSL library building can be suppressed by putting NO_OPENSSL in/etc/make.conf. The existing OpenSSL libraries and headers are not (yet)removed, however, even with that setting.
build - prepare for higher optimization levels* Add NO_STRICT_ALIASING, NO_STRICT_OVERFLOW, and NO_WARRAY_BOUNDS make variables as-needed.
libfetch: sync with freebsd
fetch(1), libfetch: Sync with FreeBSDChanges include: * Increase buffer size from 4K to 16K * Include Accept header in requests * Implement certificate verification * libfetch support
Remove a bunch of unnecessary semicolons.
add .Mt to man pages in lib/
Use NULL for pointers in a couple of places.
libfetch: Remove an unused variable.
123