new tcp_wrapper license, as deraadt@openbsd negotiated with wietse
and presented in ftp://ftp.porcupine.org/pub/security/tcp_wrappers_license.
(details: see openbsd changelog for libexec/tcpd/DISCLAIMER).

RCSID Police.

branches: 1.1.1;
Initial revision

record the libblocklist dependency

fix missing chars

Add blocklist support to libwrap which enables all programs using libwrap
to block access from hosts we deny. (libwrap support from Greg A. Woods)

Use a utility function to expand %m correctly...

branches: 1.10.74; 1.10.76;
Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.

cleanup some of portability #ifdefs, which are not needed for netbsd.

Remove trailing space from LIB= line

Fix for WARNS=1 and remove WARNS override from Makefile

- define WARNS?=1 in the top-level Makefile.inc, and don't define
anywhere else.
- for now, override WARNS=0 in librpcsvc and libwrap, until they're
cleaned up
- rcsid police

lib is now clean (except for librpcsvc and libwrap) on the i386, and
this should motivate the other ports to fix any other minor problems
that their compilers pick up that the i386 version doesn't.

Makefile cleanups:
use INCS variable to install includes and FILES to install objects.

Moved CFLAGS defines for program configuration from Makefile to
Makefile.cflags, so that other tcp_wrapper programs can use them.

turn on PROCESS_OPTIONS, and link in hosts.allow.5, hosts.deny.5, hosts_ctl.3,
request_init.3 and request_set.3 man pages.

we do not need percent_m.c

branches: 1.1.1;
Initial revision

Only compile in IPv6 support if ${USE_INET6} != "no"

MKINET6 is for providing IPv6 infrastructure.
USE_INET6 is for compiling IPv6 support into the programs (needs MKINET6).

cleanup some of portability #ifdefs, which are not needed for netbsd.

Split the notion of building Hesiod, Kerberos, S/key, and YP
infrastructure and using that infrastructure in programs.

* MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building
of the infratsructure (libraries, support programs, etc.)

* USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control
building of support for using the corresponding API
in various libraries/programs that can use it.

As discussed on tech-toolchain.

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

Add -DNETGROUP

use CPPFLAGS instead of CFLAGS

branches: 1.2.2;
Comment out -DPARANOID, since this is not used by the library but by
programs that call the library, and our inetd doesn't use it and has no
similar functionality.

Moved CFLAGS defines for program configuration from Makefile to
Makefile.cflags, so that other tcp_wrapper programs can use them.

branches: 1.1.2;
file Version.map was initially added on branch agc-symver.

Use C89 function definition

branches: 1.4.64; 1.4.66;
Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

fix spelling mistakes, mainly in comments and log messages.

Provide an extra argument to store the returned pointer so we can use
the function directly as the return format (before assigning it to a
variable) to appease clang.

Use a utility function to expand %m correctly...

let's try one more time: prepare the format to pass to syslog instead
of trying to escape %m.

instead of handling %m inline, escape it.

delete unused variable

PR/53851: Andreas Gustafsson: libwrap prints "m" instead of errno
Handle %m inline if needed, otherwise vasprintf strips the %m and...

branches: 1.11.14; 1.11.16;
these are syslog-like

Format the diagnostic with vasprintf once and use plain syslog instead
of messing with format strings.

Use C89 function definition

branches: 1.8.48; 1.8.50;
Replaced strncpy with strlcpy. Thanks to Peter Postma who
pointed them our in PR #25762. Approved by christos@NetBSD.org.

Rearrange the way syslog() is used. Some messages include %m which
syslog understands, but vsnprintf() does not.

Format string audit cleanup (increase format checking)

Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

- convert unsafe strcpy(), strcat() and sprintf() to the `n' versions.
- some KNF.

branches: 1.1.1;
Initial revision

Use C89 function definition

branches: 1.6.54; 1.6.56;
correct misuse of strncpy (use strlcpy). from openbsd

Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

- convert unsafe strcpy(), strcat() and sprintf() to the `n' versions.
- some KNF.

branches: 1.1.1;
Initial revision

libwrap: fix lint warning about "effectively discards 'const'"

lib/libwrap/expandm.c(57): warning: call to 'strstr' effectively
discards 'const' from argument [346]

No binary change.

branches: 1.12.2; 1.12.14;
remove the new check for tlen >= PTRDIFF_MAX. the prior
checks assure the condition is met and GCC7 is happy.

suggested by kre.

And as long as we're attempting to achieve perfection in code
that is never going to be executed, let's also check for possible
overflow in a sum that will never be computed...

There's no point setting errno, it is just overwritten by err
in the exit path ... this function never fails, it simply sometimes
doesn't actually expand the %m and just leaves the format string
intact.

And declare variables at the head of their scope, not at some random
place in the middle of the code, whatever C allows, that is just ugly.

limit allocation to PTRDIFF_T to appease gcc-7, from mrg@

branches: 1.8.2;

Whitespace (indent with tabs, rather than spaces), and rearrange one
line that needed wrapping so it no longer does, and is (IMO) clearer.
WHile here, note that this was created in 2019, not 2018, for the
copyright notice...

NFCI.

Always return from expandm() with errno unaltered, so on the
off chance it failed, there's still the possibility that whatever
processes the result will be able to deal with the %m that would
(presumably) be left in the format string.

And as a frill, don't call strerror() until we know we are
going to use its result (still call it only once, no matter
how many %m's are in the format string).

check for *. integer overflow over ptrdiff. Pointed out by kre@

Make expandm() return a const char * so we can do away with __UNCONST()
and more importantly, so that we don't accidentally return a value
that is a const char * in reality (pointer to read only string) as a
char *.

Don't do %%m -> %%%m escaping, requested by gson@.

Return the buffer that has not been freed, so it can be later,
rather than the one that already was.

Provide an extra argument to store the returned pointer so we can use
the function directly as the return format (before assigning it to a
variable) to appease clang.

Use a utility function to expand %m correctly...

branches: 1.3.2; 1.3.4;

Make expandm() return a const char * so we can do away with __UNCONST()
and more importantly, so that we don't accidentally return a value
that is a const char * in reality (pointer to read only string) as a
char *.

Provide an extra argument to store the returned pointer so we can use
the function directly as the return format (before assigning it to a
variable) to appease clang.

Use a utility function to expand %m correctly...

Use C89 function definition

branches: 1.10.42; 1.10.44;
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
socklen_t are different signness.

be more picky about IP option. len >= 2 for normal options.

be more picky about malformed IP options.

Fix error message, as reported in lib/15711 by Onno van der Linden.

fatal typo. From: Izumi Tsutsui <tsutsui@ceres.dti.ne.jp>

branches: 1.5.8;
Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

resolve conflicts on upgrade (to 7.6).

Fix for WARNS=1 and remove WARNS override from Makefile

- convert unsafe strcpy(), strcat() and sprintf() to the `n' versions.
- some KNF.

branches: 1.1.1;
Initial revision

New sentence, new line. From Robert Elz.

use strtok_r, as strtok can interfere with other callers. from openbsd

Whitespace nit.

Revert white space changes for imported sources.

More trailing white space.

RCSID Police.

branches: 1.1.1;
Initial revision

Remove workaround for ancient HTML generation code.

Wietse Wenema's tcpd-blacklist-patch:
ftp://ftp.porcupine.org/pub/security/tcpd-blacklist-patch

- If a host starts with a / treat it as a filename containing a list of hosts.

Consistently use 'RFC 1234' instead of 'RFC1234' or 'RFC-1234'.
From jmc@openbsd.

New sentence, new line. From Robert Elz.

Use correct comment macro.

Generate <>& symbolically. I'm avoiding .../dist/... directories for now.

Whitespace nit.

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

Xref hosts_access(3).

Revert white space changes for imported sources.

More trailing white space.

PR/6837: Greg A. Woods: Add RBL capability for libwrap.

PR/6836: Grag A. Woods: Formatting errors and limitation doc.

add missing .Nm calls and MLINKS. from spz@serpens.swb.de

branches: 1.3.2;
Changes to bring it in line with the NetBSD use of libwrap. These are a
bit quick and dirty, and there may still be errors or confusions present.
* NetBSD does not use tcpd, since inetd does internal checks.
* NetBSD uses hosts_options.
* NetBSD inetd does not have `paranoid' mode to automatically reject
paranoid connections without further processing.
* NetBSD can have more than one address on a physical interface.
* Safe_finger comes from the tcp_wrappers package, not included in NetBSD.
* Add RCS ID (at end, because this uses old manpage macros).

nuke 'the the' typo

branches: 1.1.1;
Initial revision

simplify expression, daemon is an array can't be NULL.

Add blocklist support to libwrap which enables all programs using libwrap
to block access from hosts we deny. (libwrap support from Greg A. Woods)

PR/54992: fix hosts_access(5) to works for IPv6 linklocal address without scope-id

branches: 1.21.16;
PR/50823: David Binderman: Limit scanf width

Use C89 function definition

branches: 1.19.8; 1.19.10;
Wietse Wenema's tcpd-blacklist-patch:
ftp://ftp.porcupine.org/pub/security/tcpd-blacklist-patch

- If a host starts with a / treat it as a filename containing a list of hosts.

Use ntohl(host_address) so that RBL lookups work on little-endian hosts.
Tested on alpha, i386 and sparc64.
Fixes PR lib/30402.

branches: 1.17.6;
If we're going to replace strtok() with strtok_r(), and the caller of the
latter is invoked recursively, use static (instead of automatic) storage
for the "last" pointer so that we remember where we're up to ...

Fixes bug with hosts.deny rules such as "rpcbind: ALL EXCEPT some.domain".

use strtok_r, as strtok can interfere with other callers. from openbsd

support scoped IPv6 address properly. PR 16810.

cleanup some of portability #ifdefs, which are not needed for netbsd.

Clean out "dirty" to avoid spurious log entries.

Log a warning if the address (n) has more significant bits than the
netmask (m) in a entry of the form "n.n.n.n/m.m.m.m".

Nuke `extern int errno;' in code we compile with -Wstrict-prototypes. We get
the correct definition from errno.h.

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

resolve conflicts on upgrade (to 7.6).

Revert white space changes for imported sources.

More trailing white space.

don't use inet_addr, use inet_aton... Otherwise masks of 255.255.255.255
don't work, so we cannot restrict rules to a single host.

branches: 1.5.2;
sprintf -> snprintf (not needed, but since snprintf is used everywhere else)

PR/6837: Greg A. Woods: Add RBL capability for libwrap.

PR/4347: Jim Bernard: compile error with -DNETGROUP

branches: 1.2.2;
Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

Use C89 function definition

branches: 1.4.64; 1.4.66;
Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

Remove workaround for ancient HTML generation code.

New sentence, new line. From Robert Elz.

Generate <>& symbolically. I'm avoiding .../dist/... directories for now.

Whitespace nit.

Xref hosts_access(3).

Revert white space changes for imported sources.

More trailing white space.

RCSID Police.

branches: 1.1.1;
Initial revision

remove clause #3 from my license where there are no other
copyright holders involved.

branches: 1.5.30; 1.5.32;
Move Matt Green's code from a 4-clause to a 3-clause licence by removing
the advertising clause. Diffs provided in PR 22396 by Joel Baker, the changes
were confirmed to the board by Matt Green.

Remove code to generate Makefile, since we want to continue to use
the one already in our tree.

libwarp -> libwrap

we do not need percent_m.c

branches: 1.1.1;
Initial revision

Use C89 function definition

branches: 1.9.54; 1.9.56;
avoid endless loop in xgets() when line in host access conf file is longer
than BUFSIZ
fixes PR lib/15025 by Trevin Beattie

cleanup some of portability #ifdefs, which are not needed for netbsd.

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

Revert white space changes for imported sources.

More trailing white space.

Allow passing NULL for check only.

don't use inet_addr, use inet_aton... Otherwise masks of 255.255.255.255
don't work, so we cannot restrict rules to a single host.

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

Add some more __dead as exposed by the recent WARN bumps.

Use C89 function definition

branches: 1.14.42; 1.14.44;
Use get*_r re-entrant functions and get rid of end*ent(). From John Nemeth.

getpw*_r() may return 0 and set pwd==NULL

Use getpwnam_r; from John Nemeth

branches: 1.11.6;
cleanup some of portability #ifdefs, which are not needed for netbsd.

Format string audit cleanup (increase format checking)

Correct ctype(3) usage, just in case....

backout previous changes.

namespace collision with getopt change (struct option -> libwrap_option)

Revert white space changes for imported sources.

More trailing white space.

Add LOG_AUTHPRIV and LOG_FTP as inspired by PR #3176.

Fix for WARNS=1 and remove WARNS override from Makefile

- convert unsafe strcpy(), strcat() and sprintf() to the `n' versions.
- some KNF.

branches: 1.1.1;
Initial revision

we do not need percent_m.c

branches: 1.1.1;
Initial revision

Use C89 function definition

branches: 1.4.64; 1.4.66;
Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

Use C89 function definition

branches: 1.4.64; 1.4.66;
Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

change static to volatile.

Avoid setjmp clobbering.

Add some more __dead as exposed by the recent WARN bumps.

Use C89 function definition

branches: 1.8.54; 1.8.56;
s/STRN_CPY/strlcpy/

correct typecast mistake.
http://www.openbsd.org/errata.html#libwrap

branches: 1.6.8;
Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

Revert white space changes for imported sources.

More trailing white space.

fix compile warnings with -O3 on the alpha.

branches: 1.2.2;
Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

Add some more __dead as exposed by the recent WARN bumps.

Use C89 function definition

branches: 1.5.56; 1.5.58;
Format string audit cleanup (increase format checking)

Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

bump shared libraries.

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

increment shlib minor for libwrap (0.0 -> 0.1).

Add a note to update src/distrib/sets/lists/base/shl.*, and add a missing
RCS Id.

RCSID Police.

branches: 1.1.1;
Initial revision

Use C89 function definition

branches: 1.18.42; 1.18.44;
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
socklen_t are different signness.

protect from nasty PTR records which could be abused to workaround access
control:
1.1.1.10.in-addr.arpa. IN PTR 2.3.4.5

Only fill in the server and client sockaddr in the request if
the fields are NULL.

Correct #ifdef'ed out usage of memset

type mismatch

there are people using #ifdef APPEND_DOT. recover it.

correct misuse of strncpy (use strlcpy). from openbsd

support scoped IPv6 address properly. PR 16810.

cleanup some of portability #ifdefs, which are not needed for netbsd.

WARNS=2 fixes

fix behavior for configuration like "ALL: 127.".

From: Mason Loring Bliss <mason@acheron.middleboro.ma.us>

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

resolve conflicts on upgrade (to 7.6).

Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

- convert unsafe strcpy(), strcat() and sprintf() to the `n' versions.
- some KNF.

branches: 1.1.1;
Initial revision

these are syslog-like

Add some more __dead as exposed by the recent WARN bumps.

Use C89 function definition

branches: 1.12.54; 1.12.56;
cleanup some of portability #ifdefs, which are not needed for netbsd.

Wrap external declarations inside __{BEGIN,END}_DECLS; fixes PR lib/12458
by Dan McMahill.

Format string audit cleanup (increase format checking)

branches: 1.9.4;
#include <stdio.h> to cover the use of "FILE *" in one of the prototypes.
(The stock tcpd.h doesn't have prototypes, and some third-party code assumes
it can include tcpd.h without stdio.h.)

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

Revert white space changes for imported sources.

More trailing white space.

don't use inet_addr, use inet_aton... Otherwise masks of 255.255.255.255
don't work, so we cannot restrict rules to a single host.

branches: 1.4.2;
PR/6837: Greg A. Woods: Bring into scope getpeername to make sure that
the #define workaround works. XXX: But we don't need this workaround
for NetBSD.

RCSID Police.

Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

Use C89 function definition

branches: 1.8.54; 1.8.56;
s/STRN_CPY/strlcpy/

correct misuse of strncpy (use strlcpy). from openbsd

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

Revert white space changes for imported sources.

More trailing white space.

Fix for WARNS=1 and remove WARNS override from Makefile

- convert unsafe strcpy(), strcat() and sprintf() to the `n' versions.
- some KNF.

branches: 1.1.1;
Initial revision

cleanup some of portability #ifdefs, which are not needed for netbsd.

Nuke `extern int errno;' in code we compile with -Wstrict-prototypes. We get
the correct definition from errno.h.

Apply IPv6 support patch.
Note that all IPv6 address must be wrapped with square bracket, like:
ALL: [::1/128] 127.0.0.1/255.255.255.255
Increase shlib minor.

ftp://ftp.kame.net/pub/kame/misc/tcp_wrappers-76-v6-19990831.diff.gz

Revert white space changes for imported sources.

More trailing white space.

branches: 1.2.4;
Fix for WARNS=1 and remove WARNS override from Makefile

branches: 1.1.1;
Initial revision

branches: 1.1.4;
libwrap: Add expected symbols list.

NOTE: This looks pretty weird, does it all make sense?

PR lib/58838: shared libraries in base should all have expsym lists