Enable WARNS=4 by default for usr.bin, except for:
awk bdes checknr compile_et error gss hxtool kgetcred kinit
klist ldd less lex locale login m4 man menuc mk_cmds
mklocale msgc openssl rpcgen rpcinfo sdiff spell ssh
string2key telnet tn3270 verify_krb5_conf xlint

branches: 1.19.20;
Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.

Remove some more old kerberos4 code. Simplify usage.

- Fix bug in port parsing code; s_port must be in network byte order.
- Factor out port parsing code and add error checking to it.
- WARNS=3

Kerberos support is broken in rcommands, thus making -K -k and -x options
unavailable. Remove theses options from the man pages (it won't be very
hard to bring them back if we fix kerberos one day)

branches: 1.15.2;
use NETBSDSRCDIR as appropriate

WARNS=2

Remove INSTALLFLAGS=-fschg, as per change to usr.bin/ssh/ssh/Makefile.

branches: 1.12.10;
use CPPFLAGS instead of CFLAGS

branches: 1.11.2;
don't define WARNS=1 here

Fix compiler warnings.

rsh is not setuid anymore.

Back out the .PATH.c changes. The .depend problem (and others)
will be fixed using the new .NOPATH make feature instead.

Use .PATH.c: ...

oops, rsh is still setuid root for the moment.

merge lite2 stuff; fix a bit.

merge lite2 changes.

RCS ID police

Add RCS identifiers.

branches: 1.1.1;
Initial revision

Remove clause 3 and 4 from TNF licenses

branches: 1.1.2; 1.1.28;
- Fix bug in port parsing code; s_port must be in network byte order.
- Factor out port parsing code and add error checking to it.
- WARNS=3

Remove clause 3 and 4 from TNF licenses

branches: 1.1.2; 1.1.28;
- Fix bug in port parsing code; s_port must be in network byte order.
- Factor out port parsing code and add error checking to it.
- WARNS=3

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

merge lite2 changes.

RCS ID police

Add RCS identifiers.

branches: 1.1.1;
Initial revision

Remove workaround for ancient HTML generation code.

Support -4 and -6. Approved by christos.

Bump date for removal of Kerberos option descriptions.
Remove dots at end of SEE ALSO.

Kerberos support is broken in rcommands, thus making -K -k and -x options
unavailable. Remove theses options from the man pages (it won't be very
hard to bring them back if we fix kerberos one day)

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

Remove trailing whitespace.

* Document $RCMD_CMD in environ(7).
* Cross-reference rcmd(1), rcmd(3), and environ(7) as appropriate.

Should fix [bin/21670] from Geoff Wing.

Some mdoc fixes; drop some unnecessary whitespace.

Add -p option to rsh and rlogin to allow specifying a non-standard port
number.

.Nm does not need a dummy argument ("") before punctuation or
for correct formatting of the SYNOPSIS any longer.

Generate <>& symbolically. I'm avoiding .../dist/... directories for now.

kerberos(3) -> (8). Sort SEE ALSO.

branches: 1.9.10;
More and more .Os cleanups. .Os is defined in the tmac.doc-common file,
so we shouldn't override it with versions in the manpages. Many more to
come.

Add xrefs to new hosts.equiv(5)/rhosts(5) man page.

branches: 1.7.2;
fix up .Nm usage

fix typo in SYNOPSIS, nuke duplicate RCSid

merge lite2 stuff; fix a bit.

merge lite2 changes.

RCS ID police

Add RCS indentifiers.

branches: 1.1.1;
Initial revision

more GCC 10 fixes.

mDNSResponder: another wrong return local address

dhcp: ignore a seemingly impossible stringop overflow

hpacel: avoid maybe uninitialised error that is wrong.

rsh: avoid impossible malloc(0)

udf: cast pointers through (uintptr_t) to fool invalid boundary checks

Changes done in rsh.c rev. 1.36 was incomplete. As chuq pointed
in private mail, it broke rcp(1).

To achieve the documented behavior and to fix long standing incorrect
rsh(1) behavior which I've tried to fix in rev. 1.36, rcmd(1) should have
two operation mode; whether it should relay signal information on
auxiliary channel or not, depending on the argument `fd2p' passed to rcmd(3).
So, make rcmd(1) behave differntly depending on the environment variable and
set it when necessary in rcmd(3) according to how auxiliary channel
is set up by rcmd(3).

Drop setuid before execing rlogin. Failure to do so should be
harmless, but is sloppy.

branches: 1.36.2;
Fix signal delivery to remote process; As described in rcmd(3), a signal
is delivered to the remote process via the secondary channel. So,
the backend driver, rcmd(1), is responsible to watch the file descriptor 2
and transfer the data to the remote process, rather than receiving signal
by itself. Previously, signal generated by tty was sent since rcmd was
incorrectly generated the data, but, for example, signal sent to rsh command
by kill command was ignored.

Whitespace nits.

Remove kerberos support code completely. It no longer compiles anyway.
OK'ed by christos on tech-userlevel.

branches: 1.33.8; 1.33.18;
static + __dead

putenv() no longer accepts a const string

fix -Wsign-compare issues

Remove the \n and tabs from the __COPYRIGHT() strings.
Tweak to use a consistent format.

branches: 1.29.22;
Remove some more old kerberos4 code. Simplify usage.

Fix Coverity issue 1236, negative return from read() passed to write()
as a large unsigned valued when read() is interrupted (errno == EINTR).

Add -4 and -6 to usage.

Support -4 and -6. Approved by christos.

Whitespace fix-ups.

remove unused variable

- Fix bug in port parsing code; s_port must be in network byte order.
- Factor out port parsing code and add error checking to it.
- WARNS=3

branches: 1.22.2;
Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

include des.h, not kerberosIV/des.h

use TCP_NODELAY

set s_proto properly

XXX this doesn't help with rsh insisting on a reserved port, which of course
fails for non root users. and which only seems to happen when given
ports >1023, funny enough. anyone? :/

use strlcpy

Add -p option to rsh and rlogin to allow specifying a non-standard port
number.

use strlcpy

Remove #ifdef __STDC__. De-__P() and ANSIfy.

convert to use getprogname()

IPv6 support. (I thought I've committed these but was not yet)

Add prototype for orcmd.

Fix compiler warnings.

- PR/3727: Wolfgang Rupprecht: rsh takes 80% of the cpu
- rsh/rcmd combinations don't die sometimes, and spin in poll loops
+ detect errors from read/write etc, don't ignore them in some cases
+ use INFTIM instead of 0 in poll
+ detect invalid file descriptors in poll
+ use varargs/stdarg as appropriate
+ use posix signal calls
+ EWOULDBLOCK -> EAGAIN

fix PR#3710, reported by Tatoku Ogaito <tacha@trap.fukui-med.ac.jp>.
- don't pass pw->pw_name into functions; make a copy.

rcmd(1) does not use argv[0] for hostname, like rsh does.
apply patch for pr#3695 from <hannken@ppp-jhi.eis.cs.tu-bs.de>.

add bits to allow this to be compiled as rcmd.

use FD_SETSIZE instead of manifest constant for select(2); from Rolf
Grossman in PR bin/3338.

merge lite2 changes.

branches: 1.4.2;
RCS ID police

sys/signal.h -> signal.h

Add RCS identifiers.

branches: 1.1.1;
Initial revision