bsd.own.mk: rename GCC_NO_* to CC_WNO_*

Rename compiler-warning-disable variables from
GCC_NO_warning
to
CC_WNO_warning
where warning is the full warning name as used by the compiler.

GCC_NO_IMPLICIT_FALLTHRU is CC_WNO_IMPLICIT_FALLTHROUGH

Using the convention CC_compilerflag, where compilerflag
is based on the full compiler flag name.

introduce some common variables for use in GCC warning disables:

GCC_NO_FORMAT_TRUNCATION -Wno-format-truncation (GCC 7/8)
GCC_NO_STRINGOP_TRUNCATION -Wno-stringop-truncation (GCC 8)
GCC_NO_STRINGOP_OVERFLOW -Wno-stringop-overflow (GCC 8)
GCC_NO_CAST_FUNCTION_TYPE -Wno-cast-function-type (GCC 8)

use these to turn off warnings for most GCC-8 complaints. many
of these are false positives, most of the real bugs are already
commited, or are yet to come.


we plan to introduce versions of (some?) of these that use the
"-Wno-error=" form, which still displays the warnings but does
not make it an error, and all of the above will be re-considered
as either being "fix me" (warning still displayed) or "warning
is wrong."

branches: 1.7.76;
Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.

strlcpy. rtm_seq is an int. use pidfile(3). sync w/kame via openbsd

__ss_{len,family} hack is no longer necessary

bring in latest kame code.
- correct RTA_NETMASK processing
- correct -A filter behavior (do not advert aggregated route to other if)
- better signal handling
- mandate getifaddrs
- do not advert connected routes on !IFF_UP routes. experimental
sync with kame

sync with latest kame.
- remove obsolete non-advanced-api support.
- if a routing entry exists for aggregate prefix (-A), do not overwrite
the routing entry (exit with error).

branches: 1.2.4;
use getifaddrs. avoid "extern int errno".
(sync with latest kame code)

route6d: RIPng daemon (similar to route6d)
rip6query: RIPng query (similar to ripquery)

NOTE: we usually do not run route6d on end nodes at startup (rtsol should do
the trick). So I figured that route6d can be in /usr/sbin, not in /sbin
(routed is in /sbin). Correct me if I'm wrong.

Remove unnecessary Bk/Ek pairs from SYNOPSIS.
No effective change except where I used the opportunity to sort options
and/or option descriptions.

branches: 1.13.42;
Now it uses the RFC 3542 API.

Consistently use 'RFC 1234' instead of 'RFC1234' or 'RFC-1234'.
From jmc@openbsd.

.Nm does not need a dummy argument ("") before punctuation or
for correct formatting of the SYNOPSIS any longer.

avoid fd_set overrun. sync w/kame

Wording and grammar improvements.

fix up various .Nm abuses:
- keep the case consistent between the actual name and what's referenced.
e.g, if it's `foo', don't use '.Nm Foo' at the start of a sentence.
- remove unnecessary `.Nm foo' after the first occurrence (except for
using `.Nm ""' if there's stuff following, or for the 2nd and so on
occurrences in a SYNOPSIS
- use Sx, Ic, Li, Em, Sq, and Xr as appropriate

sync with more recent kame.
- fix memory leak with realloc()
- warn if we see packets with junk outside of IPv6 prefix length
- cosmetic

branches: 1.6.4;
correct p2p interface address handling.
avoid memory leak.
bzero() after malloc().
(sync from kame)

use getifaddrs. avoid "extern int errno".
(sync with latest kame code)

write out dump file into /var/run, not /var/tmp.
(sync with KAME, for possible security reasons)

sync with recent KAME. tiny wording fix.

branches: 1.2.4;
add NetBSD RCS ID.

route6d: RIPng daemon (similar to route6d)
rip6query: RIPng query (similar to ripquery)

NOTE: we usually do not run route6d on end nodes at startup (rtsol should do
the trick). So I figured that route6d can be in /usr/sbin, not in /sbin
(routed is in /sbin). Correct me if I'm wrong.

Fix typo (s/supress/suppress/).

Remove very old IFF_NOTRAILERS flag.

branches: 1.72.2;
PR/53365: Thomas Barabosch: memory leak in route6d
XXX: pullup 7, 8

Rename allocopy -> xstrdup, and simplify.

Clean up.

Remove dead/broken code.

branches: 1.68.8; 1.68.14;
Separate nexthop caches from the routing table

By this change, nexthop caches (IP-MAC address pair) are not stored
in the routing table anymore. Instead nexthop caches are stored in
each network interface; we already have lltable/llentry data structure
for this purpose. This change also obsoletes the concept of cloning/cloned
routes. Cloned routes no longer exist while cloning routes still exist
with renamed to connected routes.

Noticeable changes are:
- Nexthop caches aren't listed in route show/netstat -r
- sysctl(NET_RT_DUMP) doesn't return them
- If RTF_LLDATA is specified, it returns nexthop caches
- Several definitions of routing flags and messages are removed
- RTF_CLONING, RTF_XRESOLVE, RTF_LLINFO, RTF_CLONED and RTM_RESOLVE
- RTF_CONNECTED is added
- It has the same value of RTF_CLONING for backward compatibility
- route's -xresolve, -[no]cloned and -llinfo options are removed
- -[no]cloning remains because it seems there are users
- -[no]connected is introduced and recommended
to be used instead of -[no]cloning
- route show/netstat -r drops some flags
- 'L' and 'c' are not seen anymore
- 'C' now indicates a connected route
- Gateway value of a route of an interface address is now not
a L2 address but "link#N" like a connected (cloning) route
- Proxy ARP: "arp -s ... pub" doesn't create a route

You can know details of behavior changes by seeing diffs under tests/.

Proposed on tech-net and tech-kern:
http://mail-index.netbsd.org/tech-net/2016/03/11/msg005701.html

reenable routing functionality by using RT_ROUNDUP for ROUNDUP when available

branches: 1.66.2; 1.66.4; 1.66.8;
NULL does not need a cast

Remove double 'static'.

static + __dead + G/C

no [longer?] need to define _KERNEL when including <net/route.h>

Fix WARNS=4 issues (-Wshadow -Wsign-compare)

branches: 1.61.12;
#include <stdbool.h> for bool.

branches: 1.60.4;
fix typos

PR/18906: roskens at elfin dot net: misc. select() to poll() updates.

Adapted to -current by myself, thanks for the patch!

Add missing #endif.

Beautify.

Time to remove __P().

Coverity CID 2537: Avoid double free, and random free. how did this work?

Coverity CID 3194: Avoid NULL deref.

Coverity CID 3195: ifdef out dead code.

Fix typos, reported by Alexey Dobriyan ("Gathered from Linux"),
forwarded by jmc@openbsd.

Let it compile again on sparc/sparc64.

need_trigger/idx should be u_int. millert@openbsd

validate packet length. KAME-PR-517

realloc pedant

Don't age non-gateway host routes. PR bin/22568 from Andrew White

port numbers are unsigned. use %u. from kame

%d is not 10 chars, but 12 chars. uwse NI_MAXSERV. sync w/ kame. from openbsd

use strtoul, not atoi.
don't print strerrno() if errno == 0 on fatal().
sync w/kame

IPV6_V6ONLY setsockopt has to happen before bind(2). PR 18435

set IPV6_V6ONLY to 1.

null commit

sys/poll.h -> poll.h
reduce diff w/ kame tree.

Set fd of unused pollfd entries to -1.

select() -> poll()

suppress output on dump request if -q is specified. sync w/kame

Unifdef __STDC__, ansify.

use strchr

avoid fd_set overrun. sync w/kame

strlcpy. rtm_seq is an int. use pidfile(3). sync w/kame via openbsd

branches: 1.32.2;
do not age global address on loopback interface. sync with kame

daemon(3) has to be called before opening file descriptors.
noticed by markus@openbsd, sync with kame

va_{start,end} audit:
Make sure that each va_start has one and only one matching va_end,
especially in error cases.
If the va_list is used multiple times, do multiple va_starts/va_ends.
If a function gets va_list as argument, don't let it use va_end (since
it's the callers responsibility).

Improved by comments from enami and christos -- thanks!

Heimdal/krb4/KAME changes already fed back, rest to follow.

Inspired by, but not not based on, OpenBSD.

sync with the latest KAME tree.
- don't use FD_SETSIZE on select
- "sin" conflicts with math library, so use sin6
- other minor updates

need va_start/end for every vfprintf(). from markus@openbsd. sync with kame

getopt(3): EOF -> -1.

Negative exit code cleanup: Replace exit(-x) with exit(x).
As seen on tech-userlevel.

correct delroute() against host routes. clarify ROUTE6D p2p advert behavior
(no behavior change for normal use). sync with kame

bring in latest kame code.
- correct RTA_NETMASK processing
- correct -A filter behavior (do not advert aggregated route to other if)
- better signal handling
- mandate getifaddrs
- do not advert connected routes on !IFF_UP routes. experimental
sync with kame

setindex2ifc(): after a realloc(), zero the newly acquired entries.

make signo a volatile variable. sync with kame

make signal handler very short, to avoid possibility of race conditions.
commented by deraadt. sync with kame

do not advertise dynamic/cloned routes

cast size_t to u_long on printing. sync with kame

printf-format audit. from sommrfeld@netbsd.org. sync with kame.

fix LP64 issue in routing message parsing. from thorpej

fix behavior or -A. routing table check does not seem to working right.

sync with latest kame.
- remove obsolete non-advanced-api support.
- if a routing entry exists for aggregate prefix (-A), do not overwrite
the routing entry (exit with error).

sync with more recent kame.
- fix memory leak with realloc()
- warn if we see packets with junk outside of IPv6 prefix length
- cosmetic

branches: 1.13.4;
more correct advert for global address on p2p.
avoid reusing upper bits of rtm_flags. (sync with kame)

correct p2p interface address handling.
avoid memory leak.
bzero() after malloc().
(sync from kame)

ignore routing socket messages for unexpected (or not interesting) interfaces.
do not advertise reject/blackhole static routes.

use getifaddrs. avoid "extern int errno".
(sync with latest kame code)

sync with recent KAME code.
- bark if extra argument is specified.

sync with recent KAME.
- fix 64bit alignment issue in routing socket.
- avoid s6_addr8 (nonstandard), use s6_addr instead.

Eliminate illegal cast from function pointer (sig_t) to object pointer (void *).
Remove #include of unused headers.
Fix varargs usage.
KNF.
Const poisoning.

style fix (to sync with KAME/NetBSD14)

Fix a bit-count vs. byte-count problem .. /16 routes were added as
host routes rather than network routes.

fix for 64bit arch (sizeof(void *) != sizeof(int))

s/char/int/ for variable that eat return value of getopt().

add NetBSD RCS ID.

route6d: RIPng daemon (similar to route6d)
rip6query: RIPng query (similar to ripquery)

NOTE: we usually do not run route6d on end nodes at startup (rtsol should do
the trick). So I figured that route6d can be in /usr/sbin, not in /sbin
(routed is in /sbin). Correct me if I'm wrong.

Clean up.

branches: 1.7.94;
avoid fd_set overrun. sync w/kame

bring in latest kame code.
- correct RTA_NETMASK processing
- correct -A filter behavior (do not advert aggregated route to other if)
- better signal handling
- mandate getifaddrs
- do not advert connected routes on !IFF_UP routes. experimental
sync with kame

use getifaddrs. avoid "extern int errno".
(sync with latest kame code)

write out dump file into /var/run, not /var/tmp.
(sync with KAME, for possible security reasons)

branches: 1.3.4;
sync with recent KAME.
- fix 64bit alignment issue in routing socket.
- avoid s6_addr8 (nonstandard), use s6_addr instead.

add NetBSD RCS ID.

route6d: RIPng daemon (similar to route6d)
rip6query: RIPng query (similar to ripquery)

NOTE: we usually do not run route6d on end nodes at startup (rtsol should do
the trick). So I figured that route6d can be in /usr/sbin, not in /sbin
(routed is in /sbin). Correct me if I'm wrong.