| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
Reduce overlinking
Notes:
svn path=/head/; revision=275042
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
1. 50+% of NO_PIE use is fixed by adding -fPIC to INTERNALLIB and other
build-only utility libraries.
2. Another 40% is fixed by generating _pic.a variants of various libraries.
3. Some of the NO_PIE use is a bit absurd as it is disabling PIE (and ASLR)
where it never would work anyhow, such as csu or loader. This suggests
there may be better ways of adding support to the tree. Many of these
cases can be fixed such that -fPIE will work but there is really no
reason to have it in those cases.
4. Some of the uses are working around hacks done to some Makefiles that are
really building libraries but have been using bsd.prog.mk because the code
is cleaner. Had they been using bsd.lib.mk then NO_PIE would not have
been needed.
We likely do want to enable PIE by default (opt-out) for non-tree consumers
(such as ports). For in-tree though we probably want to only enable PIE
(opt-in) for common attack targets such as remote service daemons and setuid
utilities. This is also a great performance compromise since ASLR is expected
to reduce performance. As such it does not make sense to enable it in all
utilities such as ls(1) that have little benefit to having it enabled.
Reported by: kib
Notes:
svn path=/head/; revision=270168
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is currently an opt-in build flag. Once ASLR support is ready and stable
it should changed to opt-out and be enabled by default along with ASLR.
Each application Makefile uses opt-out to ensure that ASLR will be enabled by
default in new directories when the system is compiled with PIE/ASLR. [2]
Mark known build failures as NO_PIE for now.
The only known runtime failure was rtld.
[1] http://www.bsdcan.org/2014/schedule/events/452.en.html
Submitted by: Shawn Webb <lattera@gmail.com>
Discussed between: des@ and Shawn Webb [2]
Notes:
svn path=/head/; revision=267233
|
|
|
|
|
|
|
|
|
|
| |
promoted K&R parameters, remove the workarounds added for sendmail
components in r228558.
MFC after: 1 week
Notes:
svn path=/head/; revision=246880
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
get rid of testing explicitly for clang (using ${CC:T:Mclang}) in
individual Makefiles.
Instead, use the following extra macros, for use with clang:
- NO_WERROR.clang (disables -Werror)
- NO_WCAST_ALIGN.clang (disables -Wcast-align)
- NO_WFORMAT.clang (disables -Wformat and friends)
- CLANG_NO_IAS (disables integrated assembler)
- CLANG_OPT_SMALL (adds flags for extra small size optimizations)
As a side effect, this enables setting CC/CXX/CPP in src.conf instead of
make.conf! For clang, use the following:
CC=clang
CXX=clang++
CPP=clang-cpp
MFC after: 2 weeks
Notes:
svn path=/head/; revision=232263
|
|
|
|
|
|
|
|
|
|
| |
warnings.
Spotted by: arundel
MFC after: 1 week
Notes:
svn path=/head/; revision=228708
|
|
|
|
|
|
|
|
|
|
| |
turned off yet. Since this is contrib code, and we don't really care
about the warnings, just turn make them non-fatal for now.
MFC after: 1 week
Notes:
svn path=/head/; revision=228652
|
|
|
|
|
|
|
| |
Also add some missing $FreeBSD$ to keep svn happy.
Notes:
svn path=/head/; revision=201386
|
|
|
|
|
|
|
| |
Discussed with: ru
Notes:
svn path=/head/; revision=147225
|
|
|
|
|
|
|
| |
MAINTAINER file (which already had entries for sendmail).
Notes:
svn path=/head/; revision=117299
|
|
|
|
| |
Notes:
svn path=/head/; revision=90798
|
|
|
|
| |
Notes:
svn path=/head/; revision=90416
|
|
|
|
| |
Notes:
svn path=/head/; revision=87694
|
|
|
|
| |
Notes:
svn path=/head/; revision=67660
|
|
|
|
|
|
|
|
|
| |
Style fixes
Submitted by: bde
Notes:
svn path=/head/; revision=66960
|
|
|
|
|
|
|
|
|
|
|
|
| |
compatible with the old version but includes new functionality and bug fixes.
Since it is not part of the NO_SENDMAIL make.conf option, libsmdb and
libsmutil should always be built for vacation's sake.
PR: 15227
Notes:
svn path=/head/; revision=66943
|
|
|
|
|
|
|
| |
getopt returns -1 not EOF.
Notes:
svn path=/head/; revision=65428
|
|
|
|
|
|
|
|
| |
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.
Notes:
svn path=/head/; revision=57670
|
|
|
|
| |
Notes:
svn path=/head/; revision=50477
|
|
|
|
|
|
|
|
|
| |
a file in the user's home directory.
Requested by: hoek
Notes:
svn path=/head/; revision=48141
|
|
|
|
|
|
|
| |
the -d debugging option produces consistent behaviour.
Notes:
svn path=/head/; revision=47997
|
|
|
|
|
|
|
| |
PR: 11987
Notes:
svn path=/head/; revision=47982
|
|
|
|
|
|
|
|
| |
previously unreported malloc() failures, and changed the exit status
for those failures to encourage MTA retries.
Notes:
svn path=/head/; revision=47981
|
|
|
|
|
|
|
|
|
|
|
| |
messages to stderr instead of syslog.
* Fix manpage with respect to diagnostics.
Reported by: rfg@monkeys.com (Ronald F. Guilmette)
Notes:
svn path=/head/; revision=47980
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
execvp() in the child branch of a vfork(). Changed to use fork()
instead.
Some of these (mv, find, apply, xargs) might benefit greatly from
being rewritten to use vfork() properly.
PR: Loosely related to bin/8252
Approved by: jkh and bde
Notes:
svn path=/head/; revision=40301
|
|
|
|
| |
Notes:
svn path=/head/; revision=30910
|
|
|
|
|
|
|
|
|
|
|
|
| |
plain 0 should be used. This happens to work because we #define
NULL to 0, but is stylistically wrong and can cause problems
for people trying to port bits of code to other environments.
PR: 2752
Submitted by: Arne Henrik Juul <arnej@imf.unit.no>
Notes:
svn path=/head/; revision=29574
|
|
|
|
|
|
|
| |
Submitted by: Oliver Friedrichs <oliver@silence.secnet.com>
Notes:
svn path=/head/; revision=28850
|
|
|
|
|
|
|
| |
and not clobber memory by fclose().
Notes:
svn path=/head/; revision=25119
|
|
|
|
|
|
|
| |
and use _exit() instead of exit()
Notes:
svn path=/head/; revision=25118
|
|
|
|
|
|
|
|
| |
This program don't bother to do even minimal vfork() support as per vfork(2)
manpage required.
Notes:
svn path=/head/; revision=25117
|
|
|
|
|
|
|
| |
posix standard on the topic.
Notes:
svn path=/head/; revision=24360
|
|
|
|
| |
Notes:
svn path=/head/; revision=23012
|
|
|
|
|
|
|
|
|
|
|
| |
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.
Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.
Notes:
svn path=/head/; revision=21673
|
|
|
|
| |
Notes:
svn path=/head/; revision=21473
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
. prototyped and staticized the internal functions while i was here,
. made the thing -Wall clean,
. fixed an error that causes the recipient name to be matched only
for the first characters, as opposed to a full name (wonder why i'm
concerned? Well, one of my login IDs is `j', and i've noticed that
vacation has been sending out replies to all mailing list messages
that had a jkh@ or jmb@ in it :),
. introduced an option -l to list the contents of the database; mucho
useful if you've got (too) many mailing list messages in your inbox
and wanna make sure you don't miss the `important' mails.
Notes:
svn path=/head/; revision=18535
|
|
|
|
|
|
|
|
|
| |
try and silence "manck".
ncurses, rpc, and some of the gnu stuff are still a big mess, however.
Notes:
svn path=/head/; revision=14038
|
|
|
|
|
|
|
|
| |
one man page, not section eight. This is the first round of such changes
and only fixes man pages in manual section one.
Notes:
svn path=/head/; revision=13835
|
|
|
|
|
|
|
| |
which is no longer bogusly installed in /usr/include.
Notes:
svn path=/head/; revision=9987
|
|
Notes:
svn path=/cvs2svn/branches/CHRISTOS/; revision=1590
|