Fix rtsold(8) remote buffer overflow vulnerability. [SA-14:20]

Fix routed(8) remote denial of service vulnerability. [SA-14:21]

Fix memory leak in sandboxed namei lookup. [SA-14:22]

Fix OpenSSL multiple vulnerabilities. [SA-14:23]

Approved by: so

- Copy stable/10 (r259064) to releng/10.0 as part of the
10.0-RELEASE cycle.
- Update __FreeBSD_version [1]
- Set branch name to -RC1

[1] 10.0-CURRENT __FreeBSD_version value ended at '55', so
start releng/10.0 at '100' so the branch is started with
a value ending in zero.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

mdoc sweep

Fix a style bug

Spelling fixes for sbin/

Use NO_WARRAY_BOUNDS for sbin/routed/rtquery.

MFC after: 1 week

Fix use of AND operator: should be bitwise instead of logical.

mdoc: drop even more redundant .Pp calls

No change in rendered output, less mandoc lint warnings.

Tool provided by: Nobuyuki Koganemaru n-kogane at syd.odn.ne.jp

routed(8)/rtquery(8) bump/demote to WARNS=3 for all archs

- The MACHINE_ARCH check is not exhaustive (missing at least powerpc),
and generally not worth maintaining.
- While here, fix whitespace and ordering of the Makefile

PR: bin/140081
Approved by: ed (co-mentor)

(S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument.
Fix some wrong usages.
Note: this does not affect generated binaries as this argument is not used.

PR: 137213
Submitted by: Eygene Ryabinkin (initial version)
MFC after: 1 month

Switch the default WARNS level for sbin/ to 6.

Submitted by: Ulrich Spörlein

Only raise WARNS to 6 on i386 and amd64, strict alignment platforms still
barf at some of the gratuitous pointer gymnastics, and I do not see a
simple solution.

Silence a printf warning

Add some consts, remove some unused stuff and other attempts to calm
FlexeLint down.

Fix casts which are not by definition safe, but which malloc(3)
makes safe for us.

Some constifications

Modernize prototypes (ie: no extern)

Make lots of stuff static.

Convert list of remote interfaces to LIST_* macros

Kick WARNS level up to 6 by fixing various trivial warnings.

Use <sys/queue.h> to manage the interface list.

Remove newlines from string argument of __COPYRIGHT(), it results in
assembler warning messages.

Send multicast on p2p interfaces if they can and are not prohibited
from doing so with no_rip_mcast in /etc/gateways.

This allows routed(8) to work with the way ports/security/openvpn
employs the tun(4) interface.

This main goals of this project are:
1. separating L2 tables (ARP, NDP) from the L3 routing tables
2. removing as much locking dependencies among these layers as
possible to allow for some parallelism in the search operations
3. simplify the logic in the routing code,

The most notable end result is the obsolescent of the route
cloning (RTF_CLONING) concept, which translated into code reduction
in both IPv4 ARP and IPv6 NDP related modules, and size reduction in
struct rtentry{}. The change in design obsoletes the semantics of
RTF_CLONING, RTF_WASCLONE and RTF_LLINFO routing flags. The userland
applications such as "arp" and "ndp" have been modified to reflect
those changes. The output from "netstat -r" shows only the routing
entries.

Quite a few developers have contributed to this project in the
past: Glebius Smirnoff, Luigi Rizzo, Alessandro Cerri, and
Andre Oppermann. And most recently:

- Kip Macy revised the locking code completely, thus completing
the last piece of the puzzle, Kip has also been conducting
active functional testing
- Sam Leffler has helped me improving/refactoring the code, and
provided valuable reviews
- Julian Elischer setup the perforce tree for me and has helped
me maintaining that branch before the svn conversion

Update routed to use the RFC 3678 protocol-independent multicast API. Use
IP_MULTICAST_IF with struct ip_mreqn (obtained from Linux) to tell the
stack which interface index to use for sending IPv4 datagrams.

Submitted by: bms
Tested by: phk

Clarify which route property routed(8) looks at.

Sync up with rhyolite routed 2.31 which fixes the handling of varargs.
Remove -p from usage, it's gone completely now.

PR: 83387
Submited by: arved

o Remove rev. 1.14 debug printf(3) leftovers.

PR: bin/90389
Submitted by: Gavin Atkinson
OK'ed by: phk

Use socklen_t where appropriate.

Remove #ident directives, they don't exist on the vendor branch anymore.

Sort sections.

Don't declare everything we find on a loopback interface for passive:

Only the actual loopback address should be declared passive, other
addresses are very likely to be desirable to announce.

Check for IFF_LOOPBACK instead of IFF_PASSIVE to determine if we have
an unknown interface type.

Removed commented out bitrot.

Mechanically kill hard sentence breaks.

Turn on RFC 1724 compliant behaviour with regards to IP_ADD_MEMBERSHIP;
routed should be able to specify multicast memberships to be added by
interface index. This should fix the unnumbered / point-to-point case
for RIPv2.

PR: bin/51927
Requested by: Eugene Grosbein

Ignore kernel routes with the RTF_WASCLONED flag set. This is a slight
modification of a patch which was already applied for BSD/OS in the
Rhyolite.com sources; this file is already off the vendor branch.

PR: bin/57484
Submitted by: Richard Perini

Assorted markup, grammar, and spelling fixes.

Replace ROUNDUP/ADVANCE with SA_SIZE

Remove advertising clause from University of California Regent's license,
per letter dated July 22, 1999.

Approved by: core, imp

Sync HEAD sources to vendor branch import of routed v2.27 from rhyolite.com.
Update <protocols/routed.h> for the MD5 changes requested in bin/35843.
Preserve local changes.

Education by: obrien, markm, pointy-stick
PR: bin/35843 (and doubtless others)

style.Makefile(5):
Use WARNS?= instead of WARNS=.

Fixed style of DPADD and LDADD assignments as per style.Makefile(5).

Removed duplicate $FreeBSD$ tag.

Prefer PATH_MAX to MAXPATHLEN. Both contain the trailing NUL, so
remove the unneeded +1.

The .Xr utility

mdoc(7) fixes: Mark "gated" with the .Nm macro.

Approved by: re (blanket)

Note that gated is a commercial routing product now, and remove
references to it's man page, which is almost never installed on a
FreeBSD system. The information about using this command with gated
has been retained. I have just made it clear that gated is not a part
of FreeBSD.

PR: docs/51407

Use srandomdev() for FreeBSD

Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,
especially in troff files.

Replace various spelling with FALLTHROUGH which is lint()able

s/filesystem/file system/g as discussed on -developers

The .Nm utility.

Add the possibility to use a no_rip_out configuration option in order
to stop routed from sending out RIP updates.

PR: 29090
Submitted by: Matthew Braithwaite <mab@red-bean.com>

o remove __P
o remove main prototype

mdoc(7) police: GC duplicate VCS ID.

o Move NTOHL() and associated macros into <sys/param.h>. These are
deprecated in favor of the POSIX-defined lowercase variants.
o Change all occurrences of NTOHL() and associated marcros in the
source tree to use the lowercase function variants.
o Add missing license bits to sparc64's <machine/endian.h>.
Approved by: jake
o Clean up <machine/endian.h> files.
o Remove unused __uint16_swap_uint32() from i386's <machine/endian.h>.
o Remove prototypes for non-existent bswapXX() functions.
o Include <machine/endian.h> in <arpa/inet.h> to define the
POSIX-required ntohl() family of functions.
o Do similar things to expose the ntohl() family in libstand, <netinet/in.h>,
and <sys/param.h>.
o Prepend underscores to the ntohl() family to help deal with
complexities associated with having MD (asm and inline) versions, and
having to prevent exposure of these functions in other headers that
happen to make use of endian-specific defines.
o Create weak aliases to the canonical function name to help deal with
third-party software forgetting to include an appropriate header.
o Remove some now unneeded pollution from <sys/types.h>.
o Add missing <arpa/inet.h> includes in userland.

Tested on: alpha, i386
Reviewed by: bde, jake, tmm

Insert a missing paragraph break (.Pp).
MFC after: 3 weeks

Fix typo by s/advertise/advertises/
MFC after: 4 weeks

Default to WARNS=2.
Binary builds that cannot handle this must explicitly set WARNS=0.

Reviewed by: mike

The directory of the makefile that's including the file is tried first.
See section 3.2 of "PMake - A Tutorial" in /usr/share/doc/psd/12.make.

ftrace is already initialized

mdoc(7) police: fixed the "new sentence" bogons.

mdoc(7) police: removed HISTORY info from the .Os call.

mdoc(7) police: remove extraneous .Pp before and/or after .Sh.

mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).

Fix a byteorder problem in a diagnostic message.

PR: 16625
Submitted by: Peter Jeremy <peter.jeremy@ALCATEL.COM.AU>

- Backout botched attempt to introduce MANSECT feature.
- MAN[1-9] -> MAN.

Set the default manual section for sbin/ to 8.

Prepare for mdoc(7)NG.

Prepare for mdoc(7)NG.

mdoc(7) police: use the new features of the Nm macro.

Avoid use of direct troff requests in mdoc(7) manual pages.

Add $FreeBSD$.

Resolve conflicts.

Resolve conflicts from vendor merge.

Fix memory leak when route addition fails.

Obtained from: NetBSD

Add new rtmsg types which already defined in kernel.

Prevent buffer overflow.

PR: bin/17657
Submitted by: tanimura

Remove dead xrefs to gated(8) and htable(8)

Obtained from: OpenBSD

$Revision$ -> $FreeBSD$ (more cleanup needed here)

$Id$ -> $FreeBSD$

Various man page cleanup:

- Sort xrefs
- FreeBSD.ORG -> FreeBSD.org
- Properly xref RFCs.
- Be consistent with section names as outlined in mdoc(7).
- Other misc mdoc cleanup.

PR: doc/13144
Submitted by: Alexey M. Zelkin <phantom@cris.net>

Incomplete. Back out until I can revisit.

Restore perror --> err changes.

Merge-o-matic and add a bunch of $Id's

Spelling, add rcsid, remove unused #includes.
Convert 1000000 usec to 1 sec 0 usec.
Use provided safe malloc (rtmalloc()) instead of malloc(): exit on allocation
failure.
Correct use of .Nm
Add usage() and use errx().

/usr/src/sbin/routed/parms.c and .../routed/rtquery/rtquery.c both
contain code that compare a char pointer with a char. As this
doesn't make much sense, it looks very much as if a '*' has been
dropped by mistake. I have made no analysis of the possible
consequences of the problem.

PR: 7319
Reviewed by: phk
Submitted by: Anders Thulin <Anders.X.Thulin@telia.se>

Remove reference to non-existent htable(8).

PR: 6940

Problem whith "subnet=" statement in /etc/gateways.
routed discards the first character of the network address.
Example: "subnet=10.0.0.0/24,1"
The network address is interpreted as 0.0.0.0/24,1.
PR: 4825
Reviewed by: phk
Submitted by: Mike E. Matsnev <mike@azog.cs.msu.su>

Use err(3). Change exit(-1). Remove unused #include.

Fix typo in comment.

Check if routed had the same problems that route(1) had.
The answer is not really, but almost.
it sent data that was ok, though it was a hack,
but it was bug-compatible with the kernel on receiving them. This also
had been fixed with a hack.. I hacked it better I think.

Sync man page and usage string. Remove unused -p option from getopt call.

Sync man page and usage string.

Typo fix.
PR: 3854
Submitted by: Takahiro Yugawa <yugawa@orleans.rim.or.jp>

compare return value from getopt against -1 rather than EOF, per the final
posix standard on the topic.

Some minor mdoc cleanup. Partially based on PR# 2959.

Revert $FreeBSD$ to $Id$

Some various mdoc cleanup.

Partially Obtained from: NetBSD-bugs mailing list

Various minor cleanup.

Partially Obtained from: NetBSD-bugs

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Sort cross references.

This commit was generated by cvs2svn to compensate for changes in r21378,
which included commits to RCS files with non-trunk default branches.

Merge to eliminate conflict

FIx coredump with rtquery.
It is just quick fix taken from new routed sources,
full new routed importing I leave to wollman

Delete redundant include of <sys/time.h>

Merge from vendor branch.

This commit was generated by cvs2svn to compensate for changes in r20606,
which included commits to RCS files with non-trunk default branches.

Merge from vendor branch.

This commit was generated by cvs2svn to compensate for changes in r20339,
which included commits to RCS files with non-trunk default branches.

Fix up programs which expect <net/if.h> to include <sys/time.h> to instead
do it themselves. (Some of these programs actually depended on this
beyond compiling the definition of struct ifinfo!) Also fix up some
other #include messes while we're at it.

For some reason the merge of this file didn't get committed properly.
Who has the conical hat?

Make things compile again.

Merge from vendor branch and use system MD5 library.

This commit was generated by cvs2svn to compensate for changes in r19882,
which included commits to RCS files with non-trunk default branches.

This commit was generated by cvs2svn to compensate for changes in r19880,
which included commits to RCS files with non-trunk default branches.

Change location of trace files and disable remote trace file change
feature.

Layer on FreeBSD local changes from old routed.

This commit was generated by cvs2svn to compensate for changes in r18316,
which included commits to RCS files with non-trunk default branches.