Fix memory leak - free resources allocated by getaddrinfo

telnetd: fix the crash that's been talked about the past couple days.

(Move initialization of the slc table earlier so it doesn't get
accessed before that happens.)

Calling the crash a DoS or security problem is a bit overwrought; it's
just a bug.

s/desireable/desirable/ in comments.

telnetd: Stop defining the same variables concurrently in bss and data

auth_level and require_secure_login were defined in two places:

- global.c that picked it from headers and removed 'extern'
- telnetd.c that initialized it to 0

line was defined twice: in global.c and sys_term.c with a non-zero value.
Remove the definition and initialization from sys_term.c and initialize
the variable early in main().

Detected during the build of telned with Address Sanitizer (MKSANITIZER).

Reviewed by <mrg>

branches: 1.55.18; 1.55.26; 1.55.28;
Global variable is never a null pointer.

branches: 1.54.6;
Use __dead

PR/45805: Borodin Oleg: telnet/telnetd with -DAUTHENTICATION -DENCRYPTION
(rfc2941)
- separate MKCRYPTO from USE_KERBEROS
- WARNS=4

branches: 1.52.4;
#include <com_err.h> -> #include <krb5/com_err.h>.

Remove the \n and tabs from the __COPYRIGHT() strings.

branches: 1.50.20;
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
socklen_t are different signness.

Make the debug variable static, to accomodate static linking with libssh.a.

Remove static local variable so its easier to correctly use strlcpy.

Ensure IF is initialized before trying to use it.
Found with -Wuninitialized.

branches: 1.46.2;
de-__P, ANSIfy function declarations, remove obsolete "register" declarations.

PR/28473: Jed Davis: telnetd loses data and corrupts crypto state due to
typo in use of poll(). There was an && instead of an & (hi charles)

Pass -a [srrvis'd struct sockaddr] to login, so that login can record the
address where we have logged in from.

branches: 1.43.2; 1.43.4;
Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22284, verified by myself.

Since telnetd has ignored the USER environment variable for logging in for
quite a bit of time, make telnetd ignore it completely now. This results
in the :if=: entry in the default gettytab entry to honored instead of
being ignored. The -h option to telnetd will continue to suppress the
inclusion of :if=:

use bounded string op. bump shlib major for libtelnet due to API change.

SIGINFO is defined

remove unneeded #ifdefs. improves readability.
(confirmed that exact same *.o is produced)

use bounded string op (there still are remains)

use strlcpy

PR/21233: Onno van der Linden: -U option does not work as advertised.

Remove dead code.

select() -> poll()

add some more ifdefs, so that we don't define variables we don't use.

implement -u <len>. PR 13676

-edebug should only be mentioned in the help #ifdef ENCRYPTION, not #ifdef
AUTHENTICATION. Noted (with patch) by Brian Ginsbach.

Remove code #ifdef'd on NEWINIT (never used on NetBSD).
Sync with Cray, patch by Brian Ginsbach in private mail.

Remove lots of #ifdef's for dead Cray hardware and obsolete UNICOS releases;
also some Cray-specific fixes. No change for NetBSD.
From Brian Ginsbach of Cray Inc. in bin/13614 and private mail.

Fix typo, and duplicate ';'. From bin/13667 by Brian Ginsbach.

Add some (const char *) casts per bin/13667 by Brian Ginsbach.

bound-check all "*nfrontp++" code. from openbsd/heimdal.
bark if file descriptor goes above FD_SETSIZE. from openbsd.

XXX needs more checking.
XXX what is tab stop size for this code? need more consistency...
XXX we should really remove #ifdef CRAY, UNICOS5 and such.
we just cannot read it through.

fix redundant declarations.

use LOG_ERR for fatal errors, LOG_WARNING for other errors
minor knf
deprecate LOG_ODELAY; it's the default

Buffer overflow and environment passing fixes [originally inspired from
FreeBSD]. We really didn't need the environment fixes, but for the sake
of keeping the code as close as possible...

make error case handling in -daemon case meet with other portion of the code.
(use fprintf-then-exit, not errx - costmetic)

Bring the telnet situation back into better shape. Specifically,
pull in just about all of the differences from the crypto-us telnet
suite (which includes Kerberos 4 and connection encryption support).
Also bring in the Kerberos 5 support from the Heimdal telnet, and
frob a little so that it can work with the non-Heimdal telnet suite.

There is still some work left to do, specifically:
- Add Heimdal's ticket forwarding support to the Berkeley Kerberos 4
module.
- Add connection encryption support to the Heimdal Kerberos 5
module. Hints on this can be taken from the MIT Kerberos 5
module which still exists in crypto-us.

However, even with the shortcomings listed above, this is a
better situation than using the stock Heimdal telnet suite,
which does not understand the IPSec policy stuff, and is also
based on much older code which contains bugs that we have already
fixed in the NetBSD sources.

branches: 1.20.4;
Make 'if' capability from gettytab work. *shudder*.

do not touch __ss_len directly, they are not supposed to be touched.

branches: 1.18.4;
Nuke some whitespace.

Put the RCS ID in the correct place.

dual-stack telnetd.

Fix for PR 5821
- s/SecurID/SECURELOGIN/g and define SECURELOGIN in Makefile
- update man page to reflect S/Key and Kerboros authentication used
not SecurID

Declare ints, too, don't default them.

- use an array MAXHOSTNAMELEN+1 size to hold hostnames
- ensure hostname from gethostname() is nul-terminated in all cases
- minor KNF
- use MAXHOSTNAMELEN over various other values/defines
- be safe will buffers that hold hostnames

No need to declare optind and optarg.

don't include <sys/cdefs.h> twice, kill old-style getpty() declaration

use <termcap.h>

WARNS?=1. RCS ids.

Put a whitespace after the keyword `switch'.

Compare a return value of getopt() against -1 instead of EOF.

apply Thorsten's patch to add gettytab support to telnetd.

RCS id cosmetics.

update to telnetd from 95.10.23 version. Includes Borman's scrub_env()
to keep stuff out of the environment on the way to exec (we already have
one in the state machine that keeps them from arriving over the wire, so
this should be redundant, but it'll make any further updates easier to
have it present).

also, RCS Id police.

new telnetd from ftp.cray.com. Encryption support ripped out, pending
figuring out what to do about it...

Add RCS identifiers.

branches: 1.1.1;
Initial revision

telnetd: fix the crash that's been talked about the past couple days.

(Move initialization of the slc table earlier so it doesn't get
accessed before that happens.)

Calling the crash a DoS or security problem is a bit overwrought; it's
just a bug.

s/desireable/desirable/ in comments.

telnetd: Stop defining the same variables concurrently in bss and data

auth_level and require_secure_login were defined in two places:

- global.c that picked it from headers and removed 'extern'
- telnetd.c that initialized it to 0

line was defined twice: in global.c and sys_term.c with a non-zero value.
Remove the definition and initialization from sys_term.c and initialize
the variable early in main().

Detected during the build of telned with Address Sanitizer (MKSANITIZER).

Reviewed by <mrg>

branches: 1.55.26; 1.55.28;
Global variable is never a null pointer.

branches: 1.54.6;
Use __dead

PR/45805: Borodin Oleg: telnet/telnetd with -DAUTHENTICATION -DENCRYPTION
(rfc2941)
- separate MKCRYPTO from USE_KERBEROS
- WARNS=4

branches: 1.52.4;
#include <com_err.h> -> #include <krb5/com_err.h>.

Remove the \n and tabs from the __COPYRIGHT() strings.

branches: 1.50.20;
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
socklen_t are different signness.

Make the debug variable static, to accomodate static linking with libssh.a.

Remove static local variable so its easier to correctly use strlcpy.

Ensure IF is initialized before trying to use it.
Found with -Wuninitialized.

branches: 1.46.2;
de-__P, ANSIfy function declarations, remove obsolete "register" declarations.

PR/28473: Jed Davis: telnetd loses data and corrupts crypto state due to
typo in use of poll(). There was an && instead of an & (hi charles)

Pass -a [srrvis'd struct sockaddr] to login, so that login can record the
address where we have logged in from.

branches: 1.43.2; 1.43.4;
Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22284, verified by myself.

Since telnetd has ignored the USER environment variable for logging in for
quite a bit of time, make telnetd ignore it completely now. This results
in the :if=: entry in the default gettytab entry to honored instead of
being ignored. The -h option to telnetd will continue to suppress the
inclusion of :if=:

use bounded string op. bump shlib major for libtelnet due to API change.

SIGINFO is defined

remove unneeded #ifdefs. improves readability.
(confirmed that exact same *.o is produced)

use bounded string op (there still are remains)

use strlcpy

PR/21233: Onno van der Linden: -U option does not work as advertised.

Remove dead code.

select() -> poll()

add some more ifdefs, so that we don't define variables we don't use.

implement -u <len>. PR 13676

-edebug should only be mentioned in the help #ifdef ENCRYPTION, not #ifdef
AUTHENTICATION. Noted (with patch) by Brian Ginsbach.

Remove code #ifdef'd on NEWINIT (never used on NetBSD).
Sync with Cray, patch by Brian Ginsbach in private mail.

Remove lots of #ifdef's for dead Cray hardware and obsolete UNICOS releases;
also some Cray-specific fixes. No change for NetBSD.
From Brian Ginsbach of Cray Inc. in bin/13614 and private mail.

Fix typo, and duplicate ';'. From bin/13667 by Brian Ginsbach.

Add some (const char *) casts per bin/13667 by Brian Ginsbach.

bound-check all "*nfrontp++" code. from openbsd/heimdal.
bark if file descriptor goes above FD_SETSIZE. from openbsd.

XXX needs more checking.
XXX what is tab stop size for this code? need more consistency...
XXX we should really remove #ifdef CRAY, UNICOS5 and such.
we just cannot read it through.

fix redundant declarations.

use LOG_ERR for fatal errors, LOG_WARNING for other errors
minor knf
deprecate LOG_ODELAY; it's the default

Buffer overflow and environment passing fixes [originally inspired from
FreeBSD]. We really didn't need the environment fixes, but for the sake
of keeping the code as close as possible...

make error case handling in -daemon case meet with other portion of the code.
(use fprintf-then-exit, not errx - costmetic)

Bring the telnet situation back into better shape. Specifically,
pull in just about all of the differences from the crypto-us telnet
suite (which includes Kerberos 4 and connection encryption support).
Also bring in the Kerberos 5 support from the Heimdal telnet, and
frob a little so that it can work with the non-Heimdal telnet suite.

There is still some work left to do, specifically:
- Add Heimdal's ticket forwarding support to the Berkeley Kerberos 4
module.
- Add connection encryption support to the Heimdal Kerberos 5
module. Hints on this can be taken from the MIT Kerberos 5
module which still exists in crypto-us.

However, even with the shortcomings listed above, this is a
better situation than using the stock Heimdal telnet suite,
which does not understand the IPSec policy stuff, and is also
based on much older code which contains bugs that we have already
fixed in the NetBSD sources.

branches: 1.20.4;
Make 'if' capability from gettytab work. *shudder*.

do not touch __ss_len directly, they are not supposed to be touched.

branches: 1.18.4;
Nuke some whitespace.

Put the RCS ID in the correct place.

dual-stack telnetd.

Fix for PR 5821
- s/SecurID/SECURELOGIN/g and define SECURELOGIN in Makefile
- update man page to reflect S/Key and Kerboros authentication used
not SecurID

Declare ints, too, don't default them.

- use an array MAXHOSTNAMELEN+1 size to hold hostnames
- ensure hostname from gethostname() is nul-terminated in all cases
- minor KNF
- use MAXHOSTNAMELEN over various other values/defines
- be safe will buffers that hold hostnames

No need to declare optind and optarg.

don't include <sys/cdefs.h> twice, kill old-style getpty() declaration

use <termcap.h>

WARNS?=1. RCS ids.

Put a whitespace after the keyword `switch'.

Compare a return value of getopt() against -1 instead of EOF.

apply Thorsten's patch to add gettytab support to telnetd.

RCS id cosmetics.

update to telnetd from 95.10.23 version. Includes Borman's scrub_env()
to keep stuff out of the environment on the way to exec (we already have
one in the state machine that keeps them from arriving over the wire, so
this should be redundant, but it'll make any further updates easier to
have it present).

also, RCS Id police.

new telnetd from ftp.cray.com. Encryption support ripped out, pending
figuring out what to do about it...

Add RCS identifiers.

branches: 1.1.1;
Initial revision

s/desireable/desirable/ in comments.

telnetd: Stop defining the same variables concurrently in bss and data

auth_level and require_secure_login were defined in two places:

- global.c that picked it from headers and removed 'extern'
- telnetd.c that initialized it to 0

line was defined twice: in global.c and sys_term.c with a non-zero value.
Remove the definition and initialization from sys_term.c and initialize
the variable early in main().

Detected during the build of telned with Address Sanitizer (MKSANITIZER).

Reviewed by <mrg>

branches: 1.55.26; 1.55.28;
Global variable is never a null pointer.

branches: 1.54.6;
Use __dead

PR/45805: Borodin Oleg: telnet/telnetd with -DAUTHENTICATION -DENCRYPTION
(rfc2941)
- separate MKCRYPTO from USE_KERBEROS
- WARNS=4

branches: 1.52.4;
#include <com_err.h> -> #include <krb5/com_err.h>.

Remove the \n and tabs from the __COPYRIGHT() strings.

branches: 1.50.20;
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
socklen_t are different signness.

Make the debug variable static, to accomodate static linking with libssh.a.

Remove static local variable so its easier to correctly use strlcpy.

Ensure IF is initialized before trying to use it.
Found with -Wuninitialized.

branches: 1.46.2;
de-__P, ANSIfy function declarations, remove obsolete "register" declarations.

PR/28473: Jed Davis: telnetd loses data and corrupts crypto state due to
typo in use of poll(). There was an && instead of an & (hi charles)

Pass -a [srrvis'd struct sockaddr] to login, so that login can record the
address where we have logged in from.

branches: 1.43.2; 1.43.4;
Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22284, verified by myself.

Since telnetd has ignored the USER environment variable for logging in for
quite a bit of time, make telnetd ignore it completely now. This results
in the :if=: entry in the default gettytab entry to honored instead of
being ignored. The -h option to telnetd will continue to suppress the
inclusion of :if=:

use bounded string op. bump shlib major for libtelnet due to API change.

SIGINFO is defined

remove unneeded #ifdefs. improves readability.
(confirmed that exact same *.o is produced)

use bounded string op (there still are remains)

use strlcpy

PR/21233: Onno van der Linden: -U option does not work as advertised.

Remove dead code.

select() -> poll()

add some more ifdefs, so that we don't define variables we don't use.

implement -u <len>. PR 13676

-edebug should only be mentioned in the help #ifdef ENCRYPTION, not #ifdef
AUTHENTICATION. Noted (with patch) by Brian Ginsbach.

Remove code #ifdef'd on NEWINIT (never used on NetBSD).
Sync with Cray, patch by Brian Ginsbach in private mail.

Remove lots of #ifdef's for dead Cray hardware and obsolete UNICOS releases;
also some Cray-specific fixes. No change for NetBSD.
From Brian Ginsbach of Cray Inc. in bin/13614 and private mail.

Fix typo, and duplicate ';'. From bin/13667 by Brian Ginsbach.

Add some (const char *) casts per bin/13667 by Brian Ginsbach.

bound-check all "*nfrontp++" code. from openbsd/heimdal.
bark if file descriptor goes above FD_SETSIZE. from openbsd.

XXX needs more checking.
XXX what is tab stop size for this code? need more consistency...
XXX we should really remove #ifdef CRAY, UNICOS5 and such.
we just cannot read it through.

fix redundant declarations.

use LOG_ERR for fatal errors, LOG_WARNING for other errors
minor knf
deprecate LOG_ODELAY; it's the default

Buffer overflow and environment passing fixes [originally inspired from
FreeBSD]. We really didn't need the environment fixes, but for the sake
of keeping the code as close as possible...

make error case handling in -daemon case meet with other portion of the code.
(use fprintf-then-exit, not errx - costmetic)

Bring the telnet situation back into better shape. Specifically,
pull in just about all of the differences from the crypto-us telnet
suite (which includes Kerberos 4 and connection encryption support).
Also bring in the Kerberos 5 support from the Heimdal telnet, and
frob a little so that it can work with the non-Heimdal telnet suite.

There is still some work left to do, specifically:
- Add Heimdal's ticket forwarding support to the Berkeley Kerberos 4
module.
- Add connection encryption support to the Heimdal Kerberos 5
module. Hints on this can be taken from the MIT Kerberos 5
module which still exists in crypto-us.

However, even with the shortcomings listed above, this is a
better situation than using the stock Heimdal telnet suite,
which does not understand the IPSec policy stuff, and is also
based on much older code which contains bugs that we have already
fixed in the NetBSD sources.

branches: 1.20.4;
Make 'if' capability from gettytab work. *shudder*.

do not touch __ss_len directly, they are not supposed to be touched.

branches: 1.18.4;
Nuke some whitespace.

Put the RCS ID in the correct place.

dual-stack telnetd.

Fix for PR 5821
- s/SecurID/SECURELOGIN/g and define SECURELOGIN in Makefile
- update man page to reflect S/Key and Kerboros authentication used
not SecurID

Declare ints, too, don't default them.

- use an array MAXHOSTNAMELEN+1 size to hold hostnames
- ensure hostname from gethostname() is nul-terminated in all cases
- minor KNF
- use MAXHOSTNAMELEN over various other values/defines
- be safe will buffers that hold hostnames

No need to declare optind and optarg.

don't include <sys/cdefs.h> twice, kill old-style getpty() declaration

use <termcap.h>

WARNS?=1. RCS ids.

Put a whitespace after the keyword `switch'.

Compare a return value of getopt() against -1 instead of EOF.

apply Thorsten's patch to add gettytab support to telnetd.

RCS id cosmetics.

update to telnetd from 95.10.23 version. Includes Borman's scrub_env()
to keep stuff out of the environment on the way to exec (we already have
one in the state machine that keeps them from arriving over the wire, so
this should be redundant, but it'll make any further updates easier to
have it present).

also, RCS Id police.

new telnetd from ftp.cray.com. Encryption support ripped out, pending
figuring out what to do about it...

Add RCS identifiers.

branches: 1.1.1;
Initial revision

telnetd: Stop defining the same variables concurrently in bss and data

auth_level and require_secure_login were defined in two places:

- global.c that picked it from headers and removed 'extern'
- telnetd.c that initialized it to 0

line was defined twice: in global.c and sys_term.c with a non-zero value.
Remove the definition and initialization from sys_term.c and initialize
the variable early in main().

Detected during the build of telned with Address Sanitizer (MKSANITIZER).

Reviewed by <mrg>

Global variable is never a null pointer.

branches: 1.54.6;
Use __dead

PR/45805: Borodin Oleg: telnet/telnetd with -DAUTHENTICATION -DENCRYPTION
(rfc2941)
- separate MKCRYPTO from USE_KERBEROS
- WARNS=4

branches: 1.52.4;
#include <com_err.h> -> #include <krb5/com_err.h>.

Remove the \n and tabs from the __COPYRIGHT() strings.

branches: 1.50.20;
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
socklen_t are different signness.

Make the debug variable static, to accomodate static linking with libssh.a.

Remove static local variable so its easier to correctly use strlcpy.

Ensure IF is initialized before trying to use it.
Found with -Wuninitialized.

branches: 1.46.2;
de-__P, ANSIfy function declarations, remove obsolete "register" declarations.

PR/28473: Jed Davis: telnetd loses data and corrupts crypto state due to
typo in use of poll(). There was an && instead of an & (hi charles)

Pass -a [srrvis'd struct sockaddr] to login, so that login can record the
address where we have logged in from.

branches: 1.43.2; 1.43.4;
Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22284, verified by myself.

Since telnetd has ignored the USER environment variable for logging in for
quite a bit of time, make telnetd ignore it completely now. This results
in the :if=: entry in the default gettytab entry to honored instead of
being ignored. The -h option to telnetd will continue to suppress the
inclusion of :if=:

use bounded string op. bump shlib major for libtelnet due to API change.

SIGINFO is defined

remove unneeded #ifdefs. improves readability.
(confirmed that exact same *.o is produced)

use bounded string op (there still are remains)

use strlcpy

PR/21233: Onno van der Linden: -U option does not work as advertised.

Remove dead code.

select() -> poll()

add some more ifdefs, so that we don't define variables we don't use.

implement -u <len>. PR 13676

-edebug should only be mentioned in the help #ifdef ENCRYPTION, not #ifdef
AUTHENTICATION. Noted (with patch) by Brian Ginsbach.

Remove code #ifdef'd on NEWINIT (never used on NetBSD).
Sync with Cray, patch by Brian Ginsbach in private mail.

Remove lots of #ifdef's for dead Cray hardware and obsolete UNICOS releases;
also some Cray-specific fixes. No change for NetBSD.
From Brian Ginsbach of Cray Inc. in bin/13614 and private mail.

Fix typo, and duplicate ';'. From bin/13667 by Brian Ginsbach.

Add some (const char *) casts per bin/13667 by Brian Ginsbach.

bound-check all "*nfrontp++" code. from openbsd/heimdal.
bark if file descriptor goes above FD_SETSIZE. from openbsd.

XXX needs more checking.
XXX what is tab stop size for this code? need more consistency...
XXX we should really remove #ifdef CRAY, UNICOS5 and such.
we just cannot read it through.

fix redundant declarations.

use LOG_ERR for fatal errors, LOG_WARNING for other errors
minor knf
deprecate LOG_ODELAY; it's the default

Buffer overflow and environment passing fixes [originally inspired from
FreeBSD]. We really didn't need the environment fixes, but for the sake
of keeping the code as close as possible...

make error case handling in -daemon case meet with other portion of the code.
(use fprintf-then-exit, not errx - costmetic)

Bring the telnet situation back into better shape. Specifically,
pull in just about all of the differences from the crypto-us telnet
suite (which includes Kerberos 4 and connection encryption support).
Also bring in the Kerberos 5 support from the Heimdal telnet, and
frob a little so that it can work with the non-Heimdal telnet suite.

There is still some work left to do, specifically:
- Add Heimdal's ticket forwarding support to the Berkeley Kerberos 4
module.
- Add connection encryption support to the Heimdal Kerberos 5
module. Hints on this can be taken from the MIT Kerberos 5
module which still exists in crypto-us.

However, even with the shortcomings listed above, this is a
better situation than using the stock Heimdal telnet suite,
which does not understand the IPSec policy stuff, and is also
based on much older code which contains bugs that we have already
fixed in the NetBSD sources.

branches: 1.20.4;
Make 'if' capability from gettytab work. *shudder*.

do not touch __ss_len directly, they are not supposed to be touched.

branches: 1.18.4;
Nuke some whitespace.

Put the RCS ID in the correct place.

dual-stack telnetd.

Fix for PR 5821
- s/SecurID/SECURELOGIN/g and define SECURELOGIN in Makefile
- update man page to reflect S/Key and Kerboros authentication used
not SecurID

Declare ints, too, don't default them.

- use an array MAXHOSTNAMELEN+1 size to hold hostnames
- ensure hostname from gethostname() is nul-terminated in all cases
- minor KNF
- use MAXHOSTNAMELEN over various other values/defines
- be safe will buffers that hold hostnames

No need to declare optind and optarg.

don't include <sys/cdefs.h> twice, kill old-style getpty() declaration

use <termcap.h>

WARNS?=1. RCS ids.

Put a whitespace after the keyword `switch'.

Compare a return value of getopt() against -1 instead of EOF.

apply Thorsten's patch to add gettytab support to telnetd.

RCS id cosmetics.

update to telnetd from 95.10.23 version. Includes Borman's scrub_env()
to keep stuff out of the environment on the way to exec (we already have
one in the state machine that keeps them from arriving over the wire, so
this should be redundant, but it'll make any further updates easier to
have it present).

also, RCS Id police.

new telnetd from ftp.cray.com. Encryption support ripped out, pending
figuring out what to do about it...

Add RCS identifiers.

branches: 1.1.1;
Initial revision