once cvs's flow-control mechanism has kicked in, stop reading from
its local reader until memory usage goes back down below its
watermark.

during a checkout of a tree with big files (like www) from a fast
reader (disk) and a slow writer (net), the amount of data being
buffered can back up enough that cvs tries to allocate too many
buffers and hits its resource limit, causing death.

cvs's flow-control mechanism properly detects this early on, but the
message sent to the reader process to stop sending data takes too
long to process.

take more aggressive action and just stop reading from the reader
until the writer has ejected enough data that it can start re-using
its already-allocated buffers instead of allocating new ones.

ok deraadt

Use crypt_checkpass() instead of strcmp(hash, crypt(password, hash)).
Fixes a crash in pserver mode when CVSROOT/passwd contains an old
DES password.

Kill usage of timeb.h for upcoming removal of libcompat. OK deraadt@

Move the declaration of `disable_x_prog' outside of a #ifdef AUTH_SERVER_SUPPORT
block where it had been mistakenly put in the first place (in r1.28).

In preparation for getline and getdelim additions to libc, rename getline()
occurrences to get_line().
Based on a diff from Jan Klemkow <j-dot-klemkow-at-wemelug-dot-de> to tech.

Switch the remaining users of libdes in src to libcrypto,
telnet portion partially from the latest heimdal.

ok mikeb@

fix leaks found by parfait.
ok deraadt

Several potential security problems found and fixed by Stefan Esser &
Sebastian Krahmer.

ok millert@

Fix buffer overflow find by Stefan Esser, patch by Derek Robert Price.

branches: 1.29.2;
re-entrancy hack that is currently needed for cvs to work correctly.
well, almost. someone should track that down please.

branches: 1.28.4;
Add a "DisableXProg" option to CVSROOT/config that can be used to
disable support for Update-prog and Checkin-prog. This is a good
idea for anonymouse cvs servers or anyone who doesn't need this
feature. From Stefan Esser.

In dirswitch(), don't free dir_name until right before allocating
it again. This removes a potential double-free problem, whereby
this function could free dir_name and then immediately return due
to invalid directory syntax (without ever reassigning dir_name),
then re-enter and free dir_name again. Fix from Stefan Esser.

branches: 1.26.4; 1.26.6;
Merge remaining local changes, correct build issues

Merge local changes; work in progress

Integrate local changes

Integrate local changes

Integrate local changes

Integrate local changes

Integrate local changes

Integrate local changes

Merge local changes to support a configuration file with Cyclic's scheme

Integrate local changes

save errno in sigchld handlers

Integrate local changes

Integrate local changes

Integrate local changes

Integrate local changes

Undo CVSroot change in main.c
Pass CVS root directory as an argument to parseopts()
Add prototype for parseopts()

Integrate local changes

who wrote this code? nonblocking pipe, select, and then not deal with a
read of zero? spin city. i think this deals properly with dead sockets.

server must parseopts() after getting Root

Integrate local changes to CVS; remove files no longer part of the CVS
distribution

Integrate local changes to CVS

Integrate local changes

if CVSREADONLYFS, access to the history file is irrelevant

stall all three server:server pipes, and 2MB instead of 256K

allow at most 256K of data to be queued

branches: 1.1.1;
Initial revision