This is a library, which contains a safe reincarnations
of strcpy/strcat/sprintf and some other functions,
which is known to be a source to 99% of stack smashing
attacks since Morrison Worm.
Basic idea is: these functions never return in case
of modified stack frames. Instead, they kills current
process with SIG_SEGV, and, in case when program
just ignores it - calls exit(2). In 'paranoidal'
point of view, termination of a process is a much
less worth, than possible incorrect continuation.
This library can be used in two ways - you can just
install it as a port/package, and then relink critical
applications (such as a network daemons) with
-lparanoia -L/usr/local/lib, or you can override
standard functions in libc (using libparanoia/copy-to-libc
shell script) - in this case you'll get any application,
which uses shared libc, automatically protected.
WWW: http://www.lexa.ru/snar/libparanoia/
Remove ports maintainted by ports@ which have passed their EXPIRATION_DATE
astro/gkrellsun Abandonware
astro/xrmap No more distfiles
audio/midimountain Abandonware
audio/gkrellmss Abandonware
audio/gnapster Abandonware
databases/xbase No more public distfiles
databases/xbsql No more public distfiles
games/gtkabale No more public distfiles
games/battleball No more public distfiles, does not compile on ia64 or
sparc64
games/race No more public distfiles
games/stvef-paks No more public distfiles
games/stvef-server No more public distfiles
games/tome No more public distfiles
(Only the first 15 lines of the commit message are shown above )
For ports maintained by ports@FreeBSD.org, remove names and/or
e-mail addresses from the pkg-descr file that could reasonably
be mistaken for maintainer contact information in order to avoid
confusion on the part of users looking for support. As a pleasant
side effect this also avoids confusion and/or frustration for people
who are no longer maintaining those ports.
Substitute BROKEN with IGNORE in cases where the port requires the src tree
to be present, or does not compile on certain versions of FreeBSD. This
will potentially avoid needless compilations on bento, and has the added
benefit of improving certain reporting tools. To most users, this change
is a no-op.
PR: 61090
Submitted by: linimon
Fix incorrect argument order for kill(2) [1]
Use USE_REINPLACE instead of one-line patch-stentry.c.
Bump PORTREVISION.
Bug found and original patch: Valentin Nechayev <netch@lucky.net> [1]
Approved by: maintainer (timeout)
PR: 59510
In gets(), two return's exist, and both should be wrapped with exit_violation.
In current version, one is forgotten. Bump PORTREVISION.
PR: 41277
Submitted by: Valentin Nechayev <netch@netch.kiev.ua>
