freebsd-stable Digest, Vol 262, Issue 9

Send freebsd-stable mailing list submissions to
freebsd-stable@freebsd.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
or, via email, send a message with subject or body 'help' to
freebsd-stable-request@freebsd.org

You can reach the person managing the list at
freebsd-stable-owner@freebsd.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of freebsd-stable digest..."

Today's Topics:

1. [releng_7 tinderbox] failure on i386/i386 (FreeBSD Tinderbox)
2. Re: FreeBSD 7.1 and BIND exploit (Doug Barton)
3. [releng_7 tinderbox] failure on i386/pc98 (FreeBSD Tinderbox)
4. [releng_7 tinderbox] failure on ia64/ia64 (FreeBSD Tinderbox)

----------------------------------------------------------------------

Message: 1
Date: Fri, 25 Jul 2008 15:52:10 -0400 (EDT)
From: FreeBSD Tinderbox <tinderbox@freebsd.org>
Subject: [releng_7 tinderbox] failure on i386/i386
To: FreeBSD Tinderbox <tinderbox@freebsd.org>, <stable@freebsd.org>,
<i386@freebsd.org>
Message-ID: <20080725195210.77F381B5078@freebsd-stable.sentex.ca>

TB --- 2008-07-25 18:36:41 - tinderbox 2.3 running on freebsd-stable.sentex.ca
TB --- 2008-07-25 18:36:41 - starting RELENG_7 tinderbox run for i386/i386
TB --- 2008-07-25 18:36:41 - cleaning the object tree
TB --- 2008-07-25 18:37:00 - cvsupping the source tree
TB --- 2008-07-25 18:37:00 - /usr/bin/csup -r 3 -g -L 1 -h localhost -s /tinderbox/RELENG_7/i386/i386/supfile
TB --- 2008-07-25 18:37:10 - building world (CFLAGS=-O2 -pipe)
TB --- 2008-07-25 18:37:10 - cd /src
TB --- 2008-07-25 18:37:10 - /usr/bin/make -B buildworld
>>> World build started on Fri Jul 25 18:37:11 UTC 2008
>>> Rebuilding the temporary build tree
>>> stage 1.1: legacy release compatibility shims
>>> stage 1.2: bootstrap tools
>>> stage 2.1: cleaning up the object tree
>>> stage 2.2: rebuilding the object tree
>>> stage 2.3: build tools
>>> stage 3: cross tools
>>> stage 4.1: building includes
>>> stage 4.2: building libraries
>>> stage 4.3: make dependencies
>>> stage 4.4: building everything
>>> World build completed on Fri Jul 25 19:42:06 UTC 2008
TB --- 2008-07-25 19:42:06 - generating LINT kernel config
TB --- 2008-07-25 19:42:06 - cd /src/sys/i386/conf
TB --- 2008-07-25 19:42:06 - /usr/bin/make -B LINT
TB --- 2008-07-25 19:42:06 - building LINT kernel (COPTFLAGS=-O2 -pipe)
TB --- 2008-07-25 19:42:06 - cd /src
TB --- 2008-07-25 19:42:06 - /usr/bin/make -B buildkernel KERNCONF=LINT
>>> Kernel build for LINT started on Fri Jul 25 19:42:06 UTC 2008
>>> stage 1: configuring the kernel
>>> stage 2.1: cleaning up the object tree
>>> stage 2.2: rebuilding the object tree
>>> stage 2.3: build tools
>>> stage 3.1: making dependencies
>>> stage 3.2: building everything
[...]
/src/sys/kern/kern_cpuset.c:925: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:925: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:928: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:939: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:948: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:950: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:953: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:956: error: dereferencing pointer to incomplete type
*** Error code 1

Stop in /obj/src/sys/LINT.
*** Error code 1

Stop in /src.
*** Error code 1

Stop in /src.
TB --- 2008-07-25 19:52:10 - WARNING: /usr/bin/make returned exit code 1
TB --- 2008-07-25 19:52:10 - ERROR: failed to build lint kernel
TB --- 2008-07-25 19:52:10 - tinderbox aborted
TB --- 3718.28 user 390.68 system 4529.15 real

http://tinderbox.des.no/tinderbox-releng_7-RELENG_7-i386-i386.full

------------------------------

Message: 2
Date: Fri, 25 Jul 2008 13:54:30 -0700
From: Doug Barton <dougb@FreeBSD.org>
Subject: Re: FreeBSD 7.1 and BIND exploit
To: Brett Glass <brett@lariat.net>
Cc: freebsd-stable@freebsd.org
Message-ID: <488A3D86.8030808@FreeBSD.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Brett Glass wrote:
| At 02:24 PM 7/21/2008, Kevin Oberman wrote:
|
|> Don't forget that ANY server that caches data, including an end
|> system running a caching only server is vulnerable.
|
| Actually, there is an exception to this. A "forward only"
| cache/resolver is only as vulnerable as its forwarder(s). This is a
| workaround for the vulnerability for folks who have systems that
| they cannot easily upgrade: point at a trusted forwarder that's
| patched.

This is true only so long as you have ZERO untrusted users on the
network with the name server doing the forwarding. Given the
incredibly huge number of windows boxes that have been trojaned, your
threshold for measuring untrusted users needs to be really really low.

The reason a forwarder is still vulnerable is that the attack has to
do with response forgery. It would actually be _easier_ to poison a
forwarder since all of the queries are going to/from known IP addresses.

My point once again being, patch sooner rather than later, especially
given that there are now exploits in the wild AND reports of actual
systems being attacked.

Doug

- --

~ This .signature sanitized for your protection

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)

iEYEAREDAAYFAkiKPYYACgkQyIakK9Wy8Psp1gCgmFLRqVI7NEGMXUBPr4Cyd0BM
wfEAnAtfIlndk9FfpVQGjClxHWAw3HHt
=enmE
-----END PGP SIGNATURE-----

------------------------------

Message: 3
Date: Fri, 25 Jul 2008 17:05:39 -0400 (EDT)
From: FreeBSD Tinderbox <tinderbox@freebsd.org>
Subject: [releng_7 tinderbox] failure on i386/pc98
To: FreeBSD Tinderbox <tinderbox@freebsd.org>, <stable@freebsd.org>,
<i386@freebsd.org>
Message-ID: <20080725210539.5F5491B5078@freebsd-stable.sentex.ca>

TB --- 2008-07-25 19:52:10 - tinderbox 2.3 running on freebsd-stable.sentex.ca
TB --- 2008-07-25 19:52:10 - starting RELENG_7 tinderbox run for i386/pc98
TB --- 2008-07-25 19:52:10 - cleaning the object tree
TB --- 2008-07-25 19:52:33 - cvsupping the source tree
TB --- 2008-07-25 19:52:33 - /usr/bin/csup -r 3 -g -L 1 -h localhost -s /tinderbox/RELENG_7/i386/pc98/supfile
TB --- 2008-07-25 19:52:42 - building world (CFLAGS=-O2 -pipe)
TB --- 2008-07-25 19:52:42 - cd /src
TB --- 2008-07-25 19:52:42 - /usr/bin/make -B buildworld
>>> World build started on Fri Jul 25 19:52:43 UTC 2008
>>> Rebuilding the temporary build tree
>>> stage 1.1: legacy release compatibility shims
>>> stage 1.2: bootstrap tools
>>> stage 2.1: cleaning up the object tree
>>> stage 2.2: rebuilding the object tree
>>> stage 2.3: build tools
>>> stage 3: cross tools
>>> stage 4.1: building includes
>>> stage 4.2: building libraries
>>> stage 4.3: make dependencies
>>> stage 4.4: building everything
>>> World build completed on Fri Jul 25 20:57:32 UTC 2008
TB --- 2008-07-25 20:57:32 - generating LINT kernel config
TB --- 2008-07-25 20:57:32 - cd /src/sys/pc98/conf
TB --- 2008-07-25 20:57:32 - /usr/bin/make -B LINT
TB --- 2008-07-25 20:57:33 - building LINT kernel (COPTFLAGS=-O2 -pipe)
TB --- 2008-07-25 20:57:33 - cd /src
TB --- 2008-07-25 20:57:33 - /usr/bin/make -B buildkernel KERNCONF=LINT
>>> Kernel build for LINT started on Fri Jul 25 20:57:33 UTC 2008
>>> stage 1: configuring the kernel
>>> stage 2.1: cleaning up the object tree
>>> stage 2.2: rebuilding the object tree
>>> stage 2.3: build tools
>>> stage 3.1: making dependencies
>>> stage 3.2: building everything
[...]
/src/sys/kern/kern_cpuset.c:925: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:925: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:928: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:939: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:948: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:950: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:953: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:956: error: dereferencing pointer to incomplete type
*** Error code 1

Stop in /obj/pc98/src/sys/LINT.
*** Error code 1

Stop in /src.
*** Error code 1

Stop in /src.
TB --- 2008-07-25 21:05:39 - WARNING: /usr/bin/make returned exit code 1
TB --- 2008-07-25 21:05:39 - ERROR: failed to build lint kernel
TB --- 2008-07-25 21:05:39 - tinderbox aborted
TB --- 3591.30 user 387.79 system 4408.59 real

http://tinderbox.des.no/tinderbox-releng_7-RELENG_7-i386-pc98.full

------------------------------

Message: 4
Date: Fri, 25 Jul 2008 17:38:04 -0400 (EDT)
From: FreeBSD Tinderbox <tinderbox@freebsd.org>
Subject: [releng_7 tinderbox] failure on ia64/ia64
To: FreeBSD Tinderbox <tinderbox@freebsd.org>, <stable@freebsd.org>,
<ia64@freebsd.org>
Message-ID: <20080725213804.D4CE91B5078@freebsd-stable.sentex.ca>

TB --- 2008-07-25 19:59:12 - tinderbox 2.3 running on freebsd-stable.sentex.ca
TB --- 2008-07-25 19:59:12 - starting RELENG_7 tinderbox run for ia64/ia64
TB --- 2008-07-25 19:59:12 - cleaning the object tree
TB --- 2008-07-25 19:59:28 - cvsupping the source tree
TB --- 2008-07-25 19:59:28 - /usr/bin/csup -r 3 -g -L 1 -h localhost -s /tinderbox/RELENG_7/ia64/ia64/supfile
TB --- 2008-07-25 19:59:35 - building world (CFLAGS=-O2 -pipe)
TB --- 2008-07-25 19:59:35 - cd /src
TB --- 2008-07-25 19:59:35 - /usr/bin/make -B buildworld
>>> World build started on Fri Jul 25 19:59:36 UTC 2008
>>> Rebuilding the temporary build tree
>>> stage 1.1: legacy release compatibility shims
>>> stage 1.2: bootstrap tools
>>> stage 2.1: cleaning up the object tree
>>> stage 2.2: rebuilding the object tree
>>> stage 2.3: build tools
>>> stage 3: cross tools
>>> stage 4.1: building includes
>>> stage 4.2: building libraries
>>> stage 4.3: make dependencies
>>> stage 4.4: building everything
>>> World build completed on Fri Jul 25 21:27:20 UTC 2008
TB --- 2008-07-25 21:27:20 - generating LINT kernel config
TB --- 2008-07-25 21:27:20 - cd /src/sys/ia64/conf
TB --- 2008-07-25 21:27:20 - /usr/bin/make -B LINT
TB --- 2008-07-25 21:27:20 - building LINT kernel (COPTFLAGS=-O2 -pipe)
TB --- 2008-07-25 21:27:20 - cd /src
TB --- 2008-07-25 21:27:20 - /usr/bin/make -B buildkernel KERNCONF=LINT
>>> Kernel build for LINT started on Fri Jul 25 21:27:20 UTC 2008
>>> stage 1: configuring the kernel
>>> stage 2.1: cleaning up the object tree
>>> stage 2.2: rebuilding the object tree
>>> stage 2.3: build tools
>>> stage 3.1: making dependencies
>>> stage 3.2: building everything
[...]
/src/sys/kern/kern_cpuset.c:925: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:925: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:928: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:939: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:948: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:950: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:953: error: dereferencing pointer to incomplete type
/src/sys/kern/kern_cpuset.c:956: error: dereferencing pointer to incomplete type
*** Error code 1

Stop in /obj/ia64/src/sys/LINT.
*** Error code 1

Stop in /src.
*** Error code 1

Stop in /src.
TB --- 2008-07-25 21:38:04 - WARNING: /usr/bin/make returned exit code 1
TB --- 2008-07-25 21:38:04 - ERROR: failed to build lint kernel
TB --- 2008-07-25 21:38:04 - tinderbox aborted
TB --- 5009.88 user 392.62 system 5932.12 real

http://tinderbox.des.no/tinderbox-releng_7-RELENG_7-ia64-ia64.full

------------------------------

_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"

End of freebsd-stable Digest, Vol 262, Issue 9
**********************************************