lp:quagga

Branch merges

This import branch has no branches proposed for merge into it.

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

3423. By Timo Teräs on 2020-07-19

nhrpd: add reference to net.ipv4.ip_forward_use_pmtu=1 thread

Add a mailing list reference regard net.ipv4.ip_forward_use_pmtu=1.

3422. By Timo Teräs on 2020-07-19

nhrpd: change ipsec SA count to 32-bit

Under certain misconfigurations, the SA count can be unusually high
and wrap 8-bit counter. That leads to premature free, and crash.
Make the count 32-bit to avoid crash in these rare conditions.

3421. By Quentin Young <email address hidden> on 2019-12-27

nhrpd: offset value not checked for min size

If the extension offset points to a location within the packet header,
we end up with an integer underflow leading to heap buffer read
overflow.

Signed-off-by: Quentin Young <email address hidden>

3420. By Paul Jakma <email address hidden> on 2018-03-04

lib/thread: Address other paths from thread_execute to thread_add_unuse

* lib/thread.c: There are further paths from thread_execute to
  thread_add_unuse, beyond that from bugzilla bug#975.

  Make the paths from thread_execute to thread_add_unuse, inc.
  thread_add_unuse itself, tolerant to the "dummy" threads of
  thread_execute.

  Another option would be to have thread_execute properly obtain a
  thread struct, rather than fake one on its heap.

  (thread_add_unuse) Be tolerant of NULL master threads passed in, that
  /ought/ to be dummy/non-heap threads, and just ignore. Don't assert.
  (thread_call) no point checking for NULL master here anymore.

See https://bugzilla.quagga.net/show_bug.cgi?id=977

With thanks to John Hay, <email address hidden>, for testing and verifying
the fix.

3419. By Paul Jakma <email address hidden> on 2018-02-19

release: Quagga 1.2.4

Brown paper bag release.

3418. By Paul Jakma <email address hidden> on 2018-02-19

lib: Fix assert in thread_add_unuse if thread_execute was used

* thread.c: (thread_call) thread_execute passes in a dummy thread, on its
  stack, with a NULL thread master. Those shouldn't be added to the unuse
  list or thread_add_unuse rightly asserts.

  Fix this very dumb bug.

  See https://bugzilla.quagga.net/show_bug.cgi?id=975

  With thanks to Sergey Popov, <email address hidden>, and Andreas Nilsson,
  <email address hidden>, for help with diagnosis and testing.

3417. By Xiami <email address hidden> on 2018-02-04

lib: Avoid re-definition of IPPROTO_IP with some versions of Linux

* Starting from linux-4.11 [commit
  bcb41c6bced1ee778d23c53a6b4807fb08cf5540], linux/mroute.h includes
  linux/in.h , that makes gcc roar a lot of things like "error:
  redeclaration of enumerator 'IPPROTO_IP'" when compiling quagga-1.2.2

  lib/zebra.h includes sys/capability.h first, then includes
  netinet/in.h . In sys/capability.h, it includes linux/xattr.h, and
  that includes linux/libc-compat.h . Since at that time netinet/in.h is
  not included yet, _NETINET_IN_H is not defined, causing libc-compat.h
  set __UAPI_DEF_IN_IPPROTO to 1. Then, a include of netinet/in.h
  defines IPPROTO_IP. Later a include of linux/mroute.h includes
  linux/in.h. Because __UAPI_DEF_IN_IPPROTO is set to non zero,
  IPPROTO_IP is redeclared.

* lib/zebra.h: Move the privs/capabilities include block to after the
  network block.

3416. By Paul Jakma <email address hidden> on 2018-02-04

release/scripts: Add short subject log location to print out

* The short, by subject log is useful too, include its location in summary

3415. By Paul Jakma <email address hidden> on 2018-02-04

release: Quagga 1.2.3

3414. By Paul Jakma <email address hidden> on 2018-02-04

doc/security: Security announcements for 4 issues

* doc/security/Quagga-2018-0543.txt: attr_endp used for NOTIFY data
* doc/security/Quagga-2018-1114.txt: bgpd double free
* doc/security/Quagga-2018-1550.txt: debug overrun in notify lookup tables
* doc/security/Quagga-2018-1975.txt: BGP capability inf. loop