=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/73.html,v retrieving revision 1.34 retrieving revision 1.35 diff -c -r1.34 -r1.35 *** www/73.html 2023/04/05 09:41:51 1.34 --- www/73.html 2023/04/06 20:15:59 1.35 *************** *** 213,219 ****
  • VMM/VMD improvements
  • Various new userland features:
  • Various new userland features:
  • Improved hardware support and driver bugfixes, including: *************** *** 952,972 ****
  • Used stravis(3) to sanitize redirect URIs from ftp(1) fetch before printing.
  • Prevent an unwind(8) crash when a TCP query is larger than the length field indicated. -
  • Preserve the original order of nameservers as configured via resolv.conf(5) in resolvd(8). -
  • Restrict the characters allowed in the hostname argument of getaddrinfo(3) to the set [A-z0-9-_.]. Additionally two consecutive dots ('.') are not allowed nor can the string start with - or '.'. This removes characters like '$', '`', '\n' or '*' that can traverse the DNS without problems, but have special meaning, for example a shell. !
  • Added ifconfig(8) -M (mac) to find the mac address on an interface and print it. --- 951,971 ----
  • Used stravis(3) to sanitize redirect URIs from ftp(1) fetch before printing. +
  • Prevent an unwind(8) crash when a TCP query is larger than the length field indicated.
  • Preserve the original order of nameservers as configured via resolv.conf(5) in resolvd(8).
  • Restrict the characters allowed in the hostname argument of getaddrinfo(3) to the set [A-z0-9-_.]. Additionally two consecutive dots ('.') are not allowed nor can the string start with - or '.'. This removes characters like '$', '`', '\n' or '*' that can traverse the DNS without problems, but have special meaning, for example a shell. !
  • Fixed a number of out of bounds reads in DNS response parsing of ! the async DNS resolver in libc.
  • Added ifconfig(8) -M (mac) to find the mac address on an interface and print it.