[chrony-dev] [GIT] chrony/chrony.git branch master updated. 4.1-pre1-8-g8c1e167

[<git@xxxxxxxxxxxxx>]

This is an automated email from git. It was generated because a ref
change was pushed to the "chrony/chrony.git" repository.

The branch, master has been updated
       via  8c1e16711dad83cc4d76b17cf18257b1d0b2d8a3 (commit)
       via  1d03908646ce24682a6dbea99911f837a92c4af3 (commit)
       via  49d718c025c9a1d8675f41992c445a7016fd2812 (commit)
       via  c536b2561bb4b2b15e869e20fcde5c7e5301474f (commit)
       via  b9f5ce83b02e765ad5a65a264e88352528d6b2b3 (commit)
       via  8baab00ae0a8a11874a45acbe8aff7443537867f (commit)
       via  d01cb5af46caedb8a4a6529c8b80eef9976cef8d (commit)
       via  7925ed39b81f394083e939c96d18a652f977d315 (commit)
      from  9d869d87097cdedb007c5a7a9684a790b867d268 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 8c1e16711dad83cc4d76b17cf18257b1d0b2d8a3
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Thu Apr 29 14:45:30 2021 +0200

    test: fix date use in 010-nts system test
    
    Avoid using nonportable -d option of date.

commit 1d03908646ce24682a6dbea99911f837a92c4af3
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Thu Apr 29 13:15:03 2021 +0200

    test: remove logs before chronyd start in system tests

commit 49d718c025c9a1d8675f41992c445a7016fd2812
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Thu Apr 29 13:14:11 2021 +0200

    test: extend configuration in system tests

commit c536b2561bb4b2b15e869e20fcde5c7e5301474f
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Thu Apr 29 13:18:39 2021 +0200

    test: rework seccomp testing
    
    Instead of a single test with enabled seccomp, rerun all other
    non-destructive and destructive tests for each seccomp level.

commit b9f5ce83b02e765ad5a65a264e88352528d6b2b3
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Thu Apr 29 12:35:49 2021 +0200

    sys_linux: allow BINDTODEVICE option in seccomp filter
    
    Fixes: 4ef944b73436 ("socket: add support for binding sockets to device")

commit 8baab00ae0a8a11874a45acbe8aff7443537867f
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Thu Apr 29 09:18:49 2021 +0200

    doc: warn about -F and mailonchange in chronyd man page

commit d01cb5af46caedb8a4a6529c8b80eef9976cef8d
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Tue Apr 27 15:39:59 2021 +0200

    nts: avoid assumption about cookie record
    
    The cookie record is currently assumed to be the longest record that
    needs to be accepted by the client, but that does not have to be always
    the case. Define the processing buffer using the maximum body record
    constant instead and add an assertion to make sure it's not smaller than
    the maximum accepted cookie length.

commit 7925ed39b81f394083e939c96d18a652f977d315
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Tue Apr 27 11:18:04 2021 +0200

    nts: fix handling of long server negotiation record
    
    Recent change in handling of the NTPv4 server negotiation record (commit
    754097944be2) increased the length of the instance name buffer to make
    room for the trailing dot. This allowed a record with body truncated in
    the processing buffer to be accepted and caused an over-read of 1 byte
    in the memcpy() call saving the name to the instance buffer.
    
    Modify the client to accept only records that fit in the processing
    buffer.
    
    Fixes: 754097944be2 ("nts: handle negotiated server as FQDN")

-----------------------------------------------------------------------

Summary of changes:
 doc/chronyd.adoc         |  2 ++
 nts_ke_client.c          | 11 +++++++++--
 sys_linux.c              |  3 +++
 test/system/005-scfilter | 17 -----------------
 test/system/010-nts      |  6 ++----
 test/system/099-scfilter | 24 ++++++++++++++++++++++++
 test/system/199-scfilter | 24 ++++++++++++++++++++++++
 test/system/test.common  |  6 ++++++
 8 files changed, 70 insertions(+), 23 deletions(-)
 delete mode 100755 test/system/005-scfilter
 create mode 100755 test/system/099-scfilter
 create mode 100755 test/system/199-scfilter


hooks/post-receive
-- 
chrony/chrony.git

-- 
To unsubscribe email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "unsubscribe" in the subject.
For help email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "help" in the subject.
Trouble?  Email listmaster@xxxxxxxxxxxxxxxxxxxx.