Compare commits
13 Commits
| Author | SHA256 | Date | |
|---|---|---|---|
| 435f1978ff | |||
| 309a5db238 | |||
| 416225bc4c | |||
| 92baae68a8 | |||
| 710d27dacc | |||
| 86599f3dbb | |||
| eca9130571 | |||
| ce3870a2b3 | |||
| b06267558b | |||
| 7bb537fe2f | |||
| 521937818f | |||
| ddc4f7a10e | |||
| d854ad294d |
@@ -1,585 +0,0 @@
|
||||
From 259d1c453c7dc3b0291f3b4755567a94b778480e Mon Sep 17 00:00:00 2001
|
||||
From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= <tchvatal@suse.com>
|
||||
Date: Sat, 17 Jun 2017 22:06:03 +0200
|
||||
Subject: [PATCH 1/7] Add ether-wake binary
|
||||
|
||||
---
|
||||
Makefile | 6 +-
|
||||
ether-wake.c | 445 +++++++++++++++++++++++++++++++++++++++++++++++++
|
||||
man/en_US/ether-wake.8 | 81 +++++++++
|
||||
3 files changed, 531 insertions(+), 1 deletion(-)
|
||||
create mode 100644 ether-wake.c
|
||||
create mode 100644 man/en_US/ether-wake.8
|
||||
|
||||
diff --git a/Makefile b/Makefile
|
||||
index bf67bc6..cb171a0 100644
|
||||
--- a/Makefile
|
||||
+++ b/Makefile
|
||||
@@ -33,7 +33,7 @@ SBINDIR ?= /sbin
|
||||
NET_LIB_PATH = lib
|
||||
NET_LIB_NAME = net-tools
|
||||
|
||||
-PROGS := ifconfig netstat route nameif
|
||||
+PROGS := ifconfig netstat route nameif ether-wake
|
||||
|
||||
-include config.make
|
||||
ifeq ($(HAVE_ARP_TOOLS),1)
|
||||
@@ -205,6 +205,9 @@ ipmaddr: $(NET_LIB) ipmaddr.o
|
||||
mii-tool: $(NET_LIB) mii-tool.o
|
||||
$(CC) $(CFLAGS) $(LDFLAGS) -o $@ mii-tool.o $(NLIB) $(LDLIBS)
|
||||
|
||||
+ether-wake: $(NET_LIB) ether-wake.o
|
||||
+ $(CC) $(CFLAGS) $(LDFLAGS) -o ether-wake ether-wake.o $(NLIB) $(LDLIBS)
|
||||
+
|
||||
installbin:
|
||||
@echo
|
||||
@echo "######################################################"
|
||||
@@ -217,6 +220,7 @@ installbin:
|
||||
install -m 0755 nameif ${BASEDIR}${SBINDIR}
|
||||
install -m 0755 netstat ${BASEDIR}${BINDIR}
|
||||
install -m 0755 route ${BASEDIR}${BINDIR}
|
||||
+ install -m 0755 ether-wake ${BASEDIR}${SBINDIR}
|
||||
ifeq ($(HAVE_ARP_TOOLS),1)
|
||||
install -m 0755 arp ${BASEDIR}${SBINDIR}
|
||||
install -m 0755 rarp ${BASEDIR}${SBINDIR}
|
||||
diff --git a/ether-wake.c b/ether-wake.c
|
||||
new file mode 100644
|
||||
index 0000000..cfceb44
|
||||
--- /dev/null
|
||||
+++ b/ether-wake.c
|
||||
@@ -0,0 +1,445 @@
|
||||
+/* ether-wake.c: Send a magic packet to wake up sleeping machines. */
|
||||
+
|
||||
+static char version_msg[] =
|
||||
+"ether-wake.c: v1.09 11/12/2003 Donald Becker, http://www.scyld.com/";
|
||||
+static char brief_usage_msg[] =
|
||||
+"usage: ether-wake -i <ifname> [-p aa:bb:cc:dd[:ee:ff]] 00:11:22:33:44:55\n"
|
||||
+" Use '-u' to see the complete set of options.\n";
|
||||
+static char usage_msg[] =
|
||||
+"usage: ether-wake -i <ifname> [-p aa:bb:cc:dd[:ee:ff]] 00:11:22:33:44:55\n"
|
||||
+"\n"
|
||||
+" This program generates and transmits a Wake-On-LAN (WOL)\n"
|
||||
+" \"Magic Packet\", used for restarting machines that have been\n"
|
||||
+" soft-powered-down (ACPI D3-warm state).\n"
|
||||
+" It currently generates the standard AMD Magic Packet format, with\n"
|
||||
+" an optional password appended.\n"
|
||||
+"\n"
|
||||
+" The single required parameter is the Ethernet MAC (station) address\n"
|
||||
+" of the machine to wake or a host ID with known NSS 'ethers' entry.\n"
|
||||
+" The MAC address may be found with the 'arp' program while the target\n"
|
||||
+" machine is awake.\n"
|
||||
+"\n"
|
||||
+" Options:\n"
|
||||
+" -b Send wake-up packet to the broadcast address.\n"
|
||||
+" -D Increase the debug level.\n"
|
||||
+" -i ifname Use interface ifname instead of sending a wake packet to all interfaces.\n"
|
||||
+" -p <pw> Append the four or six byte password PW to the packet.\n"
|
||||
+" A password is only required for a few adapter types.\n"
|
||||
+" The password may be specified in ethernet hex format\n"
|
||||
+" or dotted decimal (Internet address)\n"
|
||||
+" -p 00:22:44:66:88:aa\n"
|
||||
+" -p 192.168.1.1\n";
|
||||
+
|
||||
+/*
|
||||
+ This program generates and transmits a Wake-On-LAN (WOL) "Magic Packet",
|
||||
+ used for restarting machines that have been soft-powered-down
|
||||
+ (ACPI D3-warm state). It currently generates the standard AMD Magic Packet
|
||||
+ format, with an optional password appended.
|
||||
+
|
||||
+ This software may be used and distributed according to the terms
|
||||
+ of the GNU Public License, incorporated herein by reference.
|
||||
+ Contact the author for use under other terms.
|
||||
+
|
||||
+ This source file was originally part of the network tricks package, and
|
||||
+ is now distributed to support the Scyld Beowulf system.
|
||||
+ Copyright 1999-2003 Donald Becker and Scyld Computing Corporation.
|
||||
+
|
||||
+ The author may be reached as becker@scyld, or C/O
|
||||
+ Scyld Computing Corporation
|
||||
+ 914 Bay Ridge Road, Suite 220
|
||||
+ Annapolis MD 21403
|
||||
+
|
||||
+ Notes:
|
||||
+ On some systems dropping root capability allows the process to be
|
||||
+ dumped, traced or debugged.
|
||||
+ If someone traces this program, they get control of a raw socket.
|
||||
+ Linux handles this safely, but beware when porting this program.
|
||||
+
|
||||
+ An alternative to needing 'root' is using a UDP broadcast socket, however
|
||||
+ doing so only works with adapters configured for unicast+broadcast Rx
|
||||
+ filter. That configuration consumes more power.
|
||||
+*/
|
||||
+
|
||||
+#include <unistd.h>
|
||||
+#include <stdlib.h>
|
||||
+#include <stdio.h>
|
||||
+#include <errno.h>
|
||||
+#include <ctype.h>
|
||||
+#include <string.h>
|
||||
+
|
||||
+#if 0 /* Only exists on some versions. */
|
||||
+#include <ioctls.h>
|
||||
+#endif
|
||||
+
|
||||
+#include <sys/socket.h>
|
||||
+
|
||||
+#include <sys/types.h>
|
||||
+#include <sys/ioctl.h>
|
||||
+#include <linux/if.h>
|
||||
+
|
||||
+#include <features.h>
|
||||
+#if __GLIBC__ >= 2 && __GLIBC_MINOR >= 1
|
||||
+#include <netpacket/packet.h>
|
||||
+#include <net/ethernet.h>
|
||||
+#else
|
||||
+#include <asm/types.h>
|
||||
+#include <linux/if_packet.h>
|
||||
+#include <linux/if_ether.h>
|
||||
+#endif
|
||||
+#include <netdb.h>
|
||||
+#include <netinet/ether.h>
|
||||
+
|
||||
+#include "interface.h"
|
||||
+#include "sockets.h"
|
||||
+
|
||||
+/* Grrr, no consistency between include versions.
|
||||
+ Enable this if setsockopt() isn't declared with your library. */
|
||||
+#if 0
|
||||
+extern int setsockopt __P ((int __fd, int __level, int __optname,
|
||||
+ __ptr_t __optval, int __optlen));
|
||||
+#else /* New, correct head files. */
|
||||
+#include <sys/socket.h>
|
||||
+#endif
|
||||
+
|
||||
+u_char outpack[1000];
|
||||
+int outpack_sz = 0;
|
||||
+int debug = 0;
|
||||
+u_char wol_passwd[6];
|
||||
+int wol_passwd_sz = 0;
|
||||
+
|
||||
+static int opt_no_src_addr = 0, opt_broadcast = 0;
|
||||
+
|
||||
+static int get_dest_addr(const char *arg, struct ether_addr *eaddr);
|
||||
+static int get_fill(unsigned char *pkt, struct ether_addr *eaddr);
|
||||
+static int get_wol_pw(const char *optarg);
|
||||
+
|
||||
+typedef struct {
|
||||
+ int s;
|
||||
+ int verbose;
|
||||
+ int pktsize;
|
||||
+} if_info;
|
||||
+
|
||||
+static int send_wol_packet(char *ifname, int s, int verbose, int pktsize);
|
||||
+
|
||||
+static int do_wake(struct interface *ife, void *cookie) {
|
||||
+ if_info *info = (if_info *)cookie;
|
||||
+ send_wol_packet(ife->name, info->s, info->verbose, info->pktsize);
|
||||
+ return 0;
|
||||
+}
|
||||
+
|
||||
+int main(int argc, char *argv[])
|
||||
+{
|
||||
+ char *ifname = NULL;
|
||||
+ int s; /* Raw socket */
|
||||
+ int errflag = 0, verbose = 0, do_version = 0;
|
||||
+ int perm_failure = 0;
|
||||
+ int c, pktsize;
|
||||
+ struct ether_addr eaddr;
|
||||
+ if_info info;
|
||||
+
|
||||
+ while ((c = getopt(argc, argv, "bDi:p:uvV")) != -1)
|
||||
+ switch (c) {
|
||||
+ case 'b': opt_broadcast++; break;
|
||||
+ case 'D': debug++; break;
|
||||
+ case 'i': ifname = optarg; break;
|
||||
+ case 'p': get_wol_pw(optarg); break;
|
||||
+ case 'u': printf("%s",usage_msg); return 0;
|
||||
+ case 'v': verbose++; break;
|
||||
+ case 'V': do_version++; break;
|
||||
+ case '?':
|
||||
+ errflag++;
|
||||
+ }
|
||||
+ if (verbose || do_version)
|
||||
+ printf("%s\n", version_msg);
|
||||
+ if (errflag) {
|
||||
+ fprintf(stderr,"%s", brief_usage_msg);
|
||||
+ return 3;
|
||||
+ }
|
||||
+
|
||||
+ if (ifname == NULL) {
|
||||
+ fprintf(stderr, "Specify -i <interface>.\n");
|
||||
+ return 3;
|
||||
+ }
|
||||
+
|
||||
+ if (optind == argc) {
|
||||
+ fprintf(stderr, "Specify the Ethernet address as 00:11:22:33:44:55.\n");
|
||||
+ return 3;
|
||||
+ }
|
||||
+
|
||||
+ /* Note: PF_INET, SOCK_DGRAM, IPPROTO_UDP would allow SIOCGIFHWADDR to
|
||||
+ work as non-root, but we need SOCK_PACKET to specify the Ethernet
|
||||
+ destination address. */
|
||||
+#if defined(PF_PACKET)
|
||||
+ s = socket(PF_PACKET, SOCK_RAW, 0);
|
||||
+#else
|
||||
+ s = socket(AF_INET, SOCK_PACKET, SOCK_PACKET);
|
||||
+#endif
|
||||
+ if (s < 0) {
|
||||
+ if (errno == EPERM)
|
||||
+ fprintf(stderr, "ether-wake: This program must be run as root.\n");
|
||||
+ else
|
||||
+ perror("ether-wake: socket");
|
||||
+ perm_failure++;
|
||||
+ }
|
||||
+ /* Don't revert if debugging allows a normal user to get the raw socket. */
|
||||
+ setuid(getuid());
|
||||
+
|
||||
+ /* We look up the station address before reporting failure so that
|
||||
+ errors may be reported even when run as a normal user.
|
||||
+ */
|
||||
+ if (get_dest_addr(argv[optind], &eaddr) != 0)
|
||||
+ return 3;
|
||||
+ if (perm_failure && ! debug)
|
||||
+ return 2;
|
||||
+
|
||||
+ pktsize = get_fill(outpack, &eaddr);
|
||||
+
|
||||
+ if (ifname == NULL) {
|
||||
+ info.s = s;
|
||||
+ info.verbose = verbose;
|
||||
+ info.pktsize = pktsize;
|
||||
+
|
||||
+ /* Create a channel to the NET kernel. */
|
||||
+ if ((sockets_open(0)) < 0) {
|
||||
+ perror("socket");
|
||||
+ exit(1);
|
||||
+ }
|
||||
+
|
||||
+ return for_all_interfaces(do_wake, &info);
|
||||
+ }
|
||||
+
|
||||
+ return send_wol_packet(ifname, s, verbose, pktsize);
|
||||
+}
|
||||
+
|
||||
+/* Send a Wake-On-LAN (WOL) "Magic Packet" to Interface IFNAME using
|
||||
+ Socket S with a packet size PKTSIZE. VERBOSE implies
|
||||
+ verbosity. */
|
||||
+
|
||||
+static int send_wol_packet(char *ifname, int s, int verbose, int pktsize)
|
||||
+{
|
||||
+ int i;
|
||||
+ int one = 1; /* True, for socket options. */
|
||||
+#if defined(PF_PACKET)
|
||||
+ struct sockaddr_ll whereto;
|
||||
+#else
|
||||
+ struct sockaddr whereto; /* who to wake up */
|
||||
+#endif
|
||||
+
|
||||
+ /* Fill in the source address, if possible.
|
||||
+ The code to retrieve the local station address is Linux specific. */
|
||||
+ if (! opt_no_src_addr) {
|
||||
+ struct ifreq if_hwaddr;
|
||||
+ const char *hwaddr = if_hwaddr.ifr_hwaddr.sa_data;
|
||||
+
|
||||
+ strncpy(if_hwaddr.ifr_name, ifname, IFNAMSIZ);
|
||||
+ if_hwaddr.ifr_name[IFNAMSIZ-1] = '\0';
|
||||
+ if (ioctl(s, SIOCGIFHWADDR, &if_hwaddr) < 0) {
|
||||
+ fprintf(stderr, "SIOCGIFHWADDR on %s failed: %s\n", ifname,
|
||||
+ strerror(errno));
|
||||
+ /* Magic packets still work if our source address is bogus, but
|
||||
+ we fail just to be anal. */
|
||||
+ return 1;
|
||||
+ }
|
||||
+ memcpy(outpack+6, if_hwaddr.ifr_hwaddr.sa_data, 6);
|
||||
+
|
||||
+ if (verbose) {
|
||||
+ printf("The hardware address (SIOCGIFHWADDR) of %s is type %d "
|
||||
+ "%2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x.\n", ifname,
|
||||
+ if_hwaddr.ifr_hwaddr.sa_family, hwaddr[0], hwaddr[1],
|
||||
+ hwaddr[2], hwaddr[3], hwaddr[4], hwaddr[5]);
|
||||
+ }
|
||||
+ }
|
||||
+
|
||||
+ if (wol_passwd_sz > 0) {
|
||||
+ memcpy(outpack+pktsize, wol_passwd, wol_passwd_sz);
|
||||
+ pktsize += wol_passwd_sz;
|
||||
+ }
|
||||
+
|
||||
+ if (verbose > 1) {
|
||||
+ printf("The final packet is: ");
|
||||
+ for (i = 0; i < pktsize; i++)
|
||||
+ printf(" %2.2x", outpack[i]);
|
||||
+ printf(".\n");
|
||||
+ }
|
||||
+
|
||||
+ /* This is necessary for broadcasts to work */
|
||||
+ if (setsockopt(s, SOL_SOCKET, SO_BROADCAST, (char *)&one, sizeof(one)) < 0)
|
||||
+ perror("setsockopt: SO_BROADCAST");
|
||||
+
|
||||
+#if defined(PF_PACKET)
|
||||
+ {
|
||||
+ struct ifreq ifr;
|
||||
+ strncpy(ifr.ifr_name, ifname, IFNAMSIZ);
|
||||
+ ifr.ifr_name[IFNAMSIZ-1] = '\0';
|
||||
+ if (ioctl(s, SIOCGIFINDEX, &ifr) == -1) {
|
||||
+ fprintf(stderr, "SIOCGIFINDEX on %s failed: %s\n", ifname,
|
||||
+ strerror(errno));
|
||||
+ return 1;
|
||||
+ }
|
||||
+ memset(&whereto, 0, sizeof(whereto));
|
||||
+ whereto.sll_family = AF_PACKET;
|
||||
+ whereto.sll_ifindex = ifr.ifr_ifindex;
|
||||
+ /* The manual page incorrectly claims the address must be filled.
|
||||
+ We do so because the code may change to match the docs. */
|
||||
+ whereto.sll_halen = ETH_ALEN;
|
||||
+ memcpy(whereto.sll_addr, outpack, ETH_ALEN);
|
||||
+
|
||||
+ }
|
||||
+#else
|
||||
+ whereto.sa_family = 0;
|
||||
+ strcpy(whereto.sa_data, ifname);
|
||||
+#endif
|
||||
+
|
||||
+ char senderrmsg[IFNAMSIZ+16] = "'";
|
||||
+ strcat(senderrmsg, ifname);
|
||||
+ strcat(senderrmsg, "', sendto");
|
||||
+ if ((i = sendto(s, outpack, pktsize, 0, (struct sockaddr *)&whereto,
|
||||
+ sizeof(whereto))) < 0)
|
||||
+ perror(senderrmsg);
|
||||
+ else if (debug)
|
||||
+ printf("'%s', Sendto worked ! %d.\n", ifname, i);
|
||||
+
|
||||
+#ifdef USE_SEND
|
||||
+ if (bind(s, (struct sockaddr *)&whereto, sizeof(whereto)) < 0)
|
||||
+ perror("bind");
|
||||
+ else if (send(s, outpack, 100, 0) < 0)
|
||||
+ perror("send");
|
||||
+#endif
|
||||
+#ifdef USE_SENDMSG
|
||||
+ {
|
||||
+ struct msghdr msghdr = { 0,};
|
||||
+ struct iovec iovector[1];
|
||||
+ msghdr.msg_name = &whereto;
|
||||
+ msghdr.msg_namelen = sizeof(whereto);
|
||||
+ msghdr.msg_iov = iovector;
|
||||
+ msghdr.msg_iovlen = 1;
|
||||
+ iovector[0].iov_base = outpack;
|
||||
+ iovector[0].iov_len = pktsize;
|
||||
+ if ((i = sendmsg(s, &msghdr, 0)) < 0)
|
||||
+ perror("sendmsg");
|
||||
+ else if (debug)
|
||||
+ printf("sendmsg worked, %d (%d).\n", i, errno);
|
||||
+ }
|
||||
+#endif
|
||||
+
|
||||
+ return 0;
|
||||
+}
|
||||
+
|
||||
+/* Convert the host ID string to a MAC address.
|
||||
+ The string may be a
|
||||
+ Host name
|
||||
+ IP address string
|
||||
+ MAC address string
|
||||
+*/
|
||||
+
|
||||
+static int get_dest_addr(const char *hostid, struct ether_addr *eaddr)
|
||||
+{
|
||||
+ struct ether_addr *eap;
|
||||
+
|
||||
+ eap = ether_aton(hostid);
|
||||
+ if (eap) {
|
||||
+ *eaddr = *eap;
|
||||
+ if (debug)
|
||||
+ fprintf(stderr, "The target station address is %s.\n",
|
||||
+ ether_ntoa(eaddr));
|
||||
+ } else if (ether_hostton(hostid, eaddr) == 0) {
|
||||
+ if (debug)
|
||||
+ fprintf(stderr, "Station address for hostname %s is %s.\n",
|
||||
+ hostid, ether_ntoa(eaddr));
|
||||
+ } else {
|
||||
+ (void)fprintf(stderr,
|
||||
+ "ether-wake: The Magic Packet host address must be "
|
||||
+ "specified as\n"
|
||||
+ " - a station address, 00:11:22:33:44:55, or\n"
|
||||
+ " - a hostname with a known 'ethers' entry.\n");
|
||||
+ return -1;
|
||||
+ }
|
||||
+ return 0;
|
||||
+}
|
||||
+
|
||||
+
|
||||
+static int get_fill(unsigned char *pkt, struct ether_addr *eaddr)
|
||||
+{
|
||||
+ int offset, i;
|
||||
+ unsigned char *station_addr = eaddr->ether_addr_octet;
|
||||
+
|
||||
+ if (opt_broadcast)
|
||||
+ memset(pkt+0, 0xff, 6);
|
||||
+ else
|
||||
+ memcpy(pkt, station_addr, 6);
|
||||
+ memcpy(pkt+6, station_addr, 6);
|
||||
+ pkt[12] = 0x08; /* Or 0x0806 for ARP, 0x8035 for RARP */
|
||||
+ pkt[13] = 0x42;
|
||||
+ offset = 14;
|
||||
+
|
||||
+ memset(pkt+offset, 0xff, 6);
|
||||
+ offset += 6;
|
||||
+
|
||||
+ for (i = 0; i < 16; i++) {
|
||||
+ memcpy(pkt+offset, station_addr, 6);
|
||||
+ offset += 6;
|
||||
+ }
|
||||
+ if (debug) {
|
||||
+ fprintf(stderr, "Packet is ");
|
||||
+ for (i = 0; i < offset; i++)
|
||||
+ fprintf(stderr, " %2.2x", pkt[i]);
|
||||
+ fprintf(stderr, ".\n");
|
||||
+ }
|
||||
+ return offset;
|
||||
+}
|
||||
+
|
||||
+static int get_wol_pw(const char *optarg)
|
||||
+{
|
||||
+ int passwd[6];
|
||||
+ int byte_cnt;
|
||||
+ int i;
|
||||
+
|
||||
+ byte_cnt = sscanf(optarg, "%2x:%2x:%2x:%2x:%2x:%2x",
|
||||
+ &passwd[0], &passwd[1], &passwd[2],
|
||||
+ &passwd[3], &passwd[4], &passwd[5]);
|
||||
+ if (byte_cnt < 4)
|
||||
+ byte_cnt = sscanf(optarg, "%d.%d.%d.%d",
|
||||
+ &passwd[0], &passwd[1], &passwd[2], &passwd[3]);
|
||||
+ if (byte_cnt < 4) {
|
||||
+ fprintf(stderr, "Unable to read the Wake-On-LAN password.\n");
|
||||
+ return 0;
|
||||
+ }
|
||||
+ printf(" The Magic packet password is %2.2x %2.2x %2.2x %2.2x (%d).\n",
|
||||
+ passwd[0], passwd[1], passwd[2], passwd[3], byte_cnt);
|
||||
+ for (i = 0; i < byte_cnt; i++)
|
||||
+ wol_passwd[i] = passwd[i];
|
||||
+ return wol_passwd_sz = byte_cnt;
|
||||
+}
|
||||
+
|
||||
+#if 0
|
||||
+{
|
||||
+ to = (struct sockaddr_in *)&whereto;
|
||||
+ to->sin_family = AF_INET;
|
||||
+ if (inet_aton(target, &to->sin_addr)) {
|
||||
+ hostname = target;
|
||||
+ }
|
||||
+ memset (&sa, 0, sizeof sa);
|
||||
+ sa.sa_family = AF_INET;
|
||||
+ strncpy (sa.sa_data, interface, sizeof sa.sa_data);
|
||||
+ sendto (sock, buf, bufix + len, 0, &sa, sizeof sa);
|
||||
+ strncpy (sa.sa_data, interface, sizeof sa.sa_data);
|
||||
+#if 1
|
||||
+ sendto (sock, buf, bufix + len, 0, &sa, sizeof sa);
|
||||
+#else
|
||||
+ bind (sock, &sa, sizeof sa);
|
||||
+ connect();
|
||||
+ send (sock, buf, bufix + len, 0);
|
||||
+#endif
|
||||
+}
|
||||
+#endif
|
||||
+
|
||||
+
|
||||
+/*
|
||||
+ * Local variables:
|
||||
+ * compile-command: "gcc -O -Wall -o ether-wake ether-wake.c"
|
||||
+ * c-indent-level: 4
|
||||
+ * c-basic-offset: 4
|
||||
+ * c-indent-level: 4
|
||||
+ * tab-width: 4
|
||||
+ * End:
|
||||
+ */
|
||||
diff --git a/man/en_US/ether-wake.8 b/man/en_US/ether-wake.8
|
||||
new file mode 100644
|
||||
index 0000000..d0569c2
|
||||
--- /dev/null
|
||||
+++ b/man/en_US/ether-wake.8
|
||||
@@ -0,0 +1,81 @@
|
||||
+.\" Hey, EMACS: -*- nroff -*-
|
||||
+.\" First parameter, NAME, should be all caps
|
||||
+.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
|
||||
+.\" other parameters are allowed: see man(7), man(1)
|
||||
+.TH ETHER-WAKE 8 "March 31, 2003" "Scyld"
|
||||
+.\" Please adjust this date whenever revising the manpage.
|
||||
+.\"
|
||||
+.\" Some roff macros, for reference:
|
||||
+.\" .nh disable hyphenation
|
||||
+.\" .hy enable hyphenation
|
||||
+.\" .ad l left justify
|
||||
+.\" .ad b justify to both left and right margins
|
||||
+.\" .nf disable filling
|
||||
+.\" .fi enable filling
|
||||
+.\" .br insert line break
|
||||
+.\" .sp <n> insert n+1 empty lines
|
||||
+.\" for manpage-specific macros, see man(7)
|
||||
+.SH NAME
|
||||
+ether-wake \- A tool to send a Wake-On-LAN "Magic Packet"
|
||||
+.SH SYNOPSIS
|
||||
+.B ether-wake
|
||||
+.RI [ options ] " Host-ID"
|
||||
+.SH DESCRIPTION
|
||||
+This manual page documents the usage of the
|
||||
+.B ether-wake
|
||||
+command.
|
||||
+.PP
|
||||
+.\" TeX users may be more comfortable with the \fB<whatever>\fP and
|
||||
+.\" \fI<whatever>\fP escape sequences to invoke bold face and italics,
|
||||
+.\" respectively.
|
||||
+\fBether-wake\fP is a program that generates and transmits a Wake-On-LAN
|
||||
+(WOL) "Magic Packet", used for restarting machines that have been
|
||||
+soft-powered-down (ACPI D3-warm state). It generates the standard
|
||||
+AMD Magic Packet format, optionally with a password included. The
|
||||
+single required parameter is a station (MAC) address or a host ID that can
|
||||
+be translated to a MAC address by an
|
||||
+.BR ethers (5)
|
||||
+database specified in
|
||||
+.BR nsswitch.conf (5)
|
||||
+.
|
||||
+.SH OPTIONS
|
||||
+\fBether-wake\fP needs a single dash (´-´) in front of options.
|
||||
+A summary of options is included below.
|
||||
+.TP
|
||||
+.B \-b
|
||||
+Send the wake-up packet to the broadcast address.
|
||||
+.TP
|
||||
+.B \-D
|
||||
+Increase the Debug Level.
|
||||
+.TP
|
||||
+.B \-i ifname
|
||||
+Use interface ifname instead of sending a wake packet to all interfaces.
|
||||
+.TP
|
||||
+.B \-p passwd
|
||||
+Append a four or six byte password to the packet. Only a few adapters
|
||||
+need or support this. A six byte password may be specified in Ethernet hex
|
||||
+format (00:22:44:66:88:aa) or four byte dotted decimal (192.168.1.1) format.
|
||||
+A four byte password must use the dotted decimal format.
|
||||
+
|
||||
+.TP
|
||||
+.B \-V
|
||||
+Show the program version information.
|
||||
+
|
||||
+.SH EXIT STATUS
|
||||
+This program returns 0 on success.
|
||||
+A permission failures (e.g. run as a non-root user) results in an exit
|
||||
+status of 2. Unrecognized or invalid parameters result in an exit
|
||||
+status of 3. Failure to retrieve network interface information or send
|
||||
+a packet will result in an exit status of 1.
|
||||
+
|
||||
+.SH SEE ALSO
|
||||
+.BR arp (8).
|
||||
+.br
|
||||
+.SH SECURITY
|
||||
+On some non-Linux systems dropping root capability allows the process to be
|
||||
+dumped, traced or debugged.
|
||||
+If someone traces this program, they get control of a raw socket.
|
||||
+Linux handles this safely, but beware when porting this program.
|
||||
+.SH AUTHOR
|
||||
+The ether-wake program was written by Donald Becker at Scyld Computing
|
||||
+Corporation for use with the Scyld(\*(Tm) Beowulf System.
|
||||
--
|
||||
2.13.1
|
||||
|
||||
@@ -1,33 +0,0 @@
|
||||
From 5b612570220e66ea3197b88b5f9d81e064f9e873 Mon Sep 17 00:00:00 2001
|
||||
From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= <tchvatal@suse.com>
|
||||
Date: Sat, 17 Jun 2017 22:15:06 +0200
|
||||
Subject: [PATCH 2/7] Do not warn about interface socket not binded
|
||||
|
||||
---
|
||||
lib/interface.c | 10 ++++------
|
||||
1 file changed, 4 insertions(+), 6 deletions(-)
|
||||
|
||||
diff --git a/lib/interface.c b/lib/interface.c
|
||||
index e8ab2b8..94e554b 100644
|
||||
--- a/lib/interface.c
|
||||
+++ b/lib/interface.c
|
||||
@@ -173,12 +173,10 @@ static int if_readconf(void)
|
||||
(as of 2.1.128) */
|
||||
skfd = get_socket_for_af(AF_INET);
|
||||
if (skfd < 0) {
|
||||
- fprintf(stderr, _("warning: no inet socket available: %s\n"),
|
||||
- strerror(errno));
|
||||
- /* Try to soldier on with whatever socket we can get hold of. */
|
||||
- skfd = sockets_open(0);
|
||||
- if (skfd < 0)
|
||||
- return -1;
|
||||
+ /* Try to soldier on with whatever socket we can get hold of. */
|
||||
+ skfd = sockets_open(0);
|
||||
+ if (skfd < 0)
|
||||
+ return -1;
|
||||
}
|
||||
|
||||
ifc.ifc_buf = NULL;
|
||||
--
|
||||
2.13.1
|
||||
|
||||
@@ -1,28 +0,0 @@
|
||||
From 70a4077962be2dc3ea7dc20a3687e9f1c7458ade Mon Sep 17 00:00:00 2001
|
||||
From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= <tchvatal@suse.com>
|
||||
Date: Sat, 17 Jun 2017 22:26:14 +0200
|
||||
Subject: [PATCH 4/7] By default do not fopen anything in netrom_gr
|
||||
|
||||
This is SUSE specific patch basically disabling this functionality.
|
||||
---
|
||||
lib/netrom_gr.c | 4 ++--
|
||||
1 file changed, 2 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/lib/netrom_gr.c b/lib/netrom_gr.c
|
||||
index ec82fe8..eecf148 100644
|
||||
--- a/lib/netrom_gr.c
|
||||
+++ b/lib/netrom_gr.c
|
||||
@@ -32,8 +32,8 @@
|
||||
|
||||
int NETROM_rprint(int options)
|
||||
{
|
||||
- FILE *f1 = fopen(_PATH_PROCNET_NR_NODES, "r");
|
||||
- FILE *f2 = fopen(_PATH_PROCNET_NR_NEIGH, "r");
|
||||
+ FILE *f1 = NULL;
|
||||
+ FILE *f2 = NULL;
|
||||
char buffer[256];
|
||||
int qual, n, w;
|
||||
/*int ext = options & FLAG_EXT;
|
||||
--
|
||||
2.13.1
|
||||
|
||||
@@ -1,85 +0,0 @@
|
||||
From 3e27ced0c24be18dc443f7eb1421c7c3c1755cfe Mon Sep 17 00:00:00 2001
|
||||
From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= <tchvatal@suse.com>
|
||||
Date: Sun, 18 Jun 2017 08:54:17 +0200
|
||||
Subject: [PATCH 6/7] Allow interface stacking
|
||||
|
||||
---
|
||||
lib/interface.c | 25 +++++++++++++++----------
|
||||
1 file changed, 15 insertions(+), 10 deletions(-)
|
||||
|
||||
diff --git a/lib/interface.c b/lib/interface.c
|
||||
index 7e326a0..42d86fb 100644
|
||||
--- a/lib/interface.c
|
||||
+++ b/lib/interface.c
|
||||
@@ -208,10 +208,11 @@ out:
|
||||
return err;
|
||||
}
|
||||
|
||||
-static const char *get_name(char *name, const char *p)
|
||||
+static const char *get_name(char **namep, const char *p)
|
||||
{
|
||||
while (isspace(*p))
|
||||
p++;
|
||||
+ char *name = *namep = p;
|
||||
while (*p) {
|
||||
if (isspace(*p))
|
||||
break;
|
||||
@@ -314,9 +315,10 @@ static int get_dev_fields(const char *bp, struct interface *ife)
|
||||
static int if_readlist_proc(const char *target)
|
||||
{
|
||||
FILE *fh;
|
||||
- char buf[512];
|
||||
struct interface *ife;
|
||||
int err;
|
||||
+ char *line = NULL;
|
||||
+ size_t linelen = 0;
|
||||
|
||||
fh = fopen(_PATH_PROCNET_DEV, "r");
|
||||
if (!fh) {
|
||||
@@ -324,10 +326,11 @@ static int if_readlist_proc(const char *target)
|
||||
_PATH_PROCNET_DEV, strerror(errno));
|
||||
return -2;
|
||||
}
|
||||
- if (fgets(buf, sizeof buf, fh))
|
||||
- /* eat line */;
|
||||
- if (fgets(buf, sizeof buf, fh))
|
||||
- /* eat line */;
|
||||
+ if (getline(&line, &linelen, fh) == -1 /* eat line */
|
||||
+ || getline(&line, &linelen, fh) == -1) {
|
||||
+ err = -1;
|
||||
+ goto out;
|
||||
+ }
|
||||
|
||||
#if 0 /* pretty, but can't cope with missing fields */
|
||||
fmt = proc_gen_fmt(_PATH_PROCNET_DEV, 1, fh,
|
||||
@@ -352,14 +355,14 @@ static int if_readlist_proc(const char *target)
|
||||
if (!fmt)
|
||||
return -1;
|
||||
#else
|
||||
- procnetdev_vsn = procnetdev_version(buf);
|
||||
+ procnetdev_vsn = procnetdev_version(line);
|
||||
#endif
|
||||
|
||||
err = 0;
|
||||
- while (fgets(buf, sizeof buf, fh)) {
|
||||
+ while (getline(&line, &linelen, fh) != -1) {
|
||||
const char *s;
|
||||
- char name[IFNAMSIZ];
|
||||
- s = get_name(name, buf);
|
||||
+ char *name;
|
||||
+ s = get_name(&name, line);
|
||||
ife = if_cache_add(name);
|
||||
get_dev_fields(s, ife);
|
||||
ife->statistics_valid = 1;
|
||||
@@ -374,6 +377,8 @@ static int if_readlist_proc(const char *target)
|
||||
#if 0
|
||||
free(fmt);
|
||||
#endif
|
||||
+ out:
|
||||
+ free(line);
|
||||
fclose(fh);
|
||||
return err;
|
||||
}
|
||||
--
|
||||
2.13.1
|
||||
|
||||
@@ -9,23 +9,19 @@ Coordinated as GHSA-pfwf-h6m3-63wf
|
||||
lib/interface.c | 63 ++++++++++++++++++++++++++++++-------------------
|
||||
1 file changed, 39 insertions(+), 24 deletions(-)
|
||||
|
||||
Index: net-tools-2.10/lib/interface.c
|
||||
===================================================================
|
||||
--- net-tools-2.10.orig/lib/interface.c
|
||||
+++ net-tools-2.10/lib/interface.c
|
||||
@@ -209,33 +209,46 @@ out:
|
||||
diff --git a/lib/interface.c b/lib/interface.c
|
||||
index 71d4163..a054f12 100644
|
||||
--- a/lib/interface.c
|
||||
+++ b/lib/interface.c
|
||||
@@ -211,32 +211,47 @@ out:
|
||||
}
|
||||
|
||||
static const char *get_name(char **namep, const char *p)
|
||||
static const char *get_name(char *name, const char *p)
|
||||
+/* Safe version — guarantees at most IFNAMSIZ‑1 bytes are copied
|
||||
+ and the destination buffer is always NUL‑terminated. */
|
||||
{
|
||||
- while (isspace(*p))
|
||||
- p++;
|
||||
+ /* Skip leading white‑space. */
|
||||
+ while (isspace((unsigned char)*p))
|
||||
+ ++p;
|
||||
char *name = *namep = p;
|
||||
- while (*p) {
|
||||
- if (isspace(*p))
|
||||
- break;
|
||||
@@ -49,6 +45,11 @@ Index: net-tools-2.10/lib/interface.c
|
||||
- *name++ = *p++;
|
||||
+ char *dst = name; /* current write ptr */
|
||||
+ const char *end = name + IFNAMSIZ - 1; /* last byte we may write */
|
||||
+
|
||||
+ /* Skip leading white‑space. */
|
||||
+ while (isspace((unsigned char)*p))
|
||||
+ ++p;
|
||||
+
|
||||
+ /* Copy until white‑space, end of string, or buffer full. */
|
||||
+ while (*p && !isspace((unsigned char)*p) && dst < end) {
|
||||
+ if (*p == ':') { /* possible alias veth0:123: */
|
||||
@@ -84,3 +85,6 @@ Index: net-tools-2.10/lib/interface.c
|
||||
return p;
|
||||
}
|
||||
|
||||
--
|
||||
2.48.1
|
||||
|
||||
|
||||
79
net-tools-ax25+netrom-overflow-1.patch
Normal file
79
net-tools-ax25+netrom-overflow-1.patch
Normal file
@@ -0,0 +1,79 @@
|
||||
From c084d1fea5de0f6dcaed4a59b38a4140bd2e9f13 Mon Sep 17 00:00:00 2001
|
||||
From: Bernd Eckenfels <net-tools@lina.inka.de>
|
||||
Date: Sat, 16 Aug 2025 22:29:13 +0200
|
||||
Subject: [PATCH 1/2] Prevent overflow in ax25 and netrom
|
||||
|
||||
Fixes sourceforge #48
|
||||
|
||||
Thanks to Bernard Pidoux.
|
||||
---
|
||||
lib/ax25.c | 12 +++++++++---
|
||||
lib/netrom.c | 10 ++++++++--
|
||||
2 files changed, 17 insertions(+), 5 deletions(-)
|
||||
|
||||
diff --git a/lib/ax25.c b/lib/ax25.c
|
||||
index 80a82c4..ab40e00 100644
|
||||
--- a/lib/ax25.c
|
||||
+++ b/lib/ax25.c
|
||||
@@ -47,9 +47,10 @@ static char AX25_errmsg[128];
|
||||
|
||||
extern struct aftype ax25_aftype;
|
||||
|
||||
+// align with NETROM_orint
|
||||
static const char *AX25_print(const char *ptr)
|
||||
{
|
||||
- static char buff[8];
|
||||
+ static char buff[10]; // N0CALL-15
|
||||
int i;
|
||||
|
||||
for (i = 0; i < 6; i++) {
|
||||
@@ -58,9 +59,14 @@ static const char *AX25_print(const char *ptr)
|
||||
buff[i] = '\0';
|
||||
}
|
||||
buff[6] = '\0';
|
||||
+
|
||||
+ // add SSID
|
||||
i = ((ptr[6] & 0x1E) >> 1);
|
||||
- if (i != 0)
|
||||
- sprintf(&buff[strlen(buff)], "-%d", i);
|
||||
+ if (i != 0) {
|
||||
+ int l = strlen(buff);
|
||||
+ sprintf(&buff[l], sizeof(buff)-l, "-%d", i);
|
||||
+ }
|
||||
+
|
||||
return (buff);
|
||||
}
|
||||
|
||||
diff --git a/lib/netrom.c b/lib/netrom.c
|
||||
index 6bcde2d..309e7cb 100644
|
||||
--- a/lib/netrom.c
|
||||
+++ b/lib/netrom.c
|
||||
@@ -54,7 +54,7 @@ extern struct aftype netrom_aftype;
|
||||
|
||||
static const char *NETROM_print(const char *ptr)
|
||||
{
|
||||
- static char buff[8];
|
||||
+ static char buff[10]; // N0CALL-15\0
|
||||
int i;
|
||||
|
||||
for (i = 0; i < 6; i++) {
|
||||
@@ -63,9 +63,15 @@ static const char *NETROM_print(const char *ptr)
|
||||
buff[i] = '\0';
|
||||
}
|
||||
buff[6] = '\0';
|
||||
+
|
||||
+ // add SSID
|
||||
i = ((ptr[6] & 0x1E) >> 1);
|
||||
if (i != 0)
|
||||
- sprintf(&buff[strlen(buff)], "-%d", i);
|
||||
+ {
|
||||
+ int l = strlen(buff); // 0-6
|
||||
+ snprintf(&buff[l],sizeof(buff)-l, "-%d", i);
|
||||
+ }
|
||||
+
|
||||
return (buff);
|
||||
}
|
||||
|
||||
--
|
||||
2.48.1
|
||||
|
||||
27
net-tools-ax25+netrom-overflow-2.patch
Normal file
27
net-tools-ax25+netrom-overflow-2.patch
Normal file
@@ -0,0 +1,27 @@
|
||||
From 139f5d85e4e93bd75bc1072349bce19bf56c058a Mon Sep 17 00:00:00 2001
|
||||
From: Adam Sampson <ats@offog.org>
|
||||
Date: Sun, 17 Aug 2025 02:33:45 +0100
|
||||
Subject: [PATCH 2/2] Fix sprintf that should be snprintf
|
||||
|
||||
c084d1fea5de0f6dcaed4a59b38a4140bd2e9f13 ("Prevent overflow in ax25 and
|
||||
netrom") added the length argument, but didn't change the function name.
|
||||
---
|
||||
lib/ax25.c | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/lib/ax25.c b/lib/ax25.c
|
||||
index ab40e00..aee4214 100644
|
||||
--- a/lib/ax25.c
|
||||
+++ b/lib/ax25.c
|
||||
@@ -64,7 +64,7 @@ static const char *AX25_print(const char *ptr)
|
||||
i = ((ptr[6] & 0x1E) >> 1);
|
||||
if (i != 0) {
|
||||
int l = strlen(buff);
|
||||
- sprintf(&buff[l], sizeof(buff)-l, "-%d", i);
|
||||
+ snprintf(&buff[l], sizeof(buff)-l, "-%d", i);
|
||||
}
|
||||
|
||||
return (buff);
|
||||
--
|
||||
2.48.1
|
||||
|
||||
26
net-tools-ifconfig-avoid-unsafe-memcpy.patch
Normal file
26
net-tools-ifconfig-avoid-unsafe-memcpy.patch
Normal file
@@ -0,0 +1,26 @@
|
||||
From 28097633198312316ca99ec648fbe5856b1b58f7 Mon Sep 17 00:00:00 2001
|
||||
From: Bernd <bernd@eckenfels.net>
|
||||
Date: Sat, 17 May 2025 22:33:34 +0200
|
||||
Subject: [PATCH] Avoid memcpy (reverted from Last)
|
||||
|
||||
It cant overflow at this place, but if we have a Safe function we might as well keep using it.
|
||||
---
|
||||
ifconfig.c | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/ifconfig.c b/ifconfig.c
|
||||
index 7688a79..696abb9 100644
|
||||
--- a/ifconfig.c
|
||||
+++ b/ifconfig.c
|
||||
@@ -336,7 +336,7 @@ int main(int argc, char **argv)
|
||||
fprintf(stderr, "%s(%lu): interface name length must be < %i\n", *spp, len, IFNAMSIZ);
|
||||
return EXIT_FAILURE;
|
||||
}
|
||||
- memcpy(ifr.ifr_name, *spp++, len+1);
|
||||
+ safe_strncpy(ifr.ifr_name, *spp++, IFNAMSIZ);
|
||||
if (*spp == (char *) NULL) {
|
||||
int err = if_print(ifr.ifr_name);
|
||||
(void) close(skfd);
|
||||
--
|
||||
2.48.1
|
||||
|
||||
30
net-tools-ifconfig-long-name-warning.patch
Normal file
30
net-tools-ifconfig-long-name-warning.patch
Normal file
@@ -0,0 +1,30 @@
|
||||
From f7a6ecf2782a96ef38477bb22c3c17713179b05f Mon Sep 17 00:00:00 2001
|
||||
From: Stanislav Brabec <sbrabec@suse.com>
|
||||
Date: Mon, 25 Aug 2025 22:51:19 +0200
|
||||
Subject: [PATCH] Change interface name length overflow to warning.
|
||||
|
||||
Interface name is limited to IFNAMSIZ. To keep compatibility with the
|
||||
old behavior before 61f4890, change the error to warning.
|
||||
---
|
||||
ifconfig.c | 5 +----
|
||||
1 file changed, 1 insertion(+), 4 deletions(-)
|
||||
|
||||
diff --git a/ifconfig.c b/ifconfig.c
|
||||
index 696abb9..d42a694 100644
|
||||
--- a/ifconfig.c
|
||||
+++ b/ifconfig.c
|
||||
@@ -332,10 +332,7 @@ int main(int argc, char **argv)
|
||||
spp = argv;
|
||||
size_t len = strlen(*spp);
|
||||
if (len >= IFNAMSIZ)
|
||||
- {
|
||||
- fprintf(stderr, "%s(%lu): interface name length must be < %i\n", *spp, len, IFNAMSIZ);
|
||||
- return EXIT_FAILURE;
|
||||
- }
|
||||
+ fprintf(stderr, _("Warning: truncating interface name %s length %lu to %u\n"), *spp, len, IFNAMSIZ-1);
|
||||
safe_strncpy(ifr.ifr_name, *spp++, IFNAMSIZ);
|
||||
if (*spp == (char *) NULL) {
|
||||
int err = if_print(ifr.ifr_name);
|
||||
--
|
||||
2.48.1
|
||||
|
||||
56
net-tools-parse_hex-stack-overflow.patch
Normal file
56
net-tools-parse_hex-stack-overflow.patch
Normal file
@@ -0,0 +1,56 @@
|
||||
From a7926399a04ee8e629a02a2aeb6de1952d42d559 Mon Sep 17 00:00:00 2001
|
||||
From: Bernd Eckenfels <net-tools@lina.inka.de>
|
||||
Date: Sat, 17 May 2025 21:11:07 +0200
|
||||
Subject: [PATCH] ipmaddr.c: Stack-based buffer Overflow in parse_hex()
|
||||
|
||||
Coordinated as GHSA-h667-qrp8-gj58.
|
||||
---
|
||||
ipmaddr.c | 10 +++++-----
|
||||
1 file changed, 5 insertions(+), 5 deletions(-)
|
||||
|
||||
diff --git a/ipmaddr.c b/ipmaddr.c
|
||||
index 64b7564..623fadd 100644
|
||||
--- a/ipmaddr.c
|
||||
+++ b/ipmaddr.c
|
||||
@@ -91,17 +91,17 @@ static int parse_lla(char *str, char *addr)
|
||||
return len;
|
||||
}
|
||||
|
||||
-static int parse_hex(char *str, unsigned char *addr)
|
||||
+static int parse_hex(char *str, unsigned char *dst, size_t dstlen)
|
||||
{
|
||||
int len=0;
|
||||
|
||||
- while (*str) {
|
||||
+ while (len < dstlen && *str) {
|
||||
int tmp;
|
||||
if (str[1] == 0)
|
||||
return -1;
|
||||
if (sscanf(str, "%02x", &tmp) != 1)
|
||||
return -1;
|
||||
- addr[len] = tmp;
|
||||
+ dst[len] = tmp;
|
||||
len++;
|
||||
str += 2;
|
||||
}
|
||||
@@ -152,7 +152,7 @@ void read_dev_mcast(struct ma_info **result_p)
|
||||
|
||||
m.addr.family = AF_PACKET;
|
||||
|
||||
- len = parse_hex(hexa, (unsigned char*)&m.addr.data);
|
||||
+ len = parse_hex(hexa, (unsigned char*)&m.addr.data, sizeof(m.addr.data));
|
||||
if (len >= 0) {
|
||||
struct ma_info *ma = xmalloc(sizeof(m));
|
||||
memcpy(ma, &m, sizeof(m));
|
||||
@@ -222,7 +222,7 @@ void read_igmp6(struct ma_info **result_p)
|
||||
|
||||
m.addr.family = AF_INET6;
|
||||
|
||||
- len = parse_hex(hexa, (unsigned char*)&m.addr.data);
|
||||
+ len = parse_hex(hexa, (unsigned char*)&m.addr.data, sizeof(m.addr.data));
|
||||
if (len >= 0) {
|
||||
struct ma_info *ma = xmalloc(sizeof(m));
|
||||
memcpy(ma, &m, sizeof(m));
|
||||
--
|
||||
2.48.1
|
||||
|
||||
75
net-tools-proc_gen_fmt-buffer-overflow.patch
Normal file
75
net-tools-proc_gen_fmt-buffer-overflow.patch
Normal file
@@ -0,0 +1,75 @@
|
||||
Backported to exclude f84cd22a921c25c56a6c194d4825dbd9ceea0e5f
|
||||
From 84041080a5d4794045b098ced90e0309bcbcff44 Mon Sep 17 00:00:00 2001
|
||||
From: Zephkeks <zephyrofficialdiscord@gmail.com>
|
||||
Date: Sat, 17 May 2025 22:11:37 +0200
|
||||
Subject: [PATCH] proc.c: Stack-based Buffer Overflow in net-tools
|
||||
(proc_gen_fmt)
|
||||
|
||||
Coordinated as GHSA-w7jq-cmw2-cq59.
|
||||
---
|
||||
lib/proc.c | 37 ++++++++++++++++++++++++++++++++++---
|
||||
1 file changed, 34 insertions(+), 3 deletions(-)
|
||||
|
||||
diff --git a/lib/proc.c b/lib/proc.c
|
||||
index d51d09f..02aae49 100644
|
||||
--- a/lib/proc.c
|
||||
+++ b/lib/proc.c
|
||||
@@ -17,6 +17,8 @@ char *proc_gen_fmt(const char *name, int more, FILE * fh,...)
|
||||
char buf[512], format[512] = "";
|
||||
char *title, *head, *hdr;
|
||||
va_list ap;
|
||||
+ size_t format_len = 0;
|
||||
+ size_t format_size = sizeof(format);
|
||||
|
||||
if (!fgets(buf, (sizeof buf) - 1, fh))
|
||||
return NULL;
|
||||
@@ -33,14 +35,43 @@ char *proc_gen_fmt(const char *name, int more, FILE * fh,...)
|
||||
*hdr++ = 0;
|
||||
|
||||
if (!strcmp(title, head)) {
|
||||
- strcat(format, va_arg(ap, char *));
|
||||
+ const char *arg = va_arg(ap, char *);
|
||||
+ size_t arg_len = strlen(arg);
|
||||
+
|
||||
+ /* Check if we have enough space for format specifier + space */
|
||||
+ if (format_len + arg_len + 1 >= format_size) {
|
||||
+ fprintf(stderr, "warning: format buffer overflow in %s\n", name);
|
||||
+ va_end(ap);
|
||||
+ return NULL;
|
||||
+ }
|
||||
+
|
||||
+ strcpy(format + format_len, arg);
|
||||
+ format_len += arg_len;
|
||||
+
|
||||
title = va_arg(ap, char *);
|
||||
if (!title || !head)
|
||||
break;
|
||||
} else {
|
||||
- strcat(format, "%*s"); /* XXX */
|
||||
+ /* Check if we have enough space for "%*s" */
|
||||
+ if (format_len + 3 >= format_size) {
|
||||
+ fprintf(stderr, "warning: format buffer overflow in %s\n", name);
|
||||
+ va_end(ap);
|
||||
+ return NULL;
|
||||
+ }
|
||||
+
|
||||
+ strcpy(format + format_len, "%*s");
|
||||
+ format_len += 3;
|
||||
}
|
||||
- strcat(format, " ");
|
||||
+
|
||||
+ /* Check if we have space for the trailing space */
|
||||
+ if (format_len + 1 >= format_size) {
|
||||
+ fprintf(stderr, "warning: format buffer overflow in %s\n", name);
|
||||
+ va_end(ap);
|
||||
+ return NULL;
|
||||
+ }
|
||||
+
|
||||
+ format[format_len++] = ' ';
|
||||
+ format[format_len] = '\0';
|
||||
}
|
||||
va_end(ap);
|
||||
|
||||
--
|
||||
2.48.1
|
||||
|
||||
@@ -1,3 +1,58 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 8 15:38:28 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
|
||||
- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
|
||||
worked around a net-tools-1.60 specific problem, that does not
|
||||
happen in net-tools-2.10. It is more harmful than useful, as it
|
||||
can hide real problems. (bsc#430864#c15,
|
||||
https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Sep 6 15:35:13 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
|
||||
- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
|
||||
was net-tools-1.60 specific leak fix and breaks netrom in
|
||||
net-tools-2.10 (bnc#544339#c2).
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 4 11:58:27 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
|
||||
- Set net-tools conflict version properly.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 1 21:00:13 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
|
||||
- Drop ether-wake binary in favor of wol. It was never part of the
|
||||
upstream net-tools, and we have ether-wake in busybox. Bump rpm
|
||||
version to 2.10.0.0.1 to make a seamless update possible
|
||||
(boo#1249034, drop 0001-Add-ether-wake-binary.patch).
|
||||
- Provide support for net-tools-dummy (bsc#1242048).
|
||||
- Remove net_tool Provides/Obsoletes for SuSE Linux 7 and SLES 7.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Aug 28 18:46:35 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
|
||||
- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
|
||||
provided a fix for the stack corruption (bsc#142461), later
|
||||
reported as CVE-2025-46836 (bsc#1243581) and fixed by the
|
||||
upstream in a different way. Revert interfering
|
||||
net-tools-CVE-2025-46836.patch back to the upstream version.
|
||||
- Fix stack buffer overflow in parse_hex (bsc#1248687,
|
||||
GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
|
||||
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
|
||||
GHSA-w7jq-cmw2-cq59,
|
||||
net-tools-proc_gen_fmt-buffer-overflow.patch).
|
||||
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
|
||||
net-tools-ifconfig-avoid-unsafe-memcpy.patch).
|
||||
- Prevent overflow in ax25 and netrom (bsc#1248687,
|
||||
net-tools-ax25+netrom-overflow-1.patch,
|
||||
net-tools-ax25+netrom-overflow-2.patch).
|
||||
- Keep possibility to enter long interface names, even if they are
|
||||
not accepted by the kernel, because it was always possible up to
|
||||
CVE-2025-46836 fix. But issue a warning about an interface name
|
||||
concatenation (bsc#1248410,
|
||||
net-tools-ifconfig-long-name-warning.patch).
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Aug 11 12:42:17 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
|
||||
@@ -14,7 +69,7 @@ Mon Aug 4 06:27:05 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
Thu Jul 10 03:44:15 UTC 2025 - Stanislav Brabec <sbrabec@suse.com>
|
||||
|
||||
- Perform bound checks when parsing interface labels in
|
||||
/proc/net/dev (bsc#1243581, CVE-2025-46836,
|
||||
/proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
|
||||
net-tools-CVE-2025-46836.patch,
|
||||
net-tools-CVE-2025-46836-regression.patch).
|
||||
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
#
|
||||
# spec file for package net-tools
|
||||
#
|
||||
# Copyright (c) 2025 SUSE LLC
|
||||
# Copyright (c) 2025 SUSE LLC and contributors
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
@@ -17,21 +17,20 @@
|
||||
|
||||
|
||||
Name: net-tools
|
||||
Version: 2.10
|
||||
# The real version is 2.10. But we dropped downstream ether-wake, so bump version to detect this change.
|
||||
# When an upstream update will appear, return back lines marked with #E#
|
||||
%define _version 2.10
|
||||
Version: 2.10+1
|
||||
Release: 0
|
||||
Summary: Important Programs for Networking
|
||||
License: GPL-2.0-or-later
|
||||
Group: Productivity/Networking/Other
|
||||
URL: https://sourceforge.net/projects/net-tools/
|
||||
Source: https://sourceforge.net/projects/net-tools/files/net-tools-%{version}.tar.xz
|
||||
#E#Source: https://sourceforge.net/projects/net-tools/files/net-tools-%%{version}.tar.xz
|
||||
Source: https://sourceforge.net/projects/net-tools/files/net-tools-%{_version}.tar.xz
|
||||
# PATCH-FEATURE-SUSE: set configure values to our liking as we do not need
|
||||
# everything here
|
||||
Patch0: net-tools-configure.patch
|
||||
# Git formatted patches described in each patch
|
||||
Patch1: 0001-Add-ether-wake-binary.patch
|
||||
Patch2: 0002-Do-not-warn-about-interface-socket-not-binded.patch
|
||||
Patch4: 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch
|
||||
Patch6: 0006-Allow-interface-stacking.patch
|
||||
Patch7: 0007-Introduce-T-notrim-option-in-netstat.patch
|
||||
# PATCH-FIX-SECURITY net-tools-CVE-2025-46836.patch bsc1243581 sbrabec@suse.com -- Perform bound checks when parsing interface labels in /proc/net/dev.
|
||||
Patch8: net-tools-CVE-2025-46836.patch
|
||||
@@ -39,33 +38,50 @@ Patch8: net-tools-CVE-2025-46836.patch
|
||||
Patch9: net-tools-CVE-2025-46836-regression.patch
|
||||
# PATCH-FIX-UPSTREAM net-tools-CVE-2025-46836-error-reporting.patch bsc1243581 sbrabec@suse.com -- Provide more readable error for interface name size checking.
|
||||
Patch10: net-tools-CVE-2025-46836-error-reporting.patch
|
||||
# PATCH-FIX-SECURITY net-tools-parse_hex-stack-overflow.patch bsc1248410 sbrabec@suse.com -- Fix stack buffer overflow in parse_hex.
|
||||
Patch11: net-tools-parse_hex-stack-overflow.patch
|
||||
# PATCH-FIX-SECURITY net-tools-proc_gen_fmt-buffer-overflow.patch bsc1248410 sbrabec@suse.com -- Fix stack-based buffer overflow in proc_gen_fmt.
|
||||
Patch12: net-tools-proc_gen_fmt-buffer-overflow.patch
|
||||
# PATCH-FIX-SECURITY net-tools-ifconfig-avoid-unsafe-memcpy.patch bsc1248410 sbrabec@suse.com -- Avoid unsafe memcpy in ifconfig.
|
||||
Patch13: net-tools-ifconfig-avoid-unsafe-memcpy.patch
|
||||
# PATCH-FIX-SECURITY net-tools-ax25+netrom-overflow-1.patch bsc1248410 sbrabec@suse.com -- Prevent overflow in ax25 and netrom.
|
||||
Patch14: net-tools-ax25+netrom-overflow-1.patch
|
||||
# PATCH-FIX-SECURITY net-tools-ax25+netrom-overflow-2.patch bsc1248410 sbrabec@suse.com -- Prevent overflow in ax25 and netrom.
|
||||
Patch15: net-tools-ax25+netrom-overflow-2.patch
|
||||
# PATCH-FIX-UPSTREAM net-tools-ifconfig-long-name-warning.patch bsc1248410 sbrabec@suse.com -- Allow to enter long interface names again.
|
||||
Patch16: net-tools-ifconfig-long-name-warning.patch
|
||||
BuildRequires: help2man
|
||||
Recommends: traceroute >= 2.0.0
|
||||
Provides: net_tool = %{version}
|
||||
Obsoletes: net_tool < %{version}
|
||||
|
||||
%description
|
||||
This package contains programs for network administration and maintenance.
|
||||
Most of the utilities formerly contained in this package (netstat, arp,
|
||||
ifconfig, rarp, route) are obsoleted by the tools from iproute2 package (ip, ss)
|
||||
and have been moved to net-tools-deprecated.
|
||||
ifconfig, rarp, route, ether-wake) are obsoleted by the tools from iproute2
|
||||
package (ip, ss) and have been moved to net-tools-deprecated.
|
||||
|
||||
%package deprecated
|
||||
Summary: Deprecated Networking Utilities
|
||||
Group: Productivity/Networking/Other
|
||||
Obsoletes: %{name}-dummy
|
||||
|
||||
%description deprecated
|
||||
This package contains the deprecated network utilities arp, ifconfig, netstat and route,
|
||||
which have been replaced by tools from the iproute2 package:
|
||||
This package contains the deprecated network utilities arp, ifconfig,
|
||||
netstat and route, which have been replaced by tools from the iproute2
|
||||
package:
|
||||
* arp -> ip [-r] neigh
|
||||
* ifconfig -> ip a
|
||||
* ether-wake -> wol
|
||||
or use busybox-ether-wake
|
||||
* ifconfig -> ip addr
|
||||
* ipmaddr -> ip maddress
|
||||
* iptunnel -> ip tunnel
|
||||
* netstat -> ss [-r]
|
||||
* route -> ip r
|
||||
* route -> ip route
|
||||
|
||||
%lang_package
|
||||
|
||||
%prep
|
||||
%setup -q
|
||||
#E#%%setup -q
|
||||
%setup -q -n %{name}-%{_version}
|
||||
%autopatch -p1
|
||||
|
||||
%build
|
||||
@@ -75,7 +91,6 @@ make %{?_smp_mflags}
|
||||
|
||||
%install
|
||||
%make_install BINDIR=%{_bindir} SBINDIR=%{_sbindir}
|
||||
|
||||
# remove rarp as it is not usefull with our kernel
|
||||
rm -fv %{buildroot}%{_prefix}/*bin/rarp
|
||||
rm -fv %{buildroot}/%{_mandir}/man*/rarp.*
|
||||
@@ -104,12 +119,10 @@ done
|
||||
%files
|
||||
%license COPYING
|
||||
%doc README ABOUT-NLS
|
||||
%{_sbindir}/ether-wake
|
||||
%{_sbindir}/nameif
|
||||
%{_sbindir}/plipconfig
|
||||
%{_sbindir}/slattach
|
||||
%if 0%{?suse_version} < 1550
|
||||
/sbin/ether-wake
|
||||
/sbin/nameif
|
||||
/sbin/plipconfig
|
||||
/sbin/slattach
|
||||
@@ -121,7 +134,6 @@ done
|
||||
%{_mandir}/fr/man8/plipconfig.8%{?ext_man}
|
||||
%{_mandir}/fr/man8/slattach.8%{?ext_man}
|
||||
%{_mandir}/man5/ethers.5%{?ext_man}
|
||||
%{_mandir}/man8/ether-wake.8%{?ext_man}
|
||||
%{_mandir}/man8/nameif.8%{?ext_man}
|
||||
%{_mandir}/man8/plipconfig.8%{?ext_man}
|
||||
%{_mandir}/man8/slattach.8%{?ext_man}
|
||||
|
||||
Reference in New Issue
Block a user