From owner-cvs-usrsbin Sun Oct 6 06:32:55 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id GAA16204 for cvs-usrsbin-outgoing; Sun, 6 Oct 1996 06:32:55 -0700 (PDT) Received: (from jkh@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id GAA16188; Sun, 6 Oct 1996 06:32:46 -0700 (PDT) Date: Sun, 6 Oct 1996 06:32:46 -0700 (PDT) From: "Jordan K. Hubbard" Message-Id: <199610061332.GAA16188@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/ppp passwdauth.c passwdauth.h Makefile command.c ipcp.c ipcp.h pap.c ppp.8 route.c vars.c vars.h Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk jkh 96/10/06 06:32:45 Modified: usr.sbin/ppp Makefile command.c ipcp.c ipcp.h pap.c ppp.8 route.c vars.c vars.h Added: usr.sbin/ppp passwdauth.c passwdauth.h Log: Add support for the Evil Microsoft ppp extentions. Yes, they did it on their own without even attempting to get concensus in the IETF, but there are also lots of Win95/NT boxes out there. CLoses PR#1494 Submitted-By: Peter Childs Revision Changes Path 1.7 +4 -4 src/usr.sbin/ppp/Makefile 1.20 +76 -1 src/usr.sbin/ppp/command.c 1.9 +102 -2 src/usr.sbin/ppp/ipcp.c 1.4 +17 -1 src/usr.sbin/ppp/ipcp.h 1.6 +10 -1 src/usr.sbin/ppp/pap.c 1.18 +65 -7 src/usr.sbin/ppp/ppp.8 1.8 +31 -8 src/usr.sbin/ppp/route.c 1.8 +5 -3 src/usr.sbin/ppp/vars.c 1.7 +4 -2 src/usr.sbin/ppp/vars.h From owner-cvs-usrsbin Sun Oct 6 12:39:20 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id MAA06226 for cvs-usrsbin-outgoing; Sun, 6 Oct 1996 12:39:20 -0700 (PDT) Received: (from jkh@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id MAA06206; Sun, 6 Oct 1996 12:39:10 -0700 (PDT) Date: Sun, 6 Oct 1996 12:39:10 -0700 (PDT) From: "Jordan K. Hubbard" Message-Id: <199610061939.MAA06206@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/ppp vars.c Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk jkh 96/10/06 12:39:09 Modified: usr.sbin/ppp vars.c Log: Add passwdauth to list of vars. Submitted-by: Peter Childs Revision Changes Path 1.9 +3 -3 src/usr.sbin/ppp/vars.c From owner-cvs-usrsbin Sun Oct 6 21:21:26 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id VAA07031 for cvs-usrsbin-outgoing; Sun, 6 Oct 1996 21:21:26 -0700 (PDT) Received: (from jkh@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id VAA07008; Sun, 6 Oct 1996 21:21:14 -0700 (PDT) Date: Sun, 6 Oct 1996 21:21:14 -0700 (PDT) From: "Jordan K. Hubbard" Message-Id: <199610070421.VAA07008@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/ppp main.c pap.c Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk jkh 96/10/06 21:21:13 Modified: usr.sbin/ppp main.c pap.c Log: Properly include prototypes. Submitted-by: "Daniel O'Callaghan" Revision Changes Path 1.21 +2 -1 src/usr.sbin/ppp/main.c 1.7 +5 -1 src/usr.sbin/ppp/pap.c From owner-cvs-usrsbin Mon Oct 7 03:01:33 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id DAA29706 for cvs-usrsbin-outgoing; Mon, 7 Oct 1996 03:01:33 -0700 (PDT) Received: (from sos@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id DAA29670; Mon, 7 Oct 1996 03:01:22 -0700 (PDT) Date: Mon, 7 Oct 1996 03:01:22 -0700 (PDT) From: Soren Schmidt Message-Id: <199610071001.DAA29670@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/ppp command.c Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk sos 96/10/07 03:01:21 Modified: usr.sbin/ppp command.c Log: Add the feature to use MYADDR & HISADDR macroes as arguments to a shell escape. Revision Changes Path 1.21 +12 -2 src/usr.sbin/ppp/command.c From owner-cvs-usrsbin Wed Oct 9 13:35:02 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id NAA00528 for cvs-usrsbin-outgoing; Wed, 9 Oct 1996 13:35:02 -0700 (PDT) Received: (from pst@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id NAA00396; Wed, 9 Oct 1996 13:34:18 -0700 (PDT) Date: Wed, 9 Oct 1996 13:34:18 -0700 (PDT) From: Paul Traina Message-Id: <199610092034.NAA00396@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/sendmail/src Makefile Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk pst 96/10/09 13:34:16 Modified: usr.sbin/sendmail/src Makefile Log: Enable NIS support Revision Changes Path 1.10 +5 -3 src/usr.sbin/sendmail/src/Makefile From owner-cvs-usrsbin Thu Oct 10 04:27:56 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id EAA13008 for cvs-usrsbin-outgoing; Thu, 10 Oct 1996 04:27:56 -0700 (PDT) Received: (from sos@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id EAA12975; Thu, 10 Oct 1996 04:27:39 -0700 (PDT) Date: Thu, 10 Oct 1996 04:27:39 -0700 (PDT) From: Soren Schmidt Message-Id: <199610101127.EAA12975@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/ppp command.c Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk sos 96/10/10 04:27:38 Modified: usr.sbin/ppp command.c Log: Allow shell commands in all modes. Old behavior can be had with define SHELL_ONLY_INTERACTIVELY Revision Changes Path 1.22 +3 -3 src/usr.sbin/ppp/command.c From owner-cvs-usrsbin Fri Oct 11 01:32:14 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id BAA28280 for cvs-usrsbin-outgoing; Fri, 11 Oct 1996 01:32:14 -0700 (PDT) Received: from irz301.inf.tu-dresden.de (irz301.inf.tu-dresden.de [141.76.1.11]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id BAA27851; Fri, 11 Oct 1996 01:26:24 -0700 (PDT) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by irz301.inf.tu-dresden.de (8.6.12/8.6.12-s1) with ESMTP id KAA17742; Fri, 11 Oct 1996 10:26:02 +0200 Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id KAA09607; Fri, 11 Oct 1996 10:26:01 +0200 Received: (from j@localhost) by uriah.heep.sax.de (8.7.5/8.6.9) id JAA04262; Fri, 11 Oct 1996 09:41:23 +0200 (MET DST) From: J Wunsch Message-Id: <199610110741.JAA04262@uriah.heep.sax.de> Subject: Re: cvs commit: src/usr.sbin/ppp command.c To: sos@freefall.freebsd.org (Soren Schmidt) Date: Fri, 11 Oct 1996 09:41:23 +0200 (MET DST) Cc: CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-usrsbin@freefall.freebsd.org Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: <199610101127.EAA12975@freefall.freebsd.org> from Soren Schmidt at "Oct 10, 96 04:27:39 am" X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E X-Mailer: ELM [version 2.4ME+ PL17 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk As Soren Schmidt wrote: > sos 96/10/10 04:27:38 > > Modified: usr.sbin/ppp command.c > Log: > Allow shell commands in all modes. Do you get a root shell now if you run ``ppp -auto'', connect to port 3000, and issue a `shell'? I would consider this a very bad move! -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-) From owner-cvs-usrsbin Fri Oct 11 02:46:57 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id CAA03605 for cvs-usrsbin-outgoing; Fri, 11 Oct 1996 02:46:57 -0700 (PDT) Received: from sovcom.kiae.su (sovcom.kiae.su [193.125.152.1]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id CAA03484; Fri, 11 Oct 1996 02:40:21 -0700 (PDT) Received: by sovcom.kiae.su id AA09666 (5.65.kiae-1 ); Fri, 11 Oct 1996 12:26:24 +0300 Received: by sovcom.KIAE.su (UUMAIL/2.0); Fri, 11 Oct 96 12:26:23 +0300 Received: (from ache@localhost) by nagual.ru (8.7.6/8.7.3) id NAA00448; Fri, 11 Oct 1996 13:17:44 +0400 (MSD) Message-Id: <199610110917.NAA00448@nagual.ru> Subject: Re: cvs commit: src/usr.sbin/ppp command.c In-Reply-To: <199610110741.JAA04262@uriah.heep.sax.de> from "J Wunsch" at "Oct 11, 96 09:41:23 am" To: joerg_wunsch@uriah.heep.sax.de Date: Fri, 11 Oct 1996 13:17:44 +0400 (MSD) Cc: sos@freefall.freebsd.org, CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-usrsbin@freefall.freebsd.org From: "=?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?=" (Andrey A. Chernov) Organization: self X-Class: Fast X-Mailer: ELM [version 2.4ME+ PL28 (25)] Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > As Soren Schmidt wrote: > > sos 96/10/10 04:27:38 > > > > Modified: usr.sbin/ppp command.c > > Log: > > Allow shell commands in all modes. > > Do you get a root shell now if you run ``ppp -auto'', connect to port > 3000, and issue a `shell'? I would consider this a very bad move! > Yes, we just make security hole, it should be fixed. telnet localhost ppp passwd xxx shell cat /etc/passwd works and shouldn't. -- Andrey A. Chernov http://www.nagual.ru/~ache/ From owner-cvs-usrsbin Fri Oct 11 03:08:38 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id DAA04745 for cvs-usrsbin-outgoing; Fri, 11 Oct 1996 03:08:38 -0700 (PDT) Received: from ra.dkuug.dk (ra.dkuug.dk [193.88.44.193]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id DAA04738; Fri, 11 Oct 1996 03:08:24 -0700 (PDT) Received: (from sos@localhost) by ra.dkuug.dk (8.6.12/8.6.12) id LAA15010; Fri, 11 Oct 1996 11:58:46 +0200 Message-Id: <199610110958.LAA15010@ra.dkuug.dk> Subject: Re: cvs commit: src/usr.sbin/ppp command.c To: ache@nagual.ru (=?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?=) Date: Fri, 11 Oct 1996 11:58:46 +0200 (MET DST) Cc: joerg_wunsch@uriah.heep.sax.de, sos@freefall.freebsd.org, CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-usrsbin@freefall.freebsd.org In-Reply-To: <199610110917.NAA00448@nagual.ru> from "=?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?=" at Oct 11, 96 01:17:44 pm From: sos@FreeBSD.org Reply-to: sos@FreeBSD.org X-Mailer: ELM [version 2.4 PL24] Content-Type: text Sender: owner-cvs-usrsbin@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk In reply to =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= who wrote: > > > As Soren Schmidt wrote: > > > sos 96/10/10 04:27:38 > > > > > > Modified: usr.sbin/ppp command.c > > > Log: > > > Allow shell commands in all modes. > > > > Do you get a root shell now if you run ``ppp -auto'', connect to port > > 3000, and issue a `shell'? I would consider this a very bad move! > > > > Yes, we just make security hole, it should be fixed. Oops... I guess it was too late in the night when I did that... Any good suggestions as how to make this work securely ?? Maybe only allowing the program named in the ppp.xxx file, that way security is at the/etc/ppp level. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Soren Schmidt (sos@FreeBSD.org) FreeBSD Core Team So much code to hack -- so little time. From owner-cvs-usrsbin Fri Oct 11 07:12:05 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id HAA17367 for cvs-usrsbin-outgoing; Fri, 11 Oct 1996 07:12:05 -0700 (PDT) Received: from sovcom.kiae.su (sovcom.kiae.su [193.125.152.1]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id HAA17198; Fri, 11 Oct 1996 07:09:15 -0700 (PDT) Received: by sovcom.kiae.su id AA20000 (5.65.kiae-1 ); Fri, 11 Oct 1996 16:59:48 +0300 Received: by sovcom.KIAE.su (UUMAIL/2.0); Fri, 11 Oct 96 16:59:47 +0300 Received: (from ache@localhost) by nagual.ru (8.7.6/8.7.3) id RAA01030; Fri, 11 Oct 1996 17:53:56 +0400 (MSD) Message-Id: <199610111353.RAA01030@nagual.ru> Subject: Re: cvs commit: src/usr.sbin/ppp command.c In-Reply-To: <199610110958.LAA15010@ra.dkuug.dk> from "sos@FreeBSD.org" at "Oct 11, 96 11:58:46 am" To: sos@FreeBSD.org Date: Fri, 11 Oct 1996 17:53:55 +0400 (MSD) Cc: joerg_wunsch@uriah.heep.sax.de, sos@freefall.freebsd.org, CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-usrsbin@freefall.freebsd.org From: "=?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?=" (Andrey A. Chernov) Organization: self X-Class: Fast X-Mailer: ELM [version 2.4ME+ PL28 (25)] Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-cvs-usrsbin@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk > In reply to =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= who wrote: > > > > > As Soren Schmidt wrote: > > > > sos 96/10/10 04:27:38 > > > > > > > > Modified: usr.sbin/ppp command.c > > > > Log: > > > > Allow shell commands in all modes. > > > > > > Do you get a root shell now if you run ``ppp -auto'', connect to port > > > 3000, and issue a `shell'? I would consider this a very bad move! > > > > > > > Yes, we just make security hole, it should be fixed. > > Oops... I guess it was too late in the night when I did that... > > Any good suggestions as how to make this work securely ?? > Maybe only allowing the program named in the ppp.xxx file, that > way security is at the/etc/ppp level. Not so complex, just disable 'shell' command in telnet mode. As I remember ppp have some flag indicating it running with -auto, and/or some flag indicating telnet mode, shell command must check those flags and refuse execution. -- Andrey A. Chernov http://www.nagual.ru/~ache/ From owner-cvs-usrsbin Fri Oct 11 08:27:54 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id IAA22396 for cvs-usrsbin-outgoing; Fri, 11 Oct 1996 08:27:54 -0700 (PDT) Received: from SandBox.CyberCity.dk (disn124.cybercity.dk [194.16.57.124]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id IAA22387; Fri, 11 Oct 1996 08:27:36 -0700 (PDT) Received: (from sos@localhost) by SandBox.CyberCity.dk (8.7.6/8.7.3) id RAA00223; Fri, 11 Oct 1996 17:08:17 +0200 (MET DST) Message-Id: <199610111508.RAA00223@SandBox.CyberCity.dk> Subject: Re: cvs commit: src/usr.sbin/ppp command.c To: ache@nagual.ru (=?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?=) Date: Fri, 11 Oct 1996 17:08:17 +0200 (MET DST) From: "Soren Schmidt" Cc: sos@FreeBSD.org, joerg_wunsch@uriah.heep.sax.de, sos@freefall.freebsd.org, CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-usrsbin@freefall.freebsd.org In-Reply-To: <199610111353.RAA01030@nagual.ru> from "=?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?=" at Oct 11, 96 05:53:55 pm From: sos@FreeBSD.org Reply-to: sos@FreeBSD.org X-Mailer: ELM [version 2.4 PL25 ME8b] MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-cvs-usrsbin@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk In reply to áÎÄÒÅÊ_þÅÒÎÏ× who wrote: > > > Oops... I guess it was too late in the night when I did that... > > > > Any good suggestions as how to make this work securely ?? > > Maybe only allowing the program named in the ppp.xxx file, that > > way security is at the/etc/ppp level. > > Not so complex, just disable 'shell' command in telnet mode. > As I remember ppp have some flag indicating it running with -auto, > and/or some flag indicating telnet mode, shell command must check > those flags and refuse execution. Will look at that solution... -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Søren Schmidt (sos@FreeBSD.org) FreeBSD Core Team Even more code to hack -- will it ever end .. From owner-cvs-usrsbin Fri Oct 11 11:47:22 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id LAA17611 for cvs-usrsbin-outgoing; Fri, 11 Oct 1996 11:47:22 -0700 (PDT) Received: (from wollman@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id LAA17596; Fri, 11 Oct 1996 11:47:13 -0700 (PDT) Date: Fri, 11 Oct 1996 11:47:13 -0700 (PDT) From: Garrett Wollman Message-Id: <199610111847.LAA17596@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/slstat Makefile slstat.8 slstat.c Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk wollman 96/10/11 11:47:13 Modified: usr.sbin/slstat Makefile slstat.8 slstat.c Log: De-cruftify. Use the link MIB interface rather than groveling around in kmem. (No longer works on dead kernels, big deal.) Revision Changes Path 1.4 +1 -5 src/usr.sbin/slstat/Makefile 1.6 +9 -23 src/usr.sbin/slstat/slstat.8 1.6 +91 -166 src/usr.sbin/slstat/slstat.c From owner-cvs-usrsbin Sat Oct 12 09:22:14 1996 Return-Path: owner-cvs-usrsbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id JAA08171 for cvs-usrsbin-outgoing; Sat, 12 Oct 1996 09:22:14 -0700 (PDT) Received: (from jkh@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id JAA08121; Sat, 12 Oct 1996 09:20:39 -0700 (PDT) Date: Sat, 12 Oct 1996 09:20:39 -0700 (PDT) From: "Jordan K. Hubbard" Message-Id: <199610121620.JAA08121@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-usrsbin Subject: cvs commit: src/usr.sbin/ppp chap.c command.c lcp.c main.c route.c Sender: owner-cvs-usrsbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk jkh 96/10/12 09:20:38 Modified: usr.sbin/ppp chap.c command.c lcp.c main.c route.c Log: 1. Room to calculate MD5 for CHAP negotiation is shorter than required. a core is not dumped at first connecting time and dumped at second or third time. (patch I) 2. A routine for "show route" refers out of allocated space. Values pointed by "lp" should be read as CHAR, I think. there is also no free() for disallocation. (patch II) Here is also a patch for an improvement: In current imprementation, even if PPP connection is disconnected by time out, prompt of interactive mode does not change from "PPP>" to "ppp>" to indicate the disconnection on a terminal. So I modified the code to do that. (patch III) Submitted-By: NAKAMURA Motonori Revision Changes Path 1.7 +3 -2 src/usr.sbin/ppp/chap.c 1.23 +8 -4 src/usr.sbin/ppp/command.c 1.10 +8 -1 src/usr.sbin/ppp/lcp.c 1.22 +5 -1 src/usr.sbin/ppp/main.c 1.9 +6 -4 src/usr.sbin/ppp/route.c