From owner-freebsd-audit Fri Nov 26 22:56:56 1999 Delivered-To: freebsd-audit@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 758) id 1BDEC14DD9; Fri, 26 Nov 1999 22:56:48 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id 061F81CD626 for ; Fri, 26 Nov 1999 22:56:42 -0800 (PST) (envelope-from kris@hub.freebsd.org) Date: Fri, 26 Nov 1999 22:56:42 -0800 (PST) From: Kris Kennaway To: audit@freebsd.org Subject: ctm_rmail holes Message-ID: MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="0-862565871-943685802=:86657" Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --0-862565871-943685802=:86657 Content-Type: TEXT/PLAIN; charset=US-ASCII There are a couple of buffer overflows in ctm_rmail (part of ctm which automatically decodes and applies deltas received via email) which look like they could be exploitable by sending a malformed email. OpenBSD fixed these, but for some reason Theo backed them out a few months ago during a sync with our code. Of course, a larger issue with CTM is that it looks like anyone can insert their code into your source tree just by sending a delta to you, because it does no authentication whatsoever of the contents except that it applies cleanly :-( The attached patch syncs with the OpenBSD security changes, and I've also fixed a lock file race, and some command-line buffer overflows which weren't likely to be security problems. However I can't test this, because I don't have my machine set up to use CTM. Comments, anyone? Kris ---- Just remember, as you celebrate Thanksgiving with your family feasts of turkey, cranberries, stuffing, gravy, mashed potatoes, squash, corn, cornbread, apples, pickles, dumplings, fish, orangutans, fruitbats, breakfast cereals, and so forth, to keep in mind the true reason for the season: The birth of Santa. --0-862565871-943685802=:86657 Content-Type: TEXT/PLAIN; charset=US-ASCII; name="foo.p" Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename="foo.p" SW5kZXg6IGN0bV9ybWFpbC5jDQo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpS Q1MgZmlsZTogL2hvbWUvbmN2cy9zcmMvdXNyLnNiaW4vY3RtL2N0bV9ybWFp bC9jdG1fcm1haWwuYyx2DQpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMTQNCmRp ZmYgLXUgLXIxLjE0IGN0bV9ybWFpbC5jDQotLS0gY3RtX3JtYWlsLmMJMTk5 OC8wNy8yNyAyMjoyNjoyNQkxLjE0DQorKysgY3RtX3JtYWlsLmMJMTk5OS8x MS8yNyAwNjo0MTo1NQ0KQEAgLTEwLDYgKzEwLDExIEBADQogICogTWF5YmUg eW91IHNob3VsZCB3cml0ZSBzb21lIGZyZWUgc29mdHdhcmUgdG9vLg0KICAq Lw0KIA0KKyNpZm5kZWYgbGludA0KK3N0YXRpYyBjb25zdCBjaGFyIHJjc2lk W10gPQ0KKyIkRnJlZUJTRCQiOw0KKyNlbmRpZiAvKiBub3QgbGludCAqLw0K Kw0KICNpbmNsdWRlIDxzdGRpby5oPg0KICNpbmNsdWRlIDxzdGRsaWIuaD4N CiAjaW5jbHVkZSA8c3RyaW5ncy5oPg0KQEAgLTM1LDcgKzQwLDggQEANCiB2 b2lkIGFwcGx5X2NvbXBsZXRlKHZvaWQpOw0KIGludCByZWFkX3BpZWNlKGNo YXIgKmlucHV0X2ZpbGUpOw0KIGludCBjb21iaW5lX2lmX2NvbXBsZXRlKGNo YXIgKmRlbHRhLCBpbnQgcGNlLCBpbnQgbnBpZWNlcyk7DQotaW50IGNvbWJp bmUoY2hhciAqZGVsdGEsIGludCBucGllY2VzLCBjaGFyICpkbmFtZSwgY2hh ciAqcG5hbWUsIGNoYXIgKnRuYW1lKTsNCitpbnQgY29tYmluZShjaGFyICpk ZWx0YSwgaW50IG5waWVjZXMsIGNoYXIgKmRuYW1lLCBjaGFyICpwbmFtZSwg Y2hhciAqdG5hbWUsDQorCSAgICBpbnQgbGVuKTsNCiBpbnQgZGVjb2RlX2xp bmUoY2hhciAqbGluZSwgY2hhciAqb3V0X2J1Zik7DQogaW50IGxvY2tfZmls ZShjaGFyICpuYW1lKTsNCiANCkBAIC0xMTgsMTQgKzEyNCwxNCBAQA0KIC8q DQogICogQ29uc3RydWN0IHRoZSBmaWxlIG5hbWUgb2YgYSBwaWVjZSBvZiBh IGRlbHRhLg0KICAqLw0KLSNkZWZpbmUgbWtfcGllY2VfbmFtZShmbixkLHAs bikJXA0KLSAgICBzcHJpbnRmKChmbiksICIlcy8lcyslMDNkLSUwM2QiLCBw aWVjZV9kaXIsIChkKSwgKHApLCAobikpDQorI2RlZmluZSBta19waWVjZV9u YW1lKGZuLGwsZCxwLG4pCVwNCisgICAgc25wcmludGYoKGZuKSwgbCwgIiVz LyVzKyUwM2QtJTAzZCIsIHBpZWNlX2RpciwgKGQpLCAocCksIChuKSkNCiAN CiAvKg0KICAqIENvbnN0cnVjdCB0aGUgZmlsZSBuYW1lIG9mIGFuIGFzc2Vt YmxlZCBkZWx0YS4NCiAgKi8NCi0jZGVmaW5lIG1rX2RlbHRhX25hbWUoZm4s ZCkJXA0KLSAgICBzcHJpbnRmKChmbiksICIlcy8lcyIsIGRlbHRhX2Rpciwg KGQpKQ0KKyNkZWZpbmUgbWtfZGVsdGFfbmFtZShmbixsLGQpCVwNCisgICAg c25wcmludGYoKGZuKSwgbCwgIiVzLyVzIiwgZGVsdGFfZGlyLCAoZCkpDQog DQogLyoNCiAgKiBJZiB0aGUgbmV4dCByZXF1aXJlZCBkZWx0YSBpcyBub3cg cHJlc2VudCwgbGV0IGN0bSBsdW5jaCBvbiBpdCBhbmQgYW55DQpAQCAtMTQ5 LDIyICsxNTUsMjIgQEANCiAgICAgICogR3JhYiBhIGxvY2sgb24gdGhlIGN0 bSBtdXRleCBmaWxlIHNvIHRoYXQgd2UgY2FuIGJlIHN1cmUgd2UgYXJlDQog ICAgICAqIHdvcmtpbmcgYWxvbmUsIG5vdCBmaWdodGluZyBhbm90aGVyIGN0 bV9ybWFpbCENCiAgICAgICovDQotICAgIHN0cmNweShmbmFtZSwgZGVsdGFf ZGlyKTsNCi0gICAgc3RyY2F0KGZuYW1lLCAiLy5tdXRleF9hcHBseSIpOw0K KyAgICBzdHJuY3B5KGZuYW1lLCBkZWx0YV9kaXIsIHNpemVvZihmbmFtZSkp Ow0KKyAgICBzdHJsY2F0KGZuYW1lLCAiLy5tdXRleF9hcHBseSIsIHNpemVv ZihmbmFtZSkpOw0KICAgICBpZiAoKGxmZCA9IGxvY2tfZmlsZShmbmFtZSkp IDwgMCkNCiAJcmV0dXJuOw0KIA0KICAgICAvKg0KICAgICAgKiBGaW5kIG91 dCB3aGljaCBkZWx0YSBjdG0gbmVlZHMgbmV4dC4NCiAgICAgICovDQotICAg IHNwcmludGYoZm5hbWUsICIlcy8lcyIsIGJhc2VfZGlyLCBDVE1fU1RBVFVT KTsNCisgICAgc25wcmludGYoZm5hbWUsIHNpemVvZihmbmFtZSksICIlcy8l cyIsIGJhc2VfZGlyLCBDVE1fU1RBVFVTKTsNCiAgICAgaWYgKChmcCA9IGZv cGVuKGZuYW1lLCAiciIpKSA9PSBOVUxMKQ0KIAl7DQogCWNsb3NlKGxmZCk7 DQogCXJldHVybjsNCiAJfQ0KIA0KLSAgICBpID0gZnNjYW5mKGZwLCAiJXMg JWQgJWMiLCBjbGFzcywgJmRuLCBqdW5rKTsNCisgICAgaSA9IGZzY2FuZihm cCwgIiUxOXMgJWQgJWMiLCBjbGFzcywgJmRuLCBqdW5rKTsNCiAgICAgZmNs b3NlKGZwKTsNCiAgICAgaWYgKGkgIT0gMikNCiAJew0KQEAgLTE3OCw3ICsx ODQsNyBAQA0KICAgICBoZXJlWzBdID0gJ1wwJzsNCiAgICAgaWYgKGRlbHRh X2RpclswXSAhPSAnLycpDQogCXsNCi0JZ2V0Y3dkKGhlcmUsIHNpemVvZiho ZXJlKS0xKTsNCisJZ2V0Y3dkKGhlcmUsIHNpemVvZihoZXJlKS0yKTsNCiAJ aSA9IHN0cmxlbihoZXJlKSAtIDE7DQogCWlmIChpID49IDAgJiYgaGVyZVtp XSAhPSAnLycpDQogCSAgICB7DQpAQCAtMTkyLDEzICsxOTgsMTMgQEANCiAg ICAgICovDQogICAgIGZvciAoOzspDQogCXsNCi0Jc3ByaW50ZihkZWx0YSwg IiVzLiUwNGQuZ3oiLCBjbGFzcywgKytkbik7DQotCW1rX2RlbHRhX25hbWUo Zm5hbWUsIGRlbHRhKTsNCisJc25wcmludGYoZGVsdGEsIHNpemVvZihkZWx0 YSksICIlcy4lMDRkLmd6IiwgY2xhc3MsICsrZG4pOw0KKwlta19kZWx0YV9u YW1lKGZuYW1lLCBzaXplb2YoZm5hbWUpLCBkZWx0YSk7DQogDQogCWlmIChz dGF0KGZuYW1lLCAmc2IpIDwgMCkNCiAJICAgIGJyZWFrOw0KIA0KLQlzcHJp bnRmKGJ1ZiwgIihjZCAlcyAmJiBjdG0gJXMlcyVzJXMpIDI+JjEiLCBiYXNl X2RpciwNCisJc25wcmludGYoYnVmLCBzaXplb2YoYnVmKSwgIihjZCAlcyAm JiBjdG0gJXMlcyVzJXMpIDI+JjEiLCBiYXNlX2RpciwNCiAJCQkJc2V0X3Rp bWUgPyAiLXUgIiA6ICIiLA0KIAkJCQlhcHBseV92ZXJib3NlID8gIi12ICIg OiAiIiwgaGVyZSwgZm5hbWUpOw0KIAlpZiAoKGN0bSA9IHBvcGVuKGJ1Ziwg InIiKSkgPT0gTlVMTCkNCkBAIC0yOTQsNyArMzAwLDcgQEANCiAJICAgIHsN CiAJICAgIGNoYXIgKnM7DQogDQotCSAgICBpZiAoc3NjYW5mKGxpbmUsICJD VE1fTUFJTCBCRUdJTiAlcyAlZCAlZCAlYyIsDQorCSAgICBpZiAoc3NjYW5m KGxpbmUsICJDVE1fTUFJTCBCRUdJTiAlMjlzICVkICVkICVjIiwNCiAJCSAg ICBkZWx0YSwgJnBjZSwgJm5waWVjZXMsIGp1bmspICE9IDMpDQogCQljb250 aW51ZTsNCiANCkBAIC0zMDIsMTcgKzMwOCwxNyBAQA0KIAkJKnMgPSAnXyc7 DQogDQogCSAgICBnb3Rfb25lKys7DQotCSAgICBzdHJjcHkodG5hbWUsIHBp ZWNlX2Rpcik7DQotCSAgICBzdHJjYXQodG5hbWUsICIvcC5YWFhYWFgiKTsN Ci0JICAgIGlmICgob2ZkID0gbWtzdGVtcCh0bmFtZSkpIDwgMCkNCisJICAg IHN0cm5jcHkodG5hbWUsIHBpZWNlX2Rpciwgc2l6ZW9mKHRuYW1lKSk7DQor CSAgICBzdHJsY2F0KHRuYW1lLCAiL3AuWFhYWFhYWFhYWCIsIHNpemVvZih0 bmFtZSkpOw0KKwkgICAgaWYgKChvZmQgPSBta3N0ZW1wKHRuYW1lKSkgPT0g LTEgfHwNCisJCShvZnAgPSBmZG9wZW4ob2ZkLCAidyIpKSA9PSBOVUxMKQ0K IAkJew0KLQkJZXJyKCIqbWtzdGVtcDogJyVzJyIsIHRuYW1lKTsNCi0JCXN0 YXR1cysrOw0KLQkJY29udGludWU7DQotCQl9DQotCSAgICBpZiAoKG9mcCA9 IGZkb3BlbihvZmQsICJ3IikpID09IE5VTEwpDQotCQl7DQotCQllcnIoImNh bm5vdCBvcGVuICclcycgZm9yIHdyaXRpbmciLCB0bmFtZSk7DQorCQlpZiAo b2ZkICE9IC0xKSB7DQorCQkgICAgZXJyKCJjYW5ub3Qgb3BlbiAnJXMnIGZv ciB3cml0aW5nIiwgdG5hbWUpOw0KKwkJICAgIGNsb3NlKG9mZCk7DQorCQkg ICAgfQ0KKwkJZWxzZQ0KKwkJICAgIGVycigiKm1rc3RlbXA6ICclcyciLCB0 bmFtZSk7DQogCQlzdGF0dXMrKzsNCiAJCWNvbnRpbnVlOw0KIAkJfQ0KQEAg LTM0OSw3ICszNTUsNyBAQA0KIAkJY29udGludWU7DQogCQl9DQogDQotCSAg ICBta19waWVjZV9uYW1lKHBuYW1lLCBkZWx0YSwgcGNlLCBucGllY2VzKTsN CisJICAgIG1rX3BpZWNlX25hbWUocG5hbWUsIHNpemVvZihwbmFtZSksIGRl bHRhLCBwY2UsIG5waWVjZXMpOw0KIAkgICAgaWYgKHJlbmFtZSh0bmFtZSwg cG5hbWUpIDwgMCkNCiAJCXsNCiAJCWVycigiKnJlbmFtZTogJyVzJyB0byAn JXMnIiwgdG5hbWUsIHBuYW1lKTsNCkBAIC00MzgsOCArNDQ0LDggQEANCiAg ICAgICovDQogICAgIGlmIChucGllY2VzID09IDEpDQogCXsNCi0JbWtfZGVs dGFfbmFtZShkbmFtZSwgZGVsdGEpOw0KLQlta19waWVjZV9uYW1lKHBuYW1l LCBkZWx0YSwgMSwgMSk7DQorCW1rX2RlbHRhX25hbWUoZG5hbWUsIHNpemVv ZihkbmFtZSksIGRlbHRhKTsNCisJbWtfcGllY2VfbmFtZShwbmFtZSwgc2l6 ZW9mKHBuYW1lKSwgZGVsdGEsIDEsIDEpOw0KIAlpZiAocmVuYW1lKHBuYW1l LCBkbmFtZSkgPT0gMCkNCiAJICAgIHsNCiAJICAgIGVycigiJXMgY29tcGxl dGUiLCBkZWx0YSk7DQpAQCAtNDUxLDggKzQ1Nyw4IEBADQogICAgICAqIEdy YWIgYSBsb2NrIG9uIHRoZSByZWFzc2VtYmx5IG11dGV4IGZpbGUgc28gdGhh dCB3ZSBjYW4gYmUgc3VyZSB3ZSBhcmUNCiAgICAgICogd29ya2luZyBhbG9u ZSwgbm90IGZpZ2h0aW5nIGFub3RoZXIgY3RtX3JtYWlsIQ0KICAgICAgKi8N Ci0gICAgc3RyY3B5KHRuYW1lLCBkZWx0YV9kaXIpOw0KLSAgICBzdHJjYXQo dG5hbWUsICIvLm11dGV4X2J1aWxkIik7DQorICAgIHN0cm5jcHkodG5hbWUs IGRlbHRhX2Rpciwgc2l6ZW9mKHRuYW1lKSk7DQorICAgIHN0cmxjYXQodG5h bWUsICIvLm11dGV4X2J1aWxkIiwgc2l6ZW9mKHRuYW1lKSk7DQogICAgIGlm ICgobGZkID0gbG9ja19maWxlKHRuYW1lKSkgPCAwKQ0KIAlyZXR1cm4gMDsN CiANCkBAIC00NjUsNyArNDcxLDcgQEANCiAJew0KIAlpZiAoaSA9PSBwY2Up DQogCSAgICBjb250aW51ZTsNCi0JbWtfcGllY2VfbmFtZShwbmFtZSwgZGVs dGEsIGksIG5waWVjZXMpOw0KKwlta19waWVjZV9uYW1lKHBuYW1lLCBzaXpl b2YocG5hbWUpLCBkZWx0YSwgaSwgbnBpZWNlcyk7DQogCWlmIChzdGF0KHBu YW1lLCAmc2IpIDwgMCkNCiAJICAgIHsNCiAJICAgIGNsb3NlKGxmZCk7DQpA QCAtNDc3LDcgKzQ4Myw3IEBADQogICAgICAqIFN0aWNrIHRoZW0gdG9nZXRo ZXIuICBMZXQgY29tYmluZSgpIHVzZSBvdXIgZmlsZSBuYW1lIGJ1ZmZlcnMs IHNpbmNlDQogICAgICAqIHdlJ3JlIHN1Y2ggZ29vZCBidWRkaWVzLiA6LSkN CiAgICAgICovDQotICAgIGUgPSBjb21iaW5lKGRlbHRhLCBucGllY2VzLCBk bmFtZSwgcG5hbWUsIHRuYW1lKTsNCisgICAgZSA9IGNvbWJpbmUoZGVsdGEs IG5waWVjZXMsIGRuYW1lLCBwbmFtZSwgdG5hbWUsIHNpemVvZih0bmFtZSkp Ow0KICAgICBjbG9zZShsZmQpOw0KICAgICByZXR1cm4gZTsNCiAgICAgfQ0K QEAgLTQ5MCwyMyArNDk2LDI0IEBADQogICogaGFwcGVuZWQgdG8gYnkgbHlp bmcgYXJvdW5kIGluIHRoZSBjYWxsaW5nIHJvdXRpbmUuICBXYXN0ZSBub3Qs IHdhbnQgbm90IQ0KICAqLw0KIGludA0KLWNvbWJpbmUoY2hhciAqZGVsdGEs IGludCBucGllY2VzLCBjaGFyICpkbmFtZSwgY2hhciAqcG5hbWUsIGNoYXIg KnRuYW1lKQ0KK2NvbWJpbmUoY2hhciAqZGVsdGEsIGludCBucGllY2VzLCBj aGFyICpkbmFtZSwgY2hhciAqcG5hbWUsIGNoYXIgKnRuYW1lLCBpbnQgbGVu KQ0KICAgICB7DQogICAgIEZJTEUgKmRmcCwgKnBmcDsNCiAgICAgaW50IGRm ZDsNCiAgICAgaW50IGksIG4sIGU7DQogICAgIGNoYXIgYnVmW0JVRlNJWl07 DQogDQotICAgIHN0cmNweSh0bmFtZSwgZGVsdGFfZGlyKTsNCi0gICAgc3Ry Y2F0KHRuYW1lLCAiL2QuWFhYWFhYIik7DQotICAgIGlmICgoZGZkID0gbWtz dGVtcCh0bmFtZSkpIDwgMCkNCi0Jew0KLQllcnIoIipta3N0ZW1wOiAnJXMn IiwgdG5hbWUpOw0KLQlyZXR1cm4gMDsNCi0JfQ0KLSAgICBpZiAoKGRmcCA9 IGZkb3BlbihkZmQsICJ3IikpID09IE5VTEwpDQotCXsNCi0JZXJyKCJjYW5u b3Qgb3BlbiAnJXMnIGZvciB3cml0aW5nIiwgdG5hbWUpOw0KKyAgICBzdHJu Y3B5KHRuYW1lLCBkZWx0YV9kaXIsIGxlbik7DQorICAgIHN0cmxjYXQodG5h bWUsICIvZC5YWFhYWFhYWFhYIiwgbGVuKTsNCisgICAgaWYgKChkZmQgPSBt a3N0ZW1wKHRuYW1lKSkgPT0gLTEgfHwNCisJKGRmcCA9IGZkb3BlbihkZmQs ICJ3IikpID09IE5VTEwpDQorCXsNCisJaWYgKGRmZCAhPSAtMSkgew0KKwkg ICAgY2xvc2UoZGZkKTsNCisJICAgIGVycigiY2Fubm90IG9wZW4gJyVzJyBm b3Igd3JpdGluZyIsIHRuYW1lKTsNCisJICAgIH0NCisJZWxzZQ0KKwkgICAg ZXJyKCIqbWt0ZW1wOiAnJXMnIiwgdG5hbWUpOw0KIAlyZXR1cm4gMDsNCiAJ fQ0KIA0KQEAgLTUxNSw3ICs1MjIsNyBAQA0KICAgICAgKi8NCiAgICAgZm9y IChpID0gMTsgaSA8PSBucGllY2VzOyBpKyspDQogCXsNCi0JbWtfcGllY2Vf bmFtZShwbmFtZSwgZGVsdGEsIGksIG5waWVjZXMpOw0KKwlta19waWVjZV9u YW1lKHBuYW1lLCBsZW4sIGRlbHRhLCBpLCBucGllY2VzKTsNCiAJaWYgKChw ZnAgPSBmb3BlbihwbmFtZSwgInIiKSkgPT0gTlVMTCkNCiAJICAgIHsNCiAJ ICAgIGVycigiY2Fubm90IG9wZW4gJyVzJyBmb3IgcmVhZGluZyIsIHBuYW1l KTsNCkBAIC01NDUsNyArNTUyLDcgQEANCiAJcmV0dXJuIDA7DQogCX0NCiAN Ci0gICAgbWtfZGVsdGFfbmFtZShkbmFtZSwgZGVsdGEpOw0KKyAgICBta19k ZWx0YV9uYW1lKGRuYW1lLCBsZW4sIGRlbHRhKTsNCiAgICAgaWYgKHJlbmFt ZSh0bmFtZSwgZG5hbWUpIDwgMCkNCiAJew0KIAllcnIoIipyZW5hbWU6ICcl cycgdG8gJyVzJyIsIHRuYW1lLCBkbmFtZSk7DQpAQCAtNTU4LDcgKzU2NSw3 IEBADQogICAgICAqLw0KICAgICBmb3IgKGkgPSAxOyBpIDw9IG5waWVjZXM7 IGkrKykNCiAJew0KLQlta19waWVjZV9uYW1lKHBuYW1lLCBkZWx0YSwgaSwg bnBpZWNlcyk7DQorCW1rX3BpZWNlX25hbWUocG5hbWUsIGxlbiwgZGVsdGEs IGksIG5waWVjZXMpOw0KIAlpZiAodW5saW5rKHBuYW1lKSA8IDApDQogCSAg ICBlcnIoIip1bmxpbms6ICclcyciLCBwbmFtZSk7DQogCX0NCkBAIC02NDgs MTUgKzY1NSw5IEBADQogICAgIHsNCiAgICAgaW50IGxmZDsNCiANCi0gICAg aWYgKChsZmQgPSBvcGVuKG5hbWUsIE9fV1JPTkxZfE9fQ1JFQVQsIDA2MDAp KSA8IDApDQorICAgIGlmICgobGZkID0gb3BlbihuYW1lLCBPX1dST05MWXxP X0NSRUFUfE9fRVhMT0NLLCAwNjAwKSkgPCAwKQ0KIAl7DQogCWVycigiKm9w ZW46ICclcyciLCBuYW1lKTsNCi0JcmV0dXJuIC0xOw0KLQl9DQotICAgIGlm IChmbG9jayhsZmQsIExPQ0tfRVgpIDwgMCkNCi0Jew0KLQljbG9zZShsZmQp Ow0KLQllcnIoIipmbG9jazogJyVzJyIsIG5hbWUpOw0KIAlyZXR1cm4gLTE7 DQogCX0NCiAgICAgcmV0dXJuIGxmZDsNCg== --0-862565871-943685802=:86657-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message