From owner-freebsd-security  Wed May  9  4:21:11 2001
Delivered-To: freebsd-security@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-108.dsl.lsan03.pacbell.net [63.207.60.108])
	by hub.freebsd.org (Postfix) with ESMTP id 8EDA137B423
	for <security@FreeBSD.ORG>; Wed,  9 May 2001 04:21:08 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 15C18678BA; Wed,  9 May 2001 04:21:08 -0700 (PDT)
Date: Wed, 9 May 2001 04:21:07 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Peter Pentchev <roam@orbitel.bg>
Cc: Rasputin <rara.rasputin@virgin.net>,
	Paul Herman <pherman@frenchfries.net>, security@FreeBSD.ORG
Subject: Re: setkey(3) not present in the system
Message-ID: <20010509042107.A36279@xor.obsecurity.org>
References: <20010509104313.A47276@dogma.freebsd-uk.eu.org> <Pine.BSF.4.33.0105091234310.79177-100000@husten.security.at12.de> <20010509114907.A48960@dogma.freebsd-uk.eu.org> <20010509135318.B44191@ringworld.oblivion.bg>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="a8Wt8u1KmwUX3Y2C"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010509135318.B44191@ringworld.oblivion.bg>; from roam@orbitel.bg on Wed, May 09, 2001 at 01:53:18PM +0300
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


--a8Wt8u1KmwUX3Y2C
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, May 09, 2001 at 01:53:18PM +0300, Peter Pentchev wrote:
> On Wed, May 09, 2001 at 11:49:07AM +0100, Rasputin wrote:
> > * Paul Herman <pherman@frenchfries.net> [010509 11:41]:
> > > On Wed, 9 May 2001, Rasputin wrote:
> > >=20
> > > > Anybody know where I can get these functions?
> > > > Thanks.
> > > >
> > > > /usr/lib/libc.so: WARNING!  setkey(3) not present in the system!
> > > > /usr/lib/libc.so: WARNING!  des_setkey(3) not present in the system!
> > > > /usr/lib/libc.so: WARNING!  encrypt(3) not present in the system!
> > > > /usr/lib/libc.so: WARNING!  des_cipher(3) not present in the system!
> >=20
> > > Just follow your nose, it always knows!  :-)
> > > des_setkey(3) manpage mentions -lcipher. Looks like it's in
> >=20
> > If you could see the size of my nose, you'd be even more amazed I misse=
d this..
> > Someone else mentioned -lcipher, I'll throw that in and give it a whirl.
> >=20
> > Thanks.=20
> >=20
> > Incidentally, (and OT-ly), this is my favourite error message...
> >=20
> > > /usr/lib/libc.so: warning: this program uses f_prealloc(), which is s=
tupid.
>=20
> The fact that the message sounds interesting is quite OT; however, the fa=
ct
> that it states could be quite important - see my other e-mail on the subj=
ect.
> It seems that the writers of the WAP gateway in question are trying to do
> something in a way too smart for their own good..

There's something nonstandard about the way it's linking which is
triggering all of the __warn_references() in libc regardless of
whether or not the code actually uses those "dangerous" functions -- I
don't know what it is, but I've seen it a lot in ports.  It's probably
a bug which should be fixed.

Kris

--a8Wt8u1KmwUX3Y2C
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.5 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6+SgjWry0BWjoQKURAj9IAKCTThKcCZXFdg0ZXhlqlIeK7EY5+wCfZs2F
ZBzLwmaTVSoq0eoxiJxLeeM=
=6UAA
-----END PGP SIGNATURE-----

--a8Wt8u1KmwUX3Y2C--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message