pkgsrc/security/pscan/distinfo

$NetBSD: distinfo,v 1.3 2015/11/04 01:18:02 agc Exp $

SHA1 (pscan.tar.gz) = 7844cabcc1fa014d5d2d192d94565133d60cd51b
RMD160 (pscan.tar.gz) = 7c92b2b8c8e2f65dc4a37da37de47170ae24809c
SHA512 (pscan.tar.gz) = 83196cc9c450217fc2287d38fd1a0b9d1d9951b8f6328b6b9f7f50b680f653b099af04d4c448f3cb2b2a96871eec8772557851e887faa2f41dc259f01c031e78
Size (pscan.tar.gz) = 14555 bytes
SHA1 (patch-aa) = f9b62f12372392bbe65dd97e441037eceb02c622
Add SHA512 digests for distfiles for security category Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail. 2015-11-04 02:17:40 +01:00			$NetBSD: distinfo,v 1.3 2015/11/04 01:18:02 agc Exp $
PScan is a C source code security scanner, which looks for misuse of libc functions which use varargs and printf-style formatting operators. In many situations these can cause security vulnerabilities in the application if it runs with privileges (setugid, or listening to a network socket, etc). An example of the kind of situation pscan looks for is the following: variable = "%s"; /* or malicious user input / sprintf(buffer, variable); / BAD! */ WWW: http://www.striker.ottawa.on.ca/~aland/pscan/ 2002-08-06 03:36:59 +02:00
			`SHA1 (pscan.tar.gz) = 7844cabcc1fa014d5d2d192d94565133d60cd51b`
Add RMD160 digests. 2005-02-24 13:51:41 +01:00			`RMD160 (pscan.tar.gz) = 7c92b2b8c8e2f65dc4a37da37de47170ae24809c`
Add SHA512 digests for distfiles for security category Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail. 2015-11-04 02:17:40 +01:00			`SHA512 (pscan.tar.gz) = 83196cc9c450217fc2287d38fd1a0b9d1d9951b8f6328b6b9f7f50b680f653b099af04d4c448f3cb2b2a96871eec8772557851e887faa2f41dc259f01c031e78`
PScan is a C source code security scanner, which looks for misuse of libc functions which use varargs and printf-style formatting operators. In many situations these can cause security vulnerabilities in the application if it runs with privileges (setugid, or listening to a network socket, etc). An example of the kind of situation pscan looks for is the following: variable = "%s"; /* or malicious user input / sprintf(buffer, variable); / BAD! */ WWW: http://www.striker.ottawa.on.ca/~aland/pscan/ 2002-08-06 03:36:59 +02:00			`Size (pscan.tar.gz) = 14555 bytes`
			`SHA1 (patch-aa) = f9b62f12372392bbe65dd97e441037eceb02c622`