Pull up revision 1.2 (requested by abs in ticket #28):

Update exim3 to exim-3.36nb2
  - Fix buffer overflows listed at http://www.guninski.com/exim1.html

5 files changed, 82 insertions, 168 deletions

diff --git a/mail/exim3/patches/patch-ab b/mail/exim3/patches/patch-ab
index ae991869cc9..03fb4d67f09 100644
--- a/mail/exim3/patches/patch-ab
+++ b/mail/exim3/patches/patch-ab
@@ -1,104 +1,44 @@
-$NetBSD: patch-ab,v 1.1.1.1 2003/12/04 04:24:51 grant Exp $
+$NetBSD: patch-ab,v 1.1.1.1.2.1 2004/05/30 08:49:16 grant Exp $
 
---- Local/Makefile.netbsd.orig	2003-11-30 16:06:49.000000000 +1100
-+++ Local/Makefile.netbsd
-@@ -78,7 +78,7 @@
- # CHGRP_COMMAND=/usr/bin/chgrp
- # MV_COMMAND=/bin/mv
- # RM_COMMAND=/bin/rm
--# PERL_COMMAND=/usr/bin/perl
-+PERL_COMMAND=@PREFIX@/bin/perl
- 
- 
- # The following macro can be used to change the command for building a library
-@@ -92,8 +92,8 @@
- # appropriate code is included in the binary. You then need to set up the
- # runtime configuration to make use of the mechanism(s) selected.
- 
--# AUTH_CRAM_MD5=yes
--# AUTH_PLAINTEXT=yes
-+AUTH_CRAM_MD5=yes
-+AUTH_PLAINTEXT=yes
- 
- 
- # The binary directory: This variable defines where the exim binary will be
-@@ -103,7 +103,7 @@
- # installed in this directory. There is no default for this variable built into
- # the source files; it must be set in one of the local configuration files.
- 
--BIN_DIRECTORY=/usr/exim/bin
-+BIN_DIRECTORY=@PREFIX@/sbin
- 
- 
- # The default distribution of Exim contains only the plain text form of the
-@@ -121,14 +121,14 @@ BIN_DIRECTORY=/usr/exim/bin
- # files. Both the name of the command and the suffix that it adds to files
- # need to be defined here. See also the EXICYCLOG_MAX configuration.
- 
--COMPRESS_COMMAND=/opt/gnu/bin/gzip
-+COMPRESS_COMMAND=@GZIP_CMD@
- COMPRESS_SUFFIX=gz
- 
- 
- # If the exigrep utility is fed compressed log files, it tries to uncompress
- # them using this command.
- 
--ZCAT_COMMAND=/opt/gnu/bin/zcat
-+ZCAT_COMMAND=@GZCAT@
- 
- 
- # The runtime configuration file: This variable defines where Exim's runtime
-@@ -137,7 +137,7 @@ ZCAT_COMMAND=/opt/gnu/bin/zcat
- # location of all other runtime files and directories can be changed in the
- # runtime configuration file.
- 
--CONFIGURE_FILE=/usr/exim/configure
-+CONFIGURE_FILE=@PKG_SYSCONFDIR@/configure
- 
- 
- # In some installations there may be multiple machines sharing file systems,
-@@ -243,7 +243,7 @@ EXICYCLOG_MAX=10
- # are defaulted in the OS/Makefile-Default file, and can be overridden
- # in local OS-specific make files.
- 
--EXIM_MONITOR=eximon.bin
-+# EXIM_MONITOR=eximon.bin
- 
- 
- # Compiling in support for embedded Perl: If you want to be able to
-@@ -286,7 +286,7 @@ EXIM_MONITOR=eximon.bin
- # "panic", or "reject" to form the final file name. For example, some
- # installations may want something like this:
- 
--# LOG_FILE_PATH=/var/log/exim_%slog
-+LOG_FILE_PATH=/var/log/exim/%slog
- 
- # which results in files with names /var/log/exim_mainlog, etc. The directory
- # in which the log files are placed must exist; Exim does not try to create
-@@ -411,7 +411,7 @@ LOOKUP_LSEARCH=yes
- # the file name, allowing sites that run two separate daemons to distinguish
- # them. Some installations may want something like this
- 
--# PID_FILE_PATH=/var/lock/exim%s.pid
-+PID_FILE_PATH=/var/run/exim%s.pid
- 
- # If PID_FILE_PATH is not defined, Exim writes a file in its spool directory
- # (see SPOOL_DIRECTORY below) with the name "exim-daemon.pid" for the standard
-@@ -460,7 +460,7 @@ ROUTER_QUERYPROGRAM=yes
- # uid and gid.
- 
- # Many installations will want something like this:
--# SPOOL_DIRECTORY=/var/spool/exim
-+SPOOL_DIRECTORY=/var/spool/exim
- 
- # Others may prefer to keep all Exim things under one directory:
- # SPOOL_DIRECTORY=/usr/exim/spool
-@@ -567,7 +567,7 @@ TRANSPORT_SMTP=yes
- # This one is special-purpose, and commonly not required, so do not include
- # it by default.
- 
--# TRANSPORT_LMTP=yes
-+TRANSPORT_LMTP=yes
- 
- 
- # TCP wrappers: If you want to use tcpwrappers from within Exim, uncomment
+--- OS/Makefile-NetBSD.orig	Thu Apr  4 13:56:13 2002
++++ OS/Makefile-NetBSD
+@@ -3,15 +3,31 @@
+ 
+ # Include Makfile.NetBSD-a.out
+ 
+-.if exists(OS/Makefile-NetBSD-a.out)
+-.include "OS/Makefile-NetBSD-a.out"
+-.elif exists(../OS/Makefile-NetBSD-a.out)
+-.include "../OS/Makefile-NetBSD-a.out"
+-.else
+-.include "Makefile.NetBSD-a.out, submit a bug report."
+-.endif
++# Exim: OS-specific make file for NetBSD (a.out binary format)
++
++CHOWN_COMMAND=/usr/sbin/chown
++CFLAGS=-O
++
++HAVE_SA_LEN=YES
++LIBS=-lcrypt
++
++X11=/usr/X11R6
++XINCLUDE=-I$(X11)/include
++XLFLAGS=-L$(X11)/lib
++X11_LD_LIB=$(X11)/lib
++
++EXIWHAT_PS_ARG=-ax
++EXIWHAT_EGREP_ARG='/exim( |$$)'
++EXIWHAT_KILL_ARG=-USR1
++
++# NetBSD always ships with Berkeley DB
++
++USE_DB=yes
++
++# End
++
+ 
+ # NetBSD ELF linker needs a -R flag.
+-XLFLAGS+=-Wl,-R$(X11)/lib/
++#XLFLAGS+=-Wl,-R$(X11)/lib/
+ 
+ # End
diff --git a/mail/exim3/patches/patch-ac b/mail/exim3/patches/patch-ac
index 5945e2524d0..54c48418b34 100644
--- a/mail/exim3/patches/patch-ac
+++ b/mail/exim3/patches/patch-ac
@@ -1,44 +1,13 @@
-$NetBSD: patch-ac,v 1.1.1.1 2003/12/04 04:24:51 grant Exp $
+$NetBSD: patch-ac,v 1.1.1.1.2.1 2004/05/30 08:49:40 grant Exp $
 
---- OS/Makefile-NetBSD.orig	Sat Jul 14 19:09:00 2001
-+++ OS/Makefile-NetBSD	Sat Jul 14 19:14:34 2001
-@@ -3,15 +3,31 @@
- 
- # Include Makfile.NetBSD-a.out
- 
--.if exists(OS/Makefile-NetBSD-a.out)
--.include "OS/Makefile-NetBSD-a.out"
--.elif exists(../OS/Makefile-NetBSD-a.out)
--.include "../OS/Makefile-NetBSD-a.out"
--.else
--.include "Makefile.NetBSD-a.out, submit a bug report."
--.endif
-+# Exim: OS-specific make file for NetBSD (a.out binary format)
-+
-+CHOWN_COMMAND=/usr/sbin/chown
-+CFLAGS=-O
-+
-+HAVE_SA_LEN=YES
-+LIBS=-lcrypt
-+
-+X11=/usr/X11R6
-+XINCLUDE=-I$(X11)/include
-+XLFLAGS=-L$(X11)/lib
-+X11_LD_LIB=$(X11)/lib
-+
-+EXIWHAT_PS_ARG=-ax
-+EXIWHAT_EGREP_ARG='/exim( |$$)'
-+EXIWHAT_KILL_ARG=-USR1
-+
-+# NetBSD always ships with Berkeley DB
-+
-+USE_DB=yes
-+
-+# End
-+
- 
- # NetBSD ELF linker needs a -R flag.
--XLFLAGS+=-Wl,-R$(X11)/lib/
-+#XLFLAGS+=-Wl,-R$(X11)/lib/
- 
- # End
+--- OS/os.h-Darwin.orig	Thu Apr  4 13:56:14 2002
++++ OS/os.h-Darwin
+@@ -1,6 +1,8 @@
+ /* Exim: OS-specific C header file for Darwin (Mac OS X) */
+ 
++/* Darwin 6.8 does not have crypt.h
+ #define CRYPT_H
++*/
+ #define HAVE_MMAP
+ #define HAVE_SYS_MOUNT_H
+ #define SIOCGIFCONF_GIVES_ADDR
diff --git a/mail/exim3/patches/patch-ae b/mail/exim3/patches/patch-ae
index fa7ce978c81..8f0bd07f1fc 100644
--- a/mail/exim3/patches/patch-ae
+++ b/mail/exim3/patches/patch-ae
@@ -1,8 +1,8 @@
-$NetBSD: patch-ae,v 1.1.1.1 2003/12/04 04:24:51 grant Exp $
+$NetBSD: patch-ae,v 1.1.1.1.2.1 2004/05/30 08:50:02 grant Exp $
 
---- src/configure.default.orig	Fri Sep 17 21:19:39 1999
-+++ src/configure.default	Fri Sep 17 21:19:55 1999
-@@ -252,8 +252,8 @@
+--- src/configure.default.orig	Thu Apr  4 13:56:16 2002
++++ src/configure.default
+@@ -298,8 +298,8 @@ end
  
  system_aliases:
    driver = aliasfile
diff --git a/mail/exim3/patches/patch-af b/mail/exim3/patches/patch-af
index 532ba92caf7..d31ccbbcc24 100644
--- a/mail/exim3/patches/patch-af
+++ b/mail/exim3/patches/patch-af
@@ -1,10 +1,6 @@
-$NetBSD: patch-af,v 1.1.1.1 2003/12/04 04:24:51 grant Exp $
+$NetBSD: patch-af,v 1.1.1.1.2.1 2004/05/30 08:50:20 grant Exp $
 
-This patch is from:
-
-	http://www.exim.org/pipermail/exim-announce/2003q3/000094.html
-
---- src/smtp_in.c.orig	2002-04-04 22:56:20.000000000 +1000
+--- src/smtp_in.c.orig	Thu Apr  4 13:56:20 2002
 +++ src/smtp_in.c
 @@ -2021,13 +2021,12 @@ while (done <= 0)
  
diff --git a/mail/exim3/patches/patch-ag b/mail/exim3/patches/patch-ag
index 612bc23f157..a5a7e6ed875 100644
--- a/mail/exim3/patches/patch-ag
+++ b/mail/exim3/patches/patch-ag
@@ -1,13 +1,22 @@
-$NetBSD: patch-ag,v 1.1 2004/01/15 02:05:10 grant Exp $
+$NetBSD: patch-ag,v 1.1.2.1 2004/05/30 08:50:39 grant Exp $
 
---- OS/os.h-Darwin.orig	2002-04-04 22:56:14.000000000 +1000
-+++ OS/os.h-Darwin
-@@ -1,6 +1,8 @@
- /* Exim: OS-specific C header file for Darwin (Mac OS X) */
- 
-+/* Darwin 6.8 does not have crypt.h
- #define CRYPT_H
-+*/
- #define HAVE_MMAP
- #define HAVE_SYS_MOUNT_H
- #define SIOCGIFCONF_GIVES_ADDR
+--- src/verify.c.orig	Thu Apr  4 13:56:21 2002
++++ src/verify.c
+@@ -892,7 +892,7 @@ if (!sender_verify_reject || (rc == DEFE
+ /* Set up the key for the reject hints database, and attempt to open it.
+ If successful, read the record. */
+ 
+-sprintf(buffer, "%s:%.200s", sender_address,
++snprintf(buffer, sizeof(buffer), "%s:%.200s", sender_address,
+   (sender_host_name != NULL)? sender_host_name :
+   (sender_host_address != NULL)? sender_host_address : "");
+ 
+@@ -1182,7 +1182,7 @@ if (sender_verify_callback_error != NULL
+ O_WRONLY) is needed by Berkeley native DB even when reading only. If the
+ database won't open, we can do no more. */
+ 
+-sprintf(buffer, "%s:%.200s", sender_address,
++snprintf(buffer, sizeof(buffer), "%s:%.200s", sender_address,
+   (sender_host_name != NULL)? sender_host_name :
+   (sender_host_address != NULL)? sender_host_address : "");
+