Rolf Eike Beer

get rid of "compile" command

4

Let make handle all this. This also allows that one can directly call make CC=something CFLAGS="-O2 -Wall" This needs a "recent" version of GNU make (>= 4) or BSD make...

This flag prevents that descriptors are shared beyond an ```exec*()``` call. Setting it via ```fcntl()``` on pipes or requesting it directly in the wrappers in ```open.h``` would remove the burden...

Many platforms support adding additional restrictions from the binary to itself or it's childs. Examples: * OpenBSD has [unveil](https://man.openbsd.org/unveil.2) * FreeBSD has capsicum * Linux has things from SELinux and...

Add configure script

1

Fixes #9

Add support for out-of-tree build

1

Something like ```shell mkdir build cd build make -f ../Makefile ``` This helps having parallel things and avoids things like TARGETS alltogether.

Stop redeclaring system functions

6

We should really include and friends and get rid of all the handwritten forward declarations. I don't think anyone remotely sane should care about SunOS or equally outdated system compatibility...

get rid of str_len()

4

strlen() is one of the functions that a compiler usually optimizes away, given much more efficient implementations can be done on todays SIMD processors. The old implementation uses loop unrolling,...

**Change Type Requested** Update **CVE id number** CVE-2022-24122 **References** https://github.com/gregkh/linux/commit/348a8501e6029f9308ea7675edfa645b5e669c9e

**Change Type Requested** Update **CVE id number** CVE-2022-1116 **References** Breaks: https://github.com/gregkh/linux/commit/cac68d12c531aa3010509a5a55a5dfd18dedaa80 Fixes: https://github.com/gregkh/linux/commit/1a623d361ffe5cecd4244a02f449528416360038 **Additional context** Both commits are only in stable-5.4.y, the former as a special version of 2 other...

**Change Type Requested** Remove/Update **CVE id number** CVE-2021-0695 **References** https://source.android.com/security/bulletin/2021-09-01 https://android.googlesource.com/kernel/common/+/2398e650c58a6f4877dafce649188290f6e3b4f5 **Additional context** The problem affects the file [net/netfilter/xt_qtaguid.c](https://android.googlesource.com/kernel/common/+log/21dd5d77181aa377e8c769bfe96fad9c0e2459f3/net/netfilter/xt_qtaguid.c), which exists only in Android kernels.