Sat Aug 24 16:12:24 2013 UTC ()
Update ipv6-toolkit to version 1.4 from 1.3.4

Pkgsrc changes:
+ quieten warnings from gcc 4.5.3 about uninitialised variables

Distribution changes:
SI6 Networks' IPv6 Toolkit v1.4 release

   * frag6: Fixed the flooding option
     Fixed the fragment size used when employing the flooding option. It was
     prevously sending fragment sizes that where not a multiple of eight, and
     hence these fragments were dropped.

   * scan6: Added support for 64-bit encoding of IPv4 addresses
     Option "--tgt-ipv4" was augmented to support both encodings (32 bit
     and 64 bit) of embedded IPv4 addresses.

   * tcp6: Fixed response to Neighbor Solicitations
     tcp6 was not responding to incomming Neighbor Solicitations. Hence, when
     packets were sent from spoofed addresses, tcp6 would never receive the
     response packets, because the NSs sent by the local router or target node
     would never be responded.

   * tcp6: Added support for TCP Window-based attacks
     tcp6 can now close the window after sending an app-layer command, and
     also "modulate" the TCP window to circumvent trivial mitigations for these
     attacks ("--window-mode" and "--win-modulate" options).

   * tcp6: Support for multiple connection-establishment types
     tcp6 can now cause e.g. TCP simultaneous opens (see the "--open-mode"
     option).

   * tcp6: Support for multiple connection-termination types
     tcp6 can now perform multiple connection-termination types (see the
     "--close-mode" option).

   * tcp6: Support for sending application layer requests
     tcp6 can now send application-layer requests with the "--data" option.

   * Many improvements to the manual pages.
     Fixed the troff encoding of many manual pages. Added ipv6toolkit(7), that
     describes a general description of the toolkit.

   * All: Fixed bug in link-layer destination address selection
     Tools now try to find a local router or perform Neighbor Discovery only
     when necessary (i.e., underlying link-layer is *not* loopback or tunnel,
     destination address is *not* link-local, and a link-layer destination
     address has *not* been specified).

   * All: Fixed bug in option handling
     Incorrect data type was used for the return value of getopt_long(), thus
     leading to problems in some architectures.

   * All: Fixed a number of issues with pcap_next_ex()
     The timeout parameter of pcap_next_ex() is now based on the platform (the
     previous constant value had different semantics in different platforms).
     Additionally, handle the case where pcap_next_ex() returns no packets.

   * All: General improvements and clean-up
     The development process now includes building the toolkit with the clang
     compiler (in addition to gcc), which has lead to the identification of a
     number of issues.

   * All: Improved support for building the toolkit.
     The toolkit now contains one makefile for pmake, and another for GNU make.
     Added support for the DESTDIR variable. Appropriate paths are selected
     based on the value of a number of variables. Configuration file is
     dynamically generated, with the right path to the oui.txt file.


(agc)
diff -r1.6 -r1.7 pkgsrc/security/ipv6-toolkit/Makefile
diff -r1.6 -r1.7 pkgsrc/security/ipv6-toolkit/distinfo
diff -r1.1 -r1.2 pkgsrc/security/ipv6-toolkit/patches/patch-Makefile
diff -r0 -r1.1 pkgsrc/security/ipv6-toolkit/patches/patch-tools__tcp6.c

cvs diff -r1.6 -r1.7 pkgsrc/security/ipv6-toolkit/Makefile (expand / switch to unified diff)

--- pkgsrc/security/ipv6-toolkit/Makefile 2013/04/18 04:23:17 1.6
+++ pkgsrc/security/ipv6-toolkit/Makefile 2013/08/24 16:12:24 1.7
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.6 2013/04/18 04:23:17 agc Exp $ 1# $NetBSD: Makefile,v 1.7 2013/08/24 16:12:24 agc Exp $
2 2
3DISTNAME= ipv6-toolkit-v1.3.4 3DISTNAME= ipv6toolkit-v1.4
4PKGNAME= ${DISTNAME:C/-v/-/} 4PKGNAME= ${DISTNAME:C/-v/-/}
5CATEGORIES= security net 5CATEGORIES= security net
6MASTER_SITES= http://www.si6networks.com/tools/ipv6toolkit/ 6MASTER_SITES= http://www.si6networks.com/tools/ipv6toolkit/
7 7
8MAINTAINER= agc@NetBSD.org 8MAINTAINER= agc@NetBSD.org
9HOMEPAGE= http://www.si6networks.com/tools/ipv6toolkit 9HOMEPAGE= http://www.si6networks.com/tools/ipv6toolkit
10COMMENT= IPv6 security assessment and troubleshooting tool 10COMMENT= IPv6 security assessment and troubleshooting tool
11LICENSE= gnu-gpl-v3 11LICENSE= gnu-gpl-v3
12 12
13AUTO_MKDIRS= yes 13AUTO_MKDIRS= yes
14 14
15BINS= address6 flow6 frag6 icmp6 jumbo6 na6 ni6 ns6 ra6 rd6 rs6 scan6 tcp6 15BINS= address6 flow6 frag6 icmp6 jumbo6 na6 ni6 ns6 ra6 rd6 rs6 scan6 tcp6
16MAN1= address6.1 flow6.1 frag6.1 icmp6.1 jumbo6.1 na6.1 ni6.1 ns6.1 16MAN1= address6.1 flow6.1 frag6.1 icmp6.1 jumbo6.1 na6.1 ni6.1 ns6.1

cvs diff -r1.6 -r1.7 pkgsrc/security/ipv6-toolkit/distinfo (expand / switch to unified diff)

--- pkgsrc/security/ipv6-toolkit/distinfo 2013/05/11 21:15:55 1.6
+++ pkgsrc/security/ipv6-toolkit/distinfo 2013/08/24 16:12:24 1.7
@@ -1,7 +1,8 @@ @@ -1,7 +1,8 @@
1$NetBSD: distinfo,v 1.6 2013/05/11 21:15:55 agc Exp $ 1$NetBSD: distinfo,v 1.7 2013/08/24 16:12:24 agc Exp $
2 2
3SHA1 (ipv6-toolkit-v1.3.4.tar.gz) = c9428aff0de23960de1b3385caac689e25b06aab 3SHA1 (ipv6toolkit-v1.4.tar.gz) = 0120041b7f844f49ef6b516e8b1ffbeeb1427788
4RMD160 (ipv6-toolkit-v1.3.4.tar.gz) = 22c26424d4af075bc23c35ea85343d706af32b25 4RMD160 (ipv6toolkit-v1.4.tar.gz) = 32cb518551e0a1898e5400b9b1468658617ce83b
5Size (ipv6-toolkit-v1.3.4.tar.gz) = 1052088 bytes 5Size (ipv6toolkit-v1.4.tar.gz) = 481920 bytes
6SHA1 (patch-Makefile) = 2b5938a09f8daf3183d08c41bc73412cf31221cf 6SHA1 (patch-Makefile) = 217b9e8cf7b8478773bbc7ee8971d1fccfde2909
7SHA1 (patch-aa) = 594fb41b77258cae0d3ba81a78144c312728faa8 7SHA1 (patch-aa) = 594fb41b77258cae0d3ba81a78144c312728faa8
 8SHA1 (patch-tools__tcp6.c) = 72363dc25ebea5acb7dedd91a8fda1abad5242ad

cvs diff -r1.1 -r1.2 pkgsrc/security/ipv6-toolkit/patches/patch-Makefile (expand / switch to unified diff)

--- pkgsrc/security/ipv6-toolkit/patches/patch-Makefile 2013/05/11 21:15:55 1.1
+++ pkgsrc/security/ipv6-toolkit/patches/patch-Makefile 2013/08/24 16:12:24 1.2
@@ -1,15 +1,15 @@ @@ -1,15 +1,15 @@
1$NetBSD: patch-Makefile,v 1.1 2013/05/11 21:15:55 agc Exp $ 1$NetBSD: patch-Makefile,v 1.2 2013/08/24 16:12:24 agc Exp $
2 2
3Take ${CC} from environment 3Take ${CC} from environment
4 4
5--- Makefile 2013/05/11 20:47:52 1.1 5--- Makefile 2013/05/11 20:47:52 1.1
6+++ Makefile 2013/05/11 20:48:02 6+++ Makefile 2013/05/11 20:48:02
7@@ -1,7 +1,7 @@ 7@@ -18,7 +18,7 @@
8 # 8 # typically employed by package developers.
9 # SI6 Networks' IPv6 toolkit Makefile 9
10 # 10
11-CC= gcc 11-CC= gcc
12+CC?= gcc 12+CC?= gcc
13 CFLAGS+= -Wall 13 CFLAGS+= -Wall
14 LDFLAGS+= -lpcap -lm 14 LDFLAGS+= -lpcap -lm
15 MANPATH= /usr/share/man 15

File Added: pkgsrc/security/ipv6-toolkit/patches/Attic/patch-tools__tcp6.c
$NetBSD: patch-tools__tcp6.c,v 1.1 2013/08/24 16:12:24 agc Exp $

Avoid uninitialised warnings

--- tools/tcp6.c	2013/08/22 16:58:54	1.1
+++ tools/tcp6.c	2013/08/22 17:00:42
@@ -286,6 +286,9 @@
 	hoplimit=255;
 	init_iface_data(&idata);
 
+	pktinterval = 0;
+	memset(&lastprobe, 0x0, sizeof(lastprobe));
+
 	while((r=getopt_long(argc, argv, shortopts, longopts, NULL)) != -1) {
 		option= r;