Re: Problem applying Security Advisory 2007-003 fix *SOLVED*

"David H. Gutteridge" <[email protected]> wrote:

> > > The macro PORT_NONBLOCK isn't getting defined anywhere for some
> > > reason.  What version of dist/bind/lib/bind/configure.in is in your 
> >tree?
> ...
> >from my copy of /usr/src/dist/bind/lib/bind/configure.in:
> >...
> >AC_REVISION($Revision: 1.1.1.2.4.1 $)
> >
> >AC_INIT(resolv/herror.c)
> >AC_PREREQ(2.13)
> >...
> >PORT_NONBLOCK="#define PORT_NONBLOCK O_NONBLOCK"
> >...
> >
> >So it is getting defined here but not coming into the build process prior
> >to /usr/src/dist/bind/lib/isc/unix/entropy.c .
>
> Ugh.  I think I have the answer.  There are also make files for
> BIND in the tree under usr.sbin/bind.  When updating your source
> tree try bumping those files too.  There appears to be a relevant
> file here: usr.sbin/bind/include/config.h

I went ahead and just updated all of /usr/src/usr.sbin/bind and
- BINGO! - it built!

So to recap (as root):
# cd ../src
# cvs update -r <branch> -dP usr.sbin/bind dist/bind
# cd usr.sbin/bind
# make USETOOLS=no cleandir dependall
# make USETOOLS=no install


> I would recommend you PR this so that the NetBSD developers know
> there's a problem here.  (At a minimum, their security advisory appears
> incomplete for the 3.0 branch.)  If my latest suggestion above doesn't
> work, you'll probably be able to find someone more helpful than me
> through that process.  ;)

I'll go ahead and file a PR on this.

Thanks for solving this mystery!

Jeff