openbsd/src/usr.bin/nc/netcat.c, branch OPENBSD_7_9 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2026-02-23T16:47:07+00:00 nc(1) has the more crazy unveil + pledge configuration based upon 2026-02-23T16:47:07+00:00 deraadt 2026-02-23T16:47:07+00:00 urn:sha1:3e8e3350f28d719a890f42302d9a6ea79c6ccd11 argument flags. I think this correctly replaces "tmppath" with an unveil. sort the "va" keyword to be in alpha order, some programs use bsearch 2025-12-06T09:48:30+00:00 phessler 2025-12-06T09:48:30+00:00 urn:sha1:f4f87fb91b4a97eaa42c01cc9189912b2d9c45d7 noticed by deraadt@ allow network programs select DSCP_VA for network ToS 2025-12-05T17:48:47+00:00 phessler 2025-12-05T17:48:47+00:00 urn:sha1:b1458c6502782b95b371125d4c54ebdfe0a47671 OK stsp@ use strtonum() instead of atoi(), and error out for bad numbers 2025-10-11T15:46:06+00:00 deraadt 2025-10-11T15:46:06+00:00 urn:sha1:f690640165ccfa300db43b4a8e0d48a2ac660993 This generates a host-order number, so the ntohs() for getservbyport() was wrong, that should always have been htons(). The transform is the same, but misleading. ok tb nc: add ALPN TLS option, so you can specify -T alpn=value 2025-06-24T13:37:11+00:00 tb 2025-06-24T13:37:11+00:00 urn:sha1:ac936dba53aeeeb422a85a12f18f1bfb94c603f7 From David Leadbeater with a report_tls tweak by me ok jsing sort process_tls_opt[] 2025-06-24T13:27:28+00:00 tb 2025-06-24T13:27:28+00:00 urn:sha1:04788fcca2c491e08554f41631e4acb521039748 requested by jsing add SOCKS4A to help text 2025-05-21T08:46:42+00:00 djm 2025-05-21T08:46:42+00:00 urn:sha1:90e88c12b98a159dbce4ca3352ec5a9d8ddabed9 add SOCKS4A support to nc(1)'s proxy (-X) mode 2025-05-21T08:41:35+00:00 djm 2025-05-21T08:41:35+00:00 urn:sha1:17435627329f6bb33c752a3bfef47a2a84dcebd0 SOCKS4A is a fairly obscure extension to the olde SOCKS4 protocol that allows passing the destination as a string rather than a literal IPv4 address, which is the only thing that vanilla SOCKS4 supports. The motivation for adding something so niche is to test the SOCKS4A server code in ssh(1)'s dynamic forwarding (-D) support. ok tb@ nc: disallow -T with = when arguments are not key=value pairs 2025-05-14T08:56:41+00:00 tb 2025-05-14T08:56:41+00:00 urn:sha1:547135fd10dd231b2c7f80009d84a27996b6f245 From Ross L Richardson netcat: drop caddr_t cast. It's not needed and not portable. 2024-11-02T17:19:27+00:00 tb 2024-11-02T17:19:27+00:00 urn:sha1:1d028681eeb6772f36ad5e114e7ac9de99855b41 From Jonas 'Sortie' Termansen