Merge psp-deb1.ntp.org:/home/perlinger/ntp-stable-3414

into  psp-deb1.ntp.org:/net/nfs1/nfs/home/stenn/ntp-stable-3414

bk: 59e04101KiW0UXwpg2NYNh3jD0iKCQ

diff --cc ChangeLog
index 7ee928faa8699b91c7d2c33f7e8b8dd6d3458c15,52248958bab2b7125017d3c6f012624dacb33a7c..2dff32613b3832eab56d40774f8e0307e8db8485
--- 1/ChangeLog
--- 2/ChangeLog
+++ b/ChangeLog
@@@ -1,36 -1,10 +1,38 @@@
  ---
 - - initial patch by <stenn@ntp.org>, extended by <perlinger@ntp.org>
 +
+ * [Sec 3414] ntpq: decodearr() can write beyond its 'buf' limits
++  - initial patch by <stenn@ntp.org>, extended by <perlinger@ntp.org>
 +* [Sec 3412] ctl_getitem(): Don't compare names past NUL. <perlinger@ntp.org>
 +* [Bug 3411] problem about SIGN(6) packet handling for ntp-4.2.8p10
 +  - raised receive buffer size to 1200 <perlinger@ntp.org>
 +* [Bug 3408] refclock_jjy.c: Avoid a wrong report of the coverity static
 +  analysis tool. <abe@ntp.org>
 +* [Bug 3399] NTP: linker error in 4.2.8p10 during Linux cross-compilation
 +  - initial patch by timeflies@mail2tor.com  <perlinger@ntp.org>
 +* [Bug 3398] tests fail with core dump <perlinger@ntp.org>
 +  - patch contributed by Alexander Bluhm
 +* [Bug 3397] ctl_putstr() asserts that data fits in its buffer
 +  rework of formatting & data transfer stuff in 'ntp_control.c'
 +  avoids unecessary buffers and size limitations. <perlinger@ntp.org>
 +* [Bug 3394] Leap second deletion does not work on ntpd clients
 +  - fixed handling of dynamic deletion w/o leap file <perlinger@ntp.org>
 +* [Bug 3391] ntpd segfaults on startup due to small warmup thread stack size
 +  - increased mimimum stack size to 32kB <perlinger@ntp.org>
 +* [Bug 3367] Faulty LinuxPPS NMEA clock support in 4.2.8 <perlinger@ntp.org>
 +  - reverted handling of PPS kernel consumer to 4.2.6 behavior
 +* [Bug 3365] Updates driver40(-ja).html and miscopt.html <abe@ntp.org>
 +* [Bug 3358] Spurious KoD log messages in .INIT. phase.  HStenn.
 +* [Bug 3016] wrong error position reported for bad ":config pool"
 +  - fixed location counter & ntpq output <perlinger@ntp.org>
 +* [Bug 2737] Wrong phone number listed for USNO. ntp-bugs@bodosom.net,
 +  perlinger@ntp.org
 +* [Bug 2557] Fix Thunderbolt init. ntp-bugs@bodosom.net, perlinger@ntp.
 +* [Bug 948] Trustedkey config directive leaks memory. <perlinger@ntp.org>
 +* Use strlcpy() to copy strings, not memcpy().  HStenn.
 +* test_ntp_scanner_LDADD needs ntpd/ntp_io.o.  HStenn.
  
  ---
 -(4.2.8p10-win-beta1) 2017/03/21 Released by Harlan Stenn <stenn@ntp.org>
 -(4.2.8p10)
 +(4.2.8p10) 2017/03/21 Released by Harlan Stenn <stenn@ntp.org>
  
  * [Sec 3389] NTP-01-016: Denial of Service via Malformed Config
    (Pentest report 01.2017) <perlinger@ntp.org>