| Age | Commit message (Collapse) | Author | Files | Lines |
|
Version 1.4.4 2022-10-08
* Fix ABI compatibility: unfortunately release 1.4.3 broke ABI
compatibility. This release restores the compatibility with release
1.4.2. Please use it instead of release 1.4.3. In other words: 1.4.2
& 1.4.4 are compatible, while 1.4.3 is compatible with neither 1.4.2
nor 1.4.4.
|
|
Version 1.4.3 2022-09-30
* A C++14 compliant C++ compiler is now required.
* Fix compilation with g++ 11.
* Remove Coremake project files
* Updated the bundled utf8cpp to v3.2.1.
* Fixed several problems in `EbmlBinary:` potential segfault by
writing to a `nullptr`, potential memory leak under certain error
conditions.
* Fixed problems with the generated `pkg-config` files if any of the
installation paths are absolute.
|
|
All checksums have been double-checked against existing RMD160 and
SHA512 hashes
Could not be committed due to merge conflict:
devel/py-traitlets/distinfo
The following distfiles were unfetchable (note: some may be only fetched
conditionally):
./devel/pvs/distinfo pvs-3.2-solaris.tgz
./devel/eclipse/distinfo eclipse-sourceBuild-srcIncluded-3.0.1.zip
|
|
|
|
As described in the gcc 11 porting document[0], some libstdc++
headers no longer include certain headers they don't use.
Patch from upstream.
[0] https://gcc.gnu.org/gcc-11/porting_to.html#header-dep-changes
|
|
Release v1.4.2.
* Fixed several heap overflow bugs in the `ReadData` functions of
various data type classes. This fixes CVE-2021-3405.
|
|
Release v1.4.1
* Fixed a case EbmlMaster::Read where the element returned via
UpperEltFound and FountElt points to a just-deleted element,
causing callers to think the memory returned is valid, potentially
leading to use-after-free/double-free errors. This can happen if
the specific element's Read function throws an exception when
encountering certain invalid data constellations.
|
|
Released v1.4.0.
* Due to breaking ABI the soname version has been bumped to 5.0.0.
* Default symbol visibility is now "hidden", reducing binary size.
* Converted some things pointed out by cppcheck & clang-tidy to
C++11.
* Fixed a lot of issues pointed out by clang-tidy.
* Added a function "ForceNoDefault" in the "EbmlElement" class.
* Added a function "OverwriteData" in the "EbmlElement" class to
complement the existing "OverwriteHead" function.
* Fixed compilation on Windows wrt. winapifamily.h
* Fixed compilation on Haiku.
* A C++11 compliant compiler is now required. Several of its
features are now used in the source.
* EbmlElement::FindNextElement: fixed a buffer overflow on the
stack by one byte when the first byte read had its upper four bits
unset.
* EbmlCrc32: added a explicit assignment operator with default
implementation as an explicit copy constructor exists (implicit
assignment operators are deprecated in such cases).
* When reading binary elements with a size of 0, the element was
skipped by libebml instead of returned to the calling function.
|
|
pkglint --only "https instead of http" -r -F
With manual adjustments afterwards since pkglint 19.4.4 fixed a few
indentations in unrelated lines.
This mainly affects projects hosted at SourceForce, as well as
freedesktop.org, CTAN and GNU.
|
|
v1.3.10:
* When reading binary elements with a size of 0, the element was
skipped by libebml instead of returned to the calling function.
|
|
Released v1.3.9:
* Build system: fixed symbol visibility issue causing linker
failures since 1.3.8.
Released v1.3.8:
* Build system: various fixes to the cmake rules regarding
visibility, naming and building DLLs on Windows.
|
|
v1.3.7:
* Fixed the handling of Unicode codepoints > U+FFFF.
* Fixed building on Windows with cmake.
* Fixed building with gcc >= 7.
|
|
|
|
v1.3.6.
* Converted the build system from autoconf/automake to
cmake. Patches by Github user "evpobr" with fixes by myself.
* Fixed undefined behavior when reading signed integers with
negative values from files (though compilers implemented this the
way we wanted them to already).
* Fixed a small memory leak when reading an element runs into an
I/O exception (e.g. due to having reached the end of the file).
* Fixed the EbmlMaster::GetDataStart() function returning wrong
values for elements with an infinite/unknown size.
* Fixed finding the next element ID when garbage data is
encountered during the scan for the ID.
* Fixed several potential situations where reading child element
data could exceed the parent element's size.
* Added a code of conduct to the project.
|
|
Released v1.3.5.
* The function EbmlMaster::CheckMandatory() will now only return
false if a mandatory element is missing for which there's no
default value in the specifications. This means that callers such
as EbmlMaster::UpdateSize() and by extension EbmlMaster::Render()
will not insist on all mandatory elements being present anymore,
but only those for which there's no default value.
* Added a template function `FindNextChild`. Patch by C.W. Betts.
* Fix reading and EBML element even though the ID was not found within
* Fixed an instance of undefined behavior in
EbmlElement::GetSemantic() due to binding a dereferenced null
pointer to a reference.
* Replaced the outdated address of the Free Software Foundation
with their current one.
|
|
|
|
2016-07-02 Moritz Bunkus <moritz@bunkus.org>
* Released v1.3.4.
2015-11-21 Moritz Bunkus <moritz@bunkus.org>
* EbmlVersion.cpp: in order to enable deterministic builds the
EbmlCodeDate variable has been set to "Unknown" instead of the
date and time of compilation. Patch by Ed Schouten <ed@nuxi.nl>.
2015-11-18 Moritz Bunkus <moritz@bunkus.org>
* libebml_t.h: use C99-style integer typedefs instead of BSD-style
ones. Patch by Ed Schouten <ed@nuxi.nl>.
2015-10-24 Moritz Bunkus <moritz@bunkus.org>
* EbmlBinary.h: add #include <cstdlib> for compilation with clang
and libc++. Patch by Thomas Klausner <wiz@NetBSD.org>.
|
|
|
|
Issues found with existing distfiles:
distfiles/eclipse-sourceBuild-srcIncluded-3.0.1.zip
distfiles/fortran-utils-1.1.tar.gz
distfiles/ivykis-0.39.tar.gz
distfiles/enum-1.11.tar.gz
distfiles/pvs-3.2-libraries.tgz
distfiles/pvs-3.2-linux.tgz
distfiles/pvs-3.2-solaris.tgz
distfiles/pvs-3.2-system.tgz
No changes made to these distinfo files.
Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden). All existing
SHA1 digests retained for now as an audit trail.
|
|
|
|
* Released v1.3.3.
* EbmlMaster::Read(): When the parser encountered a deeply nested
element with an infinite size then a following element of an upper
level was not propagated correctly. Instead the element with the
infinite size was added into the EBML element tree a second time
resulting in memory access after freeing it and multiple attempts
to free the same memory address during destruction. Fixes the
issue reported as Cisco TALOS-CAN-0037.
* EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
access. When reading a EBML variable length integer value a read
access beyond the end of the available buffer was possible if
fewer bytes were available than indicated by the first byte
resulting in a heap information leak.
* EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
access. When reading from a UTF-8 string in which the length
indicated by a UTF-8 character's first byte exceeds the string's
actual number of bytes the parser would access beyond the end of
the string resulting in a heap information leak. Fixes the issue
reported as Cisco TALOS-CAN-0036.
|
|
2015-10-17 Moritz Bunkus <moritz@bunkus.org>
* Released v1.3.2.
2015-08-21 Steve Lhomme <robUx4@gmail.com>
* EbmlElement::FindNextElement(): Handle EOF when reading the
element size properly.
2015-06-15 Steve Lhomme <robUx4@gmail.com
* Disable debug code for builds for the Windows App Store.
2015-06-12 Cristian Morales Vega <reddwarf@opensuse.org>
* Update the license information: use latest official text for the
LGPL.
2015-02-23 Steve Lhomme <robux4@gmail.com>
* EbmlString::ValidateSize(): only allow the same maximum size as
EbmlBinary.
|
|
Ok@ salo
|
|
X.Y.Z+1 updates, bumped the shared library major versions.
Do recursive bump for that.
|
|
2015-01-04 Moritz Bunkus <moritz@bunkus.org>
* Released v1.3.1.
* EbmlElement::Render(): doesn't catch exceptions anymore. Instead
exceptions generated from the IOCallback class (e.g. if a write
failed) are propagated to the caller.
2014-12-21 Moritz Bunkus <moritz@bunkus.org>
* build system: switched the build system from hand-crafted
Makefiles to an autoconf/automake-based system. A pkg-config file
will be installed as well; its name is »libebml«. Patch by Jan
Engelhardt <jengelh@inai.de>.
2014-12-20 Moritz Bunkus <moritz@bunkus.org>
* EbmlMaster::Read(): when reading with SCOPE_ALL_DATA only those
elements that could successfully be read will be kept
(e.g. defective block groups will be dropped).
2014-12-19 Moritz Bunkus <moritz@bunkus.org>
* EbmlMemoryStream: add a new class for safe memory access that
throws exception on failures.
2014-12-18 Moritz Bunkus <moritz@bunkus.org>
* EbmlMaster: Fixed read() trying to calculate the end position of
elements with an unknown size. This avoids endless loops and
assertions in certain cases. See https://trac.bunkus.org/ticket/1089
|
|
|
|
|
|
changes:
several new API functions like GetValue()/SetValue(), new constructors,
and a couple of bug fixes like calculating dates with 64bit integers
preventing overflows in certain situations
|
|
|
|
changes: bugfixes, minor improvements
|
|
|
|
changes:
-header cleanup
-bugfixes
|
|
changes:
-API extensions
-bugfixes
|
|
|
|
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
|
|
Fixes for gcc 4.3.
Source code cleanup.
Build fixes.
|
|
this will make it usable in dynamically loaded plugins,
bump PKGREVISION
|
|
|
|
Changes:
- minor bugfixes
|
|
|
|
and add a new helper target and script, "show-buildlink3", that outputs
a listing of the buildlink3.mk files included as well as the depth at
which they are included.
For example, "make show-buildlink3" in fonts/Xft2 displays:
zlib
fontconfig
iconv
zlib
freetype2
expat
freetype2
Xrender
renderproto
|
|
of the order in which buildlink3.mk files are (recursively) included
by a package Makefile.
|
|
that they look nicer.
|
|
RECOMMENDED is removed. It becomes ABI_DEPENDS.
BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo.
BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo.
BUILDLINK_DEPENDS does not change.
IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS
which defaults to "yes".
Added to obsolete.mk checking for IGNORE_RECOMMENDED.
I did not manually go through and fix any aesthetic tab/spacing issues.
I have tested the above patch on DragonFly building and packaging
subversion and pkglint and their many dependencies.
I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I
have used IGNORE_RECOMMENDED for a long time). I have been an active user
of IGNORE_RECOMMENDED since it was available.
As suggested, I removed the documentation sentences suggesting bumping for
"security" issues.
As discussed on tech-pkg.
I will commit to revbump, pkglint, pkg_install, createbuildlink separately.
Note that if you use wip, it will fail! I will commit to pkgsrc-wip
later (within day).
|
|
|
|
Changes:
- various bugfixes.
|
|
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some
other changes are outlined in
http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
|
|
|
|
with at least icc and sunpro.
|
|
|