summaryrefslogtreecommitdiff
path: root/security/libtasn1
AgeCommit message (Collapse)AuthorFilesLines
2016-06-22Updated libtasn1 to 4.8. Security update.wiz3-8/+9
* Noteworthy changes in release 4.8 (released 2016-04-11) [stable] - Fixes to avoid reliance on C undefined behavior. - Fixes to avoid an infinite recursion when decoding without the ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq. - Combined all the BER octet string decoding functions to a single one based on asn1_decode_simple_ber(). * Noteworthy changes in release 4.7 (released 2015-09-14) [stable] - Fixed regression introduced in the decoding of multi-byte tags fix. * Noteworthy changes in release 4.6 (released 2015-09-05) [stable] - Allow decoding OCTET STRINGs with multi-byte tags. - API and ABI changes since last version: asn1_get_object_id_der: New function
2016-02-26Use OPSYSVARS.jperkin1-7/+3
2015-11-04Add SHA512 digests for distfiles for security categoryagc1-1/+2
Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-04-30Update to 4.5:wiz2-6/+6
* Noteworthy changes in release 4.5 (released 2015-04-29) [stable] - Corrected an invalid memory access in octet string decoding. Reported by Hanno Böck.
2015-03-29Update to 4.4, security release.wiz3-7/+8
* Noteworthy changes in release 4.4 (released 2015-03-29) [stable] - Corrected a two-byte stack overflow in asn1_der_decoding. Reported by Hanno Böck. * Noteworthy changes in release 4.3 (released 2015-03-09) [stable] - Added asn1_decode_simple_ber()
2014-10-10Changes 4.2:adam3-7/+9
- Added sanity checks in the decoding of time when ASN1_DECODE_FLAG_STRICT_DER is used. - Fixes in the decoding of OCTET STRING when close to the end of the structure.
2014-10-09Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles.wiz1-3/+1
2014-06-02Changes 3.6:adam2-6/+6
- Corrected an off-by-one error in ASN.1 DER tag decoding. - Several improvements and new safety checks on DER decoding; issues found using Codenomicon TLS test suite. - Marked asn1_der_decoding_element() as deprecated. Use asn1_der_decoding() instead.
2014-05-03Changes 3.5:adam3-8/+9
- Correctly handle decoding of recursive CHOICE options. - Allow deleting elements of SET OF. - Several small bug fixes found by coverity. - Code improvements
2013-07-04Update to 3.1:wiz3-9/+10
* Noteworthy changes in release 3.1 (released 2012-11-24) [stable] - Completed rename of types: ASN1_ARRAY_TYPE -> asn1_static_node (was asn1_static_node_t) - Added new types: VisibleString, NumericString, IA5String, TeletexString, PrintableString, UniversalString, BMPString, UTF8String. When re-defined a warning is being print instead of failing. - Parser outputs more detailed syntax error messages. - Added asn1_decode_simple_der() and asn1_encode_simple_der(). - Added asn1_read_value_type() to return value and type. - Introduced ASN1_ETYPE_UTC_TIME and ASN1_ETYPE_GENERALIZED_TIME * Noteworthy changes in release 3.0 (2012-10-28) [stable] - Added tool in tests/ to benchmark X.509 structure decoding. - Added asn1_read_node_value() to obtain a node's value. - Optimizations in internal tree allocation. - Optimizations in tree search. - libtasn1.h no longer exports internal structures. - Types were renamed for consistency: ASN1_DATA_NODE -> asn1_data_node_st ASN1_ARRAY_TYPE -> asn1_static_node ASN1_TYPE -> asn1_node ASN1_TYPE_EMPTY -> NULL static_struct_asn -> asn1_static_node_st node_asn_struct -> asn1_node_st node_asn -> asn1_node_st (the old types are still available as definitions)
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-2/+1
2012-10-02Update to 2.14:wiz3-7/+8
* Noteworthy changes in release 2.14 (2012-09-24) [stable] - Added asn1_read_node_value() to obtain a node's value. This is to deprecate the export of the node_asn internal structure for the upcoming 3.x release. The ASN1_DATA_NODE type and the ASN1_ETYPE_* constants were added to support the new function.
2012-06-03Update to 2.13:wiz2-6/+6
* Noteworthy changes in release 2.13 (2012-05-31) [stable] - Updated fix for DER decoding issue to not depend on specific compilers. - Updated DER decoding check to apply to short form integers as well.
2012-03-20Update to 2.12:wiz2-6/+6
* Noteworthy changes in release 2.12 (2012-03-19) [stable] - Cleanup license headers. - build: Update gnulib files. - Corrected DER decoding issue (reported by Matthew Hall). Added self check to detect the problem, see tests/Test_overflow.c. This problem can lead to at least remotely triggered crashes, see further analysis on the libtasn1 mailing list.
2011-11-30Update to 2.11:wiz2-6/+6
* Noteworthy changes in release 2.11 (2011-11-25) [stable] - qa: Now builds without compiler warnings with Solaris CC. - qa: Added clang analysis. Fixed cyclomatic complexity output. - tests: Added self-test of bit string functions. - build: Added windows/libtasn14win.mk rules to produce Windows binaries. - build: Don't hard code path to perl in doc/gdoc. - Various minor fixes.
2011-10-30update to 2.10drochner2-6/+6
changes: minor fixes and cleanup
2010-12-12Update to 2.9:wiz2-6/+6
* Noteworthy changes in release 2.9 (2010-12-06) [stable] - tests: Link to gnulib to avoid build error related to 'rpl_ftello' on Solaris. Reported by Dagobert Michelsen. - doc: Fix bug reporting address to point at help-libtasn1@gnu.org. - doc: Fix Returns: documentation in Texinfo. Reported by Jeffrey Walton. - build: Update gnulib files.
2010-10-16Update to 2.8:wiz2-6/+6
* Noteworthy changes in release 2.8 (2010-09-25) [stable] - Update gnulib files. - Use Libtool 2.2.10 to ease MinGW64 builds.
2010-06-15Remove patch-aa, upstream's Simon Josefsson said:wiz2-17/+1
The patch looks wrong to me, though, because stdint.h should be generated in lib/gllib/ if the system does not have it (or if it is not correct), and the -I's should make the code find the local file instead. Thus, the code should be able to unconditionally include the header file.
2010-06-05Update to 2.7:wiz2-6/+6
* Noteworthy changes in release 2.7 (2010-05-20) [stable] - Doc: Build a PDF manual using GTK-PDC. - Doc: Fix of asn1_check_version, documentation was missing from last release. - Build: Avoid warnings about ignored visibility attributes on Windows.
2010-05-02Remove an old Mac OS X build fix which now breaks the build.tron1-8/+2
2010-05-02Update to 2.6:wiz2-6/+6
* Noteworthy changes in release 2.6 (2010-04-20) [stable] - Fix build failure on platforms without support for GNU LD version scripts. - libtasn1: Simplified implementation of asn1_check_version. - tests: Improved self-checks. - Update gnulib files, fix many syntax-check nits, indent code, fix license templates.
2010-04-13update to 2.5drochner2-6/+6
changes: -Improve GTK-DOC comments -Updated gnulib files
2010-01-20Update to 2.4:wiz2-6/+6
* Noteworthy changes in release 2.4 (2010-01-18) [stable] - Doc fixes. - Updated gnulib files. - Clean up copyright notices.
2009-08-09Update to 2.3. Update HOMEPAGE and MASTER_SITES. Set packager information.wiz2-10/+12
* Noteworthy changes in release 2.3 (2009-07-29) [stable] - Libtasn1 is now an official GNU project. - Solve build problem on Tru64 related to TRUE/FALSE. - More careful decoding of OIDs. - Fixed warning in ASN1.y. - Use "Software libraries" info dircategory. - Drop GPL/LGPL copies from the manual (not needed there). - New configure parameters to set packaging specific information. The parameters are --with-packager, --with-packager-version, and --with-packager-bug-reports. See <http://article.gmane.org/gmane.comp.lib.gnulib.bugs/17791> for more details.
2009-07-18Update to 2.2. Set LICENSE.wiz2-7/+7
Version 2.2 (released 2009-05-20) - Change how the ASN1_API decorator is used in libtasn1.h, for GTK-DOC. - Changed license of libtasn1.pc from GPLv3+ to LGPLv2.1+. Reported by Jeff Cai <Jeff.Cai@Sun.COM>. - Building with many warning flags now requires --enable-gcc-warnings. - Some warnings fixed.
2009-05-19Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENTwiz1-2/+1
block). Uncomment some commented out LICENSE lines while here.
2009-04-20Update to 2.1:wiz3-9/+9
Version 2.1 (released 2009-04-17) - Fix compilation failure on platforms that can't generate empty archives, e.g., Mac OS X. Reported by David Reiser <dbreiser@gmail.com>. Version 2.0 (released 2009-04-13) - Optimized tree generation. - ASN1 parser code re-generated using Bison 2.4.1. - Build with more warning flags. Many compiler warnings fixed. - Compiled with -fvisibility=hidden by default if supported. See http://gcc.gnu.org/wiki/Visibility - The libtasn1-config tool has been removed. For application developers, please stop using libtasn1-config for finding libtasn1, use proper autoconf checks or pkg-config instead. For users that need a libtasn1 that provides a libtasn1-config script (for use with older applications), use libtasn1 v1.x instead. Version 1.x is still supported.
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2009-02-02Fix build under Mac OS X:tron1-3/+9
The GNU library ends up being empty and "ar" complains if you try to create an archive. Simply skip the directory during the build to avoid this.
2009-01-31Changes 1.8:adam2-6/+6
* Fix crlf self-test under Mingw+Wine. * Fix build problems on platforms that lack stdint.h.
2008-11-24Changes 1.7:adam3-11/+12
- Add libtasn1-config for compatibility. Please stop use it as it will disappear in v2.0! Use standard AC_CHECK_FUNCS autoconf tests or pkg-config instead. - Read PKCS-12 blob as binary file, fixes self-tests under Mingw. - Fix use of __attribute__ ((deprecated)) to work on non-GCC. Changes 1.6: - Fixed namespace violation for MAX_NAME_SIZE and MAX_ERROR_DESCRIPTION_SIZE. The new names are ASN1_MAX_NAME_SIZE and ASN1_MAX_ERROR_DESCRIPTION_SIZE. - Fixed namespace violation for libtasn1_perror and libtasn1_strerror. The new names are asn1_perror and asn1_strerror. - Fix namespace violation for LIBASN1_VERSION. The new name is ASN1_VERSION. - Decoder can now decode BER encoded octet strings. - doc: Change license on the manual to GFDLv1.3+. - doc: Sync gdoc script with GnuTLS, changes license on man-pages to GAP. - doc: Improve gtk-doc manual. - Assumes system has strdup and string.h. - Remove libtasn1-config and libtasn1.m4, use standard AC_CHECK_FUNCS autoconf tests or pkg-config instead. - Change detection of when to use a linker version script, use --enable-ld-version-script or --disable-ld-version-script to override auto-detection logic.
2008-10-20The HTTP MASTER_SITES entry is no longer available, and has a text filedsainty1-2/+2
indicating that ftp://ftp.gnu.org/pub/gnu/gnutls/ should be used instead. The replacement site also supports HTTP, so make it our HTTP source.
2008-10-13Changes 1.5:adam2-7/+7
- Update gnulib files. - Fix memory leaks.
2008-04-30Add patch to conditionally include <stdint.h> based on the symbolshannonjr2-1/+17
HAVE_STDINT_H generated by configure. This is required for compilation on Solaris 9.
2008-04-29Update to 1.4:wiz2-6/+6
Version 1.4 (released 2008-04-21) - Update gnulib files. - Replace uses of alloca with malloc.
2008-03-04Update to 1.3:wiz2-6/+7
Version 1.3 (released 2008-02-01) - Handle 'INTEGER { ... } (a..b)' regression. Revert parts of earlier fix. asn1Parser can now again parse src/pkix.asn1. The ASN1.c file was generated using Bison 2.3. - Move examples from src/ to new directory examples/. - Duplicate copy of divergated pkix.asn removed. - Merge unnecessary lib/defines.h into lib/int.h. - Configure no longer tries to use gcc -pipe. - Update gnulib files. - Fix mem leak in self-test. Version 1.2 (released 2007-12-10) - Update gnulib files. Version 1.1 (released 2007-08-31) - Fix bug that made asn1_check_version believe that 1.0 is older than 0.3.10. Version 1.0 (released 2007-08-31) - The self-tests, command line tools and build infrastructure have been re-licensed from GPLv2 to GPLv3. - Doc fixes. - Update gnulib files. Version 0.3.10 (released 2007-05-25) - Update gnulib files.
2007-12-02Remove Ex-MASTER_SITEs. From Zafer Aydogan.wiz1-4/+2
2007-03-08Update to 0.3.9:wiz2-6/+6
Version 0.3.9 (released 2007-03-02) - In generated code, config.h is pulled in if HAVE_CONFIG_H. - Development changes: changed from CVS to GIT as an experiment. I push my changes to <http://repo.or.cz/w/libtasn1.git>. - Autoconf 2.61 and automake 1.10 is required. Version 0.3.8 (released 2006-11-16) - Fix reading of binary files in asn1Decoding, for Windows. Version 0.3.7 (released 2006-10-19) - When asn1_der_coding encoded a TYPE_NULL and the output buffer is NULL, it would not increment the counter properly, so the size of the required buffer would be off by one. Fixed. Reported by Stephen Wrobleski <steve@localtoast.org>. - Fix configure to respect user-definable flags. Reported by "Diego 'Flameeyes' Pettenò" <flameeyes@gentoo.org>. - The --help and --version outputs from the tools have been improved. Version 0.3.6 (released 2006-08-13) - Fix man pages to use \- instead of - for negative signs (as in "-1"). - Add -I's when building in src/, so that unistd.h etc is found on systems that doesn't have them. - Valgrind isn't used for cross-compilation by default, and there is also --disable-valgrind-tests to unconditionally disable it. - Valgrind is invoked without parameters, put things you like into ~/.valgrindrc instead.
2006-11-05DESTDIR support.joerg1-1/+2
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-04update to 0.3.5drochner2-8/+8
changes: - Fix asn1_octet_der to handle writes of zero-length buffers, before it did not write the ASN.1 length for a zero-length buffer. This caused ASN.1 encodings to be incorrect on 64-bit platforms. - Add self test that attempt to trigger the above bug. - Fix test of -Wno-pointer-sign. - Improve cross-compilation to MinGW by using AC_LIBTOOL_WIN32_DLL.
2006-05-21Build using -fno-common under Darwin, it is needed to be able to long gnutlstonio1-1/+3
against libtasn1 bump pkgrevisoin, and the binary package changed on Darwin
2006-05-17Update to 0.3.4:wiz2-6/+6
Version 0.3.4 (released 2006-05-10) - Really fix encodings. - Add new self test, tests/Test_encoding.c. - Self tests are ran under valgrind, if it is available. - We test for the -Wno-pointer-sign parameter before using it. Version 0.3.3 (released 2006-05-07) - Add some 'const' to prototypes. - Remove some 'unsigned' keywords. - Corrected asn1_der_coding() bug introduced when it became reentrant. Now it produces correct encodings.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-04-02Update to 0.3.2:wiz3-8/+13
Version 0.3.2 - Corrected bug in asn1_der_coding() which overwrited some data in the original structure. - The asn1Parser, asn1Coding and asn1Decoding programs are now installed.
2006-03-31Set INFO_FILES so that the dir file is proper maintained byjlam1-1/+3
INSTALL/DEINSTALL scripts. Bump the PKGREVISION to 1.
2006-03-09Update to version 0.3.1. The main point is to fix gnutls build failures.cube3-7/+9
- Support constant size bit strings, as in 'BIT STRING (SIZE(42))'. Reported by Cyril Holweck <cyril.holweck@q-free.com>. - Add two more APIs required by GnuTLS. - New public APIs: asn1_find_node function asn1_copy_node
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-21 08:49:11 +0000