- Pacman-dev - lists.archlinux.org

[Git][pacman/pacman][master] repo-add: handle lack of newline at end of .PKGINFO
by Allan McRae (＠allan) 22 Apr '24

22 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 03d884d7 by Allan McRae at 2024-04-22T04:46:30+00:00 repo-add: handle lack of newline at end of .PKGINFO Work around the final line not being parsed in .PKGINFO if there was a lack of newline at the end of the file. This could occur due to utilising a tool other than makepkg to create packages. The missed line created a difference in the parsing of .PKGINFO between repo-add and pacman, causing packages to be seen as invalidwith pacman-6.1. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/repo-add.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/03d884d7ff43a474c1670db… -- This project does not include diff previews in email notifications. View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/03d884d7ff43a474c1670db… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] libmakepkg: do not unset CHOST with !buildflags
by Allan McRae (＠allan) 22 Apr '24

22 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 7dcf9a2b by Allan McRae at 2024-04-20T11:37:54+10:00 libmakepkg: do not unset CHOST with !buildflags Also ensure CHOST and MAKEFLAGS are exported. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/libmakepkg/buildenv.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7dcf9a2b49226af8fcb4320… -- This project does not include diff previews in email notifications. View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7dcf9a2b49226af8fcb4320… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] _alpm_archive_fgets(): bail early if reached end of block
by Allan McRae (＠allan) 08 Apr '24

08 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 4dc21b96 by Allan McRae at 2024-04-08T10:34:10+00:00 _alpm_archive_fgets(): bail early if reached end of block Bailing early when there are 0 blocks remaining means that we do not call memchr on a NULL string (although with a 0 size parameter). Fixes issues reported using -fsanitise=address,undefined Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - lib/libalpm/util.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/4dc21b965b891042edc951d… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/4dc21b965b891042edc951d… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Add guidelines for managing release branches
by Allan McRae (＠allan) 07 Apr '24

07 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 936eff63 by Allan McRae at 2024-04-05T12:02:40+10:00 Add guidelines for managing release branches Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - RELEASE View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/936eff63bf814ffb95139c7… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/936eff63bf814ffb95139c7… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] unlink_file: restore trailing slash on directory before checking mountpoint
by Allan McRae (＠allan) 05 Apr '24

05 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: f86c15e7 by Allan McRae at 2024-04-05T00:51:13+00:00 unlink_file: restore trailing slash on directory before checking mountpoint The dir_is_mountpoint() function has the explicit requirement that the trailing slash of the directory is present. We strip the trailing slash in unlink_file() to handle directories replaced with symlinks, but that then affects the dir_is_mountpoint() check. Add the trailing slash when we have established we are dealing with a directory. Note this may fail in the case of a file managed by pacmane with name length of PATH_MAX that has been replaced by a directory on the file system. Bail on this unlikely scenario. In addtion, be less fancy with adjusting length of the file char array. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - lib/libalpm/remove.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/f86c15e7804311df6469e02… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/f86c15e7804311df6469e02… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] pacman-key: fix permission checks for non-root operations
by Allan McRae (＠allan) 05 Apr '24

05 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 49ebd856 by Allan McRae at 2024-04-05T00:47:45+00:00 pacman-key: fix permission checks for non-root operations Removing lock-never from the default gpg.conf file exposed a couple of bugs in the permission checks in pacman-key. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/pacman-key.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/49ebd856ec09b2a7d87d36d… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/49ebd856ec09b2a7d87d36d… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] libmakepkg: remove MAKEFLAGS from buildenv_vars
by Allan McRae (＠allan) 05 Apr '24

05 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 027ecbc7 by Allan McRae at 2024-04-05T00:43:57+00:00 libmakepkg: remove MAKEFLAGS from buildenv_vars MAKEFLAGS should not be cleared by options=(!buildenv). Regression introduced in commit 09e82f01ea824f9203b0ed7238d98b612669b1a9 Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/libmakepkg/buildenv.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/027ecbc7b8503b58eb055ad… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/027ecbc7b8503b58eb055ad… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Fix leak in total progress bar
by Allan McRae (＠allan) 05 Apr '24

05 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: f763ff77 by Allan McRae at 2024-04-05T00:39:29+00:00 Fix leak in total progress bar Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - src/pacman/callback.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/f763ff774a5c3f7db89b010… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/f763ff774a5c3f7db89b010… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Do not pass NULL paramenter to bsearch with empty filelist
by Allan McRae (＠allan) 05 Apr '24

05 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 0ccb5842 by Allan McRae at 2024-04-05T00:35:08+00:00 Do not pass NULL paramenter to bsearch with empty filelist A filelist can be non-NULL but empty (particularly with a lot of NoExtract entries). Handle this in alpm_filelist_contains() Identified using the undefined behaviour sanitizer. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - lib/libalpm/filelist.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/0ccb584262cefdd09674cdf… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/0ccb584262cefdd09674cdf… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Fix typo in cb_progress
by Allan McRae (＠allan) 05 Apr '24

05 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 27eba855 by Allan McRae at 2024-04-02T23:18:34+10:00 Fix typo in cb_progress Introduced in 74deada511358a4ce9c10ee0c6ae216e2c6c6b73. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - src/pacman/callback.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/27eba85594932a6e14faeca… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/27eba85594932a6e14faeca… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 14 commits: Add DownloadUser configuration option
by Allan McRae (＠allan) 01 Apr '24

01 Apr '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 56eb8728 by Remi Gacogne at 2024-04-01T20:52:55+00:00 Add DownloadUser configuration option The DownloadUser option will be used to drop privledges to the specified user when downloading files. The intention is for this to be extended in the future to a more general sandbox configuration to cover operating on package and database files prior to verification. Add this option to pacman configuration and the various accessors into the libalpm backend. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - ce83cf63 by Remi Gacogne at 2024-04-01T20:52:55+00:00 Provide function for switching user in child processes Add alpm_sandbox_child() function that will be used for switching to a less priviledged user to run child processes. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 62c68746 by Remi Gacogne at 2024-04-01T20:52:55+00:00 Add callbacks for sandboxed operations Add log and download callbacks to use within a sandbox. These are designed to be passed from the sandbox to the parent through a file descriptor and then processed into alpm callbacks to be passed to the frontend. Note, only callbacks used in libalpm are added. Other callbacks should be set to NULL in the child process. - - - - - 9667bc6b by Allan McRae at 2024-04-01T20:52:55+00:00 Expose _alpm_reset_signals() to library Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 93a796aa by Remi Gacogne at 2024-04-01T20:52:55+00:00 Add sandboxed download for the internal downloader If the SandboxUser configure option is set, the internal downloader will fork of a child process and drop to the specified user to download the files. Signed-off-by: Remi Gacogne <rgacogne(a)archlinux.org> Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - cf359b0d by Remi Gacogne at 2024-04-01T20:52:55+00:00 Add support for DownloadUser with XferCommand Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 49d51226 by Remi Gacogne at 2024-04-01T20:52:55+00:00 Document DownloadUser Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 04d04381 by Allan McRae at 2024-04-01T20:52:55+00:00 libalpm: fill in more payload information before passing to downloader Filling in more of the payload fields before passing to the downloader ensures that the these fields do not get lost during sandboxed operations. It also fixes the use of -U with XferCommand, but testsuite still fails due to "404" page being downloaded for the signature. Given we can not identify this as being a non-signature download with the XferCommand, we can just turn off signature checking in this test. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 26b7b353 by Allan McRae at 2024-04-01T20:52:55+00:00 Remove random_partfile from payload struct It is not used any more due to filling the payload structure earlier. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 5e9bff62 by Remi Gacogne at 2024-04-01T20:52:55+00:00 Stop trusting the Content-Disposition HTTP header - - - - - 0b6df551 by Andrew Gregory at 2024-04-01T20:52:55+00:00 pactest: Add basic sandboxed download tests Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 11c8eca9 by Andrew Gregory at 2024-04-01T20:52:55+00:00 pactest: test database downloads with optional signatures Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - e1a7b83e by Remi Gacogne at 2024-04-01T20:52:55+00:00 Download to a temporary directory owned by the Download user Signed-off-by: Remi Gacogne <rgacogne(a)archlinux.org> Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - cfa68f7b by Remi Gacogne at 2024-04-01T20:52:55+00:00 Restore partially downloaded files to the temporary directory This allows downloads to be continued. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 24 changed files: - doc/pacman.conf.5.asciidoc - lib/libalpm/alpm.h - lib/libalpm/be_sync.c - lib/libalpm/dload.c - lib/libalpm/dload.h - lib/libalpm/handle.c - lib/libalpm/handle.h - lib/libalpm/meson.build - + lib/libalpm/sandbox.c - + lib/libalpm/sandbox.h - lib/libalpm/sync.c - lib/libalpm/util.c - lib/libalpm/util.h - src/pacman/callback.c - src/pacman/conf.c - src/pacman/conf.h - src/pacman/pacman-conf.c - test/pacman/meson.build - + test/pacman/tests/database-refresh-optional-siglevel.py - + test/pacman/tests/sandbox-download-basic.py - + test/pacman/tests/sandbox-download-upgrade.py - test/pacman/tests/upgrade-download-pkg-and-sig-with-filename.py - − test/pacman/tests/upgrade-download-pkg-and-sig-without-filename.py - test/pacman/tests/upgrade-download-with-xfercommand.py View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/01e64e8b6a25f94b13dc92… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/01e64e8b6a25f94b13dc92… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] use snprintf instead of sprintf
by Allan McRae (＠allan) 25 Mar '24

25 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 01e64e8b by Vladislav Nepogodin at 2024-03-25T13:24:41+10:00 use snprintf instead of sprintf sprintf does not check for buffer overflows (CWE-120) modified: src/pacman/callback.c - - - - - 11 changed files: - lib/libalpm/alpm.c - lib/libalpm/be_local.c - lib/libalpm/be_sync.c - lib/libalpm/conflict.c - lib/libalpm/db.c - lib/libalpm/signing.c - lib/libalpm/sync.c - lib/libalpm/trans.c - src/pacman/callback.c - src/pacman/package.c - src/pacman/query.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/01e64e8b6a25f94b13dc925… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/01e64e8b6a25f94b13dc925… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

No signed 6.1.0 release on sources.archlinux.org
by Ben Westover 21 Mar '24

21 Mar '24

Hello, I package pacman for Debian, and I have been using the tarballs from sources.archlinux.org as my source, since they are PGP signed. 6.1.0 was released a couple weeks ago but still has not appeared at that location. Is this no longer the best place to get pacman source tarballs? Is there anywhere else to look for signed tarballs? Thanks, -- Ben Westover

2 1

[Git][pacman/pacman][release/6.1.x] 2 commits: Limit scope of `name` and `a` variable to avoid conflict with PKGBUILD scripts.
by Allan McRae (＠allan) 20 Mar '24

20 Mar '24

Allan McRae pushed to branch release/6.1.x at Pacman / Pacman Commits: 082094a1 by bartus at 2024-03-19T12:43:00+00:00 Limit scope of `name` and `a` variable to avoid conflict with PKGBUILD scripts. - - - - - b2bb2e24 by Allan McRae at 2024-03-20T21:39:41+10:00 makepkg: Fix missing end of line in -D documentaiton Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 2 changed files: - scripts/libmakepkg/util/pkgbuild.sh.in - scripts/makepkg.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/b59d68a2094287df8af5e8… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/b59d68a2094287df8af5e8… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] makepkg: Fix missing end of line in -D documentaiton
by Allan McRae (＠allan) 20 Mar '24

20 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: b2bb2e24 by Allan McRae at 2024-03-20T21:39:41+10:00 makepkg: Fix missing end of line in -D documentaiton Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/makepkg.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/b2bb2e24827450465a9e0a8… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/b2bb2e24827450465a9e0a8… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Limit scope of `name` and `a` variable to avoid conflict with PKGBUILD scripts.
by Allan McRae (＠allan) 20 Mar '24

20 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 082094a1 by bartus at 2024-03-19T12:43:00+00:00 Limit scope of `name` and `a` variable to avoid conflict with PKGBUILD scripts. - - - - - 1 changed file: - scripts/libmakepkg/util/pkgbuild.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/082094a1d8d0f7a528fe0ad… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/082094a1d8d0f7a528fe0ad… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][release/6.1.x] 5 commits: Fix deadlink to the old bug tracker in footer
by Allan McRae (＠allan) 19 Mar '24

19 Mar '24

Allan McRae pushed to branch release/6.1.x at Pacman / Pacman Commits: 942bbe2d by Dale young at 2024-03-18T17:15:07+08:00 Fix deadlink to the old bug tracker in footer The bug tracker had been updated in doc/index.asciidoc, but the one in doc/footer.asciidoc was still the old one, which is a deadlink now. I udpated it just by copying the sentense in doc/index.asciidoc Signed-off-by: Dale young <daleyoung4242(a)gmail.com> - - - - - 478af5d1 by Allan McRae at 2024-03-19T00:40:09+00:00 Fix read-after-free issue parsing config files We were indirectly adjusting a pointer to a parameter that was declared as a const. This resulted in a use-after-free when using --debug: [11:09:18] debug: config: finished parsing ��A�8_ Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - eb5bf691 by Demi Obenour at 2024-03-19T11:44:38+10:00 Fetch signature and database from the same URL Previously, the for loops on lines 1035 and 1037 would advance to the next element in the server list, even if downloading the URL succeeded. If there are no more servers in the list, `s` would be NULL, causing a NULL pointer dereference on line 1046. If there were servers left in the list, the signature would be downloaded from a wrong URL. 1. Fetching of database signatures is enabled. 2. There is only one enabled remote repository URL, or fetching from all but the last one fails and fetching from the last one succeeds. 3. An XferCommand is used. Qubes OS Arch templates satisfy all of these conditions and trigger the bug. - - - - - 92102f47 by Allan McRae at 2024-03-19T01:47:42+00:00 makepkg: document -D in --help text Fixes #110. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - b59d68a2 by Allan McRae at 2024-03-19T12:02:44+10:00 Update bug report URL in tranlsation configuration files Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 10 changed files: - doc/footer.asciidoc - lib/libalpm/dload.c - lib/libalpm/po/Makevars - lib/libalpm/po/meson.build - scripts/makepkg.sh.in - scripts/po/Makevars - scripts/po/meson.build - src/pacman/conf.c - src/pacman/po/Makevars - src/pacman/po/meson.build View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/bae9594ac1806ce30f2af1… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/bae9594ac1806ce30f2af1… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Update bug report URL in tranlsation configuration files
by Allan McRae (＠allan) 19 Mar '24

19 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: b59d68a2 by Allan McRae at 2024-03-19T12:02:44+10:00 Update bug report URL in tranlsation configuration files Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 6 changed files: - lib/libalpm/po/Makevars - lib/libalpm/po/meson.build - scripts/po/Makevars - scripts/po/meson.build - src/pacman/po/Makevars - src/pacman/po/meson.build View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/b59d68a2094287df8af5e8a… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/b59d68a2094287df8af5e8a… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] makepkg: document -D in --help text
by Allan McRae (＠allan) 19 Mar '24

19 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 92102f47 by Allan McRae at 2024-03-19T01:47:42+00:00 makepkg: document -D in --help text Fixes #110. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/makepkg.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/92102f477ee9b8a93614c3b… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/92102f477ee9b8a93614c3b… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Fetch signature and database from the same URL
by Allan McRae (＠allan) 19 Mar '24

19 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: eb5bf691 by Demi Obenour at 2024-03-19T11:44:38+10:00 Fetch signature and database from the same URL Previously, the for loops on lines 1035 and 1037 would advance to the next element in the server list, even if downloading the URL succeeded. If there are no more servers in the list, `s` would be NULL, causing a NULL pointer dereference on line 1046. If there were servers left in the list, the signature would be downloaded from a wrong URL. 1. Fetching of database signatures is enabled. 2. There is only one enabled remote repository URL, or fetching from all but the last one fails and fetching from the last one succeeds. 3. An XferCommand is used. Qubes OS Arch templates satisfy all of these conditions and trigger the bug. - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/eb5bf6913835e7553433ef8… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/eb5bf6913835e7553433ef8… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Fix read-after-free issue parsing config files
by Allan McRae (＠allan) 19 Mar '24

19 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 478af5d1 by Allan McRae at 2024-03-19T00:40:09+00:00 Fix read-after-free issue parsing config files We were indirectly adjusting a pointer to a parameter that was declared as a const. This resulted in a use-after-free when using --debug: [11:09:18] debug: config: finished parsing ��A�8_ Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - src/pacman/conf.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/478af5d1c869f16e7e72bb4… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/478af5d1c869f16e7e72bb4… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Fix deadlink to the old bug tracker in footer
by Allan McRae (＠allan) 19 Mar '24

19 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 942bbe2d by Dale young at 2024-03-18T17:15:07+08:00 Fix deadlink to the old bug tracker in footer The bug tracker had been updated in doc/index.asciidoc, but the one in doc/footer.asciidoc was still the old one, which is a deadlink now. I udpated it just by copying the sentense in doc/index.asciidoc Signed-off-by: Dale young <daleyoung4242(a)gmail.com> - - - - - 1 changed file: - doc/footer.asciidoc View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/942bbe2d2df5defde58a097… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/942bbe2d2df5defde58a097… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][release/6.1.x] debugedit: only check for debugedit if we build a package
by Allan McRae (＠allan) 14 Mar '24

14 Mar '24

Allan McRae pushed to branch release/6.1.x at Pacman / Pacman Commits: bae9594a by Morten Linderud at 2024-03-14T23:07:08+01:00 debugedit: only check for debugedit if we build a package We only really need debugedit while building the package, while this check would run if you tried something like `makepkg --verifysource`. Use the same checks as we have for fakeroot to wrap debugedit so we don't beg for dependencies we don't need. Fixes: 3ed08f97ecd5941c3f72e3e94f17826dd959f823 Signed-off-by: Morten Linderud <morten(a)linderud.pw> - - - - - 1 changed file: - scripts/libmakepkg/executable/debugedit.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/bae9594ac1806ce30f2af1d… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/bae9594ac1806ce30f2af1d… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] debugedit: only check for debugedit if we build a package
by Allan McRae (＠allan) 14 Mar '24

14 Mar '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: bae9594a by Morten Linderud at 2024-03-14T23:07:08+01:00 debugedit: only check for debugedit if we build a package We only really need debugedit while building the package, while this check would run if you tried something like `makepkg --verifysource`. Use the same checks as we have for fakeroot to wrap debugedit so we don't beg for dependencies we don't need. Fixes: 3ed08f97ecd5941c3f72e3e94f17826dd959f823 Signed-off-by: Morten Linderud <morten(a)linderud.pw> - - - - - 1 changed file: - scripts/libmakepkg/executable/debugedit.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/bae9594ac1806ce30f2af1d… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/bae9594ac1806ce30f2af1d… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][release/6.1.x] 6 commits: Fix error messages for unknown key in databases
by Allan McRae (＠allan) 14 Mar '24

14 Mar '24

Allan McRae pushed to branch release/6.1.x at Pacman / Pacman Commits: 6bb95c88 by Allan McRae at 2024-03-05T07:25:11+10:00 Fix error messages for unknown key in databases Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - d7f3ce12 by Allan McRae at 2024-03-06T10:23:33+00:00 Manage releases through gitlab Also provide an example for how to check for errors in translations Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 95f148c2 by Allan McRae at 2024-03-06T10:23:33+00:00 Update website to reflect gitlab usage Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 5e049626 by Ivan Shapovalov at 2024-03-13T04:32:42+01:00 make_aligned_titles: pass the correct buffer length The third parameter to wcstombs() is the length of the output buffer (first parameter) in bytes. Take the correct sizeof() here. This is not a problem in practice, but prevents _FORTIFY_SOURCE=3 from detecting a possible output buffer overflow (as the source buffer is bigger than the destination). Fixes #104. Signed-off-by: Ivan Shapovalov <intelfx(a)intelfx.name> - - - - - 0571ee82 by Christian Heusel at 2024-03-14T01:20:53+00:00 repo-add: fix parseopts missing arg to -k/--key The current code treats -k/--key as a binary option which later makes it fail parsing the argument as then the end of arguments '--' is treated as the GPGKEY. We fix this by adding the appropriate specifier to the long and shortopt. Closes https://gitlab.archlinux.org/pacman/pacman/-/issues/105 Fixes: 4f43ce3e ("repo-add: use parseopts from libmakepkg") Signed-off-by: Christian Heusel <christian(a)heusel.eu> - - - - - 111eed02 by Allan McRae at 2024-03-14T01:50:05+00:00 Fix unused result warnings Not actually a fix, as the pacman output will still be weird and we will not gracefully exit, but it does print an error message... Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 7 changed files: - RELEASE - doc/index.asciidoc - lib/libalpm/be_local.c - lib/libalpm/be_sync.c - scripts/repo-add.sh.in - src/pacman/package.c - src/pacman/util.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/e3dc296ba35d5039775c6e… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/e3dc296ba35d5039775c6e… You're receiving this email because of your account on gitlab.archlinux.org.

1 0