- Pacman-dev - lists.archlinux.org

[pacman-dev] [PATCH] document changes between 5.1 and 5.2
by Eli Schwartz 14 Aug '19

14 Aug '19

Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> --- Should be complete through to commit 75837a2717c3b5654149393d6ec0e0977a7ddc2f Instead of trying to make judgment calls about what order to list "important" changes in, I have tried to sort everything on a first-committed first-listed basis. This is guaranteed to make nobody happy, which is the best type of compromise -- it means you can do that yourself, Allan. ;) It also means it should be easier to double check that I didn't miss anything. Some news entries touch on multiple commits at once (e.g. grouping all extensions to libmakepkg together) in which case they all got listed with the first occurrence. Given expected updates for WKD stuff, I will be submitting v2+ versions at some point. NEWS | 82 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ README | 7 +++++ 2 files changed, 89 insertions(+) diff --git a/NEWS b/NEWS index ce39e0c5..30b75186 100644 --- a/NEWS +++ b/NEWS @@ -1,5 +1,87 @@ VERSION DESCRIPTION ----------------------------------------------------------------------------- +5.2.0 - ignore .hook suffix when sorting libalpm hooks + - update the minimum requirement of bash to 4.4 + - completely remove the --force option + - scripts: pass on options such as set -x to child processes + - show group and installed status during -Fs + - user-visible log when validity check fails due to access + - port pactest to python3 + - process --needed before group selection when resolving the + dependencies to prompt for (FS#22870) + - don't error when a group exists but all packages are ignored + - bash completion now completes when it should, and doesn't + complete when it shouldn't (FS#59965) + - add the meson build system as an alternative to autotools + - improve error message when gpg support is missing (FS#60880) + - don't emit confusing errors when a package is simultaneously + replaced and upgraded (FS#50875, FS#55534) + - better warning message when skipping duplicate targets (FS#49377) + - libalpm: parse {check, make}depends when reading database + (FS#60347) + - add [ignored] to -Qu output for packages in repos that are not + Usage = Upgrade (FS#59854) + - prevent 301 redirect loop from hanging libalpm + - use standard, consistent units in the download progress + (FS#59201) + - fix segfault when Usage is specified without a value + - completely remove delta support + - include timezones in pacman.log + - renovate and simplify the UI for -F (FS#47949) + - hooks: rename type File to Path, for accuracy + - bash-completion: use POSIX character classes for portability + - correctly report a download failiure for 404s + - fix handling of signals during SIGSEGV + - makepkg: + - add support for lzip, lz4 and zst compressed packages + (FS#56676, FS#59081) + - various improvements to PKGBUILD linting + - when signing packages, report package filename on failure + - fix pkgver() function not aborting on errors + - remove checksum algorithm whirlpoolsum as it has not worked + for a long time + - reject PKGBUILDs with both split and non-split package + functions + - send status messages to stderr rather than stdout (FS#17173) + - ensure debug buildflags are unset when they are supposed to be + - buildenv and executable detection, definitions for the + PKGBUILD schema, and makepkg.conf loading are now part of + libmakepkg + - fix broken check for the fakeroot binary + - improve the error message for invalid dependency versioning + - add routine for linting $SOURCE_DATE_EPOCH + - fix the error code when no PKGBUILD exists + - implement extendable source/signature verification routines + within libmakepkg (FS#49076) + - use --unneeded when removing build deps to allow runtime-only + deps to work well with makepkg -sir (FS#32723) + - if pacman is in use, wait until it is available before + continuing (FS#28840) + - add new checksum algorithm, b2sum + - compute package sizes correctly across different filesystems + - use shared clones for git sources to save space when building + - fix reporting of invalid archive extensions + - correctly handle hg sources with updates on a non-default + branch + - install pkg-config file for libmakepkg's library directory + - propagate error codes when package failed to sign correctly + - be compatible with file 5.37's application/gzip MIME type + - forbid non-ASCII pkgname and pkgver (FS#49342) + - fix exiting on failure without ensuring dependencies are + prompted for removal + - quiet superfluous warnings for missing debug source files for + artificial symbols + - pacman-key: + - just accept one file to verify, and enforce detached sigs + - repo-add: + - add support for zst compressed databases + - print the name of the database when extracting + - do not infinitely loop on malformed arguments with embedded + globs + - add option to prevent downgrading (FS#17752) + - various documentation updates +5.1.3 - Sanitize file name received from Content-Disposition header + during -U 5.1.2 - pacman-conf: add missing DisableDownloadTimeout support - Include version when checking optdepend install status during -Qi (FS#60106) diff --git a/README b/README index d96eae21..a39753fa 100644 --- a/README +++ b/README @@ -630,3 +630,10 @@ API CHANGES BETWEEN 5.0 AND 5.1 - alpm_capabilities() - duplicate and add to list - alpm_list_append_strdup() + +API CHANGES BETWEEN 5.1 AND 5.2 +=============================== +[REMOVED] +- alpm_sync_newversion() +[ADDED] +- alpm_sync_get_new_version() -- 2.22.1

1 0

[pacman-dev] pacman --print bug
by AstroSnail 14 Aug '19

14 Aug '19

Hi, I think I found a bug in pacman. When a package remove operation can't be satisfied, pacman prints an error, describes what went wrong, and does nothing: $ sudo pacman -R linux-api-headers checking dependencies... error: failed to prepare transaction (could not satisfy dependencies) :: glibc: removing linux-api-headers breaks dependency 'linux-api-headers>=4.10' This is obviously correct. When I try to --print a package remove operation that can't be satisfied, pacman prints an error, describes it, and does nothing, without printing the targets: $ pacman -Rp linux-api-headers error: failed to prepare transaction (could not satisfy dependencies) :: glibc: removing linux-api-headers breaks dependency 'linux-api-headers>=4.10' I can understand if this is correct behaviour as well, but at a glance it looks strange. When a package remove operation *can* be satisfied, but only with user confirmation (e.g. a HoldPkg was found in target list), pacman will print warnings and ask for user input before deciding whether or not to continue: $ sudo pacman -Rc linux-api-headers checking dependencies... <snip> warning: pacman is designated as a HoldPkg. warning: glibc is designated as a HoldPkg. :: HoldPkg was found in target list. Do you want to continue? [y/N] This is obviously correct. When I try to --print a package remove operation that *can* be satisfied, but only with user input, pacman prints a prompt for input but doesn't wait, and exits immediately, without even printing the warnings: $ pacman -Rcp linux-api-headers :: HoldPkg was found in target list. Do you want to continue? [y/N] This does not sound like correct behaviour to me.

3 3

[pacman-dev] [PATCH] RFC: support file with seccomp enabled
by Eli Schwartz 13 Aug '19

13 Aug '19

Not all compression types can be detected in the seccomp sandbox, so we need to disable it. This requires either configuring makepkg to know the sandbox is available, or checking for file >= 5.38 in which the sandbox option is a no-op even when seccomp is disabled. - Requires autoconf-archive for autotools version compare macro. - meson version comparison could be made a lot simpler using meson-git. Fixes FS#58626 Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> --- RELEASE | 1 + build-aux/edit-script.sh.in | 1 + configure.ac | 19 +++++++++++++++++++ meson.build | 10 ++++++++++ meson_options.txt | 3 +++ scripts/Makefile.am | 1 + scripts/libmakepkg/source/file.sh.in | 2 +- 7 files changed, 36 insertions(+), 1 deletion(-) diff --git a/RELEASE b/RELEASE index c9949253..7a9184b4 100644 --- a/RELEASE +++ b/RELEASE @@ -11,6 +11,7 @@ The following checklist should be used for making a pacman release. - Update doc/index.asciidoc - Create a signed git tag (git tag -s vX.Y.Z -m "commit message") - Create and sign release tarballs (generate with "make distcheck") + - In addition to the standard autotools toolchain, autoconf-archive is needed - Update pacman website Transifex updates are handled using the transifex client. The basic process is: diff --git a/build-aux/edit-script.sh.in b/build-aux/edit-script.sh.in index d5495057..640d32f8 100644 --- a/build-aux/edit-script.sh.in +++ b/build-aux/edit-script.sh.in @@ -19,6 +19,7 @@ mode=$3 -e "s|@TEMPLATE_DIR[@]|@TEMPLATE_DIR@|g" \ -e "s|@DEBUGSUFFIX[@]|@DEBUGSUFFIX@|g" \ -e "s|@INODECMD[@]|@INODECMD@|g" \ + -e "s|@FILECMD[@]|@FILECMD@|g" \ -e "s|@SEDINPLACEFLAGS[@]|@SEDINPLACEFLAGS@|g" \ -e "s|@SEDPATH[@]|@SEDPATH@|g" \ -e "s|@configure_input[@]|Generated from ${input##*/}; do not edit by hand.|g" \ diff --git a/configure.ac b/configure.ac index cb2fb2bf..0f3dd3ea 100644 --- a/configure.ac +++ b/configure.ac @@ -120,6 +120,12 @@ AC_ARG_WITH(ldconfig, [set the full path to ldconfig]), [LDCONFIG=$withval], [LDCONFIG=/sbin/ldconfig]) +# Help line for determining whether file is seccomp-enabled +AC_ARG_WITH(file-seccomp, + AS_HELP_STRING([--with-file-seccomp={yes|no|auto}], + [determine whether file is seccomp-enabled @<:@default=auto@:>@]), + [with_file_seccomp=$withval], [with_file_seccomp=auto]) + # Help line for selecting a crypto library AC_ARG_WITH(crypto, AS_HELP_STRING([--with-crypto={openssl|nettle}], @@ -222,6 +228,18 @@ PKG_CHECK_VAR(bashcompdir, [bash-completion], [completionsdir], , PKG_CHECK_MODULES(LIBARCHIVE, [libarchive >= 3.0.0], , AC_MSG_ERROR([*** libarchive >= 3.0.0 is needed to compile pacman!])) +# Check file for seccomp +if test "x$with_file_seccomp" = "xauto"; then + file_version="$(file --version| sed -n 's/^file-$.*$/\1/p')" + AX_COMPARE_VERSION([$file_version], [ge], [5.38], [with_file_seccomp=yes]) +fi +if test "x$with_file_seccomp" = "xyes"; then + FILECMD="file -S" +else + FILECMD="file" +fi +AC_SUBST(FILECMD) + # Check for OpenSSL have_openssl=no have_nettle=no @@ -559,6 +577,7 @@ ${PACKAGE_NAME}: Host Type : ${CHOST} File inode command : ${INODECMD} In-place sed command : ${SEDPATH} ${SEDINPLACEFLAGS} + File seccomp command : ${FILECMD} libalpm version : ${LIB_VERSION} libalpm version info : ${LIB_VERSION_INFO} diff --git a/meson.build b/meson.build index e79ecb6c..f3b5d6da 100644 --- a/meson.build +++ b/meson.build @@ -224,12 +224,20 @@ config_h = configure_file( configuration : conf) add_project_arguments('-include', 'config.h', language : 'c') +filecmd = 'file' default_sedinplaceflags = ' --follow-symlinks -i' inodecmd = 'stat -c \'%i %n\'' strip_binaries = '--strip-all' strip_shared = '--strip-unneeded' strip_static = '--strip-debug' +file_seccomp = get_option('file-seccomp') +# meson-git has find_program('file', required: false, version: '>=5.38') +filever = run_command('sh', '-c', 'file --version | sed -n "s/^file-$.*$/\\1/p"').stdout() +if file_seccomp.enabled() or ( file_seccomp.auto() and filever.version_compare('>= 5.38') ) + filecmd = 'file -S' +endif + os = host_machine.system() if os.startswith('darwin') inodecmd = '/usr/bin/stat -f \'%i %n\'' @@ -272,6 +280,7 @@ substs.set('BUILDSCRIPT', BUILDSCRIPT) substs.set('TEMPLATE_DIR', get_option('makepkg-template-dir')) substs.set('DEBUGSUFFIX', get_option('debug-suffix')) substs.set('INODECMD', inodecmd) +substs.set('FILECMD', filecmd) substs.set('SEDINPLACEFLAGS', sedinplaceflags) substs.set('SEDPATH', SED.path()) substs.set('LIBMAKEPKGDIR', LIBMAKEPKGDIR) @@ -428,6 +437,7 @@ message('\n '.join([ ' Host Type : @0@'.format(chost), ' File inode command : @0@'.format(inodecmd), ' In-place sed command : @0@ @1@'.format(SED.path(), sedinplaceflags), + ' File seccomp command : @0@'.format(filecmd), ' libalpm version : @0@'.format(libalpm_version), ' pacman version : @0@'.format(PACKAGE_VERSION), '', diff --git a/meson_options.txt b/meson_options.txt index 2d640e87..2b92ca1a 100644 --- a/meson_options.txt +++ b/meson_options.txt @@ -52,5 +52,8 @@ option('i18n', type : 'boolean', value : true, description : 'enable localization of pacman, libalpm and scripts') # tools +option('file-seccomp', type: 'feature', value: 'auto', + description: 'determine whether file is seccomp-enabled') + option('sedinplaceflags', type : 'string', value : 'auto', description : 'flags to pass to sed to edit a file in-place') diff --git a/scripts/Makefile.am b/scripts/Makefile.am index 0597a0e5..1008fed3 100644 --- a/scripts/Makefile.am +++ b/scripts/Makefile.am @@ -180,6 +180,7 @@ edit = sed \ -e 's|@TEMPLATE_DIR[@]|$(TEMPLATE_DIR)|g' \ -e 's|@DEBUGSUFFIX[@]|$(DEBUGSUFFIX)|g' \ -e "s|@INODECMD[@]|$(INODECMD)|g" \ + -e "s|@FILECMD[@]|$(FILECMD)|g" \ -e 's|@SEDINPLACEFLAGS[@]|$(SEDINPLACEFLAGS)|g' \ -e 's|@SEDPATH[@]|$(SEDPATH)|g' \ -e 's|@SCRIPTNAME[@]|$@|g' \ diff --git a/scripts/libmakepkg/source/file.sh.in b/scripts/libmakepkg/source/file.sh.in index 8492ba11..f6d79f9e 100644 --- a/scripts/libmakepkg/source/file.sh.in +++ b/scripts/libmakepkg/source/file.sh.in @@ -96,7 +96,7 @@ extract_file() { fi # do not rely on extension for file type - local file_type=$(file -bizL -- "$file") + local file_type=$(@FILECMD@ -bizL -- "$file") local ext=${file##*.} local cmd='' case "$file_type" in -- 2.22.0

2 1

[pacman-dev] [PATCH] Set "secure" $HOME
by Jonathon Fernyhough 12 Aug '19

12 Aug '19

By default, $HOME is that of the build user. This is usually not a problem in ephemeral build containers/chroots but can allow some files to escape into the filesystem where `makepkg` is run outside of a chroot. There can also be instances of generated files (e.g. cache, precompiled bytecode) being placed into these locations and which are then relied upon by other parts of the software. As a concrete example, Perl6 and nim have a precompilation cache (though well-behaved in how it is used). `export HOME=/nonexistent` is already used by Debian in their build tooling and so does not represent a divergence from established practice. It also allows for badly-behaved build processes to be more easily spotted and an issue filed upstream where appropriate. Signed-off-by: Jonathon Fernyhough <jonathon(a)manjaro.org> --- scripts/makepkg.sh.in | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in index 43484db3..04edc38a 100644 --- a/scripts/makepkg.sh.in +++ b/scripts/makepkg.sh.in @@ -40,6 +40,8 @@ export COMMAND_MODE='legacy' unset CDPATH # Ensure GREP_OPTIONS doesn't screw with our grep calls unset GREP_OPTIONS +# Prevent build-user-specific files "escaping" into the filesystem +export HOME=/nonexistent declare -r makepkg_version='@PACKAGE_VERSION@' declare -r confdir='@sysconfdir@' -- 2.22.0

3 2

[pacman-dev] Preparing for pacman-5.2
by Allan McRae 12 Aug '19

12 Aug '19

Hi all, It is well beyond time I made another release, so here we go! There is still a few patches that will land. Mostly to do with WKD stuff - these still need a thorough review. Other patches I know of in the queue: - file -S - debug symbol conflicts - RUSTFLAGS Flag anything else with me ASAP. I have pushed string updates to transifex so people can get a head start, although there are only two new strings in "libalpm" and 14 new in "pacman scripts"! There will be a final string freeze once the above patches are dealt with. Allan

1 0

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v5.1.1-200-g024fde97
by Allan McRae 12 Aug '19

12 Aug '19

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via 024fde9748692c71f0d9e6c667439c912a78b6df (commit) from f9f22fded2f05ae1edb5af3bd0e3a4aba2f5ce34 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 024fde9748692c71f0d9e6c667439c912a78b6df Author: Allan McRae <allan(a)archlinux.org> Date: Mon Aug 12 11:42:10 2019 +1000 Prepare translations for next release Signed-off-by: Allan McRae <allan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: lib/libalpm/po/ar.po | 230 ++++---- lib/libalpm/po/ast.po | 228 +++---- lib/libalpm/po/bg.po | 228 +++---- lib/libalpm/po/br.po | 284 ++++----- lib/libalpm/po/ca.po | 270 ++++----- lib/libalpm/po/cs.po | 232 ++++---- lib/libalpm/po/da.po | 228 +++---- lib/libalpm/po/de.po | 228 +++---- lib/libalpm/po/el.po | 297 +++++----- lib/libalpm/po/en_GB.po | 228 +++---- lib/libalpm/po/eo.po | 228 +++---- lib/libalpm/po/es.po | 234 ++++---- lib/libalpm/po/es_419.po | 234 ++++---- lib/libalpm/po/eu.po | 228 +++---- lib/libalpm/po/eu_ES.po | 228 +++---- lib/libalpm/po/fi.po | 228 +++---- lib/libalpm/po/fr.po | 228 +++---- lib/libalpm/po/gl.po | 228 +++---- lib/libalpm/po/hr.po | 228 +++---- lib/libalpm/po/hu.po | 228 +++---- lib/libalpm/po/id.po | 234 ++++---- lib/libalpm/po/it.po | 298 +++++----- lib/libalpm/po/ja.po | 228 +++---- lib/libalpm/po/kk.po | 228 +++---- lib/libalpm/po/ko.po | 238 ++++---- lib/libalpm/po/libalpm.pot | 222 +++---- lib/libalpm/po/lt.po | 228 +++---- lib/libalpm/po/nb.po | 302 +++++----- lib/libalpm/po/nl.po | 241 ++++---- lib/libalpm/po/pl.po | 228 +++---- lib/libalpm/po/pt.po | 269 +++++---- lib/libalpm/po/pt_BR.po | 228 +++---- lib/libalpm/po/ro.po | 228 +++---- lib/libalpm/po/ru.po | 230 ++++---- lib/libalpm/po/sk.po | 228 +++---- lib/libalpm/po/sl.po | 261 ++++---- lib/libalpm/po/sr.po | 228 +++---- lib/libalpm/po/sr(a)latin.po | 230 ++++---- lib/libalpm/po/sv.po | 237 ++++---- lib/libalpm/po/tr.po | 232 ++++---- lib/libalpm/po/uk.po | 228 +++---- lib/libalpm/po/zh_CN.po | 287 ++++----- lib/libalpm/po/zh_TW.po | 236 ++++---- scripts/po/bg.po | 1063 ++++++++++++++++----------------- scripts/po/br.po | 1041 ++++++++++++++++---------------- scripts/po/ca.po | 1314 +++++++++++++++++++++-------------------- scripts/po/cs.po | 1048 ++++++++++++++++---------------- scripts/po/da.po | 1092 +++++++++++++++++----------------- scripts/po/de.po | 1042 ++++++++++++++++---------------- scripts/po/el.po | 1094 +++++++++++++++++----------------- scripts/po/en_GB.po | 1049 ++++++++++++++++---------------- scripts/po/eo.po | 1036 ++++++++++++++++---------------- scripts/po/es.po | 1112 +++++++++++++++++----------------- scripts/po/es_419.po | 1050 ++++++++++++++++---------------- scripts/po/eu.po | 1034 ++++++++++++++++---------------- scripts/po/eu_ES.po | 1034 ++++++++++++++++---------------- scripts/po/fi.po | 999 +++++++++++++++---------------- scripts/po/fr.po | 1124 ++++++++++++++++++----------------- scripts/po/gl.po | 1055 ++++++++++++++++----------------- scripts/po/hu.po | 1029 ++++++++++++++++---------------- scripts/po/id.po | 1040 ++++++++++++++++---------------- scripts/po/it.po | 1095 +++++++++++++++++----------------- scripts/po/ja.po | 1062 ++++++++++++++++----------------- scripts/po/ko.po | 1061 ++++++++++++++++----------------- scripts/po/lt.po | 1093 +++++++++++++++++----------------- scripts/po/nb.po | 1180 ++++++++++++++++++------------------ scripts/po/nl.po | 1096 +++++++++++++++++----------------- scripts/po/pacman-scripts.pot | 851 +++++++++++--------------- scripts/po/pl.po | 1082 ++++++++++++++++----------------- scripts/po/pt.po | 1151 ++++++++++++++++++------------------ scripts/po/pt_BR.po | 1101 +++++++++++++++++----------------- scripts/po/ro.po | 1026 ++++++++++++++++---------------- scripts/po/ru.po | 1063 ++++++++++++++++----------------- scripts/po/sk.po | 1061 +++++++++++++++++---------------- scripts/po/sr.po | 1071 ++++++++++++++++----------------- scripts/po/sr(a)latin.po | 1074 ++++++++++++++++----------------- scripts/po/sv.po | 1003 +++++++++++++++---------------- scripts/po/tr.po | 1076 ++++++++++++++++----------------- scripts/po/uk.po | 1077 ++++++++++++++++----------------- scripts/po/zh_CN.po | 1039 ++++++++++++++++---------------- scripts/po/zh_TW.po | 1049 ++++++++++++++++---------------- src/pacman/po/ar.po | 347 +++++------ src/pacman/po/ast.po | 343 +++++------ src/pacman/po/bg.po | 357 ++++++----- src/pacman/po/br.po | 357 ++++++----- src/pacman/po/ca.po | 571 +++++++++--------- src/pacman/po/cs.po | 360 ++++++----- src/pacman/po/da.po | 367 ++++++------ src/pacman/po/de.po | 353 ++++++----- src/pacman/po/el.po | 400 ++++++------- src/pacman/po/en_GB.po | 355 ++++++----- src/pacman/po/eo.po | 350 ++++++----- src/pacman/po/es.po | 372 ++++++------ src/pacman/po/es_419.po | 366 ++++++------ src/pacman/po/eu.po | 351 +++++------ src/pacman/po/eu_ES.po | 351 +++++------ src/pacman/po/fi.po | 347 +++++------ src/pacman/po/fr.po | 362 ++++++------ src/pacman/po/gl.po | 351 +++++------ src/pacman/po/hr.po | 358 ++++++----- src/pacman/po/hu.po | 350 +++++------ src/pacman/po/id.po | 347 +++++------ src/pacman/po/it.po | 404 +++++++------ src/pacman/po/ja.po | 356 ++++++----- src/pacman/po/kk.po | 343 +++++------ src/pacman/po/ko.po | 365 ++++++------ src/pacman/po/lt.po | 385 ++++++------ src/pacman/po/nb.po | 409 ++++++------- src/pacman/po/nl.po | 357 ++++++----- src/pacman/po/pacman.pot | 325 +++++----- src/pacman/po/pl.po | 359 ++++++----- src/pacman/po/pt.po | 401 ++++++------- src/pacman/po/pt_BR.po | 358 ++++++----- src/pacman/po/ro.po | 353 ++++++----- src/pacman/po/ru.po | 355 ++++++----- src/pacman/po/sk.po | 413 +++++++------ src/pacman/po/sl.po | 348 +++++------ src/pacman/po/sr.po | 355 ++++++----- src/pacman/po/sr(a)latin.po | 357 ++++++----- src/pacman/po/sv.po | 365 ++++++------ src/pacman/po/tr.po | 361 ++++++----- src/pacman/po/uk.po | 357 ++++++----- src/pacman/po/zh_CN.po | 399 ++++++------- src/pacman/po/zh_TW.po | 379 ++++++------ 124 files changed, 33055 insertions(+), 33645 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v5.1.1-199-gf9f22fde
by Allan McRae 12 Aug '19

12 Aug '19

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via f9f22fded2f05ae1edb5af3bd0e3a4aba2f5ce34 (commit) via 18a64400617259b34ccf014682fd8022d551a036 (commit) from 75837a2717c3b5654149393d6ec0e0977a7ddc2f (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit f9f22fded2f05ae1edb5af3bd0e3a4aba2f5ce34 Author: László Várady <laszlo.varady93(a)gmail.com> Date: Mon Aug 5 15:11:19 2019 +0200 pacman/callback: fix buffer over-read Commit 11ab9aa9f5f0f3873df89c73e8715b82f485bd9b replaced a strcpy() call with memcpy(), without copying the terminating null character. Since fname is allocated with malloc(), subsequent strstr() calls will overrun the buffer's boundary. Signed-off-by: László Várady <laszlo.varady93(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 18a64400617259b34ccf014682fd8022d551a036 Author: Dave Reisner <dreisner(a)archlinux.org> Date: Fri Jun 28 06:43:32 2019 -0400 meson: remove tap-driver.py, use meson's TAP protocol This includes a patch from Andrew to fix pactest's TAP output for subtests. Original TAP support in meson was added in 0.50, but 0.51 contains a bugfix that ensures the test still work with the --verbose flag passed to meson test, so let's depend on that. ----------------------------------------------------------------------- Summary of changes: build-aux/tap-driver.py | 296 --------------------- src/pacman/callback.c | 4 +- test/pacman/meson.build | 675 +++++++++++++++++++++++------------------------ test/pacman/tap.py | 3 +- test/scripts/meson.build | 3 +- 5 files changed, 337 insertions(+), 644 deletions(-) delete mode 100644 build-aux/tap-driver.py hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [GIT] The official pacman repository branch, release/5.1.x, updated. v5.1.3-1-gb4c7a06f
by Allan McRae 12 Aug '19

12 Aug '19

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, release/5.1.x has been updated via b4c7a06f7983d9f43f54b0ded9cf5c0eb126246c (commit) from 1bf767234363f7ad5933af3f7ce267c123017bde (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit b4c7a06f7983d9f43f54b0ded9cf5c0eb126246c Author: Allan McRae <allan(a)archlinux.org> Date: Mon Aug 12 11:25:56 2019 +1000 Pull translation updates from Transifex Signed-off-by: Allan McRae <allan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: lib/libalpm/po/ar.po | 8 ++-- lib/libalpm/po/ast.po | 6 +-- lib/libalpm/po/bg.po | 6 +-- lib/libalpm/po/br.po | 18 +++++---- lib/libalpm/po/ca.po | 18 ++++----- lib/libalpm/po/cs.po | 10 ++--- lib/libalpm/po/da.po | 6 +-- lib/libalpm/po/de.po | 6 +-- lib/libalpm/po/el.po | 75 ++++++++++++++++++------------------- lib/libalpm/po/en_GB.po | 6 +-- lib/libalpm/po/eo.po | 6 +-- lib/libalpm/po/es.po | 12 +++--- lib/libalpm/po/es_419.po | 12 +++--- lib/libalpm/po/eu.po | 6 +-- lib/libalpm/po/eu_ES.po | 6 +-- lib/libalpm/po/fi.po | 6 +-- lib/libalpm/po/fr.po | 6 +-- lib/libalpm/po/gl.po | 6 +-- lib/libalpm/po/hr.po | 6 +-- lib/libalpm/po/hu.po | 6 +-- lib/libalpm/po/id.po | 12 +++--- lib/libalpm/po/it.po | 76 ++++++++++++++++++++------------------ lib/libalpm/po/ja.po | 6 +-- lib/libalpm/po/kk.po | 6 +-- lib/libalpm/po/ko.po | 6 +-- lib/libalpm/po/libalpm.pot | 6 +-- lib/libalpm/po/lt.po | 6 +-- lib/libalpm/po/nb.po | 60 +++++++++++++++--------------- lib/libalpm/po/nl.po | 6 +-- lib/libalpm/po/pl.po | 6 +-- lib/libalpm/po/pt.po | 47 +++++++++++------------ lib/libalpm/po/pt_BR.po | 6 +-- lib/libalpm/po/ro.po | 6 +-- lib/libalpm/po/ru.po | 8 ++-- lib/libalpm/po/sk.po | 6 +-- lib/libalpm/po/sl.po | 35 +++++++++--------- lib/libalpm/po/sr.po | 6 +-- lib/libalpm/po/sr(a)latin.po | 8 ++-- lib/libalpm/po/sv.po | 15 ++++---- lib/libalpm/po/tr.po | 6 +-- lib/libalpm/po/uk.po | 6 +-- lib/libalpm/po/zh_CN.po | 69 +++++++++++++++++----------------- lib/libalpm/po/zh_TW.po | 14 +++---- scripts/po/br.po | 8 ++-- scripts/po/ca.po | 19 +++++----- scripts/po/cs.po | 4 +- scripts/po/el.po | 47 +++++++++++++++++------ scripts/po/es.po | 8 ++-- scripts/po/es_419.po | 6 +-- scripts/po/fr.po | 14 +++---- scripts/po/id.po | 8 ++-- scripts/po/it.po | 42 ++++++++++++++++----- scripts/po/lt.po | 32 ++++++++++++---- scripts/po/nb.po | 23 ++++++------ scripts/po/nl.po | 8 ++-- scripts/po/pt.po | 92 +++++++++++++++++++++++++--------------------- scripts/po/pt_BR.po | 6 +-- scripts/po/ru.po | 9 +++-- scripts/po/sr(a)latin.po | 2 +- scripts/po/zh_CN.po | 7 ++-- scripts/po/zh_TW.po | 17 +++++---- src/pacman/po/ar.po | 4 +- src/pacman/po/br.po | 6 +-- src/pacman/po/ca.po | 16 ++++---- src/pacman/po/cs.po | 4 +- src/pacman/po/el.po | 48 ++++++++++++++---------- src/pacman/po/es.po | 11 +++--- src/pacman/po/es_419.po | 9 ++--- src/pacman/po/fr.po | 7 ++-- src/pacman/po/it.po | 51 +++++++++++++++---------- src/pacman/po/lt.po | 27 +++++++++----- src/pacman/po/nb.po | 36 +++++++++--------- src/pacman/po/pl.po | 4 +- src/pacman/po/pt.po | 49 ++++++++++++------------ src/pacman/po/ru.po | 2 +- src/pacman/po/sr(a)latin.po | 2 +- src/pacman/po/sv.po | 19 +++++----- src/pacman/po/zh_CN.po | 10 ++--- src/pacman/po/zh_TW.po | 25 +++++++------ 79 files changed, 725 insertions(+), 610 deletions(-) hooks/post-receive -- The official pacman repository

1 0

[pacman-dev] [PATCH] pacman/callback: fix buffer over-read
by László Várady 05 Aug '19

05 Aug '19

Commit 11ab9aa9f5f0f3873df89c73e8715b82f485bd9b replaced a strcpy() call with memcpy(), without copying the terminating null character. Since fname is allocated with malloc(), subsequent strstr() calls will overrun the buffer's boundary. Signed-off-by: László Várady <laszlo.varady93(a)gmail.com> --- src/pacman/callback.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pacman/callback.c b/src/pacman/callback.c index 22865614..a4c637ce 100644 --- a/src/pacman/callback.c +++ b/src/pacman/callback.c @@ -765,7 +765,7 @@ void cb_dl_progress(const char *filename, off_t file_xfered, off_t file_total) len = strlen(filename); fname = malloc(len + 1); - memcpy(fname, filename, len); + memcpy(fname, filename, len + 1); /* strip package or DB extension for cleaner look */ if((p = strstr(fname, ".pkg")) || (p = strstr(fname, ".db")) || (p = strstr(fname, ".files"))) { /* tack on a .sig suffix for signatures */ -- 2.22.0

3 4

[pacman-dev] [GIT] The official pacman repository branch, master, updated. v5.1.1-197-g75837a27
by Allan McRae 05 Aug '19

05 Aug '19

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via 75837a2717c3b5654149393d6ec0e0977a7ddc2f (commit) via 0318e84546cb368361b94412d0861f9d3971d6b2 (commit) via 72dae345e4218c9ee4410f3738a86c3bbcb1d694 (commit) via b3dd02236c8098f29595587714ffb1945972d60a (commit) via 4e5254dbf3ff82b9190308e5e3501f18b876c419 (commit) via e7156e78b80899a1f434d65e558e0d9471828928 (commit) via 0e67ee55bd0f41ed8f62cc574c03ee27625be317 (commit) via 796c02af4c39b6f90f955d4764676711357c5db0 (commit) via e7a2b2764ad0b4240f87b742fdf0c404be11af03 (commit) via 83f428d974ab39f24a067dd7187f62a9455804dd (commit) via cd475331f4dd0b464ecb281714134ca76e57b39d (commit) via d917109432665a6c7ca903fa727cf9a0dc9c7a0c (commit) via 30acc87b7dfb1d0cf3b7ca5097e47b595b798076 (commit) via 686a9ee8e7775fc8d701e0de8dde06a3b39df8e6 (commit) via 4ca5f5949b42f76867f11eec0a5379ed3eb531d2 (commit) via 1a343d378a9e0c4ea143db9e796cf7262eb0d4cb (commit) via 80321b21ae0f71d3fab758434506aa49f6134ba5 (commit) from 39c20ad4f1d5f6e915b5be8976b6a94885ca3b0c (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 75837a2717c3b5654149393d6ec0e0977a7ddc2f Author: Austin Lund <austin.lund(a)gmail.com> Date: Tue Jul 30 15:01:41 2019 +1000 makepkg: Ignore "<artificial>" source files An artificial symbol can be produced when requesting debugging symbols and the compiler has inlined a function. These symbols will give spurious results when listing source files for inclusion in debug packages. This will ignore these symbols and avoid an error that can be generated when creating a debug package. Signed-off-by: Austin Lund <austin.lund(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 0318e84546cb368361b94412d0861f9d3971d6b2 Author: Dave Reisner <dreisner(a)archlinux.org> Date: Sat Jun 29 12:58:28 2019 -0400 build-aux: detect build dir based on build.ninja .ninja.log is only present after building (successful or otherwise) the project, but build.ninja is output as soon as the build dir is setup. Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 72dae345e4218c9ee4410f3738a86c3bbcb1d694 Author: Dave Reisner <dreisner(a)archlinux.org> Date: Sat Jun 29 12:58:26 2019 -0400 meson: port over checks for types used from sys/types.h These are defined by a POSIX standard, and we should assert that we have them, or define sane fallbacks (as per sys_types.h(0P)). Signed-off-by: Allan McRae <allan(a)archlinux.org> commit b3dd02236c8098f29595587714ffb1945972d60a Author: Dave Reisner <dreisner(a)archlinux.org> Date: Sat Jun 29 12:58:25 2019 -0400 meson: drop checks for things we don't use This was ported over from the AC_CHECK_{FUNCS,HEADERS} lists in configure.ac, but I never actually checked if the resulting CPP defines are used. Turns out, lots of symbols, not a lot of define usage. Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 4e5254dbf3ff82b9190308e5e3501f18b876c419 Author: Andrew Gregory <andrew.gregory.8(a)gmail.com> Date: Fri Jun 7 21:12:17 2019 -0700 create coredump on segfault Overriding the segfault handler prevents the creation of core dumps by the default handler, which makes debugging segfaults difficult. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit e7156e78b80899a1f434d65e558e0d9471828928 Author: Andrew Gregory <andrew.gregory.8(a)gmail.com> Date: Fri Jun 7 21:12:16 2019 -0700 sighandler: block signals while handling SIGSEGV If we get SIGSEGV we need to bail out quickly, leaving other signals unblocked could lead to other signal handlers getting triggered. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 0e67ee55bd0f41ed8f62cc574c03ee27625be317 Author: morganamilo <morganamilo(a)gmail.com> Date: Tue Jun 11 17:43:26 2019 +0100 Correctly report a download failiure for 404s Currently when caling alpm_trans_commit, if fetching a package restults in a 404 (or other non 400 response code), the function returns -1 but errno is never set. This patch sets errno to ALPM_ERR_RETRIEVE. Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 796c02af4c39b6f90f955d4764676711357c5db0 Author: Eli Schwartz <eschwartz(a)archlinux.org> Date: Tue Jun 25 16:28:17 2019 -0400 meson: use dependency('gpgme') exclusively This works everywhere that gpgme >= 1.13.0 because it is a pkg-config dependency, and meson 0.51 adds a fallback config-tool dependency provider that detects older versions of gpgme seamlessly via gpgme-config. Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit e7a2b2764ad0b4240f87b742fdf0c404be11af03 Author: Eli Schwartz <eschwartz(a)archlinux.org> Date: Tue Jun 25 16:28:16 2019 -0400 meson: use not_found_message when dependencies are not found The default state of `dependency()` is `required: true`, which means if a dependency is not found, meson immediately aborts and does not log our `error()` messages. meson 0.50 has builtin support for dependencies with custom error messages. The alternative would be to specify `required: false` everywhere, and only then to key off of `dep.found()`. Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 83f428d974ab39f24a067dd7187f62a9455804dd Author: Eli Schwartz <eschwartz(a)archlinux.org> Date: Tue Jun 25 16:28:15 2019 -0400 meson: bump the minimum supported version of meson to 0.51 We haven't reached our first public release of the meson build backend yet, so we have lots of flexibility for this... and build dependencies are easier to upgrade than runtime dependencies anyway. Updating meson allows us to make use of a bunch of new features that rewquire the latest version of meson. Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit cd475331f4dd0b464ecb281714134ca76e57b39d Author: Eli Schwartz <eschwartz(a)archlinux.org> Date: Tue Jun 25 17:20:06 2019 -0400 bash-completion: use POSIX character classes in regular expressions bash uses POSIX extended regular expressions via regex(3), which does not guarantee support for shorthand character classes. Although glibc supports it, msys2-runtime does not. Make sure the completion script works (hopefully) everywhere by being more portable. Fixes: https://github.com/msys2/MSYS2-packages/pull/1549 Original-patch-by: plotasse <platos(a)protonmail.ch> Signed-off-by: Eli Schwartz <eschwartz(a)archlinux.org> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit d917109432665a6c7ca903fa727cf9a0dc9c7a0c Author: Allan McRae <allan(a)archlinux.org> Date: Tue Jun 25 21:56:58 2019 +1000 makepkg: do not exit immediately on dependency install failures Fixes FS#63000 Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 30acc87b7dfb1d0cf3b7ca5097e47b595b798076 Author: Andrew Gregory <andrew.gregory.8(a)gmail.com> Date: Sat Jun 8 12:50:45 2019 -0700 use consistent time notation for the log %X is locale-dependent, making it impossible to reliably parse and potentially overflowing the buffer. %T is consistent across locales. Also fixes some adjacent whitespace. Signed-off-by: Andrew Gregory <andrew.gregory.8(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 686a9ee8e7775fc8d701e0de8dde06a3b39df8e6 Author: morganamilo <morganamilo(a)gmail.com> Date: Fri Jun 14 02:50:10 2019 +0100 pacman: correctly free lists Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 4ca5f5949b42f76867f11eec0a5379ed3eb531d2 Author: Allan McRae <allan(a)archlinux.org> Date: Thu Jun 20 16:28:44 2019 +1000 Fix compiler warnings with gcc-9.1 Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 1a343d378a9e0c4ea143db9e796cf7262eb0d4cb Author: Dave Reisner <dreisner(a)archlinux.org> Date: Mon Jun 17 07:42:51 2019 -0400 free makedepends/checkdepends when freeing packages Credit to Andrew for identifying source of the leak. Signed-off-by: Allan McRae <allan(a)archlinux.org> commit 80321b21ae0f71d3fab758434506aa49f6134ba5 Author: morganamilo <morganamilo(a)gmail.com> Date: Fri Jun 7 00:10:56 2019 +0100 pacman: fix error during -Fy Signed-off-by: morganamilo <morganamilo(a)gmail.com> Signed-off-by: Allan McRae <allan(a)archlinux.org> ----------------------------------------------------------------------- Summary of changes: build-aux/update-po | 2 +- lib/libalpm/dload.c | 1 + lib/libalpm/log.c | 6 +-- lib/libalpm/package.c | 2 + meson.build | 87 ++++++++++------------------------- meson_options.txt | 2 - scripts/completion/bash_completion.in | 6 +-- scripts/libmakepkg/tidy/strip.sh.in | 2 +- scripts/makepkg.sh.in | 4 +- src/pacman/callback.c | 2 +- src/pacman/database.c | 6 ++- src/pacman/files.c | 2 +- src/pacman/pacman.c | 2 +- src/pacman/query.c | 2 +- src/pacman/sighandler.c | 30 +++++++++--- 15 files changed, 69 insertions(+), 87 deletions(-) hooks/post-receive -- The official pacman repository

1 0