- Pacman-dev - lists.archlinux.org

[PATCH] fix a segfault in sandbox.c if handle->dlcb is null
by Guillaume Benoit 27 Sep '24

27 Sep '24

diff --git a/lib/libalpm/sandbox.c b/lib/libalpm/sandbox.c index 1e96dc00..cdc01dc7 100644 --- a/lib/libalpm/sandbox.c +++ b/lib/libalpm/sandbox.c @@ -235,7 +235,9 @@ bool _alpm_sandbox_process_cb_download(alpm_handle_t *handle, int callback_pipe) ASSERT(read_from_pipe(callback_pipe, filename, filename_size) != -1, FREE(filename); return false); filename[filename_size] = '\0'; - handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + if(handle->dlcb) { + handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + } FREE(filename); return true; }

2 2

[Git][pacman/pacman][release/7.0.x] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 77361331 by Allan McRae at 2024-09-08T12:18:38+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan(a)archlinux.org> (cherry picked from commit 7bc5d55b56f41518e0a53eed13d4c523aea848e5) - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 7bc5d55b by Allan McRae at 2024-09-08T11:49:21+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][release/7.0.x] pacman/util.c: fix segfault when replace in strreplace is NULL
by Allan McRae (＠allan) 18 Aug '24

18 Aug '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 6270dd81 by KaranveerB at 2024-08-18T22:42:54+10:00 pacman/util.c: fix segfault when replace in strreplace is NULL (cherry picked from commit 4c1820493860d57ba9b98760762e947a4367e34b) - - - - - 1 changed file: - src/pacman/util.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/6270dd81a3c216072f3c3a4… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/6270dd81a3c216072f3c3a4… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 2 commits: pacman/util.c: fix segfault when replace in strreplace is NULL
by Allan McRae (＠allan) 18 Aug '24

18 Aug '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 4c182049 by KaranveerB at 2024-08-03T16:29:11-07:00 pacman/util.c: fix segfault when replace in strreplace is NULL - - - - - 6ba5c20e by KaranveerB at 2024-08-03T16:29:26-07:00 pactest: add test for empty replacements strings - - - - - 3 changed files: - src/pacman/util.c - test/pacman/meson.build - + test/pacman/tests/remove-print-empty-replacements.py View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/cf473bcfbd275044250fa6… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/cf473bcfbd275044250fa6… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman] Pushed new branch release/7.0.x
by Allan McRae (＠allan) 02 Aug '24

02 Aug '24

Allan McRae pushed new branch release/7.0.x at Pacman / Pacman -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/tree/release/7.0.x You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 2 commits: Restrict syscalls for the download process whenever possible
by Allan McRae (＠allan) 02 Aug '24

02 Aug '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: f142df92 by Remi Gacogne at 2024-08-02T00:39:45+00:00 Restrict syscalls for the download process whenever possible Signed-off-by: Remi Gacogne <rgacogne(a)archlinux.org> - - - - - cf473bcf by Remi Gacogne at 2024-08-02T00:39:45+00:00 Ensure that the download process cannot get new privileges Signed-off-by: Remi Gacogne <rgacogne(a)archlinux.org> - - - - - 8 changed files: - lib/libalpm/alpm.h - lib/libalpm/dload.c - lib/libalpm/meson.build - lib/libalpm/sandbox.c - + lib/libalpm/sandbox_syscalls.c - + lib/libalpm/sandbox_syscalls.h - meson.build - src/pacman/conf.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/c3aa1bc12367a8c29ddac3… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/c3aa1bc12367a8c29ddac3… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Fix typo in git source handling
by Allan McRae (＠allan) 16 Jul '24

16 Jul '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: c3aa1bc1 by Allan McRae at 2024-07-16T18:51:03+10:00 Fix typo in git source handling Fixes #171 Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/libmakepkg/source/git.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/c3aa1bc12367a8c29ddac31… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/c3aa1bc12367a8c29ddac31… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman] Pushed new tag v7.0.0
by Allan McRae (＠allan) 14 Jul '24

14 Jul '24

Allan McRae pushed new tag v7.0.0 at Pacman / Pacman -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/tree/v7.0.0 You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 6 commits: Prepare tranlsation strings for 7.0.0 release
by Allan McRae (＠allan) 14 Jul '24

14 Jul '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 9841f14f by Allan McRae at 2024-07-14T19:05:03+10:00 Prepare tranlsation strings for 7.0.0 release Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 7299aadd by Allan McRae at 2024-07-14T19:05:03+10:00 Update README for 7.0.0 release Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 3223d620 by Allan McRae at 2024-07-14T19:05:03+10:00 Update NEWS for 7.0.0 release Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - aa1c64b2 by Allan McRae at 2024-07-14T19:11:18+10:00 Update translations for release Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - dd20586b by Allan McRae at 2024-07-14T19:11:18+10:00 Update index.asciidoc for release Also, rebalance columns in release version table. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 138cbae5 by Allan McRae at 2024-07-14T19:11:18+10:00 Update meson versions for release Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 13 changed files: - NEWS - README - doc/index.asciidoc - lib/libalpm/po/ar.po - lib/libalpm/po/ast.po - lib/libalpm/po/az_AZ.po - lib/libalpm/po/bg.po - lib/libalpm/po/br.po - lib/libalpm/po/ca.po - lib/libalpm/po/cs.po - lib/libalpm/po/da.po - lib/libalpm/po/de.po - lib/libalpm/po/el.po View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/95e71ce52b4789a48aa01b… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/95e71ce52b4789a48aa01b… You're receiving this email because of your account on gitlab.archlinux.org.

1 0