- Pacman-dev - lists.archlinux.org

[Git][pacman/pacman][master] 3 commits: libmakepkg - add wrapper function for objcopy
by Allan McRae (＠allan) 29 Nov '24

29 Nov '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 71afd4d8 by Allan McRae at 2024-11-27T19:46:48+10:00 libmakepkg - add wrapper function for objcopy Using objcopy can result in file permission changes. We work around this by using "cat" to copy the temporary output file into the target. Extract this code into a utility function. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - e0162a68 by Jan Steffens at 2024-11-27T19:50:46+10:00 strip: Overwrite debuglink when it's already present When objcopy encounters an already-present section, adding the new debuglink will fail with a warning. Remove any existing `.gnu_debuglink` section to work around this problem. Arch Linux's `rust` package is affected by this. Apparently when LLVM's LLD links in `/usr/lib/Scrt1.o` it will also copy the `.gnu_debuglink` section. See: https://bugs.gentoo.org/787623 - - - - - 91546004 by Jan Steffens at 2024-11-27T19:50:57+10:00 strip: Treat bare object files like static libs, not shared libs Debug symbols should only be split from finally linked ELFs, not bare object files. We're already excluding static libraries from splitting for a similar reason. The `.gnu_debuglink` sections are also mishandled by LLVM's LLD, which copies them to its output. For example, this affects Arch Linux's `/usr/lib/Scrt1.o`. While we're here (and it changes the code less), also strip GNU LTO data from bare objects, again for the same reason we're removing it from static libraries, and apply static library stripping instead of shared library stripping. See: https://bugs.gentoo.org/787623 - - - - - 1 changed file: - scripts/libmakepkg/tidy/strip.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/a2d029388c7c206f557645… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/a2d029388c7c206f557645… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][release/7.0.x] 3 commits: Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc
by Allan McRae (＠allan) 16 Nov '24

16 Nov '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 2a147eb7 by Rafael Fontenelle at 2024-11-16T13:17:19+10:00 Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc (cherry picked from commit 60ec2684584b8a6a9d3be43ec2d6881e5eb84ed2) - - - - - e3aedfb7 by Chih-Hsuan Yen at 2024-11-16T13:17:29+10:00 Correctly configure landlock for older ABIs For example, with landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not set in ruleset_attr.handled_access_fs, so it should not be set in path_beneath.allowed_access either. Otherwise, landlock_add_rule fails with -EINVAL, and pacman complains: > error: restricting filesystem access failed because the landlock rule for the temporary download directory could not be added! The change is tested on Debian Bookworm kernel linux-image-6.1.0-25-cloud-amd64 6.1.106-3. (cherry picked from commit e80569f5dabfb91d073ee474f0194f69a12702e8) - - - - - c685ae64 by Guillaume at 2024-11-16T13:17:39+10:00 fix a segfault in sandbox.c if handle->dlcb is null (cherry picked from commit a2d029388c7c206f5576456f91bfbea2dca98c96) - - - - - 3 changed files: - doc/makepkg.8.asciidoc - lib/libalpm/sandbox.c - lib/libalpm/sandbox_fs.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/77361331ae3864c6ea880e… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/77361331ae3864c6ea880e… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] fix a segfault in sandbox.c if handle->dlcb is null
by Allan McRae (＠allan) 29 Sep '24

29 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: a2d02938 by Guillaume at 2024-09-28T08:10:46+00:00 fix a segfault in sandbox.c if handle->dlcb is null - - - - - 1 changed file: - lib/libalpm/sandbox.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/a2d029388c7c206f5576456… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/a2d029388c7c206f5576456… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] pactest: drop trailing spaces from README
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 8a603619 by Jelle van der Waa at 2024-09-28T01:44:17+00:00 pactest: drop trailing spaces from README - - - - - 1 changed file: - test/pacman/README View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/8a60361949ec987b300588c… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/8a60361949ec987b300588c… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Correctly configure landlock for older ABIs
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: e80569f5 by Chih-Hsuan Yen at 2024-09-28T00:35:10+00:00 Correctly configure landlock for older ABIs For example, with landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not set in ruleset_attr.handled_access_fs, so it should not be set in path_beneath.allowed_access either. Otherwise, landlock_add_rule fails with -EINVAL, and pacman complains: > error: restricting filesystem access failed because the landlock rule for the temporary download directory could not be added! The change is tested on Debian Bookworm kernel linux-image-6.1.0-25-cloud-amd64 6.1.106-3. - - - - - 1 changed file: - lib/libalpm/sandbox_fs.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/e80569f5dabfb91d073ee47… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/e80569f5dabfb91d073ee47… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 60ec2684 by Rafael Fontenelle at 2024-09-25T15:11:51-03:00 Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc - - - - - 1 changed file: - doc/makepkg.8.asciidoc View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/60ec2684584b8a6a9d3be43… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/60ec2684584b8a6a9d3be43… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[PATCH] fix a segfault in sandbox.c if handle->dlcb is null
by Guillaume Benoit 27 Sep '24

27 Sep '24

diff --git a/lib/libalpm/sandbox.c b/lib/libalpm/sandbox.c index 1e96dc00..cdc01dc7 100644 --- a/lib/libalpm/sandbox.c +++ b/lib/libalpm/sandbox.c @@ -235,7 +235,9 @@ bool _alpm_sandbox_process_cb_download(alpm_handle_t *handle, int callback_pipe) ASSERT(read_from_pipe(callback_pipe, filename, filename_size) != -1, FREE(filename); return false); filename[filename_size] = '\0'; - handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + if(handle->dlcb) { + handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + } FREE(filename); return true; }

2 2

[Git][pacman/pacman][release/7.0.x] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 77361331 by Allan McRae at 2024-09-08T12:18:38+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan@archlinux.org> (cherry picked from commit 7bc5d55b56f41518e0a53eed13d4c523aea848e5) - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 7bc5d55b by Allan McRae at 2024-09-08T11:49:21+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan@archlinux.org> - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][release/7.0.x] pacman/util.c: fix segfault when replace in strreplace is NULL
by Allan McRae (＠allan) 18 Aug '24

18 Aug '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 6270dd81 by KaranveerB at 2024-08-18T22:42:54+10:00 pacman/util.c: fix segfault when replace in strreplace is NULL (cherry picked from commit 4c1820493860d57ba9b98760762e947a4367e34b) - - - - - 1 changed file: - src/pacman/util.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/6270dd81a3c216072f3c3a4… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/6270dd81a3c216072f3c3a4… You're receiving this email because of your account on gitlab.archlinux.org.

1 0