[pacman-dev] [GIT] The official pacman repository branch, master, updated. v5.0.1-182-gbcc9c417

Thu Jul 6 09:11:40 UTC 2017

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The official pacman repository".

The branch, master has been updated
       via  bcc9c417ae989ffda193083807142171c7a0190f (commit)
       via  c44c649a5280189ea28a54b82e60fc38279fed23 (commit)
       via  9ab44178f4054ffe26af784c32ca9bddb9793e7e (commit)
       via  1c8b3f2562bb31e52ad0c5fd9eb139d9dda1873e (commit)
       via  d170c4580cba6af1ec50411f3b1e0621165c6300 (commit)
       via  b14ff6603809019f8f92f1650872cb93a110e67e (commit)
       via  d4193d43cf5346b3a8cfc97a4fc354111df34081 (commit)
       via  9c604af0a04cefaccba527e00d31d9ccd724f866 (commit)
       via  3c433abb54e8bc01bed0b2263ded0c339a58585a (commit)
       via  d30878763ce1b5be453b563f2729d7333242e79b (commit)
       via  5f3812868600488de585771273e12a3e68a4d366 (commit)
       via  5a1bf3d80367a64ab90368bbf5282c37714b5086 (commit)
       via  63087c31b5bdd7a16d312d9bf938f6cfd4a635b0 (commit)
       via  a2b776f6c901c706946b49d2b5cadb0c6efd2655 (commit)
       via  1bc79cb9a5067d685ba507fad9b189ed28ad70a0 (commit)
       via  f4e2009e9b01a3ebff8b54e059d4f0422a139016 (commit)
       via  bf468c09562ecfa552f514c9f897742b309e64ee (commit)
       via  12f74fd8950b89da15a397ed26bfeb226e20a443 (commit)
       via  bf23f85d4a844b8e8c70125bce54bbda90cb0019 (commit)
       via  c6b04c04653ba9933fe978829148312e412a9ea7 (commit)
       via  c0a5884b186c9e0e5c54e8515d0982fcba134073 (commit)
      from  4f2fea240d3039294f6614003206a3dd1f67cfc5 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit bcc9c417ae989ffda193083807142171c7a0190f
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Wed May 10 18:54:55 2017 -0400

    alpm_list: abort on memory allocation failure

    This makes it possible to detect a failure in several alpm_list
    functions.  Previously these functions would continue after a failure,
    returning partial results and potentially leaking memory.
    Unfortunately, NULL is a valid return value for the affected functions
    if the input list is empty, so they still do not have a dedicated error
    value.  Callers can at least detect an error by checking if the input
    list was empty.

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit c44c649a5280189ea28a54b82e60fc38279fed23
Author: Levente Polyak <anthraxx at archlinux.org>
Date:   Thu Jul 6 13:57:27 2017 +1000

    makepkg: add more information to .BUILDINFO

    The .BUILDINFO file should retain all the information needed to reproducibly
    build a package.  Add some extra information to the file and also provide a
    version number to keep track of future changes.

    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 9ab44178f4054ffe26af784c32ca9bddb9793e7e
Author: Allan McRae <allan at archlinux.org>
Date:   Thu Jul 6 13:34:31 2017 +1000

    makepkg: set default value for PACKAGER

    In write_pkginfo, we checked if $PACKAGER was undefined, and gave a default
    value if not.  Just do this upfront to simplify this function.

    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 1c8b3f2562bb31e52ad0c5fd9eb139d9dda1873e
Author: Allan McRae <allan at archlinux.org>
Date:   Thu Jul 6 13:27:22 2017 +1000

    makepkg: always write pkgbase

    There is little savings in only writing pkgbase when different to pkgname, and
    it makes determining the pkgbase by parsing .PKGINFO slightly easier. Lets just
    write it...

    Signed-off-by: Allan McRae <allan at archlinux.org>

commit d170c4580cba6af1ec50411f3b1e0621165c6300
Author: Allan McRae <allan at archlinux.org>
Date:   Thu Jul 6 13:26:04 2017 +1000

    makepkg: do not write basever

    Since 8a02abcf19, this attribute will never exist.  Remove check to write it.

    Signed-off-by: Allan McRae <allan at archlinux.org>

commit b14ff6603809019f8f92f1650872cb93a110e67e
Author: Eli Schwartz <eschwartz93 at gmail.com>
Date:   Wed Jul 5 23:14:14 2017 -0400

    libmakepkg: Fix improperly spelled local variable declaration

    Signed-off-by: Eli Schwartz <eschwartz93 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit d4193d43cf5346b3a8cfc97a4fc354111df34081
Author: Eli Schwartz <eschwartz93 at gmail.com>
Date:   Mon Jul 3 23:13:23 2017 -0400

    libmakepkg/integrity: Fix error message not sent to stderr

    Signed-off-by: Eli Schwartz <eschwartz93 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 9c604af0a04cefaccba527e00d31d9ccd724f866
Author: Eli Schwartz <eschwartz93 at gmail.com>
Date:   Mon Jul 3 23:13:22 2017 -0400

    libmakepkg: fix unsanitized source filenames

    There were a couple places where filenames beginning with "-" were not
    properly guarded against by passing them after "--". Some PKGBUILD
    authors are crazy, but we still take those into account.

    Signed-off-by: Eli Schwartz <eschwartz93 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 3c433abb54e8bc01bed0b2263ded0c339a58585a
Author: Christian Hesse <mail at eworm.de>
Date:   Tue Jun 6 21:29:09 2017 +0200

    fix typo in libalpm comment

    contatenate -> concatenate

    Signed-off-by: Christian Hesse <mail at eworm.de>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit d30878763ce1b5be453b563f2729d7333242e79b
Author: Allan McRae <allan at archlinux.org>
Date:   Fri May 12 12:41:20 2017 +0200

    makepkg: introduce SOURCE_DATE_EPOCH

    This patch introduces the SOURCE_DATE_EPOCH environmental variable.  All files
    in a package are adjusted to have their modification dates set to the value
    of SOURCE_DATE_EPOCH, which defaults to "date +%s".

    Setting this variable allows a package that is built twice in the same
    environment to be (potentially) reproducible in that the checksum of the
    generated package file will be the same.

    Also adjust the compression of the mtree file to avoid gzip embedding a
    timestamp.

    Signed-off-by: Levente Polyak <anthraxx at archlinux.org>

commit 5f3812868600488de585771273e12a3e68a4d366
Author: Allan McRae <allan at archlinux.org>
Date:   Fri May 12 12:41:19 2017 +0200

    makepkg: remove build date from .PKGINFO header

    This information is duplicated (in less friendly format) in the "builddate"
    entry and removing it improves reproducible packaging.

    Signed-off-by: Allan McRae <allan at archlinux.org>
    Signed-off-by: Levente Polyak <anthraxx at archlinux.org>

commit 5a1bf3d80367a64ab90368bbf5282c37714b5086
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Wed May 10 18:54:57 2017 -0400

    remove unused byte from user agent buffer

    snprintf prints at most n bytes including the terminating '\0'.  The
    extra reserved byte was never being used.

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 63087c31b5bdd7a16d312d9bf938f6cfd4a635b0
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Wed May 10 18:54:56 2017 -0400

    check for overflow when setting HTTP_USER_AGENT

    gcc7 issues a warning about a potential overflow if left unchecked.

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit a2b776f6c901c706946b49d2b5cadb0c6efd2655
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Wed May 10 18:54:54 2017 -0400

    query_fileowner: avoid buffer overflow

    Copying a string into a buffer that  has just been determined to not be
    able to hold it is obviously incorrect.  The actual error handling
    appears to have been unintentionally removed in
    47762ab687959e48acc2de8592fcf3ba3cfa502b.

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 1bc79cb9a5067d685ba507fad9b189ed28ad70a0
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Wed May 10 18:54:53 2017 -0400

    alpm_unlock: check handle before dereferencing

    Prevents SIGSEGV if we catch SIGINT or SIGHUP before initializing alpm.

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit f4e2009e9b01a3ebff8b54e059d4f0422a139016
Author: Michael Straube <straubem at gmx.de>
Date:   Fri Apr 21 15:42:26 2017 +0200

    pacman.8: fix typo in query options

    Signed-off-by: Michael Straube <straubem at gmx.de>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit bf468c09562ecfa552f514c9f897742b309e64ee
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Sat Apr 22 17:34:11 2017 -0400

    free memory for --overwrite lists

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 12f74fd8950b89da15a397ed26bfeb226e20a443
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Sat Apr 22 17:34:10 2017 -0400

    add send_fakem to valgrind.supp

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit bf23f85d4a844b8e8c70125bce54bbda90cb0019
Author: Andrew Gregory <andrew.gregory.8 at gmail.com>
Date:   Sun Apr 16 23:28:32 2017 -0400

    be_sync: error out if a db cannot be parsed

    Signed-off-by: Andrew Gregory <andrew.gregory.8 at gmail.com>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit c6b04c04653ba9933fe978829148312e412a9ea7
Author: Allan McRae <allan at archlinux.org>
Date:   Mon Apr 17 18:30:05 2017 +1000

    makepkg: create signature files outside of fakeroot

    With recent version of gpg, signing within fakeroot works on the first
    invocation, but fails on later runs.  Sign all packages outside of fakeroot
    to avoid this issue.

    Fixes FS#49946.

    Signed-off-by: Allan McRae <allan at archlinux.org>

commit c0a5884b186c9e0e5c54e8515d0982fcba134073
Author: Allan McRae <allan at archlinux.org>
Date:   Mon Apr 17 18:33:52 2017 +1000

    makepkg: do not create symlinks in build directory

    Setting PKGDEST and friends enables us to keep all built packages in a single
    location.  Symlinking these files into the build directory creates unnecessary
    clutter and requires clean-up in multiple places when removing old version.

    Signed-off-by: Allan McRae <allan at archlinux.org>

-----------------------------------------------------------------------

Summary of changes:
 doc/pacman.8.txt                                   |  2 +-
 lib/libalpm/alpm.c                                 |  2 +-
 lib/libalpm/alpm_list.c                            | 29 ++++++--
 lib/libalpm/be_sync.c                              | 17 +++--
 lib/libalpm/handle.c                               |  2 +
 .../libmakepkg/integrity/generate_signature.sh.in  | 34 +++++++++-
 .../libmakepkg/integrity/verify_signature.sh.in    |  4 +-
 scripts/libmakepkg/source/file.sh.in               |  4 +-
 scripts/makepkg.sh.in                              | 79 ++++++++--------------
 src/pacman/conf.c                                  |  1 +
 src/pacman/pacman.c                                |  9 ++-
 src/pacman/query.c                                 |  1 +
 valgrind.supp                                      |  8 +++
 13 files changed, 119 insertions(+), 73 deletions(-)

hooks/post-receive
-- 
The official pacman repository