d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
70 Commits 6 Branches 133 Tags
Commit Graph

29 Commits

Author SHA1 Message Date
Martin Matuska
533ab3c53e Update vendor/libarchive to git 92366744a52f3fa83c3899e375e415a5080a05f2 
Relevant vendor changes:
  PR #905: Support for Zstandard read and write filters
  PR #922: Avoid overflow when reading corrupt cpio archive
  Issue #935: heap-based buffer overflow in xml_data (CVE-2017-14166)
  OSS-Fuzz 2936: Place a limit on the mtree line length
  OSS-Fuzz 2394: Ensure that the ZIP AES extension header is large enough
  OSS-Fuzz 573: Read off-by-one error in RAR archives (CVE-2017-14502)

Security: CVE-2017-14166, CVE-2017-14502
 2017-09-30 23:33:19 +00:00
Martin Matuska
218287e0e4 Update vendor/libarchive to git f2230fcaed3159d10caed63d9a20caa9fdc94c62 
Vendor fixes:
  #909: Fix use after free in cpio test_option_lz4

Reported by:	Coverity (ngie@)
 2017-05-11 11:13:02 +00:00
Martin Matuska
87a07d9d6c Update vendor/libarchive to git c253f0aae9ac86a617b4f814137e07757df72391 
Vendor changes (FreeBSD-related):
  PR 897: test for ZIP archives with invalid EOCD headers
  PR 901: fix invalid renaming of sparse files
  OSS-Fuzz issue 497: remove fallback tree in LZX decoder
  OSS-Fuzz issue 527: rewrite expressions in lz4 filter
  OSS-Fuzz issue 577: fix integer overflow in cpio reader
  OSS-Fuzz issue 862: fix numerc parsing in mtree reader
  OSS-Fuzz issue 1097: fix undefined shift in rar reader
  cpio: various optimizations and memory leak fixes
 2017-05-03 23:55:12 +00:00
Martin Matuska
4a7f683434 Update vendor/libarchive to git 5881c9021a85668bd945593f5ba43a0d22c53d71 
Vendor changes (FreeBSD-related):
  Break ACL read/write code into platform-specific source files

Vendor bugfixes (FreeBSD-related):
  PR 867 (bsdcpio): show numeric uid/gid when names are not found
  PR 870 (seekable zip): accept files with valid ZIP64 EOCD headers
  PR 880 (pax): Fix handling of "size" pax header keyword
  PR 887 (crypto): Discard 3072 bytes instead of 1024 of first keystream
  OSS-Fuzz issue 806 (mtree): rework mtree_atol10 integer parser
  Unbreak static dependency on libbz2
 2017-03-20 11:12:31 +00:00
Martin Matuska
46ab065716 Update vendor/libarchive to git a15c7f7b496ba4cefbcaf6f8ac637db4f3009a58 
Documentation, style, test suite changes and typo fixes.
New bsdtar tests for --acls and --fflags options.
 2017-03-02 21:13:25 +00:00
Martin Matuska
4b729aff5b Update vendor/libarchive to git d6b1bb9f7ea7bc153b7356e8e345c9e48005821a 
Release 3.3.1

Notable vendor changes:
  PR #501: improvements in ACL path handling
  PR #724: fix hang when reading malformed cpio files
  PR #864: fix out of bounds read with malformed GNU tar archives
  Test suite improvements

New options to bsdtar that enable or disable reading and/or writing of:
  Access Control Lists (--acls, --no-acls)
  Extended file flags (--fflags, --no-fflags)
  Extended attributes (--xattrs, --no-xattrs)
 2017-03-02 21:02:17 +00:00
Martin Matuska
79b08f16f5 Update vendor/libarchive to git 2a2488a81599f9cd065a8254b16a6fd48d81c3b4 
Vendor bugfixes:
PR #843: Fix memory leak of struct archive_entry in cpio/cpio.c
PR #851: Spelling fixes
Fix two protoypes in manual page archive_read_disk.3
 2016-12-30 01:34:06 +00:00
Martin Matuska
cda329a1ca Update vendor/libarchive to git to 42a3408ac7df1e69bea9ea12b72e14f59f7400c0 
Vendor bugfixes:

PR 844: Coverity bug fixes in tests
PR 846: Spelling fixes
PR 850: Fix issues with reading certain jar files
PR 826: OpenSSL 1.1 support
PR 830, 831, 833: Spelling fixes
OSS-Fuzz 227, 230, 239: Fix possible memory leak in archive_read_free()
OSS-Fuzz 237: Fix heap buffer overflow when reading invalid ar archives
OSS-Fuzz 286: Bugfix in archive_strncat_l()
 2016-12-27 00:51:53 +00:00
Martin Matuska
8e86d3576b Update vendor/libarchive to git to 30528ed7a9f479f1c363ee8cfa1c5eb4c7d9be10 
Vendor bugfixes:

PR 826: OpenSSL 1.1 support
PR 830, 831, 833: Spelling fixes
OSS-Fuzz 227, 230, 239: Fix possible memory leak in archive_read_free()
OSS-Fuzz 237: Fix heap buffer overflow when reading invalid ar archives
 2016-12-15 15:35:53 +00:00
Enji Cooper
373c71780b Free p (the memory allocated via slurpfile) when done with the contents 
Reported by:	Coverity
CID:	1331631, 1331632, 1331633, 1331646

Obtained from: libarchive (ebe29c0ec3b1aaa424df9cf884721c6018c676f4)
 2016-12-12 02:09:31 +00:00
Martin Matuska
36f3c6516a Update vendor/libarchive to git ddb3954bfdb9a0a98d50fb1c50cbecb603d9adf0 
Vendor bugfixes:

libarchive #831:
  Spelling fixes
libarchive #832:
  Relax sanity checks of number fields in tar header even more
OSS-Fuzz #16:
  Fix possible hang in uudecode_filter_read()
OSS-Fuzz #220:
  Reject an 'ar' filename table larger than 1GB or a filename larger
  than 1MB.
 2016-12-06 00:35:20 +00:00
Martin Matuska
930550a55e Update vendor/libarchive to git 629358182b04d7de2316bbd29708c58ddf797fd2 
Libarchive 3.2.2
 2016-10-24 13:51:45 +00:00
Martin Matuska
62583e4b79 Update vendor/libarchive to git e3bdbbf3475c3abf264e563c753a20972095665e 
Important vendor bugfixes (relevant to FreeBSD):
#801: FreeBSD Coverity report: resource leak in libarchive/tar/test/main.c
 2016-10-13 11:34:23 +00:00
Martin Matuska
adb01b286d Update vendor/libarchive to git 024be27d1b299c030e8841bed3002ee07ba9eedc 
Important vendor bugfixes (relevant to FreeBSD):
#747: Out of bounds read in mtree parser
#761: heap-based buffer overflow in read_Header (7-zip)
#784: Invalid file on bsdtar command line results in internal errors (1)

PR:		213092 (1)
Obtained from:	https://github.com/libarchive/libarchive
 2016-10-04 11:44:21 +00:00
Martin Matuska
5b0ba62993 Update vendor/libarchive to git 6a0d970f70102fe50ee9f1e51a2e4c048985e616 
Vendor issues fixed:

Issue #744: Very long pathnames evade symlink checks
Issue #748: libarchive can compress, but cannot decompress zip some files
PR #750: ustar: fix out of bounds read on empty string ("") filename
PR #755: fix use of acl_get_flagset_np() on FreeBSD
 2016-08-13 21:20:06 +00:00
Martin Matuska
a34769f8e4 Update vendor/libarchive to git f502a81fcd7c331204bf53cc40cbf966ebb28a42 2016-06-21 15:18:22 +00:00
Martin Matuska
dc919cebaf Update vendor/libarchive to git d85976e7ff4a062e1de6e04dab7bb78e3344768f 
Fixed vendor issues:
Issue 553: Fix broken decryption for ZIP files
Issue 657: Allow up to 8k for the test root directory name
Issue 682: Correctly write gnutar filenames of exactly 512 bytes
Issue 708: tar should fail if a named input file is missing
PR 715: Fix libarchive/archive_read_support_format_mtree.c:1388:11:
        error: array subscript is above array bounds
 2016-06-18 08:25:31 +00:00
Martin Matuska
8eb6639196 Update vendor/libarchvie to git commit 860ec63 
Integrates my pull request #709
 2016-05-16 04:47:32 +00:00
Martin Matuska
4e579f6c94 Update vendor/libarchive/dist to git commit 61c56e5 (post 3.2.0) 2016-05-11 10:19:44 +00:00
Martin Matuska
8c8f03ca5b Keep full libarchive distribution in vendor branch (prep for 3.2.0 update) 2016-05-11 10:10:11 +00:00
Martin Matuska
43341e7cf4 Trim libarchive/dist using FREEBSD-Xlist 2016-05-10 21:12:32 +00:00
Martin Matuska
6a316f322a Update libarchive's vendor dist to version 3.1.2 from release branch. 
Git branch:	release
Git commit:	19f23e191f9d3e1dd2a518735046100419965804

Obtained from:	https://github.com/libarchive/libarchive.git
 2013-03-21 18:59:02 +00:00
Martin Matuska
81418b36c0 Update libarchive's vendor dist to version 3.0.4 from release branch. 
Git branch:	release
Git commit:	8076b31490c90aaf0edccecf760004c30bd95edc

Obtained from:	https://github.com/libarchive/libarchive.git
 2012-07-27 08:24:12 +00:00
Martin Matuska
132160f774 Update libarchive's vendor dist to latest changes in release branch. 
Git branch:	release
Git commit:     e2cc36190d7d733b3ac6744ec860d09776c9da02

Obtained from:  https://github.com/libarchive/libarchive.git
 2012-02-25 00:16:00 +00:00
Martin Matuska
4d44c8d182 Update libarchive's vendor dist to latest changes in release branch. 
Now all the gcc warnings I have reported upstream should be fixed.

Git branch:	release
Git commit:	01580b4298a946fb31e822a083bf49e9f37809ac

Obtained from:	https://github.com/libarchive/libarchive.git
 2012-02-09 19:13:36 +00:00
Martin Matuska
bfd7accf01 Update libarchive's dist to latest changes in release branch 
Git branch:	release
Git commit:	c477edc817b4382a1d0b2ff8c7b619af13bd349e

Obtained from:	https://github.com/libarchive/libarchive.git
 2012-02-09 10:56:05 +00:00
Martin Matuska
17993d47e9 Update vendor libarchive dist to new "release" branch (post 3.0.3) 
Git branch:	release
Git commit:	9af87742342aa4f37a22ec12c4cc1c82e00ffa2f

Obtained from:	https://github.com/libarchive/libarchive.git
 2012-02-08 12:53:14 +00:00
Martin Matuska
7691a6970b Update to vendor revision 3982 
Obtained from:	http://libarchive.googlecode.com/svn/release/2.8
 2011-12-26 22:25:58 +00:00
Martin Matuska
35fa5e2f58 Vendor import of libarchive (release/2.8, r3824) 
Obtained from:	http://libarchive.googlecode.com/svn/release/2.8
 2011-12-20 22:47:56 +00:00