From da641b685ab95cad292dfe26fbe7bd0d1f187af0 Mon Sep 17 00:00:00 2001 From: spz Date: Mon, 29 Oct 2018 20:19:03 +0000 Subject: [PATCH] Pullup ticket #5871 - requested by bsiegert textproc/uriparser: security update Revisions pulled up: - textproc/uriparser/Makefile 1.11 - textproc/uriparser/distinfo 1.9 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: bsiegert Date: Mon Oct 29 16:17:25 UTC 2018 Modified Files: pkgsrc/textproc/uriparser: Makefile distinfo Log Message: Update uriparser to 0.9.0. 2018-10-27 -- 0.9.0 >>>>>>>>>>>>> SECURITY >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> * Fixed: Out-of-bounds write in uriComposeQuery* and uriComposeQueryEx* Commit 864f5d4c127def386dd5cc926ad96934b297f04e Thanks to Google Autofuzz team for the report! * Fixed: Detect integer overflow in uriComposeQuery* and uriComposeQueryEx* Commit f76275d4a91b28d687250525d3a0c5509bbd666f Thanks to Google Autofuzz team for the report! * Fixed: Protect uriResetUri* against acting on NULL input Commit f58c25069cf4a986fe17a80c5b38687e31feb539 >>>>>>>>>>>>> SECURITY >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> * Fixed: Be fully compliant to C89 (GitHub #28) and C++98 in test code * Fixed: Fix off-by-one in uriComposeQueryCharsRequired* and ...Ex* Reported space requirements were 1 byte bigger than necessary * Changed: Marked as deprecated: Deprecated functions: uriNormalizeSyntaxMaskRequired[AW] uriParseUri[AW] uriParseUriEx[AW] * Added: Add convenience functions to ease user code to parse a single URI New functions: uriParseSingleUri[AW] uriParseSingleUriEx[AW] uriParseSingleUriExMm[AW] * Added: Support for custom memory managers (GitHub #26, #35), see Doxygen New functions (as extension of existing ones): uriAddBaseUriExMm[AW] uriComposeQueryMallocExMm[AW] uriDissectQueryMallocExMm[AW] uriFreeQueryListMm[AW] uriFreeUriMembersMm[AW] uriNormalizeSyntaxExMm[AW] uriParseSingleUriExMm[AW] uriRemoveBaseUriMm[AW] New functions (for convenience): uriCompleteMemoryManager uriEmulateCalloc uriEmulateReallocarray uriTestMemoryManager New error codes: URI_ERROR_MEMORY_MANAGER_FAULTY URI_ERROR_MEMORY_MANAGER_INCOMPLETE New types: UriFuncCalloc UriFuncFree UriFuncMalloc UriFuncRealloc UriFuncReallocarray UriMemoryManager * Added: Add non-void versions of uriNormalizeSyntaxMaskRequired* New functions: uriNormalizeSyntaxMaskRequiredEx[AW] * Changed: Migrate test suite from CppTest to GoogleTest 1.8.1 * Improved: Make test suite free of memory leaks (GitHub #31) Thanks to AddressSanitizer! * Removed: Support for pointless define URI_SIZEDOWN (GitHub #29) Related configure option --enable-sizedown has also been removed. * Soname: 1:23:0 To generate a diff of this commit: cvs rdiff -u -r1.10 -r1.11 pkgsrc/textproc/uriparser/Makefile cvs rdiff -u -r1.8 -r1.9 pkgsrc/textproc/uriparser/distinfo --- textproc/uriparser/Makefile | 4 ++-- textproc/uriparser/distinfo | 10 +++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/textproc/uriparser/Makefile b/textproc/uriparser/Makefile index fd8404fb0ef3..82ff6e3b3834 100644 --- a/textproc/uriparser/Makefile +++ b/textproc/uriparser/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.10 2018/09/29 18:47:51 wiedi Exp $ +# $NetBSD: Makefile,v 1.10.2.1 2018/10/29 20:19:03 spz Exp $ -DISTNAME= uriparser-0.8.6 +DISTNAME= uriparser-0.9.0 CATEGORIES= textproc MASTER_SITES= ${MASTER_SITE_GITHUB:=uriparser/} GITHUB_RELEASE= ${DISTNAME} diff --git a/textproc/uriparser/distinfo b/textproc/uriparser/distinfo index ffef97f343b5..76275fcc3abb 100644 --- a/textproc/uriparser/distinfo +++ b/textproc/uriparser/distinfo @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.8 2018/08/20 05:23:08 wiz Exp $ +$NetBSD: distinfo,v 1.8.2.1 2018/10/29 20:19:03 spz Exp $ -SHA1 (uriparser-0.8.6.tar.bz2) = 5e0bece039a7ae5b666b710a6db02138da2a1ef5 -RMD160 (uriparser-0.8.6.tar.bz2) = dfa7676bf771b638b80255a63a30b73b002b99cd -SHA512 (uriparser-0.8.6.tar.bz2) = b95e6d7c7f835002f6ea1a9c0962f4d385cd16519c40b921e9a9679140fd5d6cd326002b452fc73431aa2f36d049ae510c034a423eca143a6285f9b4b3dd7b83 -Size (uriparser-0.8.6.tar.bz2) = 360214 bytes +SHA1 (uriparser-0.9.0.tar.bz2) = 9b5d849e2fc8f96c1b832c4510ca05d092d02ba6 +RMD160 (uriparser-0.9.0.tar.bz2) = f4d1c357b1ca6c79acc2a657ddd822bf4bc7f1d4 +SHA512 (uriparser-0.9.0.tar.bz2) = 8ad631726c59d244b945221e803dcb13daa6df6550b3de94da19745f4b4d53a5ce17dba54280273181479f2803dea4ca7b0154ac3b54ca39fc4eda2c8a03e3f7 +Size (uriparser-0.9.0.tar.bz2) = 371895 bytes SHA1 (patch-aa) = 71f3582a2988c6c35a1a2b1995d50f47f22939bd