80 Commits

Author SHA1 Message Date
sthen
9fe1e38b23 replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:43:27 +00:00
kirby
6439f03e09 update HOMEPAGE 2019-06-17 09:39:44 +00:00
sthen
8e5ac992a6 extend PORTROACH to skip 5.5.1 as well 2017-05-24 13:52:34 +00:00
bluhm
09f32a334a Do not perform tty operations on non-tty file descriptors. Otherwise
pledge("tty") may abort unzip </dev/null.
discussed with deraadt@ semarie@; OK tb@ sthen@
2017-04-12 11:11:52 +00:00
bluhm
18559ee8cb Apply a bunch of CVE and other fixes for unzip from debian and
redhat bug tracker.  Add the links to the patch files.  The fix for
CVE-2014-9636 was improved.
OK jca@
2017-03-23 17:26:17 +00:00
naddy
70bb8e18e7 replace libiconv module 2016-09-13 11:44:06 +00:00
sthen
c3bd7f9864 add an easily-greppable marker for ports known to use pledge().
it's not so important while they're only in patches in the ports tree,
but for any which get upstreamed it saves a ~100GB grep to find them.
2016-01-15 19:57:23 +00:00
sthen
28f6bfa972 add portroach marker, skipv:552 2015-11-30 15:16:29 +00:00
ajacoutot
ef9c4107f3 tame -> pledge
ok sthen@
2015-10-20 13:13:52 +00:00
sthen
1fc2763705 unzip can pledge to use the following: stdio rpath wpath cpath fattr tty.
This is possible now that pledge(2) treats TIOCGWINSZ like TIOCGETA, allowing
it to return ENOTTY rather than killing the process for a non-terminal device.
2015-10-16 16:22:16 +00:00
czarkoff
c0c449206d consistent spacing
OK sthen@
2015-05-11 21:22:06 +00:00
czarkoff
87e407f2c6 add "iconv" flavor
OK sthen@, stsp@
2015-05-11 21:19:23 +00:00
naddy
eae40dae37 Security fixes:
CVE-2014-8139: CRC32 verification heap-based overflow
CVE-2014-8140: out-of-bounds write issue in test_compr_eb()
CVE-2014-8141: out-of-bounds read issues in getZip64Data()
CVE-2014-9636: out-of-bounds read/write in test_compr_eb()

Via Debian; ok sthen@
2015-02-06 21:37:04 +00:00
rpe
bdf559dc2f Remove mirror.switch.ch from MASTER_SITES.
OK sthen@
2014-12-09 22:51:35 +00:00
ajacoutot
a18880215f Trailing whitespace. 2014-10-07 10:13:57 +00:00
jasper
db98266d5f use ${FILESDIR} instead of hardcoding 'files/' 2014-04-20 10:00:21 +00:00
naddy
e98c92f163 we have lchown() 2014-03-10 12:02:59 +00:00
naddy
2d9bff856e fix extraction of symlinks; found by tedu@
http://article.gmane.org/gmane.comp.version-control.git/181173
2014-01-09 15:22:45 +00:00
naddy
89240070cb * timeb was already well deprecated on 4.4BSD
* regen patches
2013-12-03 21:18:50 +00:00
schwarze
7ab1db99e2 Some time ago, espie@ sent me this patch to drop USE_GROFF.
Back then, the patch was actually incorrect, mandoc(1) didn't cope.
Meanwhile, i fixed both mandoc and groff in all required respects.
Committing now because of an author timeout.
2013-07-16 18:44:39 +00:00
edd
d59a7bc88f The unzip HOMEPAGE was dead. Revise to the current home page.
OK espie@
2013-05-24 18:58:40 +00:00
brad
ffe6844fac sync distinfo and merge in PFRAG.shared.
ok sthen@
2013-04-04 16:03:55 +00:00
espie
c80849c13c regress -> test
PERMIT_* cleanup
2013-03-10 22:28:04 +00:00
landry
86fd56acf2 Remove hppa-specific hack adding -O0, it seems to just build and run
fine now. Fold back common MAKE_FLAGS in a single place.
From Brad.
2011-05-17 19:01:39 +00:00
espie
3ed7d907a5 USE_GROFF=Yes 2010-10-18 16:47:00 +00:00
jsg
f53bbab61e update to unzip 6.0 which adds support for ZIP64 & UTF8 filenames
among other things.
2010-04-25 10:36:05 +00:00
jasper
30305e04d0 Security fix for unzip;
fix CVE-2008-0888, patch from debian.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0888

ok grunk@ (who came up with the same diff)
2008-03-25 19:39:30 +00:00
espie
01eeb5f64b zap all quotes in COMMENT/PERMIT_* 2007-09-15 10:14:32 +00:00
espie
470294650d base64 distinfo with SHA256 2007-04-05 15:37:40 +00:00
steven
2458370caf fix master sites 2006-07-11 06:55:28 +00:00
naddy
2d0a5b6956 maintenance update to 5.52; from Alexandre Anriot 2005-06-21 19:48:28 +00:00
naddy
69777e8169 SIZE 2005-01-05 15:40:35 +00:00
espie
056bf5d790 Mark all system libs in WANTLIB, result of running newlib-depends-check 2004-11-21 12:50:32 +00:00
espie
b3c0cfb759 manpages markers.
use SHARED_ONLY to discard PFRAG.shared.
2004-08-03 11:30:01 +00:00
espie
d51143282a switch to using dir/ and @info.
a few more tweaks done by the automatic update mode of make update-plist.
2004-07-24 14:20:48 +00:00
pvalchev
7b50393e7b Use -O0 to compile on hppa, workarounds a compiler bug which lead to
crashes, hangs, and other odd behaviour during extraction.
2004-06-27 23:29:55 +00:00
sturm
6e70f8f153 keep the dash in the PKGNAME, noticed by Jacob Meuser 2004-06-25 14:04:08 +00:00
sturm
3c67f35287 update to unzip 5.51 2004-06-24 21:35:14 +00:00
naddy
2276d3b230 remove WWW lines 2003-12-15 21:42:08 +00:00
brad
a937c7a5d3 Improvement on the existing directory traversal patch, fixes the case
where the path component includes a quoted slash.
2003-08-17 23:48:40 +00:00
brad
87f03a9eb8 Another directory traversal issue in unzip 5.50 and earlier. Similar to
the first except this issue is triggered by prefixing the .. sequence with
certain non-printable characters which are filtered out resulting in just
the .. sequence.
2003-07-02 16:03:59 +00:00
jolan
aed7b6d5b0 lzo -- # GPL
lzop    -- # GNU GPL -> # GPL
macutil -- sync w/# None style
nulib   -- # Restrictive
rar     -- # Restrictive
ucl     -- # GPL
unace   -- # Copyrighted but freely distributable.
             That's all the author states.  Is this acceptable as a
             license?
        -- Drop MAINTAINER per his request
unarj   -- # Restrictive
           PERMIT_*_CDROM=No
             "If you wish to distribute a modified version of UNARJ
              you MUST indicate that it is a modified version both in
              the program and source code."
unrar  --  # Restrictive
unzip  --  # Conditional
             It is freely re-distributable with conditions which we meet.
             This could use another pair of eyes to confirm.
zip    --  # Conditional
             Same thing as unzip.
zoo    --  # Conditional
             Different author/license but same idea as zip/unzip.
2003-05-24 02:40:42 +00:00
brad
049b65128b upgrade to unzip 5.50
--
From: Aaron Yourk <ayourk@srt.com>
2002-07-05 01:07:26 +00:00
espie
4eeb7add33 bump NEED_VERSION for distinfo 2002-03-21 20:35:40 +00:00
espie
e3edfb9aea md5->distinfo 2002-03-21 20:20:41 +00:00
espie
100196f27a Zap default MAINTAINER from Makefile.
Especially now that the default line is more verbose.
2001-10-28 13:05:44 +00:00
espie
e18d889949 Note existing regression tests for archivers. No need to update
NEED_VERSION, this won't break anything otherwise.
2001-10-04 22:26:48 +00:00
pvalchev
a2ae47a672 - Remove 2 dead master sites and put one working one
- Replace HOMEPAGE with a working one
From FreeBSD
2001-08-14 18:35:59 +00:00
brad
1953a9ae7f bump NEED_VERSION 2001-04-20 17:35:31 +00:00
avsm
28bed298fc A couple more MASTER_SITES for this (it only had one listed) 2001-04-09 14:06:41 +00:00