Commit Graph

101 Commits

Author SHA1 Message Date
naddy
7da62bd4c9 Update to 1.0.8:
* relaxes the fix for CVE-2019-12900
* cleanup of bzdiff and bzgrep scripts so they don't use bash extensions
There's also a homepage again.

ok kmos@ cwen@
2019-08-21 21:39:38 +00:00
tj
c059236938 update to bzip 1.0.7
ok kn, probably ok sthen
2019-06-28 23:48:51 +00:00
sthen
91e77bcfed fix out of bounds access in BZ2_decompress(), CVE-2019-12900
set HOMEPAGE while there

based on a diff from Henry Jensen
2019-06-24 14:46:36 +00:00
sthen
425bba4339 mirror and drop HOMEPAGE; domain expired 2018-08-24 19:06:12 +00:00
jasper
c119dbd446 Fix for CVE-2016-3189; proposed patch from RH 2016-06-28 09:56:23 +00:00
naddy
407f17974c remove various instances of NO_SHARED_LIBS and PROPERTIES:Mno_shared,
fold PFRAG.shared into PLIST
2016-03-10 21:58:51 +00:00
sthen
c3bd7f9864 add an easily-greppable marker for ports known to use pledge().
it's not so important while they're only in patches in the ports tree,
but for any which get upstreamed it saves a ~100GB grep to find them.
2016-01-15 19:57:23 +00:00
sthen
d09ecdc9fe If bzip2 is used to compress or decompress a single file to stdout,
or if it's used in a pipeline, then it can further pledge to only use
stdio-related system calls while doing the actual de/compression.
Since ports uses 'bzip2 -dc [file] | tar xf -', it can benefit from
this added protection during file extraction.
2015-10-15 20:14:36 +00:00
sthen
25f49bb35d use standard "local" error handling (sprintf+exit/message_fatal) rather than
err() to avoid the need to pull in err.h, idea from deraadt
2015-10-15 00:17:48 +00:00
sthen
4bbcb29979 err.h for bzip2 as well, pointed out by jca@ 2015-10-15 00:08:58 +00:00
sthen
f9e7aa16ff bzip2 now also needs rpath 2015-10-11 21:07:32 +00:00
jasper
8245965df6 tame -> pledge 2015-10-09 06:50:19 +00:00
sthen
53befa2741 bzip2 only needs stdio and some file operations, so it can be tame()'d early
in main().
2015-10-07 11:06:49 +00:00
naddy
2c06f77743 landry@ ran into a bashism; lift portable replacement code from GNU gzip 1.6
ok landry@
2014-05-24 20:51:54 +00:00
jasper
3ea3febc52 remove m68k-related workarounds 2014-03-19 13:40:59 +00:00
brad
ffe6844fac sync distinfo and merge in PFRAG.shared.
ok sthen@
2013-04-04 16:03:55 +00:00
espie
c80849c13c regress -> test
PERMIT_* cleanup
2013-03-10 22:28:04 +00:00
ajacoutot
3ce024a242 Remove USE_GROFF from ports where mandoc doesn't have any ERRORs and
formatting looks Ok.

from Brad
2011-12-18 09:01:19 +00:00
espie
3ed7d907a5 USE_GROFF=Yes 2010-10-18 16:47:00 +00:00
naddy
4c9983c6be SECURITY update to 1.0.6, which fixes an integer overflow, CVE-2010-0405.
ok jasper@
2010-09-20 18:21:10 +00:00
naddy
6c7c3d9d2b SECURITY:
Update to 1.0.5, which includes integer overflow checks.
Fixes CERT-FI 20469.
2008-03-18 18:44:31 +00:00
espie
17d70806a3 tweak FAKE_FLAGS semantics to saner defaults. 2008-01-04 17:48:33 +00:00
espie
01eeb5f64b zap all quotes in COMMENT/PERMIT_* 2007-09-15 10:14:32 +00:00
espie
470294650d base64 distinfo with SHA256 2007-04-05 15:37:40 +00:00
naddy
4ec1f15ebe SECURITY update to 1.0.4:
* Fix file permissions race problem (CVE-2005-0953).
* Avoid possible segfault in BZ2_bzclose.
* Sanitise file names more carefully in bzgrep.  Fixes CVE-2005-0758
  to the extent that applies to bzgrep.
* Use 'mktemp' rather than 'tempfile' in bzdiff.
* Tighten up a couple of assertions in blocksort.c following automated
  analysis.
2007-01-25 21:08:22 +00:00
steven
91da0dbeab pass shared library version in REGRESS_FLAGS, otherwise regress target
rebuilds it without version number.

ok sturm@
2006-02-03 20:00:33 +00:00
espie
dd5426312f use SHARED_LIBS
USE_LIBTOOL where appropriate (and bump PKGNAME)
tweak a few FAKE_FLAGS to be more uniform.
2005-12-23 13:57:21 +00:00
fgsch
c5b44fec6e after querying brad@ he decided to drop maintainership for these. 2005-10-30 00:10:39 +00:00
naddy
c559108d7d Maintenance update to 1.0.3.
- minor bug fixes only
- no more .info manual

ok brad@
2005-05-16 23:00:59 +00:00
espie
740a24fcf5 @endfake marker 2005-04-17 19:42:38 +00:00
naddy
69777e8169 SIZE 2005-01-05 15:40:35 +00:00
espie
056bf5d790 Mark all system libs in WANTLIB, result of running newlib-depends-check 2004-11-21 12:50:32 +00:00
espie
79fe9efdfd switch to new style PLISTS, using @lib, ditching DYNLIBDIR.
Replace two INSTALL scripts with @sample.
Reorder plists to match auto-generation, add comments for files that
don't get installed.
2004-08-06 14:37:27 +00:00
espie
b3c0cfb759 manpages markers.
use SHARED_ONLY to discard PFRAG.shared.
2004-08-03 11:30:01 +00:00
espie
d51143282a switch to using dir/ and @info.
a few more tweaks done by the automatic update mode of make update-plist.
2004-07-24 14:20:48 +00:00
brad
764c258b0b remove another sparc64/2.95 workaround. 2004-04-06 06:33:29 +00:00
naddy
2276d3b230 remove WWW lines 2003-12-15 21:42:08 +00:00
jolan
12e8cc8408 allow optimization on sparc64 again. tested by naddy, sturm, & myself. 2003-06-23 03:30:24 +00:00
jolan
ef89960546 # BSD 2003-05-24 01:01:24 +00:00
fgsch
94e3dd2101 sayonara NEED_VERSION. 2002-12-29 15:15:18 +00:00
brad
4a4ee17bc9 correct wrong symlinks for man pages.
--
Spotted by: form@
Patch from: mpech@
2002-09-20 13:13:49 +00:00
brad
825a780ff1 bye MASTER_SITE_SUBDIR 2002-05-12 21:37:03 +00:00
brad
01e6245554 upgrade to bzip2 1.0.2 2002-02-03 06:16:09 +00:00
pvalchev
3eff50408a sparc64 gcc optimization bug temporary workaround with -O0; ok brad 2002-01-27 20:00:16 +00:00
brad
98c19ba74d simplify regression test support. 2001-10-31 16:49:46 +00:00
pvalchev
59347a0dde workaround a bug that prevented bzip2 from working on m68k; ok brad, naddy, espie 2001-10-15 14:16:34 +00:00
brad
1efbf66ae8 reorganize. 2001-10-11 23:13:31 +00:00
naddy
498c858c2d fix (de)install of info docs 2001-10-11 22:31:41 +00:00
brad
7383c2ce52 workaround for sparc64 with regard to the CFLAGS passed on.
--
Based on patch from: wilfried@
2001-10-09 02:05:29 +00:00
espie
e18d889949 Note existing regression tests for archivers. No need to update
NEED_VERSION, this won't break anything otherwise.
2001-10-04 22:26:48 +00:00