MFC r349527,349538:Sync libarchive with vendor.Relevant vendor changes: PR #1217: RAR5 reader - fix ARM filter going beyond window buffer boundary (OSS-Fuzz 15431) PR #1218: Fixes
MFC r349527,349538:Sync libarchive with vendor.Relevant vendor changes: PR #1217: RAR5 reader - fix ARM filter going beyond window buffer boundary (OSS-Fuzz 15431) PR #1218: Fixes to sparse file handling
show more ...
MFC r348993,349135:Sync libarchive with vendor including security fixesr348993: - version bumped to 3.4.0 - check_symlinks_fsobj() without chdir() and fchdir() - bsdtar.1 manpage fixes - p
MFC r348993,349135:Sync libarchive with vendor including security fixesr348993: - version bumped to 3.4.0 - check_symlinks_fsobj() without chdir() and fchdir() - bsdtar.1 manpage fixes - patches from OpenBSD to libarchive_fe/passphrase.cr349135: PR #1212: RAR5 reader - window_mask was not updated correctly (OSS-Fuzz 15278) OSS-Fuzz 15120: RAR reader - extend use after free bugfix
MFC r347990:Sync libarchive with vendor.Relevant vendor changes: Issue #795: XAR - do not try to add xattrs without an allocated name PR #812: non-recursive option for extract and list PR #9
MFC r347990:Sync libarchive with vendor.Relevant vendor changes: Issue #795: XAR - do not try to add xattrs without an allocated name PR #812: non-recursive option for extract and list PR #958: support reading metadata from compressed files PR #999: add --exclude-vcs option to bsdtar Issue #1062: treat empty archives with a GNU volume header as valid PR #1074: Handle ZIP files with trailing 0s in the extra fields (Android APK archives) PR #1109: Ignore padding in Zip extra field data (Android APK archives) PR #1167: fix problems related to unreadable directories Issue #1168: fix handling of strtol() and strtoul() PR #1172: RAR5 - fix invalid window buffer read in E8E9 filter PR #1174: ZIP reader - fix of MSZIP signature parsing PR #1175: gzip filter - fix reading files larger than 4GB from memory PR #1177: gzip filter - fix memory leak with repeated header reads PR #1180: ZIP reader - add support for Info-ZIP Unicode Path Extra Field PR #1181: RAR5 - fix merge_block() recursion (OSS-Fuzz 12999, 13029, 13144, 13478, 13490) PR #1183: fix memory leak when decompressing ZIP files with LZMA PR #1184: fix RAR5 OSS-Fuzz issues 12466, 14490, 14491, 12817 OSS-Fuzz 12466: RAR5 - fix buffer overflow when parsing huffman tables OSS-Fuzz 14490, 14491: RAR5 - fix bad shift-left operations OSS-Fuzz 12817: RAR5 - handle a case with truncated huffman tables PR #1186: RAR5 - fix invalid type used for dictionary size mask (OSS-Fuzz 14537) PR #1187: RAR5 - fix integer overflow (OSS-Fuzz 14555) PR #1190: RAR5 - RAR5 don't try to unpack entries marked as directories (OSS-Fuzz 14574) PR #1196: RAR5 - fix a potential SIGSEGV on 32-bit builds OSS-Fuzz 2582: RAR - fix use after free if there is an invalid entry OSS-Fuzz 14331: RAR5 - fix maximum owner name length OSS-Fuzz 13965: RAR5 - use unsigned int for volume number + range check Additional RAR5 reader changes: - support symlinks, hardlinks, file owner, file group, versioned files - change ARCHIVE_FORMAT_RAR_V5 to 0x100000 - set correct mode for readonly directories - support readonly, hidden and system Windows file attributes
MFC r345497:Sync libarchive with vendor.Relevant vendor changes: PR #1153: fixed 2 bugs in ZIP reader [1] PR #1143: ensure archive_read_disk_entry_from_file() uses ARCHIVE_READ_DISK Changes
MFC r345497:Sync libarchive with vendor.Relevant vendor changes: PR #1153: fixed 2 bugs in ZIP reader [1] PR #1143: ensure archive_read_disk_entry_from_file() uses ARCHIVE_READ_DISK Changes to file flags code, support more file flags on FreeBSD: UF_OFFLINE, UF_READONLY, UF_SPARSE, UF_REPARSE, UF_SYSTEM UF_ARCHIVE is not supported by intention (yet)PR: 236300 [1]
MFC r344063,r344088:MFC r344063:Sync libarchive with vendor.Relevant vendor changes: PR #1085: Fix a null pointer dereference bug in zip writer PR #1110: ZIP reader added support for XZ, LZM
MFC r344063,r344088:MFC r344063:Sync libarchive with vendor.Relevant vendor changes: PR #1085: Fix a null pointer dereference bug in zip writer PR #1110: ZIP reader added support for XZ, LZMA, PPMD8 and BZIP2 decopmpression PR #1116: Add support for 64-bit ar format PR #1120: Fix a 7zip crash [1] and a ISO9660 infinite loop [2] PR #1125: RAR5 reader - fix an invalid read and a memory leak PR #1131: POSIX reader - do not fail when tree_current_lstat() fails due to ENOENT [3] PR #1134: Delete unnecessary null pointer checks before calls of free() OSS-Fuzz 10843: Force intermediate to uint64_t to make UBSAN happy. OSS-Fuzz 11011: Avoid buffer overflow in rar5 readerMFC r344088: archive_read_disk_posix.c: initialize delayed_errnoPR: 233006 [3]Security: CVE-2019-1000019 [1], CVE-2019-1000020 [2]
MFC r339746,339751,339794,340866,340939,342042:Sync libarchive with vendor.Relevant vendor changes: PR #1013: Add missing h_base offset when performing absolute seeks in xar decompre
MFC r339746,339751,339794,340866,340939,342042:Sync libarchive with vendor.Relevant vendor changes: PR #1013: Add missing h_base offset when performing absolute seeks in xar decompression PR #1023: Support extracting extattrs as non-root on non-user-writeable files PR #1061: Add support for extraction of RAR v5 archives PR #1066: Fix out of bounds read on empty string filename for gnutar, pax and v7tar PR #1067: Fix temporary file path buffer overflow in tests IS #1068: Correctly process and verify integer arguments passed to bsdcpio and bsdtar PR #1070: Don't default XAR entry atime/mtime to the current time PR #1080: Spelling fixes PR #1084: RAR5 reader bugfixes PR #1091: fix use-after-free in delayed newc link processing PR #1092: Fix a few obvious resource leaks and strcpy() misuses IS #1096: Support extracting ACLs with in-entry comments (GNU tar) PR #1102: RAR5 reader - fix big-endian problems PR #1105: Fix various crash, memory corruption and infinite loop conditions RAR5 reader: FreeBSD build platform fixes for powerpc(64), mips(64), sparc64 and riscv64 RAR5 reader: more maybe-uninitialized size_t fixes for riscv64 FreeBSD build
MFV r338797:Sync libarchive with vendor.Relevant vendor changes: PR #1019: Add allocation check for the zip_entry struct Oss-Fuzz #10192: Handle whitespace-only ACL fields correctlyApproved
MFV r338797:Sync libarchive with vendor.Relevant vendor changes: PR #1019: Add allocation check for the zip_entry struct Oss-Fuzz #10192: Handle whitespace-only ACL fields correctlyApproved by: re (kib)MFC after: 1 week
MFV r338519:Update libarchive to 3.3.3As all important changes have already been merged from libarchive gitthis is just version number bump, documentation update and somepolishing for cpio tests
MFV r338519:Update libarchive to 3.3.3As all important changes have already been merged from libarchive gitthis is just version number bump, documentation update and somepolishing for cpio tests. Other source code changes are not relevant toFreeBSD.Approved by: re (gjb)MFC after: 1 week
MFV r337744:Sync libarchive with vendor..Vendor changes: PR #1042: validate iso9660 directory record lengthMFC after: 3 daysSecurity: CVE-2017-14501
MFV r336851:Update vendor/libarchive/dist to git 2c8c83b9731ff822fad6cc8c670ea5519c366a14Important vendor changes: PR #993: Chdir to -C directory for metalog processing OSS-Fuzz #4969: Check
MFV r336851:Update vendor/libarchive/dist to git 2c8c83b9731ff822fad6cc8c670ea5519c366a14Important vendor changes: PR #993: Chdir to -C directory for metalog processing OSS-Fuzz #4969: Check size of the extended time field in zip archives PR #973: Record informational compression level in gzip headerMFC after: 1 week
MFV r336800: libarchive: Cherry-pick upstream 2c8c83b9Relevant vendor changes: Fix issue #948: out-of-bounds read in lha_read_data_none()admbugs: 877MFC after: 3 daysSecurity: CVE-2017-14503
MFV r328323,328324:Sync libarchive with vendor.Relevant vendor changes: PR #893: delete dead ppmd7 alloc callbacks PR #904: Fix archive freeing bug in bsdcat PR #961: Fix ZIP format names
MFV r328323,328324:Sync libarchive with vendor.Relevant vendor changes: PR #893: delete dead ppmd7 alloc callbacks PR #904: Fix archive freeing bug in bsdcat PR #961: Fix ZIP format names PR #962: Don't modify attributes for existing directories when ARCHIVE_EXTRACT_NO_OVERWRITE is set PR #964: Fix -Werror=implicit-fallthrough= for GCC 7 PR #970: zip: Allow backslash as path separatorMFC after: 1 week
MFV r324145,324147:Sync libarchive with vendor.Relevant vendor changes: PR #905: Support for Zstandard read and write filters PR #922: Avoid overflow when reading corrupt cpio archive Issue
MFV r324145,324147:Sync libarchive with vendor.Relevant vendor changes: PR #905: Support for Zstandard read and write filters PR #922: Avoid overflow when reading corrupt cpio archive Issue #935: heap-based buffer overflow in xml_data (CVE-2017-14166) OSS-Fuzz 2936: Place a limit on the mtree line length OSS-Fuzz 2394: Ensure that the ZIP AES extension header is large enough OSS-Fuzz 573: Read off-by-one error in RAR archives (CVE-2017-14502)MFC after: 1 weekSecurity: CVE-2017-14166, CVE-2017-14502
MFV r321673:Sync libarchive with vendor.Relevant vendor changes: PR #926: ensure ar strtab is null terminatedMFC after: 1 week
Fix libarchive mismerge of r320927 in libarchive_entry.hMFC after: 1 weekX-MFC-with: 320927Reported by: Ngie Cooper <[email protected]>
Fix libarchive mismerge of r320927MFC after: 1 weekX-MFC-with: 320927Reported by: Ngie Cooper <[email protected]>
MFV r320924:Bump libarchive to 3.3.2Vendor changes: PR #901: don't depend on stdin in a testcaseMFC after: 1 week
cpio/tests/test_option_lz4: fix a use after free in the failure caseThis change will be upstreamed to the libarchive project.MFC after: 6 daysMFC with: r317782Reported by: CoveritySponsored by
cpio/tests/test_option_lz4: fix a use after free in the failure caseThis change will be upstreamed to the libarchive project.MFC after: 6 daysMFC with: r317782Reported by: CoveritySponsored by: Dell EMC Isilon
MFV r317781:Sync libarchive with vendorVendor changes (FreeBSD-related): PR 897: add test for ZIP archives with invalid EOCD headers PR 901: fix invalid renaming of sparse files OSS-Fuzz iss
MFV r317781:Sync libarchive with vendorVendor changes (FreeBSD-related): PR 897: add test for ZIP archives with invalid EOCD headers PR 901: fix invalid renaming of sparse files OSS-Fuzz issue 497: remove fallback tree in LZX decoder OSS-Fuzz issue 527: rewrite expressions in lz4 filter OSS-Fuzz issue 577: fix integer overflow in cpio reader OSS-Fuzz issue 862: fix numerc parsing in mtree reader OSS-Fuzz issue 1097: fix undefined shift in rar reader cpio: various optimizations and memory leak fixesMFC after: 1 week
MFV r316454,316455:Vendor changes (FreeBSD-related): Report which extended attributes could not be restored Update archive_read_disk.3 and archive_write_disk.3 manual pages Plug memory leaks
MFV r316454,316455:Vendor changes (FreeBSD-related): Report which extended attributes could not be restored Update archive_read_disk.3 and archive_write_disk.3 manual pages Plug memory leaks in xattr tests.MFC after: 1 week
MFV r316083,316094:Sync libarchive with vendorVendor changes (FreeBSD-related):- constify variables in several places- unify platform ACL code in a single source file- fix unused variable if co
MFV r316083,316094:Sync libarchive with vendorVendor changes (FreeBSD-related):- constify variables in several places- unify platform ACL code in a single source file- fix unused variable if compiling on FreeBSD without NFSv4 ACL supportMFC after: 3 daysX-MFC-with: 315636, 315876
MFV r315875:Sync libarchive with vendor.Vendor changes (FreeBSD-related):- store extended attributes with extattr_set_link() if no fd is provided- add extended attribute tests to libarchive and
MFV r315875:Sync libarchive with vendor.Vendor changes (FreeBSD-related):- store extended attributes with extattr_set_link() if no fd is provided- add extended attribute tests to libarchive and bsdtar- fix tar's test_option_acls- support the UF_HIDDEN file flagX-MFC with: 315636
MFV r315633, 315635:Sync libarchive with vendorVendor changes/bugfixes (FreeBSD-related): PR 867 (bsdcpio): show numeric uid/gid when names are not found PR 870 (seekable zip): accept files w
MFV r315633, 315635:Sync libarchive with vendorVendor changes/bugfixes (FreeBSD-related): PR 867 (bsdcpio): show numeric uid/gid when names are not found PR 870 (seekable zip): accept files with valid ZIP64 EOCD headers PR 880 (pax): Fix handling of "size" pax header keyword PR 887 (crypto): Discard 3072 bytes instead of 1024 of first keystream OSS-Fuzz issue 806 (mtree): rework mtree_atol10 integer parser Break ACL read/write code into platform-specific source files Unbreak static dependency on libbz2MFC after: 1 week
MFV r314565,314567,314570:Update libarchive to version 3.3.1 (and sync with latest vendor dist)Notable vendor changes: PR #501: improvements in ACL path handling PR #724: fix hang when reading
MFV r314565,314567,314570:Update libarchive to version 3.3.1 (and sync with latest vendor dist)Notable vendor changes: PR #501: improvements in ACL path handling PR #724: fix hang when reading malformed cpio files PR #864: fix out of bounds read with malformed GNU tar archives Documentation, style, test suite improvements and typo fixes.New options to bsdtar that enable or disable reading and/or writing of: Access Control Lists (--acls, --no-acls) Extended file flags (--fflags, --no-fflags) Extended attributes (--xattrs, --no-xattrs) Mac OS X metadata (Mac OS X only) (--mac-metadata, --no-mac-metadata)MFC after: 2 weeks
Renumber copyright clause 4Renumber cluase 4 to 3, per what everybody else did when BSD grantedthem permission to remove clause 3. My insistance on keeping the samenumbering for legal reasons is
Renumber copyright clause 4Renumber cluase 4 to 3, per what everybody else did when BSD grantedthem permission to remove clause 3. My insistance on keeping the samenumbering for legal reasons is too pedantic, so give up on that point.Submitted by: Jan Schaumann <[email protected]>Pull Request: https://github.com/freebsd/freebsd/pull/96
1234