MFC r347990:Sync libarchive with vendor.Relevant vendor changes: Issue #795: XAR - do not try to add xattrs without an allocated name PR #812: non-recursive option for extract and list PR #9
MFC r347990:Sync libarchive with vendor.Relevant vendor changes: Issue #795: XAR - do not try to add xattrs without an allocated name PR #812: non-recursive option for extract and list PR #958: support reading metadata from compressed files PR #999: add --exclude-vcs option to bsdtar Issue #1062: treat empty archives with a GNU volume header as valid PR #1074: Handle ZIP files with trailing 0s in the extra fields (Android APK archives) PR #1109: Ignore padding in Zip extra field data (Android APK archives) PR #1167: fix problems related to unreadable directories Issue #1168: fix handling of strtol() and strtoul() PR #1172: RAR5 - fix invalid window buffer read in E8E9 filter PR #1174: ZIP reader - fix of MSZIP signature parsing PR #1175: gzip filter - fix reading files larger than 4GB from memory PR #1177: gzip filter - fix memory leak with repeated header reads PR #1180: ZIP reader - add support for Info-ZIP Unicode Path Extra Field PR #1181: RAR5 - fix merge_block() recursion (OSS-Fuzz 12999, 13029, 13144, 13478, 13490) PR #1183: fix memory leak when decompressing ZIP files with LZMA PR #1184: fix RAR5 OSS-Fuzz issues 12466, 14490, 14491, 12817 OSS-Fuzz 12466: RAR5 - fix buffer overflow when parsing huffman tables OSS-Fuzz 14490, 14491: RAR5 - fix bad shift-left operations OSS-Fuzz 12817: RAR5 - handle a case with truncated huffman tables PR #1186: RAR5 - fix invalid type used for dictionary size mask (OSS-Fuzz 14537) PR #1187: RAR5 - fix integer overflow (OSS-Fuzz 14555) PR #1190: RAR5 - RAR5 don't try to unpack entries marked as directories (OSS-Fuzz 14574) PR #1196: RAR5 - fix a potential SIGSEGV on 32-bit builds OSS-Fuzz 2582: RAR - fix use after free if there is an invalid entry OSS-Fuzz 14331: RAR5 - fix maximum owner name length OSS-Fuzz 13965: RAR5 - use unsigned int for volume number + range check Additional RAR5 reader changes: - support symlinks, hardlinks, file owner, file group, versioned files - change ARCHIVE_FORMAT_RAR_V5 to 0x100000 - set correct mode for readonly directories - support readonly, hidden and system Windows file attributes
show more ...
MFV r336851:Update vendor/libarchive/dist to git 2c8c83b9731ff822fad6cc8c670ea5519c366a14Important vendor changes: PR #993: Chdir to -C directory for metalog processing OSS-Fuzz #4969: Check
MFV r336851:Update vendor/libarchive/dist to git 2c8c83b9731ff822fad6cc8c670ea5519c366a14Important vendor changes: PR #993: Chdir to -C directory for metalog processing OSS-Fuzz #4969: Check size of the extended time field in zip archives PR #973: Record informational compression level in gzip headerMFC after: 1 week
DIRDEPS_BUILD: Update dependencies.Sponsored by: Dell EMC Isilon
MFV r324145,324147:Sync libarchive with vendor.Relevant vendor changes: PR #905: Support for Zstandard read and write filters PR #922: Avoid overflow when reading corrupt cpio archive Issue
MFV r324145,324147:Sync libarchive with vendor.Relevant vendor changes: PR #905: Support for Zstandard read and write filters PR #922: Avoid overflow when reading corrupt cpio archive Issue #935: heap-based buffer overflow in xml_data (CVE-2017-14166) OSS-Fuzz 2936: Place a limit on the mtree line length OSS-Fuzz 2394: Ensure that the ZIP AES extension header is large enough OSS-Fuzz 573: Read off-by-one error in RAR archives (CVE-2017-14502)MFC after: 1 weekSecurity: CVE-2017-14166, CVE-2017-14502
MFV r315875:Sync libarchive with vendor.Vendor changes (FreeBSD-related):- store extended attributes with extattr_set_link() if no fd is provided- add extended attribute tests to libarchive and
MFV r315875:Sync libarchive with vendor.Vendor changes (FreeBSD-related):- store extended attributes with extattr_set_link() if no fd is provided- add extended attribute tests to libarchive and bsdtar- fix tar's test_option_acls- support the UF_HIDDEN file flagX-MFC with: 315636
MFV r315633, 315635:Sync libarchive with vendorVendor changes/bugfixes (FreeBSD-related): PR 867 (bsdcpio): show numeric uid/gid when names are not found PR 870 (seekable zip): accept files w
MFV r315633, 315635:Sync libarchive with vendorVendor changes/bugfixes (FreeBSD-related): PR 867 (bsdcpio): show numeric uid/gid when names are not found PR 870 (seekable zip): accept files with valid ZIP64 EOCD headers PR 880 (pax): Fix handling of "size" pax header keyword PR 887 (crypto): Discard 3072 bytes instead of 1024 of first keystream OSS-Fuzz issue 806 (mtree): rework mtree_atol10 integer parser Break ACL read/write code into platform-specific source files Unbreak static dependency on libbz2MFC after: 1 week
MFV r314565,314567,314570:Update libarchive to version 3.3.1 (and sync with latest vendor dist)Notable vendor changes: PR #501: improvements in ACL path handling PR #724: fix hang when reading
MFV r314565,314567,314570:Update libarchive to version 3.3.1 (and sync with latest vendor dist)Notable vendor changes: PR #501: improvements in ACL path handling PR #724: fix hang when reading malformed cpio files PR #864: fix out of bounds read with malformed GNU tar archives Documentation, style, test suite improvements and typo fixes.New options to bsdtar that enable or disable reading and/or writing of: Access Control Lists (--acls, --no-acls) Extended file flags (--fflags, --no-fflags) Extended attributes (--xattrs, --no-xattrs) Mac OS X metadata (Mac OS X only) (--mac-metadata, --no-mac-metadata)MFC after: 2 weeks
DIRDEPS_BUILD: Update dependencies.Sponsored by: EMC / Isilon Storage Division
Fix building usr.bin/tar/tests with PIE symbol building enabled byremoving CFLAGS+= -static`CFLAGS+= -static` was a carryover from pre-r289195 withusr.bin/tar/test/Makefile that should have been
Fix building usr.bin/tar/tests with PIE symbol building enabled byremoving CFLAGS+= -static`CFLAGS+= -static` was a carryover from pre-r289195 withusr.bin/tar/test/Makefile that should have been specified in LDFLAGSThere doesn't seem to be an apparent need for static compilationof the test binaries.Differential Revision: https://reviews.freebsd.org/D7430MFC after: 1 weekObtained-from: opBSD (418a491eed20d2603ddd1f1bd92c2c0d95094002)Submitted by: opSponsored by: EMC / Isilon Storage Division
MFV r302003,r302037,r302038,r302056:Update libarchive to 3.2.1 (bugfix and security fix release)List of vendor fixes:- fix exploitable heap overflow vulnerability in Rar decompression (vendor
MFV r302003,r302037,r302038,r302056:Update libarchive to 3.2.1 (bugfix and security fix release)List of vendor fixes:- fix exploitable heap overflow vulnerability in Rar decompression (vendor issue 719, CVE-2016-4302, TALOS-2016-0154)- fix exploitable stack based buffer overflow vulnebarility in mtree parse_device functionality (vendor PR 715, CVE-2016-4301, TALOS-2016-0153)- fix exploitable heap overflow vulnerability in 7-zip read_SubStreamsInfo (vendor issue 718, CVE-2016-4300, TALOS-2016-152)- fix integer overflow when computing location of volume descriptor (vendor issue 717)- fix buffer overflow when reading a crafred rar archive (vendor issue 521)- fix possible buffer overflow when reading ISO9660 archives on machines where sizeof(int) < sizeof(size_t) (vendor issue 711)- tar and cpio should fail if an input file named on the command line is missing (vendor issue 708)- fix incorrect writing of gnutar filenames that are exactly 512 bytes long (vendor issue 682)- allow tests to be run from paths that are equal or longer than 128 characters (vendor issue 657)- add memory allocation errors in archive_entry_xattr.c (vendor PR 603)- remove dead code in archive_entry_xattr_add_entry() (vendor PR 716)- fix broken decryption of ZIP files (vendor issue 553)- manpage style, typo and description fixesPost-3.2.1 vendor fixes:- fix typo in cpio version reporting (Vendor PR 725, 726)- fix argument range of ctype functions in libarchive_fe/passphrase.c- fix ctype use and avoid empty loop bodies in WARC readerMFC after: 1 weekSecurity: CVE-2016-4300, CVE-2016-4301, CVE-2016-4302Approved by: re (kib)
MFV r299425:Update libarchive to 3.2.0New features:- new bsdcat command-line utility- LZ4 compression (in src only via external utility from ports)- Warc format support- 'Raw' format writer-
MFV r299425:Update libarchive to 3.2.0New features:- new bsdcat command-line utility- LZ4 compression (in src only via external utility from ports)- Warc format support- 'Raw' format writer- Zip: Support archives >4GB, entries >4GB- Zip: Support encrypting and decrypting entries- Zip: Support experimental streaming extension- Identify encrypted entries in several formats- New --clear-nochange-flags option to bsdtar tries to remove noschg and similar flags before deleting files- New --ignore-zeros option to bsdtar to handle concatenated tar archives- Use multi-threaded LZMA decompression if liblzma supports it- Expose version info for libraries used by libarchivePatched files (fixed compiler warnings):contrib/libarchive/cat/bsdcat.c (vendor PR #702)contrib/libarchive/cat/bsdcat.h (vendor PR #702)contrib/libarchive/libarchive/archive_read_support_format_mtree.c (PR #701)contrib/libarchive/libarchive_fe/err.c (vendor PR #703)MFC after: 1 monthRelnotes: yes
Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installedafter r298107Summary of changes:- Replace all instances of FILES/TESTS with ${PACKAGE}FILES. This ensures that na
Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installedafter r298107Summary of changes:- Replace all instances of FILES/TESTS with ${PACKAGE}FILES. This ensures that namespacing is kept with FILES appropriately, and that this shouldn't need to be repeated if the namespace changes -- only the definition of PACKAGE needs to be changed- Allow PACKAGE to be overridden by callers instead of forcing it to always be `tests`. In the event we get to the point where things can be split up enough in the base system, it would make more sense to group the tests with the blocks they're a part of, e.g. byacc with byacc-tests, etc- Remove PACKAGE definitions where possible, i.e. where FILES wasn't used previously.- Remove unnecessary TESTSPACKAGE definitions; this has been elided into bsd.tests.mk- Remove unnecessary BINDIRs used previously with ${PACKAGE}FILES; ${PACKAGE}FILESDIR is now automatically defined in bsd.test.mk.- Fix installation of files under data/ subdirectories in lib/libc/tests/hash and lib/libc/tests/net/getaddrinfo- Remove unnecessary .include <bsd.own.mk>s (some opportunistic cleanup)Document the proposed changes in share/examples/tests/tests/... via examplesso it's clear that ${PACKAGES}FILES is the suggested way forward in terms ofreplacing FILES. share/mk/bsd.README didn't seem like the appropriate methodof communicating that info.MFC after: never probablyX-MFC with: r298107PR: 209114Relnotes: yesTested with: buildworld, installworld, checkworld; buildworld, packageworldSponsored by: EMC / Isilon Storage Division
DIRDEPS_BUILD: Connect MK_TESTS.Sponsored by: EMC / Isilon Storage Division
Avoid adding the '-release' suffix to non-debug kernel packages.Sponsored by: The FreeBSD Foundation
Don't override LIB*DIR variables from src.libnames.mk.In some cases switch to the LIB*SRCDIR value.These recently were defined in r291327 and r291619.Sponsored by: EMC / Isilon Storage Division
Remove redundant DPSRCS which were already in SRCS.DPSRCS already contains all of SRCS.MFC after: 1 weekSponsored by: EMC / Isilon Storage Division
Integrate the tests from lib/libarchive, usr.bin/cpio, and usr.bin/tar in tothe FreeBSD test suitefunctional_test.sh was ported from bin/sh/tests/functional_test.sh, as asmall wrapper around liba
Integrate the tests from lib/libarchive, usr.bin/cpio, and usr.bin/tar in tothe FreeBSD test suitefunctional_test.sh was ported from bin/sh/tests/functional_test.sh, as asmall wrapper around libarchive_test, bsdcpio_test, and bsdtar_test providedby upstream.A handful of testcases in lib/libarchive/tests have been disabled as theywere failing when run with kyua test (see BROKEN_TESTS inlib/libarchive/tests/Makefile)As a sidenote: this removes the check/test targets from the Makefiles as theydon't match the pattern used in the rest of the FreeBSD test suite.MFC after: 2 weeksSponsored by: EMC / Isilon Storage Division