pkgsrc-Users archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: libarchive-2.8.4nb3 has a multiple-vulnerabilities vulnerability
On Thu, Apr 24, 2014 at 04:35:34PM -0500, J. Lewis Muir wrote:
> On 4/24/14, 8:51 AM, Havard Eidnes wrote:
> >>> he, could you file a pullup ticket for your commit?
> >>
> >> Already done, wiz@ pinged me about it a little earlier.
> >
> > ...and I see now also already pulled up.
> >
> > Regards,
> >
> > - Håvard
>
> Thanks everyone for getting this fixed!
>
> Unfortunately, after updating the tree from CVS it won't compile
> with clang for me because the return type of the heap_add_entry
> function has changed from void to int, and there is an empty return in
> heap_add_entry. Here's the clang error:
>
> ===
> libarchive/archive_read_support_format_iso9660.c:2680:4: error: non-void
> function 'heap_add_entry' should return a value [-Wreturn-type]
> return;
> ^
> ===
>
> This is on Mac OS X Mavericks (10.9.2) with a clang that reports the
> following:
>
> ===
> $ clang -v
> Apple LLVM version 5.1 (clang-503.0.40) (based on LLVM 3.4svn)
> Target: x86_64-apple-darwin13.1.0
> Thread model: posix
> ===
>
> Below is a patch for archivers/libarchive against the stable branch
> (pkgsrc-2014Q1) to fix this.
Hello.
The patch has not been committed to CVS. Would a developer be willing
to commit this? The "archivers/libarchive" package won't compile for me
without it.
On a related note, is there a better way to send such a patch so that
it doesn't get missed? I included the patch directly in the email; is
that preferred, or should I have made it an attachment? Should I have
prepended something like "[patch]" to the subject?
Thanks!
Lewis
>
> Index: files/libarchive/archive_read_support_format_iso9660.c
> ===================================================================
> RCS file:
> /cvsroot/pkgsrc/archivers/libarchive/files/libarchive/archive_read_support_format_iso9660.c,v
> retrieving revision 1.3.34.1
> diff -b -u -r1.3.34.1 archive_read_support_format_iso9660.c
> --- files/libarchive/archive_read_support_format_iso9660.c 24 Apr 2014
> 09:34:06 -0000 1.3.34.1
> +++ files/libarchive/archive_read_support_format_iso9660.c 24 Apr 2014
> 21:05:49 -0000
> @@ -2677,7 +2677,7 @@
> parent_key = heap->files[parent]->key;
> if (file_key >= parent_key) {
> heap->files[hole] = file;
> - return;
> + return (ARCHIVE_OK);
> }
> // Move parent into hole <==> move hole up tree.
> heap->files[hole] = heap->files[parent];
Home |
Main Index |
Thread Index |
Old Index