CVS commit: src/crypto/external/bsd/netpgp

["Alistair G. Crooks" <agc%netbsd.org@localhost>]

Module Name:    src
Committed By:   agc
Date:           Mon Apr 17 19:50:28 UTC 2017

Modified Files:
        src/crypto/external/bsd/netpgp/bin/netpgpverify: Makefile
        src/crypto/external/bsd/netpgp/dist/src/netpgpverify: Makefile.bsd
            Makefile.in Makefile.lib.in Makefile.libtool.in array.h bignum.c
            digest.c digest.h libnetpgpverify.3 libverify.c main.c
            netpgpverify.1 pgpsum.c verify.h
        src/crypto/external/bsd/netpgp/lib/verify: Makefile
Removed Files:
        src/crypto/external/bsd/netpgp/dist/src/netpgpverify: tiger.c tiger.h

Log Message:
Update netpgpverify sources in base from 20160617 to 20170201 (i.e. bring
over changes from master sources in pkgsrc/security/netpgpverify, version 20170201):

Changes:

Update netpgpverify (and libnetpgpverify) to 20160614
        + handle signatures created by gpg with "--no-emit-version", don't assume
        there will always be a version string.
        + add a test for above
        Fixes security PR  51240.
        Thanks to xnox%ubuntu.com@localhost for reporting the error

Update netpgpverify and libnetpgpverify to 20160615:
        Simplify the method of finding the end of the versioning information
        in the signature - back up to the "\n" character at the end of the
        signature start:

                "-----BEGIN PGP SIGNATURE-----\n"

        and then find the "\n\n" character sequence to denote the start of the
        signature itself. The previous version worked, but this is more efficient.

Update netpgpverify and libnetpgpverify to 20160616
        + bring over joerg's printflike change from the netpgpverify
        version in src/crypto
        + add a test for cleartext signatures with version information
        to complement the one with no version information

Update netpgpverify and libnetpgpverify to 20160622 during freeze to fix PR  51262
        + take a bit of a step backwards, and don't use stdbool.h, just to appease
        Solaris 10 compiler

Update netpgpverify and libnetpgpverify to 20160623
        + remove use of asprintf and vasprintf from libverify. Inspired
        by work from Dimitri John Ledkov. Should allow building on Linux
        without superfluous definitions.
        + also free the BIGNUM struct in PGPV_BN_clear() - from Dimitri
        John Ledkov

Update netpgpverify and libnetpgpverify to 20160626
        + make the pgpv_t and pgpv_cursor_t structures opaque
        + add new accessor functions for fields in the pgpv_cursor_t struct
        + add new creation functions for the pgpv_t and pgpv_cursor_t structs

Update netpgpverify and libnetpgpverify to 20160704
        + get rid of redundant PGPV_ARRAY definition in libverify.c, brought in when
        the definitions moved from verify.h
        + fix obuf_add_mem() to use a const void *, as any struct can be
        dumped using it
        + remove redundant NO_SUBKEYS definition - unused
        + add an (unused as yet) ARRAY_FREE() macro

Update netpgpverify and libnetpgpverify to 20160705
        External API changes
        ====================
        + add a pgpv_cursor_close() function to free resources associated with
        a cursor
        Better memory management
        ========================
        + restructure the way dynamic arrays are used, to avoid memory
        corruption issues and memory leaks - keep all dynamic arrays in the global
        data structure, and use indices in the other data structures to index them.
        Means lack of data localisation, but avoids stale pointers, and leaks.
        + make signer field of signature a uint8_t array, rather than a pointer
        + use our own version of strdup(3) - don't depend on it being
        available in standard library
        + keep track of whether litdata filenames and userid were allocated or not,
        and free memory in pgpv_close() if it was allocated
        + free up allocated resources which were allocated in pgpv_close()

Update netpgpverify and libnetpgpverify to 20160706
        + 20160705 introduced a bug whereby a key subid would match and verify
        fine, but, if formatted, would not display the correct subkey
        information.  Fix to show the correct information in this case.

Update netpgpverify and libnetpgpverify to 20160707 to fix some
        unusual build errors shown by old gcc versions (works fine for
        gcc-5.2.1 on ubuntu and gcc-5.3.0 on NetBSD 7.99.32)
        + use ULL suffix on unsigned 64bit constants, not UL
        + don't typedef the public structs twice - second time just define it
        without the typedef
        Fixes PR   51327

Update netpgpverify and libnetpgpverify to 20160708
        + clear and free bignums properly - helps immensely with plugging
        memory leaks

Update netpgpverify and libnetpgpverify to 20160828
        + bring over change from christos in src/crypto to check for
        the end of an ASCII-armored signature
        + no need for namespace protection in array.h any more, now
        that netpgp/verify.h now contains opaque structures
        + minor typo clean-up in a definition (benign, ignored by compiler)

update netpgpverify and libnetpgpverify to 20170201
        + make sure howmany() macro is defined
        pointed out by cube - thanks!


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 \
    src/crypto/external/bsd/netpgp/bin/netpgpverify/Makefile
cvs rdiff -u -r1.6 -r1.7 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/Makefile.bsd
cvs rdiff -u -r1.10 -r1.11 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/Makefile.in \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/netpgpverify.1
cvs rdiff -u -r1.1 -r1.2 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/Makefile.lib.in \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/Makefile.libtool.in \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/array.h
cvs rdiff -u -r1.3 -r1.4 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/bignum.c \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/libnetpgpverify.3
cvs rdiff -u -r1.2 -r1.3 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/digest.c \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/digest.h \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/pgpsum.c
cvs rdiff -u -r1.12 -r1.13 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/libverify.c
cvs rdiff -u -r1.7 -r1.8 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/main.c
cvs rdiff -u -r1.3 -r0 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/tiger.c
cvs rdiff -u -r1.2 -r0 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/tiger.h
cvs rdiff -u -r1.9 -r1.10 \
    src/crypto/external/bsd/netpgp/dist/src/netpgpverify/verify.h
cvs rdiff -u -r1.8 -r1.9 src/crypto/external/bsd/netpgp/lib/verify/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.