Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[xsrc-public/trunk]: xsrc-public/external/mit/xauth/dist initial import of xa...



details:   https://anonhg.NetBSD.org/xsrc-public/rev/da52ceff5d05
branches:  trunk
changeset: 6944:da52ceff5d05
user:      mrg <mrg%NetBSD.org@localhost>
date:      Sun Jan 09 09:15:25 2022 +0000

description:
initial import of xauth-1.1.1

diffstat:

 external/mit/xauth/dist/ChangeLog                      |  137 +++
 external/mit/xauth/dist/Makefile.in                    |   20 +-
 external/mit/xauth/dist/README.md                      |    2 +-
 external/mit/xauth/dist/aclocal.m4                     |  140 +--
 external/mit/xauth/dist/compile                        |    6 +-
 external/mit/xauth/dist/config.guess                   |  514 ++++++++---
 external/mit/xauth/dist/config.h.in                    |    6 +
 external/mit/xauth/dist/config.sub                     |  685 +++++++++-------
 external/mit/xauth/dist/configure                      |   54 +-
 external/mit/xauth/dist/configure.ac                   |    4 +-
 external/mit/xauth/dist/depcomp                        |    2 +-
 external/mit/xauth/dist/gethost.c                      |   11 +-
 external/mit/xauth/dist/install-sh                     |  157 ++-
 external/mit/xauth/dist/man/Makefile.in                |    4 +-
 external/mit/xauth/dist/man/xauth.man                  |    4 +-
 external/mit/xauth/dist/missing                        |    2 +-
 external/mit/xauth/dist/parsedpy.c                     |    4 +-
 external/mit/xauth/dist/test-driver                    |   10 +-
 external/mit/xauth/dist/tests/030-xauth-extract.script |    2 +-
 external/mit/xauth/dist/tests/Makefile.in              |    7 +-
 20 files changed, 1078 insertions(+), 693 deletions(-)

diffs (truncated from 3743 to 300 lines):

diff -r e3d0188f06f3 -r da52ceff5d05 external/mit/xauth/dist/ChangeLog
--- a/external/mit/xauth/dist/ChangeLog Sun Jan 09 09:05:34 2022 +0000
+++ b/external/mit/xauth/dist/ChangeLog Sun Jan 09 09:15:25 2022 +0000
@@ -1,3 +1,140 @@
+commit 477307d00c1220f8594622e1af982fb0e4e215bf
+Author: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+Date:   Sun Nov 28 15:32:37 2021 -0800
+
+    xauth 1.1.1
+    
+    Signed-off-by: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+
+commit 1bfa5bff47654213f1d40af64bae0e9e23b4bed4
+Author: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+Date:   Sun Nov 28 15:03:37 2021 -0800
+
+    Fix spelling/wording issues
+    
+    Found by using:
+        codespell --builtin clear,rare,usage,informal,code,names
+    
+    Signed-off-by: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+
+commit c2811c953620cf946269db2b74b29e0dc707e26a
+Author: Alex Gendin <ukkeefy%gmail.com@localhost>
+Date:   Sat Sep 26 23:26:07 2020 -0400
+
+    Fix segfault when X starts
+    
+    This patch potentially fixes bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=884934
+    
+    System log entries when this bug occurs:
+        kernel: xauth[16729]: segfault at 1 ip 00007f51f517f5a5 sp 00007ffdec846568 error 4
+                              in libc-2.31.so[7f51f5102000+144000]
+        kernel: Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0
+                      0f 49 29 d0 48 8d 7c 17 31 e9 8f 0b 00 00 66 0f ef c0 <f3> 0f 6f 0e f3
+                      0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f
+    
+    This bug happens when function get_address_info() in gethost.c is called
+    with a display name without forward slash, for example 'myhost.mydomain:0'
+
+commit d7e5021416444e3cc545ffa4f8d1e613cabec633
+Author: Karol Herbst <kherbst%redhat.com@localhost>
+Date:   Thu Apr 22 13:26:50 2021 +0200
+
+    Check malloc calls in process.c
+    
+    Fixes warnings like
+    
+    warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'authdata' where non-null expected
+    
+    Found-by: gcc static analysis
+    Signed-off-by: Karol Herbst <kherbst%redhat.com@localhost>
+
+commit 18a3c3a7672ff5d65bf0b79b89464eac7540b95b
+Author: Dr. Tilmann Bubeck <tilmann%bubecks.de@localhost>
+Date:   Thu Aug 20 20:28:52 2020 +0200
+
+    Additionally check socket file with S_ISSOCK
+    This fixes bug https://bugzilla.redhat.com/show_bug.cgi?id=1870201
+
+commit aaf037ec5c576e46318935feaf6e2b7407ff11a0
+Author: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+Date:   Sun May 10 13:21:50 2020 -0700
+
+    Avoid memory leaks in error paths in do_generate
+    
+    Reported by Oracle Parfait:
+    Error: Memory leak
+       Memory leak [memory-leak] (CWE 401):
+          Memory leak of pointer authdata allocated with malloc((authdatalen - 1))
+            at line 1955 of process.c in function 'do_generate'.
+              authdata allocated at line 1946 with malloc((authdatalen - 1))
+          Memory leak of pointer authdata allocated with malloc((authdatalen - 1))
+            at line 1971 of process.c in function 'do_generate'.
+              authdata allocated at line 1946 with malloc((authdatalen - 1))
+              authdata leaks when (i + 1) >= argc at line 1910.
+            at line 1980 of process.c in function 'do_generate'.
+              authdata allocated at line 1946 with malloc((authdatalen - 1))
+              authdata leaks when (i + 1) >= argc at line 1910.
+    
+    Signed-off-by: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+
+commit 4faf0f63f0563513252967a2da1c51de6f5f7b0c
+Author: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+Date:   Sun May 10 11:46:16 2020 -0700
+
+    Use reallocarray() when adding members to array in split_into_words()
+    
+    Signed-off-by: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+
+commit af7a74e28b33c18c4cb90f0d25bdfd5dff2e29d3
+Author: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+Date:   Sun May 10 11:27:25 2020 -0700
+
+    Avoid memory leak when realloc() fails in split_into_words()
+    
+    Reported by Oracle Parfait:
+    Error: Memory leak
+       Memory leak [memory-leak] (CWE 401):
+          Memory leak of pointer argv allocated with malloc(32)
+            at line 283 of process.c in function 'split_into_words'.
+              argv allocated at line 264 with malloc(32)
+              argv leaks when cur == total at line 280.
+    
+    Signed-off-by: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
+
+commit f5af3b21bc94cb020f3530c3cc70f8a9fd6c6452
+Author: Tobias Stoeckmann <tobias%stoeckmann.org@localhost>
+Date:   Sun May 3 12:29:53 2020 +0200
+
+    Prevent OOB write with long file names.
+    
+    If an -f argument is exactly 1022 characters in size, an off-by-one
+    stack overflow happens in auth_finalize. The overflow could be even
+    larger if locks are ignored for authentication files.
+    
+    Make sure that a given authentication file name fits into temporary
+    buffer and that this buffer matches buffer sizes of libXau which is
+    used by xauth.
+
+commit cb98d3b3c5e0f8a7585ab6e2c909fad68c52fd55
+Author: Tobias Stoeckmann <tobias%stoeckmann.org@localhost>
+Date:   Sun May 3 12:25:21 2020 +0200
+
+    Fix segmentation fault on invalid add argument.
+    
+    The hex key supplied with an add command can be quoted, in which
+    case the quotation marks are removed.
+    
+    The check itself makes sure that a given string starts with a
+    double quotation mark and ends with a double quotation mark.
+    
+    Buf if only " is supplied, the code crashes because it subtracts
+    2 from the length (which is 1) and therefore copies too much
+    memory into a 0 allocated memory area.
+    
+    Proof of concept:
+    
+    $ xauth add :0 0 \"
+
 commit e97992671b3870878709a1c01991488965b61b94
 Author: Adam Jackson <ajax%redhat.com@localhost>
 Date:   Thu Jul 11 13:49:26 2019 -0400
diff -r e3d0188f06f3 -r da52ceff5d05 external/mit/xauth/dist/Makefile.in
--- a/external/mit/xauth/dist/Makefile.in       Sun Jan 09 09:05:34 2022 +0000
+++ b/external/mit/xauth/dist/Makefile.in       Sun Jan 09 09:15:25 2022 +0000
@@ -1,7 +1,7 @@
-# Makefile.in generated by automake 1.16.1 from Makefile.am.
+# Makefile.in generated by automake 1.16.3 from Makefile.am.
 # @configure_input@
 
-# Copyright (C) 1994-2018 Free Software Foundation, Inc.
+# Copyright (C) 1994-2020 Free Software Foundation, Inc.
 
 # This Makefile.in is free software; the Free Software Foundation
 # gives unlimited permission to copy and/or distribute it,
@@ -183,8 +183,8 @@
   $(am__extra_recursive_targets)
 AM_RECURSIVE_TARGETS = $(am__recursive_targets:-recursive=) TAGS CTAGS \
        cscope distdir distdir-am dist dist-all distcheck
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) \
-       $(LISP)config.h.in
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP) \
+       config.h.in
 # Read a list of newline-separated strings from the standard input,
 # and print each of them once, without duplicates.  Input order is
 # *not* preserved.
@@ -246,6 +246,8 @@
 DIST_ARCHIVES = $(distdir).tar.gz $(distdir).tar.bz2
 GZIP_ENV = --best
 DIST_TARGETS = dist-bzip2 dist-gzip
+# Exists only to be overridden by the user if desired.
+AM_DISTCHECK_DVI_TARGET = dvi
 distuninstallcheck_listfiles = find . -type f -print
 am__distuninstallcheck_listfiles = $(distuninstallcheck_listfiles) \
   | sed 's|^\./|$(prefix)/|' | grep -v '$(infodir)/dir$$'
@@ -709,6 +711,10 @@
        tardir=$(distdir) && $(am__tar) | XZ_OPT=$${XZ_OPT--e} xz -c >$(distdir).tar.xz
        $(am__post_remove_distdir)
 
+dist-zstd: distdir
+       tardir=$(distdir) && $(am__tar) | zstd -c $${ZSTD_CLEVEL-$${ZSTD_OPT--19}} >$(distdir).tar.zst
+       $(am__post_remove_distdir)
+
 dist-tarZ: distdir
        @echo WARNING: "Support for distribution archives compressed with" \
                       "legacy program 'compress' is deprecated." >&2
@@ -751,6 +757,8 @@
          eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).shar.gz | unshar ;;\
        *.zip*) \
          unzip $(distdir).zip ;;\
+       *.tar.zst*) \
+         zstd -dc $(distdir).tar.zst | $(am__untar) ;;\
        esac
        chmod -R a-w $(distdir)
        chmod u+w $(distdir)
@@ -766,7 +774,7 @@
            $(DISTCHECK_CONFIGURE_FLAGS) \
            --srcdir=../.. --prefix="$$dc_install_base" \
          && $(MAKE) $(AM_MAKEFLAGS) \
-         && $(MAKE) $(AM_MAKEFLAGS) dvi \
+         && $(MAKE) $(AM_MAKEFLAGS) $(AM_DISTCHECK_DVI_TARGET) \
          && $(MAKE) $(AM_MAKEFLAGS) check \
          && $(MAKE) $(AM_MAKEFLAGS) install \
          && $(MAKE) $(AM_MAKEFLAGS) installcheck \
@@ -941,7 +949,7 @@
        clean-binPROGRAMS clean-cscope clean-generic cscope \
        cscopelist-am ctags ctags-am dist dist-all dist-bzip2 \
        dist-gzip dist-hook dist-lzip dist-shar dist-tarZ dist-xz \
-       dist-zip distcheck distclean distclean-compile \
+       dist-zip dist-zstd distcheck distclean distclean-compile \
        distclean-generic distclean-hdr distclean-tags distcleancheck \
        distdir distuninstallcheck dvi dvi-am html html-am info \
        info-am install install-am install-binPROGRAMS install-data \
diff -r e3d0188f06f3 -r da52ceff5d05 external/mit/xauth/dist/README.md
--- a/external/mit/xauth/dist/README.md Sun Jan 09 09:05:34 2022 +0000
+++ b/external/mit/xauth/dist/README.md Sun Jan 09 09:15:25 2022 +0000
@@ -22,7 +22,7 @@
 
   https://lists.x.org/mailman/listinfo/xorg
 
-The master development code repository can be found at:
+The primary development code repository can be found at:
 
   https://gitlab.freedesktop.org/xorg/app/xauth
 
diff -r e3d0188f06f3 -r da52ceff5d05 external/mit/xauth/dist/aclocal.m4
--- a/external/mit/xauth/dist/aclocal.m4        Sun Jan 09 09:05:34 2022 +0000
+++ b/external/mit/xauth/dist/aclocal.m4        Sun Jan 09 09:15:25 2022 +0000
@@ -1,6 +1,6 @@
-# generated automatically by aclocal 1.16.1 -*- Autoconf -*-
-
-# Copyright (C) 1996-2018 Free Software Foundation, Inc.
+# generated automatically by aclocal 1.16.3 -*- Autoconf -*-
+
+# Copyright (C) 1996-2020 Free Software Foundation, Inc.
 
 # This file is free software; the Free Software Foundation
 # gives unlimited permission to copy and/or distribute it,
@@ -20,9 +20,9 @@
 If you have problems, you may need to regenerate the build system entirely.
 To do so, use the procedure documented by the package, typically 'autoreconf'.])])
 
-# pkg.m4 - Macros to locate and utilise pkg-config.   -*- Autoconf -*-
-# serial 11 (pkg-config-0.29.1)
-
+dnl pkg.m4 - Macros to locate and utilise pkg-config.   -*- Autoconf -*-
+dnl serial 11 (pkg-config-0.29)
+dnl
 dnl Copyright © 2004 Scott James Remnant <scott%netsplit.com@localhost>.
 dnl Copyright © 2012-2015 Dan Nicholson <dbn.lists%gmail.com@localhost>
 dnl
@@ -63,7 +63,7 @@
 dnl See the "Since" comment for each macro you use to see what version
 dnl of the macros you require.
 m4_defun([PKG_PREREQ],
-[m4_define([PKG_MACROS_VERSION], [0.29.1])
+[m4_define([PKG_MACROS_VERSION], [0.29])
 m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1,
     [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])])
 ])dnl PKG_PREREQ
@@ -296,74 +296,6 @@
 AS_VAR_IF([$1], [""], [$5], [$4])dnl
 ])dnl PKG_CHECK_VAR
 
-dnl PKG_WITH_MODULES(VARIABLE-PREFIX, MODULES,
-dnl   [ACTION-IF-FOUND],[ACTION-IF-NOT-FOUND],
-dnl   [DESCRIPTION], [DEFAULT])
-dnl ------------------------------------------
-dnl
-dnl Prepare a "--with-" configure option using the lowercase
-dnl [VARIABLE-PREFIX] name, merging the behaviour of AC_ARG_WITH and
-dnl PKG_CHECK_MODULES in a single macro.
-AC_DEFUN([PKG_WITH_MODULES],
-[
-m4_pushdef([with_arg], m4_tolower([$1]))
-
-m4_pushdef([description],
-           [m4_default([$5], [build with ]with_arg[ support])])
-
-m4_pushdef([def_arg], [m4_default([$6], [auto])])
-m4_pushdef([def_action_if_found], [AS_TR_SH([with_]with_arg)=yes])
-m4_pushdef([def_action_if_not_found], [AS_TR_SH([with_]with_arg)=no])
-
-m4_case(def_arg,
-            [yes],[m4_pushdef([with_without], [--without-]with_arg)],
-            [m4_pushdef([with_without],[--with-]with_arg)])
-
-AC_ARG_WITH(with_arg,
-     AS_HELP_STRING(with_without, description[ @<:@default=]def_arg[@:>@]),,
-    [AS_TR_SH([with_]with_arg)=def_arg])
-
-AS_CASE([$AS_TR_SH([with_]with_arg)],
-            [yes],[PKG_CHECK_MODULES([$1],[$2],$3,$4)],
-            [auto],[PKG_CHECK_MODULES([$1],[$2],
-                                        [m4_n([def_action_if_found]) $3],
-                                        [m4_n([def_action_if_not_found]) $4])])
-
-m4_popdef([with_arg])



Home | Main Index | Thread Index | Old Index