doc: Added textproc/libuninameslist version 20190701

(nia)

Add textproc/libuninameslist

The Unicode consortium provides a file containing annotations on many unicode
characters. This library contains a compiled version of this file so that
programs can access this data quickly and easily.

(nia)

Rewrite PYTHON_VERSIONS_ACCEPTED to PYTHON_VERSIONS_INCOMPATIBLE

(adam)

Python 2.6 is long gone

(adam)

Changed PYTHON_VERSIONS_INCOMPATIBLE to PYTHON_VERSIONS_ACCEPTED; needed for future Python 3.8

(adam)

Remove PYTHON_VERSIONS_INCOMPATIBLE from options

(adam)

Changed PYTHON_VERSIONS_INCOMPATIBLE to PYTHON_VERSIONS_ACCEPTED; needed for future Python 3.8

(adam)

doc: Updated net/libupnp to 1.8.4

(nia)

libupnp: Update to 1.8.4.

*******************************************************************************
Version 1.8.4
*******************************************************************************

2017-11-17 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

GitHub #57 - 1.8.3 broke ABI without changing SONAME
Opened by jcowgill

This change in 1.8.3 broke the ABI and therefore the SONAME should have
been changed (ie: age reset to 0):

EXPORT_SPEC int UpnpAddVirtualDir(
        /*! [in] The name of the new directory mapping to add. */
-      const char *dirName);
+      const char *dirName,
+      /*! [in] The cookie to associated with this virtual directory */
+      const void *cookie,
+      /*! [out] The cookie previously associated, if mapping is already present */
+      const void **oldcookie);

If only the cookie argument was added, you could probably get away with
this because all that would happen is that a garbage value is passed
around without being used. With the addition of oldcookie, any old
programs will not initialise this value and will probably segfault when
libupnp tries to write to it.

*******************************************************************************
Version 1.8.3
*******************************************************************************

2017-09-07 Dave Overton <david(at)insomniavisions.com>

Add userdata/cookie to virtualDir callbacks

As with the main Device APIs (UpnpRegisterRootDevice etc), it is useful
to have a userdata/cookie pointer returned with each callback.

This patch allows one cookie per registered path which enables a variety
of functionality in client apps.

2017-09-03 Uwe Kleine-K旦nig <uwe@kleine-koenig.org>

Fix large file system support

libupnp uses large file support (if available). If a program linking to
libupnp does not however it creates mismatches in callframes. See
Issue #51 for the results.

This simplifies LFS support by using AC_SYS_LARGEFILE_SENSITIVE instead of
manually defining _LARGE_FILE_SOURCE and _FILE_OFFSET_BITS (which is
useless on architectures where the size of off_t is fixed).

Furthermore additional logic is introduced to catch a library user without
64 bit wide off_t on such a platform.

upnp.h also makes use of off_t, but as this file includes FileInfo.h, the
latter is the single right place for this check.

This fixes #52 which is a generalized variant of #51.

2017-08-19 Uwe Kleine-K旦nig <uwe@kleine-koenig.org>

configure.ac: Drop copying of include files

The comment suggests this is for windows compilation. It should be easily
possible to add the source directory as an include path to the windows
compiler, too, so drop this. (Otherwise this should better be done using
AC_CONFIG_COMMANDS.)

2017-09-03 Uwe Kleine-K旦nig <uwe@kleine-koenig.org>

Let source code use autoconfig.h not the public upnpconfig.h

The former is the one supposed to be used for internal code. upnpconfig.h is only
for public stuff.

2017-08-19 Uwe Kleine-K旦nig <uwe@kleine-koenig.org>

configure.ac: Fix typo s/optionnal/optional/

2017-08-08 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Fix broken samples when configured with --disable-ipv6.

*******************************************************************************
Version 1.8.2
*******************************************************************************

2017-07-24 Michael Osipov

Initialize in_addr and in6_addr to avoid garbage output if never written

If any of the address families isn't available in UpnpGetIfInfo(),
especially IPv6, always init both structs with zero to avoid garbage
output with inet_ntop() to gIF_IPV4 and gIF_IPV6.

See v00d00/gerbera#112 (https://github.com/v00d00/gerbera/issues/112)
for consequences: bind for IPv6 will fail.

2013-10-28 Vladimir Fedoseev <va-dos(at)users.sourceforge.net>

Attached patch allows to register multiple clients from single app.

2014-11-14 Philippe <philippe44ca(at)users.sourceforge.net>

Hi - I recently compiled libupnp on C++ Builder XE7 and had to do a few
changes to make it work. In thase this helps, I've generated a small
patch file.

2015-04-30 Hugo Beauz辿e-Luyssen <chouquette(at)users.sourceforge.net>

When building using a strict mode (-std=c++11 instead of -std=gnu++11,
for instance), the WIN32 macro isn't defined. The attached patch fixes
it by using _WIN32 instead.

2015-02-06 Jean-Francois Dockes <jf@dockes.org>

Queue events on their subscription object instead of adding them to the
thread pool immediately.

Events destined for a non-responding control point would flood the
thread pool and prevent correct dispatching to other clients, sometimes
to the point of disabling the device. Events are now queued without
allocating thread resources and properly discarded when a client is not
accepting them.

2015-02-03 Jean-Francois Dockes <jf@dockes.org>

genaInitNotify()/genaInitNotifyExt() and
genaNotifyAll()/genaNotifyAllExt() are relatively complicated methods
which only differ by the format of an input parameter. This update
extracts the common code for easier maintenance, esp. relating to the
queueing modifications to follow.

*******************************************************************************
Version 1.8.1
*******************************************************************************

2017-04-26 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Fix some compiler warning messages on md5.c

2017-03-07 Fabrice Fontaine <fontaine.fabrice(at)gmail.com>

Enable IPv6 by default

2017-03-07 Fabrice Fontaine <fontaine.fabrice(at)gmail.com>

Move threadutil source code to libupnp

With this patch, threadutil library is removed as the only public
header that has been kept in 1.8.x is ithread.h which is mainly a
wrapper to pthread with inline functions.
threadutil source code will now be a part of libupnp library.

*******************************************************************************
Version 1.8.0
*******************************************************************************

2014-01-15 Peng <howtofly(at)gmail.com>

Fix memory leaks.

2013-04-27 Thijs Schreijer <thijs(at)thijsschreijer.nl>

Renamed SCRIPTSUPPORT to IXML_HAVE_SCRIPTSUPPORT for consistency. Also
updated autoconfig and automake files, so it also works on non-windows.
Option is enabled by default, because it adds an element to the node
structure. Not using an available field is better than accidentally
using an unavailable field.

2012-07-11 Thijs Schreijer <thijs(at)thijsschreijer.nl>

Changed param to const UpnpAcceptSubscriptionExt() for consistency

2012-06-07 Thijs Schreijer <thijs(at)thijsschreijer.nl>

updated ixmlDocument_createAttributeEx() and ixmlDocument_createAttribute()
to use parameter DOMString instead of char * (same but now consistent)

2012-05-06 Thijs Schreijer <thijs(at)thijsschreijer.nl>

Added script support (directive SCRIPTSUPPORT) for better support of
garbage collected script languages. The node element gets a custom tag
through ixmlNode_setCTag() and ixmlNode_getCTag(). And a callback upon
releasing the node resources can be set using ixmlSetBeforeFree()
See updated readme for usage.

2012-03-24 Fabrice Fontaine <fabrice.fontaine(at)orange.com>

SF Bug Tracker id 3510595 - UpnpDownloadXmlDoc : can't get the file

Submitted: Marco Virgulti ( mvirg83 ) - 2012-03-23 10:08:08 PDT

There is a problem, perhaps, during downloading a document by
UpnpDownloadXmlDoc. During debugging i've found that in an not exported
api (unfortunately i forgot the code line...) where it is setted a
local variable "int timeout" to -1 then passed directly to another
function for sending data through tcp socket. I patched this setting it
to 0 (there is an IF section that exits if timeout < 0). It is normal
behavior or it is a bug?

2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Check for NULL pointer in TemplateSource.h

calloc can return NULL so check for NULL pointer in CLASS##_new and
CLASS##_dup.

2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Replace strcpy with strncpy in get_hoststr

Replace strcpy with strncpy to avoid buffer overflow.

2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Memory leak fix in handle_query_variable

variable was never freed.

2011-02-07 Chandra Penke <chandrapenke(at)mcntech.com>

Add HTTPS support using OpenSSL. HTTPS support is optional and can
be enabled by passing the --enable-open-ssl argument to the
configure script.

The following methods are introduced to the public API:
UpnpInitOpenSslContext

When enabled, HTTPS can be used by using "https://" instead of
"http://" when passing URLs to the HTTP Client API.

2011-02-07 Chandra Penke <chandrapenke(at)mcntech.com>

Refactor HTTP Client API to be more generic.

The following features are added:

- Support for persistent HTTP connections (reusing HTTP
  connections). Tthis is still a work in progress and relies on
  applications to interpret the 'Connection' header
  appropriately.

- Support for specifying request headers when making
  requests. Useful for interacting with web services that require
  custom headers.

- Support for retrieving response headers (this is a API only
  change, some more work needs to be done to implement the actual
  functionality. Specifically copy_msg_headers in httpreadwrite.c
  needs to be implemented)

- Common API for all HTTP methods.

- Support for PUT, and DELETE methods.

The following methods are introduced to the public HTTP Client API

UpnpOpenHttpConnection, UpnpCloseHttpConnection, UpnpMakeHttpRequest,
UpnpWriteHttpRequest, UpnpEndHttpRequest, UpnpGetHttpResponse,
UpnpReadHttpResponse.

Removed a lot of duplicate code in httpreadwrite.c

2011-01-17 Chandra Penke <chandrapenke(at)mcntech.com>

Include upnpconfig.h in FileInfo.h to automatically include large
file macros

2011-01-17 Chandra Penke <chandrapenke(at)mcntech.com>

Fix for warnings Apple systems related to macros defined in list.h.

In list.h, in apple systems, undefine the macros prior to defining them.

2011-01-16 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Fix for UpnpFileInfo_get_LastModified() in http_MakeMessage().

UpnpFileInfo_get_LastModified() returns time_t, and http_MakeMessage()
takes a "time_t *". Thanks to Chandra Penke for pointing the bug.

2010-11-22 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Template object for ssdp_ResultData.

2010-11-10 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Support for "polling" select in sock_read_write.

Currently, in sock_read_write function, if the timeout is 0, pupnp
realizes a "blocking" select (with an infinite timeout). With this
patch, if timeout is set to 0, pupnp will realize a "polling" select
and returns immediately if it can not read or write on the socket. This
is very useful for GENA notifications when pupnp is trying to send
events to a disconnected Control Point. "Blocking" select can now be
done by putting a negative timeout value.

2010-09-18 Chandra Penke <chandrapenke(at)mcntech.com>

This is a minor build fix. The new Template*.h files added in the latest
code need to be exported. Patch against the latest sources is attached.

2010-08-22 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* upnp/src/api/Discovery.c: Fix a serious bug and memory leak in
UpnpDiscovery_strcpy_DeviceType(). Thanks to David Blanchet for the
patch.

2010-04-25 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
Separation of the ClientSubscription object.

2010-04-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
Protect the object destructors agains null pointers on deletion, which
should be something valid.

2010-03-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
SF Patch Tracker [ 2987390 ] upnp_debug vs. ixml_debug
Thanks for the load of updates, I'm still assimilating them ! Could I make
a suggestion though? The addition of printNodes(IXML_Node) to upnpdebug a
dds a new dependency on ixml.h for anything using upnpdebug.h. I'm making
quite a bit of use of upnpdebug in porting things to version 1.8.0, and I'd
prefer it if printNodes could be added to ixmldebug.h instead. I'm attach
ing a patch, what do you think ?

Nick

2010-03-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Forward port of svn revision 505:
SF Patch Tracker [ 2836704 ] Patch for Solaris10 compilation and usage.
Submitted By: zephyrus ( zephyrus00jp )

2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2969188 ] 1.8.0: patch for FreeBSD compilation
Submitted By: Nick Leverton (leveret)
Fix the order of header inclusion for FreeBSD.

2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Forward port of svn revision 502:
SF Patch Tracker [ 2836704 ] Search for nested serviceList (not
stopping at the first lis
Submitted By: zephyrus ( zephyrus00jp )

Internet Gateway Device description contains nested serviceList (rootdevice
-> servicelist, subdevice
and subdevice has the lower-level serviceList, etc..)

Unfrotunately, the sample code sample_util.c used by tv_device sample,
etc.
has a code that looks for only the first top-level serviceList.
This results in the failure to read all the services of an IGD xml
description.

Attached patch modifies this behavior and looks for the service by
visiting all the serviceList in xml document in turn.

With the modified patch (ad additional modification), I could
simulate an IGD device and created a modified control program for that.

Patch against 1.6.6

TIA.

2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2973319 ] Problem in commit 499
Submitted By: Nick Leverton (leveret)
Afraid that this doesn't compile, it seems retval should be retVal in two
places.

2010-03-16 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Fix for the ithread_mutex_unlock() logic in UpnpInit().
Thanks for Nicholas Kraft.

2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2962606 ] Autorenewal errors: invalid SID,
too-short renewal interval
Submitted By: Nick Leverton (leveret)

Auto-renewals send an invalid SID due to a missing UpnpString_get_String
call. They also send a renewal interval of 0 instead of copying it from
the original subscription.

2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2964685 ] patch for avoiding inet_ntoa (1.8.0)
Submitted By: Nick Leverton (leveret)

Seems like SF's tracker won't let me add a patch to someone else's issue ?!
This refers to https://sourceforge.net/support/tracker.php?aid=2724578

The calls to inet_ntoa are in getlocalhostname(), which is called from
UpnpInit when it is returning the bound IP address.
UpnpInit/getlocalhostname hasn't been updated to IPv6, I presume this is
deliberate so that it doesn't start returning IPv6 addresses and
overwriting the caller's IPv4-sized allocation.

The attached patch just updates getlocalhostname to use inet_ntop instead
of inet_ntoa, and also documents the fact that UpnpInit is IPv4 only whilst
UpnpInnit2 is both IPv4 and IPv6.

A fuller solution might be to change UpnpInit to use some variant on
UpnpGetIfInfo. UpnpInit could still be left as IPv4 only if desired -
perhaps UpnpGetIfInfo could take an option for the desired address family.
getlocalhostname and its own copy of the interface scanning code would then
be redundant. I don't have IPv6 capability here though so I'm reluctant to
change the IPv6 code, as I have no way to test it.

2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2724578 ] patch for avoiding memory leaks when
add devices

each time a device been added, UpnpInit() is called, on exit, UpnpFinish()
is called, but the memories allocated by ThreadPoolInit() may lost because
there's no code to call ThreadPoolShutdown() to release the memories. And
inet_ntoa() is not thread safe, so in my patch, I substitute inet_ntoa()
with inet_ntop().

2010-03-14 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2964687 ] Add new string based accessors to upnp
object API

As per email to pupnp-devel, this is the patch to add the _strget_
accessors for string-like objects in the interface.

Will add a further patch shortly to udpate the sample programs.

2008-06-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Nicholas Kraft's patch to fix some IPv6 copy/paste issues. He
reported to be getting infinite loops with the svn code.

2008-06-13 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Bug Tracker [ 1984541 ]
ixmlDocumenttoString does not render the namespace tag.
Submitted By: Beliveau - belivo

Undoing the patch that fixed this problem. In fact, there was no
problem and the patch was wrong.

2008-06-11 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Ingo Hofmann's patch for "Content-Type in Subscription responses".
Adds charset="utf-8" attribute to the CONTENT-TYPE header line.

Hi,

I have found an inconsistency regarding the text/xml content-type
returned by libupnp. It looks like only subscription responses send
"text/xml" where all other messages contain "text/xml; charset="utf-8"".
Since I'm working on an DLNA device the latter behaviour is mandatory.
I changed the according lines in gena_device.c (see attached patch).
I'm not sure if it would be ok for other device to have the charset
field but it would help me a lot :)

Best regards,
Ingo

2008-06-04 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Bug Tracker [ 1984541 ]
ixmlDocumenttoString does not render the namespace tag.
Submitted By: Beliveau - belivo

The problem occurs when converting a xml document using
ixmlDocumenttoString containing a namespace tag created with
ixmlDocument_createElementNS. The namespace tag doesn't get rendered.

example: The following code fragment prints:

<?xml version="1.0"?>
<root></root>

instead of:
<?xml version="1.0"?>
<root xmlns="urn:schemas-upnp-org:device-1-0"></root>

Code:

#include <stdlib.h>
#include <upnp/ixml.h>

int main()
{
IXML_Document* wDoc = ixmlDocument_createDocument();
IXML_Element* wRoot = ixmlDocument_createElementNS(wDoc,
"urn:schemas-upnp-org:device-1-0", "root");
ixmlNode_appendChild((IXML_Node *)wDoc,(IXML_Node *)wRoot);
DOMString wString = ixmlDocumenttoString(wDoc);
printf(wString);
free(wString);
ixmlDocument_free(wDoc);

return 0;
}

The problem was in the printing routine, not in the library data
structure.

2008-05-31 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Charles Nepveu's suggestion of not allocating a thread for
MiniServer when it is not compiled.

2008-05-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Ported Peter Hartley's patch to compile with mingw.

2008-05-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Added some debug capability to ixml.

2008-05-02 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Merged Charles Nepveu's IPv6 work. libupnp now is IPv6 enabled.

2008-02-06 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Breaking API so that we now hide internal data structures.

2008-02-06 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Rewrote Peter Hartley's patch to include a new extra header field in
FileInfo.

*******************************************************************************
Version 1.6.22
*******************************************************************************

2017-07-07 James Cowgill <james410(at)cowgill.org.uk>

Replace MD5 impmplementation with public-domain version

Currently the RSA MD5 implementation is used. Unfortunately the license
has some potential issues:
* The license does not explicitly allow distributing derivative works.
This was the original argument used in
[Debian #459516](https://bugs.debian.org/459516).
* The license contains an advertising clause similar to the BSD 4-clause
license. This is incompatible with the GPL and if it were enforced,
would require RSA to be mentioned by pretty much everyone who uses pupnp.

The simple solution is to replace it with a public domain
implementation. I've taken OpenBSDs implementation and tweaked it
slightly for use by pupnp by:
- Adjusting the includes.
- Removing the __bounded__ attributes which are specific to OpenBSD.
- Using the standard integer types from stdint.h.
- Using memset instead of explicit_bzero.

2016-12-16 Peter Pramberger <peterpramb(at)users.sf.net>

ixml/test/test_document.c is missing the string.h include, therefore
the compiler complains about an implicit declaration.

*******************************************************************************
Version 1.6.21
*******************************************************************************

2016-12-16 Gabriel Burca <gburca(at)github>

If the error or info log files can not be created, use stderr and
stdout instead.

2016-12-08 Uwe Kleine-K旦nig <uwe(at)kleine-koenig.org>

Fix out-of-bound access in create_url_list() (CVE-2016-8863)

If there is an invalid URL in URLS->buf after a valid one, uri_parse is
called with out pointing after the allocated memory. As uri_parse writes
to *out before returning an error the loop in create_url_list must be
stopped early to prevent an out-of-bound access

Bug: https://sourceforge.net/p/pupnp/bugs/133/
Bug-CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8863
Bug-Debian: https://bugs.debian.org/842093
Bug-Redhat: https://bugzilla.redhat.com/show_bug.cgi?id=1388771

2016-11-30 Uwe Kleine-K旦nig <uwe(at)kleine-koenig.org>

miniserver: fix binding to ipv6 link-local addresses

Linux requires to have sin6_scope_id hold the interface id when binding to
link-local addresses. This is already in use in other parts of upnp, so
portability shouldn't be in the way here. Without this bind(2) fails with
errno=EINVAL (although ipv6(7) from manpages 4.08 specifies ENODEV in this
case).

Fixes: https://bugs.debian.org/813249

2016-09-15 Mathew Garret <(at)mjg59 (twitter)>

SF Bug Tracker #132 CVE-2016-6255: write files via POST

Submitted by: Balint Reczey in 2016-08-02

From Debian's BTS https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831857 :
From: Salvatore Bonaccorso carnil@debian.org
To: Debian Bug Tracking System submit@bugs.debian.org
Subject: libupnp: write files via POST
Date: Wed, 20 Jul 2016 11:03:34 +0200
Source: libupnp
Version: 1:1.6.17-1
Severity: grave
Tags: security upstream
Justification: user security hole
Hi
See security/2016/07/18/13">http://www.openwall.com/lists/oss-security/2016/07/18/13 and
https://twitter.com/mjg59/status/755062278513319936 .
Proposed fix:
https://github.com/mjg59/pupnp-code/commit/be0a01bdb83395d9f3a5ea09c1308a4f1a972cbd
Regards,
Salvatore

From Mathew Garret's commit: Don't allow unhandled POSTs to write to the filesystem by default

*******************************************************************************
Version 1.6.20
*******************************************************************************

2016-02-22 Jean-Francois Dockes <medoc(at)users.sf.net>

SF Bugs #131, Creator: Jean-Francois Dockes

I know it sounds crazy that nobody ever saw this, but the CONTENT-LENGTH
value in GENA NOTIFY messages is too small by one.

It appears that most current control points don't notice the extra
character (an LF, which is validly there but not included in
Content-Length), probably because their protocol handler is reasonably
lenient, and because the missing body LF does not prevent parsing the
XML. But there is a least one anal CP (Linn Kazoo) which barfs, because
it reads all data until connection close and the size mismatch triggers
a bug.

"Proof":
In gena_device.c:217 (notify_send_and_recv())

ret_code = http_SendMessage(&info, &timeout,
    "bbb",
    start_msg.buf, start_msg.length,
    propertySet, strlen(propertySet),
    CRLF, strlen(CRLF));

start_msg has all the headers, including the empty line.
Content-length should be strlen(propertySet) + strlen(CRLF) (2)
In gena_device.c:433 (AllocGenaHeaders())

rc = snprintf(headers, headers_size, "%s%s%"PRIzu"%s%s%s",
    HEADER_LINE_1,
    HEADER_LINE_2A,
    strlen(propertySet) + 1,
    HEADER_LINE_2B,
    HEADER_LINE_3,
    HEADER_LINE_4);

HEADER_LINE_2A is "CONTENT-LENGTH: ".
The following value should be strlen(propertySet) + 2

2016-01-07 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net>

Fix for a reported integer overflow

2016-01-07 Jean-Francois Dockes <medoc(at)users.sf.net>
2016-01-07 Nick Leverton <nick(at)leverton.org>
SF Patches #60, Creator: Jean-Francois Dockes

When libupnp is configured with --enable-ipv6 but ipv6 is not available
on the system (for example because the ipv6 code is not loaded in a Linux
kernel as is the case by default on Raspbian), the ipv6 socket creation
call will fail in miniserver.c and the library init will fail, even if
the ipv4 initialisation would have succeeded.

Let a library configured with --enable-ipv6 initialize in ipv4-only
mode if ipv6 is not available instead of failing. This can happen
if no ipv6 code is configured or loaded in the kernel.

Don't fail if IPv6 is unavailable.
We might be an IPv6 enabled distro build running on an IPv4-only custom kernel.

2016-01-07 Nick Leverton <nick(at)leverton.org>

SF Bug Tracker #128, Creator: Nick Leverton
redefining strndup causes "error: expected identifier or '(' before '__extension__'"

Fix redefinition of strnlen and strndup
These are available when HAVE_STRNDUP and HAVE_STRNLEN are defined, but
libupnp provides an extern prototype anyway.  Recent versions of glibc
define this prototype differently, causing the following compile error:

src/api/UpnpString.c:47:15: error: expected identifier or '(' before  '__extension__'
extern char *strndup(__const char *__string, size_t __n);

2016-01-07 Nick Leverton <nick(at)leverton.org>

SF Bug Tracker #129, Creator: Nick Leverton
shutdown() on UDP sockets logs ENOTCONN message.
https://sourceforge.net/p/pupnp/bugs/129/

Fix ENOTCONN "Error in shutdown: Transport endpoint is not connected"

When logging is enabled, ssdpserver logs bursts of
"Error in shutdown: Transport endpoint is not connected"
This is because shutdown() is not supported for UDP sockets and under
recent UNIX specifications it returns ENOTCONN if used.

2016-01-07 Nick Leverton <nick(at)leverton.org>

SF Bug Tracker #127, Creator: Klaus Fischer
Miniserver uses INADDR_ANY instead of HostIP
https://sourceforge.net/p/pupnp/bugs/127/

The internal miniserver.c uses INADDR_ANY instead of the HostIP/IfName
provided when initializing libupnp. But, this HostIP/IfName gets used
for the UDP socket when multicasting SSDP messages.  Because of this,
miniserver may end up sending from different IP address than ssdpserver.
This patch causes miniserver to use the already known interface address.

2016-01-07 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net>

SF Bug Tracker #130, Creator: Shaddy Baddah
infinite loop in UpnpGetIfInfo() under WIN32

Original code makes no sense. This patch should fix it.

2015-02-04 Shaun Marko <semarko@users.sf.net>

Bug tracker #124 Build fails with --enable-debug

Build environment
Fedora 21
X86-64
* gcc 4.9.2

How to repeat
$ ./configure --enable debug
$ make
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I../upnp/inc -I./inc -I../threadutil/inc
-I../ixml/inc -I./src/inc -pthread -g -O2 -Wall -MT src/api/libupnp_la-UpnpString.lo
-MD -MP -MF src/api/.deps/libupnp_la-UpnpString.Tpo -c src/api/UpnpString.c
-fPIC -DPIC -o src/api .libs/libupnp_la-UpnpString.o src/api/UpnpString.c:47:16:
error: expected identifier or '(' before 'extension'
extern char *strndup(const char *string, size_t __n);
^
Makefile:1016: recipe for target 'src/api/libupnp_la-UpnpString.lo' failed

Reason for failure
Build enables -O2 optimization flags which causes the inclusion of a
macro implementation of strndup from include/bits/string2.h.

Workarounds
Disable optimization when configuring or making:
$ configure CFLAGS='-g -pthread -O0' --enable-debug
$ make
or
$ configure --enable-debug
$ make CFLAGS='-g -pthread -O0' Define NO_STRING_INLINES
$ export CFLAGS="-DNO_STRING_INLINES -O2"
$ ./configure --enagble-debug
$ make

Fix
* Don't declare strndup in src/api/UpnpString.c if it exists

2015-02-01 Jean-Francois Dockes <medoc@users.sf.net>

Out-of-tree builds seem to be currently broken, because ixml and
threadutil files need an include path to include UpnpGlobal.h, and
configure tries to copy files into a directory which it does not create.
The patch fixes both issues.

2014-01-03 Peng <howtofly(at)gmail.com>

rewrite soap_device.c

1) separate HTTP handling from SOAP handling
2) remove repeated validity check, each check is performed exactly once
3) fix HTTP status code per UPnP spec, SOAP spec and RFC 2774

(nia)

vlc: drop mad and faad plugins

both of these are unmaintained upstream and neither are necessary for
mp3/m4a playback which is handled by other libraries.

bump PKGREVISION

(nia)

doc: Updated devel/p5-Test-BDD-Cucumber to 0.60

(schmonz)

Update to 0.60. From the changelog:

- Added flag to make `pherkin` check for duplicate matching step
  functions to help debugging
- Added option to specify meta data to step functions and use it in
  extensions; minimally available meta data identifies the file name
  and line where the step function has been defined
- Cleaned up release procedure: 0.58 and 0.59 were sloppy, including
  additional files from the working directory
- Increase minimum Perl version to 5.10
- Updated languge support from Cucumber upstream repository, adding
  support for: Armenian, Aragonese, Asturian, Azerbaijani, Bosnian,
  Emoji, Irish, Gujarati, Georgian, Macedonian (Cyrilic),
  Macedonian (Latin), Mongolian and Tamil
- Documentation updates and (hopefully) clarification

(schmonz)

p5-IPC-Cache: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Mojo-IOLoop-ForkCall: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Python-Serialise-Marshal: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Class-DBI-BaseDSN: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Danga-Socket: remove empty PLIST; add perl5 to CATEGORIES

(adam)

p5-Crypt-DH-GMP: remove empty PLIST

(adam)

p5-Mail-Message: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Apache-Session-SharedMem: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Lingua-EN-Fathom: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Lingua-EN-Syllable: remove PLIST since PERL5_PACKLIST is in use; update HOMEPAGE

(adam)

p5-HTML-FormatText-WithLinks: remove PLIST since PERL5_PACKLIST is in use

(adam)

doc: Updated security/libgcrypt to 1.8.5

(nia)

libgcrypt: Update to 1.8.5

Noteworthy changes in version 1.8.5 (2019-08-29)  [C22/A2/R5]
------------------------------------------------

* Bug fixes:

  - Add mitigation against an ECDSA timing attack.
    [#4626,CVE-2019-13627]

  - Improve ECDSA unblinding.

* Other features:

  - Provide a pkg-config file for libgcrypt.

Release-info: https://dev.gnupg.org/T4683

(nia)

p5-Math-Calc-Units: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-Config-File: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-File-DesktopEntry: remove PLIST since PERL5_PACKLIST is in use

(adam)

p5-File-Binary: remove PLIST since PERL5_PACKLIST is used; added perl5 to CATEGORIES

(adam)

Updated security/py-keyring, mail/py-authres

(adam)

py-authres: updated to 1.2.0

1.2.0:
+ Added ability to include DMARC policy in DMARC results
* Updated references for new RFCs, ARC no longer experimental
* Converted http references to https

(adam)

py-keyring: updated to 19.1.0

19.1.0
* macOS Keyring now honors a ``KEYCHAIN_PATH``
  environment variable. If set, Keyring will use that
  keychain instead of the default.

19.0.2
* Refresh package skeleton.
* Adopt `black <https://pypi.org/project/black>`_ code style.

19.0.1
* Merge with 18.0.1.

18.0.1
* ExceptionInfo no longer retains a reference to the
  traceback.

(adam)

Updated net/py-amqp, net/py-kombu

(adam)

py-kombu: updated to 4.6.4

4.6.4
- Use importlib-metadata instead of pkg_resources for better performance
- Allow users to switch URLs while omitting the resource identifier
- Don't stop receiving tasks on 503 SQS error.
- Fix maybe declare
- Revert "Revert "Use SIMEMBERS instead of SMEMBERS to check for queue (Redis Broker)
- Fix MongoDB backend to work properly with TTL
- Make sure that max_retries=0 is treated differently than None
- Bump py-amqp to 2.5.1

(adam)

py-amqp: updated to 2.5.1

2.5.1
- Ignore all methods except Close and Close-OK when channel/connection is closing
- Fix faulty ssl sni intiation parameters
- Undeprecate auto_delete flag for exchanges.
- Improved tests and testing environments

(adam)

py-test-rerunfailures: added version 7.0

pytest-rerunfailures is a plugin for py.test that re-runs tests to eliminate
intermittent failures.

(adam)

Updated devel/py-test-testmon, security/py-cryptodome

(adam)

py-cryptodome: updated to 3.9.0

3.9.0:

New features
* Add support for loading PEM files encrypted with AES256-CBC.
* Add support for XChaCha20 and XChaCha20-Poly1305 ciphers.
* Add support for bcrypt key derivation function (`Crypto.Protocol.KDF.bcrypt`).
* Add support for left multiplication of an EC point by a scalar.
* Add support for importing ECC and RSA keys in the new OpenSSH format.

Resolved issues
* it was not possible to invert an EC point anymore.
* fix printing of DSA keys.
* `DSA.generate()` was not always using the `randfunc` input.
* the MD2 hash had block size of 64 bytes instead of 16; as result the HMAC construction gave incorrect results.

(adam)

qt5: depend on qt5-qtspeech

(adam)

qt5-qtspeech: add PLIST.Darwin; sort PLIST

(adam)

py-test-testmon: updated to 0.9.18

v0.9.18:
Support for pytest 5.x

(adam)

Updated multimedia/libogg, databases/slony1

(adam)

slony1: updated to 2.2.8

Slony 2.2.8:
* Fixes for PG 12
* Makefile changes (vpath support)
* Win32 fixes to compile + removal of default HAVE_PGPORT from win32.mak
* Documentation fixes

(adam)

libogg: updated to 1.3.4

Version 1.3.4:
* Faster slice-by-8 CRC32 implementation.
  see https://lwn.net/Articles/453931/ for motivation.
* Add CMake build.
* Deprecate Visual Studio project files in favor of CMake.
* configure --disable-crc option for fuzzing.
* Various build fixes.
* Documentation and example code fixes.

(adam)

mention jove

(christos)

move to the latest version.

(christos)

PR/54519: Greywolf: jove crashes on redraw or time update (include <time.h>)

(christos)

PR/54520: Greywolf: jove 'shell' fails with [Out of ptys!], use openpty(3).

(christos)

Updated archivers/py-zipp, misc/py-tqdm

(adam)

py-tqdm: updated to 4.35.0

tqdm v4.35.0:
* add {bar} format specifier
* add tests and documentation
* update performance tests

(adam)

py-zipp: updated to 0.6.0

v0.6.0

When adding implicit dirs, ensure that ancestral directories
are added and that duplicates are excluded.

The library now relies on more_itertools

(adam)

Updated www/py-furl, devel/py-ipython

(adam)

py-ipython: updated to 7.8.0

IPython 7.8.0 contain a few bugfix and 2 new APIs:
- Enable changing the font color for LaTeX rendering
- and Re-Expose some PDB API

(adam)

py-furl: updated to 2.0.0

Furl v2.0.0

Added: All URL components (scheme, host, path, etc) to furl()'s constructor as
keyword arguments. E.g. f = furl(scheme='http', host='host', path='/lolsup').

Changed: furl.truediv() and Path.truediv() now mirror Pathlib.truediv()'s
behavior and return a new instance. The original instance is no longer modified.
Old behavior: f = furl('1'); f / '2' -> str(f) == '1'. New behavior:
f = furl('1'); f /= '2' -> str(f) == '1/2'.

Fixed: Path.load() now accepts Path instances, e.g. f.path.load(Path('hi')).

Removed: Support for Python 2.6, which reached EOL on 2013-10-29.

(adam)

Added www/py-purl; Updated devel/py-requests-mock

(adam)

py-requests-mock: updated to 1.7.0

1.7.0
* Keep blank values query string values on request history
* Add release notes for requests version pin
* Keep blank values
* Pin requests version to <3
* Add known issue for cookies in Sessions
* logger added to adapter.py

(adam)

py-purl: added version 1.5

A simple, immutable URL class with a clean API for interrogation and
manipulation.

(adam)

Updated security/py-asn1, textproc/py-text-unidecode

(adam)

py-text-unidecode: updated to 1.3

1.3:
text-unidecode is now dual-licensed under Artistic License and GPL 1 / GPL 2+, to cause less problems for distributions. Choose license which fits better.
Declare Python 3.7 support, don't declare Python 3.3 support

(adam)

py-asn1: updated to 0.4.7

Revision 0.4.7:

- Added `isInconsistent` property to all constructed types. This property
  conceptually replaces `verifySizeSpec` method to serve a more general
  purpose e.g. ensuring all required fields are in a good shape. By default
  this check invokes subtype constraints verification and is run by codecs
  on value de/serialisation.
- Deprecate `subtypeSpec` attributes and keyword argument. It is now
  recommended to pass `ValueSizeConstraint`, as well as all other constraints,
  to `subtypeSpec`.
- Fixed a design bug in a way of how the items assigned to constructed
  types are verified. Now if `Asn1Type`-based object is assigned, its
  compatibility is verified based on having all tags and constraint
  objects as the type in field definition. When a bare Python value is
  assigned, then field type object is cloned and initialized with the
  bare value (constraints verificaton would run at this moment).
- Added `WithComponentsConstraint` along with related
  `ComponentPresentConstraint` and `ComponentAbsentConstraint` classes
  to be used with `Sequence`/`Set` types representing
  `SET ... WITH COMPONENTS ...` like ASN.1 constructs.

(adam)

mk/build: in build-env, output BUILD_DIRS relative to WRKSRC

(rillig)

mk/build: for build-env, show the BUILD_DIRS

(rillig)

doc: Updated textproc/bat to 0.12.0

(fox)

bat: Update to 0.12.0

Changes since 0.11.0:

Features

  * Binary file content can now be viewed with bat -A
  * bat can now be used as a man pager.
  * Add new style component to separate multiple --line-ranges
  * Added -L as an alias for --list-languages

Bugfixes

  * Output looks unbalanced when using '--style=grid,numbers' without 'header'
  * issues with filenames starting with "cache"
  * Can't build cache with new theme without creating cache dir
  * --terminal-width -10 is parsed incorrectly

Other

  * Added fish completions to DEB package

New syntaxes

  * Emacs Org mode
  * requirements.txt
  * DotENV .env
  * SSH config syntax (-l ssh_config)
  * /etc/hosts
  * GraphQL
  * Verilog
  * SCSS and Sass
  * strace syntax

Packaging

  * bat is now in the official Gentoo repositories
  * bat is now in the official Alpine Linux repositories
  * bat is in the official Fedora repositories

(fox)

mk: use a single form for headings in the documentation comments

(rillig)

mk/mysql.buildlink3.mk: add missing BUILD_DEFS

(rillig)

Explicitly disable EGL if MESALIB_SUPPORTS_EGL isn't yes.

Otherwise, the build fails.

(dholland)

Added multimedia/dvd-vr version 0.9.7

(ryoon)

Enable dvd-vr

(ryoon)

multimedia/dvd-vr: import dvd-vr-0.9.7

dvd-vr is a utility to identify and optionally copy recordings
from a DVD-VR format disc, which can be created by devices like
DVD recorders and camcorders.

(ryoon)

doc: note update of mail/roundcube* packages to 1.3.10

mail/roundcube
mail/roundcube-plugin-enigma
mail/roundcube-plugin-password
mail/roundcube-plugin-zipdownload

(taca)

mail/roundcube-plugin-zipdownload: update to 1.3.10

Update roundcube-plugin-password to 1.3.10.  No changes except version.

pkgsrc change: remove duplicated setting PLUGIN.

(taca)

mail/roundcube-plugin-password: update to 1.3.10

Update roundcube-plugin-password to 1.3.10.  No changes except version.

pkgsrc change: remove duplicated setting PLUGIN.

(taca)

mail/roundcube-plugin-enigma: update to 1.3.10

RELEASE 1.3.10
--------------
- Enigma: Fix bug where revoked users/keys were not greyed out in key info
- Enigma: Fix error message when trying to encrypt with a revoked key (#6607)
- Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638)

(taca)

mail/roundcube: update to 1.3.10

RELEASE 1.3.10
--------------
- Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723)
- Fix compatibility with kolab/net_ldap3 > 1.0.7 (#6785)
- Fix bug where bmp images couldn't be displayed on some systems (#6728)
- Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744)
- Fix bug where bold/strong text was converted to upper-case on html-to-text conversion (6758)
- Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could return only tld (#6746)
- Fix bug where Next/Prev button in mail view didn't work with multi-folder search result (#6793)
- Fix bug where selection of columns on messages list wasn't working
- Fix bug in converting multi-page Tiff images to Jpeg (#6824)
- Fix wrong messages order after returning to a multi-folder search result (#6836)
- Fix PHP 7.4 deprecation: implode() wrong parameter order (#6866)
- Fix bug where it was possible to bypass the position:fixed CSS check in received messages (#6898)
- Fix bug where some strict remote URIs in url() style were unintentionally blocked (#6899)
- Fix bug where it was possible to bypass the CSS jail in HTML messages using :root pseudo-class (#6897)
- Fix bug where it was possible to bypass href URI check with data:application/xhtml+xml URIs (#6896)

(taca)

doc: php has updated

- php71-7.1.32, php72-7.2.22, php73-7.3.9.

Actually, these were php-{7.1.32,7.2.22,7.3.9}.

(taca)

smalltalk: switch from removed glut to freeglut.

Bump PKGREVISION.

Untested.

(wiz)

doc: note update of php languages

lang/php72 7.2.22
lang/php73 7.3.9
lang/php71 7.1.32

(taca)

lang/php71: update to 7.1.32

29 Aug 2019, PHP 7.1.32

- mbstring:
  . Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) (stas)

(taca)

lag/php73: update to 7.3.9

29 Aug 2019, PHP 7.3.9

- Core:
  . Fixed bug #78363 (Buffer overflow in zendparse). (Nikita)
  . Fixed bug #78379 (Cast to object confuses GC, causes crash). (Dmitry)
  . Fixed bug #78412 (Generator incorrectly reports non-releasable $this as GC
    child). (Nikita)

- Curl:
  . Fixed bug #77946 (Bad cURL resources returned by curl_multi_info_read()).
    (Abyr Valg)

- Exif:
  . Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and
    invalid cast). (Nikita)

- FPM:
  . Fixed bug #77185 (Use-after-free in FPM master event handling).
    (Maksim Nikulin)

- Iconv:
  . Fixed bug #78342 (Bus error in configure test for iconv //IGNORE). (Rainer
    Jung)

- LiteSpeed:
  . Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown). (George Wang)

- MBString:
  . Fixed bug #78380 (Oniguruma 6.9.3 fixes CVEs). (CVE-2019-13224) (Stas)

- MySQLnd:
  . Fixed bug #78179 (MariaDB server version incorrectly detected). (cmb)
  . Fixed bug #78213 (Empty row pocket). (cmb)

- Opcache:
  . Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing is
    used). (Nikita)

- Standard:
  . Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL stream)
    with invalid length). (Nikita)
  . Fixed bug #78282 (atime and mtime mismatch). (cmb)
  . Fixed bug #78326 (improper memory deallocation on stream_get_contents()
    with fixed length buffer). (Albert Casademont)
  . Fixed bug #78346 (strip_tags no longer handling nested php tags). (cmb)

(taca)

lang/php72: update to 7.2.22

29 Aug 2019, PHP 7.2.22

- Core:
  . Fixed bug #78363 (Buffer overflow in zendparse). (Nikita)
  . Fixed bug #78379 (Cast to object confuses GC, causes crash). (Dmitry)

- Curl:
  . Fixed bug #77946 (Bad cURL resources returned by curl_multi_info_read()).
    (Abyr Valg)

- Exif:
  . Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and
    invalid cast). (Nikita)

- Iconv:
  . Fixed bug #78342 (Bus error in configure test for iconv //IGNORE). (Rainer
    Jung)

- LiteSpeed:
  . Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown). (George Wang)

- MySQLnd:
  . Fixed bug #78179 (MariaDB server version incorrectly detected). (cmb)

- Opcache:
  . Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing is
    used). (Nikita)

- Standard:
  . Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL stream)
    with invalid length). (Nikita)
  . Fixed bug #78282 (atime and mtime mismatch). (cmb)
  . Fixed bug #78326 (improper memory deallocation on stream_get_contents()
    with fixed length buffer). (Albert Casademont)

(taca)

doc: Updated x11/eterm to 0.9.6

(nia)

eterm: Update to 0.9.6

Don't install as setuid root.

(nia)

mono6: Give up and add cmake to USE_TOOLS.

While here, silcence some pkglint warnings.

(nia)

supertuxkart: fails with wayland installed, so disable it explicitly

(nia)

doc: remove xine-1.2.3 from TODO

(nia)

Fix dates

(ryoon)

doc: Remove mono-5.2 from TODO

(nia)

doc: Updated www/links-gui to 2.20

(leot)