Pullup ticket #5679 - requested by wiz devel/global: security update Revisions pulled up: - devel/global/Makefile 1.69 - devel/global/PLIST 1.26 - devel/global/distinfo 1.33 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: wiz Date: Wed Jan 10 09:51:57 UTC 2018 Modified Files: pkgsrc/devel/global: Makefile PLIST distinfo Log Message: global: update to 6.6.1. Version 6.6.1 - December 16 2017 [FIXED BUG] o gozilla: A critical vulnerability (CVE-2017-17531) was found in a unknown function of gozilla(1). It allows remote attackers to execute arbitrary code via a crafted URL. All gozilla(1) before GLOBAL-6.6.1 have the vulnerability. Now it is fixed. - What is the unknown function? Gozilla accepts a URL as an argument, and invokes a web browser with the URL. Though it is undocumented, it is implied in the online manual as follows: > BUGS > Gozilla can accept not only source files but also text files, > directories, HTML files and even URLs, because it is omnivorous. Version 6.6 - December 12 2017 [CHANGES] New facilities: o gtags: Added support for glob patterns in langmap variable in gtags.conf(5). Now, you can treat source files without extension like ctags(1). (e.g. :langmap=Make\:.mak.mk([Mm]akefile):) Changed: o gozilla: Changed the default browser from 'mozilla' to 'firefox'. o gtags.conf.in: Updated to adapt to the latest ctags(s). Removed: common-ctags-maps Updated: exuberant-ctags, universal-ctags [INCOMPATIBLE CHANGES] o universal-ctags.la: The --extra option in Exuberant-ctags is renamed to --extras (plural) in Universal-ctags for making consistent with --kinds-<LANG> and --fields. [FIXED BUGS] o gtags: (parser error) picked up a typedef name as both of definition and reference. Now it works. Input: [a.h] typedef struct a A; $ global -x A A 1 a.h typedef struct a A; $ global -x A -r (global-6.5.7) A 1 a.h typedef struct a A; (global-6.6) no output o global: the -i option does not work correctly in some conditions. Now it works. o global: didn't accept pattern as a string literal with the --from-here option, even if the --literal option was specified. Now, global(1) accepts pattern as a string literal with the --literal option. o libdb: there was 4 Gbyte limitation on the system where `off_t' is 64 bits and `long' is 32 bits. Now it is eliminated. o libparser: php parser was not reset state for each source file. So, it was producing unintelligible results. Now it is fixed. o gozilla: with wrong argument caused segmentation violation. $ gozilla -d Segmentation fault: 11 Now it displays usage. To generate a diff of this commit: cvs rdiff -u -r1.68 -r1.69 pkgsrc/devel/global/Makefile cvs rdiff -u -r1.25 -r1.26 pkgsrc/devel/global/PLIST cvs rdiff -u -r1.32 -r1.33 pkgsrc/devel/global/distinfodiff -r1.68 -r1.68.2.1 pkgsrc/devel/global/Makefile
(spz)
@@ -1,30 +1,30 @@ | @@ -1,30 +1,30 @@ | |||
1 | # $NetBSD: Makefile,v 1.68 2017/11/30 16:45:20 adam Exp $ | 1 | # $NetBSD: Makefile,v 1.68.2.1 2018/01/19 20:20:44 spz Exp $ | |
2 | 2 | |||
3 | DISTNAME= global-6.5.7 | 3 | DISTNAME= global-6.6.1 | |
4 | PKGREVISION= 2 | |||
5 | CATEGORIES= devel | 4 | CATEGORIES= devel | |
6 | MASTER_SITES= ${MASTER_SITE_GNU:=global/} | 5 | MASTER_SITES= ${MASTER_SITE_GNU:=global/} | |
7 | 6 | |||
8 | MAINTAINER= uebayasi@NetBSD.org | 7 | MAINTAINER= uebayasi@NetBSD.org | |
9 | HOMEPAGE= http://www.gnu.org/software/global/ | 8 | HOMEPAGE= http://www.gnu.org/software/global/ | |
10 | COMMENT= Source code tag system including web browser output | 9 | COMMENT= Source code tag system including web browser output | |
11 | LICENSE= gnu-gpl-v3 | 10 | LICENSE= gnu-gpl-v3 | |
12 | 11 | |||
13 | GNU_CONFIGURE= YES | 12 | GNU_CONFIGURE= YES | |
14 | CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q} | 13 | CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q} | |
15 | CONFIGURE_ARGS+= --with-posix-sort=${SORT:Q} | 14 | CONFIGURE_ARGS+= --with-posix-sort=${SORT:Q} | |
16 | 15 | |||
17 | INFO_FILES= YES | 16 | INFO_FILES= YES | |
18 | USE_LANGUAGES= c99 | 17 | USE_LANGUAGES= c99 | |
19 | USE_LIBTOOL= YES | 18 | USE_LIBTOOL= YES | |
20 | USE_TOOLS+= perl:run sort:run | 19 | USE_TOOLS+= perl:run sort:run | |
21 | 20 | |||
22 | CONF_FILES= ${PREFIX}/share/gtags/gtags.conf ${PKG_SYSCONFDIR}/gtags.conf | 21 | CONF_FILES= ${PREFIX}/share/gtags/gtags.conf ${PKG_SYSCONFDIR}/gtags.conf | |
23 | 22 | |||
24 | REPLACE_PYTHON+= plugin-factory/pygments_parser.py | 23 | REPLACE_PYTHON+= plugin-factory/pygments_parser.py | |
24 | REPLACE_PERL+= plugin-factory/maps2conf.pl | |||
25 | 25 | |||
26 | .include "options.mk" | 26 | .include "options.mk" | |
27 | 27 | |||
28 | .include "../../lang/python/application.mk" | 28 | .include "../../lang/python/application.mk" | |
29 | .include "../../mk/curses.buildlink3.mk" | 29 | .include "../../mk/curses.buildlink3.mk" | |
30 | .include "../../mk/bsd.pkg.mk" | 30 | .include "../../mk/bsd.pkg.mk" |
@@ -1,14 +1,14 @@ | @@ -1,14 +1,14 @@ | |||
1 | @comment $NetBSD: PLIST,v 1.25 2016/12/30 00:39:30 wiz Exp $ | 1 | @comment $NetBSD: PLIST,v 1.25.10.1 2018/01/19 20:20:44 spz Exp $ | |
2 | bin/global | 2 | bin/global | |
3 | bin/globash | 3 | bin/globash | |
4 | bin/gozilla | 4 | bin/gozilla | |
5 | bin/gtags | 5 | bin/gtags | |
6 | bin/gtags-cscope | 6 | bin/gtags-cscope | |
7 | bin/htags | 7 | bin/htags | |
8 | bin/htags-server | 8 | bin/htags-server | |
9 | info/global.info | 9 | info/global.info | |
10 | lib/gtags/exuberant-ctags.la | 10 | lib/gtags/exuberant-ctags.la | |
11 | lib/gtags/pygments-parser.la | 11 | lib/gtags/pygments-parser.la | |
12 | lib/gtags/universal-ctags.la | 12 | lib/gtags/universal-ctags.la | |
13 | lib/gtags/user-custom.la | 13 | lib/gtags/user-custom.la | |
14 | man/man1/global.1 | 14 | man/man1/global.1 | |
@@ -83,16 +83,17 @@ share/gtags/jquery/images/treeview-red-l | @@ -83,16 +83,17 @@ share/gtags/jquery/images/treeview-red-l | |||
83 | share/gtags/jquery/images/treeview-red.png | 83 | share/gtags/jquery/images/treeview-red.png | |
84 | share/gtags/jquery/jquery.js | 84 | share/gtags/jquery/jquery.js | |
85 | share/gtags/jquery/jquery.suggest.css | 85 | share/gtags/jquery/jquery.suggest.css | |
86 | share/gtags/jquery/jquery.suggest.js | 86 | share/gtags/jquery/jquery.suggest.js | |
87 | share/gtags/jquery/jquery.treeview.css | 87 | share/gtags/jquery/jquery.treeview.css | |
88 | share/gtags/jquery/jquery.treeview.js | 88 | share/gtags/jquery/jquery.treeview.js | |
89 | share/gtags/jscode_suggest | 89 | share/gtags/jscode_suggest | |
90 | share/gtags/jscode_treeview | 90 | share/gtags/jscode_treeview | |
91 | share/gtags/script/elvis-global | 91 | share/gtags/script/elvis-global | |
92 | share/gtags/script/global-client | 92 | share/gtags/script/global-client | |
93 | share/gtags/script/gtags-client | 93 | share/gtags/script/gtags-client | |
94 | share/gtags/script/htags-client | 94 | share/gtags/script/htags-client | |
95 | share/gtags/script/less-global | 95 | share/gtags/script/less-global | |
96 | share/gtags/script/maps2conf.pl | |||
96 | share/gtags/script/pygments_parser.py | 97 | share/gtags/script/pygments_parser.py | |
97 | share/gtags/style.css | 98 | share/gtags/style.css | |
98 | share/gtags/vim74-gtags-cscope.patch | 99 | share/gtags/vim74-gtags-cscope.patch |
@@ -1,6 +1,6 @@ | @@ -1,6 +1,6 @@ | |||
1 | $NetBSD: distinfo,v 1.32 2017/05/29 11:20:53 wiz Exp $ | 1 | $NetBSD: distinfo,v 1.32.8.1 2018/01/19 20:20:44 spz Exp $ | |
2 | 2 | |||
3 | SHA1 (global-6.5.7.tar.gz) = db215a871483edda6855e1cdd3a37eb297658c02 | 3 | SHA1 (global-6.6.1.tar.gz) = d029c1a1a17713d301940b00a2b69dd75d45a232 | |
4 | RMD160 (global-6.5.7.tar.gz) = 2e03a959f8014103b009e889e8906c7b738c103a | 4 | RMD160 (global-6.6.1.tar.gz) = c5fda1872f46cc6ff702986b29253490728d5ad4 | |
5 | SHA512 (global-6.5.7.tar.gz) = 0d33f718839e5e00bdd6d042b415a69c5e1f232d843610870505f8f20635b445810149b1b84ea8b77881f5f64814783ebe3cdcab2f84b8a085223b64293a9045 | 5 | SHA512 (global-6.6.1.tar.gz) = 1382ab9bc1fa272559539942bda63e141b5fedac401d8c9cd0b691c9cdac6deba6c79f72cffc1759ff18ba42d95339d25fb5bf6f3625b60a932e1fd50b009d1d | |
6 | Size (global-6.5.7.tar.gz) = 2940567 bytes | 6 | Size (global-6.6.1.tar.gz) = 2961786 bytes |