Fri Mar 6 12:52:21 2020 UTC ()
libosip: Update to 5.1.1

libosip2 (5.1.1) - 2020-01-16
	* fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
	* fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
	* fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
	* fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
	* fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
	* fix to reject any non compliant answer with missing version digits.

libosip2 (5.1.0) - 2019-03-27
	* STRUCTURE change: struct osip_srv_record
	* STRUCTURE change: struct osip_naptr
	* constant renamed: CRLF, LF, CR, SP renamed to OSIP_CRLF, OSIP_LF, OSIP_CR, OSIP_SP

	* new API: int parser_add_comma_separated_header(const char *hname);

	* support larger binary attachment.
	* use strspn for better readability.
	* update osip_naptr & osip_srv_record structures to hold more NAPTR info and store ENUM result.
	* add AM_SILENT_RULES for autotools silent compilation.
	* fix a bug introduced in version 5: The current code is not counting correctly escaped " for multiple
	  headers on one line. This is fixed.
	* In order to prevent incorrect parsing of header that should not appear on one line, osip now contains
	  a list of known headers which are allowed to appear as "multiple header on one line separated with COMMA".
	  Other headers will be parsed as ONE header.
	* new API: parser_add_comma_separated_header API can be used to add other headers in the list, so they
	  will be parsed by osip as "multiple header on one line".
	* support for Visual Studio 2017: rename macro, better usage of WINAPI_FAMILY.
	* add some pre-defined SIP answer code (from www.iana.org/assignments/sip-parameters/)
	* fix windows compilation on mingw/msys if compiling without threads.
	* fix bug report: sr #109265: SIP message body length underflow in libosip2-4.1.0
	  https://savannah.gnu.org/support/?109265
	* other minor changes: warning, compilation...

libosip2 (5.0.0)
	* STRUCTURE change: additionnal parameter for "struct osip_srv_entry" used for failover in eXosip2.

	* fix overflow: sr #109133: Heap buffer overflow in utility function *osip_clrncpy*
	* fix overflow: sr #109132: Heap buffer overflow in *osip_body_to_str*
	* fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
	* simplify usage of timercmp/timerisset/timerclear
	* optimize list search: use iterator
	* improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
	* verify a URI scheme only contains allowed char
	* improve make check (test unit) to make it clear about the results expected.
	* fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
	* fix cseq check in order to stop retransmission of 200ok
	* update to reject negative value in port number
	* add support for ntlm authentication in parser
	* include application_data when cloning sip message
	* fix to allow correct parsing of quoted string in from/to/contact/...
	* add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
	* additionnal check for cseq number for matching incoming ack restransmission
	* patch to transmit ack for OSIP_ICT_ACK_SENT event
	* improve management of body length // fix a bug when initial value of body is \0.
	* increase timer E as soon as we receive 1xx for NICT.
	* update all reasons according to RFC.
	* add some reason code from rfc4412, rfc3261 and rfc6086.
	* parse addr spec with LAQUOT and RAQUOT in generic parameters.
	* avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
	* do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
	* allow faster connection with non blocking reliable sockets.
	* improve android time compensation.


(nia)
diff -r1.21 -r1.22 pkgsrc/devel/libosip/Makefile
diff -r1.16 -r1.17 pkgsrc/devel/libosip/distinfo
diff -r1.1 -r0 pkgsrc/devel/libosip/patches/patch-src_osipparser2_osip__body.c
diff -r1.1 -r0 pkgsrc/devel/libosip/patches/patch-src_osipparser2_osip__message__parse.c
diff -r1.1 -r0 pkgsrc/devel/libosip/patches/patch-src_osipparser2_osip__message__to__str.c
diff -r1.1 -r0 pkgsrc/devel/libosip/patches/patch-src_osipparser2_osip__port.c

cvs diff -r1.21 -r1.22 pkgsrc/devel/libosip/Makefile (expand / switch to unified diff)

--- pkgsrc/devel/libosip/Makefile 2020/01/18 23:30:32 1.21
+++ pkgsrc/devel/libosip/Makefile 2020/03/06 12:52:20 1.22
@@ -1,22 +1,19 @@ @@ -1,22 +1,19 @@
1# $NetBSD: Makefile,v 1.21 2020/01/18 23:30:32 rillig Exp $ 1# $NetBSD: Makefile,v 1.22 2020/03/06 12:52:20 nia Exp $
2# 
3 2
4DISTNAME= libosip2-4.1.0 3DISTNAME= libosip2-5.1.1
5PKGREVISION= 1 
6CATEGORIES= devel 4CATEGORIES= devel
7MASTER_SITES= ${MASTER_SITE_GNU:=osip/} 5MASTER_SITES= ${MASTER_SITE_GNU:=osip/}
8 6
9MAINTAINER= pkgsrc-users@NetBSD.org 7MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= https://www.gnu.org/software/osip/ 8HOMEPAGE= https://www.gnu.org/software/osip/
11COMMENT= Implementation of SIP 9COMMENT= Implementation of SIP
12LICENSE= gnu-lgpl-v2.1 10LICENSE= gnu-lgpl-v2.1
13 11
14USE_LIBTOOL= yes 12USE_LIBTOOL= yes
15GNU_CONFIGURE= yes 13GNU_CONFIGURE= yes
16 14
17PKGCONFIG_OVERRIDE+= libosip2.pc.in 15PKGCONFIG_OVERRIDE+= libosip2.pc.in
18 16
19.include "options.mk" 17.include "options.mk"
20 
21.include "../../mk/pthread.buildlink3.mk" 18.include "../../mk/pthread.buildlink3.mk"
22.include "../../mk/bsd.pkg.mk" 19.include "../../mk/bsd.pkg.mk"

cvs diff -r1.16 -r1.17 pkgsrc/devel/libosip/distinfo (expand / switch to unified diff)

--- pkgsrc/devel/libosip/distinfo 2019/04/21 16:25:38 1.16
+++ pkgsrc/devel/libosip/distinfo 2020/03/06 12:52:20 1.17
@@ -1,11 +1,7 @@ @@ -1,11 +1,7 @@
1$NetBSD: distinfo,v 1.16 2019/04/21 16:25:38 khorben Exp $ 1$NetBSD: distinfo,v 1.17 2020/03/06 12:52:20 nia Exp $
2 2
3SHA1 (libosip2-4.1.0.tar.gz) = 61459c9052ca2f5e77a6936c9b369e2b0602c080 3SHA1 (libosip2-5.1.1.tar.gz) = 21e04561d5ebf27c1870cdc72e8387912ea769d2
4RMD160 (libosip2-4.1.0.tar.gz) = 3f86bf7872cd382f331b49f5e03a6ddddd338afa 4RMD160 (libosip2-5.1.1.tar.gz) = 42e9230f883734f56e97c23d84ac6f6301f0fc96
5SHA512 (libosip2-4.1.0.tar.gz) = 8a04e047052aa6b970bb107aa8c0f94ed7c984defe69c3f2788f0b7677325812925a9386c1059499aa0940bb524ac1f724b5489f08e5b2210d190bad68271ee7 5SHA512 (libosip2-5.1.1.tar.gz) = 485a385b67ff422878bb45ae16936a5ef4cfbff3c7db618a3ff57b942bae6d269c108fa58d58caf5be1123155fb946595e10aba5cf261ec656168444fddf840a
6Size (libosip2-4.1.0.tar.gz) = 636382 bytes 6Size (libosip2-5.1.1.tar.gz) = 721763 bytes
7SHA1 (patch-src_osip2_port__sema.c) = 690cc6204025566f605cfc58a1652b95afc8e65f 7SHA1 (patch-src_osip2_port__sema.c) = 690cc6204025566f605cfc58a1652b95afc8e65f
8SHA1 (patch-src_osipparser2_osip__body.c) = fcbbb11e6a1b87f46faa1742d75a1951342b4095 
9SHA1 (patch-src_osipparser2_osip__message__parse.c) = 2f9fea6f6ebea18b1bccb685a731ddf2295728dd 
10SHA1 (patch-src_osipparser2_osip__message__to__str.c) = 12d559f25566c2143c9a679befb4b28bd03c3a63 
11SHA1 (patch-src_osipparser2_osip__port.c) = 3723661ad715531bebb4ba6af7dd2e056f205e93 

File Deleted: pkgsrc/devel/libosip/patches/Attic/patch-src_osipparser2_osip__body.c

File Deleted: pkgsrc/devel/libosip/patches/Attic/patch-src_osipparser2_osip__message__parse.c

File Deleted: pkgsrc/devel/libosip/patches/Attic/patch-src_osipparser2_osip__message__to__str.c

File Deleted: pkgsrc/devel/libosip/patches/Attic/patch-src_osipparser2_osip__port.c