FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=upstream%2F13.1.0 2022-04-10T23:52:50Z 2022-04-10T23:52:50Z Martin Matuska mm@FreeBSD.org 2022-04-08T08:09:32Z urn:sha1:b572edb09c4da2949b20a62e98cbf2e6df88e7e1 The commit 833a452e9 introduced a change that detached the zstd compression (not decompression) support from base build. Reported by: kevans Approved by: re (delphij) (cherry picked from commit 7f815d4f128f063c1bac361c8f26b52ab7df1e6c) (cherry picked from commit 3caf7dd45d08a5b7b7fafe39e7aae7d7f8d1a684) 2022-03-29T13:53:15Z Martin Matuska mm@FreeBSD.org 2022-03-26T10:04:36Z urn:sha1:c19caf8852f5deecb050ee35b042a1a9b659fc49 Bugfixes: IS #1672 and OSS-Fuzz #38766: (zip reader) fix possible out-of-bounds read in zipx_lzma_alone_init() PR #1676: (mtree reader) remove the unused variable "detected_bytes" PR #1674: (doc) fix use of At mdoc(7) macro in cpio.5 Approved by: re (gjb) (cherry picked from commit 0c9c2eb394b4a5694bc5ea11b326f334c735c813) (cherry picked from commit 60338b80693000ed0f9812b90ca54d35fd077cd0) 2022-02-23T07:56:34Z Martin Matuska mm@FreeBSD.org 2022-02-09T23:35:42Z urn:sha1:bfa5e5858f63a2c36f698b3076e65103367b51a3 Libarchive 3.6.0 New features: PR #1614: tar: new option "--no-read-sparse" PR #1503: RAR reader: filter support PR #1585: RAR5 reader: self-extracting archive support New features (not used in FreeBSD base): PR #1567: tar: threads support for zstd (#1567) PR #1518: ZIP reader: zstd decompression support Security Fixes: PR #1491, #1492, #1493, CVE-2021-36976: fix invalid memory access and out of bounds read in RAR5 reader PR #1566, #1618, CVE-2021-31566: extended fix for following symlinks when processing the fixup list Other notable bugfixes and improvements: PR #1620: tar: respect "--ignore-zeros" in c, r and u modes PR #1625: reduced size of application binaries Relnotes: yes (cherry picked from commit 833a452e9f082a7982a31c21f0da437dbbe0a39d) 2021-09-10T08:24:13Z Martin Matuska mm@FreeBSD.org 2021-08-23T00:54:15Z urn:sha1:aef1ff87fe88b95e24cce0bb20b4ea87d801b070 Libarchive 3.5.2 New features: PR #1502: Support for PWB and v7 binary cpio formats PR #1509: Support of deflate algorithm in symbolic link decompression for ZIP archives Important bugfixes: IS #1044: fix extraction of hardlinks to symlinks PR #1480: Fix truncation of size values during 7zip archive extraction on 32bit architectures PR #1504: fix rar header skiming PR #1514: ZIP excessive disk read - fix location of central directory PR #1520: fix double-free in CAB reader PR #1521: Fixed leak of rar before ending with error PR #1530: Handle short writes from archive_write_callback PR #1532: 7zip: Use compression settings from file also for file header IS #1566: do not follow symlinks when processing the fixup list Relnotes: yes (cherry picked from commit ddce862ad8594542e1fa1af9ffae7264e12ffd27) 2021-03-17T09:54:07Z Alex Richardson Alexander.Richardson@cl.cam.ac.uk 2021-01-25T14:03:17Z urn:sha1:5ccad26529e3e9c698e1b98962e79bbe8a185901 These tests are basic fuzz tests that permute input to trigger crashes rather than regression or unit tests. Additionally, some of them take a rather long time to run and should probably be run on a dedicated fuzzing job instead. Moreover, these simple tests use rand() instead of a real fuzzing tool that generates interesting inputs (e.g. LLVM libFuzzer) so are unlikely to find anything interesting when run in CI. This allows removing one BROKEN_TESTS case due to timeouts and speeds up running tests on emulated platforms such as QEMU. Reviewed By: lwhsu, mm Differential Revision: https://reviews.freebsd.org/D27153 (cherry picked from commit 3454fa118c41a588e2dad20614325297c989c60b) 2020-12-13T16:26:37Z Martin Matuska mm@FreeBSD.org 2020-12-13T16:26:37Z urn:sha1:87c1ec0a31cce6441c52f6101d99482e50aeffba Sync libarchive with vendor. Vendor changes: Issue #1461: Unbreak build without lzma Issue #1462: warc reader: Fix build with gcc11 Issue #1463: Fix code compatibility in test_archive_read_support.c Issue #1464: Use built-in strnlen on platforms where not available Issue #1465: warc reader: fix undefined behaviour in deconst() function MFC after: 3 days X-MFC-With: 368234 2020-12-01T15:53:12Z Martin Matuska mm@FreeBSD.org 2020-12-01T15:53:12Z urn:sha1:c3afd20f1335949db24ba8af348e8706be995059 Update libarchive to 3.5.0 Relevant vendor changes: Issue #1258: add archive_read_support_filter_by_code() PR #1347: mtree digest reader support Issue #1381: skip hardlinks pointing to itself on extraction PR #1387: fix writing of cpio archives with hardlinks without file type PR #1388: fix rdev field in cpio format for device nodes PR #1389: completed support for UTF-8 encoding conversion PR #1405: more formats in archive_read_support_format_by_code() PR #1408: fix uninitialized size in rar5_read_data PR #1409: system extended attribute support PR #1435: support for decompression of symbolic links in zipx archives Issue #1456: memory leak after unsuccessful archive_write_open_filename MFC after: 1 week 2020-09-18T17:17:46Z Kyle Evans kevans@FreeBSD.org 2020-09-18T17:17:46Z urn:sha1:fe815331bb40604ba31312acf7e4619674631777 The current default is provided in various Makefile.inc in some top-level directories and covers a good portion of the tree, but doesn't cover parts of the build a little deeper (e.g. libcasper). Provide a default in src.sys.mk and set WARNS to it in bsd.sys.mk if that variable is defined. This lets us relatively cleanly provide a default WARNS no matter where you're building in the src tree without breaking things outside of the tree. Crunchgen has been updated as a bootstrap tool to work on this change because it needs r365605 at a minimum to succeed. The cleanup necessary to successfully walk over this change on WITHOUT_CLEAN builds has been added. There is a supplemental project to this to list all of the warnings that are encountered when the environment has WARNS=6 NO_WERROR=yes: https://warns.kevans.dev -- this project will hopefully eventually go away in favor of CI doing a much better job than it. Reviewed by: emaste, brooks, ngie (all earlier version) Reviewed by: emaste, arichardson (depend-cleanup.sh change) Differential Revision: https://reviews.freebsd.org/D26455 2020-09-18T14:05:31Z Alex Richardson arichardson@FreeBSD.org 2020-09-18T14:05:31Z urn:sha1:c5ef56ea6114ce16110b9829f4f7f1de542b038f This is already pulled in by bsd.init.mk. Reported By: kevans 2020-09-18T11:22:34Z Alex Richardson arichardson@FreeBSD.org 2020-09-18T11:22:34Z urn:sha1:72f97a2d0934a0c72b9c485656f6d1456098b8ef I was investigating libarchive test failures on CheriBSD and it turns out we get a reproducible SIGBUS for test_archive_m5, etc. Debugging this shows that libarchive and the tests disagree when it comes to the definition of archive_md5_ctx: libarchive assumes it's the OpenSSL type whereas the test use the libmd type. The latter is not necessarily aligned enough to store a pointer (16 bytes for CHERI RISC-V), so we were crashing when storing EVP_MD_CTX* to an 8-byte-aligned archive_md5_ctx. To avoid problems like this in the future, factor out the common compiler flags into a Makefile.inc and include that from the tests Makefile. Reviewed By: lwhsu Differential Revision: https://reviews.freebsd.org/D26469