| Rev | Age | Author | Path | Log message | Diff | 
           
           
              | 50 | 2255d 07h | magnus | /trunk/debian/ | testsuite.patch: Don't create testsuite/Makefile with autoconf; add empty clean and distclean targets to it so that cleaning and building
 twice works.
 |  | 
           
              | 46 | 3303d 03h | magnus | /trunk/debian/patches/ | Actually, it's libtar/Makefile.in we need to patch, even if we don't package the libtar example program. |  | 
           
              | 45 | 3303d 04h | magnus | /trunk/debian/ | no_strip.patch: make install must not strip binaries; it breaks cross compilation and is against policy with regard to build options.
 |  | 
           
              | 39 | 3503d 06h | magnus | /trunk/debian/ | testsuite.patch: Add a simple test (Closes: #737258). |  | 
           
              | 38 | 4033d 04h | magnus | /trunk/debian/ | oldgnu_prefix.patch: Detect old-style GNU headers correctly (Closes: #763119). Those appear in incremental archives and use the bytes that
 the new-style headers use for the prefix field for other fields.
 Thanks to Steinar H. Gunderson.
 |  | 
           
              | 36 | 4195d 05h | magnus | /trunk/debian/ | no_maxpathlen.patch: Half of the part of the patch modifying compat/dirname.c was missing, causing libtar's dirname to always
 return NULL (except in special circumstances). Actually make it work
 (Closes: #745352). (The reason that libtar doesn't use libc's
 dirname() and basename() on some or most platforms is that the code
 doesn't work with destructive versions of these functions).
 |  | 
           
              | 33 | 4272d 01h | magnus | /trunk/debian/ | th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the result from oct_to_int() to unsigned int. This is the right fix for
 bug #725938 on 64-bit systems, where a specially crafted tar file
 would not cause an integer overflow, but a memory allocation of almost
 16 exbibytes, which would certainly fail outright without harm.
 |  | 
           
              | 32 | 4272d 02h | magnus | /trunk/debian/patches/ | Add stdlib.h for malloc() in lib/decode.c |  | 
           
              | 31 | 4272d 02h | magnus | /trunk/debian/ | [SECURITY] CVE-2013-4420.patch: When the prefix field is in use, the safer_name_suffix() function should certainly be applied to the
 combination of it and the name field, not just on the name field.
 |  | 
           
              | 30 | 4272d 02h | magnus | /trunk/debian/ | no_maxpathlen.patch: Fix two grave bugs in the patch. First, th_get_pathname would only allocate as much memory as was needed for
 the first filename encountered, causing heap corruption when/if
 encountering longer filenames later. Second, two variables were mixed
 up in tar_append_tree(). Also, fix a potential memory leak and trim
 the patch a bit.
 |  | 
           
              | 24 | 4272d 03h | magnus | /trunk/debian/ | [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any pathname prefix containing ".." components (Closes: #731860). This is
 done in th_get_pathname() (as well as to symlink targets when
 extracting symlinks), not merely when extracting files, which means
 applications calling that function will not see the stored
 filename. There is no way to disable this behaviour, but it can be
 expected that one will be provided when the issue is solved upstream.
 |  | 
           
              | 23 | 4274d 04h | magnus | /trunk/debian/ | * no_static_buffers.patch: avoid using a static buffer in th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch.
 * maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path
 names (Closes: #657116). Thanks to Svante Signell and Petter
 Reinholdtsen.
 |  | 
           
              | 16 | 4558d 08h | magnus | /trunk/debian/patches/ | Delete the patch series again. |  | 
           
              | 15 | 4558d 08h | magnus | /trunk/debian/ | New upstream release. |  | 
           
              | 8 | 5023d 03h | magnus | /trunk/debian/ | * New upstream: Chris Frey has stepped up with the consent of the original author, Mark Roth, and published an "official unofficial" git
 repo at http://repo.or.cz/w/libtar.git, which I will use for the time
 being.
 * All patches have been incorporated or (in the case of
 autoreconf.patch) made obsolete upstream.
 |  | 
           
              | 6 | 5023d 04h | magnus | /trunk/debian/ | [svn-inject] Applying Debian modifications (1.2.11-8) to trunk |  | 
           
              | 5 | 5023d 04h | magnus | /trunk/ | [svn-inject] Applying Debian modifications (1.2.11-7) to trunk |  |