CVS update: /ccvs/, /ccvs/doc/, /ccvs/maint-aux/, /ccvs/src/, /ccvs/vms/, /ccvs/windows-NT/
[email protected] 18 Apr 2005 19:32:35 -0000
| Newsgroups | gmane.comp.version-control.cvs.cvs |
|---|---|
| Message-ID | <[email protected]> |
User: dprice Date: 05/04/18 12:32:35 Modified: /ccvs/ ChangeLog, NEWS, configure, configure.in /ccvs/doc/ ChangeLog, Makefile.am, Makefile.in, stamp-1, stamp-vti, version-client.texi, version.texi /ccvs/maint-aux/ Makefile.am, Makefile.in /ccvs/src/ ChangeLog, login.c, patch.c, rcs.c /ccvs/vms/ config.h /ccvs/windows-NT/ config.h Log: Update and regenerate for CVS 1.12.12. File Changes: Directory: /ccvs/ ================= File [changed]: ChangeLog Url: https://ccvs.cvshome.org/source/browse/ccvs/ChangeLog?r1=1.1193&r2=1.1194 Delta lines: +4 -0 ------------------- --- ChangeLog 14 Apr 2005 15:45:00 -0000 1.1193 +++ ChangeLog 18 Apr 2005 19:32:30 -0000 1.1194 @@ -1,3 +1,7 @@ +2005-04-15 Derek Price <[email protected]> + + * NEWS: Note Klocwork fixes. + 2005-04-14 Derek Price <[email protected]> * NEWS: Note contrib Perl taint vulnerability fix. File [changed]: NEWS Url: https://ccvs.cvshome.org/source/browse/ccvs/NEWS?r1=1.310&r2=1.311 Delta lines: +9 -0 ------------------- --- NEWS 14 Apr 2005 15:45:00 -0000 1.310 +++ NEWS 18 Apr 2005 19:32:30 -0000 1.311 @@ -3,6 +3,15 @@ SERVER SECURITY FIXES +* Thanks to a report from Alen Zukich <[email protected]>, several minor + security issues have been addressed. One was a buffer overflow that is + potentially serious but which may not be exploitable, assigned CAN-2005-0753 + by the Common Vulnerabilities and Exposures Project + <http://www.cve.mitre.org>. Other fixes resulting from Alen's report include + repair of an arbitrary free with no known exploit and several plugged memory + leaks and potentially freed NULL pointers which may have been exploitable for + a denial of service attack. + * Thanks to a report from Craig Monson <[email protected]>, minor potential vulnerabilities in the contributed Perl scripts have been fixed. The confirmed vulnerability could allow the execution of arbitrary code on File [changed]: configure Url: https://ccvs.cvshome.org/source/browse/ccvs/configure?r1=1.380&r2=1.381 Delta lines: +10 -20 --------------------- --- configure 6 Apr 2005 16:16:53 -0000 1.380 +++ configure 18 Apr 2005 19:32:30 -0000 1.381 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.59 for Concurrent Versions System (CVS) 1.12.11.1. +# Generated by GNU Autoconf 2.59 for Concurrent Versions System (CVS) 1.12.12. # # Report bugs to <[email protected]>. # @@ -283,8 +283,8 @@ # Identity of this package. PACKAGE_NAME='Concurrent Versions System (CVS)' PACKAGE_TARNAME='cvs' -PACKAGE_VERSION='1.12.11.1' -PACKAGE_STRING='Concurrent Versions System (CVS) 1.12.11.1' +PACKAGE_VERSION='1.12.12' +PACKAGE_STRING='Concurrent Versions System (CVS) 1.12.12' PACKAGE_BUGREPORT='[email protected]' ac_unique_file="src/cvs.h" @@ -808,7 +808,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures Concurrent Versions System (CVS) 1.12.11.1 to adapt to many kinds of systems. +\`configure' configures Concurrent Versions System (CVS) 1.12.12 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -874,7 +874,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of Concurrent Versions System (CVS) 1.12.11.1:";; + short | recursive ) echo "Configuration of Concurrent Versions System (CVS) 1.12.12:";; esac cat <<\_ACEOF @@ -1116,7 +1116,7 @@ test -n "$ac_init_help" && exit 0 if $ac_init_version; then cat <<\_ACEOF -Concurrent Versions System (CVS) configure 1.12.11.1 +Concurrent Versions System (CVS) configure 1.12.12 generated by GNU Autoconf 2.59 Copyright (C) 2003 Free Software Foundation, Inc. @@ -1144,7 +1144,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by Concurrent Versions System (CVS) $as_me 1.12.11.1, which was +It was created by Concurrent Versions System (CVS) $as_me 1.12.12, which was generated by GNU Autoconf 2.59. Invocation command line was $ $0 $@ @@ -1806,7 +1806,7 @@ # Define the identity of the package. PACKAGE='cvs' - VERSION='1.12.11.1' + VERSION='1.12.12' # Some tools Automake needs. @@ -39447,7 +39447,7 @@ } >&5 cat >&5 <<_CSEOF -This file was extended by Concurrent Versions System (CVS) $as_me 1.12.11.1, which was +This file was extended by Concurrent Versions System (CVS) $as_me 1.12.12, which was generated by GNU Autoconf 2.59. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -39510,7 +39510,7 @@ cat >>$CONFIG_STATUS <<_ACEOF ac_cs_version="\\ -Concurrent Versions System (CVS) config.status 1.12.11.1 +Concurrent Versions System (CVS) config.status 1.12.12 configured by $0, generated by GNU Autoconf 2.59, with options \\"`echo "$ac_configure_args" | sed 's/[\\""\`\$]/\\\\&/g'`\\" @@ -40702,14 +40702,4 @@ # Report the state of this version of CVS if this is from dev. - cat <<EOF - -You are about to use an unreleased version of CVS. Be sure to -read the relevant mailing lists, most importantly <[email protected]>. - -Below you will find information on the status of this version of CVS. - - -EOF - sed -n '/^\* Status/,$p' $srcdir/BUGS File [changed]: configure.in Url: https://ccvs.cvshome.org/source/browse/ccvs/configure.in?r1=1.347&r2=1.348 Delta lines: +1 -1 ------------------- --- configure.in 6 Apr 2005 16:16:53 -0000 1.347 +++ configure.in 18 Apr 2005 19:32:31 -0000 1.348 @@ -15,7 +15,7 @@ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.]) -AC_INIT([Concurrent Versions System (CVS)],[1.12.11.1],[[email protected]],[cvs]) +AC_INIT([Concurrent Versions System (CVS)],[1.12.12],[[email protected]],[cvs]) AC_CONFIG_SRCDIR(src/cvs.h) AC_CONFIG_AUX_DIR(build-aux) AM_INIT_AUTOMAKE([gnu 1.9.2 dist-bzip2 no-define]) Directory: /ccvs/doc/ ===================== File [changed]: ChangeLog Url: https://ccvs.cvshome.org/source/browse/ccvs/doc/ChangeLog?r1=1.901&r2=1.902 Delta lines: +9 -0 ------------------- --- ChangeLog 15 Apr 2005 13:59:16 -0000 1.901 +++ ChangeLog 18 Apr 2005 19:32:31 -0000 1.902 @@ -1,3 +1,12 @@ +2005-04-18 Derek Price <[email protected]> + + * Makefile.am (EXTRA_DIST): Restore getdate-cvs.texi. + (DISTCLEAN): Remove same. + (getdate-cvs.texi): Move to... + ($(srcdir)/getdate-cvs.texi): ...here to avoid rebuild infos at + install. + (stamp-gdt): Generate $(srcdir)/getdate-cvs.texi. + 2005-04-15 Derek Price <[email protected]> * mkman.pl: Minor changes to accomodate Perl 5.8.4. Improve File [changed]: Makefile.am Url: https://ccvs.cvshome.org/source/browse/ccvs/doc/Makefile.am?r1=1.33&r2=1.34 Delta lines: +10 -6 -------------------- --- Makefile.am 14 Apr 2005 15:43:12 -0000 1.33 +++ Makefile.am 18 Apr 2005 19:32:31 -0000 1.34 @@ -93,8 +93,8 @@ -@rm -f cvs.tmp MAINTAINERCLEANFILES += $(srcdir)/cvs.1 -cvs.dvi cvs.html $(srcdir)/cvs.info cvs.pdf cvs.ps cvs.txt: getdate-cvs.texi -getdate-cvs.texi: stamp-gdt +cvs.dvi cvs.html $(srcdir)/cvs.info cvs.pdf cvs.ps cvs.txt: $(srcdir)/getdate-cvs.texi +$(srcdir)/getdate-cvs.texi: stamp-gdt stamp-gdt: getdate.texi @echo "@c This file is generated via a rule in Makefile.am from the" \ >getdate-cvs.tmp @@ -107,13 +107,17 @@ sed -e "s/^@chapter /@appendixsec /" \ -e "s/^@section /@appendixsubsec /" \ <$(srcdir)/getdate.texi >>getdate-cvs.tmp - @cmp -s getdate-cvs.tmp getdate-cvs.texi \ + @cmp -s getdate-cvs.tmp $(srcdir)/getdate-cvs.texi \ || (echo "Updating getdate-cvs.texi"; \ - cp getdate-cvs.tmp getdate-cvs.texi) + cp getdate-cvs.tmp $(srcdir)/getdate-cvs.texi) -@rm -f getdate-cvs.tmp - @cp getdate-cvs.texi $@ + @cp $(srcdir)/getdate-cvs.texi $@ + +## If getdate-cvs.texi is not distributed, infos get rebuilt at every install. +## This is a pretty big no-no. +EXTRA_DIST += getdate-cvs.texi MOSTLYCLEANFILES += getdate-cvs.tmp -DISTCLEANFILES += getdate-cvs.texi stamp-gdt +DISTCLEANFILES += stamp-gdt # texinfo based targets automake neglects to include SUFFIXES = .txt File [changed]: Makefile.in Url: https://ccvs.cvshome.org/source/browse/ccvs/doc/Makefile.in?r1=1.113&r2=1.114 Delta lines: +9 -20 -------------------- --- Makefile.in 14 Apr 2005 15:43:12 -0000 1.113 +++ Makefile.in 18 Apr 2005 19:32:31 -0000 1.114 @@ -296,22 +296,11 @@ cvs.txt \ cvsclient.txt -EXTRA_DIST = \ - $(PSS) \ - .cvsignore \ - ChangeLog.fsf \ - HACKING.DOCS \ - RCSFILES \ - cvs.1 \ - cvs-paper.ms \ - cvs.man.header \ - cvs.man.footer \ - getdate.texi \ - mdate-sh \ - writeproxy.rtf - +EXTRA_DIST = $(PSS) .cvsignore ChangeLog.fsf HACKING.DOCS RCSFILES \ + cvs.1 cvs-paper.ms cvs.man.header cvs.man.footer getdate.texi \ + mdate-sh writeproxy.rtf getdate-cvs.texi MOSTLYCLEANFILES = $(TXTS) getdate-cvs.tmp -DISTCLEANFILES = getdate-cvs.texi stamp-gdt +DISTCLEANFILES = stamp-gdt # These Automake generates MOSTLYCLEAN targets for PostScripts genersted from # TEXINFOS, but it shouldn't when those files are in EXTRA_DIST @@ -934,8 +923,8 @@ cp cvs.tmp $(srcdir)/$@ -@rm -f cvs.tmp -cvs.dvi cvs.html $(srcdir)/cvs.info cvs.pdf cvs.ps cvs.txt: getdate-cvs.texi -getdate-cvs.texi: stamp-gdt +cvs.dvi cvs.html $(srcdir)/cvs.info cvs.pdf cvs.ps cvs.txt: $(srcdir)/getdate-cvs.texi +$(srcdir)/getdate-cvs.texi: stamp-gdt stamp-gdt: getdate.texi @echo "@c This file is generated via a rule in Makefile.am from the" \ >getdate-cvs.tmp @@ -948,11 +937,11 @@ sed -e "s/^@chapter /@appendixsec /" \ -e "s/^@section /@appendixsubsec /" \ <$(srcdir)/getdate.texi >>getdate-cvs.tmp - @cmp -s getdate-cvs.tmp getdate-cvs.texi \ + @cmp -s getdate-cvs.tmp $(srcdir)/getdate-cvs.texi \ || (echo "Updating getdate-cvs.texi"; \ - cp getdate-cvs.tmp getdate-cvs.texi) + cp getdate-cvs.tmp $(srcdir)/getdate-cvs.texi) -@rm -f getdate-cvs.tmp - @cp getdate-cvs.texi $@ + @cp $(srcdir)/getdate-cvs.texi $@ .texinfo.txt: $(MAKEINFO) $(AM_MAKEINFOFLAGS) $(MAKEINFOFLAGS) -I $(srcdir) \ --no-headers -o $@ `test -f '$<' || echo '$(srcdir)/'`$< File [changed]: stamp-1 Url: https://ccvs.cvshome.org/source/browse/ccvs/doc/stamp-1?r1=1.63&r2=1.64 Delta lines: +2 -2 ------------------- --- stamp-1 15 Mar 2005 21:47:14 -0000 1.63 +++ stamp-1 18 Apr 2005 19:32:31 -0000 1.64 @@ -1,4 +1,4 @@ @set UPDATED 30 November 2004 @set UPDATED-MONTH November 2004 -@set EDITION 1.12.11.1 -@set VERSION 1.12.11.1 +@set EDITION 1.12.12 +@set VERSION 1.12.12 File [changed]: stamp-vti Url: https://ccvs.cvshome.org/source/browse/ccvs/doc/stamp-vti?r1=1.140&r2=1.141 Delta lines: +2 -2 ------------------- --- stamp-vti 14 Apr 2005 15:43:12 -0000 1.140 +++ stamp-vti 18 Apr 2005 19:32:31 -0000 1.141 @@ -1,4 +1,4 @@ @set UPDATED 14 April 2005 @set UPDATED-MONTH April 2005 -@set EDITION 1.12.11.1 -@set VERSION 1.12.11.1 +@set EDITION 1.12.12 +@set VERSION 1.12.12 File [changed]: version-client.texi Url: https://ccvs.cvshome.org/source/browse/ccvs/doc/version-client.texi?r1=1.63&r2=1.64 Delta lines: +2 -2 ------------------- --- version-client.texi 15 Mar 2005 21:47:14 -0000 1.63 +++ version-client.texi 18 Apr 2005 19:32:31 -0000 1.64 @@ -1,4 +1,4 @@ @set UPDATED 30 November 2004 @set UPDATED-MONTH November 2004 -@set EDITION 1.12.11.1 -@set VERSION 1.12.11.1 +@set EDITION 1.12.12 +@set VERSION 1.12.12 File [changed]: version.texi Url: https://ccvs.cvshome.org/source/browse/ccvs/doc/version.texi?r1=1.141&r2=1.142 Delta lines: +2 -2 ------------------- --- version.texi 14 Apr 2005 15:43:12 -0000 1.141 +++ version.texi 18 Apr 2005 19:32:31 -0000 1.142 @@ -1,4 +1,4 @@ @set UPDATED 14 April 2005 @set UPDATED-MONTH April 2005 -@set EDITION 1.12.11.1 -@set VERSION 1.12.11.1 +@set EDITION 1.12.12 +@set VERSION 1.12.12 Directory: /ccvs/maint-aux/ =========================== File [changed]: Makefile.am Url: https://ccvs.cvshome.org/source/browse/ccvs/maint-aux/Makefile.am?r1=1.1&r2=1.2 Delta lines: +1 -1 ------------------- --- Makefile.am 6 Apr 2005 16:16:53 -0000 1.1 +++ Makefile.am 18 Apr 2005 19:32:32 -0000 1.2 @@ -16,7 +16,7 @@ ## Subdirectories to run make in for the primary targets. EXTRA_DIST = \ - gnulib.txt \ + gnulib-filelist.txt \ gnulib-modules \ gnulib-update \ srclist.txt File [changed]: Makefile.in Url: https://ccvs.cvshome.org/source/browse/ccvs/maint-aux/Makefile.in?r1=1.1&r2=1.2 Delta lines: +1 -1 ------------------- --- Makefile.in 6 Apr 2005 16:16:53 -0000 1.1 +++ Makefile.in 18 Apr 2005 19:32:32 -0000 1.2 @@ -252,7 +252,7 @@ target_alias = @target_alias@ with_default_rsh = @with_default_rsh@ EXTRA_DIST = \ - gnulib.txt \ + gnulib-filelist.txt \ gnulib-modules \ gnulib-update \ srclist.txt Directory: /ccvs/src/ ===================== File [changed]: ChangeLog Url: https://ccvs.cvshome.org/source/browse/ccvs/src/ChangeLog?r1=1.3170&r2=1.3171 Delta lines: +10 -0 -------------------- --- ChangeLog 8 Apr 2005 18:17:01 -0000 1.3170 +++ ChangeLog 18 Apr 2005 19:32:32 -0000 1.3171 @@ -80,6 +80,16 @@ 2005-03-17 Derek Price <[email protected]> + * login.c (password_entry_parseline): Avoid using uninitialized + variable. + * rcs.c (RCS_deltas): Avoid buffer overflow. + (RCS_checkout): Avoid using uninitialized loglen. + * patch.c (patch_fileproc): Free original pointer, not one that may + have been incremented. + (Thanks to report from Alen Zukich <[email protected]>.) + +2005-03-17 Derek Price <[email protected]> + * commit.c (checkaddfile): Avoid dereferencing a NULL pointer in response to a rare error. * admin.c (admin_fileproc), log.c (log_expand_revlist), mkmodules.c File [changed]: login.c Url: https://ccvs.cvshome.org/source/browse/ccvs/src/login.c?r1=1.84&r2=1.85 Delta lines: +1 -1 ------------------- --- login.c 17 Mar 2005 17:15:19 -0000 1.84 +++ login.c 18 Apr 2005 19:32:32 -0000 1.85 @@ -119,7 +119,7 @@ if (isspace(*(linebuf + 1))) /* special case since strtoul ignores leading white space */ - entry_version = 0; + q = linebuf + 1; else entry_version = strtoul (linebuf + 1, &q, 10); File [changed]: patch.c Url: https://ccvs.cvshome.org/source/browse/ccvs/src/patch.c?r1=1.102&r2=1.103 Delta lines: +4 -3 ------------------- --- patch.c 22 Mar 2005 13:19:57 -0000 1.102 +++ patch.c 18 Apr 2005 19:32:32 -0000 1.103 @@ -377,6 +377,7 @@ struct utimbuf t; char *vers_tag, *vers_head; char *rcs = NULL; + char *rcs_orig = NULL; RCSNode *rcsfile; FILE *fp1, *fp2, *fp3; int ret = 0; @@ -407,7 +408,7 @@ if ((rcsfile->flags & VALID) && (rcsfile->flags & INATTIC)) isattic = 1; - rcs = Xasprintf ("%s%s", finfo->file, RCSEXT); + rcs_orig = rcs = Xasprintf ("%s%s", finfo->file, RCSEXT); /* if vers_head is NULL, may have been removed from the release */ if (isattic && rev2 == NULL && date2 == NULL) @@ -731,8 +732,8 @@ free (vers_tag); if (vers_head != NULL) free (vers_head); - if (rcs != NULL) - free (rcs); + if (rcs_orig) + free (rcs_orig); return ret; } File [changed]: rcs.c Url: https://ccvs.cvshome.org/source/browse/ccvs/src/rcs.c?r1=1.344&r2=1.345 Delta lines: +5 -4 ------------------- --- rcs.c 8 Apr 2005 18:17:01 -0000 1.344 +++ rcs.c 18 Apr 2005 19:32:32 -0000 1.345 @@ -2997,8 +2997,7 @@ if (retval != NULL) return retval; - if (!force_tag_match || - (vers != NULL && RCS_datecmp (vers->date, date) <= 0)) + if (vers && (!force_tag_match || RCS_datecmp (vers->date, date) <= 0)) return xstrdup (vers->version); else return NULL; @@ -4135,7 +4134,7 @@ size_t len; int free_value = 0; char *log = NULL; - size_t loglen; + size_t loglen = 0; Node *vp = NULL; #ifdef PRESERVE_PERMISSIONS_SUPPORT uid_t rcs_owner = (uid_t) -1; @@ -7454,7 +7453,7 @@ for (ln = 0; ln < headlines.nlines; ++ln) { - char buf[80]; + char *buf; /* Period which separates year from month in date. */ char *ym; /* Period which separates month from day in date. */ @@ -7465,10 +7464,12 @@ if (prvers == NULL) prvers = vers; + buf = xmalloc (strlen (prvers->version) + 24); sprintf (buf, "%-12s (%-8.8s ", prvers->version, prvers->author); cvs_output (buf, 0); + free (buf); /* Now output the date. */ ym = strchr (prvers->date, '.'); Directory: /ccvs/vms/ ===================== File [changed]: config.h Url: https://ccvs.cvshome.org/source/browse/ccvs/vms/config.h?r1=1.31&r2=1.32 Delta lines: +1 -1 ------------------- --- config.h 1 Mar 2005 14:38:19 -0000 1.31 +++ config.h 18 Apr 2005 19:32:33 -0000 1.32 @@ -9,7 +9,7 @@ June 1995 - <[email protected]> */ /* The following macro are defined by running ./configure under UNIX OSs. */ -#define PACKAGE_STRING "Concurrent Versions System (CVS) 1.12.11.1" +#define PACKAGE_STRING "Concurrent Versions System (CVS) 1.12.12" /* We only want to build the client */ #define CLIENT_SUPPORT 1 Directory: /ccvs/windows-NT/ ============================ File [changed]: config.h Url: https://ccvs.cvshome.org/source/browse/ccvs/windows-NT/config.h?r1=1.131&r2=1.132 Delta lines: +1 -1 ------------------- --- config.h 5 Apr 2005 20:43:31 -0000 1.131 +++ config.h 18 Apr 2005 19:32:33 -0000 1.132 @@ -803,7 +803,7 @@ #undef PACKAGE_NAME /* Define to the full name and version of this package. */ -#define PACKAGE_STRING "Concurrent Versions System (CVS) 1.12.11.1" +#define PACKAGE_STRING "Concurrent Versions System (CVS) 1.12.12" /* Define to the one symbol short name of this package. */ #undef PACKAGE_TARNAME