![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / net / adns
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
net: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Not committed (merge conflicts...): net/radsecproxy/distinfo The following distfiles could not be fetched (fetched conditionally?): ./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz ./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch ./net/djbdns/distinfo djbdns-1.05-test28.diff.xz ./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch ./net/djbdns/distinfo djbdns-1.05-multiip.diff ./net/djbdns/distinfo djbdns-cachestats.patch
net: Remove SHA1 hashes for distfiles
adns: Update to 1.6.0
adns (1.6.0) UPSTREAM; urgency=medium
Bugfixes:
* adnshost: Support --reverse in -f mode input stream
* timeout robustness against clock skew: track query start time and
duration. Clock instability may now only cause spurious timeouts
rather than indefinite hangs or even assertion failures.
New features:
* adnshost: Offer ability to set adns checkc flags
* adnslogres: Honour --checkc-freq (if it comes first)
* adnsresfilter: Honour --checkc-freq and --checkc-entex
* time handling: Support use of CLOCK_MONOTONIC via an init flag.
* adns_str* etc.: Improve robustness; more allowable inputs values.
Build system improvements:
* clean targets: Delete $(TARGETS) too!
* Remove all m4 output files from the distributed source tree.
* Support DESTDIR=/some/absolute/path on `make install'.
* Provide autogen.sh.
* Rerun autoheader and autoconf (2.69).
Internal changes:
* adnshost: adh-opts.c: Whitespace adjustments to option table
Tests:
* New tests for fixes in 1.5.3.
* Fixes to test harness to avoid false positives during fuzzing.
* Other changes to support use with AFL.
* Many supporting improvements and refactorings.
* Fix skipped tests ($$ reference in Makefile)
-- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 11 Jun 2020 15:49:39 +0100
adns (1.5.2) UPSTREAM; urgency=medium
* Important security fixes:
CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9109:
Vulnerable applications: all adns callers.
Exploitable by: the local recursive resolver.
Likely worst case: Remote code execution.
CVE-2017-9106:
Vulnerable applications: those that make SOA queries.
Exploitable by: upstream DNS data sources.
Likely worst case: DoS (crash of the adns-using application)
CVE-2017-9107:
Vulnerable applications: those that use adns_qf_quoteok_query.
Exploitable by: sources of query domain names.
Likely worst case: DoS (crash of the adns-using application)
CVE-2017-9108:
Vulnerable applications: adnshost.
Exploitable by: code responsible for framing the input.
Likely worst case: DoS (adnshost crashes at EOF).
All found by AFL 2.35b. Thanks to the University of Cambridge
Department of Applied Mathematics for computing facilities.
Bugfixes:
* Do not include spurious external symbol `data' (fixes GCC10 build).
* If server sends TC flag over TCP, bail rather than retrying.
* Do not crash on certain strange resolv.conf contents.
* Fix various crashes if a global system failure occurs, or
adns_finish is called with outstanding queries.
* Correct a parsing error message very slightly.
* DNS packet parsing: Slight fix when packet is truncated.
* Fix ABI compatibility in string conversion of certain RR types.
* internal.h: Use `unsigned' for nextid; fixes theoretical C UB.
Portability fix:
* common.make.in: add -Wno-unused-value. Fixes build with GCC9.
Internal changes:
* Additional comments describing some internal code restrions.
* Robustness assert() against malfunctioning write() system call.
-- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 11 Jun 2020 15:48:12 +0100
Updated net/adns to 1.5.1
-------------------------
adns (1.5.1) UPSTREAM; urgency=medium
* Portability fix for systems where socklen_t is bigger than int.
* Fix for malicious optimisation of memcpy in test suite, which
causes failure with gcc-4.1.9 -O3. See Debian bug #772718.
* Fix TCP async connect handling. The bug is hidden on Linux and on most
systems where the nameserver is on localhost. If it is not hidden,
adns's TCP support is broken unless adns_if_noautosys is used.
* Fix addr queries (including subqueries, ie including deferencing MX
lookups etc.) not to crash when one of the address queries returns
tempfail. Also, do not return a spurious pointer to the application
when one of the address queries returns a permanent error (although,
the application almost certainly won't use this pointer because the
associated count is zero).
* adnsresfilter: Fix addrtextbuf buffer size. This is not actually a
problem in real compiled code but should be corrected.
* Properly include harness.h in adnstest.c in regress/. Suppresses
a couple of compiler warnings (implicit declaration of Texit, etc.)
-- Ian Jackson <ijackson@chiark.greenend.org.uk> Fri, 12 Aug 2016 22:53:59 +0100
Add SHA512 digests for distfiles for net category Problems found with existing digests: Package haproxy distfile haproxy-1.5.14.tar.gz 159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package bsddip: missing distfile bsddip-1.02.tar.Z Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2 Package djbdns: missing distfile djbdns-cachestats.patch Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch Package gated: missing distfile gated-3-5-11.tar.gz Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz Package poink: missing distfile poink-1.6.tar.gz Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch Package waste: missing distfile waste-source.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
(pkgsrc) - Add comments on patches from cvs log (upsteam) - update 1.4 to 1.5.0 ------------------- Changes in adns 1.5.0, since adns 1.4, are: New features: * This release provides full IPv6 support. Applications can request AAAA records (containing IPv6 addresses) as well as, or instead of, A records (containing IPv4 addresses). adns 1.5 can speak to nameservers over IPv6. * adns_addr2text and adns_text2addr: Convenient C functions for converting between addresses and address literals. These carry less baggage than getaddrinfo and getnameinfo. Bugfixes: * We fix a crashing bug in adnslogres. (Debian#392102.) * Previously, parsing of some adns_specific options in resolv.conf would go awry if multiple options were specified on the same line. (Fixed since 1.5.0~rc0.) * adns now knows to ignore more things in resolv.conf, rather than warn about them, and there's also an option to disable all of these warnings. (Debian#411263.) (Fixed since 1.5.0~rc0.) * Previously, some harmless but wrong owner names for checked ptr queries would be accepted; now they are rejected with `Domain invalid for particular DNS query type'. Other: * There are some minor API/ABI changes and improvements, for future proofing. * There are also some build system, test suite and coding style improvements. * Licence is now GPLv3. Compatibility: adns 1.5 is fully forwards API- and ABI-compatible with 1.4. adns 1.5 is not backwards ABI-compatible, in the sense that applications built against adns 1.5 but run with adns 1.4 may experience `Function not implemented' errors, or `symbol lookup error' due to undefined symbols. But applications built against 1.4 will not experience data corruption due to ABI mismatches. adns_r_addr queries (general `address' queries where the application does not specify the kind of address) used to only return AF_INET (IPv4) addresses. To avoid surprising existing applications, AF_INET6 (IPv6) addresses will be returned only if the application explicitly states its support for handling a mixture of address families in the results from adns_r_addr. In a future version of adns this will become the default. adnshost and the other command-line utilities are fully forward- and backward-compatible, except that in adns 1.5, adnshost will return IPv6 as well as IPv4 information if simply asked for `addresses'. Calling programs which did not ask for a specific address type ought to cope with this. The API in 1.5.0 also fixes a technical nonconformance to the C specification. On platforms where an `enum' type might be an integer type whose size is bits is not a power of two, there could be an incompatible ABI change between 1.4 and 1.5 - but we don't think there are many (if any) such platforms which are sufficiently POSIX-like for adns. (Changed since 1.5.0~rc0.)
Update adns to 1.4.
Inspired by PR#43126 from Wen Heping.
While here, set LICENSE and TEST_TARGET.
adns (1.4); urgency=low
Improvements for multithreaded programs:
* New documentation comment in adns.h explaining thread guarantees
(or lack of them), replaces `single-threaded' note at the top.
* Fix string conversion of adns_r_addr not to use a static buffer
(function csp_addr) so as to make thread promise true.
* Make an internal variable const-correct (expectdomain in pa_ptr).
-- Ian Jackson <ian@davenant.greenend.org.uk> Tue, 17 Oct 2006 17:05:08 +0100
adns (1.3); urgency=low
Portability fixes:
* Cast ptrdiff_t to int for %.*s length in adnsheloex and adnslogres,
as is required. (Report from Jim Meyering.)
* In configure.in, quote macro name argument to define() to
suppress spurious autoconf error. (Report from Mihai Ibanescu.)
* Use autoconf's values for {bin,lib,include}dir rather than inventing
our own from @exec_prefix@, making configure --libdir work.
(Patch from Mihai Ibanescu.)
* Remove spurious `_' from {bin,lib,include}dir Makefile variables.
(Report from Mihai Ibanescu.)
* Do away with `mismatch' variable in parse.c:adns__findrr_anychk so that
overzealous GCC cannot complain about members of eo_fls being
uninitialised. (Report from Jim Meyering.)
-- Ian Jackson <ian@davenant.greenend.org.uk> Tue, 6 Jun 2006 20:22:30 +0100
adns (1.2); urgency=medium
New features:
* Support for SRV RRs.
* Support for unknown RR types (according to RFC3597) via adns_r_unknown.
* Allow `;'-comments in resolv.conf (report from Colin Charles).
* New adnsheloex client courtesy of Tony Finch.
* New adns_init_logfn etc. for having logging use a callback function.
Bugfixes:
* Fix error in prototype in definition of adns__parse_domain.
* Add missing ENOTSOCK to hcommon.c.m4 (was already in hcommon.c!)
Portability fixes prompted by Bernd Eckenfels, the Debian maintainer:
* Correct type of various printf arguments: ptrdiff_t != int.
* Do not print size of leaked blocks of memory (this causes
a spurious regression test failure on some platforms).
* Provide adns_if_none and adns_qf_none (which will help with compilers
which complain about plain `0' being passed where an enum is wanted).
* adnstest converts some errno values to EFOOBAR: all of the ones
mentioned in adns.h, at least. This makes the regression test
more portable (fixes problem noticed by Bernd Eckenfels).
* Add -Wno-pointer-sign if GCC has that option.
Documentation improvements:
* Add documentation comment by definition of adns_r_ptr_raw type enum.
* Document in adns.h EINVAL from adns_init meaning bad configuration.
* Include several new references to related programs to README.html.
* Redacted the TODO list.
* New LICENCE.WAIVERS file for GPL-incompatility workarounds.
* Clarified GPL-vs-LGPL: a bit less hostile and a bit more mercenary.
* Copyright notices updated.
Packaging changes:
* Update MINOR to 2 and DISTVERSION and ADNS_VERSION_STRING to 1.2.
* Reran autoconf/autoheader (autoconf Debian 2.13-54).
* Create $(bin_dir) and $(lib_dir) on `make install', and also
make a libadns.so.1 -> libadns.so.1.<minor> link. (Suggestions
and patch from Nix of esperi.org.uk.)
* Add .PHONY: install to Makefile, to help people with demented fs's.
* Darwin listed in INSTALL.
Minor test harness improvements:
* Hgettimeofday calls Tensurerecordfile (was Tensureinput/outputfile).
* Add bind(2) and listen(2) wrappers (for epithet, but harmless in adns).
-- Ian Jackson <ian@davenant.greenend.org.uk> Sat, 8 Apr 2006 15:41:28 +0100
Fix libtool usage.
Correctly use libtool's --mode argument, don't depend on deprecated auto-sensing.
Make "install" a phony target, so that it works on a case-insensitive file system.
Do not define a variable in a header file included by multiple .c files. This makes the package build on Darwin. Patch from DarwinPorts. The modified header file is used internally, and never installed. So no visible changes to dependent packages.
Fix GCC 3.4+: mismatch between prototype and declaration
If poll(2) is missing, don't even contemplate using it. Fixes build on Interix.
Add RMD160 digests.
Regen.
Update adns to 1.1, provided by Min Sik Kim in PR pkg/24177.
Changes:
Major bugfixes:
* Do not spin if connect() fails immediately (!)
* Stop searching on a CNAME (even if it's broken).
* When search list runs out, _qf_owner sets owner to query domain.
* Fix bogus multiple updates to p in transmit.c (!)
Portability improvements:
* Fix up spurious #undef's in hredirect.h.
* Don't use <sys/select.h> any more, it was a mistake made in pre-1.0
(and there doesn't seem to be much explanation why).
* Understand and sort of check OpenBSD `lookup' resolv.conf directive.
* #include <stdlib.h> in internal.h (for abort etc).
* Always #include <sys/types.h> before <sys/socket.h> (for FreeBSD 4.6).
Cosmetic and documentation improvements:
* Added wishlist entry re configurable port no.
* Problem with SERVFAIL in TODO.
* README.html: mentioned Jarle Aase's Windows port, and other fixes.
* Some better source code formatting/wrapping.
Merge changes in packages from the buildlink2 branch that have buildlink2.mk files back into the main trunk.
Merge from pkgsrc-current to buildlink2 branch.
Include sys/types.h so that pid_t is a defined type for sys/select.h.
Strongly buildlinkify and libtoolize (NetBSD's interesting contributions to technical vocabulary).
Move to sha1 checksum, and/or add distfile sizes.
+ move the distfile digest/checksum value from files/md5 to distinfo + move the patch digest/checksum values from files/patch-sum to distinfo