kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/devel/apr/Makefile

37 lines
970 B
Makefile
Raw Normal View History

Add a patch to deal with CVE-2021-35940. An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue. https://svn.apache.org/viewvc?view=revision&revision=1891198 Bump PKGREVISION.
2021-11-28 13:57:05 +01:00
# $NetBSD: Makefile,v 1.83 2021/11/28 12:57:05 he Exp $
Warn about "PR" in changelogs.
2017-06-19 22:52:46 +02:00
#
# Take care, changelogs often include "PR 12345" strings
# which cause GNATS indigestion.
More closely follow doc/Makefile-example.
2004-11-23 01:02:49 +01:00
apr: update to 1.7.0. Changes for APR 1.7.0 *) apr_dir_read: [Unix] Dropped the preference of the dirread_r() flavor for dirread(), because the former is both deprecated and unneeded. [Yann Ylavic, William Rowe] *) apr_file_info: [Win32 only] Treat only "name surrogate" reparse points as symlinks, and not other reparse tag types. bug 47630 [Oleg Liatte <olegliatte gmail.com>] *) Test %ld vs. %lld to avoid compiler emits using APR_OFF_T_FMT, in the case of apparently equivilant long and long long types. [William Rowe] *) Recognize APPLE predefined macros as equivilant to DARWIN. [Jim Jagielski] *) Signals: Allow handling of SIGUSR2 in apr_signal_thread. [Yann Ylavic] *) Atomics: Support for 64bit ints. [Jim Jagielski] *) Add the apr_encode_* API that implements RFC4648 and RFC7515 compliant BASE64, BASE64URL, BASE32, BASE32HEX and BASE16 encode/decode functions. [Graham Leggett] *) rand: Use arc4random_buf() on BSD platforms and getrandom() on Linux, when available. [Christian Weisgerber <naddy openbsd.org, Yann Ylavic] *) Add apr_sockaddr_zone_set, apr_sockaddr_zone_set to set and retrieve the zone for link-local IPv6 addresses. [Joe Orton] *) apr_sockaddr_equal: Compare link-local IPv6 addresses with different zones as not equal. [Joe Orton] *) apr_sockaddr_ip_getbuf, apr_sockaddr_ip_get: Append "%zone" for IPv6 link-local addresses. [Joe Orton] *) Locks: add a --disable-timedlocks config option in case users encounter more platforms where it fails [Nick Kew]. *) apr_allocator, apr_pools: Add apr_allocator_page_size() and apr_allocator_min_order_set() to respectively get the (system's) page size in use and set the minimum allocation size for an allocator (expressed in 2^order pages). [Yann Ylavic] *) locks: provide portable implementations of timedlock()s for posix-sems, sysv-sems and pthreads for those platforms that lack native versions (eg: OSX/macOS). [Jim Jagielski] *) locks: Introduce apr_{thread,proc,global}_mutex_timedlock(). [Yann Ylavic]
2019-04-12 15:02:44 +02:00
DISTNAME= apr-1.7.0
Add a patch to deal with CVE-2021-35940. An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue. https://svn.apache.org/viewvc?view=revision&revision=1891198 Bump PKGREVISION.
2021-11-28 13:57:05 +01:00
PKGREVISION= 2
import apr-0.9.1.2.0.45 This package contains apr and apr-util from the latest Apache2 distribution (currently httpd-2.0.45). It is currently (er, currently in a few minutes) shared between the Apache2 and Subversion packages.
2003-05-25 10:55:18 +02:00
CATEGORIES= devel
devel/apr: Update to 1.2.8 (formerly in devel/apr1), no longer build from the httpd distfile. devel/rapidsvn: devel/subversion-base: parallel/ganglia-monitor-core: security/hydra: www/apache2: Use devel/apr0. www/apache22: Use devel/apr and devel/apr-util.
2007-01-24 20:46:45 +01:00
MASTER_SITES= ${MASTER_SITE_APACHE:=apr/}
Changes 1.4.2: * Undo a crash-bug introduced in 1.3.9 affecting some applications of the apr hash and table structures, reported to affect Subversion Changes 1.4.1: * Win32: Properly handle the ERROR_DIRECTORY system error code. Changes 1.4.0: * Add apr_global_mutex_lockfile() for retrieving the file, if any, associated with the mutex. Add apr_global_mutex_name() for retrieving the name of the lock mechanism used by the underlying proc mutex. * Add apr_socket_atreadeof to determine whether the receive part of the socket has been closed by the peer. * Make apr_pollset and apr_pollcb implementations using providers. Added apr_pollset_create_ex and apr_pollcb_create_ex that allows choosing non-default providers. * apr_temp_dir_get() now checks the TMPDIR environment variable first, instead of third. * Add apr_file_sync() and apr_file_datasync() calls. * apr_pollset_wakeup() on Windows: Fix core caused by closing the file_socket_pipe with standard file_close. * Introduce apr_hash_do() for iterating over a hash table. * Make sure WIN32 behaves the same as posix for file-backed shared memory by removing the file on cleanup/remove. * Introduce apr_pollset_wakeup() for interrupting the blocking apr_pollset_poll() call. * Add apr_file_link() function.
2010-11-01 18:20:03 +01:00
EXTRACT_SUFX= .tar.bz2
import apr-0.9.1.2.0.45 This package contains apr and apr-util from the latest Apache2 distribution (currently httpd-2.0.45). It is currently (er, currently in a few minutes) shared between the Apache2 and Subversion packages.
2003-05-25 10:55:18 +02:00
I don't have time to maintain packages that might be affected by security vulnerabilities.
2007-05-22 12:53:20 +02:00
MAINTAINER= pkgsrc-users@NetBSD.org
all: migrate several HOMEPAGEs to https pkglint --only "https instead of http" -r -F With manual adjustments afterwards since pkglint 19.4.4 fixed a few indentations in unrelated lines. This mainly affects projects hosted at SourceForce, as well as freedesktop.org, CTAN and GNU.
2020-01-19 00:30:13 +01:00
HOMEPAGE= https://apr.apache.org/
import apr-0.9.1.2.0.45 This package contains apr and apr-util from the latest Apache2 distribution (currently httpd-2.0.45). It is currently (er, currently in a few minutes) shared between the Apache2 and Subversion packages.
2003-05-25 10:55:18 +02:00
COMMENT= Apache Portable Runtime
Update "apr" package to version 1.3.3. Changes since version 1.3.5: - Dropped kqueue and apr_poll detection from Mac OS/X 10.5/Darwin 9 due to various reported problems. - apr_strerror() on OS/2: Fix problem with calculating buffer size. Bug 45689. - Prefer glibtool1/glibtoolize1. - Fix buildconf with libtool 2.2. - Fix a bug with the APR_DELONCLOSE flag. Child processes were (also) unlinking the file. - Fix compilation error on systems that do not have IPV6. Bug 46601 - apr_socket_sendfile() on Solaris: Fix handling of files truncated after the sender determines the length. (This fixes a busy loop in httpd when a file being served is truncated.) - Fix documentation for apr_temp_dir_get(). Bug 46303 - Add AC_MSG_RESULT after AC_MSG_CHECKING. Bug 46427 - Reset errno to zero in apr_strtoi64 to prevent returning an errno not equal zero in cases where the operation worked fine. - Win32: Do not error out on apr_pollset_poll() when there are no sockets. - Fix apr_tokenize_to_argv parsing. Bug 46128
2009-06-08 16:23:10 +02:00
LICENSE= apache-2.0
import apr-0.9.1.2.0.45 This package contains apr and apr-util from the latest Apache2 distribution (currently httpd-2.0.45). It is currently (er, currently in a few minutes) shared between the Apache2 and Subversion packages.
2003-05-25 10:55:18 +02:00
Changes 2.0.54: *) mod_cache: Add CacheIgnoreHeaders directive. *) mod_ldap: Added the directive LDAPConnectionTimeout to configure the ldap socket connection timeout value. *) Correctly export all mod_dav public functions. *) Add a build script to create a solaris package. *) worker MPM: Fix a problem which could cause httpd processes to remain active after shutdown. *) Unix MPMs: Shut down the server more quickly when child processes are slow to exit. *) Remove formatting characters from ap_log_error() calls. These were escaped as fallout from CAN-2003-0020. *) mod_ssl: If SSLUsername is used, set r->user earlier. *) htdigest: Fix permissions of created files. *) core_input_filter: Move buckets to a persistent brigade instead of creating a new brigade. This stop a memory leak when proxying a Streaming Media Server. *) mod_win32: Ignore both PATH_INFO as well as PATH_TRANSLATED to avoid hiccups from additional path information passed in non-utf-8 format.
2005-04-25 11:13:02 +02:00
USE_LIBTOOL= yes
Changes 1.4.2: * Undo a crash-bug introduced in 1.3.9 affecting some applications of the apr hash and table structures, reported to affect Subversion Changes 1.4.1: * Win32: Properly handle the ERROR_DIRECTORY system error code. Changes 1.4.0: * Add apr_global_mutex_lockfile() for retrieving the file, if any, associated with the mutex. Add apr_global_mutex_name() for retrieving the name of the lock mechanism used by the underlying proc mutex. * Add apr_socket_atreadeof to determine whether the receive part of the socket has been closed by the peer. * Make apr_pollset and apr_pollcb implementations using providers. Added apr_pollset_create_ex and apr_pollcb_create_ex that allows choosing non-default providers. * apr_temp_dir_get() now checks the TMPDIR environment variable first, instead of third. * Add apr_file_sync() and apr_file_datasync() calls. * apr_pollset_wakeup() on Windows: Fix core caused by closing the file_socket_pipe with standard file_close. * Introduce apr_hash_do() for iterating over a hash table. * Make sure WIN32 behaves the same as posix for file-backed shared memory by removing the file on cleanup/remove. * Introduce apr_pollset_wakeup() for interrupting the blocking apr_pollset_poll() call. * Add apr_file_link() function.
2010-11-01 18:20:03 +01:00
USE_TOOLS+= pkg-config
devel/apr: Update to 1.2.8 (formerly in devel/apr1), no longer build from the httpd distfile. devel/rapidsvn: devel/subversion-base: parallel/ganglia-monitor-core: security/hydra: www/apache2: Use devel/apr0. www/apache22: Use devel/apr and devel/apr-util.
2007-01-24 20:46:45 +01:00
PKGCONFIG_OVERRIDE+= apr.pc.in
Changes 1.4.2: * Undo a crash-bug introduced in 1.3.9 affecting some applications of the apr hash and table structures, reported to affect Subversion Changes 1.4.1: * Win32: Properly handle the ERROR_DIRECTORY system error code. Changes 1.4.0: * Add apr_global_mutex_lockfile() for retrieving the file, if any, associated with the mutex. Add apr_global_mutex_name() for retrieving the name of the lock mechanism used by the underlying proc mutex. * Add apr_socket_atreadeof to determine whether the receive part of the socket has been closed by the peer. * Make apr_pollset and apr_pollcb implementations using providers. Added apr_pollset_create_ex and apr_pollcb_create_ex that allows choosing non-default providers. * apr_temp_dir_get() now checks the TMPDIR environment variable first, instead of third. * Add apr_file_sync() and apr_file_datasync() calls. * apr_pollset_wakeup() on Windows: Fix core caused by closing the file_socket_pipe with standard file_close. * Introduce apr_hash_do() for iterating over a hash table. * Make sure WIN32 behaves the same as posix for file-backed shared memory by removing the file on cleanup/remove. * Introduce apr_pollset_wakeup() for interrupting the blocking apr_pollset_poll() call. * Add apr_file_link() function.
2010-11-01 18:20:03 +01:00
GNU_CONFIGURE= yes
CONFIGURE_ARGS+= --with-devrandom=/dev/urandom
CONFIGURE_ARGS+= --with-installbuilddir=${PREFIX}/libexec/apr
devel/apr: Update to 1.2.8 (formerly in devel/apr1), no longer build from the httpd distfile. devel/rapidsvn: devel/subversion-base: parallel/ganglia-monitor-core: security/hydra: www/apache2: Use devel/apr0. www/apache22: Use devel/apr and devel/apr-util.
2007-01-24 20:46:45 +01:00
CONFIGURE_ENV+= LIBS=${LIBS:M*:Q}
LIBS.SunOS+= -lnsl
More closely follow doc/Makefile-example.
2004-11-23 01:02:49 +01:00
Added appropriate TEST_TARGET.
2006-04-14 20:14:34 +02:00
TEST_TARGET= check
import apr-0.9.1.2.0.45 This package contains apr and apr-util from the latest Apache2 distribution (currently httpd-2.0.45). It is currently (er, currently in a few minutes) shared between the Apache2 and Subversion packages.
2003-05-25 10:55:18 +02:00
post-install:
Flag a number of packages I use as supporting (user-)destdir. apg is a bit special as it has some hardcoded ownership, so mark that as "destdir".
2006-10-09 14:52:34 +02:00
${RM} ${DESTDIR}${PREFIX}/libexec/apr/libtool
Changes 1.4.2: * Undo a crash-bug introduced in 1.3.9 affecting some applications of the apr hash and table structures, reported to affect Subversion Changes 1.4.1: * Win32: Properly handle the ERROR_DIRECTORY system error code. Changes 1.4.0: * Add apr_global_mutex_lockfile() for retrieving the file, if any, associated with the mutex. Add apr_global_mutex_name() for retrieving the name of the lock mechanism used by the underlying proc mutex. * Add apr_socket_atreadeof to determine whether the receive part of the socket has been closed by the peer. * Make apr_pollset and apr_pollcb implementations using providers. Added apr_pollset_create_ex and apr_pollcb_create_ex that allows choosing non-default providers. * apr_temp_dir_get() now checks the TMPDIR environment variable first, instead of third. * Add apr_file_sync() and apr_file_datasync() calls. * apr_pollset_wakeup() on Windows: Fix core caused by closing the file_socket_pipe with standard file_close. * Introduce apr_hash_do() for iterating over a hash table. * Make sure WIN32 behaves the same as posix for file-backed shared memory by removing the file on cleanup/remove. * Introduce apr_pollset_wakeup() for interrupting the blocking apr_pollset_poll() call. * Add apr_file_link() function.
2010-11-01 18:20:03 +01:00
${INSTALL_SCRIPT} ${PKG_LIBTOOL} ${DESTDIR}${PREFIX}/libexec/apr/libtool
Include "libiconv" buildlink3 glue code to make sure that the apr_xlate_*() functions support non-ASCII characters properly. This should allow the "ap2-subversion" package to deal with filenames including non-ASCII characters and therefore fix PR pkg/26056.
2006-10-05 19:05:59 +02:00
devel/libuuid is only needed for uuid support on Linux and SunOS. Bump PKGREVISION
2011-12-02 08:13:28 +01:00
.include "../../mk/bsd.prefs.mk"
.if ${OPSYS} == "Linux" || ${OPSYS} == "SunOS"
Add libuuid dependency. Bump PKGREVISION. Tested on x86_64 Linux with USE_BUILTIN.libuuid=(yes|no).
2011-11-30 20:28:56 +01:00
.include "../../devel/libuuid/buildlink3.mk"
devel/libuuid is only needed for uuid support on Linux and SunOS. Bump PKGREVISION
2011-12-02 08:13:28 +01:00
.endif
import apr-0.9.1.2.0.45 This package contains apr and apr-util from the latest Apache2 distribution (currently httpd-2.0.45). It is currently (er, currently in a few minutes) shared between the Apache2 and Subversion packages.
2003-05-25 10:55:18 +02:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink