Commit graph

11400 commits

Author SHA1 Message Date
rillig
162dbe4f7b lang/gcc9: split PLIST into platform-specific files
The PLISTs differ a lot between the platforms. For gathering the initial
data it is easier to just list the files per platform than trying to get
all the conditions right in the first place.

There will be conditions for operating systems, for platforms, for
features, for version-specific include files to be fixed, for installed
programming languages, for nls, and several more.
2020-01-10 00:28:03 +00:00
ryoon
6901c5e63d mono6: Update to 6.6.0.161
Changelog:
WebAssembly
CoreFX integration
.NET 4.8 reference assemblies
2020-01-09 15:26:36 +00:00
pho
267acd1423 Import GHC 8.8.1
GHC: The Glasgow Haskell Compiler.

The Glasgow Haskell Compiler is a robust, fully-featured, optimising
compiler for the functional programming language Haskell 98
(http://www.haskell.org). GHC compiles Haskell to either native code
or C. It implements numerous experimental language extensions to
Haskell, including concurrency, a foreign language interface, several
type-system extensions, exceptions, and so on. GHC comes with a
generational garbage collector, a space and time profiler, and a
comprehensive set of libraries.

This package provides the 8.8.x release series.
2020-01-09 12:32:24 +00:00
adam
a308b104e2 nodejs: updated to 13.6.0
Version 13.6.0 (Current):

Notable Changes
* assert:
  - Implement assert.match() and assert.doesNotMatch()
* events:
  - Add EventEmitter.on to async iterate over events
  - Allow monitoring error events
* fs:
  - Allow overriding fs for streams
* perf_hooks:
  - Move perf_hooks out of experimental
* repl:
  - Implement ZSH-like reverse-i-search
* tls:
  - Add PSK (pre-shared key) support
2020-01-08 22:30:38 +00:00
adam
d9c9f1e29d nodejs12: updated to 12.14.1
Version 12.14.1 'Erbium' (LTS):
Notable changes
* crypto: fix key requirements in asymmetric cipher
* deps:
  - update llhttp to 2.0.1
  - update nghttp2 to 1.40.0
* v8: mark serdes API as stable
2020-01-08 22:29:02 +00:00
minskim
573184de53 lang/gcc9: Remove redundant '/' in PLIST 2020-01-08 17:02:53 +00:00
minskim
842ad8279e lang/gcc9: fix build on NetBSD-9.0_RC1-amd64
gcc9 needs to install the fixed malloc.h in that configuration.
On NetBSD-8.0-amd64 this was not necessary though.
2020-01-08 17:00:06 +00:00
adam
7880bcf71a py-uncompyle6: updated to 3.6.2
3.6.2:

Yet again the focus has been on just fixing bugs, mostly geared in the
later 3.x range. To get some sense what sill needs fixing, consult
test/stdlib/runtests.sh. And that only has a portion of what's known.

make_function.py has gotten so complex that it was split out into 3 parts
to handle different version ranges: Python <3, Python 3.0..3.6 and Python 3.7+.

An important fix is that we had been dropping docstrings in Python 3 code as a result
of a incomplete merge from the decompile3 base with respect to the transform phase.

Also important (at least to me) is that we can now handle 3.6+
variable type annotations. Some of the decompile3 code uses that in
its source code, and I now use variable annotations in conjunction
with mypy in some of my other Python projects

Code generation for imports, especially where the import is dotted
changed a bit in 3.7; with this release are just now tracking that
change better. For this I've added pseudo instruction
IMPORT_NAME_ATTR, derived from the IMPORT_NAME instruction, to
indicate when an import contains a dotted import. Similarly, code for
3.7 import .. as is basically the same as from .. import, the
only difference is the target of the name changes to an "alias" in the
former. As a result, the disambiguation is now done on the semantic
action side, rathero than in parsing grammar rules.

Some small specific fixes:

3.7+ some chained compare parsing has been fixed. Other remain.
better if/else rule checking in the 3.4 and below range.
3.4+ keyword-only parameter handling was fixed more generally
3.3 .. 3.5 keyword-only parameter args in lambda was fixed
2020-01-08 15:19:14 +00:00
joerg
d09da23a9e Always extract the full Python distfile for modules.
This retires an old "optimisation" that over time has created more
problems than it solved, including various questions from users about
the ignored patch failures.
2020-01-08 13:44:41 +00:00
pho
e0ed8f79f4 Add ghc84 2020-01-07 16:53:58 +00:00
pho
bc5fe965ff Import ghc-8.4.4
GHC: The Glasgow Haskell Compiler.

The Glasgow Haskell Compiler is a robust, fully-featured, optimising
compiler for the functional programming language Haskell 98
(http://www.haskell.org). GHC compiles Haskell to either native code
or C. It implements numerous experimental language extensions to
Haskell, including concurrency, a foreign language interface, several
type-system extensions, exceptions, and so on. GHC comes with a
generational garbage collector, a space and time profiler, and a
comprehensive set of libraries.

This package provides the 8.4.x release series, which is the last
version that can bootstrap with 8.0.2. It will probably be removed
once we make a separate package for GHC 8.8.x and get enough bootstrap
kits for it.
2020-01-07 16:52:08 +00:00
tnn
832b24ce43 nodejs: work around type issue in NetBSD's copy of libc++ headers 2020-01-06 23:06:44 +00:00
leot
38c42992ae python38: Use gnu99 instead of c99 to avoid "alloca() undefined" problems
Add a missed hunk from python3[67] to patch-configure.

This fixes the build on NetBSD/evbarm (aarch64) and probably other ports.

PKGREVISION++
2020-01-06 22:54:51 +00:00
rillig
34df5ec0fc lang/gcc9: fix build on NetBSD-9.0_RC1-amd64
gcc9 needs to install the fixed malloc.h in that configuration.
On NetBSD-8.0-amd64 this was not necessary though.
2020-01-06 15:43:51 +00:00
adam
f734d4c8f7 rust: fix building on Darwin 2020-01-05 21:37:43 +00:00
rillig
8f55be5473 lang: add gcc9 2020-01-05 21:19:40 +00:00
rillig
48171fba34 lang/gcc9: add gcc-9.2.0
The GNU Compiler Collection includes front ends for C, C++, Objective-C,
Fortran, Ada, Go, and D, as well as libraries for these languages
(libstdc++,...).

This is the 2019 version, initially released in April 2019.

pkgsrc-specific changes to lang/gcc8:

The PLIST file is fixed, to guarantee that all expected files are
installed properly. In lang/gcc8 it had been autogenerated.

Only those patches have been kept that were strictly necessary to build
GCC on NetBSD-amd64. The others may be added from lang/gcc8 as necessary.

Tested by bootstrapping pkgsrc using CC=$PREFIX/gcc9/bin/gcc.
2020-01-05 21:15:45 +00:00
rillig
467faf663a lang/gcc8-libs: fix PKGREVISION according to the comment 2020-01-05 13:44:03 +00:00
rillig
e10c9c02b4 lang/gcc8: fix DESCR
gcc-8.3 is not a development version.
2020-01-05 13:38:49 +00:00
rhialto
c3cc6e064f lang/openjdk11: add patch for harfbuzz with gcc-7.
See added patch file for the longer explanation; reported upstream via
https://github.com/harfbuzz/harfbuzz/issues/2084 .
2020-01-05 13:01:55 +00:00
bsiegert
8827725323 We say goodbye to lang/go111.
Replacement: the two supported versions, go112 and go113.
2020-01-04 12:58:19 +00:00
jperkin
8f80109c90 rust: Update to 1.40.0.
Version 1.40.0 (2019-12-19)
===========================

Language
--------
- [You can now use tuple `struct`s and tuple `enum` variant's constructors in
  `const` contexts.][65188] e.g.

  ```rust
  pub struct Point(i32, i32);

  const ORIGIN: Point = {
      let constructor = Point;

      constructor(0, 0)
  };
  ```

- [You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
  indicate that there may be variants or fields added in the future.][64639]
  For example this requires adding a wild-card branch (`_ => {}`) to any match
  statements on a non-exhaustive `enum`. [(RFC 2008)]
- [You can now use function-like procedural macros in `extern` blocks and in
  type positions.][63931] e.g. `type Generated = macro!();`
- [Function-like and attribute procedural macros can now emit
  `macro_rules!` items, so you can now have your macros generate macros.][64035]
- [The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
  attribute syntax.][63674] For example `(#[$m:meta])` now matches `#[attr]`,
  `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.

Compiler
--------
- [Added tier 3 support\* for the
  `thumbv7neon-unknown-linux-musleabihf` target.][66103]
- [Added tier 3 support for the
  `aarch64-unknown-none-softfloat` target.][64589]
- [Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
  `mips64el-unknown-linux-muslabi64` targets.][65843]

\* Refer to Rust's [platform support page][forge-platform-support] for more
  information on Rust's tiered platform support.

Libraries
---------
- [The `is_power_of_two` method on unsigned numeric types is now a `const` function.][65092]

Stabilized APIs
---------------
- [`BTreeMap::get_key_value`]
- [`HashMap::get_key_value`]
- [`Option::as_deref_mut`]
- [`Option::as_deref`]
- [`Option::flatten`]
- [`UdpSocket::peer_addr`]
- [`f32::to_be_bytes`]
- [`f32::to_le_bytes`]
- [`f32::to_ne_bytes`]
- [`f64::to_be_bytes`]
- [`f64::to_le_bytes`]
- [`f64::to_ne_bytes`]
- [`f32::from_be_bytes`]
- [`f32::from_le_bytes`]
- [`f32::from_ne_bytes`]
- [`f64::from_be_bytes`]
- [`f64::from_le_bytes`]
- [`f64::from_ne_bytes`]
- [`mem::take`]
- [`slice::repeat`]
- [`todo!`]

Cargo
-----
- [Cargo will now always display warnings, rather than only on
  fresh builds.][cargo/7450]
- [Feature flags (except `--all-features`) passed to a virtual workspace will
  now produce an error.][cargo/7507] Previously these flags were ignored.
- [You can now publish `dev-dependencies` without including
  a `version`.][cargo/7333]

Misc
----
- [You can now specify the `#[cfg(doctest)]` attribute to include an item only
  when running documentation tests with `rustdoc`.][63803]

Compatibility Notes
-------------------
- [As previously announced, any previous NLL warnings in the 2015 edition are
  now hard errors.][64221]
- [The `include!` macro will now warn if it failed to include the
  entire file.][64284] The `include!` macro unintentionally only includes the
  first _expression_ in a file, and this can be unintuitive. This will become
  either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
- [Using `#[inline]` on function prototypes and consts now emits a warning under
  `unused_attribute` lint.][65294] Using `#[inline]` anywhere else inside traits
  or `extern` blocks now correctly emits a hard error.

[65294]: https://github.com/rust-lang/rust/pull/65294/
[66103]: https://github.com/rust-lang/rust/pull/66103/
[65843]: https://github.com/rust-lang/rust/pull/65843/
[65188]: https://github.com/rust-lang/rust/pull/65188/
[65092]: https://github.com/rust-lang/rust/pull/65092/
[64589]: https://github.com/rust-lang/rust/pull/64589/
[64639]: https://github.com/rust-lang/rust/pull/64639/
[64221]: https://github.com/rust-lang/rust/pull/64221/
[64284]: https://github.com/rust-lang/rust/pull/64284/
[63931]: https://github.com/rust-lang/rust/pull/63931/
[64035]: https://github.com/rust-lang/rust/pull/64035/
[63674]: https://github.com/rust-lang/rust/pull/63674/
[63803]: https://github.com/rust-lang/rust/pull/63803/
[cargo/7450]: https://github.com/rust-lang/cargo/pull/7450/
[cargo/7507]: https://github.com/rust-lang/cargo/pull/7507/
[cargo/7525]: https://github.com/rust-lang/cargo/pull/7525/
[cargo/7333]: https://github.com/rust-lang/cargo/pull/7333/
[(rfc 2008)]: https://rust-lang.github.io/rfcs/2008-non-exhaustive.html
[`f32::to_be_bytes`]: https://doc.rust-lang.org/std/primitive.f32.html#method.to_be_bytes
[`f32::to_le_bytes`]: https://doc.rust-lang.org/std/primitive.f32.html#method.to_le_bytes
[`f32::to_ne_bytes`]: https://doc.rust-lang.org/std/primitive.f32.html#method.to_ne_bytes
[`f64::to_be_bytes`]: https://doc.rust-lang.org/std/primitive.f64.html#method.to_be_bytes
[`f64::to_le_bytes`]: https://doc.rust-lang.org/std/primitive.f64.html#method.to_le_bytes
[`f64::to_ne_bytes`]: https://doc.rust-lang.org/std/primitive.f64.html#method.to_ne_bytes
[`f32::from_be_bytes`]: https://doc.rust-lang.org/std/primitive.f32.html#method.from_be_bytes
[`f32::from_le_bytes`]: https://doc.rust-lang.org/std/primitive.f32.html#method.from_le_bytes
[`f32::from_ne_bytes`]: https://doc.rust-lang.org/std/primitive.f32.html#method.from_ne_bytes
[`f64::from_be_bytes`]: https://doc.rust-lang.org/std/primitive.f64.html#method.from_be_bytes
[`f64::from_le_bytes`]: https://doc.rust-lang.org/std/primitive.f64.html#method.from_le_bytes
[`f64::from_ne_bytes`]: https://doc.rust-lang.org/std/primitive.f64.html#method.from_ne_bytes
[`option::flatten`]: https://doc.rust-lang.org/std/option/enum.Option.html#method.flatten
[`option::as_deref`]: https://doc.rust-lang.org/std/option/enum.Option.html#method.as_deref
[`option::as_deref_mut`]: https://doc.rust-lang.org/std/option/enum.Option.html#method.as_deref_mut
[`hashmap::get_key_value`]: https://doc.rust-lang.org/std/collections/struct.HashMap.html#method.get_key_value
[`btreemap::get_key_value`]: https://doc.rust-lang.org/std/collections/struct.BTreeMap.html#method.get_key_value
[`slice::repeat`]: https://doc.rust-lang.org/std/primitive.slice.html#method.repeat
[`mem::take`]: https://doc.rust-lang.org/std/mem/fn.take.html
[`udpsocket::peer_addr`]: https://doc.rust-lang.org/std/net/struct.UdpSocket.html#method.peer_addr
[`todo!`]: https://doc.rust-lang.org/std/macro.todo.html
2020-01-03 19:26:32 +00:00
pho
5978f3a2ac Add ghc80 2020-01-03 15:24:52 +00:00
pho
4b3aed4acc Import GHC 8.0.2
GHC: The Glasgow Haskell Compiler.

The Glasgow Haskell Compiler is a robust, fully-featured, optimising
compiler for the functional programming language Haskell 98
(http://www.haskell.org). GHC compiles Haskell to either native code
or C. It implements numerous experimental language extensions to
Haskell, including concurrency, a foreign language interface, several
type-system extensions, exceptions, and so on. GHC comes with a
generational garbage collector, a space and time profiler, and a
comprehensive set of libraries.

This package provides the 8.0.x release series, which is the last
version that can bootstrap with 7.10.3. It will probably be removed
once we make a separate package for GHC 8.4.x and get enough bootstrap
kits for it.
2020-01-03 15:24:08 +00:00
adam
4c67e8bcd5 py-mypy: updated to 0.761
Mypy 0.760 was released. This release includes various fixes and improvements, and a type signature suggestion feature for tools.
2020-01-03 11:53:09 +00:00
pho
3620264eed Explicitly set the ld command to ${LD}
Without doing this the resulting compiler will have a cwrapper ld
embedded, and will be unable to bootstrap later versions of GHC.
2020-01-03 11:11:29 +00:00
fcambus
f38f39f97d yabasic: update to 2.86.3.
This fixes CVE-2019-19796.

ChangeLog:

Version 2.86.3 (December 15, 2019)
  - Fix for heap overflow found with honggfuzz
2020-01-01 23:09:34 +00:00
adam
8e759878c9 py-parso: updated to 0.5.2
0.5.2:
- Add include_setitem to get_definition/is_definition and get_defined_names
- Fix named expression error listing
- Fix some f-string tokenizer issues
2019-12-31 10:44:37 +00:00
adam
64c3ff39c5 py-uncompyle6: updated to 3.6.1
3.6.1:
Overall, as in the past, the focus has been on just fixing bugs, more geared
in the later 3.x range. Handling "async for/with" in 3.8+ works better.

Numerous bugs around handling lambda with keyword-only and * args in the
3.0-3.8 have been fixed. However many still remain.

binary_expr and unary_expr have been renamed to bin_op and
unary_op to better correspond the Python AST names.

Some work was done Python 3.7+ to handle and better; less was done
along the lines of handling or. Much more is needed to improve
parsing stability of 3.7+. More of what was done with and needs to
be done with or and this will happen first in the "decompyle3"
project.

Later this will probably be extended backwards to handle the 3.6-
versions better. This however comes with a big decompilation speed
penalty. When we redo control flow this should go back to normal, but
for now, accuracy is more important than speed.

Another assert transform rule was added. Parser rules to distingish
try/finally in 3.8 were added and we are more stringent about what
can be turned into an assert. There was some grammar cleanup here
too.

A number of small bugs were fixed, and some administrative changes to
make make check-short really be short, but check more throughly what
it checks. minimum xdis version needed was bumped to include in the
newer 3.6-3.9 releases. See the ChangeLog for details.
2019-12-31 10:22:46 +00:00
pho
b22c32f447 More patches to suppress linker warnings 2019-12-31 07:10:30 +00:00
pho
23ba2e9cf1 Update to GHC 7.10.3
Changes from 7.6.3 are as follows:
* https://www.haskell.org/ghc/docs/7.8.1/html/users_guide/release-7-8-1.html
* https://www.haskell.org/ghc/docs/7.8.2/html/users_guide/release-7-8-2.html
* https://www.haskell.org/ghc/docs/7.8.3/html/users_guide/release-7-8-3.html
* https://www.haskell.org/ghc/docs/7.8.4/html/users_guide/release-7-8-4.html
* https://www.haskell.org/ghc/docs/7.10.1/html/users_guide/release-7-10-1.html
* https://downloads.haskell.org/~ghc/7.10.2/docs/html/users_guide/release-7-10-2.html
* https://downloads.haskell.org/~ghc/7.10.3/docs/html/users_guide/release-7-10-3.html
2019-12-29 16:59:08 +00:00
adam
a6f9f864b1 npm: updated to 6.13.4
6.13.4:
BUGFIXES
Do not remove global bin/man links inappropriately

DEPENDENCIES
gentle-fs@2.3.0
bin-links@1.1.6

6.13.3:
DEPENDENCIES
bin-links@1.1.5 Properly normalize, sanitize, and verify bin entries in package.json.
npm-packlist@1.4.7
pacote@9.5.11
fix: Do not drop perms in git when not root
sanitize and normalize package bin field
read-package-json@2.1.1
2019-12-29 16:22:42 +00:00
adam
268ef8d58c nodejs8: updated to 8.17.0
Version 8.17.0 'Carbon' (LTS)
Notable changes
deps: update npm to 6.13.4
2019-12-29 15:40:32 +00:00
adam
b3f29611eb nodejs10: updated to 10.18.0
Version 10.18.0 'Dubnium' (LTS)
Notable changes
deps: update npm to 6.13.4
2019-12-29 15:40:00 +00:00
adam
ddb0f335b6 nodejs12: updated to 12.14.0
Version 12.14.0 'Erbium' (LTS)
Notable changes
deps: update npm to 6.13.4
2019-12-29 15:39:15 +00:00
adam
2013de043b nodejs: updated to 13.5.0
Version 13.5.0 (Current):
Notable Changes
cli:
* add --trace-exit cli option
http,https:
* increase server headers timeout
readline:
* update ansi-regex
* promote _getCursorPos to public api
repl:
* add completion preview
util:
* add Set and map size to inspect output
wasi:
* require CLI flag to require() wasi module
2019-12-29 15:38:04 +00:00
adam
fa003e0fad llvm: updated to 9.0.1
9.0.1 is a bug-fix release.
2019-12-29 15:31:21 +00:00
adam
7ce87068a9 py38-html-docs: updated to 3.8.1
Match lang/python38.
2019-12-28 22:40:35 +00:00
adam
03f02e2c21 py37-html-docs: updated to 3.7.6
Match lang/python37.
2019-12-28 22:39:38 +00:00
adam
afa2f823ba py36-html-docs: updated to 3.6.10
Match lang/python36
2019-12-28 22:38:04 +00:00
adam
fce7b0ae59 python38: updated to 3.8.1
Python 3.8.1 is the first maintenance release of Python 3.8. The Python 3.8 series is the newest feature release of the Python language, and it contains many new features and optimizations.
2019-12-28 22:36:13 +00:00
adam
7d1cd68164 python37: updated to 3.7.6
Python 3.7.6 is the next bugfix release of Python 3.7.
2019-12-28 22:30:24 +00:00
adam
3197b6f401 python36: updated to 3.6.10
Python 3.6.10 is the next security fix release of Python 3.6.
2019-12-28 22:24:01 +00:00
wiz
6d2233c873 nuitka: mark as not ready for python 3.x
This includes an old copy of scons which does not support 3.x.
2019-12-28 11:29:59 +00:00
mef
62a465105c (lang/rakudo) Update PLIST, hopefully fix packaging 2019-12-28 00:45:42 +00:00
gutteridge
df1bdf1e25 guile: fix build with GNU texinfo 6.7
GNU texinfo 6.7 fails to parse api-compound.texi because of an
unnecessary non-breaking space character (code point 160). (Whereas
GNU texinfo 6.5 succeeds there, as does the old C source version
bundled with NetBSD's userland.)

utf8 "\xA0" does not map to Unicode at ParserNonXS.pm line 1796, <FH> line 908.
Malformed UTF-8 character: \xa0 (unexpected continuation byte 0xa0, with no
preceding start byte) in pattern match (m//) at ParserNonXS.pm line 3364.
Malformed UTF-8 character (fatal) at ParserNonXS.pm line 3364.

It's simpler to just replace the byte in that source file with an ASCII
space character than attempt to fix the texinfo parsing code (and we're
in a freeze right now, too). This should fix the bulk build failures on
SmartOS and others.
2019-12-24 01:42:53 +00:00
taca
3533e60a90 lang/php72: update to 7.2.26
Update php73 to 7.2.26, including security fixes.

19 Dec 2019, PHP 7.2.26

- Bcmath:
  . Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
    (cmb)

- Core:
  . Fixed bug #78862 (link() silently truncates after a null byte on Windows).
    (CVE-2019-11044). (cmb)
  . Fixed bug #78863 (DirectoryIterator class silently truncates after a null
    byte). (CVE-2019-11045). (cmb)

- EXIF:
  . Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
    (CVE-2019-11050). (Nikita)
  . Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
    (Nikita)

- GD:
  . Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb)

- Intl:
  . Fixed bug #78804 (Segmentation fault in Locale::filterMatches). (Stas)

- OPcache:
  . Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
    (Tyson Andre)

- Standard:
  . Fixed bug #78759 (array_search in $GLOBALS). (Nikita)
  . Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
    (cmb)
  . Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
    (cmb)
2019-12-21 07:02:15 +00:00
taca
2fa2cc8ee5 lang/php74: update to 7.4.1
Update php74 to 7.4.1, including security fixes.

19 Dec 2019, PHP 7.4.1

- Bcmath:
  . Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
    (cmb)

- Core:
  . Fixed bug #78862 (link() silently truncates after a null byte on Windows).
    (CVE-2019-11044). (cmb)
  . Fixed bug #78863 (DirectoryIterator class silently truncates after a null
    byte). (CVE-2019-11045). (cmb)
  . Fixed bug #78943 (mail() may release string with refcount==1 twice).
    (CVE-2019-11049). (cmb)
  . Fixed bug #78810 (RW fetches do not throw "uninitialized property"
    exception). (Nikita)
  . Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value).
    (Antony Dovgal, Dmitry)
  . Fixed bug #78296 (is_file fails to detect file). (cmb)
  . Fixed bug #78883 (fgets(STDIN) fails on Windows). (cmb)
  . Fixed bug #78898 (call_user_func(['parent', ...]) fails while other
    succeed). (Nikita)
  . Fixed bug #78904 (Uninitialized property triggers __get()). (Nikita)
  . Fixed bug #78926 (Segmentation fault on Symfony cache:clear). (Nikita)

- GD:
  . Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb)
  . Fixed bug #78923 (Artifacts when convoluting image with transparency).
    (wilson chen)

- EXIF:
  . Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
    (CVE-2019-11050). (Nikita)
  . Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
    (Nikita)

- FPM:
  . Fixed bug #76601 (Partially working php-fpm ater incomplete reload).
    (Maksim Nikulin)
  . Fixed bug #78889 (php-fpm service fails to start). (Jakub Zelenka)
  . Fixed bug #78916 (php-fpm 7.4.0 don't send mail via mail()).
    (Jakub Zelenka)

- Intl:
  . Implemented FR #78912 (INTL Support for accounting format). (cmb)

- Mysqlnd:
  . Fixed bug #78823 (ZLIB_LIBS not added to EXTRA_LIBS). (Arjen de Korte)

- OPcache:
  . Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
    (Tyson Andre)
  . Fixed bug #78935 (Preloading removes classes that have dependencies).
    (Nikita, Dmitry)

- PCRE:
  . Fixed bug #78853 (preg_match() may return integer > 1). (cmb)

- Reflection:
  . Fixed bug #78895 (Reflection detects abstract non-static class as abstract
    static. IS_IMPLICIT_ABSTRACT is not longer used). (Dmitry)

- Standard:
  . Fixed bug #77638 (var_export'ing certain class instances segfaults). (cmb)
  . Fixed bug #78840 (imploding $GLOBALS crashes). (cmb)
  . Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
    (cmb)
  . Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
    (cmb)
2019-12-21 07:00:55 +00:00
taca
3467a4798a lang/php73: update to 7.3.13
Update php73 to 7.3.13, including security fixes.


19 Dec 2019, PHP 7.3.13

- Bcmath:
  . Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046).
    (cmb)

- Core:
  . Fixed bug #78862 (link() silently truncates after a null byte on Windows).
    (CVE-2019-11044). (cmb)
  . Fixed bug #78863 (DirectoryIterator class silently truncates after a null
    byte). (CVE-2019-11045). (cmb)
  . Fixed bug #78943 (mail() may release string with refcount==1 twice).
    (CVE-2019-11049). (cmb)
  . Fixed bug #78787 (Segfault with trait overriding inherited private shadow
    property). (Nikita)
  . Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value).
    (Antony Dovgal, Dmitry)
  . Fixed bug #78296 (is_file fails to detect file). (cmb)

- EXIF:
  . Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
    (CVE-2019-11050). (Nikita)
  . Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047).
    (Nikita)

- GD:
  . Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). (cmb)

- MBString:
  . Upgraded bundled Oniguruma to 6.9.4. (cmb)

- OPcache:
  . Fixed potential ASLR related invalid opline handler issues. (cmb)
  . Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
    (Tyson Andre)

- PCRE:
  . Fixed bug #78853 (preg_match() may return integer > 1). (cmb)

- Standard:
  . Fixed bug #78759 (array_search in $GLOBALS). (Nikita)
  . Fixed bug #77638 (var_export'ing certain class instances segfaults). (cmb)
  . Fixed bug #78840 (imploding $GLOBALS crashes). (cmb)
  . Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
    (cmb)
  . Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).
    (cmb)
2019-12-21 06:59:20 +00:00
joerg
1f702ce9a9 Deal with custom bitrates on NetBSD. Always build Alsa support, it is
unconditionally at the moment anyway.
2019-12-20 00:01:37 +00:00