<feed xmlns='http://www.w3.org/2005/Atom'>
<title>apt, branch 1.2.6</title>
<subtitle>Debians commandline package manager</subtitle>
<id>https://git.kalnischkies.de/apt/atom?h=1.2.6</id>
<link rel='self' href='https://git.kalnischkies.de/apt/atom?h=1.2.6'/>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/'/>
<updated>2016-03-07T18:51:34Z</updated>
<entry>
<title>Release 1.2.6</title>
<updated>2016-03-07T18:51:34Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2016-03-07T18:51:34Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=13df96c5f3a70fd2d49e0622c9e1f7d5f76cc5dd'/>
<id>urn:sha1:13df96c5f3a70fd2d49e0622c9e1f7d5f76cc5dd</id>
<content type='text'>
</content>
</entry>
<entry>
<title>apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList</title>
<updated>2016-03-07T00:41:39Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2016-03-07T00:32:08Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=f99b06213e39c3e2d46db243d2509c42cc63c752'/>
<id>urn:sha1:f99b06213e39c3e2d46db243d2509c42cc63c752</id>
<content type='text'>
Dynamically allocate KillList in order to avoid an overflow when
more than 100 elements would be written to it.

This happened while playing around with the status file from
Bug#701069 on a modern system.
</content>
</entry>
<entry>
<title>Fix several typos</title>
<updated>2016-03-06T23:14:48Z</updated>
<author>
<name>Veres Lajos</name>
<email>vlajos@gmail.com</email>
</author>
<published>2016-03-06T23:13:26Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=8d89cda7d66b6f125c457f36beeb84abb0df07f1'/>
<id>urn:sha1:8d89cda7d66b6f125c457f36beeb84abb0df07f1</id>
<content type='text'>
This effectively merges branch 'typofixes-vlajos-20150807' of github.com:vlajos/apt
with the following commit:

commit 13cacb3e2e2352ba701e769fc889e3344fabbf7e
Author: Veres Lajos &lt;vlajos@gmail.com&gt;
Date:   Sun Aug 9 00:12:53 2015 +0100

    typofix - https://github.com/vlajos/misspell_fixer

It has been rebased for a better commit message.
</content>
</entry>
<entry>
<title>Release 1.2.5</title>
<updated>2016-03-06T18:48:39Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2016-03-06T18:47:53Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=f009dd15f385e9df4ca0482a940870350ba2d160'/>
<id>urn:sha1:f009dd15f385e9df4ca0482a940870350ba2d160</id>
<content type='text'>
</content>
</entry>
<entry>
<title>debian/control: Set Standards-Version to 3.9.7</title>
<updated>2016-03-06T14:27:10Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2016-03-06T14:27:10Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=607bab3fe856d228f22e1cd96dbb7204e2f3375d'/>
<id>urn:sha1:607bab3fe856d228f22e1cd96dbb7204e2f3375d</id>
<content type='text'>
We do not follow the recommendation with regards to placement
of documentation in apt-doc, as we install in apt-doc, but
it's only a recommendation and I don't want think we should
move them.
</content>
</entry>
<entry>
<title>get group again after potential remap in Source: parse</title>
<updated>2016-03-06T14:00:33Z</updated>
<author>
<name>David Kalnischkies</name>
<email>kalnischkies@gmail.com</email>
</author>
<published>2016-03-06T13:44:06Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=06a8e0dcb37796136be983b247c5d1bbfdf47a2e'/>
<id>urn:sha1:06a8e0dcb37796136be983b247c5d1bbfdf47a2e</id>
<content type='text'>
Mysteriously segfaults only on i386 for me, but at least one reporter
had the same behavior and it makes sense that this is the problem as the
parsing of Source: was fixed in 1.2.2 – before the not remapped group
was not used.

We don't use our usual Dynamic&lt;&gt; trick here as we don't have it in the
parser. Its a bit of a layer violation to do this parsing here, but its
how it is always was…

Until next time with this lovely kind of problem.

Closes: 812251
Thanks: Francesco Poli and Marc Haber for testdata.
</content>
</entry>
<entry>
<title>Prevent double remapping of iterators and string views</title>
<updated>2016-03-06T13:57:41Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2016-03-06T13:44:53Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=9e7f83533665c03b52dff5809e7ebd93928ea445'/>
<id>urn:sha1:9e7f83533665c03b52dff5809e7ebd93928ea445</id>
<content type='text'>
If an iterator or a stringview has multiple dynamic objects
registered with it, it may be remapped twice. Prevent that
by noting which iterators/views we have seen and not remapping
one if we have already seen it.

We most likely do not have any instance of multiple dynamics
on a single object, but let's play safe - the overhead is not
high.
</content>
</entry>
<entry>
<title>do not move not-failed pdiff-patches into CWD on failure</title>
<updated>2016-03-06T11:57:38Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-03-06T11:03:34Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=dfcf7f356b790338f0a3e9df3c5d6f159814fe53'/>
<id>urn:sha1:dfcf7f356b790338f0a3e9df3c5d6f159814fe53</id>
<content type='text'>
If a single pdiff fails, we have to fail the entire patching endeavour
and fall back to getting the complete file instead. That is easy in
serverside merged pdiffs as we get them one by one. For clientside we
get them all at once through, which means that a failure in one has to
stop the entire pipeline, which works as expected (as proven by the
bugreporters as they don't even notice it happening). The problem is
just that the first failing pdiff will do the cleanup, so another pdiff
which happens to be successfully acquired after we processed the failure
doesn't find the file it is supposed to use as a basename anymore, so
the patch is renamed to what should be the unique extension and moved
into the current working directory. Processing is then stopped as the
patch realizes that it isn't the last one which completed downloading.

On the plus side this means this is neither us using a bad temporary
location nor a security problem. It "just" overrides unconditionally
files in your current working directory (if you happen to have them
named like a pdiff patch – a bit unlikely perhaps) and so drops files
there which are never used again.

I guess this was introduced in 4e3c5633b1e74b4f58b95f339cfbbf4cbf21ab3e
for real as I made the need for the existence of the base file rather
explicit, but the potential lingers in the code for far longer.

Closes: #816837
</content>
</entry>
<entry>
<title>Fix lzma write support to handle "try again" case</title>
<updated>2016-03-06T09:22:45Z</updated>
<author>
<name>Colin Watson</name>
<email>cjwatson@ubuntu.com</email>
</author>
<published>2016-03-05T01:17:12Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=9a63c3f480bcbc3232067237671b854d43a97236'/>
<id>urn:sha1:9a63c3f480bcbc3232067237671b854d43a97236</id>
<content type='text'>
The liblzma-based write code needs the same tweaks that the read code
already has to cope with the situation where lzma_code returns zero the
first time through because avail_out is zero, but will do more work if
called again.

This ports the read tweaks to the write code as closely as possible
(including matching comments etc.).

Closes: #751688
</content>
</entry>
<entry>
<title>add test for apt-key 0xKEY and use parameter expansion</title>
<updated>2016-03-06T09:16:59Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-03-06T09:16:59Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=031a3f254a2a73b2843ead28a2481b63ec1d7244'/>
<id>urn:sha1:031a3f254a2a73b2843ead28a2481b63ec1d7244</id>
<content type='text'>
Fixed in f7bd44bae0d7cb7f9838490b5eece075da83899e already, but the
commit misses the Closes tag and while we are at it we can add a simple
regression test and micro-optimize it a bit.

Thanks: James McCoy for the suggestion.
Closes: 816691
</content>
</entry>
</feed>
