apt/apt-pkg/contrib, branch 1.9.5Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=1.9.52019-12-02T13:27:38Znetrc: Restrict auth.conf entries to https by default2019-12-02T13:27:38ZJulian Andres Klodejulian.klode@canonical.com2019-12-02T10:46:49Zurn:sha1:93f33052de84e9aeaf19c92291d043dad2665bbd
This avoids downgrade attacks where an attacker could inject
Location: http://private.example/
and then (having access to raw data to private.example, for example,
by opening a port there, or sniffing network traffic) read the credentials
for the private repository.
Closes: #945911
Fix some style warnings from cppcheck2019-11-26T11:36:46ZDavid Kalnischkiesdavid@kalnischkies.de2019-09-13T10:01:47Zurn:sha1:35012abf30ec1cfc9b5ee29647d4b1e25d98e99f
Unused variable, std::algorithms instead of raw for-loops.
There should be no observeable difference in behaviour.
Reported-By: cppcheck
Gbp-Dch: Ignore
strutl: Add APT::String::DisplayLength() function2019-11-25T16:02:47ZАлексей Шилинrootlexx@mail.ru2019-11-22T21:56:46Zurn:sha1:6ad35af2b63b32f9070c622b69da1c05535086a0
Returns string length, but unlike std::string::size() it honors
multibyte characters. This allows to properly calculate visible
sizes of console messages.
srvrec: Use re-entrant resolver functions2019-08-22T11:11:00ZJulian Andres Klodejulian.klode@canonical.com2019-08-22T11:11:00Zurn:sha1:b9127ca07c37288f16b1fdc267d3f106721ed301
This should probably make those functions thread-safe, which
might be useful for some external users.
Merge branch 'pu/locking-msg' into 'master'2019-08-05T15:09:18ZJulian Andres Klodejak@debian.org2019-08-05T15:09:18Zurn:sha1:44f3051c56bb7fbe301625dd368c6a2fc36e64d0
Improve locking messaging - pid and name, "do not remove lock file"
See merge request apt-team/apt!68Apply various suggestions by cppcheck2019-07-08T13:51:17ZDavid Kalnischkiesdavid@kalnischkies.de2019-07-08T13:48:59Zurn:sha1:2b734a7ec429825c7007c1093883229e069d36c7
Reported-By: cppcheck
Improve locking messaging - pid and name, "do not remove lock file"2019-06-21T21:14:46ZJulian Andres Klodejulian.klode@canonical.com2019-06-21T20:45:13Zurn:sha1:cde8399310e56faaa6928411392184bc403eff66
We want to tell users which process is holding the lock so they
can easily understand what's going on, and we want to advise
users not to remove the lock file, because ugh, that's bad.
Re-initalize the flock structure, in case it got mangled by
previous fcntl call.
RFC1123StrToTime: Accept const std::string& as first argument2019-06-17T16:28:52ZJulian Andres Klodejulian.klode@canonical.com2019-06-17T16:28:52Zurn:sha1:97553e635d2265ec4aad96b00b1fd72d98437f15
We are converting to std::string anyway by passing to
istringstream, and this removes the need for .c_str()
in callers.
Run unifdef -DAPT_{8,9,10,15}_CLEANER_HEADERS2019-06-12T13:02:55ZJulian Andres Klodejulian.klode@canonical.com2019-05-11T15:17:20Zurn:sha1:daa1352ed3d2bb4bc6aa0f0e7f22be3f0908942dAllow comparing string to StringView2019-06-11T12:45:55ZJulian Andres Klodejulian.klode@canonical.com2019-02-04T19:35:07Zurn:sha1:fc7d9b53f201bfdc5b3955394e6609ed7dadd258