<feed xmlns='http://www.w3.org/2005/Atom'>
<title>apt/test, branch 1.2.3</title>
<subtitle>Debians commandline package manager</subtitle>
<id>https://git.kalnischkies.de/apt/atom?h=1.2.3</id>
<link rel='self' href='https://git.kalnischkies.de/apt/atom?h=1.2.3'/>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/'/>
<updated>2016-02-10T13:17:06Z</updated>
<entry>
<title>test: use our special downloaded dir for 'source' result</title>
<updated>2016-02-10T13:17:06Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-02-10T13:17:06Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=9750213c8117312f9d7dc6d283a4005d14621ef6'/>
<id>urn:sha1:9750213c8117312f9d7dc6d283a4005d14621ef6</id>
<content type='text'>
Otherwise the test run as root fails seeing the
W: Can't drop privileges for downloading as file 'foo_1.tar.gz' couldn't be
accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
warning in a command which isn't supposed to warn.

One trivial test, two fixups and still counting…

Git-Dch: Ignore
</content>
</entry>
<entry>
<title>accept any tarball compression in 814139 testcase</title>
<updated>2016-02-10T12:50:40Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-02-10T12:50:40Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=7776f6d270030a758aad9b6ce260a62c3aa7b4b5'/>
<id>urn:sha1:7776f6d270030a758aad9b6ce260a62c3aa7b4b5</id>
<content type='text'>
Travis still uses a dpkg version which defaults to gz and as which
compression is picked isn't all to important as long as one is just
accept any.

Git-Dch: Ignore
</content>
</entry>
<entry>
<title>test that seeking to a position earlier in the file works</title>
<updated>2016-02-10T12:31:12Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2016-02-10T12:29:19Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=5fafaf27a5f066dc15d96c03ef154fd1d59eb891'/>
<id>urn:sha1:5fafaf27a5f066dc15d96c03ef154fd1d59eb891</id>
<content type='text'>
This tests the fix for #812994, #813000

Gbp-Dch: ignore
</content>
</entry>
<entry>
<title>get dpkg lock in build-dep if cache was invalid again</title>
<updated>2016-02-10T12:03:00Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-02-10T11:26:49Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=b6f1b480164b454661ddd4fdd3968302c6a3ebf6'/>
<id>urn:sha1:b6f1b480164b454661ddd4fdd3968302c6a3ebf6</id>
<content type='text'>
Regression introduced in a249b3e6fd798935a02b769149c9791a6fa6ef16, which
in the case of an invalid cache would build the first part unlocked and
later pick up the (still unlocked) cache for further processing, so the
system got never locked and apt would end up complaining about being
unable to release the lock at shutdown.

The far more common case of having a valid cache worked as expected and
hence covered up the problem – especially as tests who would have
noticed it are simulations only, which do not lock.

Closes: 814139
Reported-By: Balint Reczey &lt;balint@balintreczey.hu&gt;
Reported-By: Helmut Grohne &lt;helmut@subdivi.de&gt; on IRC
</content>
</entry>
<entry>
<title>test: Fix apt-key tests to work with current gpg 2.1</title>
<updated>2016-02-04T17:13:05Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2016-02-04T17:13:05Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=eb5113c486955d9cd66126aa59d3a27e52c52e58'/>
<id>urn:sha1:eb5113c486955d9cd66126aa59d3a27e52c52e58</id>
<content type='text'>
</content>
</entry>
<entry>
<title>avoid building dependency tree in 'source' command</title>
<updated>2016-02-03T13:56:49Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-02-03T13:56:49Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=d603afd970e4bc84ed7176b988cd72bd9cf339b3'/>
<id>urn:sha1:d603afd970e4bc84ed7176b988cd72bd9cf339b3</id>
<content type='text'>
We don't need the dependencies for obvious reasons and we don't need the
candidate version either, so building a pkgDepCache is wasted effort,
which we can stop doing now that build-dep cleared the path.
</content>
</entry>
<entry>
<title>use pkgCache::VS instead of pkgDepCache::VS()</title>
<updated>2016-02-03T12:50:00Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-02-03T11:58:23Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=cd907113561d5eb75054f981be3bcc22eee8db27'/>
<id>urn:sha1:cd907113561d5eb75054f981be3bcc22eee8db27</id>
<content type='text'>
The later just calls the earlier, but the later needs the fullblown
dependency cache to be initialized, which is a very costly operation and
isn't done anymore that early in the run as we would need to throw away
and rebuild it again after we got all the information about source pkgs.

As we end up with a nullptr for the pkgDepCache, we use a slightly
longer calling convention to make sure that we use the pkgCache
directly, avoiding nullptr induced segfaults and costly operations.

Git-Dch: Ignore
Reported-By: Balint Reczey &lt;balint@balintreczey.hu&gt;
</content>
</entry>
<entry>
<title>support &lt;libc&gt;-&lt;kernel&gt;-&lt;cpu&gt; in architecture specs</title>
<updated>2016-01-31T22:24:59Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-01-31T21:32:45Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=5025879e3fdd705bb0607ff8f51a680749c5972a'/>
<id>urn:sha1:5025879e3fdd705bb0607ff8f51a680749c5972a</id>
<content type='text'>
APT has a different understanding than dpkg (#748936) what matches and
what doesn't match an architecture specification as it isn't converting
back (and forward) to Debian triplets. That has to eventually be solved
some way or the other, but until that happens we change the matching in
apt so that porters can continue their work on non-gnu libc-ports even
if policy doesn't specify that yet (and dpkg just supporting it "by
accident" via triplets).

The initial patch was reformatted, fixed in terms of patterns containing
"any-any", dealing with expanding an arch without libc to gnu while a
pattern expands libc to any, the parsedepends test was fixed (the new
if's were inserted one step too early) and another test just for the
specifications added.

Closes: #812212
Thanks: Bálint Réczey for initial patch
</content>
</entry>
<entry>
<title>test all redirection codes work as expected</title>
<updated>2016-01-31T18:06:19Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-01-28T23:52:48Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=aa3e7b3287a20b464237c869483111abc7e9d815'/>
<id>urn:sha1:aa3e7b3287a20b464237c869483111abc7e9d815</id>
<content type='text'>
Git-Dch: Ignore
</content>
</entry>
<entry>
<title>only warn about missing/invalid Date field for now</title>
<updated>2016-01-27T15:39:52Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2016-01-27T14:28:17Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=6fc2e03084c7e027c2b9a63c1fe99ff743aae3b6'/>
<id>urn:sha1:6fc2e03084c7e027c2b9a63c1fe99ff743aae3b6</id>
<content type='text'>
The Date field in the Release file is useful to avoid allowing an
attacker to 'downgrade' a user to earlier Release files (and hence to
older states of the archieve with open security bugs). It is also needed
to allow a user to define min/max values for the validation of a Release
file (with or without the Release file providing a Valid-Until field).

APT wasn't formally requiring this field before through and (agrueable
not binding and still incomplete) online documentation declares it
optional (until now), so we downgrade the error to a warning for now to
give repository creators a bit more time to adapt – the bigger ones
should have a Date field for years already, so the effected group should
be small in any case.

It should be noted that earlier apt versions had this as an error
already, but only showed it if a Valid-Until field was present (or the
user tried to used the configuration items for min/max valid-until).

Closes: 809329
</content>
</entry>
</feed>
