summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Release 1.9.71.9.7Julian Andres Klode2020-01-165-6/+21
|
* Fix debian-rules-uses-deprecated-systemd-overrideJulian Andres Klode2020-01-161-3/+4
| | | | | | | | | We accidentally managed to restart apt-daily{,-upgrade}.service again because our dh_systemd_start override was being ignored since we switched to debhelper 12. Override dh_installsystemd instead. Gbp-Dch: full
* NewProvidesAllArch: Check if group is empty before using itJulian Andres Klode2020-01-162-1/+29
| | | | | | | | | | | | | APT 1.9.6 introduced empty groups by making use of groups to deduplicate package names. This is not normally a problem, but here we assumed that every group has at least one package. This caused a problem because automake was providing automake-1.16 while having the source package automake-1.16. So we found the automake-1.16 group, iterated over its empty package list, trying to store the provides (which hence never happened). LP: #1859952
* Trim trailing whitespace.Julian Andres Klode2020-01-152-219/+218
| | | | | Fixes: lintian: file-contains-trailing-whitespace See-also: https://lintian.debian.org/tags/file-contains-trailing-whitespace.html
* Release 1.9.61.9.6Julian Andres Klode2020-01-1559-61/+482
|
* Merge branch 'pu/apt-regex-cli' into 'master'Julian Andres Klode2020-01-157-13/+38
|\ | | | | | | | | apt(8): Disable regular expressions and fnmatch See merge request apt-team/apt!95
| * apt(8): Disable regular expressions and fnmatchJulian Andres Klode2020-01-157-13/+38
| | | | | | | | | | This is the first step. Next step will be to add warnings to apt-get and then remove support there as well.
* | netrc: Add warning when ignoring entries for unencrypted protocolsJulian Andres Klode2020-01-153-9/+29
|/ | | | | | | | Commit 93f33052de84e9aeaf19c92291d043dad2665bbd restricted auth.conf entries to only apply to https by default, but this was silent - there was no information why http sources with auth.conf entries suddenly started failing. Add such information, and extend test case to cover it.
* Merge branch 'pu/gcrypt2' into 'master'Julian Andres Klode2020-01-1426-119/+191
|\ | | | | | | | | Use Libgcrypt for hashing purposes See merge request apt-team/apt!89
| * Remove includes of (md5|sha1|sha2).h headersJulian Andres Klode2020-01-1410-16/+1
| | | | | | | | Remove it everywhere, except where it is still needed.
| * Deprecate the Summation classes and mark them for removalJulian Andres Klode2020-01-145-35/+41
| |
| * Convert users of {MD5,SHA1,SHA256,SHA512}Summation to use HashesJulian Andres Klode2020-01-147-23/+39
| | | | | | | | | | | | | | This makes use of the a function GetHashString() that returns the specific hash string. We also need to implement another overload of Add() for signed chars with sizes, so the existing users do not require reinterpret_cast everywhere.
| * Raise buffer size for Hashes::AddFD() from 4 KiB to 64 KiBJulian Andres Klode2020-01-143-5/+6
| | | | | | | | | | | | Move APT_BUFFER_SIZE to macros.h and re-use it in hashes, this also might speed up stuff, the motivation for using 64 KiB buffers in fileutl.cc was precisely that after all.
| * hashes: Use Libgcrypt for hashing purposesJulian Andres Klode2020-01-146-40/+104
|/ | | | | Switch the code of the Hashes class to use libgcrypt, which allows us to use hardware-accelerated implementations of SHA1 and friends.
* Merge branch 'pu/source-groups' into 'master'Julian Andres Klode2020-01-093-7/+8
|\ | | | | | | | | Avoid extra out-of-cache hash table deduplication for package names See merge request apt-team/apt!92
| * Avoid extra out-of-cache hash table deduplication for package namesJulian Andres Klode2020-01-083-7/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were de-duplicating package name strings in StoreString, but also deduplicating most of them by them being in groups, so we had extra hash table lookups that could be avoided in NewGroup(). To continue deduplicating names across binary packages and source packages, insert groups for source packages as well. This is also a good first step in allowing efficient lookup of packages by source package - we can extend Group later by a list of SourceVersion objects, or alternatively, simply add a by-source chain into pkgCache::Version. This change improves performance by about 10% (913 to 814 ms), while having no significant overhead on the cache size: --- before +++ after @@ -1,7 +1,7 @@ -Total package names: 109536 (2.191 k) -Total package structures: 118689 (4.748 k) +Total package names: 119642 (2.393 k) +Total package structures: 118687 (4.747 k) Normal packages: 83309 - Pure virtual packages: 3365 + Pure virtual packages: 3363 Single virtual packages: 17811 Mixed virtual packages: 1973 Missing: 12231 @@ -10,21 +10,21 @@ Total distinct descriptions: 149291 (3.583 k) Total dependencies: 484135/156650 (12,2 M) Total ver/file relations: 57421 (1.378 k) Total Desc/File relations: 18219 (437 k) -Total Provides mappings: 29963 (719 k) +Total Provides mappings: 29959 (719 k) Total globbed strings: 226993 (5.332 k) Total slack space: 26,8 k -Total space accounted for: 38,1 M +Total space accounted for: 38,3 M Total buckets in PkgHashTable: 50503 - Unused: 5727 - Used: 44776 - Utilization: 88.6601% - Average entries: 2.65073 + Unused: 5728 + Used: 44775 + Utilization: 88.6581% + Average entries: 2.65074 Longest: 60 Shortest: 1 Total buckets in GrpHashTable: 50503 - Unused: 5727 - Used: 44776 - Utilization: 88.6601% - Average entries: 2.44631 - Longest: 10 + Unused: 4649 + Used: 45854 + Utilization: 90.7946% + Average entries: 2.60919 + Longest: 11 Shortest: 1
* | acquire: Move queue startup after calling log's Start()Julian Andres Klode2020-01-081-4/+4
|/ | | | | | | | | | Startup() was checking for bad items and failing them, but we did not actually call Start() in the log, so the log might not be setup correctly. This caused a crash in python-apt when items were being failed on queue startup, as it released the GIL when Start() is being called and re-acquires it when running callbacks.
* Merge branch 'pu/macro-cleanup' into 'master'Julian Andres Klode2020-01-075-38/+11
|\ | | | | | | | | Pu/macro cleanup See merge request apt-team/apt!91
| * Only define likely/unlikely if APT_COMPILING_APT setJulian Andres Klode2020-01-072-0/+5
| | | | | | | | This ensures that we do not leak simple words like that.
| * Remove various unused macros like MAX/MIN/ABS/APT_CONSTJulian Andres Klode2020-01-071-33/+0
| | | | | | | | | | We don't use them, APT_CONST is APT_PURE now, and MAX/MIN/etc are available as proper templates in the C++ standard library.
| * Rename _count() macro to APT_ARRAY_SIZE()Julian Andres Klode2020-01-074-5/+6
|/
* Merge branch 'pu/gtest-fixes' into 'master'Julian Andres Klode2020-01-074-49/+97
|\ | | | | | | | | Pu/gtest fixes See merge request apt-team/apt!90
| * debian/rules: Adjust for -DWITH_TESTS=OFF in nocheck buildJulian Andres Klode2020-01-071-1/+8
| | | | | | | | Gbp-Dch: ignore
| * gtests: Fix netrc parser test regression from https-only changesJulian Andres Klode2020-01-071-24/+57
| | | | | | | | | | | | We missed that because the CI never ran GTests, because it did not find the GTest library and failed silently (until the previous commit).
| * Add support for GTest 1.9, do not fail silently if its missingJulian Andres Klode2020-01-072-24/+32
| | | | | | | | | | | | Require passing -DWITH_TESTS=OFF to CMakeList to disable unit tests, rather than ignoring them if GTest cannot be found; which just happened on CI...
* | Merge branch 'patch-1' into 'master'Julian Andres Klode2020-01-071-2/+2
|\ \ | |/ |/| | | | | Fix typo in README.md See merge request apt-team/apt!87
| * Fix typo in README.mdDenis Mosolov2020-01-071-2/+2
|/
* Avoid #define _error, use anonymous C++ struct insteadJulian Andres Klode2020-01-072-1/+5
| | | | | | | | | | | | Replace the macro with an anonymous struct that provides an inline operator->() returning the _error pointer. This change is ABI compatible, and the inline macro is not exported. We should consider if we want to avoid the function call and directly export the thread_local variable instead, when we do break ABI. Closes: #948338
* Drop g++ build-dependency to help crossbuildingDavid Kalnischkies2020-01-051-1/+0
| | | | | | | | | Introduced to help with an ABI break this is now long enough in the past that we can go back to not explicitly depend on g++ anymore as it is part of build-essential. References: f63b3e01e436a8c0b4711b69a1a8794161e4c5a7 Closes: #948201
* satisfy: Fix segmentation fault when called with empty argumentJulian Andres Klode2019-12-062-1/+5
| | | | | | | | | apt satisfy "" caused a segmentation fault because we were iterating over the characters, checking if the next character was the end of the string; when it could also be the current character. Instead, check whether the next character is before the end of the string, rather than identical to the end.
* gitlab-ci: Use ccacheJulian Andres Klode2019-12-051-8/+13
|
* gitlab-ci: Do not do coverageJulian Andres Klode2019-12-041-6/+4
|
* Release 1.9.51.9.5Julian Andres Klode2019-12-0260-170/+1838
|
* Merge branch 'master' into 'master'Julian Andres Klode2019-12-021-1/+1
|\ | | | | | | | | Fix a mistake in man french translation See merge request apt-team/apt!83
| * Fix a mistake in man french translationAnthony Papillon2019-11-281-1/+1
| |
* | Merge branch 'pu/patterns-phase2' into 'master'Julian Andres Klode2019-12-024-5/+283
|\ \ | | | | | | | | | | | | Pu/patterns phase2 See merge request apt-team/apt!85
| * | patterns: Add ?sectionJulian Andres Klode2019-11-264-2/+22
| | |
| * | patterns: Add ?all-versionsJulian Andres Klode2019-11-264-0/+27
| | |
| * | patterns: Implement ?narrow(...), as ?any-version(?and(...))Julian Andres Klode2019-11-263-1/+13
| | | | | | | | | | | | | | | This is pure syntactic sugar - ?narrow does not exist in the abstract syntax.
| * | patterns: Add ?any-versionJulian Andres Klode2019-11-264-0/+38
| | |
| * | patterns: Add ?originJulian Andres Klode2019-11-254-0/+26
| | |
| * | patterns: Add ?archiveJulian Andres Klode2019-11-254-0/+25
| | |
| * | patterns: Add ?source-name and ?source-versionJulian Andres Klode2019-11-254-2/+39
| | |
| * | patterns: Add ?versionJulian Andres Klode2019-11-254-0/+42
| | |
| * | patterns: Add base class for regular expression matchingJulian Andres Klode2019-11-252-0/+51
| | |
* | | Merge branch 'pu/netrc-https' into 'master'Julian Andres Klode2019-12-024-15/+73
|\ \ \ | |_|/ |/| | | | | | | | netrc: Restrict auth.conf data to https by default See merge request apt-team/apt!84
| * | netrc: Restrict auth.conf entries to https by defaultJulian Andres Klode2019-12-024-15/+73
|/ / | | | | | | | | | | | | | | | | | | | | | | This avoids downgrade attacks where an attacker could inject Location: http://private.example/ and then (having access to raw data to private.example, for example, by opening a port there, or sniffing network traffic) read the credentials for the private repository. Closes: #945911
* | Remove failed trusted signature instead of index on IMS hitDavid Kalnischkies2019-11-272-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While passing the combi Release and Release.gpg to the gpgv method for verification the filename of Release is placed where usually Release.gpg is assumed in the rest of the code. The "usual" cases like passing verification and failing verification ending in an error are taking care of this, but the code path dealing with a failed verification, but ignoring said failure (e.g. due to trusted=yes) was not which results in the wrong file being removed later on (in case the index happens to be unmodified since the last update call) leading us into the abyss of strange failures (fixed in the previous commit) were nothing should have changed. This is not a security issue in this form as the repository needs to fail verification & the user forcing apt to ignore the failure and carry on anyhow. It does show however how complicated the code and its various interconnected paths can become. Reported-By: Val "pinkieval" Lorentz on IRC
* | Use correct filename on IMS-hit reverify for indicesDavid Kalnischkies2019-11-272-11/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | | If we have no old Release file, but old indices we can't compare hashsums with the new Release file and hence must request the indices again and have to react to IMS hits if they didn't change. We used to symlink the old index file to the partial directory, but that usually meant that we linked an uncompressed file to a compressed file, which not all uncompressors can deal with transparently resulting in strange failures. We could do without the symlink, but that would require changes in the codepaths dealing with failure as they would rename the file to FAILED.
* | Fix skip-bug-601016-description-translation testDavid Kalnischkies2019-11-261-6/+7
| | | | | | | | | | | | | | | | | | | | | | Skipped tests do not age very well as changes to the infrastructure go by unnoticied. In this case we are fetching Translation files now differently meaning only if mentioned in Release file, which broke this test. As it makes use of LC_ALL and utf8 locales it can't really be reenabled, but it might be able to serve as an example for others and hence at least deserves being fixed. Gbp-Dch: Ignore