summaryrefslogtreecommitdiff
path: root/apt-pkg/acquire-item.cc
Commit message (Collapse)AuthorAgeFilesLines
...
* | | add verify for the .diff/Index download and add FIXME for ↵Michael Vogt2014-10-011-0/+19
| | | | | | | | | | | | pkgAcqIndexDiffs/pkgAcqMergeDiffs
* | | cleanupMichael Vogt2014-09-291-17/+32
| | |
* | | fix DestFile extMichael Vogt2014-09-291-1/+1
| | |
* | | refactorMichael Vogt2014-09-291-10/+11
| | |
* | | Adjust DestFile in ReverifyAfterIMS() to not include compr ExtensionMichael Vogt2014-09-291-0/+7
| | |
* | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-291-11/+72
|\| | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/gpgv.cc
| * | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-291-14/+27
| |\| | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc
| | * Merge remote-tracking branch 'donkult/feature/generalize-gzipindex' into ↵Michael Vogt2014-09-261-15/+29
| | |\ | | | | | | | | | | | | debian/sid
| | | * generalize Acquire::GzipIndexMichael Vogt2014-09-211-15/+29
| | | |
| * | | replace c-string Mode with c++-string ActiveSubprocessDavid Kalnischkies2014-09-281-3/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A long-lasting FIXME in the acquire code points out the problem that we e.g. for decompressors assign c-string representations of c++-strings to the Mode variable, which e.g. cppcheck points out as very bad. In practice, nothing major happens as the c++-strings do not run out of scope until Mode would do, but that is bad style and fragile, so the obvious proper fix is to use a c++ string for storage to begin with. The slight complications stems from the fact that progress reporting code in frontends potentially uses Mode and compares it with NULL, which can't be done with std::string, so instead of just changing the type we introduce a new variable and deprecate the old one. Git-Dch: Ignore
| * | | Remove check for "Translation-" from pkgAcqIndex::Custom600Headers()Michael Vogt2014-09-251-4/+1
| | | | | | | | | | | | | | | | | | | | This unneeded because pkgAcqIndexTrans has its own Custom600Headers() method.
| * | | fix testsMichael Vogt2014-09-231-1/+1
| | | |
* | | | test fixesMichael Vogt2014-09-261-20/+21
| | | |
* | | | Do not allow going from authenticated to unauthenticated repoMichael Vogt2014-09-261-15/+64
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also rework the way we load the Release file, so it only after Release.gpg verified the Release file. The rational is that we never want to load untrusted data into our parsers. Only stuff verified with gpg or by its hashes get loaded. To load untrusted data you now need to use apt-get update --allow-unauthenticated.
* | | | Print warning for unauthenticated repositoriesMichael Vogt2014-09-261-0/+4
| | | |
* | | | Do not download Packages/Sources files on I-M-S hit of the Release fileMichael Vogt2014-09-261-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | With this branch we know that the data in the lists directory is always what the release file says, so if the Release file is unchanged, then there is no need to queue the download of the other indexfiles as they will be unchanged too (or broken :)
* | | | make pdiff transactional (but at the cost of a CopyFile()Michael Vogt2014-09-231-29/+72
| | | |
* | | | cleanup, fix test-apt-update-unauth as the behavior of apt changedMichael Vogt2014-09-231-3/+6
| | | |
* | | | cleanupMichael Vogt2014-09-231-19/+11
| | | |
* | | | fix one broken testMichael Vogt2014-09-231-4/+3
| | | |
* | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-231-19/+52
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/copy.cc test/integration/test-hashsum-verification
| * | | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-231-29/+83
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h apt-pkg/cachefilter.h configure.ac debian/changelog
| | * | Fix regression for cdrom: sources from latest security updateMichael Vogt2014-09-211-0/+6
| | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | Skip a reverify for cdrom: sources. The reverify step is actually harmful here because the apt-cdrom add code uses the indexcopy.cc which will "normalize" the Packages file from the cdrom when it writes it to the local disk. This leads to changing the "MD5sum" field (notice the lower case "s") on the cdrom Packages file to a "MD5Sum" field on the local file in /var/lib/apt/lists. Which of course alters the hash and makes apt fail to reverify the file.
| | * improve test for commit daff4aMichael Vogt2014-09-171-2/+3
| | |
| | * Fix regression for file:/// uris from CVE-2014-0487Michael Vogt2014-09-171-12/+6
| | | | | | | | | | | | | | | | | | | | | | | | Do not run ReverifyAfterIMS() for local file URIs as this will causes apt to mess around in the file:/// uri space. This is wrong in itself, but it will also cause a incorrect verification failure when the archive and the lists directory are on different partitions as rename().
| | * SECURITY UPDATE for CVE-2014-{0488,0487,0489}Michael Vogt2014-09-161-22/+75
| | | | | | | | | | | | | | | | | | incorrect invalidating of unauthenticated data (CVE-2014-0488) incorect verification of 304 reply (CVE-2014-0487) incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
* | | fix gcc warningsMichael Vogt2014-09-171-5/+5
| | |
* | | use pkgAcqMetaBase as the transactionManagerMichael Vogt2014-09-171-51/+112
| | |
* | | remove pkgAcqSubIndexMichael Vogt2014-09-161-119/+1
| | |
* | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-051-2/+2
|\| | | | | | | | | | | feature/acq-trans
| * | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-051-2/+2
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc configure.ac debian/changelog doc/apt-verbatim.ent doc/po/apt-doc.pot doc/po/de.po doc/po/es.po doc/po/fr.po doc/po/it.po doc/po/ja.po doc/po/pt.po po/ar.po po/ast.po po/bg.po po/bs.po po/ca.po po/cs.po po/cy.po po/da.po po/de.po po/dz.po po/el.po po/es.po po/eu.po po/fi.po po/fr.po po/gl.po po/hu.po po/it.po po/ja.po po/km.po po/ko.po po/ku.po po/lt.po po/mr.po po/nb.po po/ne.po po/nl.po po/nn.po po/pl.po po/pt.po po/pt_BR.po po/ro.po po/ru.po po/sk.po po/sl.po po/sv.po po/th.po po/tl.po po/tr.po po/uk.po po/vi.po po/zh_CN.po po/zh_TW.po test/integration/test-ubuntu-bug-346386-apt-get-update-paywall
| | * apt-pkg/acquire-item.cc: make pkgAcqDiffIndex more uniformMichael Vogt2014-07-171-2/+2
| | |
* | | add shared code into pkgAcqMetaSigBase::GenerateAuthWarning()Michael Vogt2014-08-251-52/+51
| | |
* | | all tests passMichael Vogt2014-08-241-8/+34
| | |
* | | make the test-pdiff-usage code work againMichael Vogt2014-08-241-0/+11
| | |
* | | make compressed-indexes test pass againMichael Vogt2014-08-241-22/+16
| | |
* | | cleanupMichael Vogt2014-08-241-14/+9
| | |
* | | really move clearsign check into pkgAcqMetaClearSig::Done()Michael Vogt2014-08-021-6/+13
| | |
* | | add ims check verifyMichael Vogt2014-08-021-9/+41
| | |
* | | move clearsign check into pkgAcqMetaClearSig::Failed()Michael Vogt2014-08-021-12/+11
| | |
* | | make i-m-s work againMichael Vogt2014-08-011-4/+7
| | |
* | | check hashes of compressed files as wellMichael Vogt2014-08-011-0/+14
| | |
* | | mve MetaKey into pkgAcqBaseIndexMichael Vogt2014-08-011-1/+0
| | |
* | | fail early (again) on gpg sig failuresMichael Vogt2014-07-311-32/+13
| | |
* | | ensure InRelease->Release is transactional as wellMichael Vogt2014-07-311-2/+3
| | |
* | | make test_inreleae_to_release_reverts_all workMichael Vogt2014-07-311-5/+11
| | |
* | | Rework TransactionID stuffMichael Vogt2014-07-311-48/+92
| | |
* | | WIP cleanup pkgAcqMetaSigMichael Vogt2014-07-221-81/+38
| | |
* | | Download Release first, then Release.gpgMichael Vogt2014-07-211-43/+50
| | | | | | | | | | | | | | | | | | | | | The old way of handling this was that pkgAcqMetaIndex was responsible to check/move both Release and Release.gpg in place. This breaks the assumption of the transaction that each pkgAcquire::Item has a single File that its responsible for.
* | | add pkgAcquire::TransactionHasError()Michael Vogt2014-07-211-3/+4
| | |
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2026-11-13 09:19:08 +0000