pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/security/flawfinder (pkgsrc)



details:   https://anonhg.NetBSD.org/pkgsrc/rev/7b7c5be5e469
branches:  trunk
changeset: 648084:7b7c5be5e469
user:      mef <mef%pkgsrc.org@localhost>
date:      Wed Mar 11 00:51:06 2015 +0000

description:
(pkgsrc)
 - Add LICENSE= gnu-gpl-v2
(upstream)
 - Update 1.27 to 1.31
----------------------
2014-08-03 David A. Wheeler <dwheeler, at, dwheeler.com>
        * Release version 1.31, a set of small improvements mostly CWE-related.
        * Note that flawfinder is officially CWE-compatible.
        * Support GNU make install conventions (prefix, bindir, DESTDIR, etc.).
          The older program-specific conventions are still supported, but
          the documentation emphasizes using the standard conventions instead.
        * Simplified installation text.
        * Added more wide character function rules.
        * Add reference to info at "http://www.dwheeler.com/secure-programs";.
        * Document that hitlists should be trusted to be loaded or diffed.
          These are implented using Python's pickle module, and that module
          presumes the data is from a trustworthy source.  In the expected
          use case this is fine... but it needed to be documented.
        * Tweak/improve mappings to CWE.  E.G., strlen()
          better maps to CWE-126 (buffer over-read).  In a few cases the
          CWE mappings weren't reported as such; that is now fixed.
          CWEs are actually a hierarchy; expose a little of this so
          people can more easily search on them.
        * Improved error detection and reporting.  In particular, error
          messages are sent to standard errors, filenames listed but
          non-existent trigger a separate warning, and there's a warning
          about non-existent filenames listed on the command line that
          begin with the UTF-8 long dash sequence (users might not notice
          the difference between long dash and dash, and this can happen
          in some cases when copying and pasting).
        * Add "-H" option as synonym for "--html".

2014-07-19 David A. Wheeler <dwheeler, at, dwheeler.com>
        * Release 1.29, primarily for CWE improvements.
        * Multi-line formatting is faster and formats better.
        * Documentation about CWEs has been improved.
        * HTML format includes links from CWE identifiers to their definitions.
        * Tweak CWE mappings, e.g., strlen maps to CWE-126 (buffer over-read).
        * Option "--listrules" now gives default warning and is tab-delimited.
        * Regression test suite now also tests the generated HTML.

2014-07-13 David A. Wheeler <dwheeler, at, dwheeler.com>
        * Release 1.28
        * Common Weakness Enumeration (CWE) references are
          now included in most hits
        * Handle files not ending in newline (thanks to Alexis Wilke)
        * Documentation clarifications
        * Added support for "git diff" in patchfile processing
        * Handles unbalanced double-quotes in sprintf
        * Fix incorrect time executed report
        * Fix bug to allow "flawfinder ." (fix bug#3)
        * Fix ignore directive when filenames differ (fix bug#6)

diffstat:

 security/flawfinder/Makefile |  6 +++---
 security/flawfinder/distinfo |  8 ++++----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (33 lines):

diff -r 5cca85a56013 -r 7b7c5be5e469 security/flawfinder/Makefile
--- a/security/flawfinder/Makefile      Wed Mar 11 00:23:29 2015 +0000
+++ b/security/flawfinder/Makefile      Wed Mar 11 00:51:06 2015 +0000
@@ -1,13 +1,13 @@
-# $NetBSD: Makefile,v 1.23 2014/05/17 16:10:48 wiz Exp $
+# $NetBSD: Makefile,v 1.24 2015/03/11 00:51:06 mef Exp $
 
-DISTNAME=      flawfinder-1.27
-PKGREVISION=   4
+DISTNAME=      flawfinder-1.31
 CATEGORIES=    security devel
 MASTER_SITES=  http://www.dwheeler.com/flawfinder/
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      http://www.dwheeler.com/flawfinder/
 COMMENT=       Python program to find flaws in C/C++ programs
+LICENSE=       gnu-gpl-v2
 
 NO_BUILD=              yes
 REPLACE_PYTHON=        flawfinder
diff -r 5cca85a56013 -r 7b7c5be5e469 security/flawfinder/distinfo
--- a/security/flawfinder/distinfo      Wed Mar 11 00:23:29 2015 +0000
+++ b/security/flawfinder/distinfo      Wed Mar 11 00:51:06 2015 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.7 2007/01/17 21:48:25 adrianp Exp $
+$NetBSD: distinfo,v 1.8 2015/03/11 00:51:06 mef Exp $
 
-SHA1 (flawfinder-1.27.tar.gz) = 0af702c1e0cbd0385a78be6ef1f2f7752ba6193f
-RMD160 (flawfinder-1.27.tar.gz) = edd41227c99d2b3c4869396d4e34dfd954e9eab6
-Size (flawfinder-1.27.tar.gz) = 123086 bytes
+SHA1 (flawfinder-1.31.tar.gz) = d20f64bf75877f62f63b5115201f31d85df52373
+RMD160 (flawfinder-1.31.tar.gz) = 8a96954f1f582e2f2b56590cadeac69c29c2dc88
+Size (flawfinder-1.31.tar.gz) = 174148 bytes



Home | Main Index | Thread Index | Old Index