pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/devel/zlib zlib: update to 1.2.13



details:   https://anonhg.NetBSD.org/pkgsrc/rev/a09a791f8f39
branches:  trunk
changeset: 386720:a09a791f8f39
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Fri Oct 14 07:43:57 2022 +0000

description:
zlib: update to 1.2.13

Replace the existing files (except files/Makefile) from upstream sources.
Add LICENSE file.
Clean up some pkglint.

Fixes CVE-2022-37434.

Changes in 1.2.13 (13 Oct 2022)
- Fix configure issue that discarded provided CC definition
- Correct incorrect inputs provided to the CRC functions
- Repair prototypes and exporting of new CRC functions
- Fix inflateBack to detect invalid input with distances too far
- Have infback() deliver all of the available output up to any error
- Fix a bug when getting a gzip header extra field with inflate()
- Fix bug in block type selection when Z_FIXED used
- Tighten deflateBound bounds
- Remove deleted assembler code references
- Various portability and appearance improvements

diffstat:

 devel/zlib/Makefile         |    5 +-
 devel/zlib/builtin.mk       |   14 +-
 devel/zlib/files/ChangeLog  |   26 +++-
 devel/zlib/files/LICENSE    |   22 ++++
 devel/zlib/files/README     |    4 +-
 devel/zlib/files/adler32.c  |    2 +-
 devel/zlib/files/compress.c |    8 +-
 devel/zlib/files/crc32.c    |   27 +++-
 devel/zlib/files/deflate.c  |  220 ++++++++++++++++++++++---------------------
 devel/zlib/files/deflate.h  |    6 +-
 devel/zlib/files/gzguts.h   |    1 -
 devel/zlib/files/gzlib.c    |    2 +-
 devel/zlib/files/gzread.c   |    8 +-
 devel/zlib/files/gzwrite.c  |    2 +-
 devel/zlib/files/infback.c  |   17 ++-
 devel/zlib/files/inflate.c  |    7 +-
 devel/zlib/files/inftrees.c |    4 +-
 devel/zlib/files/inftrees.h |    2 +-
 devel/zlib/files/trees.c    |  125 ++++++++++++------------
 devel/zlib/files/uncompr.c  |    6 +-
 devel/zlib/files/zconf.h    |   21 +++-
 devel/zlib/files/zlib.3     |    4 +-
 devel/zlib/files/zlib.h     |   20 ++--
 devel/zlib/files/zutil.c    |   18 ++-
 devel/zlib/files/zutil.h    |    3 +-
 25 files changed, 320 insertions(+), 254 deletions(-)

diffs (truncated from 1807 to 300 lines):

diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/Makefile
--- a/devel/zlib/Makefile       Fri Oct 14 00:17:10 2022 +0000
+++ b/devel/zlib/Makefile       Fri Oct 14 07:43:57 2022 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.59 2022/05/13 07:34:20 jperkin Exp $
+# $NetBSD: Makefile,v 1.60 2022/10/14 07:43:57 wiz Exp $
 
-DISTNAME=      zlib-1.2.12
-PKGREVISION=   1
+DISTNAME=      zlib-1.2.13
 CATEGORIES=    devel
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=libpng/}
 MASTER_SITES+= http://zlib.net/
diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/builtin.mk
--- a/devel/zlib/builtin.mk     Fri Oct 14 00:17:10 2022 +0000
+++ b/devel/zlib/builtin.mk     Fri Oct 14 07:43:57 2022 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: builtin.mk,v 1.16 2022/03/24 07:56:00 wiz Exp $
+# $NetBSD: builtin.mk,v 1.17 2022/10/14 07:43:57 wiz Exp $
 
 BUILTIN_PKG:=  zlib
 
@@ -28,7 +28,7 @@
 ### a package name to represent the built-in package.
 ###
 .if !defined(BUILTIN_PKG.zlib) && \
-    !empty(IS_BUILTIN.zlib:M[yY][eE][sS]) && \
+    ${IS_BUILTIN.zlib:M[yY][eE][sS]} && \
     empty(H_ZLIB:M__nonexistent__)
 BUILTIN_VERSION.zlib!=                                                 \
        ${AWK} '/\#define[      ]*ZLIB_VERSION/ {                       \
@@ -52,10 +52,10 @@
 .  else
 USE_BUILTIN.zlib=      ${IS_BUILTIN.zlib}
 .    if defined(BUILTIN_PKG.zlib) && \
-        !empty(IS_BUILTIN.zlib:M[yY][eE][sS])
+        ${IS_BUILTIN.zlib:M[yY][eE][sS]}
 USE_BUILTIN.zlib=      yes
 .      for _dep_ in ${BUILDLINK_API_DEPENDS.zlib}
-.        if !empty(USE_BUILTIN.zlib:M[yY][eE][sS])
+.        if ${USE_BUILTIN.zlib:M[yY][eE][sS]}
 USE_BUILTIN.zlib!=     \
        if ${PKG_ADMIN} pmatch ${_dep_:Q} ${BUILTIN_PKG.zlib:Q}; then   \
                ${ECHO} yes;                                            \
@@ -73,7 +73,7 @@
 # implementation.
 #
 .if defined(USE_ZLIB)
-.  if !empty(IS_BUILTIN.zlib:M[nN][oO])
+.  if ${IS_BUILTIN.zlib:M[nN][oO]}
 USE_BUILTIN.zlib=      no
 .  endif
 .endif
@@ -83,8 +83,8 @@
 ### solely to determine whether a built-in implementation exists.
 ###
 CHECK_BUILTIN.zlib?=   no
-.if !empty(CHECK_BUILTIN.zlib:M[nN][oO])
-.  if !empty(USE_BUILTIN.zlib:M[yY][eE][sS])
+.if ${CHECK_BUILTIN.zlib:M[nN][oO]}
+.  if ${USE_BUILTIN.zlib:M[yY][eE][sS]}
 
 BUILDLINK_TARGETS+=    fake-zlib-pc
 
diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/files/ChangeLog
--- a/devel/zlib/files/ChangeLog        Fri Oct 14 00:17:10 2022 +0000
+++ b/devel/zlib/files/ChangeLog        Fri Oct 14 07:43:57 2022 +0000
@@ -1,6 +1,18 @@
 
                 ChangeLog file for zlib
 
+Changes in 1.2.13 (13 Oct 2022)
+- Fix configure issue that discarded provided CC definition
+- Correct incorrect inputs provided to the CRC functions
+- Repair prototypes and exporting of new CRC functions
+- Fix inflateBack to detect invalid input with distances too far
+- Have infback() deliver all of the available output up to any error
+- Fix a bug when getting a gzip header extra field with inflate()
+- Fix bug in block type selection when Z_FIXED used
+- Tighten deflateBound bounds
+- Remove deleted assembler code references
+- Various portability and appearance improvements
+
 Changes in 1.2.12 (27 Mar 2022)
 - Cygwin does not have _wopen(), so do not create gzopen_w() there
 - Permit a deflateParams() parameter change as soon as possible
@@ -159,7 +171,7 @@
 - Fix types in contrib/minizip to match result of get_crc_table()
 - Simplify contrib/vstudio/vc10 with 'd' suffix
 - Add TOP support to win32/Makefile.msc
-- Suport i686 and amd64 assembler builds in CMakeLists.txt
+- Support i686 and amd64 assembler builds in CMakeLists.txt
 - Fix typos in the use of _LARGEFILE64_SOURCE in zconf.h
 - Add vc11 and vc12 build files to contrib/vstudio
 - Add gzvprintf() as an undocumented function in zlib
@@ -359,14 +371,14 @@
 - Use u4 type for crc_table to avoid conversion warnings
 - Apply casts in zlib.h to avoid conversion warnings
 - Add OF to prototypes for adler32_combine_ and crc32_combine_ [Miller]
-- Improve inflateSync() documentation to note indeterminancy
+- Improve inflateSync() documentation to note indeterminacy
 - Add deflatePending() function to return the amount of pending output
 - Correct the spelling of "specification" in FAQ [Randers-Pehrson]
 - Add a check in configure for stdarg.h, use for gzprintf()
 - Check that pointers fit in ints when gzprint() compiled old style
 - Add dummy name before $(SHAREDLIBV) in Makefile [Bar-Lev, Bowler]
 - Delete line in configure that adds -L. libz.a to LDFLAGS [Weigelt]
-- Add debug records in assmebler code [Londer]
+- Add debug records in assembler code [Londer]
 - Update RFC references to use http://tools.ietf.org/html/... [Li]
 - Add --archs option, use of libtool to configure for Mac OS X [Borstel]
 
@@ -1033,7 +1045,7 @@
     - Include additional header file on VMS for off_t typedef
 - Try to use _vsnprintf where it supplants vsprintf [Vollant]
 - Add some casts in inffast.c
-- Enchance comments in zlib.h on what happens if gzprintf() tries to
+- Enhance comments in zlib.h on what happens if gzprintf() tries to
   write more than 4095 bytes before compression
 - Remove unused state from inflateBackEnd()
 - Remove exit(0) from minigzip.c, example.c
@@ -1211,7 +1223,7 @@
 - Avoid gcc 2.8.0 comparison bug a little differently than zlib 1.0.8
 - in inftrees.c, avoid cc -O bug on HP (Farshid Elahi)
 - in zconf.h move the ZLIB_DLL stuff earlier to avoid problems with
-  the declaration of FAR (Gilles VOllant)
+  the declaration of FAR (Gilles Vollant)
 - install libz.so* with mode 755 (executable) instead of 644 (Marc Lehmann)
 - read_buf buf parameter of type Bytef* instead of charf*
 - zmemcpy parameters are of type Bytef*, not charf* (Joseph Strout)
@@ -1322,7 +1334,7 @@
 - use _fdopen instead of fdopen for MSC >= 6.0 (Thomas Fanslau)
 - added makelcc.bat for lcc-win32 (Tom St Denis)
 - in Makefile.dj2, use copy and del instead of install and rm (Frank Donahoe)
-- Avoid expanded $Id: ChangeLog,v 1.6 2022/03/29 22:09:41 wiz Exp $. Use "rcs -kb" or "cvs admin -kb" to avoid Id expansion
+- Avoid expanded $Id: ChangeLog,v 1.7 2022/10/14 07:43:57 wiz Exp $. Use "rcs -kb" or "cvs admin -kb" to avoid Id expansion
 - check for unistd.h in configure (for off_t)
 - remove useless check parameter in inflate_blocks_free
 - avoid useless assignment of s->check to itself in inflate_blocks_new
@@ -1567,7 +1579,7 @@
 - renamed deflateOptions as deflateInit2, call one or the other but not both
 - added the method parameter for deflateInit2
 - added inflateInit2
-- simplied considerably deflateInit and inflateInit by not supporting
+- simplified considerably deflateInit and inflateInit by not supporting
   user-provided history buffer. This is supported only in deflateInit2
   and inflateInit2
 
diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/files/LICENSE
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/devel/zlib/files/LICENSE  Fri Oct 14 07:43:57 2022 +0000
@@ -0,0 +1,22 @@
+Copyright notice:
+
+ (C) 1995-2022 Jean-loup Gailly and Mark Adler
+
+  This software is provided 'as-is', without any express or implied
+  warranty.  In no event will the authors be held liable for any damages
+  arising from the use of this software.
+
+  Permission is granted to anyone to use this software for any purpose,
+  including commercial applications, and to alter it and redistribute it
+  freely, subject to the following restrictions:
+
+  1. The origin of this software must not be misrepresented; you must not
+     claim that you wrote the original software. If you use this software
+     in a product, an acknowledgment in the product documentation would be
+     appreciated but is not required.
+  2. Altered source versions must be plainly marked as such, and must not be
+     misrepresented as being the original software.
+  3. This notice may not be removed or altered from any source distribution.
+
+  Jean-loup Gailly        Mark Adler
+  jloup%gzip.org@localhost          madler%alumni.caltech.edu@localhost
diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/files/README
--- a/devel/zlib/files/README   Fri Oct 14 00:17:10 2022 +0000
+++ b/devel/zlib/files/README   Fri Oct 14 07:43:57 2022 +0000
@@ -1,6 +1,6 @@
 ZLIB DATA COMPRESSION LIBRARY
 
-zlib 1.2.12 is a general purpose data compression library.  All the code is
+zlib 1.2.13 is a general purpose data compression library.  All the code is
 thread safe.  The data format used by the zlib library is described by RFCs
 (Request for Comments) 1950 to 1952 in the files
 http://tools.ietf.org/html/rfc1950 (zlib format), rfc1951 (deflate format) and
@@ -31,7 +31,7 @@
 issue of Dr.  Dobb's Journal; a copy of the article is available at
 http://marknelson.us/1997/01/01/zlib-engine/ .
 
-The changes made in version 1.2.12 are documented in the file ChangeLog.
+The changes made in version 1.2.13 are documented in the file ChangeLog.
 
 Unsupported third party contributions are provided in directory contrib/ .
 
diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/files/adler32.c
--- a/devel/zlib/files/adler32.c        Fri Oct 14 00:17:10 2022 +0000
+++ b/devel/zlib/files/adler32.c        Fri Oct 14 07:43:57 2022 +0000
@@ -3,7 +3,7 @@
  * For conditions of distribution and use, see copyright notice in zlib.h
  */
 
-/* @(#) $Id: adler32.c,v 1.5 2022/03/29 22:09:41 wiz Exp $ */
+/* @(#) $Id: adler32.c,v 1.6 2022/10/14 07:43:57 wiz Exp $ */
 
 #include "zutil.h"
 
diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/files/compress.c
--- a/devel/zlib/files/compress.c       Fri Oct 14 00:17:10 2022 +0000
+++ b/devel/zlib/files/compress.c       Fri Oct 14 07:43:57 2022 +0000
@@ -3,7 +3,7 @@
  * For conditions of distribution and use, see copyright notice in zlib.h
  */
 
-/* @(#) $Id: compress.c,v 1.6 2022/03/29 22:09:41 wiz Exp $ */
+/* @(#) $Id: compress.c,v 1.7 2022/10/14 07:43:57 wiz Exp $ */
 
 #define ZLIB_INTERNAL
 #include "zlib.h"
@@ -19,7 +19,7 @@
    memory, Z_BUF_ERROR if there was not enough room in the output buffer,
    Z_STREAM_ERROR if the level parameter is invalid.
 */
-int ZEXPORT compress2 (dest, destLen, source, sourceLen, level)
+int ZEXPORT compress2(dest, destLen, source, sourceLen, level)
     Bytef *dest;
     uLongf *destLen;
     const Bytef *source;
@@ -65,7 +65,7 @@
 
 /* ===========================================================================
  */
-int ZEXPORT compress (dest, destLen, source, sourceLen)
+int ZEXPORT compress(dest, destLen, source, sourceLen)
     Bytef *dest;
     uLongf *destLen;
     const Bytef *source;
@@ -78,7 +78,7 @@
      If the default memLevel or windowBits for deflateInit() is changed, then
    this function needs to be updated.
  */
-uLong ZEXPORT compressBound (sourceLen)
+uLong ZEXPORT compressBound(sourceLen)
     uLong sourceLen;
 {
     return sourceLen + (sourceLen >> 12) + (sourceLen >> 14) +
diff -r c2b91eda0bd2 -r a09a791f8f39 devel/zlib/files/crc32.c
--- a/devel/zlib/files/crc32.c  Fri Oct 14 00:17:10 2022 +0000
+++ b/devel/zlib/files/crc32.c  Fri Oct 14 07:43:57 2022 +0000
@@ -7,7 +7,7 @@
  * Kadatch and Jenkins (2010). See doc/crc-doc.1.0.pdf in this distribution.
  */
 
-/* @(#) $Id: crc32.c,v 1.6 2022/05/13 07:34:20 jperkin Exp $ */
+/* @(#) $Id: crc32.c,v 1.7 2022/10/14 07:43:57 wiz Exp $ */
 
 /*
   Note on the use of DYNAMIC_CRC_TABLE: there is no mutex or semaphore
@@ -98,13 +98,22 @@
 #  endif
 #endif
 
+/* If available, use the ARM processor CRC32 instruction. */
+#if defined(__aarch64__) && defined(__ARM_FEATURE_CRC32) && W == 8
+#  define ARMCRC32
+#endif
+
 /* Local functions. */
 local z_crc_t multmodp OF((z_crc_t a, z_crc_t b));
 local z_crc_t x2nmodp OF((z_off64_t n, unsigned k));
 
-/* If available, use the ARM processor CRC32 instruction. */
-#if defined(__aarch64__) && defined(__ARM_FEATURE_CRC32) && W == 8
-#  define ARMCRC32
+#if defined(W) && (!defined(ARMCRC32) || defined(DYNAMIC_CRC_TABLE))
+    local z_word_t byte_swap OF((z_word_t word));
+#endif
+
+#if defined(W) && !defined(ARMCRC32)
+    local z_crc_t crc_word OF((z_word_t data));
+    local z_word_t crc_word_big OF((z_word_t data));
 #endif
 
 #if defined(W) && (!defined(ARMCRC32) || defined(DYNAMIC_CRC_TABLE))
@@ -645,8 +654,8 @@
     len &= 7;
 
     /* Do three interleaved CRCs to realize the throughput of one crc32x
-       instruction per cycle. Each CRC is calcuated on Z_BATCH words. The three
-       CRCs are combined into a single CRC after each set of batches. */
+       instruction per cycle. Each CRC is calculated on Z_BATCH words. The
+       three CRCs are combined into a single CRC after each set of batches. */
     while (num >= 3 * Z_BATCH) {
         crc1 = 0;
         crc2 = 0;
@@ -1086,7 +1095,7 @@
     uLong crc2;
     z_off_t len2;
 {
-    return crc32_combine64(crc1, crc2, len2);
+    return crc32_combine64(crc1, crc2, (z_off64_t)len2);



Home | Main Index | Thread Index | Old Index