CVS commit: pkgsrc/textproc/json-c

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sun Apr 20 00:09:04 UTC 2014

Modified Files:
        pkgsrc/textproc/json-c: Makefile PLIST buildlink3.mk distinfo

Log Message:
Update to 0.12

* Security update for CVE-2013-6370 and CVE-2013-6371
* Update API version

0.12

  * Address security issues:
    * CVE-2013-6371: hash collision denial of service
    * CVE-2013-6370: buffer overflow if size_t is larger than int

  * Avoid potential overflow in json_object_get_double

  * Eliminate the mc_abort() function and MC_ABORT macro.

  * Make the json_tokener_errors array local.  It has been deprecated for
     a while, and json_tokener_error_desc() should be used instead.

  * change the floating point output format to %.17g so values with
     more than 6 digits show up in the output.

  * Remove the old libjson.so name compatibility support.  The library is
      only created as libjson-c.so now and headers are only installed
      into the ${prefix}/json-c directory.

  * When supported by the linker, add the -Bsymbolic-functions flag.

  * Various changes to fix the build on MSVC.

  * Make strict mode more strict:
    * number must not start with 0
    * no single-quote strings
    * no comments
    * trailing char not allowed
    * only allow lowercase literals

  * Added a json_object_new_double_s() convenience function to allow
    an exact string representation of a double to be specified when
    creating the object and use it in json_tokener_parse_ex() so
    a re-serialized object more exactly matches the input.

  * Add support NaN and Infinity


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.7 pkgsrc/textproc/json-c/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/textproc/json-c/PLIST
cvs rdiff -u -r1.2 -r1.3 pkgsrc/textproc/json-c/buildlink3.mk \
    pkgsrc/textproc/json-c/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.