pkgsrc-WIP-changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

dpbox: update to 6.1.2



Module Name:	pkgsrc-wip
Committed By:	Chris Maness <christopher.maness%gmail.com@localhost>
Pushed By:	kq6up
Date:		Mon Jul 13 14:10:10 2026 -0700
Changeset:	b39c20d7a05544287ef861d47d6411c97371cf35

Modified Files:
	dpbox/Makefile
	dpbox/distinfo

Log Message:
dpbox: update to 6.1.2

Fixes two stack buffer overflows caught on Linux/glibc with FORTIFY:

- dp_vnr_sub was declared char[4] but holds a 6-character version
  suffix, overflowing at startup in init_box().
- gen_sftest() declared STR7[100] but passed 255 as the snprintf bound.
  A MYBBS command carrying a hierarchical address overran the buffer.
  On platforms whose libc does not fortify, this presented as an
  intermittent, optimization-dependent crash.

Also adds unconditional <time.h> includes (they were reachable only
inside an #ifdef __macos__ branch) and bounds two strcpy calls into
calltype.

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=b39c20d7a05544287ef861d47d6411c97371cf35

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 dpbox/Makefile | 8 ++++----
 dpbox/distinfo | 7 ++++---
 2 files changed, 8 insertions(+), 7 deletions(-)

diffs:
diff --git a/dpbox/Makefile b/dpbox/Makefile
index bd20228e11..fdafc7c092 100644
--- a/dpbox/Makefile
+++ b/dpbox/Makefile
@@ -1,9 +1,9 @@
 # $NetBSD$
 #
 
-DISTNAME=	dpbox-6.1.1
+DISTNAME=	dpbox-6.1.2
 CATEGORIES=	ham
-MASTER_SITES=	-https://github.com/kq6up/dpbox/archive/refs/tags/v6.1.1.tar.gz
+MASTER_SITES=	-https://github.com/kq6up/dpbox/archive/refs/tags/v6.1.2.tar.gz
 DIST_SUBDIR=	dpbox
 
 MAINTAINER=	pkgsrc-users%NetBSD.org@localhost
@@ -11,7 +11,7 @@ HOMEPAGE=	https://github.com/kq6up/dpbox
 COMMENT=	Multi-Protocol Amateur Packet Radio BBS
 LICENSE=	gnu-gpl-v2
 
-WRKSRC=		${WRKDIR}/dpbox-6.1.1/source
+WRKSRC=		${WRKDIR}/dpbox-6.1.2/source
 USE_TOOLS+=	gmake
 MAKE_FILE=	Makefile.netbsd
 
@@ -72,6 +72,6 @@ CONF_FILES=	${EGDIR}/dpbox.ini ${PKG_SYSCONFDIR}/dpbox.ini \
 
 post-build:
 	${SED} -e 's#@prefix@#${PREFIX}#g' \
-	< ${FILESDIR}/dpbox.ini > ${WRKDIR}/dpbox-6.1.1/dpbox.ini
+	< ${FILESDIR}/dpbox.ini > ${WRKDIR}/dpbox-6.1.2/dpbox.ini
 
 .include "../../mk/bsd.pkg.mk"
diff --git a/dpbox/distinfo b/dpbox/distinfo
index 8834cd0cc2..6b971baf4a 100644
--- a/dpbox/distinfo
+++ b/dpbox/distinfo
@@ -1,5 +1,6 @@
 $NetBSD$
 
-BLAKE2s (dpbox/dpbox-6.1.1.tar.gz) = 496fbddaf713a6536ca14037299648e9a22b730abd8e388563a2fbb0920d2409
-SHA512 (dpbox/dpbox-6.1.1.tar.gz) = 3dcae72a4ab3649647e60827bd0d3f6aab6aef9b04bda262644fc51b1a40faf88ee6a29a850f7a2299f3bbb5cb02b69369e72fc67bd24fbf2522de53bf735a52
-Size (dpbox/dpbox-6.1.1.tar.gz) = 954098 bytes
+BLAKE2s (dpbox/dpbox-6.1.2.tar.gz) = 6e2612a8610effe5eed37ada01aedc8812996ccd4c91ccbfbe73ff98c79236d2
+SHA512 (dpbox/dpbox-6.1.2.tar.gz) = 3918180a641b04e1ab9ec41fe935e59b8118677c8a3aeb644c3565c0380fef736aae7c2f03ace08d669b4aaa1a27d08ba346a183c736765074a5d1ab0f7621b6
+Size (dpbox/dpbox-6.1.2.tar.gz) = 954145 bytes
+SHA1 (patch-bl) = 7952964f1894be68e13a2dc7cdfcfaad78d9c4eb


Home | Main Index | Thread Index | Old Index