pkgsrc-WIP-cvs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: wip/hs-aeson
Module name: wip
Committed by: szptvlfn
Date: Sat Sep 6 13:32:00 UTC 2014
Modified Files:
wip/hs-aeson: Makefile buildlink3.mk distinfo
Log Message:
Update to 0.7.0.6
Changes from https://github.com/bos/aeson
0.7.0.6
- Actually fix the DoS vulnerability by using the scientific parser
(Parse a number using the new scientific parser)
The old rational parser applied realToFrac (fromRational . toRational)
to the Scientific number to construct a new Scientific number. This
had
the disadvantage that scientific numbers with big exponents like
1e1000000000 are converted from (Scientific 1 1000000000) to
(Scientific (1*10^1000000000) 0). If the Integer coefficient of the
latter is later evaluated it will allocate all memory.
This is the first step needed to fix #198.
0.7.0.5
- Bump attoparsec dep
- Constrain the bounds on attoparsec and scientific
- Update import location of scientificBuilder for v0.3.0.0
- Add warning about space-usage on the Fixed instance
- Use Scientific.toRealFloat instead of realToFrac in scientificToNumber
- Renamed fromRealFloat back to fromFloatDigits
- Use Scientific.fromRealFloat and Scientific.toRealFloat
- Use floor on Scientifics again
scientific-0.3 provides a DoS safe floor.
- Use scientific >= 0.3.1
scientific-0.3.1 exports the Text and ByteString Scientific Builders
from the following modules respectively:
- Data.Text.Lazy.Builder.Scientific
- Data.ByteString.Builder.Scientific
0.7.0.3
- Improve parseJSON failure message for Either
This fixes #193.
- Export `withScientific` function in `Data.Aeson`
Fixes #191.
- Reduce duplication, simplify CPP macros
To generate a diff of this commit:
cvs -z3 rdiff -u -r1.11 -r1.12 wip/hs-aeson/buildlink3.mk
cvs -z3 rdiff -u -r1.13 -r1.14 wip/hs-aeson/Makefile
cvs -z3 rdiff -u -r1.5 -r1.6 wip/hs-aeson/distinfo
To view a diff of this commit:
http://pkgsrc-wip.cvs.sourceforge.net/pkgsrc-wip/wip/hs-aeson/buildlink3.mk?r1=1.11&r2=1.12
http://pkgsrc-wip.cvs.sourceforge.net/pkgsrc-wip/wip/hs-aeson/Makefile?r1=1.13&r2=1.14
http://pkgsrc-wip.cvs.sourceforge.net/pkgsrc-wip/wip/hs-aeson/distinfo?r1=1.5&r2=1.6
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
------------------------------------------------------------------------------
Slashdot TV.
Video for Nerds. Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
pkgsrc-wip-cvs mailing list
pkgsrc-wip-cvs%lists.sourceforge.net@localhost
https://lists.sourceforge.net/lists/listinfo/pkgsrc-wip-cvs
Home |
Main Index |
Thread Index |
Old Index