pkgsrc-WIP-cvs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: wip/hs-aeson

Module name:    wip
Committed by:   szptvlfn
Date:           Sat Sep  6 13:32:00 UTC 2014

Modified Files:
        wip/hs-aeson: Makefile distinfo

Log Message:
Update to

Changes from
 - Actually fix the DoS vulnerability by using the scientific parser
   (Parse a number using the new scientific parser)
     The old rational parser applied realToFrac (fromRational . toRational)
         to the Scientific number to construct a new Scientific number. This
         the disadvantage that scientific numbers with big exponents like
         1e1000000000 are converted from (Scientific 1 1000000000) to
         (Scientific (1*10^1000000000) 0). If the Integer coefficient of the
         latter is later evaluated it will allocate all memory.

         This is the first step needed to fix #198.
 - Bump attoparsec dep
 - Constrain the bounds on attoparsec and scientific
 - Update import location of scientificBuilder for v0.3.0.0
 - Add warning about space-usage on the Fixed instance
 - Use Scientific.toRealFloat instead of realToFrac in scientificToNumber
 - Renamed fromRealFloat back to fromFloatDigits
 - Use Scientific.fromRealFloat and Scientific.toRealFloat
 - Use floor on Scientifics again
   scientific-0.3 provides a DoS safe floor.
 - Use scientific >= 0.3.1
   scientific-0.3.1 exports the Text and ByteString Scientific Builders
   from the following modules respectively:
   - Data.Text.Lazy.Builder.Scientific
   - Data.ByteString.Builder.Scientific
 - Improve parseJSON failure message for Either
   This fixes #193.
 - Export `withScientific` function in `Data.Aeson`
   Fixes #191.
 - Reduce duplication, simplify CPP macros

To generate a diff of this commit:
cvs -z3 rdiff -u -r1.11 -r1.12 wip/hs-aeson/
cvs -z3 rdiff -u -r1.13 -r1.14 wip/hs-aeson/Makefile
cvs -z3 rdiff -u -r1.5 -r1.6 wip/hs-aeson/distinfo

To view a diff of this commit:

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Slashdot TV.  
Video for Nerds.  Stuff that matters.
pkgsrc-wip-cvs mailing list

Home | Main Index | Thread Index | Old Index