1. 05 Jun, 2019 2 commits
  2. 03 Jun, 2019 2 commits
    • Timo Teräs's avatar
      use fixed system time in test mode to have fixed test output · 1c47f374
      Timo Teräs authored
      fixes test suite regression from previous commit
    • Timo Teräs's avatar
      add: make virtual packages upgradeable (ref #9957) · 37fbafcd
      Timo Teräs authored
      Originally the virtual packages could have dependencies added to it.
      However, commit b06e3b99 broke this behaviour to fix error reporting.
      The root cause however was that the virtual depedency package was not
      properly versioned.
      This fixes to use current date/time as the package version, and
      constructs the "faked" package hash from it. This effectively makes
      "add -t virtpkg deps.." replace the dependencies which should be the
      desired behaviour for "abuild deps".
      'world' dependency to the generated virtual package is also now
      versioned to make sure it get's upgraded.
  3. 28 May, 2019 1 commit
  4. 01 May, 2019 1 commit
    • A. Wilcox's avatar
      list: Detect orphaned packages correctly · 84941a59
      A. Wilcox authored
      BIT(1) corresponds with decimal 2, which is the first available repository.
      Before this fix, `apk list -O` would list every package installed from the
      first available repository, which is the 'system' repository on most Adélie
      Linux computers.
      After this fix, `apk list -O` correctly lists only the packages which are
      no longer available.
  5. 13 Feb, 2019 2 commits
  6. 10 Jan, 2019 1 commit
  7. 15 Nov, 2018 2 commits
  8. 12 Nov, 2018 3 commits
  9. 09 Nov, 2018 1 commit
  10. 02 Nov, 2018 5 commits
  11. 30 Oct, 2018 1 commit
    • Timo Teräs's avatar
      fix xattr hash to be sha1 · f38d1f74
      Timo Teräs authored
      The hash type was accidentally changed in previous commit. Currently
      csum->data cannot hold longer hash, so fix the hash.
  12. 26 Oct, 2018 1 commit
  13. 05 Oct, 2018 1 commit
  14. 25 Sep, 2018 2 commits
  15. 11 Sep, 2018 1 commit
  16. 10 Sep, 2018 3 commits
    • Timo Teräs's avatar
      apk-tools-2.10.1 · 11bd821c
      Timo Teräs authored
    • Timo Teräs's avatar
      rework unpacking of packages and harden package file format requirements · 6484ed98
      Timo Teräs authored
      A crafted .apk file could to trick apk writing unverified data to
      an unexpected file during temporary file creation due to bugs in handling
      long link target name and the way a regular file is extracted.
      Several hardening steps are implemented to avoid this:
       - the temporary file is now always first unlinked (apk thus reserved
         all filenames .apk.* to be it's working files)
       - the temporary file is after that created with O_EXCL to avoid races
       - the temporary file is no longer directly the archive entry name
         and thus directly controlled by potentially untrusted data
       - long file names and link target names are now rejected
       - hard link targets are now more rigorously checked
       - various additional checks added for the extraction process to
         error out early in case of malformed (or old legacy) file
      Reported-by: default avatarMax Justicz <max@justi.cz>
    • Robert Hencke's avatar
      add .mailmap to consolidate git shortlog · b11f9aa9
      Robert Hencke authored
      Consolidate author information, so that tools like 'git shortlog' show
      a single entry for each author.
  17. 05 Sep, 2018 2 commits
  18. 21 Aug, 2018 1 commit
  19. 14 Aug, 2018 1 commit
  20. 18 Jul, 2018 1 commit
  21. 02 Jul, 2018 2 commits
    • Jussi Kukkonen's avatar
      Invalidate id cache after script execution · d609ef3c
      Jussi Kukkonen authored
      It's common for a pre-install script to do something like
          addgroup -S group 2>/dev/null
      When apk installs files after this, it sets the owner/group based on id cache
      but currently the id cache is stale and doesn't contain the new group at that
      point: instead the file will be installed with gid that the build host
      happened to have for that group -- on target this might mean a non-existing
      group or a completely different group.
      We can't know if the script really did modify id cache contents so make sure
      to reset the id cache on every script execution.
    • Sören Tempel's avatar
      list: fix segmentation fault with virtual packages · 5c4b90df
      Sören Tempel authored
      Virtual packages have the origin pointer set to NULL. Trying to print it
      using the BLOB_PRINTF macros causes a segmentation fault.
      Inspired by the `print_origin_name` function from `src/search.c` this
      commit attempts to fix it by checking whether `pkg->origin` is NULL
      before attempting to print it. If it is NULL the pkg name is printed
      Since printing the pkg name requires a different format string this
      commit splits the printf call for printing the package line into
      multiple ones. The output format shouldn't have changed at all though.
  22. 24 Jun, 2018 1 commit
  23. 14 Jun, 2018 3 commits