Sertonix authored 7 months ago and Timo Teräs committed 6 months ago

This avoids buffer constrains when printing dependencies.

Also fixes a null pointer dereference in apk_dep_snprintf by removing it.
apk -s add "a><$(printf %254s | tr ' ' '1')"
apk -s add "$(printf %255s | tr ' ' 'a')=1"

[TT: adjusted with s/PKG_DEP_/DEP_/g]

In case the array was already bump allocated, this resets it back
to the empty array. Otherwise the truncate would incorrectly modify
the previous package's dependency array to be zero length.

fixes 037e9140 package: refactor apk_package and apk_dependency_array to use bump allocation

The apk_package * changes on addition always now.

fixes 037e9140 package: refactor apk_package and apk_dependency_array to use bump allocation

fixes c2b4a43f db: refactor apk_checksum away from struct apk_db_file

- mkpkg: no longer calculate the field
- mkndx: unconditionally calculate unique-id as a hash
- implicitly enables v3 package authentication based on index hash

fixes #11008

ref #11008

- make identity a dynamic length array in the end
- add separate package template structure with identity storage

Keep a fixed sha1 sized buffer for the digest to simplify
conversion. The files in installeddb are not expected to
contain longer hashes for now. Eventually the whole struct
will go away so no point in trying to make it dynamically
sized digest at this time.

- unroll the base64 encoding main loop
- rename the base64 chunk functions to tail functions
- fixup push_b64_tail to not read beyond end of length
  (now that it is going to be used with raw data instead of
   struct apk_checksum)
- add (un)likely to optimize for sha1/sha256 length blobs

- allows for static, bump or dynamic allocation of the apk_dependencies
- use bump allocator for packages and dependencies
- adjust package reading to clone apk_package on insert to database

these are often shared in subpackages

xattrs are only present when the tar or extraction framework
makes a callback, so clean them up there explicitly.

speeds up things considerably

fixes #10995

This allows removing (and replacing with some other package)
a package providing the given name. Useful to e.g. allow
"apk del wine-staging" to enforce replacing it to "wine" if
"wine" is in other dependencies.

fixes #11015

Compare the correct version numbers so that the concrete
package selection works as inteded.

ref #11015

Unconditionally remove the corresponding .apk-new files within
protected paths.

fixes #10950

apk_notice will print to stderr without prefix. This avoids
printing any unintended output to stdout which could cause
breakage in file formats that some applets output to stdout.

fixes #10993

now users that want a static apk should do something like

 LDFLAGS="-static" meson setup build . -Ddefault_library=static -Dprefer_static=true

Erica Z authored 6 months ago and Timo Teräs committed 6 months ago

these are included from other header files that are already installed.