openembedded-core.git/meta/recipes-devtools/subversion, branch master-next2

Revert "subversion: fix "svnadmin create" fail on x86"

2016-12-22T08:46:34+00:00

This reverts commit cfe6f3e251240c9d9a70354be0501600357f0b87.

This is because the apr configure wrong, when the apr configure meets the
cross compiling, it pass 8 bytes to "off_t", in apr source code configure.in,
it was hardcoded:

	APR_CHECK_SIZEOF_EXTENDED([#include ], off_t, 8)

The macro "APR_CHECK_SIZEOF_EXTENDED" was defined in build/apr_common.m4,
it use the "AC_TRY_RUN" macro, this macro let the off_t to 8, when cross
compiling enable.

But in glibc on the x86 or multilib target the "off_t" was 4 bytes, so this
cases dismatch for softwares which use the apr.h, such as subversion, run this:

	svnadmin create test

It failed because the "APR_OFF_T_FMT" was "lld" in apr.h when apr configure,
but the "apr_off_t" was 4 bytes, in the apr source code: apr_snprintf.c

	i_quad = va_arg(ap, apr_int64_t);

When the function apr_vformatter meets "lld", it would use the above to parse,
but the above read 8 bytes, so the follow-up data go to wrong.

So we should configure the apr correct when cross compiling. I do this on the
following patchs.

Signed-off-by: Dengke Du 
Signed-off-by: Ross Burton

subversion: Upgrade 1.9.4 -> 1.9.5

2016-12-17T09:50:25+00:00

(From OE-Core rev: 4cfb7e9342978e77b0167441360330e66b9931cb)

Signed-off-by: Richard Purdie

subversion: Fix issues in LDFLAGS sed manipulation

2016-12-07T13:58:41+00:00

The existing sed expression can match expressions like
--sysroot=/some/path/xxx-linux/ which clearly isn't intended and
injects incorrect paths into LDFLAGS.

Fix this in the same way we address the problem in CFLAGS. This fixes corrupt
build paths and incorrect paths in .la files amongst other issues.

Signed-off-by: Richard Purdie

subversion: fix "svnadmin create" fail on x86

2016-11-06T23:35:22+00:00

When run the following command on x86:

        svnadmin create /var/test_repo

It cause segmentation fault error like the following:

        [16499.751837] svnadmin[21117]: segfault at 83 ip 00000000f74bf7f6 sp 00000000ffdd9b34 error 4 in libc-2.24.so[f7441000+1af000]
        Segmentation fault (core dumped)

This is because in source code ./subversion/libsvn_fs_fs/low_level.c,
function svn_fs_fs__unparse_footer, when:

        target arch:    x86
        apr_off_t:      4 bytes

if the "APR_OFF_T_FMT" is "lld", it still use type "apr_off_t" to pass
data to apr, but in apr source code file apr_snprintf.c the function
apr_vformatter meet "lld", it would use the:

        i_quad = va_arg(ap, apr_int64_t);

It uses the apr_int64_t to deal data, it read 8 bytes, so the follow-up
data may be error.

Signed-off-by: Dengke Du 
Signed-off-by: Ross Burton

subversion: 1.9.3 -> 1.9.4

2016-08-25T21:59:28+00:00

Signed-off-by: Robert Yang 
Signed-off-by: Ross Burton

subversion: remove unnecessary python dependency

2016-06-01T07:04:11+00:00

It would be useful if swig was enabled, but it isn't.

Signed-off-by: Alexander Kanavin

subversion: Upgrade 1.9.2 -> 1.9.3

2016-01-13T00:03:52+00:00

Signed-off-by: Richard Purdie

subversion: update to 1.9.2

2015-12-12T23:31:43+00:00

Drop backported CVE fix patches
libtool2.patch has been rebased and renamed to 0001-Fix-libtool-name-in-configure.ac.patch
LICENSE checksum has been updated because more 3rd party attributions have been added to it,
it's otherwise still Apache 2.

Signed-off-by: Alexander Kanavin 
Signed-off-by: Ross Burton

subversion: fix CVE-2015-3187

2015-12-01T21:30:56+00:00

The svn_repos_trace_node_locations function in Apache Subversion before
1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used,
allows remote authenticated users to obtain sensitive path information
by reading the history of a node that has been moved from a hidden path.

Patch is from:
http://subversion.apache.org/security/CVE-2015-3187-advisory.txt

Signed-off-by: Wenzong Fan 
Signed-off-by: Ross Burton

subversion: fix CVE-2015-3184

2015-12-01T21:30:56+00:00

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before
1.8.14, when using Apache httpd 2.4.x, does not properly restrict
anonymous access, which allows remote anonymous users to read hidden
files via the path name.

Patch is from:
http://subversion.apache.org/security/CVE-2015-3184-advisory.txt

Signed-off-by: Wenzong Fan 
Signed-off-by: Ross Burton