Path to this page:
Subject: CVS commit: pkgsrc/devel/libdwarf
From: Kamil Rytarowski
Date: 2016-12-11 22:34:26
Message id: 20161211213426.B4EE7FBA6@cvs.NetBSD.org
Log Message:
Update 20160115 to 20161124
This includes security fixes.
Upstream changelog
==================
libdwarf-20161124
Fixes some newly discovered vulnerabilities (most due to corrupted DWARF). \
Thanks to Puzzor (Shi Ji) and Agostino Sarubbo for finding and reporting these \
and for providing short test cases.
libdwarf-20161021
Fixes one place where erroenous dwarf not caught, Updates version strings, adds \
a bit more DWARF5 support, and converts the few Python scripts from python2 to \
python3.
libdwarf-20161001
Fixes serious bugs in release 20160929 and all earlier releases relating to \
encoding/decoding leb numbers. It is unlikely anyone will see any difference in \
output, but values showing a difference can be constructed. libdwarf/dwarf_leb.c \
has new test code and a few of the tests there demonstrated problems. gcc \
-fsanitize=undefined found problems as well.
libdwarf-20160929
Fixes three serious bugs in release 20160923. Two of them old bugs, one new in \
20160923. The bugs were exposed by occasional inconsistent behavior in one or \
two regression tests.
libdwarf-20160923
DO NOT USE: use libdwarf-20161001 instead. Think of this as withdrawn. Many \
improvements in the code catching corrupt dwarf. Quite a number of places with \
out-of-bound read/write of memory fixed. Trivial but annoying memory leaks in \
dwarfdump fixed. Thanks to Puzzor, STARLAB, Salvatore Bonaccorso, Agostino \
Sarubbo, Vul, James Grumbach, and others for reporting memory corruption and \
other issues.
libdwarf-20160613
Incorporates code detecting malformed DWARF and malformed Elf object files. \
Dwarfdump and libdwarf performance reading frame data improved significantly, \
though the improvements don't apply to all frame data interface functions. The \
configure/make system now builds libdwarf shared objects (when asked to) with a \
proper soname. Thanks to Sture Carlson, Hannes Domani, etienneberg, Steve \
Kaufman, Yue Liu, and Fabian Wolff for their help/comments on libdwarf. Major \
thanks to Carlos Alberto Enciso for his collaboration.
libdwarf-20160507
Incorporates many additional checks so that corrupt dwarf will not crash an \
executable calling libdwarf. Thanks to Yue Liu for providing a number of small \
and corrupted objects.
Files: