Hello community, here is the log from the commit of package libressl for openSUSE:Factory checked in at 2014-08-06 12:03:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libressl (Old) and /work/SRC/openSUSE:Factory/.libressl.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libressl" Changes: -------- New Changes file: --- /dev/null 2014-07-24 01:57:42.080040256 +0200 +++ /work/SRC/openSUSE:Factory/.libressl.new/libressl.changes 2014-08-06 12:03:40.000000000 +0200 @@ -0,0 +1,44 @@ +------------------------------------------------------------------- +Wed Aug 6 03:56:45 UTC 2014 - [email protected] + +- Update to new upstream release 2.0.4 +* This version includes more portability changes, as well as other + work. most noticable may be the deletion of the of the SRP code + (which has not been enabled in any LibreSSL release). +- Remove pkg-config files so "pkgconfig(libcrypto)" remains + unambiguous in the distro + +------------------------------------------------------------------- +Tue Jul 22 09:21:00 UTC 2014 - [email protected] + +- Update to new upstream release 2.0.3 +* This release includes a number of portability fixes, and also + includes some improvements to the fork detection support. +- Remove libressl-auxdal.diff, libressl-asn1test.diff + (solved upstream) + +------------------------------------------------------------------- +Wed Jul 16 12:56:59 UTC 2014 - [email protected] + +- Update to new upstream release 2.0.2 +* This release addresses the Linux forking and pid wrap issue + reported recently. +- Add libressl-auxval.diff (fix compile error), + libressl-asn1test.diff (fix testsuite failure) + +------------------------------------------------------------------- +Sun Jul 13 14:45:56 UTC 2014 - [email protected] + +- Update to new upstream release 2.0.1 +* This release includes a number of portability fixes based on + the initial feedback received. A few hardcoded compiler options + that were problematic on some systems as well as -Werror have + been removed. This release also includes pkg-config support. +- Remove libressl-rt.diff (solved differently upstream) + +------------------------------------------------------------------- +Sat Jul 12 09:15:26 UTC 2014 - [email protected] + +- Initial package (version 2.0.0) for build.opensuse.org +- Add libressl-no-punning.diff, libressl-rt.diff to fix build + errors New: ---- baselibs.conf libressl-2.0.4.tar.gz libressl-no-punning.diff libressl.changes libressl.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libressl.spec ++++++ # # spec file for package libressl # # Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: libressl Summary: An SSL/TLS protocol implementation License: OpenSSL Group: Development/Libraries/C and C++ Version: 2.0.4 Release: 0 Url: http://libressl.org/ #Git-Clone: git://github.com/libressl-portable/portable #DL-URL: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/ Source: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/%name-%version.tar.gz Source2: baselibs.conf Patch1: libressl-no-punning.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: fdupes BuildRequires: pkgconfig Conflicts: openssl %description LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It derives from OpenSSL, with the aim of refactoring the OpenSSL code so as to provide a more secure implementation. %package -n libcrypto30 Summary: An SSL/TLS protocol implementation Group: System/Libraries %description -n libcrypto30 The "crypto" library implements a wide range of cryptographic algorithms used in various Internet standards. The services provided by this library are used by the LibreSSL implementations of SSL, TLS and S/MIME, and they have also been used to implement SSH, OpenPGP, and other cryptographic standards. %package -n libssl27 Summary: An SSL/TLS protocol implementation Group: System/Libraries %description -n libssl27 LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It derives from OpenSSL, with the aim of refactoring the OpenSSL code so as to provide a more secure implementation. %package devel Summary: Development files for LibreSSL, an SSL/TLS protocol implementation Group: Development/Libraries/C and C++ Requires: libcrypto30 = %version Requires: libssl27 = %version Conflicts: libopenssl-devel %description devel LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. It derives from OpenSSL, with the aim of refactoring the OpenSSL code so as to provide a more secure implementation. This subpackage contains libraries and header files for developing applications that want to make use of libressl. %package devel-doc Summary: Documentation for the LibreSSL API Group: Documentation/Man %if 0%{?suse_version} >= 1130 BuildArch: noarch %endif Conflicts: openssl-doc %description devel-doc LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. This subpackage contains the manpages to the LibreSSL API. %prep %setup -q %patch -P 1 -p1 %build %configure --disable-static make %{?_smp_mflags} V=1 %install b="%buildroot" make install DESTDIR="$b" rm -f "$b/%_libdir"/*.la for i in "$b/%_mandir"/man*; do pushd "$i" for j in *.*; do mv "$j" "${j}ssl" done popd done rm -Rf "$b/%_libdir/pkgconfig" %check if ! make check %{?_smp_mflags}; then cat tests/test-suite.log exit 1 fi %post -n libcrypto30 -p /sbin/ldconfig %postun -n libcrypto30 -p /sbin/ldconfig %post -n libssl27 -p /sbin/ldconfig %postun -n libssl27 -p /sbin/ldconfig %files %defattr(-,root,root) %_bindir/openssl %_mandir/man1/*.1* %doc COPYING %files -n libcrypto30 %defattr(-,root,root) %_libdir/libcrypto.so.30* %files -n libssl27 %defattr(-,root,root) %_libdir/libssl.so.27* %files devel %defattr(-,root,root) %_includedir/openssl/ %_libdir/libcrypto.so %_libdir/libssl.so %files devel-doc %defattr(-,root,root) %_mandir/man3/*.3* %changelog ++++++ baselibs.conf ++++++ libcrypto30 libssl27 libressl-devel requires -libressl-<targettype> requires "libcrypto30-<targettype> = <version>" requires "libssl27-<targettype> = <version>" conflicts "libressl-devel-<targettype>" ++++++ libressl-no-punning.diff ++++++ From: Jan Engelhardt <[email protected]> Date: 2014-07-12 11:21:03.199722087 +0200 build: resolve compile abort due to type punning and -Werror gcc-4.8 said, upon `make check`: biotest.c: In function 'do_bio_get_host_ip_tests': biotest.c:101:3: error: dereferencing type-punned pointer will break strict-aliasing rules [-Werror=strict-aliasing] if (ret && ntohl(*((uint32_t *)ip)) != bgit->ip) { ^ biotest.c:104:8: error: dereferencing type-punned pointer will break strict-aliasing rules [-Werror=strict-aliasing] ntohl(*((uint32_t *)ip)), bgit->ip); ^ As "ip" may be not be properly aligned for uint32_t, copy it to a uint32_t before ntohling. --- tests/biotest.c | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) Index: libressl-2.0.0/tests/biotest.c =================================================================== --- libressl-2.0.0.orig/tests/biotest.c +++ libressl-2.0.0/tests/biotest.c @@ -77,15 +77,25 @@ struct bio_get_port_test bio_get_port_te #define N_BIO_GET_PORT_TESTS \ (sizeof(bio_get_port_tests) / sizeof(*bio_get_port_tests)) +#ifndef BUILD_BUG_ON_EXPR +# define BUILD_BUG_ON_EXPR(condition) (sizeof(char[1 - 2 * !!(condition)]) - 1) +#endif +#ifndef BUILD_BUG_ON +# define BUILD_BUG_ON(condition) ((void)BUILD_BUG_ON_EXPR(condition)) +#endif + static int do_bio_get_host_ip_tests(void) { struct bio_get_host_ip_test *bgit; unsigned char ip[4]; + uint32_t ipout; int failed = 0; size_t i; int ret; + BUILD_BUG_ON(sizeof(ip) != sizeof(ipout)); + for (i = 0; i < N_BIO_GET_IP_TESTS; i++) { bgit = &bio_get_host_ip_tests[i]; memset(ip, 0, sizeof(*ip)); @@ -98,10 +108,12 @@ do_bio_get_host_ip_tests(void) failed = 1; continue; } - if (ret && ntohl(*((uint32_t *)ip)) != bgit->ip) { + if (ret && + memcpy(&ipout, ip, sizeof(ip)) != NULL && + ntohl(ipout) != bgit->ip) { fprintf(stderr, "FAIL: test %zi (\"%s\") returned ip " "%x != %x\n", i, bgit->input, - ntohl(*((uint32_t *)ip)), bgit->ip); + ntohl(ipout), bgit->ip); failed = 1; } } -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
