audit errors out due to swig munging it does with kernel headers
| audit_wrap.c: In function '_wrap_audit_rule_data_buf_set':
| audit_wrap.c:4701:17: error: cast specifies array type
| 4701 | arg1->buf = (char [])(char *)memcpy(malloc((size)*sizeof(char)), (const char *)(arg2), sizeof(char)*(size));
| | ^
| audit_wrap.c:4701:15: error: invalid use of flexible array member
| 4701 | arg1->buf = (char [])(char *)memcpy(malloc((size)*sizeof(char)), (const char *)(arg2), sizeof(char)*(size));
| | ^
| audit_wrap.c:4703:15: error: invalid use of flexible array member
| 4703 | arg1->buf = 0;
| | ^
These errors are due to VLAIS from kernel headers, so we copy
linux/audit.h and make the needed change in local audit.h and make
needed arrangements in build to use it when building audit package
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
This adds C++ bindings for Wayland as used e.g. in the Kodi project
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
We've bounced back and forth with the mixed libc/kernel module structure of
these drivers. In particular the location and content of stdarg.h has caused
compile problems, or can't be located.
In particular kernel versions have issues with stdarg.h and compatibility
with the sysroot and libc-headers/uapi. If we include the file directly from
the kernel source (STAGING_KERNEL_DIR) we get conflicting types on many
structures, due to kernel .h files being found before libc .h files. if we
grab just this one file from the source, and put it into our file structure,
everything holds together.
Plus, we get to drop a patch we are carrying to change the include of
stdarg.h
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ax_create_stdint_h.m4 includes $CC as a comment in the generated header
which leads to buildpaths warning:
| WARNING: yasm-1.3.0+gitAUTOINC+ba463d3c26-r0 do_package_qa: QA Issue: File /usr/include/libyasm-stdint.h in package yasm-dev contains reference to TMPDIR [buildpaths]
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
New features
---------------
-Both inbound and outbound clipboards can now be restricted for text, files or images
Bug fixes
-----------
-CVE-2022-23613: Privilege escalation on xrdp-sesman (This fix is also in the out-of-band v0.9.18.1 release)
-The versions of imlib2 used on RHEL 7 and 8 are now detected correctly (#2118)
-Some situations where zombie processes could exist have been resolved (#2146, #2151, #2168)
-Some null-pointer exceptions which can happen in the logging module have been addressed (#2149)
-Some minor logging errors have been corrected (#2152)
-The signal handling in sesman has been reworked to prevent race conditions
when a child exits. This has also made it possible to reliably reload the sesman configuration with SIGHUP (#1729, #2168)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Bump fmt to version 8.1.1.
Added file event handlers #2165, #2169 Thanks @seker.
You can get callbacks from spdlog before/after log file has been opened or closed.
This is useful for cleanup procedures or for adding something to the start/end of the log files. Example:
void file_events_example()
{
// pass the spdlog::file_event_handlers to file sinks for open/close log file notifications
spdlog::file_event_handlers handlers;
handlers.before_open = [](spdlog::filename_t filename) { spdlog::info("Before opening {}", filename); };
handlers.after_open = [](spdlog::filename_t filename, std::FILE *fstream) { fputs("After opening\n", fstream); };
handlers.before_close = [](spdlog::filename_t filename, std::FILE *fstream) { fputs("Before closing\n", fstream); };
handlers.after_close = [](spdlog::filename_t filename) { spdlog::info("After closing {}", filename); };
auto my_logger = spdlog::basic_logger_st("some_logger", "logs/events-sample.txt", true, handlers);
}
Fixed rotating file sink: when disk is full log rotation resulted zero size log files. #2261. (thanks @kishorekrd for reporting).
Added new udp_sink #2090. Thanks @CJLove
(Experimental) Option to depend on std::format instead of fmtlib (set SPDLOG_USE_STD_FORMAT and use C++20). #2170 Thanks @sylveon .
Improved file name for hourly file sink #2047. Thanks @seker .
Added code location information for error handler #2048. Thanks @D-r-P-3-p-p-3-r .
Fixed qt_sinks ctor #2056. Thanks @mguludag .
List Debian instructions in the README #2057. Thanks @mr-c ,
Updated to latest Travis CI Build Status #2094. Thanks @jspraul .
Fixed unhandled errors in udp sink. #2096. Thanks @mmarkeloff .
CMake improvement regarding cmake_minimum_required and policy. #2098. Thanks @reddwarf69 .
Fixed mongo_sink compile in older gcc versions #2102 . Thanks @yzz-ihep .
Remove mutable keyword from mutex_ member in of sinks. #2140 . Thanks @sunlong169 .
Fix typos #2171. Thanks @rex4539 .
Fixed udp sink build on FreeBSD #2172. Thanks @keith-dev .
Avoid c-style casting in stdout sinks. #2179. Thanks @ibmibmibm .
Fixed tweakme.h compile error under msvcs when SPDLOG_FUNCTION is defined #2182. Thanks @Light3039 .
Fixed compiling errors on AIX #2181. Thanks @lisr .
Fixed runtime when build with -fsanitize=cfi #1972. Thanks @bansan85 .
Remove extraneous semicolon #2190. Thanks @sylveon.
Added example how to replace default logger. #2194. Thanks @rioki .
Fixed usage of ranges and to_hex in the same compile unit #2195. Thanks @patrickroocks .
Reduce warnings with pedantic compiler -Wuseless-cast #2216. Thanks @vnepogodin .
Support using std::span in to_hex #2228. Thanks @timblechmann .
Reset current size if rotated files on open #2234. Thanks @SpriteOvO .
Allow forward-declaration of level_enum #2245. Thanks @daverigby .
Call localtime() only if pattern_formatter really needs it #2246. Thanks @doug1234 .
Removed unneeded spaces from code. #2249. Thanks @PixelParas .
Added a few missing files/directories to the gitignore #2255. Thanks @LeonBrands .
Fixed issue #2201 (Pattern width is not applied for missing source information). #2269. Thanks @kyuheon-kr .
Limit max number of rotating files to 200000. (Fixed#1905). Thanks @surfycui (#2273)
pattern_formatter: fix reorder-ctor warning #2278. Thanks @adriweb .
Fixed spdlogConfig.cmake when built with SPDLOG_FMT_EXTERNAL_HO #2300. Thanks @adamcalhoon .
Fixed fopen_s(..) error handling when PREVENT_CHILD_FD is defined #2305. Thanks @nUl1.
Fixed compiler error when building on Windows with #define UNICODE #2317. Thanks @risa2000 .
Added option to enable formatting of systemd sink #2324, #2320. Thanks @Delgan .
Added optional "ident" argument to systemd sink constructor #2328. Thanks @Delgan .
Special thanks to @tt4g for his support in answering community questions and issues.
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a new PACKAGECONFIG switch for building C++ bindings for
imagemagick.
Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- enca support has been dropped
- add PACKAGECONFIG for asm
- build with asm support for x86_64
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The following patches removed since they're included in 1.12.1:
0001-fix-unbundled-PCRE2-dependency.patch
0002-remove-providers-unitialization.patch
Changelog:
==========
- GH #3677 PocoFoundationConfig.cmake should now check for PCRE2
- GH #3686 SIGSEGV in OSSL_PROVIDER_unload with static OpenSSL3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
Omit trailing dot in CPU temperature and add centigrade symbol for issue bbidulock/icewm#652.
If there is no WM active, then a request to restart will start icewm.
Don't create the ~/.icewm directory, unless required to save a file.
When showing the desktop, also minimize a focused fullscreen window.
Add support for COMPOUND_TEXT title names in WM_NAME strings for issue bbidulock/icewm#26.
Limit window dimensions to 32732 pixels in the icesh command.
Improve the truncation of titles for TaskBarTaskGrouping in issue bbidulock/icewm#658.
Let TaskBarShowAllWindows influence TaskBarTaskGrouping for issue bbidulock/icewm#560.
Update the TaskBarTaskGrouping menu, when tasks are added or removed.
Restore the 2.5.0 container handling of button presses for issue bbidulock/icewm#649.
Make the TaskBarGraphHeight preference themable for issue bbidulock/icewm#659.
Clarify which preferences are themable in icewm-preferences(5).
Update the translations for Macedonian and Swedish.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Noteworthy changes:
-------------------
Backported API to get peer accepted channel option flags
Backported API to get peer accepted channel names
Backported Stream_CheckAndLogRequiredLength
Backported #7954: Add server side handling for [MS-RDPET]
Backported #8010: Add server side handling for [MS-RDPECAM]
Backported #8041: Remove ALAW/ULAW codecs from linux backends (unreliable)
Backported #8051: Relieve CLIPRDR filename restriction when connecting to non-MS Windows servers
Backported #8048: TLS version control
Backported #7987: Add a new command line arg to enforce tls1.2
Fixed issues:
--------------
Fixed#7837: Prevent out of bound reads for FFMPEG
Backported #7859 and #7861: Unwind support for backtrace generation
Backported #7440: wlfreerdp appid
Backported #7832: RAIL window restore
Backported #7833: Refactored WinPR thread locking
Backported #7893: Mac rdpsnd memory leak fixes
Backported #7895: Mac audin memory leak fixes
Backported #7898: Automatic android versioning
Backported #7916: GFX 10.7 capability support
Backported #7949: Server RDPSND API improvements
Backported #7957: Server DVC API improvements
Backported #7760: Fixed osMinorType values
Backported #8013: Add missing osMajorType values
Backported #8076: Fix wrong usage of subband diffing flag (tile artifact fix)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The python3 related patch is no longer due to similar changes in the
project. This also requires changing the RDEPENDS to python3-core to
avoid package QA warnings.
Signed-off-by: Julian Haller <julian.haller@philips.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update the patch to make netgroup support optional to fit the commit
merged upstream [1], update the other patch depending on one of the
changes.
Without this update, a compilation using duktape with musl fails with:
| ../../../polkit-0.119/src/polkitbackend/polkitbackendduktapeauthority.c: In function 'js_polkit_user_is_in_netgroup':
| ../../../polkit-0.119/src/polkitbackend/polkitbackendduktapeauthority.c:1039:7: warning: implicit declaration of function 'innetgr' [-Wimplicit-function-declaration]
| 1039 | if (innetgr (netgroup,
| | ^~~~~~~
The main patch has been split in two, to apply the duktape part only when duktape is
applied.
[1] https://gitlab.freedesktop.org/polkit/polkit/-/commit/b57deee8178190a7ecc75290fa13cf7daabc2c66
Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
polkitd user has default access to /bin/sh, add --shell /bin/nologin
to remove default access to /bin/sh and avoid login through it.
Signed-off-by: Akash Hadke <akash.hadke@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog from 1.6.1 to 1.7.0:
==========
Stop generating the export header and just check it in
use target_compile_definitions
simplified code
Add docs for ThreadRange.
Add docs on Memory profiling (#1217).
Suppress GoogleTest warnings on windows (MSVC) too.
Expand documentation for unpacking arbitrary arguments.
Refine docs on changing cpufreq governor
Refine the User Guide CPU Frequency Scaling section
Fix some errors in Custom Statistics document demo code.
Cache PerfCounters instance in PerfCountersMeasurement
Fix cross compilation for macOS ARM builds in cibuildwheel
bump numby, as per dependabot
Use Win32 API only for Win32 apps
Add mutex when reading counters_ (Fixes#1335)
Avoid potential truncation issues for the integral type parameterized tests.
Expose default display reporter creation in public API
explicitly export public symbols
Check for macro existence before using
simplify reference to internal path
Introduce the possibility to customize the help printer function
move bzl file out of tools
resolve case sensitivity issues with WORKSPACE and workspace
Make generate_export_header.bzl work for Windows.
@platforms is magical; remove it from WORKSPACE.
restore BENCHMARK_MAIN()
Allow setting the default time unit globally
Add long description and content type for proper PyPI presentation
Add SetBenchmarkFilter() to set --benchmark_filter flag value in user code
Add PyPI upload job to wheel building workflow
Fix float comparaison and add float comparison warning
Add BENCHMARK_STATIC_DEFINE to the Python bindings' cc_binary local…
Remove conditional trigger from PyPI upload job
Change artifact download name to dist to match upload name
Build //:benchmark as a static library only.
Fix Bazel build breakage caused by commit 6a894bd.
[nfc] Reformat doc-string in generate_export_header
Updates for inclusive language
getting sysinfo in line with Google style
Small optimization to counter map management
Shut down Bazel gracefully and revert wheel build strategy to job matrix
Fix wheel job name for PyPI uploads
Filter out benchmarks that start with "DISABLED_"
Add benchmark labels to the output of the comparison tool
Enable -Wconversion
Add installation and build instructions for Python bindings
fix some typos
Add option to get the verbosity provided by commandline flag -v (#1330)
Add support to get clock for new architecture CSKY
Introduce warmup phase to BenchmarkRunner (#1130)
Report large numbers in scientific notation in console reporter (#1303)
add multiple OSes to bazel workflow
Add possibility to ask for libbenchmark version number (#1004)
Fix DoNotOptimize() GCC copy overhead (#1340)
Clarify that the cpu frequency is not used for benchmark timings.
Revert "Add possibility to ask for libbenchmark version number (#1004)"
Remove redundant formatting tags
Fix DoNotOptimize() GCC compile error with some types (#1340)
Expose default help printer function
fix sanitizer builds by using clang 13
Suppress nvcc offsetof warning
Expose google_benchmark.State for python bindings.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
This release includes a number of improvements:
Memory management improvements
Shellcheck improvements
CMake improvements
Add yaml-cpp support
Fixes for PocoJson
Support for time-related format validations
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Upgrade urgency: SECURITY, contains fixes to security issues.
Security Fixes:
----------------
(CVE-2022-31144) A specially crafted XAUTOCLAIM command on a stream
key in a specific state may result with heap overflow, and potentially
remote code execution. The problem affects Redis versions 7.0.0 or newer.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-cmake-Use-CMAKE_INSTALL_LIBDIR-from-GNUInstallDirs.patch
removed since it's included in 1.3.5
Changelog:
==========
Ensure running async callback when error happens.
Add sentinel support for coroutine interface.
Add publish command for async interface.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
Fix passing of error message from substream callback (#703)
Fix comments going to wrong member variables (#701)
Fix regression in 0.4.3 where generator did not find all dependencies (#720)
Fix FindNanopb.cmake not finding options file (#659)
Fix double-definition errors with size_union (#692)
Fix generator error with same inner message name (#746)
Fix infinite recursion in generator/protoc script (#762)
Fix unicode comment handling for Python 2 (#740)
Fix compiler warnings with PB_BUFFER_ONLY (#717)
Fix options dependency in nanopb.mk (#666)
Fix handling of filenames with dot in them in FindNanopb.cmake (#756)
Add fallback_type option (#772, #773)
Use C11 static assert mechanism by default (#761, #766)
Use 'static_assert' keyword for iar (#679)
Explicitly check for pItem == NULL to satisfy Xcode analyzer (#667, #674)
Support --proto-path as alias to -I (#749)
Refactor name mangling to separate class, improve error messages (#735)
Move PB_WT_PACKED definition to the header to fix compiler warnings (#671)
FindNanopb.cmake: use --nanopb_opt for option passing by default (#752)
FindNanopb.cmake: Add option NANOPB_GENERATE_CPP_STANDALONE (#741)
FindNanopb.cmake: Add PROTOC_OPTIONS variable (#768, #771)
CMakeLists: add build interface for using as a submodule (#669)
CMakeLists: fix error with nanopb_BUILD_GENERATOR=OFF (#764)
CMakeLists: make more uniform (#676)
CMakeLists: Fix uninitialized PYTHON_INSTDIR (#652)
Clean up CMake examples (#741)
Rebuild nanopb_pb2.py and print version numbers on import failure (#733, #742)
Use memcpy instead of iterating on buf_read/write (#751)
Add generator support for PlatformIO (#718)
Add clean target to generator/proto/Makefile (#681)
Windows .bats: use standard python invocation instead of py.exe launcher (#657)
Fix problems running tests with newer SCons version
Improve handling of varint overflows
Improve optimization for little-endian platforms
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
* Build:
** Require libqmi 1.30.8.
* FCC unlock:
** Updated SDX55 unlock script to handle the new method introduced in
the latest firmware releases.
* Modem interface:
** Set signal quality to 0% on shutdown.
** Set signal quality as recent on init.
* MBIM:
** Fix task completion when peeking device fails.
** Fix several GError double-frees.
* mmcli:
** Don't print signal quality until modem is enabled.
* Plugins:
** foxconn: remove carrier mapping table for T99W175.
* Several other minor improvements and fixes.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Fixed using an explicitly provided PIN regardless of the secure login flag
Fixed RSA_PKCS1_PADDING handling
Fixed a crash on LLP64, including 64-bit Windows
Fixed searching objects when both ID and label are specified
Fixed the OAEP "source" parameter
Fixed object searching by label
Fixed thread safety in slot enumeration
Fixed storing certificates on tokens
Fixed several memory leaks
Fixed OpenSSL 3.0 compatibility
Fixed LibreSSL compatibility
Major concurrency improvements and refactoring
Added re-numeration of slots as an engine control command
Added the PKCS11_update_slots() API function
Added support for the SHA3 hash function
Added a self-test for engine RSA operations
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Adrian Zaharia
Khem Raj
Markus Volk
Lei Maohui
Bruce Ashfield
Anuj Mittal
wangmy
Bartosz Golaszewski
Paulo Neves
Julian Haller
Mingli Yu
Marta Rybczynska
Akash Hadke
Alexander Thoma
Radovan Scasny
Gianfranco
kazuki0824