testing/libuv
SHA256
3
0
Fork 0
forked from pool/libuv
Code Pull Requests Activity

Accepting request 1164081 from devel:libraries:c_c++

Browse Source 
- Update to version 1..48.0 
  * CVE-2024-24806: Improper Domain Lookup that potentially leads
    to SSRF attacks (bsc#1219724)
  * misc: remove deprecated stalebot file
  * misc: ignore libuv-release-tool files
  * build,win: remove extraneous -lshell32
  * build,win: work around missing uuid.dll on MinGW
  * build: disable windows asan buildbot
  * build: add .cache clangd folder to .gitignore
  * build: re-enable msvc-asan job on CI
  * linux: disable io_uring on hppa below kernel 6.1.51
  * linux: remove HAVE_IFADDRS_H macro
  * linux: fix bind/connect for abstract sockets
  * linux: retry fs op if unsupported by io_uring
  * linux: disable io_uring on ppc64 and ppc64le
  * unix,win: utility for setting priority for thread
  * unix,win: fix read past end of pipe name buffer
  * unix,win: fix busy loop with zero timeout timers
  * unix,win: reset the timer queue on stop
  * unix: ignore ifaddrs with NULL ifa_addr
  * unix: unbreak macOS < 10.14
  * unix: correct pwritev conditional
  * unix: support full TCP keep-alive on Solaris
  * unix: optimize uv__tcp_keepalive cpp directives
  * freebsd: fix F_KINFO file path handling
  * freebsd: fix build on non-intel archs
  * aix: disable ipv6 link local
  * aix,ibmi: use uv_interface_addresses instead of getifaddrs
  * win: remove check for UV_PIPE_NO_TRUNCATE
  * win: honor NoDefaultCurrentDirectoryInExePath env var

OBS-URL: https://build.opensuse.org/request/show/1164081
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libuv?expand=0&rev=35
This commit is contained in:
Ana Guerrero 2024-04-03 15:18:09 +00:00 committed by Git OBS Bridge
commit f4752db7d3
7 changed files with 73 additions and 50 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
libuv-v1.47.0.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:20c37a4ca77a2107879473c6c8fa0dc1350e80045df98bfbe78f7cd6d7dd2965
size 1304259

16
libuv-v1.47.0.tar.gz.sign
View File

@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=URgL
-----END PGP SIGNATURE-----

BIN
libuv-v1.48.0.tar.gz (Stored with Git LFS) Normal file
View File

Binary file not shown.

16
libuv-v1.48.0.tar.gz.sign Normal file
View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=6mql
-----END PGP SIGNATURE-----

53
libuv.changes
View File

@ -1,3 +1,56 @@
-------------------------------------------------------------------
Thu Mar 14 02:46:20 UTC 2024 - jun wang <jgwang@suse.com>
- Update to version 1..48.0
* CVE-2024-24806: Improper Domain Lookup that potentially leads
to SSRF attacks (bsc#1219724)
* misc: remove deprecated stalebot file
* misc: ignore libuv-release-tool files
* build,win: remove extraneous -lshell32
* build,win: work around missing uuid.dll on MinGW
* build: disable windows asan buildbot
* build: add .cache clangd folder to .gitignore
* build: re-enable msvc-asan job on CI
* linux: disable io_uring on hppa below kernel 6.1.51
* linux: remove HAVE_IFADDRS_H macro
* linux: fix bind/connect for abstract sockets
* linux: retry fs op if unsupported by io_uring
* linux: disable io_uring on ppc64 and ppc64le
* unix,win: utility for setting priority for thread
* unix,win: fix read past end of pipe name buffer
* unix,win: fix busy loop with zero timeout timers
* unix,win: reset the timer queue on stop
* unix: ignore ifaddrs with NULL ifa_addr
* unix: unbreak macOS < 10.14
* unix: correct pwritev conditional
* unix: support full TCP keep-alive on Solaris
* unix: optimize uv__tcp_keepalive cpp directives
* freebsd: fix F_KINFO file path handling
* freebsd: fix build on non-intel archs
* aix: disable ipv6 link local
* aix,ibmi: use uv_interface_addresses instead of getifaddrs
* win: remove check for UV_PIPE_NO_TRUNCATE
* win: honor NoDefaultCurrentDirectoryInExePath env var
* win: stop using deprecated names
* win: replace c99 comments with c89 comments
* win: fix ESRCH implementation
* win/spawn: optionally run executable paths with no file
extension
* test: don't run tcp_writealot under msan
* test: check if ipv6 link-local traffic is routable
* test: skip tcp-write-in-a-row on IBM i
* test: empty strings are not valid IDNA
* test_fs.c: Fix issue on 32-bit systems using btrfs
* idna: fix compilation warning
* pipe: add back error handling to connect / bind
* fix: always zero-terminate idna output
* fix: reject zero-length idna inputs
* doc: move cjihrig to emeriti
* doc: add very basic Security Policy document
* Merge pull request from GHSA-f74f-cvh7-c6q6
- Remove ppc64-disable-liburing.patch because it was applied
in the current source code
-------------------------------------------------------------------
Mon Jan 15 07:45:35 UTC 2024 - Dirk Müller <dmueller@suse.com>

4
libuv.spec
View File

@ -18,7 +18,7 @@
%define somajor 1
Name: libuv
Version: 1.47.0
Version: 1.48.0
Release: 0
Summary: Asychronous I/O support library
License: MIT
@ -29,8 +29,6 @@ Source1: https://dist.libuv.org/dist/v%{version}/libuv-v%{version}.tar.gz
Source2: %{name}.keyring
Source3: baselibs.conf
Patch1: fix_tests.patch
# PATCH-FIX-UPSTREAM: gh#libuv/libuv#4285
Patch2: ppc64-disable-liburing.patch
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: libtool

28
ppc64-disable-liburing.patch
View File

@ -1,28 +0,0 @@
From 08f4fb449048e22be034b26fa41fb0723189f2b8 Mon Sep 17 00:00:00 2001
From: Brad King <brad.king@kitware.com>
Date: Fri, 12 Jan 2024 15:02:22 -0500
Subject: [PATCH] linux: disable io_uring on ppc64 and ppc64le
Since `io_uring` support was added, libuv's signal handler randomly
segfaults on ppc64 when interrupting `epoll_pwait`. Disable it
pending further investigation.
Issue: https://github.com/libuv/libuv/issues/4283
---
src/unix/linux.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/src/unix/linux.c b/src/unix/linux.c
index 3c1313e7efc..4164e90dbb0 100644
--- a/src/unix/linux.c
+++ b/src/unix/linux.c
@@ -463,6 +463,9 @@ static int uv__use_io_uring(void) {
#elif defined(__arm__) && __SIZEOF_POINTER__ == 4
/* See https://github.com/libuv/libuv/issues/4158. */
return 0; /* All 32 bits kernels appear buggy. */
+#elif defined(__powerpc64__) || defined(__ppc64__)
+ /* See https://github.com/libuv/libuv/issues/4283. */
+ return 0; /* Random SIGSEGV in signal handler. */
#else
/* Ternary: unknown=0, yes=1, no=-1 */
static _Atomic int use_io_uring;