aboutsummaryrefslogtreecommitdiffstats
path: root/src/package.c
Commit message (Collapse)AuthorAgeFilesLines
* adb: introduce apk-tools database format, and few appletsv3.0-wipTimo Teräs2020-04-011-3/+3
| | | | | | This is a flat buffers inspired format that allows fast mmaped access to the data with low overhead, signature support and relatively good forward support.
* Harden signature verification processReid Rankin2020-01-241-14/+19
| | | | | | | | | | This mostly boils down to making sure control_started and data_started are consistently used to gate actions, instead of relying whether on file names start with a '.'. None of the weaknesses this fixes are exploitable, but they might have become so after changes to seemingly-unrelated code, so it's good to clean them up.
* Improve documentation of signature verification processReid Rankin2020-01-241-7/+19
|
* archive: make apk_tar_parse check and close input streamTimo Teräs2020-01-111-10/+4
| | | | simplifies other code quite a bit
* convert remaining locations to use istream instead of bstreamTimo Teräs2020-01-111-6/+5
|
* istream, archive, db: convert db and tar function to use istreamTimo Teräs2020-01-111-10/+7
|
* archive: remove support for old packages without xattr checksumsTimo Teräs2020-01-111-1/+1
|
* del: report non-matching names and install-if rule non-deletionTimo Teräs2019-12-291-18/+17
|
* add support for openssl 1.1Timo Teräs2018-10-261-18/+19
|
* rework unpacking of packages and harden package file format requirementsTimo Teräs2018-09-101-7/+4
| | | | | | | | | | | | | | | | | | | A crafted .apk file could to trick apk writing unverified data to an unexpected file during temporary file creation due to bugs in handling long link target name and the way a regular file is extracted. Several hardening steps are implemented to avoid this: - the temporary file is now always first unlinked (apk thus reserved all filenames .apk.* to be it's working files) - the temporary file is after that created with O_EXCL to avoid races - the temporary file is no longer directly the archive entry name and thus directly controlled by potentially untrusted data - long file names and link target names are now rejected - hard link targets are now more rigorously checked - various additional checks added for the extraction process to error out early in case of malformed (or old legacy) file Reported-by: Max Justicz <max@justi.cz>
* Invalidate id cache after script executionJussi Kukkonen2018-07-021-0/+4
| | | | | | | | | | | | | It's common for a pre-install script to do something like addgroup -S group 2>/dev/null When apk installs files after this, it sets the owner/group based on id cache but currently the id cache is stale and doesn't contain the new group at that point: instead the file will be installed with gid that the build host happened to have for that group -- on target this might mean a non-existing group or a completely different group. We can't know if the script really did modify id cache contents so make sure to reset the id cache on every script execution.
* solver: implement support for choosing default virtualsWilliam Pitcock2017-11-021-0/+8
| | | | | | | | | | By introducing a new package metadata field, `provider_priority` (index letter `k`), we can specify default packages to satisfy a virtual. If a user wishes to select an alternative provider for the virtual, a changeset swapping the default provider for the selected provider will be generated by the dependency resolver.
* package: remove package script after use (fixes #7974)Timo Teräs2017-10-041-6/+9
| | | | | this is a regression introduced in commit 349c61c9 ("add support for pre and post commit hooks")
* io: make io vtables const struct, and add accessors for themTimo Teräs2017-06-231-15/+8
| | | | | This reduces function pointers in heap, and unifies how the io functions are called.
* version: add support for fuzzy version matchingWilliam Pitcock2017-05-271-4/+10
| | | | | This is useful for requirements such as: python3=~3.6, which would match python3-3.6.[0-9]. This implementation should in theory be backwards compatible with the implementation in Adelie.
* package: add more secure signature methodsTimo Teräs2017-02-281-20/+31
|
* add support for pre and post commit hooksHenrik Riomar2017-02-151-22/+2
| | | | | | | This allows for instance integration of etckeeper [TT: Reorganized code a bit, and modified to use single directory commit_hooks.d with argument for script of stage.]
* pkg: reset umask for package scriptsTimo Teräs2016-08-231-0/+1
| | | | | | | It is unreasonable to assume that all package writers would except to reset umask themselves. It's done currently in most packages, but we had first issue of this kind recently, so better just reset umask.
* commit: self-conflict error and satisfies printingTimo Teräs2015-12-101-6/+6
| | | | | | - self-conflicts when the exact same version of a name is provided twice is now properly detected and diagnozed - don't print redundant satisfies diagnostic
* for completeness free all arrays before exitTimo Teräs2015-06-121-0/+1
| | | | so valgrind does not report any leaks
* rename file info related functions for consistencyTimo Teräs2015-03-101-1/+1
|
* rework error handling for read streamsTimo Teräs2015-03-101-1/+3
|
* package: do not report duplicate reverse dependenciesTimo Teräs2014-04-101-1/+4
| | | | most notable in error report from 'del' applet
* apk: new option --no-scriptsTimo Teräs2013-09-101-2/+2
| | | | | to not run any per-package scripts. useful for managing buildroot when cross-compiling.
* solver: fix pinning+cache to workTimo Teräs2013-06-201-3/+2
| | | | | Mistakenly allowed masked out package to be installed if it was in cache.
* commit, db: make file conflicts and script errors non-fatalTimo Teräs2013-06-201-23/+18
| | | | fixes #1482
* db: store repository tag names including leading @Timo Teräs2013-06-181-5/+7
|
* apk: use string array in applet mains, separate apk_name_foreach_matchingTimo Teräs2013-06-181-6/+9
|
* all: various conversions to foreach_array_item, and simplifications of codeTimo Teräs2013-06-181-32/+23
|
* db: refactor repository file constructionTimo Teräs2013-06-171-23/+0
| | | | | Fixes also 'fetch' applet to prefer copying/linking to files from cache if possible.
* pkg: apk_pkg_foreach_* add matching generationTimo Teräs2013-06-151-6/+27
| | | | | | So same package it is possible to not match same package multiple times. Use generation count, so this is handled cleanly during recursion, like in the use case of search applet.
* lua: use apk_dep_analyzeTimo Teräs2013-06-151-22/+0
| | | | | and remove the now unused apk_dep_is_materialized_or_provided which was superceded by apk_dep_analyze.
* solver, errors: fix few additional test cases and clean upsTimo Teräs2013-06-131-8/+6
|
* pkg: add global reverse dependency iterator helpers and use themTimo Teräs2013-06-131-2/+57
| | | | ... in the error printing and the package deletion.
* errors: rewrite the logic how errors are reportedTimo Teräs2013-06-131-0/+34
| | | | | | | Instead of the dependency oriented logic, switch to print them for each package or name needed. Might give a bit more readable errors now. There's still few corner cases that proper error is not output, which are cought by the test cases.
* index: add sensible error message if metadata is too longTimo Teräs2013-05-301-3/+6
| | | | | | | | | | | fixes #1476 Instead of: ERROR: Index generation failed: Success The following is now printed: ERROR: Metadata for package timo-1.0-r0 is too long. ERROR: Index generation failed: No buffer space available
* pkg: honor --allow-untrusted when installing non-repository packagesTimo Teräs2012-04-031-13/+21
| | | | fixes #1072
* solver, test: make conflicts unconditionalTimo Teräs2012-02-291-29/+22
| | | | | | | Solver will now never report partial solution where a conflict constraint is not satisfied. The is because with --force we might install the partial solution; and if conflicted packages were to be installed we might have extra trouble.
* all: introduce apk_provides and use it in apk_nameTimo Teräs2012-02-241-11/+74
| | | | | | | in preparation for provides support. implements also some dependency satisfaction helper routines. ref #574.
* pkg: add field for provides as 'p'Timo Teräs2012-02-241-1/+7
| | | | ref #574
* pkg, db: use 's' for source repository tags instead of 'p'Timo Teräs2012-02-241-1/+1
| | | | Will use 'p' for provides.
* pkg: fix writing of versioned conflictsTimo Teräs2012-02-231-1/+1
|
* solver: implement backwards jumping and various other optimizationsTimo Teräs2012-02-211-2/+11
|
* solver, db: repository pinning improvementsTimo Teräs2012-02-151-1/+1
| | | | | | | | * solver internally calculates now using tags; not repository masks * installeddb now contains the tag name where the package came from -> we can now handle upgrades properly * the pinning is still a preference, and not strictly enforced; versioned dependencies may overrule preference
* db: record file uid/gid/mode in installed dbTimo Teräs2012-02-141-0/+1
|
* blob: optimize spn and cspnTimo Teräs2012-02-081-4/+13
|
* pkg, db: fix signature checking for files without control partTimo Teräs2012-01-311-7/+24
| | | | Also clean up handling of signature failures for index files.
* db: support line feed as 'world' dependency separatorTimo Teräs2012-01-121-49/+39
| | | | | * default writing the world with spaces if a space is found (for backwards compatibility) for now
* pkg: fix writing of deps with tag and version specifierTimo Teräs2012-01-061-4/+4
| | | | It is really name(@tag)(>=version).
* solver: report number of (mega)bytes usedTimo Teräs2011-12-271-2/+5
|
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-21 19:54:30 +0000