1. 10 Jul, 2019 1 commit
  2. 09 Jul, 2019 2 commits
  3. 02 Jul, 2019 1 commit
    • Timo Teräs's avatar
      add: fix virtual package id generation · b45415b1
      Timo Teräs authored
      Fixes 37fbafcd by adding more input to the hash than just second
      grained time stamp - collisions would happen when running apk
      For virtual package the hash works only as unique identifier, so
      try to add elements that should make it unique in most cases.
      Fixes #10648
  4. 05 Jun, 2019 5 commits
  5. 03 Jun, 2019 2 commits
    • Timo Teräs's avatar
      use fixed system time in test mode to have fixed test output · 1c47f374
      Timo Teräs authored
      fixes test suite regression from previous commit
    • Timo Teräs's avatar
      add: make virtual packages upgradeable (ref #9957) · 37fbafcd
      Timo Teräs authored
      Originally the virtual packages could have dependencies added to it.
      However, commit b06e3b99 broke this behaviour to fix error reporting.
      The root cause however was that the virtual depedency package was not
      properly versioned.
      This fixes to use current date/time as the package version, and
      constructs the "faked" package hash from it. This effectively makes
      "add -t virtpkg deps.." replace the dependencies which should be the
      desired behaviour for "abuild deps".
      'world' dependency to the generated virtual package is also now
      versioned to make sure it get's upgraded.
  6. 28 May, 2019 1 commit
  7. 01 May, 2019 1 commit
    • A. Wilcox's avatar
      list: Detect orphaned packages correctly · 84941a59
      A. Wilcox authored
      BIT(1) corresponds with decimal 2, which is the first available repository.
      Before this fix, `apk list -O` would list every package installed from the
      first available repository, which is the 'system' repository on most Adélie
      Linux computers.
      After this fix, `apk list -O` correctly lists only the packages which are
      no longer available.
  8. 13 Feb, 2019 2 commits
  9. 10 Jan, 2019 1 commit
  10. 15 Nov, 2018 2 commits
  11. 12 Nov, 2018 3 commits
  12. 09 Nov, 2018 1 commit
  13. 02 Nov, 2018 5 commits
  14. 30 Oct, 2018 1 commit
    • Timo Teräs's avatar
      fix xattr hash to be sha1 · f38d1f74
      Timo Teräs authored
      The hash type was accidentally changed in previous commit. Currently
      csum->data cannot hold longer hash, so fix the hash.
  15. 26 Oct, 2018 1 commit
  16. 05 Oct, 2018 1 commit
  17. 25 Sep, 2018 2 commits
  18. 11 Sep, 2018 1 commit
  19. 10 Sep, 2018 3 commits
    • Timo Teräs's avatar
      apk-tools-2.10.1 · 11bd821c
      Timo Teräs authored
    • Timo Teräs's avatar
      rework unpacking of packages and harden package file format requirements · 6484ed98
      Timo Teräs authored
      A crafted .apk file could to trick apk writing unverified data to
      an unexpected file during temporary file creation due to bugs in handling
      long link target name and the way a regular file is extracted.
      Several hardening steps are implemented to avoid this:
       - the temporary file is now always first unlinked (apk thus reserved
         all filenames .apk.* to be it's working files)
       - the temporary file is after that created with O_EXCL to avoid races
       - the temporary file is no longer directly the archive entry name
         and thus directly controlled by potentially untrusted data
       - long file names and link target names are now rejected
       - hard link targets are now more rigorously checked
       - various additional checks added for the extraction process to
         error out early in case of malformed (or old legacy) file
      Reported-by: 's avatarMax Justicz <max@justi.cz>
    • Robert Hencke's avatar
      add .mailmap to consolidate git shortlog · b11f9aa9
      Robert Hencke authored
      Consolidate author information, so that tools like 'git shortlog' show
      a single entry for each author.
  20. 05 Sep, 2018 2 commits
  21. 21 Aug, 2018 1 commit
  22. 14 Aug, 2018 1 commit