head 1.7; access; symbols pkgsrc-2013Q2:1.7.0.26 pkgsrc-2013Q2-base:1.7 pkgsrc-2012Q4:1.7.0.24 pkgsrc-2012Q4-base:1.7 pkgsrc-2011Q4:1.7.0.22 pkgsrc-2011Q4-base:1.7 pkgsrc-2011Q2:1.7.0.20 pkgsrc-2011Q2-base:1.7 pkgsrc-2009Q4:1.7.0.18 pkgsrc-2009Q4-base:1.7 pkgsrc-2008Q4:1.7.0.16 pkgsrc-2008Q4-base:1.7 pkgsrc-2008Q3:1.7.0.14 pkgsrc-2008Q3-base:1.7 cube-native-xorg:1.7.0.12 cube-native-xorg-base:1.7 pkgsrc-2008Q2:1.7.0.10 pkgsrc-2008Q2-base:1.7 pkgsrc-2008Q1:1.7.0.8 pkgsrc-2008Q1-base:1.7 pkgsrc-2007Q4:1.7.0.6 pkgsrc-2007Q4-base:1.7 pkgsrc-2007Q3:1.7.0.4 pkgsrc-2007Q3-base:1.7 pkgsrc-2007Q2:1.7.0.2 pkgsrc-2007Q2-base:1.7 pkgsrc-2007Q1:1.6.0.10 pkgsrc-2007Q1-base:1.6 pkgsrc-2006Q4:1.6.0.8 pkgsrc-2006Q4-base:1.6 pkgsrc-2006Q3:1.6.0.6 pkgsrc-2006Q3-base:1.6 pkgsrc-2006Q2:1.6.0.4 pkgsrc-2006Q2-base:1.6 pkgsrc-2006Q1:1.6.0.2 pkgsrc-2006Q1-base:1.6 pkgsrc-2005Q4:1.5.0.14 pkgsrc-2005Q4-base:1.5 pkgsrc-2005Q3:1.5.0.12 pkgsrc-2005Q3-base:1.5 pkgsrc-2005Q2:1.5.0.10 pkgsrc-2005Q2-base:1.5 pkgsrc-2005Q1:1.5.0.8 pkgsrc-2005Q1-base:1.5 pkgsrc-2004Q4:1.5.0.6 pkgsrc-2004Q4-base:1.5 pkgsrc-2004Q3:1.5.0.4 pkgsrc-2004Q3-base:1.5 pkgsrc-2004Q2:1.5.0.2 pkgsrc-2004Q2-base:1.5 pkgsrc-2004Q1:1.4.0.4 pkgsrc-2004Q1-base:1.4 pkgsrc-2003Q4:1.4.0.2 pkgsrc-2003Q4-base:1.4 netbsd-1-6-1:1.3.0.2 netbsd-1-6-1-base:1.3 netbsd-1-6:1.2.0.8 netbsd-1-6-RELEASE-base:1.2 pkgviews:1.2.0.4 pkgviews-base:1.2 buildlink2:1.2.0.2 buildlink2-base:1.2 netbsd-1-5-PATCH003:1.2 netbsd-1-5-PATCH001:1.2 netbsd-1-5-RELEASE:1.2 netbsd-1-4-PATCH003:1.2 netbsd-1-4-PATCH002:1.2; locks; strict; comment @# @; 1.7 date 2007.05.27.09.49.49; author schmonz; state dead; branches; next 1.6; 1.6 date 2006.01.29.02.40.40; author wiz; state Exp; branches; next 1.5; 1.5 date 2004.04.15.22.28.36; author wiz; state Exp; branches; next 1.4; 1.4 date 2003.07.12.09.19.20; author wiz; state Exp; branches; next 1.3; 1.3 date 2002.11.24.21.31.26; author hubertf; state Exp; branches; next 1.2; 1.2 date 2000.02.23.06.48.56; author mycroft; state Exp; branches; next 1.1; 1.1 date 2000.02.23.01.32.12; author mycroft; state Exp; branches; next ; desc @@ 1.7 log @Move cvs to scmcvs so it can be checked out on a case-insensitive filesystem without interference from devel/CVS metadata. PKGNAME stays the same. Discussed with agc. @ text @$NetBSD: patch-ay,v 1.6 2006/01/29 02:40:40 wiz Exp $ --- src/run.c.orig 2005-06-07 00:23:30.000000000 +0200 +++ src/run.c @@@@ -208,6 +208,13 @@@@ run_exec (stin, stout, sterr, flags) #endif if (pid == 0) { +#ifdef SETXID_SUPPORT + if (flags & RUN_UNSETXID) { + (void) setgid (getgid ()); + (void) setuid (getuid ()); + } +#endif + if (shin != 0) { (void) dup2 (shin, 0); @ 1.6 log @Update to 1.11.21: Changes since 1.11.20: ********************** BUG FIXES * Thanks to Serguei E. Leontiev, CVS with Kerberos 5 GSSAPI should automatically link on FreeBSD 5.x. (bug #14639). * Thanks to Rahul Bhargava, heavily loaded systems suffering from a disk crash or power failure will not lose data they claimed to have committed. * CVS server now handles conflict markers in Entry requests as documented. * CVS now remembers that binary file merge conflicts occurred until the timestamp of the updated binary file changes. * CVS client now saves some bandwidth by not sending the contents of files with conflicts to the server when it isn't needed. * CVS now does correct locking during import. * A problem where the server could block indefinitely waiting for an EOF from the client when compression was enabled has been fixed. * `cvs diff' no longer splits its arguments on spaces. * Thanks to an old report and patch from Stewart Brodie, a potential crash in response to a corrupt RCS file has been fixed. * CVS now locks the history and val-tags files before writing to them. Especially with large repositories, users should no longer see new warnings about corrupt history records when using the `cvs history' command. Existing corrupt history records will still need to be removed manually. val-tags corruption should have had less obvious effects, but removing the CVSROOT/val-tags file and allowing a 1.11.21 or later version of CVS to regenerate it may eliminate a few odd behaviors and possibly cause a slight speed up of read transactions in large repositories over time. @ text @d1 1 a1 1 $NetBSD: patch-ay,v 1.5 2004/04/15 22:28:36 wiz Exp $ @ 1.5 log @Update to 1.11.15 (security update): Changes since 1.11.14: ********************** SERVER SECURITY ISSUES * Piped checkouts of paths above $CVSROOT no longer work. Previously, clients could have requested the contents of RCS archive files anywhere on a CVS server. CLIENT SECURITY ISSUES * Clients now check paths from the server to verify that they are within one of the sandboxes the user requested be updated. Previously, a trojan server could have written or overwritten files anywhere the user had access, presenting a serious security risk. GENERAL USER ISSUES * Method options (used by WinCVS & CVS 1.12.7+) in CVSROOTs are ignored. * Configure no longer checks the $TMPDIR, $TMP, & $TEMP variables to set the default temporary directory. * CVS on Cygwin correctly handles X:\ style paths. * Import now uses backslash rather than slash on Windows when checking for "CVS" directories to ignore in import commands. * Relative paths containing up-references (`..') should now work in client/server mode (client fix). * A race condition between the ordering of messages from CVS and messages from called scripts in client/server mode has been removed (server fix). * Resurrected files now get their modes and timestamps set correctly and a longstanding bug involving resurrection of an uncommitted removal has been fixed (server fix). * Some resurrection (cvs add) status messages have changed slightly. * `cvs release' now works with Kerberos or GSSAPI encryption enabled (server fix). * File resurrection from a previously existing revision no longer just reports that it works (server fix). * Misc error & status message corrections. * Diffing of locally added files against arbitrary revisions in an RCS archive is now allowed when a file of the same name exists or used to exist on some branch (server fix). * Misc documentation fixes. Changes from 1.11.13 to 1.11.14: ******************************** GENERAL USER ISSUES * Imports will now always ignore directories and files named `CVS' to avoid violating assumptions made by other parts of CVS. * A problem with `cvs release' of subdirs that could corrupt CVS/Entries files has been fixed (client/server). * The CVS server's protocol check for unused data from the client is no longer called automatically at program exit in order to avoid potential recursive calls to error when the first close is due to memory allocation or similar problems that cause calls to error() to fail. The check is still made when the server program exits normally. * The spec file has been updated to work with more recent versions of RPM. * Several memory leaks have been plugged (client/server). DEVELOPER ISSUES * Misc cosmetic, readability, and commenting fixes. @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- src/run.c.orig Thu Apr 1 20:53:22 2004 d5 1 a5 1 @@@@ -191,6 +191,13 @@@@ run_exec (stin, stout, sterr, flags) @ 1.4 log @Update to 1.11.6. * A warning message is now issued if an administrative file contains more than one DEFAULT entry. * An error running a verifymsg script (such as referencing an unset user variable or the script not existing) now causes the verification to fail. * Errors in administrative files commands (like unset user variables) are no longer reported unless the command is actually executed. * When a file is initially checked out, its last access time is now set to the current time rather than being set to the time the file was last checked in like the modification time is. * The Checkin.prog and Update.prog functionality has been removed. This fuctionality previously allowed executables to be specified in the modules file to be run at update and checkin time, but users could edit these files on a per workspace basis, creating a security hole. [NB: already fixed in the package earlier -- wiz] * Corrected the path in a failed write error message. * Autoconf and Automake are no longer run automatically unless you run configure with --enable-maintainer-mode. Accordingly, noautomake.sh is no longer needed and has been removed. * We've standardized on Automake version 1.7.5 and Autoconf version 2.57 to get at a few new macros. Again, this should only really affect developers. See the section of the INSTALL file about using the autotools if you are compiling CVS yourself. @ text @d3 1 a3 1 --- src/run.c.orig Wed Feb 5 20:46:52 2003 d5 1 a5 1 @@@@ -189,6 +189,13 @@@@ run_exec (stin, stout, sterr, flags) @ 1.3 log @Update cvs to 1.11.2. Changes: Changes since 1.11.1p1: * The "log" and "rlog" commands now have a -S option to suppress the header information when no revisions are selected. * A serious error that allowed read-only users to tag files has been corrected. * The "annotate" command will no longer annotate binary files unless you specify the new -F option. * The "tag" and "rtag" commands will no longer move or delete branch tags unless you use the new -B option. (This prevents accidental changes to branch tags that are hard to undo.) * We've standardized on the 1.5 Automake release for the moment. Again, this should only really affect developers. See the section of the INSTALL file about using the autotools if you are compiling CVS yourself. Changes from 1.11.1 to 1.11.1p1: * Read only access was broken - now fixed. Changes from 1.11 to 1.11.1: * The "cvs diff" command now accepts the -y/--side=by-side and -T/ --initial-tab options. (To use these options with a remote repository, both the client and the server must support them.) * The expansion of the loginfo format string has changed slightly. Previously, the expansion was surrounded by single quotes ('); if a file name contained a single quote character, the string would not be parsed as a single entity by the Unix shell (and it would not be possible to parse it unambiguously). Now the expansion is surrounded by double quotes (") and any embedded dollar signs ($), backticks (`), backslashes (\), and double quotes are preceded by a backslash. This is parsed as a single entity by the shell reguardless of content. This change should not be noticable unless you're not using a Unix shell or you have embedded the format string inside a double quoted string. * There was a bug in the diff code which sometimes caused conflicts to be flagged which shouldn't have been. This has been fixed. * New "cvs rlog" and "cvs rannotate" commands have been added to get log messages and annotations without having to have a checked-out copy. * Exclusive revision ranges have been added to "cvs log" using :: (similar to "cvs admin -o"). * The VMS client now accepts wildcards if you're running VMS 7.x. * ZLIB has been updated to version 1.1.3, the most current version. This includes mostly some optimizations and minor bug fixes. * The ~/.cvspass file has a slightly modified format. CVSROOTs are now stored in a new canonical form - hostnames are now case insensitive and port numbers are always stored in the new format. Until a new login for a particular CVSROOT is performed with the new version of CVS, new and old versions of CVS should interoperate invisibly. After that point, an extra login using the old version of CVS may be necessary to continue to allow the new and old versions of CVS to interoperate using the same ~/.cvspass file and CVSROOT. The exception to this rule occurs when the CVSROOTs used with the different versions use case insensitively different hostnames, for example, "empress", and "empress.2-wit.com". * A password and a port number may now be specified in CVSROOT for pserver connections. The new format is: :pserver:[[user][:password]@@]host[:[port]]/path Note that passwords specified in a checkout command will be saved in the clear in the CVS/Root file in each created directory, so this is not recommended, except perhaps when accessing anonymous repositories or the like. * The distribution has been converted to use Automake. This shouldn't affect most users except to ease some portability concerns, but if you are building from the repository and encounter problems with the makefiles, you might try running ./noautomake.sh after a fresh update -AC. @ text @d3 1 a3 1 --- src/run.c.orig Wed Jan 24 04:35:10 2001 d5 1 a5 1 @@@@ -189,6 +189,13 @@@@ @ 1.2 log @Some more changes for set?id support. @ text @d1 1 a1 1 $NetBSD: patch-ay,v 1.1 2000/02/23 01:32:12 mycroft Exp $ d3 3 a5 3 --- src/run.c.orig Thu Dec 18 10:18:50 1997 +++ src/run.c Wed Feb 23 01:19:27 2000 @@@@ -188,6 +188,13 @@@@ @ 1.1 log @Fix a hole in SETXID_SUPPORT, but do not enable it by default yet. @ text @d1 1 a1 1 $NetBSD$ d4 2 a5 2 +++ src/run.c Tue Feb 22 20:25:09 2000 @@@@ -188,6 +188,10 @@@@ d10 1 a10 1 + if (flags & RUN_UNSETXID) d12 2 d15 1 @