head 1.4; access; symbols pkgsrc-2017Q1:1.3.0.54 pkgsrc-2017Q1-base:1.3 pkgsrc-2016Q4:1.3.0.52 pkgsrc-2016Q4-base:1.3 pkgsrc-2016Q3:1.3.0.50 pkgsrc-2016Q3-base:1.3 pkgsrc-2016Q2:1.3.0.48 pkgsrc-2016Q2-base:1.3 pkgsrc-2016Q1:1.3.0.46 pkgsrc-2016Q1-base:1.3 pkgsrc-2015Q4:1.3.0.44 pkgsrc-2015Q4-base:1.3 pkgsrc-2015Q3:1.3.0.42 pkgsrc-2015Q3-base:1.3 pkgsrc-2015Q2:1.3.0.40 pkgsrc-2015Q2-base:1.3 pkgsrc-2015Q1:1.3.0.38 pkgsrc-2015Q1-base:1.3 pkgsrc-2014Q4:1.3.0.36 pkgsrc-2014Q4-base:1.3 pkgsrc-2014Q3:1.3.0.34 pkgsrc-2014Q3-base:1.3 pkgsrc-2014Q2:1.3.0.32 pkgsrc-2014Q2-base:1.3 pkgsrc-2014Q1:1.3.0.30 pkgsrc-2014Q1-base:1.3 pkgsrc-2013Q4:1.3.0.28 pkgsrc-2013Q4-base:1.3 pkgsrc-2013Q3:1.3.0.26 pkgsrc-2013Q3-base:1.3 pkgsrc-2013Q2:1.3.0.24 pkgsrc-2013Q2-base:1.3 pkgsrc-2013Q1:1.3.0.22 pkgsrc-2013Q1-base:1.3 pkgsrc-2012Q4:1.3.0.20 pkgsrc-2012Q4-base:1.3 pkgsrc-2012Q3:1.3.0.18 pkgsrc-2012Q3-base:1.3 pkgsrc-2012Q2:1.3.0.16 pkgsrc-2012Q2-base:1.3 pkgsrc-2012Q1:1.3.0.14 pkgsrc-2012Q1-base:1.3 pkgsrc-2011Q4:1.3.0.12 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q3:1.3.0.10 pkgsrc-2011Q3-base:1.3 pkgsrc-2011Q2:1.3.0.8 pkgsrc-2011Q2-base:1.3 pkgsrc-2011Q1:1.3.0.6 pkgsrc-2011Q1-base:1.3 pkgsrc-2010Q4:1.3.0.4 pkgsrc-2010Q4-base:1.3 pkgsrc-2010Q3:1.3.0.2 pkgsrc-2010Q3-base:1.3 pkgsrc-2010Q2:1.2.0.6 pkgsrc-2010Q2-base:1.2 pkgsrc-2010Q1:1.2.0.4 pkgsrc-2010Q1-base:1.2 pkgsrc-2009Q4:1.2.0.2 pkgsrc-2009Q4-base:1.2; locks; strict; comment @# @; 1.4 date 2017.04.22.18.23.55; author taca; state dead; branches; next 1.3; commitid tDoWtAVFTjPkJyOz; 1.3 date 2010.09.10.03.29.00; author taca; state Exp; branches; next 1.2; 1.2 date 2010.01.14.15.07.28; author taca; state Exp; branches; next 1.1; 1.1 date 2010.01.10.15.33.28; author taca; state Exp; branches; next ; desc @@ 1.4 log @Remove ruby18 which is EOL almost 4 years ago. @ text @$NetBSD: patch-dy,v 1.3 2010/09/10 03:29:00 taca Exp $ Additional fix after webrick security fix. --- lib/webrick/httpstatus.rb.orig 2010-06-10 05:23:49.000000000 +0000 +++ lib/webrick/httpstatus.rb @@@@ -12,7 +12,7 @@@@ module WEBrick module HTTPStatus - class Status < StandardError + class Status < StandardError def initialize(*args) args[0] = AccessLog.escape(args[0]) unless args.empty? super(*args) @ 1.3 log @Update ruby18-base to 1.8.7.302 (Ruby 1.8.7 patchlevel 302). Since many changes from previous release, please refer http://www.ruby-lang.org/en/news/2010/08/16/ruby-1-8-7-p302-is-released/. Note: Since all security updates are already in previous package, This update dosen't include any securify fix. @ text @d1 1 a1 1 $NetBSD: patch-dy,v 1.2 2010/01/14 15:07:28 taca Exp $ @ 1.2 log @Fix a small problem by precious webrick security fix from Ruby's repositry (r26281). Also use COMPILER_RPATH_FLAG in Makefile. Bump PKGREVISION. @ text @d1 1 a1 1 $NetBSD: patch-dy,v 1.1 2010/01/10 15:33:28 taca Exp $ d3 1 a3 1 webrick security fix. d5 1 a5 3 http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection/ --- lib/webrick/httpstatus.rb.orig 2007-02-12 23:01:19.000000000 +0000 d7 1 a7 1 @@@@ -12,7 +12,18 @@@@ module WEBrick d11 1 a11 1 - class Status < StandardError; end d13 3 a15 47 + def initialize(*args) + args[0] = AccessLog.escape(args[0]) unless args.empty? + super(*args) + end + class << self + attr_reader :code, :reason_phrase + end + def code() self::class::code end + def reason_phrase() self::class::reason_phrase end + alias to_i code + end class Info < Status; end class Success < Status; end class Redirect < Status; end @@@@ -68,6 +79,7 @@@@ module WEBrick CodeToError = {} StatusMessage.each{|code, message| + message.freeze var_name = message.gsub(/[ \-]/,'_').upcase err_name = message.gsub(/[ \-]/,'') @@@@ -79,18 +91,12 @@@@ module WEBrick when 500...600; parent = ServerError end - eval %- - RC_#{var_name} = #{code} - class #{err_name} < #{parent} - def self.code() RC_#{var_name} end - def self.reason_phrase() StatusMessage[code] end - def code() self::class::code end - def reason_phrase() self::class::reason_phrase end - alias to_i code - end - - - - CodeToError[code] = const_get(err_name) + const_set("RC_#{var_name}", code) + err_class = Class.new(parent) + err_class.instance_variable_set(:@@code, code) + err_class.instance_variable_set(:@@reason_phrase, message) + const_set(err_name, err_class) + CodeToError[code] = err_class } def reason_phrase(code) @ 1.1 log @Add patches for security problem of webrick. http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection/ Bump PKGREVISION. @ text @d1 1 a1 1 $NetBSD$ d9 1 a9 1 @@@@ -12,7 +12,17 @@@@ module WEBrick d14 4 a17 3 + class Status < StandardError + def initialize(message=self.class, *rest) + super(AccessLog.escape(message), *rest) d29 1 a29 1 @@@@ -68,6 +78,7 @@@@ module WEBrick d37 1 a37 1 @@@@ -79,18 +90,12 @@@@ module WEBrick @