From nobody Fri Mar 18 13:12:29 2022 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id B47701A27A2D; Fri, 18 Mar 2022 13:12:33 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4KKkvN4tT4z4sRF; Fri, 18 Mar 2022 13:12:32 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from shw-obgw-4004a.ext.cloudfilter.net ([10.228.9.227]) by cmsmtp with ESMTP id UzQinvp1bgTZYVCPAn7dZY; Fri, 18 Mar 2022 13:12:32 +0000 Received: from spqr.komquats.com ([70.66.148.124]) by cmsmtp with ESMTPA id VCP8nvCpOd7RfVCP9nyRet; Fri, 18 Mar 2022 13:12:32 +0000 X-Authority-Analysis: v=2.4 cv=XrLphHJ9 c=1 sm=1 tr=0 ts=62348540 a=Cwc3rblV8FOMdVN/wOAqyQ==:117 a=Cwc3rblV8FOMdVN/wOAqyQ==:17 a=kj9zAlcOel0A:10 a=o8Y5sQTvuykA:10 a=YxBL1-UpAAAA:8 a=6I5d2MoRAAAA:8 a=EkcXrb_YAAAA:8 a=mDV3o1hIAAAA:8 a=l-j54pMhJti8MlwUV_EA:9 a=JOWeiY5itpwPQvuQ8dm/GawRuwE=:19 a=JkLgwNj587CqT4Bt:21 a=CjuIK1q_8ugA:10 a=Ia-lj3WSrqcvXOmTRaiG:22 a=IjZwj45LgO3ly-622nXo:22 a=LK5xJRSDVpKd5WXXoEvA:22 a=_FVE-zBwftR9WsbkzFJk:22 Received: from slippy.cwsent.com (slippy [10.1.1.91]) by spqr.komquats.com (Postfix) with ESMTP id EFEAD539; Fri, 18 Mar 2022 06:12:29 -0700 (PDT) Received: by slippy.cwsent.com (Postfix, from userid 1000) id D63BEE4; Fri, 18 Mar 2022 06:12:29 -0700 (PDT) X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.7+dev Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: Po-Chuan Hsieh cc: Cy Schubert , ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org Subject: Re: git: 9bdc78861688 - main - sysutils/screen: Update to 4.9.0 In-reply-to: References: <202203172344.22HNifI6099252@gitrepo.freebsd.org> Comments: In-reply-to Po-Chuan Hsieh message dated "Fri, 18 Mar 2022 17:49:51 +0800." List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 18 Mar 2022 06:12:29 -0700 Message-Id: <20220318131229.D63BEE4@slippy.cwsent.com> X-CMAE-Envelope: MS4xfO1ItWSAtrQRzqdwI6yUGf/lV5uchi0D4KB2y6TDIOpWCYSNapMd+pJn9jAeXTMtr/fxigMCbeZogomnBBXEyJgep8jXGtzl/m7g7jaqwYnOT/iYbiZQ nNWUHyxB9IJKX3T5+16G0wX/9baxJBKoxRp3xotbjcMgCuouxZMz/24fnJyKHBWVQw6UmICH7VGdQ/7sLWrmjEHYz89MdbJlybb/uitRsLN46IdDkx5s9W8I WGRwMHZeQ+iM7WxvGFk93OzBNy5jcXumhbNV6CdIMJ0tViSCtgSs1rBStpa1n0VdpZG9ZWtQ2iDNV2VvqX9bVxE9DlCgLRfPWnpIHeu7pL7EfmImOUx58TCR q2M03cQBX7mDcBTv6bNNr0a2hbMfdg== X-Rspamd-Queue-Id: 4KKkvN4tT4z4sRF X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of cy.schubert@cschubert.com has no SPF policy when checking 3.97.99.33) smtp.mailfrom=cy.schubert@cschubert.com X-Spamd-Result: default: False [-1.70 / 15.00]; HAS_REPLYTO(0.00)[Cy.Schubert@cschubert.com]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; RCPT_COUNT_FIVE(0.00)[5]; RCVD_COUNT_THREE(0.00)[4]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RECEIVED_SPAMHAUS_PBL(0.00)[70.66.148.124:received]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US]; MIME_TRACE(0.00)[0:+]; RCVD_IN_DNSWL_LOW(-0.10)[3.97.99.33:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.997]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[cschubert.com: no valid DMARC record]; AUTH_NA(1.00)[]; RCVD_TLS_LAST(0.00)[]; MLMMJ_DEST(0.00)[dev-commits-ports-all,dev-commits-ports-main]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_VERYGOOD(0.00)[3.97.99.33:from] X-ThisMailContainsUnwantedMimeParts: N Sorry about that. It should be fixed now. -- Cheers, Cy Schubert FreeBSD UNIX: Web: https://FreeBSD.org NTP: Web: https://nwtime.org The need of the many outweighs the greed of the few. In message , Po-Chuan Hsieh writes: > --0000000000009000ac05da7b1350 > Content-Type: text/plain; charset="UTF-8" > > On Fri, Mar 18, 2022 at 7:44 AM Cy Schubert wrote: > > > The branch main has been updated by cy: > > > > URL: > > https://cgit.FreeBSD.org/ports/commit/?id=9bdc788616889d0a2b3f9c8b8996610cd > fe82be7 > > > > commit 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 > > Author: Cy Schubert > > AuthorDate: 2022-03-17 17:54:50 +0000 > > Commit: Cy Schubert > > CommitDate: 2022-03-17 23:44:10 +0000 > > > > sysutils/screen: Update to 4.9.0 > > > > Update screen to 4.9.0. From the release announcement: > > > > New in this release: > > * Hardstatus option for used encoding (escape string '%e') > > > > Hi, > > It seems the SHOWENC option is no longer needed. > And it breaks the build as follows: > ===> Building for screen-4.9.0 > gmake[1]: Entering directory > '/usr/ports/works/usr/ports/sysutils/screen/work/screen-4.9.0' > CPP="cpp -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"'" srcdir=. sh > ./osdef.sh > AWK=/usr/bin/awk CC="cc -O2 -pipe -I/usr/include -DCOLORS256 > -fstack-protector-strong -fno-strict-aliasing " srcdir=. sh ./comm.sh > AWK=/usr/bin/awk srcdir=. sh ./term.sh > sh ./tty.sh tty.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing putenv.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing kmapdef.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing term.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing comm.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing screen.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing ansi.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing fileio.c > cc -c -I. -I. -DETCSCREENRC='"/usr/local/etc/screenrc"' > -DSCREENENCODINGS='"/usr/local/share/screen/utf8encodings"' -DHAVE_CONFIG_H > -DGIT_REV=\"\" \ > -O2 -pipe -I/usr/include -DCOLORS256 -fstack-protector-strong > -fno-strict-aliasing mark.c > screen.c:1215:5: warning: expression result unused [-Wunused-value] > *--av; > ^~~~~ > screen.c:2789:10: error: duplicate case value '101' > case 'e': > ^ > screen.c:2766:7: note: previous case defined here > case 'e': > ^ > 1 warning and 1 error generated. > > Regards, > sunpoet > > * Fixes: > > - fix combining char handling that could lead to a segfault > > - CVE-2021-26937: possible denial of service via a crafted UTF-8 > > character sequence (bug #60030) > > - make screen exit code be 0 when checking --help > > - session names limit is 80 symbols (bug #61534) > > - option -X ignores specified user in multiuser env (bug #37437) > > - a lot of reformations/fixes/cleanups (man page and source code) > > > > For full list of changes see > > https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.0 > > > > Note that CVE-2021-26937 was fixed in the FreeBSD port in 2021. > > --0000000000009000ac05da7b1350 > Content-Type: text/html; charset="UTF-8" > Content-Transfer-Encoding: quoted-printable > >
On Fri, Mar 18, 2022 at 7:44 AM Cy Schube= > rt <cy@freebsd.org> wrote:
<= > /div>=3D=3D=3D> =C2=A0Building for screen-4.9.0 r>gmake[1]: Entering directory '/usr/ports/works/usr/ports/sysutils/scr= > een/work/screen-4.9.0'
CPP=3D"cpp -DETCSCREENRC=3D'"/u= > sr/local/etc/screenrc"' -DSCREENENCODINGS=3D'"/usr/local/= > share/screen/utf8encodings"'" srcdir=3D. sh ./osdef.sh
AWK= > =3D/usr/bin/awk CC=3D"cc -O2 -pipe =C2=A0-I/usr/include -DCOLORS256 -f= > stack-protector-strong -fno-strict-aliasing " srcdir=3D. sh ./comm.sh<= > br>AWK=3D/usr/bin/awk srcdir=3D. sh ./term.sh
sh ./tty.sh tty.c
cc -c= > -I. -I. =C2=A0-DETCSCREENRC=3D'"/usr/local/etc/screenrc"'= > ; -DSCREENENCODINGS=3D'"/usr/local/share/screen/utf8encodings"= > ;' -DHAVE_CONFIG_H -DGIT_REV=3D\"\" \
=C2=A0 =C2=A0 =C2=A0= > -O2 -pipe =C2=A0-I/usr/include -DCOLORS256 -fstack-protector-strong -fno-st= > rict-aliasing =C2=A0putenv.c
cc -c -I. -I. =C2=A0-DETCSCREENRC=3D'&q= > uot;/usr/local/etc/screenrc"' -DSCREENENCODINGS=3D'"/usr/= > local/share/screen/utf8encodings"' -DHAVE_CONFIG_H -DGIT_REV=3D\&q= > uot;\" \
=C2=A0 =C2=A0 =C2=A0-O2 -pipe =C2=A0-I/usr/include -DCOLOR= > S256 -fstack-protector-strong -fno-strict-aliasing =C2=A0kmapdef.c
cc -c= > -I. -I. =C2=A0-DETCSCREENRC=3D'"/usr/local/etc/screenrc"'= > ; -DSCREENENCODINGS=3D'"/usr/local/share/screen/utf8encodings"= > ;' -DHAVE_CONFIG_H -DGIT_REV=3D\"\" \
=C2=A0 =C2=A0 =C2=A0= > -O2 -pipe =C2=A0-I/usr/include -DCOLORS256 -fstack-protector-strong -fno-st= > rict-aliasing =C2=A0term.c
cc -c -I. -I. =C2=A0-DETCSCREENRC=3D'&quo= > t;/usr/local/etc/screenrc"' -DSCREENENCODINGS=3D'"/usr/lo= > cal/share/screen/utf8encodings"' -DHAVE_CONFIG_H -DGIT_REV=3D\&quo= > t;\" \
=C2=A0 =C2=A0 =C2=A0-O2 -pipe =C2=A0-I/usr/include -DCOLORS2= > 56 -fstack-protector-strong -fno-strict-aliasing =C2=A0comm.c
cc -c -I. = > -I. =C2=A0-DETCSCREENRC=3D'"/usr/local/etc/screenrc"' -DS= > CREENENCODINGS=3D'"/usr/local/share/screen/utf8encodings"'= > ; -DHAVE_CONFIG_H -DGIT_REV=3D\"\" \
=C2=A0 =C2=A0 =C2=A0-O2 -= > pipe =C2=A0-I/usr/include -DCOLORS256 -fstack-protector-strong -fno-strict-= > aliasing =C2=A0screen.c
cc -c -I. -I. =C2=A0-DETCSCREENRC=3D'"/= > usr/local/etc/screenrc"' -DSCREENENCODINGS=3D'"/usr/local= > /share/screen/utf8encodings"' -DHAVE_CONFIG_H -DGIT_REV=3D\"\= > " \
=C2=A0 =C2=A0 =C2=A0-O2 -pipe =C2=A0-I/usr/include -DCOLORS256 = > -fstack-protector-strong -fno-strict-aliasing =C2=A0ansi.c
cc -c -I. -I.= > =C2=A0-DETCSCREENRC=3D'"/usr/local/etc/screenrc"' -DSCRE= > ENENCODINGS=3D'"/usr/local/share/screen/utf8encodings"' -= > DHAVE_CONFIG_H -DGIT_REV=3D\"\" \
=C2=A0 =C2=A0 =C2=A0-O2 -pip= > e =C2=A0-I/usr/include -DCOLORS256 -fstack-protector-strong -fno-strict-ali= > asing =C2=A0fileio.c
cc -c -I. -I. =C2=A0-DETCSCREENRC=3D'"/usr= > /local/etc/screenrc"' -DSCREENENCODINGS=3D'"/usr/local/sh= > are/screen/utf8encodings"' -DHAVE_CONFIG_H -DGIT_REV=3D\"\&qu= > ot; \
=C2=A0 =C2=A0 =C2=A0-O2 -pipe =C2=A0-I/usr/include -DCOLORS256 -fs= > tack-protector-strong -fno-strict-aliasing =C2=A0mark.c
screen.c:1215:5:= > warning: expression result unused [-Wunused-value]
=C2=A0 =C2=A0 *--av;= >
=C2=A0 =C2=A0 ^~~~~
screen.c:2789:10: error: duplicate case value &#= > 39;101'
=C2=A0 =C2=A0 case 'e':
=C2=A0 =C2=A0 =C2=A0 =C2= > =A0 =C2=A0^
screen.c:2766:7: note: previous case defined here
=C2=A0 = > =C2=A0 =C2=A0 =C2=A0 case 'e':
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= > =A0 =C2=A0 =C2=A0^
1 warning and 1 error generated.

<= > /div>
Regards,
sunpoet

=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg= > b(204,204,204);padding-left:1ex"> > =C2=A0 =C2=A0 =C2=A0 * Fixes:
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 - fix combining char handling that could lead t= > o a segfault
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 - CVE-2021-26937: possible denial of service vi= > a a crafted UTF-8
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 character sequence (bug #60030)
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 - make screen exit code be 0 when checking --he= > lp
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 - session names limit is 80 symbols (bug #61534= > )
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 - option -X ignores specified user in multiuser= > env (bug #37437)
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 - a lot of reformations/fixes/cleanups (man pag= > e and source code)
>
> =C2=A0 =C2=A0 For full list of changes see
> =C2=A0 =C2=A0
h=3Dv.4.9.0" rel=3D"noreferrer" target=3D"_blank">https://git.savannah.gnu.= > org/cgit/screen.git/log/?h=3Dv.4.9.0
>
> =C2=A0 =C2=A0 Note that CVE-2021-26937 was fixed in the FreeBSD port in 202= > 1.
> > --0000000000009000ac05da7b1350--