apk-tools - Adélie Linux patches for Alpine Package Keeper (apk-tools)

Age	Commit message (Collapse)	Author	Files	Lines
2018-09-10	rework unpacking of packages and harden package file format requirements	Timo Teräs	1	-21/+14
	A crafted .apk file could to trick apk writing unverified data to an unexpected file during temporary file creation due to bugs in handling long link target name and the way a regular file is extracted. Several hardening steps are implemented to avoid this: - the temporary file is now always first unlinked (apk thus reserved all filenames .apk.* to be it's working files) - the temporary file is after that created with O_EXCL to avoid races - the temporary file is no longer directly the archive entry name and thus directly controlled by potentially untrusted data - long file names and link target names are now rejected - hard link targets are now more rigorously checked - various additional checks added for the extraction process to error out early in case of malformed (or old legacy) file Reported-by: Max Justicz <max@justi.cz>
2017-06-23	io: make io vtables const struct, and add accessors for them	Timo Teräs	1	-13/+21
	This reduces function pointers in heap, and unifies how the io functions are called.
2015-11-09	io, database: preserve [am]time for cached and fetched files	Timo Teräs	1	-0/+8
	preserve [am]time for all packages and indexes. this fixes the caching error that 'apk update' is after new index is generated, but before the used mirror is synchronized. this caused local apkindex timestamp to be newer than file in mirror, when in fact it was outdated index. this also fixes fetched files to have build timestamp so that files going to .iso or custom images have proper timestamps (rsync with appropriate --modify-window now works)
2015-03-10	rework error handling for read streams	Timo Teräs	1	-4/+3

2014-10-08	io,url,db: support for if-modified-since	Timo Teräs	1	-3/+2

2014-10-07	io: fix few error path leaks	Timo Teräs	1	-4/+2

2011-09-13	all: update copyright year statement	Timo Teräs	1	-1/+1

2010-12-17	gunzip: fix ordering of boundary callbacks	Timo Teräs	1	-8/+24
	The boundary callback should not happen until all the uncompressed data has been consumed. This previously seems to have worked because normally gzip library returns "no error" instead of the "stream end" if we extract exactly the amount of bytes remaining in the archive. (Perhaps this was changed in new zlib.) In any case, verification was broken with some apks due to this callback ordering issue.
2010-12-09	io: enhance istream/bstreams with pipe to forked child	Timo Teräs	1	-2/+2
	* prunes the child pid to avoid zombies * handles the errors so e.g. file-not-found is reported properly
2009-08-12	io: better error handling when writing stuff out	Timo Teras	1	-4/+9
	also have the output stream support writing to temporary file and do renameat/unlinkat on close depending on if all writes succeeded or not.
2009-07-22	pkg: cleanup the signing code	Timo Teras	1	-3/+8
	smaller callback and less cases to check. also reintroduce the oneshot digest flag, hopefully correct this time.
2009-07-22	various: more informative error messages	Timo Teras	1	-12/+12

2009-07-22	various: installation fixes	Timo Teras	1	-8/+8
	- extract everything as .apk-new and overwrite only after data has been checksummed - url construction fixes (to work with simple http servers) - end of gunzip stream fixed - remove oneshot digesting flag for now as it's usage was broken
2009-07-21	pkg: fix indexing of multi-part apks	Timo Teras	1	-21/+27

2009-07-21	db: fixes to package checksumming while installing it	Timo Teras	1	-3/+10

2009-07-20	gzip: fix finalization of compressed output	Timo Teras	1	-5/+8
	the unflushed data when closing file can be several thousand kiloes, loop until all is written out.
2009-07-17	digest: use oneshot context flag where approriate	Timo Teras	1	-25/+19
	speeds up digest calculation on some cases.
2009-07-17	pkg: fix index generation	Timo Teras	1	-7/+10
	that got broke during verify implementation.
2009-07-16	various: new style index generation	Timo Teras	1	-9/+89
	change the index generation to do old index, or the new style index where package identity is sha1 of control block and it's contained within an .tar.gz to allow signing in future.
2009-07-16	gzip: always autoclose the inner stream	Timo Teras	1	-5/+2

2009-07-14	bstream: make tokenizable and load index using bstream	Timo Teras	1	-1/+5
	some fixes on index reading code too.
2009-07-13	io: move csumming away from bstream to gunzip	Timo Teras	1	-8/+41
	in future we want to checksum on gzip boundary basis, not the full file.
2009-07-10	gunzip: accept concatenated gzip streams	Timo Teras	1	-1/+11
	allow .apk to consist of multiple separate gzip streams which are just concatenated together.
2009-01-06	io: fix some memory leaks	Timo Teras	1	-1/+5

2009-01-06	io: check inner stream existance before creating gunzip stream	Timo Teras	1	-0/+3

2008-11-28	io: apk_ostream stuff	Timo Teras	1	-1/+1

2008-11-14	db: checksum installed files, protect config files	Timo Teras	1	-1/+0
	Checksum of installed is computed on the fly when extracting them and it'll be saved to fdb. When installing config files those are diverted with suffix .apk-new if earlier version of same file with local changes exist.
2008-11-07	use zlib internally to decompress	Timo Teras	1	-0/+93