staging/pepe2k/package/utils, branch v18.06.9

lua: lnum: fix strtoul based number parsing

2020-09-27T22:37:50Z

Lua's LNUM patch currently doesn't parse properly certain numbers as it's visible from the following simple tests. On x86_64 host (stock Lua 5.1.5, expected output): $ /usr/bin/lua -e 'print(0x80000000); print(0x80000000000); print(0x100000000)' 2147483648 8796093022208 4294967296 On x86_64 host: $ staging_dir/hostpkg/bin/lua -e 'print(0x80000000); print(0x80000000000); print(0x100000000)' -2147483648 0 0 On x86_64 target: $ lua -e 'print(0x80000000); print(0x80000000000); print(0x100000000)' -2147483648 0 0 On ath79 target: $ lua -e 'print(0x80000000); print(0x80000000000); print(0x100000000)' -2147483648 8796093022208 4294967296 It's caused by two issues fixed in this patch, first issue is caused by unhadled strtoul overflow and second one is caused by the cast of unsigned to signed Lua integer when parsing from hex literal. Run tested on: * Zidoo Z9S with RTD1296 CPU (aarch64_cortex-a53) * qemu/x86_64 * qemu/armvirt_64 * ath79 Signed-off-by: Liangbin Lian [commit subject/message touches, fixed From to match SOB, fixed another unhandled case in luaO_str2i, host Lua, package bump] Signed-off-by: Petr Štetiar (cherry picked from commit 4bb9af48ca36605424c57b6af27dd5e5c827395f)

e2fsprogs: Fix CVE-2019-5094 in libsupport

2020-01-01T19:55:17Z

This adds the following patch from debian: https://git.kernel.org/pub/scm/fs/ext2/e2fsprogs.git/commit/?h=debian/stable&id=09fe1fd2a1f9efc3091b4fc61f1876d0785956a8 libsupport: add checks to prevent buffer overrun bugs in quota code Signed-off-by: Hauke Mehrtens (cherry picked from commit 0062aad8ecc9bbe36c55895fd78fcaf9a406b006)

bzip2: Fix CVE-2019-12900

2019-09-03T10:55:00Z

More details about this CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-12900 Signed-off-by: Josef Schlehofer

xfsprogs: Replace valloc with posix_memalign

2019-08-14T07:12:52Z

Fixes compilation under uClibc-ng. Signed-off-by: Rosen Penev (cherry picked from commit e49b6bb61828b8b903db0ef48113b4065a215c63)

busybox: strip off ALTERNATIVES spec

2019-07-12T07:52:38Z

Now that busybox is a known alternatives provider by opkg, we remove the ALTERNATIVES spec and add a note to make the implicit situation clear Signed-off-by: Yousong Zhou (cherry-picked from 62be427067ee3883b68bcfb08dfc0c43dce22fa3)

busybox: add missing install dir

2019-03-11T16:07:29Z

Add missing /usr/sbin install dir fixing : install: cannot create regular file 'build_dir/target-x86_64_musl/busybox-1.30.1/.pkgdir/busybox/usr/sbin/ntpd-hotplug': No such file or directory Signed-off-by: Hans Dedecker (cherry picked from commit 2cd28c9a0836b82c591cccc3d9e01228b7990869)

ugps: update to latest git HEAD

2018-12-18T16:22:06Z

07528d43f9bc nmea.c: set _BSD_SOURCE to have timegm() & stime() on musl b88037b6bf6a check timegm return code ccabdf6c235f nmea.c: Add null byte to nmea fields cdc1478a8133 remove deprication warning Signed-off-by: Alexander Couzens (backported from 81d7f82441f0754d398309a722323d792a24d76a)

usbutils: Update usb.ids to 0.315

2018-12-18T10:28:13Z

Referencing the version instead of revision should fix uscan. Tested on Turria Omnia. Signed-off-by: Rosen Penev (backported from a9aa25c8b6f2e694d5bc0b14fe84eac6fffeb23a)

usbutils: Switch to Fedora usbutils

2018-12-18T08:44:03Z

The Gentoo GitHub mirror went down. One benefit of Fedora's usb.ids file is that it's versioned. Signed-off-by: Rosen Penev (backported from f23271f3b4f54d1e5ddf7b85786f9a30f38409ad)

busybox: udhcpc: replace udhcpc_no_msg_dontroute patch by upstream fix

2018-12-18T08:44:00Z

Replace 204-udhcpc_no_msg_dontroute patch by the upstream busybox fix which removes the code which requires the server ID to be on local network Signed-off-by: Hans Dedecker (backported from c6e50075f245b076b57f3f87b5401764a2e11b92)