staging/pepe2k/package/utils, branch v22.03.7

ucode: add libjson-c/host dependency

2024-07-08T20:27:11Z

ensure host libjson-c is built prior to ucode Signed-off-by: Chad Monroe (cherry picked from commit 5a3f6c50ef29c8b11fe6967e65277b8331be0ff0) Link: https://github.com/openwrt/openwrt/pull/15899 Signed-off-by: Hauke Mehrtens

lua: fix CVE-2014-5461

2024-07-08T20:27:11Z

Patch taken from Debian. Refresh patches Signed-off-by: Rosen Penev (cherry picked from commit 78b0106f7d5093641f68d37c041a5863eb9dd9a0) Link: https://github.com/openwrt/openwrt/pull/15899 Signed-off-by: Hauke Mehrtens

jsonfilter: update to Git HEAD (2024-01-23)

2024-01-23T08:10:03Z

013b75ab0598 jsonfilter: drop legacy json-c support 594cfa86469c main: fix spurious premature parse aborts in array mode Fixes: https://bugs.openwrt.org/?task_id=3683 Fixes: https://github.com/openwrt/openwrt/issues/8703 Fixes: https://github.com/openwrt/openwrt/issues/11649 Fixes: https://github.com/openwrt/openwrt/issues/12344 Signed-off-by: Jo-Philipp Wich (cherry picked from commit 33f15dd6d41873b02eb8895b8886763659f1390c)

lua5.3: fix typo calling lua53 instead of lua5.3 for Package Default

2023-12-10T10:48:11Z

Fix typo calling lua53 instead of lua5.3 for Package Default definition. This cause only missing description of the package and doesn't cause any build regression. Fixes: c52ca08d4008 ("lua5.3: build shared library") Signed-off-by: Christian Marangi (cherry picked from commit 25e215c14ee6c9f3d54cd1da46a48d9ffe6b254e) [ fix conflict with changed URL value ]

bsdiff: Add patches for CVEs

2023-11-19T13:58:44Z

Add two patches from Debian fixing CVEs in the bsdiff application. CVE-2014-9862: Heap vulnerability in bspatch CVE-2020-14315: Memory Corruption Vulnerability in bspatch Copied the patches from this location: https://salsa.debian.org/debian/bsdiff/-/blob/debian/latest/debian/patches/20-CVE-2014-9862.patch https://salsa.debian.org/debian/bsdiff/-/blob/debian/latest/debian/patches/33-CVE-2020-14315.patch Signed-off-by: Hauke Mehrtens (cherry picked from commit cac723e8b8748938b8d80603578c60189fc32b24)

packages: assign PKG_CPE_ID for all missing packages

2023-09-27T15:29:14Z

The PKG_CPE_ID links to NIST CPE version 2.2. Assign PKG_CPE_ID to all remaining package which have a CPE ID. Not every package has CPE id. Related: https://github.com/openwrt/packages/issues/8534 Signed-off-by: Alexander Couzens

lua: fix integer overflow in LNUM patch

2023-08-12T09:46:51Z

Safely detect integer overflow in try_addint() and try_subint(). Old code relied on undefined behavior, and recent versions of GCC on x86 optimized away the if-statements. This caused integer overflow in Lua code instead of falling back to floating-point numbers. Signed-off-by: Adam Bailey (cherry picked from commit 3a2e7c30d3e6a187ba1df740cdb24c8ad84dfe48)

treewide: Trigger reinstall of all wolfssl dependencies

2023-01-01T20:42:41Z

The ABI of the wolfssl library changed a bit between version 5.5.3 and 5.5.4. This release update will trigger a rebuild of all packages which are using wolfssl to make sure they are adapted to the new ABI. Signed-off-by: Hauke Mehrtens (cherry picked from commit ee47a28cec01c7943238bae45f65a98e4fc9abbe)

e2fsprogs: Fix CVE-2022-1304

2022-12-06T22:29:14Z

This fixes CVE-2022-1304: An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. Signed-off-by: Hauke Mehrtens (cherry picked from commit 60e335b76ea0aeedd9f8e01d247f9aaa617076da)

ucode: update to latest Git HEAD

2022-12-06T10:45:12Z

46d93c9 tests: fixup testcases 4c654df types: adjust double printing format eac2add compiler: fix bytecode for logical assignments of properties 3903b18 fs: add `realpath()` function 8366102 math: add isnan() function eef83d3 tests: relax sleep() test 394e901 lib: uc_json(): accept trailing whitespace when parsing strings 1867c8b uloop: terminate parent uloop in task child processes d2cc003 uci: auto-load package in `ctx.foreach()` and `ctx.get_first()` 6c5ee53 compiler: ensure that arrow functions with block bodies return no value fdc9b6a compiler: fix `??=`, `||=` and `&&=` logical assignment semantics 88dcca7 add cmake to install requires for debian Signed-off-by: Jo-Philipp Wich (cherry picked from commit a4d67066e39bd93c7011c8e07b740a326e4e9803)