head 1.4; access; symbols pkgsrc-2026Q1:1.4.0.54 pkgsrc-2026Q1-base:1.4 pkgsrc-2025Q4:1.4.0.52 pkgsrc-2025Q4-base:1.4 pkgsrc-2025Q3:1.4.0.50 pkgsrc-2025Q3-base:1.4 pkgsrc-2025Q2:1.4.0.48 pkgsrc-2025Q2-base:1.4 pkgsrc-2025Q1:1.4.0.46 pkgsrc-2025Q1-base:1.4 pkgsrc-2024Q4:1.4.0.44 pkgsrc-2024Q4-base:1.4 pkgsrc-2024Q3:1.4.0.42 pkgsrc-2024Q3-base:1.4 pkgsrc-2024Q2:1.4.0.40 pkgsrc-2024Q2-base:1.4 pkgsrc-2024Q1:1.4.0.38 pkgsrc-2024Q1-base:1.4 pkgsrc-2023Q4:1.4.0.36 pkgsrc-2023Q4-base:1.4 pkgsrc-2023Q3:1.4.0.34 pkgsrc-2023Q3-base:1.4 pkgsrc-2023Q2:1.4.0.32 pkgsrc-2023Q2-base:1.4 pkgsrc-2023Q1:1.4.0.30 pkgsrc-2023Q1-base:1.4 pkgsrc-2022Q4:1.4.0.28 pkgsrc-2022Q4-base:1.4 pkgsrc-2022Q3:1.4.0.26 pkgsrc-2022Q3-base:1.4 pkgsrc-2022Q2:1.4.0.24 pkgsrc-2022Q2-base:1.4 pkgsrc-2022Q1:1.4.0.22 pkgsrc-2022Q1-base:1.4 pkgsrc-2021Q4:1.4.0.20 pkgsrc-2021Q4-base:1.4 pkgsrc-2021Q3:1.4.0.18 pkgsrc-2021Q3-base:1.4 pkgsrc-2021Q2:1.4.0.16 pkgsrc-2021Q2-base:1.4 pkgsrc-2021Q1:1.4.0.14 pkgsrc-2021Q1-base:1.4 pkgsrc-2020Q4:1.4.0.12 pkgsrc-2020Q4-base:1.4 pkgsrc-2020Q3:1.4.0.10 pkgsrc-2020Q3-base:1.4 pkgsrc-2020Q2:1.4.0.8 pkgsrc-2020Q2-base:1.4 pkgsrc-2020Q1:1.4.0.4 pkgsrc-2020Q1-base:1.4 pkgsrc-2019Q4:1.4.0.6 pkgsrc-2019Q4-base:1.4 pkgsrc-2019Q3:1.4.0.2 pkgsrc-2019Q3-base:1.4 pkgsrc-2019Q2:1.3.0.74 pkgsrc-2019Q2-base:1.3 pkgsrc-2019Q1:1.3.0.72 pkgsrc-2019Q1-base:1.3 pkgsrc-2018Q4:1.3.0.70 pkgsrc-2018Q4-base:1.3 pkgsrc-2018Q3:1.3.0.68 pkgsrc-2018Q3-base:1.3 pkgsrc-2018Q2:1.3.0.66 pkgsrc-2018Q2-base:1.3 pkgsrc-2018Q1:1.3.0.64 pkgsrc-2018Q1-base:1.3 pkgsrc-2017Q4:1.3.0.62 pkgsrc-2017Q4-base:1.3 pkgsrc-2017Q3:1.3.0.60 pkgsrc-2017Q3-base:1.3 pkgsrc-2017Q2:1.3.0.56 pkgsrc-2017Q2-base:1.3 pkgsrc-2017Q1:1.3.0.54 pkgsrc-2017Q1-base:1.3 pkgsrc-2016Q4:1.3.0.52 pkgsrc-2016Q4-base:1.3 pkgsrc-2016Q3:1.3.0.50 pkgsrc-2016Q3-base:1.3 pkgsrc-2016Q2:1.3.0.48 pkgsrc-2016Q2-base:1.3 pkgsrc-2016Q1:1.3.0.46 pkgsrc-2016Q1-base:1.3 pkgsrc-2015Q4:1.3.0.44 pkgsrc-2015Q4-base:1.3 pkgsrc-2015Q3:1.3.0.42 pkgsrc-2015Q3-base:1.3 pkgsrc-2015Q2:1.3.0.40 pkgsrc-2015Q2-base:1.3 pkgsrc-2015Q1:1.3.0.38 pkgsrc-2015Q1-base:1.3 pkgsrc-2014Q4:1.3.0.36 pkgsrc-2014Q4-base:1.3 pkgsrc-2014Q3:1.3.0.34 pkgsrc-2014Q3-base:1.3 pkgsrc-2014Q2:1.3.0.32 pkgsrc-2014Q2-base:1.3 pkgsrc-2014Q1:1.3.0.30 pkgsrc-2014Q1-base:1.3 pkgsrc-2013Q4:1.3.0.28 pkgsrc-2013Q4-base:1.3 pkgsrc-2013Q3:1.3.0.26 pkgsrc-2013Q3-base:1.3 pkgsrc-2013Q2:1.3.0.24 pkgsrc-2013Q2-base:1.3 pkgsrc-2013Q1:1.3.0.22 pkgsrc-2013Q1-base:1.3 pkgsrc-2012Q4:1.3.0.20 pkgsrc-2012Q4-base:1.3 pkgsrc-2012Q3:1.3.0.18 pkgsrc-2012Q3-base:1.3 pkgsrc-2012Q2:1.3.0.16 pkgsrc-2012Q2-base:1.3 pkgsrc-2012Q1:1.3.0.14 pkgsrc-2012Q1-base:1.3 pkgsrc-2011Q4:1.3.0.12 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q3:1.3.0.10 pkgsrc-2011Q3-base:1.3 pkgsrc-2011Q2:1.3.0.8 pkgsrc-2011Q2-base:1.3 pkgsrc-2011Q1:1.3.0.6 pkgsrc-2011Q1-base:1.3 pkgsrc-2010Q4:1.3.0.4 pkgsrc-2010Q4-base:1.3 pkgsrc-2010Q3:1.3.0.2 pkgsrc-2010Q3-base:1.3 bzip2-1-0-6:1.1.1.2 pkgsrc-2010Q2:1.2.0.24 pkgsrc-2010Q2-base:1.2 pkgsrc-2010Q1:1.2.0.22 pkgsrc-2010Q1-base:1.2 pkgsrc-2009Q4:1.2.0.20 pkgsrc-2009Q4-base:1.2 pkgsrc-2009Q3:1.2.0.18 pkgsrc-2009Q3-base:1.2 pkgsrc-2009Q2:1.2.0.16 pkgsrc-2009Q2-base:1.2 pkgsrc-2009Q1:1.2.0.14 pkgsrc-2009Q1-base:1.2 pkgsrc-2008Q4:1.2.0.12 pkgsrc-2008Q4-base:1.2 pkgsrc-2008Q3:1.2.0.10 pkgsrc-2008Q3-base:1.2 cube-native-xorg:1.2.0.8 cube-native-xorg-base:1.2 pkgsrc-2008Q2:1.2.0.6 pkgsrc-2008Q2-base:1.2 cwrapper:1.2.0.4 pkgsrc-2008Q1:1.2.0.2 pkgsrc-2008Q1-base:1.2 pkgsrc-2007Q4:1.1.1.1.0.4 pkgsrc-2007Q4-base:1.1.1.1 pkgsrc-2007Q3:1.1.1.1.0.2 pkgsrc-2007Q3-base:1.1.1.1 bzip2-1-0-4:1.1.1.1 BZIP2:1.1.1; locks; strict; comment @# @; 1.4 date 2019.07.21.11.51.24; author nia; state Exp; branches; next 1.3; commitid 2uyJtOzB1nq5cUvB; 1.3 date 2010.09.22.14.48.41; author joerg; state Exp; branches; next 1.2; 1.2 date 2008.03.26.19.06.06; author adrianp; state Exp; branches 1.2.24.1; next 1.1; 1.1 date 2007.08.02.13.01.33; author joerg; state Exp; branches 1.1.1.1; next ; 1.2.24.1 date 2010.09.22.18.04.23; author tron; state Exp; branches; next ; 1.1.1.1 date 2007.08.02.13.01.33; author joerg; state Exp; branches; next 1.1.1.2; 1.1.1.2 date 2010.09.22.14.32.12; author joerg; state Exp; branches; next ; desc @@ 1.4 log @bzip2: Update to 1.0.8. This changes the upstream to sourceware.org. 1.0.8 (13 Jul 19) ~~~~~~~~~~~~~~~~~ * Accept as many selectors as the file format allows. This relaxes the fix for CVE-2019-12900 from 1.0.7 so that bzip2 allows decompression of bz2 files that use (too) many selectors again. * Fix handling of large (> 4GB) files on Windows. * Cleanup of bzdiff and bzgrep scripts so they don't use any bash extensions and handle multiple archives correctly. * There is now a bz2-files testsuite at https://sourceware.org/git/bzip2-tests.git 1.0.7 (27 Jun 19) ~~~~~~~~~~~~~~~~~ * Fix undefined behavior in the macros SET_BH, CLEAR_BH, & ISSET_BH * bzip2: Fix return value when combining --test,-t and -q. * bzip2recover: Fix buffer overflow for large argv[0] * bzip2recover: Fix use after free issue with outFile (CVE-2016-3189) * Make sure nSelectors is not out of range (CVE-2019-12900) @ text @ This is the README for bzip2/libzip2. This version is fully compatible with the previous public releases. ------------------------------------------------------------------ This file is part of bzip2/libbzip2, a program and library for lossless, block-sorting data compression. bzip2/libbzip2 version 1.0.8 of 13 July 2019 Copyright (C) 1996-2019 Julian Seward Please read the WARNING, DISCLAIMER and PATENTS sections in this file. This program is released under the terms of the license contained in the file LICENSE. ------------------------------------------------------------------ Complete documentation is available in Postscript form (manual.ps), PDF (manual.pdf) or html (manual.html). A plain-text version of the manual page is available as bzip2.txt. HOW TO BUILD -- UNIX Type 'make'. This builds the library libbz2.a and then the programs bzip2 and bzip2recover. Six self-tests are run. If the self-tests complete ok, carry on to installation: To install in /usr/local/bin, /usr/local/lib, /usr/local/man and /usr/local/include, type make install To install somewhere else, eg, /xxx/yyy/{bin,lib,man,include}, type make install PREFIX=/xxx/yyy If you are (justifiably) paranoid and want to see what 'make install' is going to do, you can first do make -n install or make -n install PREFIX=/xxx/yyy respectively. The -n instructs make to show the commands it would execute, but not actually execute them. HOW TO BUILD -- UNIX, shared library libbz2.so. Do 'make -f Makefile-libbz2_so'. This Makefile seems to work for Linux-ELF (RedHat 7.2 on an x86 box), with gcc. I make no claims that it works for any other platform, though I suspect it probably will work for most platforms employing both ELF and gcc. bzip2-shared, a client of the shared library, is also built, but not self-tested. So I suggest you also build using the normal Makefile, since that conducts a self-test. A second reason to prefer the version statically linked to the library is that, on x86 platforms, building shared objects makes a valuable register (%ebx) unavailable to gcc, resulting in a slowdown of 10%-20%, at least for bzip2. Important note for people upgrading .so's from 0.9.0/0.9.5 to version 1.0.X. All the functions in the library have been renamed, from (eg) bzCompress to BZ2_bzCompress, to avoid namespace pollution. Unfortunately this means that the libbz2.so created by Makefile-libbz2_so will not work with any program which used an older version of the library. I do encourage library clients to make the effort to upgrade to use version 1.0, since it is both faster and more robust than previous versions. HOW TO BUILD -- Windows 95, NT, DOS, Mac, etc. It's difficult for me to support compilation on all these platforms. My approach is to collect binaries for these platforms, and put them on the master web site (https://sourceware.org/bzip2/). Look there. However (FWIW), bzip2-1.0.X is very standard ANSI C and should compile unmodified with MS Visual C. If you have difficulties building, you might want to read README.COMPILATION.PROBLEMS. At least using MS Visual C++ 6, you can build from the unmodified sources by issuing, in a command shell: nmake -f makefile.msc (you may need to first run the MSVC-provided script VCVARS32.BAT so as to set up paths to the MSVC tools correctly). VALIDATION Correct operation, in the sense that a compressed file can always be decompressed to reproduce the original, is obviously of paramount importance. To validate bzip2, I used a modified version of Mark Nelson's churn program. Churn is an automated test driver which recursively traverses a directory structure, using bzip2 to compress and then decompress each file it encounters, and checking that the decompressed data is the same as the original. Please read and be aware of the following: WARNING: This program and library (attempts to) compress data by performing several non-trivial transformations on it. Unless you are 100% familiar with *all* the algorithms contained herein, and with the consequences of modifying them, you should NOT meddle with the compression or decompression machinery. Incorrect changes can and very likely *will* lead to disastrous loss of data. DISCLAIMER: I TAKE NO RESPONSIBILITY FOR ANY LOSS OF DATA ARISING FROM THE USE OF THIS PROGRAM/LIBRARY, HOWSOEVER CAUSED. Every compression of a file implies an assumption that the compressed file can be decompressed to reproduce the original. Great efforts in design, coding and testing have been made to ensure that this program works correctly. However, the complexity of the algorithms, and, in particular, the presence of various special cases in the code which occur with very low but non-zero probability make it impossible to rule out the possibility of bugs remaining in the program. DO NOT COMPRESS ANY DATA WITH THIS PROGRAM UNLESS YOU ARE PREPARED TO ACCEPT THE POSSIBILITY, HOWEVER SMALL, THAT THE DATA WILL NOT BE RECOVERABLE. That is not to say this program is inherently unreliable. Indeed, I very much hope the opposite is true. bzip2/libbzip2 has been carefully constructed and extensively tested. PATENTS: To the best of my knowledge, bzip2/libbzip2 does not use any patented algorithms. However, I do not have the resources to carry out a patent search. Therefore I cannot give any guarantee of the above statement. WHAT'S NEW IN 0.9.0 (as compared to 0.1pl2) ? * Approx 10% faster compression, 30% faster decompression * -t (test mode) is a lot quicker * Can decompress concatenated compressed files * Programming interface, so programs can directly read/write .bz2 files * Less restrictive (BSD-style) licensing * Flag handling more compatible with GNU gzip * Much more documentation, i.e., a proper user manual * Hopefully, improved portability (at least of the library) WHAT'S NEW IN 0.9.5 ? * Compression speed is much less sensitive to the input data than in previous versions. Specifically, the very slow performance caused by repetitive data is fixed. * Many small improvements in file and flag handling. * A Y2K statement. WHAT'S NEW IN 1.0.x ? See the CHANGES file. I hope you find bzip2 useful. Feel free to contact the developers at bzip2-devel@@sourceware.org if you have any suggestions or queries. Many people mailed me with comments, suggestions and patches after the releases of bzip-0.15, bzip-0.21, and bzip2 versions 0.1pl2, 0.9.0, 0.9.5, 1.0.0, 1.0.1, 1.0.2 and 1.0.3, and the changes in bzip2 are largely a result of this feedback. I thank you for your comments. bzip2's "home" is https://sourceware.org/bzip2/ Julian Seward jseward@@acm.org Cambridge, UK. 18 July 1996 (version 0.15) 25 August 1996 (version 0.21) 7 August 1997 (bzip2, version 0.1) 29 August 1997 (bzip2, version 0.1pl2) 23 August 1998 (bzip2, version 0.9.0) 8 June 1999 (bzip2, version 0.9.5) 4 Sept 1999 (bzip2, version 0.9.5d) 5 May 2000 (bzip2, version 1.0pre8) 30 December 2001 (bzip2, version 1.0.2pre1) 15 February 2005 (bzip2, version 1.0.3) 20 December 2006 (bzip2, version 1.0.4) 10 December 2007 (bzip2, version 1.0.5) 6 Sept 2010 (bzip2, version 1.0.6) 27 June 2019 (bzip2, version 1.0.7) 13 July 2019 (bzip2, version 1.0.8) @ 1.3 log @Update to bzip2-1.0.6: Fix for CVE-2010-0405 @ text @d9 2 a10 2 bzip2/libbzip2 version 1.0.6 of 6 September 2010 Copyright (C) 1996-2010 Julian Seward d76 1 a76 1 on the master web site (http://www.bzip.org). Look there. However d164 1 a164 1 WHAT'S NEW IN 1.0.0 ? d168 2 a169 23 WHAT'S NEW IN 1.0.2 ? See the CHANGES file. WHAT'S NEW IN 1.0.3 ? See the CHANGES file. WHAT'S NEW IN 1.0.4 ? See the CHANGES file. WHAT'S NEW IN 1.0.5 ? See the CHANGES file. WHAT'S NEW IN 1.0.6 ? See the CHANGES file. I hope you find bzip2 useful. Feel free to contact me at jseward@@bzip.org d176 1 a176 1 bzip2's "home" is http://www.bzip.org/ d179 1 a179 1 jseward@@bzip.org d195 2 @ 1.2 log @Update to 1.0.5 The only change is to address the vulnerability detailed in CERT/CC: VU#813451 OK'ed joerg@@ @ text @d9 2 a10 2 bzip2/libbzip2 version 1.0.5 of 10 December 2007 Copyright (C) 1996-2007 Julian Seward d184 4 d215 1 @ 1.2.24.1 log @Pullup ticket #3228 - requested by joerg archivers/bzip2: security update Revisions pulled up: - archivers/bzip2/Makefile 1.50 - archivers/bzip2/PLIST 1.4 - archivers/bzip2/files/CHANGES 1.3 - archivers/bzip2/files/README 1.3 - archivers/bzip2/files/bzdiff new file - archivers/bzip2/files/bzdiff.1 new file - archivers/bzip2/files/bzgrep new file - archivers/bzip2/files/bzgrep.1 new file - archivers/bzip2/files/decompress.c 1.3 --- Module Name: pkgsrc Committed By: joerg Date: Wed Sep 22 14:32:18 UTC 2010 Update of /cvsroot/pkgsrc/archivers/bzip2/files In directory ivanova.netbsd.org:/tmp/cvs-serv13227 Log Message: Import stripped down bzip2-1.0.6. --- Module Name: pkgsrc Committed By: joerg Date: Wed Sep 22 14:48:41 UTC 2010 Modified Files: pkgsrc/archivers/bzip2/files: CHANGES README decompress.c Log Message: Update to bzip2-1.0.6: Fix for CVE-2010-0405 --- Module Name: pkgsrc Committed By: joerg Date: Wed Sep 22 14:53:22 UTC 2010 Modified Files: pkgsrc/archivers/bzip2: Makefile PLIST Log Message: Update to bzip2-1.0.6: Fix for CVE-2010-0405. Also install various helper scripts. @ text @d9 2 a10 2 bzip2/libbzip2 version 1.0.6 of 6 September 2010 Copyright (C) 1996-2010 Julian Seward a183 4 WHAT'S NEW IN 1.0.6 ? See the CHANGES file. a210 1 6 Sept 2010 (bzip2, version 1.0.6) @ 1.1 log @Initial revision @ text @d9 2 a10 2 bzip2/libbzip2 version 1.0.4 of 20 December 2006 Copyright (C) 1996-2006 Julian Seward d180 4 d210 1 @ 1.1.1.1 log @Import stripped down version of bzip2-1.0.4 for use in bootstrap and essential tools. Not included are the manual and the regression tests. @ text @@ 1.1.1.2 log @Import stripped down bzip2-1.0.6. @ text @d9 2 a10 2 bzip2/libbzip2 version 1.0.6 of 6 September 2010 Copyright (C) 1996-2010 Julian Seward a179 8 WHAT'S NEW IN 1.0.5 ? See the CHANGES file. WHAT'S NEW IN 1.0.6 ? See the CHANGES file. a205 2 10 December 2007 (bzip2, version 1.0.5) 6 Sept 2010 (bzip2, version 1.0.6) @