head	1.8;
access;
symbols
	pkgsrc-2019Q1:1.7.0.40
	pkgsrc-2019Q1-base:1.7
	pkgsrc-2018Q4:1.7.0.38
	pkgsrc-2018Q4-base:1.7
	pkgsrc-2018Q3:1.7.0.36
	pkgsrc-2018Q3-base:1.7
	pkgsrc-2018Q2:1.7.0.34
	pkgsrc-2018Q2-base:1.7
	pkgsrc-2018Q1:1.7.0.32
	pkgsrc-2018Q1-base:1.7
	pkgsrc-2017Q4:1.7.0.30
	pkgsrc-2017Q4-base:1.7
	pkgsrc-2017Q3:1.7.0.28
	pkgsrc-2017Q3-base:1.7
	pkgsrc-2017Q2:1.7.0.24
	pkgsrc-2017Q2-base:1.7
	pkgsrc-2017Q1:1.7.0.22
	pkgsrc-2017Q1-base:1.7
	pkgsrc-2016Q4:1.7.0.20
	pkgsrc-2016Q4-base:1.7
	pkgsrc-2016Q3:1.7.0.18
	pkgsrc-2016Q3-base:1.7
	pkgsrc-2016Q2:1.7.0.16
	pkgsrc-2016Q2-base:1.7
	pkgsrc-2016Q1:1.7.0.14
	pkgsrc-2016Q1-base:1.7
	pkgsrc-2015Q4:1.7.0.12
	pkgsrc-2015Q4-base:1.7
	pkgsrc-2015Q3:1.7.0.10
	pkgsrc-2015Q3-base:1.7
	pkgsrc-2015Q2:1.7.0.8
	pkgsrc-2015Q2-base:1.7
	pkgsrc-2015Q1:1.7.0.6
	pkgsrc-2015Q1-base:1.7
	pkgsrc-2014Q4:1.7.0.4
	pkgsrc-2014Q4-base:1.7
	pkgsrc-2014Q3:1.7.0.2
	pkgsrc-2014Q3-base:1.7
	pkgsrc-2014Q2:1.6.0.8
	pkgsrc-2014Q2-base:1.6
	pkgsrc-2014Q1:1.6.0.6
	pkgsrc-2014Q1-base:1.6
	pkgsrc-2013Q4:1.6.0.4
	pkgsrc-2013Q4-base:1.6
	pkgsrc-2013Q3:1.6.0.2
	pkgsrc-2013Q3-base:1.6
	pkgsrc-2013Q2:1.5.0.20
	pkgsrc-2013Q2-base:1.5
	pkgsrc-2013Q1:1.5.0.18
	pkgsrc-2013Q1-base:1.5
	pkgsrc-2012Q4:1.5.0.16
	pkgsrc-2012Q4-base:1.5
	pkgsrc-2012Q3:1.5.0.14
	pkgsrc-2012Q3-base:1.5
	pkgsrc-2012Q2:1.5.0.12
	pkgsrc-2012Q2-base:1.5
	pkgsrc-2012Q1:1.5.0.10
	pkgsrc-2012Q1-base:1.5
	pkgsrc-2011Q4:1.5.0.8
	pkgsrc-2011Q4-base:1.5
	pkgsrc-2011Q3:1.5.0.6
	pkgsrc-2011Q3-base:1.5
	pkgsrc-2011Q2:1.5.0.4
	pkgsrc-2011Q2-base:1.5
	pkgsrc-2011Q1:1.5.0.2
	pkgsrc-2011Q1-base:1.5
	pkgsrc-2010Q4:1.4.0.18
	pkgsrc-2010Q4-base:1.4
	pkgsrc-2010Q3:1.4.0.16
	pkgsrc-2010Q3-base:1.4
	pkgsrc-2010Q2:1.4.0.14
	pkgsrc-2010Q2-base:1.4
	pkgsrc-2010Q1:1.4.0.12
	pkgsrc-2010Q1-base:1.4
	pkgsrc-2009Q4:1.4.0.10
	pkgsrc-2009Q4-base:1.4
	pkgsrc-2009Q3:1.4.0.8
	pkgsrc-2009Q3-base:1.4
	pkgsrc-2009Q2:1.4.0.6
	pkgsrc-2009Q2-base:1.4
	pkgsrc-2009Q1:1.4.0.4
	pkgsrc-2009Q1-base:1.4
	pkgsrc-2008Q4:1.4.0.2
	pkgsrc-2008Q4-base:1.4
	pkgsrc-2008Q3:1.3.0.14
	pkgsrc-2008Q3-base:1.3
	cube-native-xorg:1.3.0.12
	cube-native-xorg-base:1.3
	pkgsrc-2008Q2:1.3.0.10
	pkgsrc-2008Q2-base:1.3
	cwrapper:1.3.0.8
	pkgsrc-2008Q1:1.3.0.6
	pkgsrc-2008Q1-base:1.3
	pkgsrc-2007Q4:1.3.0.4
	pkgsrc-2007Q4-base:1.3
	pkgsrc-2007Q3:1.3.0.2
	pkgsrc-2007Q3-base:1.3
	pkgsrc-2007Q2:1.2.0.12
	pkgsrc-2007Q2-base:1.2
	pkgsrc-2007Q1:1.2.0.10
	pkgsrc-2007Q1-base:1.2
	pkgsrc-2006Q4:1.2.0.8
	pkgsrc-2006Q4-base:1.2
	pkgsrc-2006Q3:1.2.0.6
	pkgsrc-2006Q3-base:1.2
	pkgsrc-2006Q2:1.2.0.4
	pkgsrc-2006Q2-base:1.2
	pkgsrc-2006Q1:1.2.0.2
	pkgsrc-2006Q1-base:1.2
	pkgsrc-2005Q4:1.1.0.12
	pkgsrc-2005Q4-base:1.1
	pkgsrc-2005Q3:1.1.0.10
	pkgsrc-2005Q3-base:1.1
	pkgsrc-2005Q2:1.1.0.8
	pkgsrc-2005Q2-base:1.1
	pkgsrc-2005Q1:1.1.0.6
	pkgsrc-2005Q1-base:1.1
	pkgsrc-2004Q4:1.1.0.4
	pkgsrc-2004Q4-base:1.1
	pkgsrc-2004Q3:1.1.0.2
	pkgsrc-2004Q3-base:1.1;
locks; strict;
comment	@# @;


1.8
date	2019.04.21.16.25.38;	author khorben;	state dead;
branches;
next	1.7;
commitid	lFcMV1D8V23KCekB;

1.7
date	2014.07.12.16.48.26;	author schwarz;	state Exp;
branches
	1.7.40.1;
next	1.6;
commitid	sSfaYXm70koVO6Ix;

1.6
date	2013.07.14.14.55.16;	author rodent;	state Exp;
branches;
next	1.5;
commitid	XReburZMYtcxRrXw;

1.5
date	2011.02.19.17.02.57;	author schwarz;	state Exp;
branches;
next	1.4;

1.4
date	2008.11.11.22.02.42;	author schwarz;	state Exp;
branches;
next	1.3;

1.3
date	2007.08.25.02.49.13;	author obache;	state Exp;
branches;
next	1.2;

1.2
date	2006.01.29.22.29.01;	author schwarz;	state Exp;
branches;
next	1.1;

1.1
date	2004.07.18.20.28.23;	author kristerw;	state Exp;
branches;
next	;

1.7.40.1
date	2019.04.28.16.14.29;	author bsiegert;	state dead;
branches;
next	;
commitid	naVBOoAhQNPcm8lB;


desc
@@


1.8
log
@Import security fixes for libosip2

This adds patches for the following CVE entries:
- CVE-2016-10324
- CVE-2016-10325
- CVE-2016-10326
- CVE-2017-7853

All patches were obtained from Debian and verified to match upstream.

While there, rename and comment the previous patch.

Bumps PKGREVISION.

XXX pull-up
@
text
@$NetBSD: patch-aa,v 1.7 2014/07/12 16:48:26 schwarz Exp $

--- src/osip2/port_sema.c.orig	2013-12-18 19:36:46.000000000 +0100
+++ src/osip2/port_sema.c	2014-07-12 18:20:40.000000000 +0200
@@@@ -305,7 +305,6 @@@@
 struct osip_sem *
 osip_sem_init (unsigned int value)
 {
-  union semun val;
   int i;
   osip_sem_t *sem = (osip_sem_t *) osip_malloc (sizeof (osip_sem_t));
 
@@@@ -318,8 +317,7 @@@@
     osip_free (sem);
     return NULL;
   }
-  val.val = (int) value;
-  i = semctl (sem->semid, 0, SETVAL, val);
+  i = semctl(sem->semid, 0, SETVAL, value);
   if (i != 0) {
     perror ("semctl error");
     osip_free (sem);
@@@@ -331,13 +329,11 @@@@
 int
 osip_sem_destroy (struct osip_sem *_sem)
 {
-  union semun val;
   osip_sem_t *sem = (osip_sem_t *) _sem;
 
   if (sem == NULL)
     return OSIP_SUCCESS;
-  val.val = 0;
-  semctl (sem->semid, 0, IPC_RMID, val);
+  semctl(sem->semid, 0, IPC_RMID, 0);
   osip_free (sem);
   return OSIP_SUCCESS;
 }
@


1.7
log
@updated devel/libosip and net/libexosip to 4.1.0 each.
@
text
@d1 1
a1 1
$NetBSD$
@


1.7.40.1
log
@Pullup ticket #5946 - requested by khorben
devel/libosip: security fix

Revisions pulled up:
- devel/libosip/Makefile                                        1.20
- devel/libosip/distinfo                                        1.16
- devel/libosip/patches/patch-aa                                deleted
- devel/libosip/patches/patch-src_osip2_port__sema.c            1.1
- devel/libosip/patches/patch-src_osipparser2_osip__body.c      1.1

---
   Module Name:	pkgsrc
   Committed By:	khorben
   Date:		Sun Apr 21 16:25:38 UTC 2019

   Modified Files:
   	pkgsrc/devel/libosip: Makefile distinfo
   Added Files:
   	pkgsrc/devel/libosip/patches: patch-src_osip2_port__sema.c
   	    patch-src_osipparser2_osip__body.c
   	    patch-src_osipparser2_osip__message__parse.c
   	    patch-src_osipparser2_osip__message__to__str.c
   	    patch-src_osipparser2_osip__port.c
   Removed Files:
   	pkgsrc/devel/libosip/patches: patch-aa

   Log Message:
   Import security fixes for libosip2

   This adds patches for the following CVE entries:
   - - CVE-2016-10324
   - - CVE-2016-10325
   - - CVE-2016-10326
   - - CVE-2017-7853

   All patches were obtained from Debian and verified to match upstream.

   While there, rename and comment the previous patch.

   Bumps PKGREVISION.

   XXX pull-up
@
text
@d1 1
a1 1
$NetBSD: patch-aa,v 1.7 2014/07/12 16:48:26 schwarz Exp $
@


1.6
log
@Update to latest stable, 4.0.0. Buildlink pthread. Move disabling of
trace and debug configure arguments to options.mk under the debug
PKG_OPTION.

From ChangeLog:

libosip2 (4.0.0)
        * implement time compensation for android.
        * reduce path len // remove path in front of logs.
        * accept only SIP/D.D format message.
        * fix bug when releasing request with missing major headers.
        * fix minor memory leak // remove limitation on fifo size.
        * add system time support for macosx and ios.
        * use system independant time for osip_gettimeofday on unix platform.
        * To compile/use osip based application in multi threaded
          env, you don't need to define -DOSIP_MT any more. Instead,
          if you wish to disable the feature, you can compile with
          -DOSIP_MONOTHREAD.
        * A few other clean up were made inside osip to avoid any
          define to appear in include files. Also to avoid conflict,
          config.h has been renamed to osip-config.h.
@
text
@d1 1
a1 1
$NetBSD: patch-aa,v 1.5 2011/02/19 17:02:57 schwarz Exp $
d3 3
a5 3
--- src/osip2/port_sema.c.orig	2012-11-16 21:24:10.000000000 +0000
+++ src/osip2/port_sema.c
@@@@ -302,7 +302,6 @@@@ osip_sem_trywait (struct osip_sem *_sem)
d13 1
a13 1
@@@@ -315,8 +314,7 @@@@ osip_sem_init (unsigned int value)
d23 1
a23 1
@@@@ -328,13 +326,11 @@@@ osip_sem_init (unsigned int value)
@


1.5
log
@Updated libosip to 3.5.0
@
text
@d1 1
a1 1
$NetBSD$
d3 5
a7 5
--- src/osip2/port_sema.c.orig	2011-01-28 23:06:14.000000000 +0100
+++ src/osip2/port_sema.c	2011-01-28 23:08:19.000000000 +0100
@@@@ -281,7 +281,6 @@@@
 
 struct osip_sem *osip_sem_init(unsigned int value)
d9 3
a11 15
-	union semun val;
 	int i;
 	osip_sem_t *sem = (osip_sem_t *) osip_malloc(sizeof(osip_sem_t));
 
@@@@ -294,8 +293,7 @@@@
 		osip_free(sem);
 		return NULL;
 	}
-	val.val = (int) value;
-	i = semctl(sem->semid, 0, SETVAL, val);
+	i = semctl(sem->semid, 0, SETVAL, value);
 	if (i != 0) {
 		perror("semctl error");
 		osip_free(sem);
@@@@ -306,13 +304,11 @@@@
d13 13
a25 1
 int osip_sem_destroy(struct osip_sem *_sem)
d27 2
a28 2
-	union semun val;
 	osip_sem_t *sem = (osip_sem_t *) _sem;
d30 7
a36 7
 	if (sem == NULL)
 		return OSIP_SUCCESS;
-	val.val = 0;
-	semctl(sem->semid, 0, IPC_RMID, val);
+	semctl(sem->semid, 0, IPC_RMID, 0);
 	osip_free(sem);
 	return OSIP_SUCCESS;
@


1.4
log
@updated libosip to 3.2.0
@
text
@d3 5
a7 5
--- src/osip2/port_sema.c.orig	2008-11-10 22:22:41.000000000 +0100
+++ src/osip2/port_sema.c	2008-11-10 22:24:06.000000000 +0100
@@@@ -236,7 +236,6 @@@@
 struct osip_sem *
 osip_sem_init (unsigned int value)
d9 15
a23 3
-  union semun val;
   int i;
   osip_sem_t *sem = (osip_sem_t *) osip_malloc (sizeof (osip_sem_t));
d25 1
a25 13
@@@@ -250,8 +249,7 @@@@
       osip_free (sem);
       return NULL;
     }
-  val.val = (int) value;
-  i = semctl (sem->semid, 0, SETVAL, val);
+  i = semctl (sem->semid, 0, SETVAL, value);
   if (i != 0)
     {
       perror ("semctl error");
@@@@ -264,13 +262,11 @@@@
 int
 osip_sem_destroy (struct osip_sem *_sem)
d27 2
a28 2
-  union semun val;
   osip_sem_t *sem = (osip_sem_t *) _sem;
d30 7
a36 7
   if (sem == NULL)
     return OSIP_SUCCESS;
-  val.val = 0;
-  semctl (sem->semid, 0, IPC_RMID, val);
+  semctl (sem->semid, 0, IPC_RMID, 0);
   osip_free (sem);
   return OSIP_SUCCESS;
@


1.3
log
@Update libosip to 3.0.3.
This version contains the fix addressed in PR 35825.

libosip2 (3.0.3)
        * initial support for rtems.

libosip2 (3.0.2)
        * initial support for ucos.
        * fix to ignore broken optionnal header when parsing.

libosip2 (3.0.1)
        * add Windows CE support with Visual Studio 2005
          (WM5.0,PocketPC 2003/2005, Smartphone)
        * Fix memory leaks (not likely to happen).
        * Fix buffer overrun in url.
        * Modification of the Application Binary Interface (ABI)
          to decrease number of allocations.
          Changes: osip_message_t/osip_dialog_t/sdp_message_t/osip_fifo_t
        * save route headers in the same order (CALLER or CALLER) in dialogs.

libosip2 (2.2.3)
        * fix 64-bit (amd64) issue with hash.
        * remove SDP negotiation (much better to do it in your applications)
@
text
@d1 1
a1 1
$NetBSD: patch-aa,v 1.2 2006/01/29 22:29:01 schwarz Exp $
d3 3
a5 3
--- src/osip2/port_sema.c.orig	2007-06-05 10:17:50.000000000 +0000
+++ src/osip2/port_sema.c
@@@@ -236,7 +236,6 @@@@ osip_sem_trywait (struct osip_sem *_sem)
d13 1
a13 1
@@@@ -250,8 +249,7 @@@@ osip_sem_init (unsigned int value)
d23 1
a23 1
@@@@ -264,13 +262,11 @@@@ osip_sem_init (unsigned int value)
d31 1
a31 1
     return 0;
d36 1
a36 1
   return 0;
@


1.2
log
@
updated devel/libosip to 2.2.2 (bugfix and speed improvement release)
adapted patch-aa supplied by kristerw
@
text
@d1 1
a1 1
$NetBSD$
d3 3
a5 3
--- src/osip2/port_sema.c.orig	Sat Jan 28 19:57:17 2006
+++ src/osip2/port_sema.c	Sat Jan 28 19:58:11 2006
@@@@ -147,7 +147,6 @@@@
d13 1
a13 1
@@@@ -161,8 +160,7 @@@@
d23 1
a23 1
@@@@ -175,13 +173,11 @@@@
@


1.1
log
@Fix the calls to semctl to make this package build on NetBSD 1.6.
@
text
@d3 3
a5 3
--- src/osip2/port_sema.c.orig	Sun Jul 18 21:08:34 2004
+++ src/osip2/port_sema.c	Sun Jul 18 21:09:32 2004
@@@@ -133,7 +133,6 @@@@
d13 1
a13 1
@@@@ -144,8 +143,7 @@@@
d23 1
a23 1
@@@@ -158,12 +156,10 @@@@
d29 1
@