diff --git a/editor/scite/pspec.xml b/editor/scite/pspec.xml index fdd6bacdc1..c72eb276d4 100644 --- a/editor/scite/pspec.xml +++ b/editor/scite/pspec.xml @@ -13,8 +13,8 @@ editor SCIntilla based Text Editor. Scintilla is a free source code editing component which includes useful features such as syntax styling, error indicators, folding, code completion and call tips. - - mirrors://sourceforge/project/scintilla/SciTE/5.2.3/scite523.tgz + + mirrors://sourceforge/project/scintilla/SciTE/5.3.0/scite530.tgz lua-devel @@ -43,6 +43,13 @@ + + 2022-09-05 + 5.3.0 + Version bump. + fury + uglyside@yandex.ru + 2022-07-10 5.2.3 diff --git a/multimedia/editor/tageditor/pspec.xml b/multimedia/editor/tageditor/pspec.xml index d355016226..5b4f8eab5a 100644 --- a/multimedia/editor/tageditor/pspec.xml +++ b/multimedia/editor/tageditor/pspec.xml @@ -15,8 +15,8 @@ A tag editor with Qt GUI and command-line interface supporting MP4/M4A/AAC (iTunes), ID3, Vorbis, Opus, FLAC and Matroska. - - https://github.com/Martchus/tageditor/archive/refs/tags/v3.7.3.tar.gz + + https://github.com/Martchus/tageditor/archive/refs/tags/v3.7.5.tar.gz cmake @@ -48,6 +48,13 @@ + + 2022-09-09 + 3.7.5 + Version bump + fury + uglyside@yandex.ru + 2022-07-10 3.7.3 @@ -78,4 +85,3 @@ - diff --git a/multimedia/misc/tagparser/pspec.xml b/multimedia/misc/tagparser/pspec.xml index d0e06b3cf9..9215d169db 100644 --- a/multimedia/misc/tagparser/pspec.xml +++ b/multimedia/misc/tagparser/pspec.xml @@ -13,8 +13,8 @@ multimedia.misc C++ library for reading and writing MP4/M4A/AAC (iTunes), ID3, Vorbis, Opus, FLAC and Matroska tags. C++ library for reading and writing MP4/M4A/AAC (iTunes), ID3, Vorbis, Opus, FLAC and Matroska tags. - - https://github.com/Martchus/tagparser/archive/refs/tags/v11.3.0.tar.gz + + https://github.com/Martchus/tagparser/archive/refs/tags/v11.5.0.tar.gz cmake @@ -56,8 +56,8 @@ - 2022-07-10 - 11.3.0 + 2022-09-09 + 11.5.0 Version bump. fury uglyside@yandex.ru diff --git a/programming/language/python3/wxPython3/actions.py b/programming/language/python3/wxPython3/actions.py index 503122907e..c1e1920b81 100644 --- a/programming/language/python3/wxPython3/actions.py +++ b/programming/language/python3/wxPython3/actions.py @@ -12,6 +12,9 @@ from pisi.actionsapi import get shelltools.export("JOBS", get.makeJOBS().replace("-j5", "5")) options="WXPORT=gtk3 WX_CONFIG=/usr/bin/wx-config-gtk3" +def setup(): + pisitools.dosed("buildtools/config.py", "attrdict", deleteLine = True) + def build(): pythonmodules.compile(pyVer = '3', parameters = options) diff --git a/programming/language/python3/wxPython3/pspec.xml b/programming/language/python3/wxPython3/pspec.xml index 6df1e3a551..2894f8706c 100644 --- a/programming/language/python3/wxPython3/pspec.xml +++ b/programming/language/python3/wxPython3/pspec.xml @@ -12,8 +12,8 @@ library Python bindings for wxGTK wxPython is a GUI toolkit for the Python programming language. It allows Python programmers to create programs with a robust, highly functional graphical user interface, simply and easily. It is implemented as a Python extension module (native code) that wraps the popular wxWindows cross platform GUI library, which is written in C++. - - https://files.pythonhosted.org/packages/source/w/wxPython/wxPython-4.1.1.tar.gz + + https://files.pythonhosted.org/packages/source/w/wxPython/wxPython-4.2.0.tar.gz wxGTK3 @@ -51,6 +51,13 @@ + + 2022-09-05 + 4.2.0 + Version bump. + fury + uglyside@yandex.ru + 2022-07-29 4.1.1 diff --git a/programming/library/cpp-utilities/pspec.xml b/programming/library/cpp-utilities/pspec.xml index 22ff7764f9..16d2a0ff2d 100644 --- a/programming/library/cpp-utilities/pspec.xml +++ b/programming/library/cpp-utilities/pspec.xml @@ -13,8 +13,8 @@ programming.library Common C++ classes and routines used by my applications such as argument parser, IO and conversion utilities. Common C++ classes and routines used by my applications such as argument parser, IO and conversion utilities. - - https://github.com/Martchus/cpp-utilities/archive/refs/tags/v5.17.0.tar.gz + + https://github.com/Martchus/cpp-utilities/archive/refs/tags/v5.19.0.tar.gz cmake @@ -50,6 +50,13 @@ + + 2022-09-09 + 5.19.0 + Version bump + fury + uglyside@yandex.ru + 2022-07-10 5.17.0 diff --git a/programming/library/qtutilities/pspec.xml b/programming/library/qtutilities/pspec.xml index 74b333ec6e..c2bfe1202a 100644 --- a/programming/library/qtutilities/pspec.xml +++ b/programming/library/qtutilities/pspec.xml @@ -13,8 +13,8 @@ programming.library Common Qt related C++ classes and routines used by my applications such as dialogs, widgets and models. Common Qt related C++ classes and routines used by my applications such as dialogs, widgets and models. - - https://github.com/Martchus/qtutilities/archive/refs/tags/v6.6.2.tar.gz + + https://github.com/Martchus/qtutilities/archive/refs/tags/v6.8.0.tar.gz cmake @@ -53,6 +53,13 @@ + + 2022-09-09 + 6.8.0 + Version bump + fury + uglyside@yandex.ru + 2022-07-10 6.6.2 diff --git a/programming/library/z3/actions.py b/programming/library/z3/actions.py index 9598d2adf5..113400c087 100644 --- a/programming/library/z3/actions.py +++ b/programming/library/z3/actions.py @@ -31,5 +31,5 @@ def build(): def install(): shelltools.system("DESTDIR=%s ninja -C build install" % get.installDIR()) - pisitools.dodoc("LICENSE.txt", "README*", "RELEASE_NOTES") + pisitools.dodoc("RELEASE_NOTES.md") diff --git a/programming/library/z3/files/616fc2cbd5522137b78097c247feb04e266ff780.patch b/programming/library/z3/files/616fc2cbd5522137b78097c247feb04e266ff780.patch new file mode 100644 index 0000000000..46f25dd78e --- /dev/null +++ b/programming/library/z3/files/616fc2cbd5522137b78097c247feb04e266ff780.patch @@ -0,0 +1,23 @@ +From 616fc2cbd5522137b78097c247feb04e266ff780 Mon Sep 17 00:00:00 2001 +From: Nikolaj Bjorner +Date: Sun, 4 Sep 2022 16:22:11 -0700 +Subject: [PATCH] fix #6314 + +Signed-off-by: Nikolaj Bjorner +--- + src/solver/assertions/asserted_formulas.cpp | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/solver/assertions/asserted_formulas.cpp b/src/solver/assertions/asserted_formulas.cpp +index 5780ef227e..5dec90ba7a 100644 +--- a/src/solver/assertions/asserted_formulas.cpp ++++ b/src/solver/assertions/asserted_formulas.cpp +@@ -732,7 +732,7 @@ void asserted_formulas::bv_size_reduce_fn::simplify(justified_expr const& j, exp + auto check_reduce = [&](expr* a, expr* b) { + if (bv.is_extract(a, lo, hi, x) && lo > 0 && hi + 1 == bv.get_bv_size(x) && bv.is_numeral(b, r) && r == 0) { + // insert x -> x[0,lo-1] ++ n into sub +- new_term = bv.mk_concat(bv.mk_extract(lo - 1, 0, x), b); ++ new_term = bv.mk_concat(b, bv.mk_extract(lo - 1, 0, x)); + m_sub.insert(x, new_term); + n = j.get_fml(); + return true; diff --git a/programming/library/z3/pspec.xml b/programming/library/z3/pspec.xml index 440577f900..2321c9f2d8 100644 --- a/programming/library/z3/pspec.xml +++ b/programming/library/z3/pspec.xml @@ -13,8 +13,8 @@ programming.library The Z3 Theorem Prover. Z3 is a theorem prover from Microsoft Research. - - https://github.com/Z3Prover/z3/archive/refs/tags/z3-4.8.17.tar.gz + + https://github.com/Z3Prover/z3/archive/refs/tags/z3-4.11.2.tar.gz cmake @@ -23,6 +23,9 @@ python3-devel python3-setuptools + + 616fc2cbd5522137b78097c247feb04e266ff780.patch + @@ -64,6 +67,13 @@ + + 2022-09-05 + 4.11.2 + Version bump. + fury + uglyside@yandex.ru + 2022-05-28 4.8.17 diff --git a/programming/tool/cppcheck/actions.py b/programming/tool/cppcheck/actions.py index e33992197e..438d98d5e8 100644 --- a/programming/tool/cppcheck/actions.py +++ b/programming/tool/cppcheck/actions.py @@ -11,6 +11,7 @@ from pisi.actionsapi import get j = ''.join([ ' -DUSE_Z3=ON', + ' -DUSE_BOOST=ON', ' -DUSE_THREADS=ON', ' -DHAVE_RULES=ON', ' -DPYTHON_EXECUTABLE=/usr/bin/python3', @@ -18,6 +19,7 @@ j = ''.join([ ' -DBUILD_SHARED_LIBS=ON', ' -DBUILD_TESTS=OFF', ' -DCMAKE_BUILD_TYPE=Release', + ' -DCMAKE_CONFIGURATION_TYPES=RelWithDebInfo', ' -DUSE_BUNDLED_TINYXML2=OFF', ' -DCMAKE_DISABLE_PRECOMPILE_HEADERS=ON', ' -DENABLE_CHECK_INTERNAL=ON', diff --git a/programming/tool/cppcheck/files/Buffer_is_accessed_out_of_bounds.patch b/programming/tool/cppcheck/files/Buffer_is_accessed_out_of_bounds.patch new file mode 100644 index 0000000000..43ec965143 --- /dev/null +++ b/programming/tool/cppcheck/files/Buffer_is_accessed_out_of_bounds.patch @@ -0,0 +1,170 @@ +From 1e14e360cbb1418a4d4799d4b3a94dfb3b87f271 Mon Sep 17 00:00:00 2001 +From: chrchr-github <78114321+chrchr-github@users.noreply.github.com> +Date: Mon, 29 Aug 2022 12:24:58 +0200 +Subject: [PATCH] Fix #8295 FN (error) Buffer is accessed out of bounds + (wcpncpy, wcsncpy) (#4412) + +* Fix #8295 FN (error) Buffer is accessed out of bounds (wcpncpy, wcsncpy) + +* Fix cfg, validation + +* Fix validation +--- + cfg/cppcheck-cfg.rng | 19 ++++++++++++++++++- + cfg/posix.cfg | 2 +- + cfg/std.cfg | 2 +- + lib/checkbufferoverrun.cpp | 12 +++++++++--- + lib/library.cpp | 6 +++--- + test/cfg/posix.c | 8 ++++++++ + test/cfg/std.c | 8 ++++++++ + 7 files changed, 48 insertions(+), 9 deletions(-) + +diff --git a/cfg/cppcheck-cfg.rng b/cfg/cppcheck-cfg.rng +index b81a3533526..1f7b37de26b 100644 +--- a/cfg/cppcheck-cfg.rng ++++ b/cfg/cppcheck-cfg.rng +@@ -283,7 +283,6 @@ + + + strlen +- argvalue + sizeof + mul + +@@ -310,6 +309,24 @@ + + + ++ ++ ++ ++ argvalue ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +diff --git a/cfg/posix.cfg b/cfg/posix.cfg +index 9fa1597f433..83766ed1215 100644 +--- a/cfg/posix.cfg ++++ b/cfg/posix.cfg +@@ -5449,7 +5449,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s + + + +- ++ + + + +diff --git a/cfg/std.cfg b/cfg/std.cfg +index 86ce3954a2c..a7387dfb353 100644 +--- a/cfg/std.cfg ++++ b/cfg/std.cfg +@@ -5359,7 +5359,7 @@ The obsolete function 'gets' is called. With 'gets' you'll get a buffer overrun + + + +- ++ + + + +diff --git a/lib/checkbufferoverrun.cpp b/lib/checkbufferoverrun.cpp +index f929bdbeb73..d8160e81bab 100644 +--- a/lib/checkbufferoverrun.cpp ++++ b/lib/checkbufferoverrun.cpp +@@ -593,10 +593,16 @@ static bool checkBufferSize(const Token *ftok, const Library::ArgumentChecks::Mi + return Token::getStrLength(strtoken) < bufferSize; + } + break; +- case Library::ArgumentChecks::MinSize::Type::ARGVALUE: +- if (arg && arg->hasKnownIntValue()) +- return arg->getKnownIntValue() <= bufferSize; ++ case Library::ArgumentChecks::MinSize::Type::ARGVALUE: { ++ if (arg && arg->hasKnownIntValue()) { ++ MathLib::bigint myMinsize = arg->getKnownIntValue(); ++ unsigned int baseSize = tokenizer->sizeOfType(minsize.baseType); ++ if (baseSize != 0) ++ myMinsize *= baseSize; ++ return myMinsize <= bufferSize; ++ } + break; ++ } + case Library::ArgumentChecks::MinSize::Type::SIZEOF: + // TODO + break; +diff --git a/lib/library.cpp b/lib/library.cpp +index c22d76c3cba..f74b000edb2 100644 +--- a/lib/library.cpp ++++ b/lib/library.cpp +@@ -783,9 +783,6 @@ Library::Error Library::loadFunction(const tinyxml2::XMLElement * const node, co + return Error(ErrorCode::BAD_ATTRIBUTE_VALUE, valueattr); + ac.minsizes.emplace_back(type, 0); + ac.minsizes.back().value = minsizevalue; +- const char* baseTypeAttr = argnode->Attribute("baseType"); +- if (baseTypeAttr) +- ac.minsizes.back().baseType = baseTypeAttr; + } else { + const char *argattr = argnode->Attribute("arg"); + if (!argattr) +@@ -804,6 +801,9 @@ Library::Error Library::loadFunction(const tinyxml2::XMLElement * const node, co + ac.minsizes.back().arg2 = arg2attr[0] - '0'; + } + } ++ const char* baseTypeAttr = argnode->Attribute("baseType"); // used by VALUE, ARGVALUE ++ if (baseTypeAttr) ++ ac.minsizes.back().baseType = baseTypeAttr; + } + + else if (argnodename == "iterator") { +diff --git a/test/cfg/posix.c b/test/cfg/posix.c +index aad6217ee20..195f86f8575 100644 +--- a/test/cfg/posix.c ++++ b/test/cfg/posix.c +@@ -564,6 +564,14 @@ size_t bufferAccessOutOfBounds_strnlen(const char *s, size_t maxlen) + return len; + } + ++void bufferAccessOutOfBounds_wcpncpy() ++{ ++ wchar_t s[16]; ++ wcpncpy(s, L"abc", 16); ++ // cppcheck-suppress bufferAccessOutOfBounds ++ wcpncpy(s, L"abc", 17); ++} ++ + size_t nullPointer_strnlen(const char *s, size_t maxlen) + { + // No warning shall be shown: +diff --git a/test/cfg/std.c b/test/cfg/std.c +index 9ca3a61f06c..e60e9063704 100644 +--- a/test/cfg/std.c ++++ b/test/cfg/std.c +@@ -556,6 +556,14 @@ void bufferAccessOutOfBounds_wcsftime(wchar_t* ptr, size_t maxsize, const wchar_ + (void)wcsftime(ptr, maxsize, format, timeptr); + } + ++void bufferAccessOutOfBounds_wcsncpy() ++{ ++ wchar_t s[16]; ++ wcsncpy(s, L"abc", 16); ++ // cppcheck-suppress bufferAccessOutOfBounds ++ wcsncpy(s, L"abc", 17); ++} ++ + int nullPointer_wcsncmp(const wchar_t* s1, const wchar_t* s2, size_t n) + { + // cppcheck-suppress nullPointer diff --git a/programming/tool/cppcheck/pspec.xml b/programming/tool/cppcheck/pspec.xml index 4ab55ecc29..4393cb421c 100644 --- a/programming/tool/cppcheck/pspec.xml +++ b/programming/tool/cppcheck/pspec.xml @@ -16,13 +16,14 @@ Cppcheck is a static analysis tool for C/C++ code. It provides unique code analysis to detect bugs and focuses on detecting undefined behaviour and dangerous coding constructs. The goal is to detect only real errors in the code (i.e. have very few false positives). - - mirrors://sourceforge/cppcheck/cppcheck-2.8.tar.bz2 + + mirrors://sourceforge/cppcheck/cppcheck-2.9.tar.bz2 cmake z3-devel zlib-devel + boost-devel docbook-xsl qt5-sql-odbc qt5-linguist @@ -41,6 +42,7 @@ htmlreport_py3.patch qm_install_path.patch + Buffer_is_accessed_out_of_bounds.patch @@ -68,6 +70,13 @@ + + 2022-09-05 + 2.9 + Ver. bump + fury + uglyside@yandex.ru + 2022-05-28 2.8 diff --git a/x11/misc/rofi/pspec.xml b/x11/misc/rofi/pspec.xml index 2b5c10b508..379b99a533 100644 --- a/x11/misc/rofi/pspec.xml +++ b/x11/misc/rofi/pspec.xml @@ -12,8 +12,8 @@ app rofi A window switcher, application launcher and dmenu replacement. - - https://github.com/davatorium/rofi/releases/download/1.7.3/rofi-1.7.3.tar.xz + + https://github.com/davatorium/rofi/releases/download/1.7.5/rofi-1.7.5.tar.xz pango-devel @@ -71,6 +71,13 @@ + + 2022-09-05 + 1.7.5 + Version bump. + fury + uglyside@yandex.ru + 2022-02-04 1.7.3