Commit Briefs

Thomas Adam

portable: add support for landlock

landlock is a new set of linux APIs that is conceptually similar to unveil(2): the idea is to restrict what a process can do on a specified part of the filesystem. There are some differences in the behaviour: the major one being that the landlock ruleset is inherited across execve(2). This just restricts the libexec helpers by completely revoking ANY filesystem access; after all they are the biggest attack surface. got send/fetch/clone *may* end up spawning ssh(1), so at the moment is not possible to landlock the main process. From Omar Polo.

diff | patch | tree

Thomas Adam

portable: add FreeBSD support

This adds the capability to compile got-portable on FreeBSD.

diff | patch | tree

Thomas Adam

portable: initial Linux compilation

This commit modifies the GoT main branch to be able to compile it under linux.

diff | patch | tree

Stefan Sperling

verify object ID checksums while loose objects are being accessed

diff | patch | tree

Stefan Sperling

add checksum parameters to got_inflate functions which did not provide them yet

diff | patch | tree

Stefan Sperling

make close(2) failure checks consistent; check 'close() == -1' everywhere

ok millert, naddy

diff | patch | tree

Stefan Sperling

make fclose(3) failure checks consistent; check 'fclose() == EOF' everywhere

ok millert, naddy

diff | patch | tree

Christian Weisgerber

Stop including <sys/syslimits.h> directly.

POSIX says the limits defined there are available from <limits.h>, which almost all affected source files already included anyway. ok millert stsp

diff | patch | tree

Christian Weisgerber

do not rely on <zlib.h> to pull in <unistd.h>

ok stsp

diff | patch | tree

Stefan Sperling

add optional 'consumed' output parameter to got_inflate_to_mem()

diff | patch | tree

Stefan Sperling

add copyright year for files already touched in 2020

diff | patch | tree

Stefan Sperling

rename to parsed_tree_entries_free for clarity (don't use with got_tree_object)

diff | patch | tree

Stefan Sperling

plug a memory leak; parsed tree entries were not freed

diff | patch | tree

Stefan Sperling

reduce the amount of memcpy() and strdup() while parsing tree entries

diff | patch | tree

Stefan Sperling

include <limits.h> instead of <sys/limits.h>; patch by Thomas Klausner

diff | patch | tree

Stefan Sperling

rename got_error_prefix_errno() to got_error_from_errno()

diff | patch | tree

joshua stein

while (1) -> for (;;)

diff | patch | tree

joshua stein

got_error_from_errno -> got_error_prefix_errno

also add got_error_prefix_errno2 and got_error_prefix_errno3 which should hopefully all be merged into a single function with variadic args (but can't alloc mem)

diff | patch | tree

Stefan Sperling

check for errors from close(2)

diff | patch | tree

Stefan Sperling

check for errors from fclose()

diff | patch | tree

Stefan Sperling

eliminate got_object_open() round-trip when opening trees

diff | patch | tree

Stefan Sperling

don't be noisy on stderr when Ctrl-C is hit

diff | patch | tree

Stefan Sperling

abort checkout operations cleanly when Ctrl-C is hit

diff | patch | tree

Stefan Sperling

fix 'make PROFILE=1' build

diff | patch | tree

Stefan Sperling

start reading pack files with privsep; still WIP

diff | patch | tree