Change logs for mksh source package in Impish

  • mksh (59c-9) unstable; urgency=medium
    
      * Cherry-pick bugfixes from CVS HEAD:
        - stop referring to dead IRC network
        - check lower bounds of input line array when backspacing
        - protect against hi-bit7 (stty) EOF character
        - show error message and exit nōn-zero on stdout write failure
          for builtin calls (Closes: #990265) + display correct errno
        - show error message in echo/print builtin on output write failure
          (it exits 1 already in that case)
        - ensure macro calls don’t have side effects in arguments
        - properly flush stderr and unwind for direct builtin calls
          (“ln -s /bin/mksh echo; ./echo …”)
        - fix truncation behaviour for internal snprintf equivalent
      * Update upstream contact info accordingly
    
     -- Thorsten Glaser <email address hidden>  Sat, 10 Jul 2021 22:08:30 +0200
  • mksh (59c-8) unstable; urgency=medium
    
      * Fix a -Wpointer-sign in escaping code
      * Shrink escape diff (algorithm unchanged) for easier review
    
     -- Thorsten Glaser <email address hidden>  Mon, 31 May 2021 02:42:55 +0200
  • mksh (59c-6) unstable; urgency=medium
    
      * Clear “taint” on most actions mutating a variable
    
     -- Thorsten Glaser <email address hidden>  Mon, 03 May 2021 03:26:28 +0200
  • mksh (59c-5) unstable; urgency=medium
    
      * Apply targeted fixes, intended for bullseye:
        - [tg] Plug some memory leaks
        - [tg] Harden conversion of imported variables to integer, like
          Perl “taint”: imported variables will now lose the value when
          converting to integer but they are not purely numeric
          (CVE-2019-14868 was a similar issue in AT&T ksh); honour
          -o posix for leading-zero as octal, though (but continue not
          when importing array indicēs)
        - [tg] Fix lexer token state corruption when reading new input;
          makes evaluate-region editing command actually useful
        - [tg] Fix proper escaping/quoting and tab completion for tilde,
          curly braces and \x02, either escaped or not
        Note: patches are reduced to minimum change for bullseye
      * Rebuild for outdated Built-Using
    
     -- Thorsten Glaser <email address hidden>  Sun, 02 May 2021 23:52:52 +0200
  • mksh (59c-4) unstable; urgency=low
    
      * Update to upstream CVS HEAD
        - [tg] Make "C" the implementation-specified default locale for
          early-locale-tracking (note full locale tracking will have to
          use whatever the underlying OS’ is, if no setlocale(3) it’ll
          be just "C" again) and document possibly removing turning on
          POSIX mode disabling and presence of a BOM enabling UTF-8 mode
          with full locale tracking
        - [tg] Document OPTU-16 (U+EF80‥U+EFFF) mapping for raw octets will not
          be present once mksh will have switched to full 21-bit UCS / UTF-8
        - [tg] Add several bigword-based editing commands to Emacs mode
        - [tg] Improve documentation wrt. $ENV
      * Bring locale tracking code somewhat closer to what will eventually be
        in upstream code (once I manage to do the related changes around MirBSD
        base and its scripts, which needs some more time and tuits):
        - drop BOM enabling UTF-8 mode code
        - no longer deactivate UTF-8 mode on entering POSIX mode
          (rationale: the POSIX locale parameters will be the only deciding
          factor; even if, nominally, only the POSIX locale is compliant)
      * Apply locale tracking to nōn-interactive shells as well
    
     -- Thorsten Glaser <email address hidden>  Sat, 13 Mar 2021 19:09:48 +0100
  • mksh (59c-3) unstable; urgency=medium
    
      * Update to upstream CVS HEAD
        - [tg] Defend against getcwd() syscall on Linux violating POSIX
        - [tg] Fix GNU/Hurd codepath path length type, realpath errno
        - [komh] Fix jobless build (missing ifdef)
        - [tg] Fix struct stat mtime member detection
      * Turn on locale tracking; upstream will do it in a few days anyway
    
     -- Thorsten Glaser <email address hidden>  Sun, 07 Feb 2021 02:57:12 +0100