svn commit: r400210 - in head/net-p2p/twister: . files

Thierry Thomas thierry at FreeBSD.org
Mon Oct 26 21:46:15 UTC 2015


Author: thierry
Date: Mon Oct 26 21:46:13 2015
New Revision: 400210
URL: https://svnweb.freebsd.org/changeset/ports/400210

Log:
  Upgrade to 0.9.31: back-ported utp vulnerability fix from
  libtorrent-rasterbar.
  
  Changelog at http://twister.net.co/?p=575
  
  Security:	uTP vulnerability (also known as DRDoS in torrent world) and lazy_bdecode overrun

Added:
  head/net-p2p/twister/files/patch-src_twister.cpp   (contents, props changed)
Modified:
  head/net-p2p/twister/Makefile
  head/net-p2p/twister/distinfo

Modified: head/net-p2p/twister/Makefile
==============================================================================
--- head/net-p2p/twister/Makefile	Mon Oct 26 21:30:44 2015	(r400209)
+++ head/net-p2p/twister/Makefile	Mon Oct 26 21:46:13 2015	(r400210)
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	twister-core
-PORTVERSION=	0.9.30
+PORTVERSION=	0.9.31
 DISTVERSIONPREFIX=	v
 PORTEPOCH=	1
 CATEGORIES=	net-p2p

Modified: head/net-p2p/twister/distinfo
==============================================================================
--- head/net-p2p/twister/distinfo	Mon Oct 26 21:30:44 2015	(r400209)
+++ head/net-p2p/twister/distinfo	Mon Oct 26 21:46:13 2015	(r400210)
@@ -1,2 +1,2 @@
-SHA256 (miguelfreitas-twister-core-v0.9.30_GH0.tar.gz) = f37b7f5dc359629dfe69b11770c180be66829e39b3c49d0c82b9886f308e69c4
-SIZE (miguelfreitas-twister-core-v0.9.30_GH0.tar.gz) = 6206014
+SHA256 (miguelfreitas-twister-core-v0.9.31_GH0.tar.gz) = ccb85f5eaac46a668908c69063adcc796a2bb4cb69907b1c093dbf8fcf58c101
+SIZE (miguelfreitas-twister-core-v0.9.31_GH0.tar.gz) = 6211128

Added: head/net-p2p/twister/files/patch-src_twister.cpp
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/net-p2p/twister/files/patch-src_twister.cpp	Mon Oct 26 21:46:13 2015	(r400210)
@@ -0,0 +1,26 @@
+--- src/twister.cpp.orig	2015-10-19 01:02:01 UTC
++++ src/twister.cpp
+@@ -1624,7 +1624,7 @@ bool usernameExists(std::string const &u
+ 
+ bool createSignedUserpost(entry &v, std::string const &username, int k,
+                           int flag, std::string const &msg,
+-                          entry const *ent, entry const *sig,
++                          entry const *ent, entry const *sig_rtfav,
+                           std::string const &reply_n = "", int reply_k = 0)
+ {
+     entry &userpost = v["userpost"];
+@@ -1657,12 +1657,12 @@ bool createSignedUserpost(entry &v, std:
+         }
+         //userpost["t"] = "rt";
+         userpost["rt"] = *ent;
+-        userpost["sig_rt"] = *sig;
++        userpost["sig_rt"] = *sig_rtfav;
+         break;
+     }
+     case USERPOST_FLAG_FAV:
+         userpost["fav"] = *ent;
+-        userpost["sig_fav"] = *sig;
++        userpost["sig_fav"] = *sig_rtfav;
+         break;
+     case USERPOST_FLAG_DM:
+         //userpost["t"] = "dm";


More information about the svn-ports-all mailing list