{"thread":{"id":"41731","subject":"[ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","startedAt":"2016-03-17T21:07:51Z","lastAt":"2016-03-21T13:33:38Z","messageCount":7,"participants":["Junio C Hamano","Torsten Bögershausen","Renato Botelho","Eric Sunshine","Jeff King"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"281082","messageId":"xmqqlh5gzuc8.fsf@gitster.mtv.corp.google.com","threadId":"41731","inReplyTo":null,"subject":"[ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2016-03-17T21:07:51Z","receivedAt":"2016-03-17T21:07:51Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"The latest maintenance release Git v2.7.4 is now available at the\nusual places. The same set of bugfix patches from the current\n'master' have been backported to older maintenance tracks and are\navailable as v2.4.11, v2.5.5 and v2.6.6. These are to fix a heap\ncorruption / buffer overflow bug and users are strongly encouraged\nto upgrade. The fix has already been in the release candidate\nv2.8.0-rc3 as well.\n\nThe tarballs are found at:\n\n https://www.kernel.org/pub/software/scm/git/\n\nThe following public repositories all have a copy of the 'v2.7.4'\ntag and the 'maint' branch that the tag points at:\n\n url = https://kernel.googlesource.com/pub/scm/git/git\n url = git://repo.or.cz/alt-git.git\n url = git://git.sourceforge.jp/gitroot/git-core/git.git\n url = git://git-core.git.sourceforge.net/gitroot/git-core/git-core\n url = https://github.com/gitster/git\n\n----------------------------------------------------------------\n\nGit v2.7.4 Release Notes\n========================\n\nFixes since v2.7.3\n------------------\n\n * Bugfix patches were backported from the 'master' front to plug heap\n corruption holes, to catch integer overflow in the computation of\n pathname lengths, and to get rid of the name_path API. Both of\n these would have resulted in writing over an under-allocated buffer\n when formulating pathnames while tree traversal.\n\n----------------------------------------------------------------\n\nChanges since v2.7.3 are as follows:\n\nJeff King (7):\n add helpers for detecting size_t overflow\n tree-diff: catch integer overflow in combine_diff_path allocation\n http-push: stop using name_path\n show_object_with_name: simplify by using path_name()\n list-objects: convert name_path to a strbuf\n list-objects: drop name_path entirely\n list-objects: pass full pathname to callbacks\n\nJunio C Hamano (4):\n Git 2.4.11\n Git 2.5.5\n Git 2.6.6\n Git 2.7.4\n"},{"id":"281137","messageId":"56EBBC72.7000201@web.de","threadId":"41731","inReplyTo":"xmqqlh5gzuc8.fsf@gitster.mtv.corp.google.com","subject":"Re: [ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","fromName":"Torsten Bögershausen","fromEmail":"tboegi@web.de","sentAt":"2016-03-18T08:29:38Z","receivedAt":"2016-03-18T08:29:38Z","isPatch":false,"sender":{"key":"tboegi@web.de","avatar":"https://avatars.githubusercontent.com/u/7138363?v=4"},"body":"> Git v2.7.4 Release Notes\n> ========================\n> \n> Fixes since v2.7.3\n> ------------------\n> \n> * Bugfix patches were backported from the 'master' front to plug heap\n> corruption holes, to catch integer overflow in the computation of\n> pathname lengths, and to get rid of the name_path API. Both of\n> these would have resulted in writing over an under-allocated buffer\n> when formulating pathnames while tree traversal.\n> \n> ----------------------------------------------------------------\n> \n> Changes since v2.7.3 are as follows:\n> \n> Jeff King (7):\n> add helpers for detecting size_t overflow\n> tree-diff: catch integer overflow in combine_diff_path allocation\n> http-push: stop using name_path\n> show_object_with_name: simplify by using path_name()\n> list-objects: convert name_path to a strbuf\n> list-objects: drop name_path entirely\n> list-objects: pass full pathname to callbacks\n> \nIf there is a new 2.7.x release, does it make sense to cherry-pick this one:\n\ncommit 7b6daf8d2fee1a9866b1d4eddbfaa5dbc42c5dbb\nAuthor: Torsten Bögershausen \nDate: Sun Feb 28 21:09:44 2016 +0100\n\n config.mak.uname: use clang for Mac OS X 10.6\n \n"},{"id":"281281","messageId":"680C4CDE-233E-4603-B3F1-D68EB126620F@FreeBSD.org","threadId":"41731","inReplyTo":"xmqqlh5gzuc8.fsf@gitster.mtv.corp.google.com","subject":"Re: [ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","fromName":"Renato Botelho","fromEmail":"garga@freebsd.org","sentAt":"2016-03-20T15:32:51Z","receivedAt":"2016-03-20T15:32:51Z","isPatch":false,"sender":{"key":"garga@freebsd.org","avatar":"https://gravatar.com/avatar/695c68fb2f0629998c430204a7212aec683a3f87ec5eeaae236fd2376e790bfc?d=mp&s=160"},"body":"> On Mar 17, 2016, at 18:07, Junio C Hamano wrote:\n> \n> The latest maintenance release Git v2.7.4 is now available at the\n> usual places. The same set of bugfix patches from the current\n> 'master' have been backported to older maintenance tracks and are\n> available as v2.4.11, v2.5.5 and v2.6.6. These are to fix a heap\n> corruption / buffer overflow bug and users are strongly encouraged\n> to upgrade. The fix has already been in the release candidate\n> v2.8.0-rc3 as well.\n> \n> The tarballs are found at:\n> \n> https://www.kernel.org/pub/software/scm/git/\n> \n> The following public repositories all have a copy of the 'v2.7.4'\n> tag and the 'maint' branch that the tag points at:\n> \n> url = https://kernel.googlesource.com/pub/scm/git/git\n> url = git://repo.or.cz/alt-git.git\n> url = git://git.sourceforge.jp/gitroot/git-core/git.git\n> url = git://git-core.git.sourceforge.net/gitroot/git-core/git-core\n> url = https://github.com/gitster/git\n> \n> ----------------------------------------------------------------\n> \n> Git v2.7.4 Release Notes\n> ========================\n> \n> Fixes since v2.7.3\n> ------------------\n> \n> * Bugfix patches were backported from the 'master' front to plug heap\n> corruption holes, to catch integer overflow in the computation of\n> pathname lengths, and to get rid of the name_path API. Both of\n> these would have resulted in writing over an under-allocated buffer\n> when formulating pathnames while tree traversal.\n> \n> ----------------------------------------------------------------\n> \n> Changes since v2.7.3 are as follows:\n> \n> Jeff King (7):\n> add helpers for detecting size_t overflow\n> tree-diff: catch integer overflow in combine_diff_path allocation\n> http-push: stop using name_path\n> show_object_with_name: simplify by using path_name()\n> list-objects: convert name_path to a strbuf\n> list-objects: drop name_path entirely\n> list-objects: pass full pathname to callbacks\n> \n> Junio C Hamano (4):\n> Git 2.4.11\n> Git 2.5.5\n> Git 2.6.6\n> Git 2.7.4\n\nFYI,\n\n2.7.4 fails to build on FreeBSD 9.x, that uses by default gcc 4.2.1. I’ve fixed it adding an extra dependency to make force it to require gcc 4.8+. Here is the output:\n\ncc -o combine-diff.o -c -MF ./.depend/combine-diff.o.d -MQ combine-diff.o -MMD -MP -isystem/usr/local/include -O2 -pipe -fstack-protector -fno-strict-aliasing -I. -I/usr/local/include -I/usr/local/include -DUSE_CURL_FOR_IMAP_SEND -I/usr/include -DUSE_ST_TIMESPEC -pthread -DHAVE_PATHS_H -DHAVE_STRINGS_H -DGMTIME_UNRELIABLE_ERRORS -DHAVE_CLOCK_GETTIME -DHAVE_CLOCK_MONOTONIC -DHAVE_BSD_SYSCTL -DHAVE_GETDELIM -DSHA1_HEADER='' -DDIR_HAS_BSD_GROUP_SEMANTICS -DSHELL_PATH='\"/bin/sh\"' combine-diff.c\ncombine-diff.c: In function 'diff_tree_combined':\ncombine-diff.c:1391: internal compiler error: Segmentation fault: 11\nPlease submit a full bug report,\nwith preprocessed source if appropriate.\nSee for instructions.\nMakefile:1924: recipe for target 'combine-diff.o' failed\ngmake: *** [combine-diff.o] Error 1\n*** [do-build] Error code 1\n\n--\nRenato Botelho\n"},{"id":"281293","messageId":"CAPig+cSOjFqcKGaZC1HWGdp7aCg7Dog1GvFYPYRbShARPm9ODQ@mail.gmail.com","threadId":"41731","inReplyTo":"680C4CDE-233E-4603-B3F1-D68EB126620F@FreeBSD.org","subject":"Re: [ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","fromName":"Eric Sunshine","fromEmail":"sunshine@sunshineco.com","sentAt":"2016-03-20T17:07:52Z","receivedAt":"2016-03-20T17:07:52Z","isPatch":false,"sender":{"key":"sunshine@sunshineco.com","avatar":"https://avatars.githubusercontent.com/u/163641?v=4"},"body":"[cc:+peff]\n\nOn Sun, Mar 20, 2016 at 11:32 AM, Renato Botelho wrote:\n>> On Mar 17, 2016, at 18:07, Junio C Hamano wrote:\n>> Git v2.7.4 Release Notes\n>>\n>> Junio C Hamano (4):\n>> Git 2.4.11\n>> Git 2.5.5\n>> Git 2.6.6\n>> Git 2.7.4\n>\n> FYI,\n>\n> 2.7.4 fails to build on FreeBSD 9.x, that uses by default gcc 4.2.1. I’ve fixed it adding an extra dependency to make force it to require gcc 4.8+. Here is the output:\n>\n> cc -o combine-diff.o -c -MF ./.depend/combine-diff.o.d -MQ combine-diff.o -MMD -MP -isystem/usr/local/include -O2 -pipe -fstack-protector -fno-strict-aliasing -I. -I/usr/local/include -I/usr/local/include -DUSE_CURL_FOR_IMAP_SEND -I/usr/include -DUSE_ST_TIMESPEC -pthread -DHAVE_PATHS_H -DHAVE_STRINGS_H -DGMTIME_UNRELIABLE_ERRORS -DHAVE_CLOCK_GETTIME -DHAVE_CLOCK_MONOTONIC -DHAVE_BSD_SYSCTL -DHAVE_GETDELIM -DSHA1_HEADER='' -DDIR_HAS_BSD_GROUP_SEMANTICS -DSHELL_PATH='\"/bin/sh\"' combine-diff.c\n> combine-diff.c: In function 'diff_tree_combined':\n> combine-diff.c:1391: internal compiler error: Segmentation fault: 11\n> Please submit a full bug report,\n> with preprocessed source if appropriate.\n> See for instructions.\n> Makefile:1924: recipe for target 'combine-diff.o' failed\n> gmake: *** [combine-diff.o] Error 1\n> *** [do-build] Error code 1\n\nInteresting. This appears to be the same bug as [1].\n\n[1]: http://thread.gmane.org/gmane.comp.version-control.git/287486/focus=287789\n"},{"id":"281305","messageId":"20160320194313.GB6288@sigill.intra.peff.net","threadId":"41731","inReplyTo":"CAPig+cSOjFqcKGaZC1HWGdp7aCg7Dog1GvFYPYRbShARPm9ODQ@mail.gmail.com","subject":"Re: [ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","fromName":"Jeff King","fromEmail":"peff@peff.net","sentAt":"2016-03-20T19:43:13Z","receivedAt":"2016-03-20T19:43:13Z","isPatch":false,"sender":{"key":"peff@peff.net","avatar":"https://avatars.githubusercontent.com/u/45925?v=4"},"body":"On Sun, Mar 20, 2016 at 01:07:52PM -0400, Eric Sunshine wrote:\n\n> On Sun, Mar 20, 2016 at 11:32 AM, Renato Botelho wrote:\n> >> On Mar 17, 2016, at 18:07, Junio C Hamano wrote:\n> >> Git v2.7.4 Release Notes\n> >>\n> >> Junio C Hamano (4):\n> >> Git 2.4.11\n> >> Git 2.5.5\n> >> Git 2.6.6\n> >> Git 2.7.4\n> >\n> > FYI,\n> >\n> > 2.7.4 fails to build on FreeBSD 9.x, that uses by default gcc 4.2.1. I’ve fixed it adding an extra dependency to make force it to require gcc 4.8+. Here is the output:\n> >\n> > cc -o combine-diff.o -c -MF ./.depend/combine-diff.o.d -MQ combine-diff.o -MMD -MP -isystem/usr/local/include -O2 -pipe -fstack-protector -fno-strict-aliasing -I. -I/usr/local/include -I/usr/local/include -DUSE_CURL_FOR_IMAP_SEND -I/usr/include -DUSE_ST_TIMESPEC -pthread -DHAVE_PATHS_H -DHAVE_STRINGS_H -DGMTIME_UNRELIABLE_ERRORS -DHAVE_CLOCK_GETTIME -DHAVE_CLOCK_MONOTONIC -DHAVE_BSD_SYSCTL -DHAVE_GETDELIM -DSHA1_HEADER='' -DDIR_HAS_BSD_GROUP_SEMANTICS -DSHELL_PATH='\"/bin/sh\"' combine-diff.c\n> > combine-diff.c: In function 'diff_tree_combined':\n> > combine-diff.c:1391: internal compiler error: Segmentation fault: 11\n> > Please submit a full bug report,\n> > with preprocessed source if appropriate.\n> > See for instructions.\n> > Makefile:1924: recipe for target 'combine-diff.o' failed\n> > gmake: *** [combine-diff.o] Error 1\n> > *** [do-build] Error code 1\n> \n> Interesting. This appears to be the same bug as [1].\n> \n> [1]: http://thread.gmane.org/gmane.comp.version-control.git/287486/focus=287789\n\nYes. AFAICT that version of gcc is simply buggy, and we are not doing\nanything illegal or even particularly exotic. Given how old it is, I'm\nnot sure it's worth worrying too much about it, but I am happy to work\naround it if somebody can figure out how to do so.\n\nI spent some time trying to bisect gcc, but had trouble getting a\nworking build for a gcc that old.\n\n-Peff\n"},{"id":"281323","messageId":"CAPig+cR7d0UF08fQy5uXW8U+7rdjGSO1drMxm6LOV-KB40mwPw@mail.gmail.com","threadId":"41731","inReplyTo":"20160320194313.GB6288@sigill.intra.peff.net","subject":"Re: [ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","fromName":"Eric Sunshine","fromEmail":"sunshine@sunshineco.com","sentAt":"2016-03-21T04:41:57Z","receivedAt":"2016-03-21T04:41:57Z","isPatch":false,"sender":{"key":"sunshine@sunshineco.com","avatar":"https://avatars.githubusercontent.com/u/163641?v=4"},"body":"[cc:+Torsten]\n\nOn Sun, Mar 20, 2016 at 3:43 PM, Jeff King wrote:\n> On Sun, Mar 20, 2016 at 01:07:52PM -0400, Eric Sunshine wrote:\n>> On Sun, Mar 20, 2016 at 11:32 AM, Renato Botelho wrote:\n>> > 2.7.4 fails to build on FreeBSD 9.x, that uses by default gcc 4.2.1. I’ve fixed it adding an extra dependency to make force it to require gcc 4.8+. Here is the output:\n>> >\n>> > combine-diff.c: In function 'diff_tree_combined':\n>> > combine-diff.c:1391: internal compiler error: Segmentation fault: 11\n>>\n>> Interesting. This appears to be the same bug as [1].\n>>\n>> [1]: http://thread.gmane.org/gmane.comp.version-control.git/287486/focus=287789\n>\n> Yes. AFAICT that version of gcc is simply buggy, and we are not doing\n> anything illegal or even particularly exotic. Given how old it is, I'm\n> not sure it's worth worrying too much about it, but I am happy to work\n> around it if somebody can figure out how to do so.\n>\n> I spent some time trying to bisect gcc, but had trouble getting a\n> working build for a gcc that old.\n\nI installed FreeBSD 9 and managed to reproduce the compiler crash.\nAfter a bit of experimentation, I devised a simple work-around and\nsubmitted it as a patch[1].\n\n[1]: http://thread.gmane.org/gmane.comp.version-control.git/289397\n"},{"id":"281341","messageId":"2342B066-CDD4-4EA6-8AB4-AC093AAF4DA7@FreeBSD.org","threadId":"41731","inReplyTo":"CAPig+cR7d0UF08fQy5uXW8U+7rdjGSO1drMxm6LOV-KB40mwPw@mail.gmail.com","subject":"Re: [ANNOUNCE] Git v2.7.4 (and updates to older maintenance tracks)","fromName":"Renato Botelho","fromEmail":"garga@freebsd.org","sentAt":"2016-03-21T13:33:38Z","receivedAt":"2016-03-21T13:33:38Z","isPatch":false,"sender":{"key":"garga@freebsd.org","avatar":"https://gravatar.com/avatar/695c68fb2f0629998c430204a7212aec683a3f87ec5eeaae236fd2376e790bfc?d=mp&s=160"},"body":"> On Mar 21, 2016, at 01:41, Eric Sunshine wrote:\n> \n> [cc:+Torsten]\n> \n> On Sun, Mar 20, 2016 at 3:43 PM, Jeff King wrote:\n>> On Sun, Mar 20, 2016 at 01:07:52PM -0400, Eric Sunshine wrote:\n>>> On Sun, Mar 20, 2016 at 11:32 AM, Renato Botelho wrote:\n>>>> 2.7.4 fails to build on FreeBSD 9.x, that uses by default gcc 4.2.1. I’ve fixed it adding an extra dependency to make force it to require gcc 4.8+. Here is the output:\n>>>> \n>>>> combine-diff.c: In function 'diff_tree_combined':\n>>>> combine-diff.c:1391: internal compiler error: Segmentation fault: 11\n>>> \n>>> Interesting. This appears to be the same bug as [1].\n>>> \n>>> [1]: http://thread.gmane.org/gmane.comp.version-control.git/287486/focus=287789\n>> \n>> Yes. AFAICT that version of gcc is simply buggy, and we are not doing\n>> anything illegal or even particularly exotic. Given how old it is, I'm\n>> not sure it's worth worrying too much about it, but I am happy to work\n>> around it if somebody can figure out how to do so.\n>> \n>> I spent some time trying to bisect gcc, but had trouble getting a\n>> working build for a gcc that old.\n> \n> I installed FreeBSD 9 and managed to reproduce the compiler crash.\n> After a bit of experimentation, I devised a simple work-around and\n> submitted it as a patch[1].\n> \n> [1]: http://thread.gmane.org/gmane.comp.version-control.git/289397\n\nThank you! That works fine.\n--\nRenato Botelho\n"}]}