Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Install issue #297

Closed
chasset opened this issue Oct 22, 2015 · 11 comments
Closed

Install issue #297

chasset opened this issue Oct 22, 2015 · 11 comments
Assignees

Comments

@chasset
Copy link

chasset commented Oct 22, 2015

During the install process, the 4th step - sudo tar -zxpf bootstrap-2015Q3-i386.tar.gz -C / - issues the following error :
./var/db/pkgin/cache/: Cannot extract through symlink var
tar: Error exit delayed from previous errors.

@rmustacc
Copy link

Can you include information about what platform you're installing on are?

@chasset
Copy link
Author

chasset commented Oct 22, 2015

Mac OS X 10.11.1

@chorrell
Copy link

I get the same issue on Mac OS X 10.11.1 as well:

[christopher@MacBook ~/Downloads]$ sudo tar -zxpf bootstrap-2015Q3-x86_64.tar.gz -C /
./var/db/pkgin/cache/: Cannot extract through symlink var
tar: Error exit delayed from previous errors.

Following these instructions: https://pkgsrc.joyent.com/install-on-osx/

@chorrell
Copy link

Also:

[christopher@MacBook ~/Downloads]$ ls -AlFh / |grep var
lrwxr-xr-x@   1 root         wheel    11B 23 Oct 19:35 var@ -> private/var

Did that change from a previous OS X release?

@rmustacc
Copy link

No, it hasn't at least compared to my instance of 10.8. I wonder if there's an issue with the whole image protection here and trying to traverse it for some reason.

@chorrell
Copy link

fwiw, this doesn't happen with 2015Q2:

[christopher@MacBook ~/Downloads]$ sudo tar -zxpf bootstrap-2015Q2-x86_64.tar.gz -C /
Password:
christopher@MacBook ~/Downloads]$ ls -AlFh /var/db/pkgin/
total 21792
drwxr-xr-x  2 root  wheel    68B 24 Oct 11:32 cache/
-rw-r--r--  1 root  wheel    11M 24 Oct 11:33 pkgin.db
-rw-r--r--  1 root  wheel   466B 24 Oct 11:33 sql.log

@chorrell
Copy link

So the bootstrap-2015Q2-x86_64.tar.gz tarball doesn't include /var/db/pkgin/cache/

Is including that directory path in the 2015Q3 tarball necessary?

@chorrell
Copy link

As a workaround, this seems to work:

sudo tar -zxpf bootstrap-2015Q3-x86_64.tar.gz --exclude=var -C /

@jperkin
Copy link
Collaborator

jperkin commented Oct 25, 2015

I included it in the bootstrap as it prevents errors when running pkgin without an initial database, and also helps on other platforms which do not include /var/db by default (notably OmniOS).

If I can't find a reasonable workaround then I'll just have to remove it from the OSX bootstraps. El Capitan is proving to be a real pain.

@bahamat
Copy link
Member

bahamat commented Oct 26, 2015

I think the path should be /private/var/db/pkgin/cache.

@jperkin jperkin self-assigned this Nov 26, 2015
@jperkin
Copy link
Collaborator

jperkin commented Nov 26, 2015

I've fixed this in the trunk bootstrap (< https://pkgsrc.joyent.com/packages/Darwin/bootstrap/bootstrap-trunk-x86_64.tar.gz>) and it will be included in release branches from now on too. Thanks!

@jperkin jperkin closed this as completed Nov 26, 2015
jperkin pushed a commit that referenced this issue Dec 14, 2015
# Liquid Version History

## 3.0.5 / 2015-07-23 / branch "3-0-stable"

* Fix test failure under certain timezones [Dylan Thacker-Smith]

## 3.0.4 / 2015-07-17

* Fix chained access to multi-dimensional hashes [Florian Weingarten]

## 3.0.3 / 2015-05-28

* Fix condition parse order in strict mode (#569) [Justin Li, pushrax]

## 3.0.2 / 2015-04-24

* Expose VariableLookup private members (#551) [Justin Li, pushrax]
* Documentation fixes

## 3.0.1 / 2015-01-23

* Remove duplicate `index0` key in TableRow tag (#502) [Alfred Xing]

## 3.0.0 / 2014-11-12

* Removed Block#end_tag. Instead, override parse with `super` followed by your code. See #446 [Dylan Thacker-Smith, dylanahsmith]
* Fixed condition with wrong data types, see #423 [Bogdan Gusiev]
* Add url_encode to standard filters, see #421 [Derrick Reimer, djreimer]
* Add uniq to standard filters [Florian Weingarten, fw42]
* Add exception_handler feature, see #397 and #254 [Bogdan Gusiev, bogdan and Florian Weingarten, fw42]
* Optimize variable parsing to avoid repeated regex evaluation during template rendering #383 [Jason Hiltz-Laforge, jasonhl]
* Optimize checking for block interrupts to reduce object allocation #380 [Jason Hiltz-Laforge, jasonhl]
* Properly set context rethrow_errors on render! #349 [Thierry Joyal, tjoyal]
* Fix broken rendering of variables which are equal to false, see #345 [Florian Weingarten, fw42]
* Remove ActionView template handler [Dylan Thacker-Smith, dylanahsmith]
* Freeze lots of string literals for new Ruby 2.1 optimization, see #297 [Florian Weingarten, fw42]
* Allow newlines in tags and variables, see #324 [Dylan Thacker-Smith, dylanahsmith]
* Tag#parse is called after initialize, which now takes options instead of tokens as the 3rd argument. See #321 [Dylan Thacker-Smith, dylanahsmith]
* Raise `Liquid::ArgumentError` instead of `::ArgumentError` when filter has wrong number of arguments #309 [Bogdan Gusiev, bogdan]
* Add a to_s default for liquid drops, see #306 [Adam Doeler, releod]
* Add strip, lstrip, and rstrip to standard filters [Florian Weingarten, fw42]
* Make if, for & case tags return complete and consistent nodelists, see #250 [Nick Jones, dntj]
* Prevent arbitrary method invocation on condition objects, see #274 [Dylan Thacker-Smith, dylanahsmith]
* Don't call to_sym when creating conditions for security reasons, see #273 [Bouke van der Bijl, bouk]
* Fix resource counting bug with respond_to?(:length), see #263 [Florian Weingarten, fw42]
* Allow specifying custom patterns for template filenames, see #284 [Andrei Gladkyi, agladkyi]
* Allow drops to optimize loading a slice of elements, see #282 [Tom Burns, boourns]
* Support for passing variables to snippets in subdirs, see #271 [Joost Hietbrink, joost]
* Add a class cache to avoid runtime extend calls, see #249 [James Tucker, raggi]
* Remove some legacy Ruby 1.8 compatibility code, see #276 [Florian Weingarten, fw42]
* Add default filter to standard filters, see #267 [Derrick Reimer, djreimer]
* Add optional strict parsing and warn parsing, see #235 [Tristan Hume, trishume]
* Add I18n syntax error translation, see #241 [Simon Hørup Eskildsen, Sirupsen]
* Make sort filter work on enumerable drops, see #239 [Florian Weingarten, fw42]
* Fix clashing method names in enumerable drops, see #238 [Florian Weingarten, fw42]
* Make map filter work on enumerable drops, see #233 [Florian Weingarten, fw42]
* Improved whitespace stripping for blank blocks, related to #216 [Florian Weingarten, fw42]

## 2.6.3 / 2015-07-23 / branch "2-6-stable"

* Fix test failure under certain timezones [Dylan Thacker-Smith]
jperkin pushed a commit that referenced this issue Jul 17, 2016
- Fix incorrectly reporting files containing disabled formatting as
  being formatted.
- Fix incorrect handling of quoted arguments in the options file (#321).
- Fix error in identifying an enum return type as an enumeration
  (#322, 323).
- Fix error in identifying an enum argument as an enumeration (#327).
- Fix recognition of Qt keywords when used as variables in C++ (#329).
- Fix recognition of a pointer in a C++ cast (#316).
- Fix removing trailing whitespace after a changed pointer or
  reference cast.

- Add new bracket style option "style=vtk" (#155).
- Add new option "indent-preproc-block" to indent blocks of preprocessor
  directives (#21, #114, #229, #242, #294).
- Add new option, "dry-run", to run AStyle without updating the files
  (#184, #285).
- Add new options, "html" (-!") and "html=###", to display the HTML help
  documentation in the default browser.
- Add tags "*INDENT-OFF*" and "*INDENT_ON*" to disable formatting of
  source code blocks (#2, #47, #55, #78, #110, #176).
- Add tag *NOPAD* to disable selected formatting on a single line.
- Add '__attribute__ ((visibility ("default")))' to Linux exported functions.
- Remove option "style=ansi" and make it depreciated (#146).
- Remove fix for broken 'case' statements from release 2.02.1, Nov 21, 2011.
- Improve Korean translation (#256).
- Change shared libraries to include the version number as part of the
  file name (#264)
- Change "help" display to stdout to allow piping and redirection (#63).
- Change "version" display to stdout.
- Change headers to include foreach, forever, Q_FOREACH, and Q_FOREVER
  (#98, #154).
- Change compiler definition ASTYLE_NO_VCX (no Visual Studio exports) to
  ASTYLE_NO_EXPORTS.
- Change shared library error handler argument from "char*" to "const char*".
- Fix not recognizing noexcept, interrupt, and autoreleasepool as
  pre-command headers (#225, #259).
- Fix formatting of C++11 uniform initializer brackets (#253, #257,
  #260, #284).
- Fix to not automatically space pad C++11 uniform initializer
  brackets (#275).
- Fix formatting of enums with leading commas (#159, #179, #270).
- Fix formatting of logical && operator in class initializers (#290).
- Fix flagging a 'const' variable as a 'const' method (#275).
- Fix piping and redirection adding an extra character to the output
  (#245, #252, #305).
- Fix "indent-modifiers" to attach class access modifiers to Horstmann
  style brackets.
- Fix ASFormatter to correctly recognize the end of a C++ raw string
  literal (#261).
- Fix to recognize C++11 "enum class" as an enum (#303).
- Fix indent of C++11 "noexecpt" statements within a class (#260, #304).
- Fix not resetting templateDepth when a template was not found (#295).
- Fix formatting of multiplication in a block paren (#144).
- Fix whitespace padding when formatting an rvalue references (#297).
- Fix to recognize an rvalue reference without a name (#265).
- Fix to not identify an operator overload method as a calculation (#296).
- Fix concatenating multiplication with a pointer dereference (#291).
- Fix recognition of a pointer dereference following a question mark (#213).
- Fix extra space after a trailing reference type (#300).
- Fix _asm blocks not being identified as a block opener and the
  variable not cleared on exit (#163).
- Fix indentation of line comments before a "class" opening bracket.
- Fix indentation of line comments before a "namespace" opening bracket.
- Fix isBracketType() method to correctly process a NULL_TYPE.
- Fix unpad-paren to recognize additional variables (#43, #132, #143).
- Fix indentation of C# "let" statements.
- Fix a few omissions with "fill-empty-lines".
- Fix file read to read 64K blocks of data.
- Refactor to un-obfuscate (clarify) the code, and improve design and
  decomposition::
    - Extract class Utf8_16 from ASConsole.
    - Replace Linux dependency on iconv with a Utf8_16 class for ASLibrary.
    - Move global "using" statements to the astyle namespace in astyle.h
      and ASLocalizer.h.
    - Move shared library declarations from astyle.h to astyle_main.h.
    - Move indentable macros from ASEnhancer to ASResource and create
      static pairs.
    - Simplify ASBeautifier procedure to identify the colon (:) type.
    - Major refactoring in ASBeautifier to create separate variables for
      an enum, a class statement and a class initializer.
    - This was needed to fix the processing of C++11 uniform
      initializers in a class initializer.
    - Minor changes to ASFormatter and ASBeautifier based on results of
      the Clang analyzer.
    - Change several methods in astyle_main to "const".
jperkin pushed a commit that referenced this issue Jul 17, 2016
What's new in Pylint 1.6.1?
===========================

Release date: 2016-07-07

    * Use environment markers for supporting conditional dependencies.


What's New in Pylint 1.6.0?
===========================

Release date: 2016-07-07

    * Added a new extension, `pylint.extensions.mccabe`, for warning
      about complexity in code.

    * Deprecate support for --optimize-ast. Part of #975.

    * Deprecate support for the HTML output. Part of #975.

    * Deprecate support for --output-files. Part of #975.

    * Fixed a documentation error for the check_docs extension. Fixes #735.

    * Made the list of property-defining decorators configurable.

    * Fix a bug where the top name of a qualified import was detected as unused variable.

      Close #923.

    * bad-builtin is now an extension check.

    * generated-members support qualified name through regular expressions.

      For instance, one can specify a regular expression as --generated-members=astroid.node_classes.*
      for ignoring every no-member error that is accessed as in `astroid.node_classes.missing.object`.

    * Add the ability to ignore files based on regex matching, with the new ``--ignore-patterns``
      option.

      This addresses issue #156 by allowing for multiple ignore patterns
      to be specified. Rather than clobber the existing ignore option, we
      introduced a new one called ignore-patterns.

    * Added a new error, 'trailing-newlines', which is emitted when a file
      has trailing new lines.

      Closes issue #682.

    * Add a new option, 'redefining-builtins-modules', for controlling the modules
      which can redefine builtins, such as six.moves and future.builtins.

      Close #464.

    * 'reimported' is emitted when the same name is imported from different module.

      Close #162.

    * Add a new recommendation checker, 'consider-iterating-dictionary', which is emitted
      which is emitted when a dictionary is iterated through .keys().

      Close #699

    * Use the configparser backport for Python 2

      This fixes a problem we were having with comments inside values, which is fixed
      in Python 3's configparser.
      Close #828

    * A new error was added, 'invalid-length-returned', when the `__len__`
      special method returned something else than a non-negative number.

      Close issue #557

    * Switch to using isort internally for wrong-import-order.

      Closes #879.

    * check_docs extension can find constructor parameters in __init__.

      Closes #887.

    * Don't warn about invalid-sequence-index if the indexed object has unknown base
      classes.

      Closes #867

    * Don't crash when checking, for super-init-not-called, a method defined in an if block.

    * Do not emit import-error or no-name-in-module for fallback import blocks by default.

      Until now, we warned with these errors when a fallback import block (a TryExcept block
      that contained imports for Python 2 and 3) was found, but this gets cumbersome when
      trying to write compatible code. As such, we don't check these blocks by default,
      but the analysis can be enforced by using the new ``--analyse-fallback-block`` flag.

      Close #769.


What's New in Pylint 1.5.6?
===========================

Release date: 2016-06-06


    * config files with BOM markers can now be read.

      Close #864.

    * epylint.py_run does not crash on big files, using .communicate() instead of .wait()

      Close #599


What's New in Pylint 1.5.5?
===========================

Release date: 2016-03-21

    * Let visit_importfrom from Python 3 porting checker be called when everything is disabled

      Because the visit method was filtering the patterns it was expecting to be activated,
      it didn't run when everything but one pattern was disabled, leading to spurious false
      positives

      Close #852

    * Don't emit unsubscriptable-value for classes with unknown
      base classes.

      Close #776.

    * Use an OrderedDict for storing the configuration elements

      This fixes an issue related to impredictible order of the disable / enable
      elements from a config file. In certain cases, the disable was coming before
      the enable which resulted in classes of errors to be enabled, even though the intention
      was to disable them. The best example for this was in the context of running multiple
      processes, each one of it having different enables / disables that affected the output.

      Close #815

    * Don't consider bare and broad except handlers as ignoring NameError,
      AttributeError and similar exceptions, in the context of checkers for
      these issues.

      Closes issue #826


What's New in Pylint 1.5.4?
===========================

Release date: 2016-01-15


    * Merge StringMethodChecker with StringFormatChecker. This fixes a
      bug where disabling all the messages and enabling only a handful of
      messages from the StringFormatChecker would have resulted in no
      messages at all.

    * Don't apply unneeded-not over sets.


What's New in Pylint 1.5.3?
===========================

Release date: 2016-01-11


    * Handle the import fallback idiom with regard to wrong-import-order.

      Closes issue #750.

    * Decouple the displaying of reports from the displaying of messages

      Some reporters are aggregating the messages instead of displaying
      them when they are available. The actual displaying was conflatted
      in the generate_reports. Unfortunately this behaviour was flaky
      and in the case of the JSON reporter, the messages weren't shown
      at all if a file had syntax errors or if it was missing.
      In order to fix this, the aggregated messages can now be
      displayed with Reporter.display_message, while the reports are
      displayed with display_reports.

      Closes issues #766 and #765.

    * Ignore function calls with variadic arguments without a context.

      Inferring variadic positional arguments and keyword arguments
      will result into empty Tuples and Dicts, which can lead in
      some cases to false positives with regard to no-value-for-parameter.
      In order to avoid this, until we'll have support for call context
      propagation, we're ignoring such cases if detected.
      Closes issue #722.

    * Treat AsyncFunctionDef just like FunctionDef nodes,
      by implementing visit_asyncfunctiondef in terms of
      visit_functiondef.

      Closes issue #767.

    * Take in account kwonlyargs when verifying that arguments
      are defined with the check_docs extension.

      Closes issue #745.

    * Suppress reporting 'unneeded-not' inside `__ne__` methods

      Closes issue #749.


What's New in Pylint 1.5.2?
===========================

Release date: 2015-12-21


    * Don't crash if graphviz is not installed, instead emit a
      warning letting the user to know.

      Closes issue #168.

    * Accept only functions and methods for the deprecated-method checker.

      This prevents a crash which can occur when an object doesn't have
      .qname() method after the inference.

    * Don't emit super-on-old-class on classes with unknown bases.
      Closes issue #721.

    * Allow statements in `if` or `try` blocks containing imports.

      Closes issue #714.


What's New in Pylint 1.5.1?
===========================

Release date: 2015-12-02


    * Don't emit unsubscriptable-object if the node is found
      inside an abstract class. Closes issue #685.

    * Add wrong-import-position to check_messages's decorator arguments
      for ImportChecker.leave_module

      This fixes an esoteric bug which occurs when ungrouped-imports and
      wrong-import-order are disabled and pylint is executed on multiple files.
      What happens is that without wrong-import-position in check_messages,
      leave_module will never be called, which means that the first non-import node
      from other files might leak into the current file,
      leading to wrong-import-position being emitted by pylint.

    * Fix a crash which occurred when old visit methods are encountered
      in plugin modules. Closes issue #711.

    * Don't emit import-self and cyclic-import for relative imports
      of modules with the same name as the package itself.
      Closes issues #708 and #706.


What's New in Pylint 1.5.0?
===========================

Release date: 2015-11-29

    * Added multiple warnings related to imports. 'wrong-import-order'
      is emitted when PEP 8 recommendations regarding imports are not
      respected (that is, standard imports should be followed by third-party
      imports and then by local imports). 'ungrouped-imports' is emitted
      when imports from the same package or module are not placed
      together, but scattered around in the code. 'wrong-import-position'
      is emitted when code is mixed with imports, being recommended for the
      latter to be at the top of the file, in order to figure out easier by
      a human reader what dependencies a module has.
      Closes issue #692.

    * Added a new refactoring warning, 'unneeded-not', emitted
      when an expression with the not operator could be simplified.
      Closes issue #670.

    * Added a new refactoring warning, 'simplifiable-if-statement',
      used when an if statement could be reduced to a boolean evaluation
      of its test. Closes issue #698.

    * Added a new refactoring warning, 'too-many-boolean-expressions',
      used when a if statement contains too many boolean expressions,
      which makes the code less maintainable and harder to understand.
      Closes issue #677.

    * Property methods are shown as attributes instead of functions in
      pyreverse class diagrams. Closes Issue #284

    * Add a new refactoring error, 'too-many-nested-blocks', which is emitted
      when a function or a method has too many nested blocks, which makes the
      code less readable and harder to understand. Closes issue #668.

    * Add a new error, 'unsubscriptable-object', that is emitted when
      value used in subscription expression doesn't support subscription
      (i.e. doesn't define __getitem__ method).

    * Don't warn about abstract classes instantiated in their own
      body. Closes issue #627.

    * Obsolete options are not present by default in the generated
      configuration file. Closes issue #632.

    * non-iterator-returned can detect classes with iterator-metaclasses.
      Closes issue #679.

    * Add a new error, 'unsupported-membership-test', emitted when value
      to the right of the 'in' operator doesn't support membership test
      protocol (i.e. doesn't define __contains__/__iter__/__getitem__)

    * Add new errors, 'not-an-iterable', emitted when non-iterable value
      is used in an iterating context (starargs, for-statement,
      comprehensions, etc), and 'not-a-mapping', emitted when non-mapping
      value is used in a mapping context. Closes issue #563.

    * Make 'no-self-use' checker not emit a warning if there is a 'super()'
      call inside the method.
      Closes issue #667.

    * Add checker to identify multiple imports on one line.
      Closes issue #598.

    * Fix unused-argument false positive when the "+=" operator is used.
      Closes issue #518.

    * Don't emit import-error for ignored modules. PyLint will not emit import
      errors for any import which is, or is a subpackage of, a module in
      the ignored-modules list. Closes issue #223.

    * Fix unused-import false positive when the import is used in a
      class assignment. Closes issue #475

    * Add a new error, 'not-context-manager', emitted when something
      that doesn't implement __enter__ and __exit__ is used in a with
      statement.

    * Add a new warning, 'confusing-with-statement', emitted by the
      base checker, when an ambiguous looking with statement is used.
      For example `with open() as first, second` which looks like a
      tuple assignment but is actually 2 context managers.

    * Add a new warning, 'duplicate-except', emitted when there is an
      exception handler which handles an exception type that was handled
      before. Closes issue #485.

    * A couple of warnings got promoted to errors, since they could uncover
      potential bugs in the code. These warnings are: assignment-from-none,
      unbalanced-tuple-unpacking, unpacking-non-sequence, non-iterator-returned.
      Closes issue #388.

    * Allow ending a pragma control with a semicolon. In this way, users
      can continue a pragma control with a reason for why it is used,
      as in `# pylint: disable=old-style-class;reason=...`.
      Closes issue #449.

    * --jobs can be used with --load-plugins now. Closes issue #456.

    * Improve the performance of --jobs when dealing only with a package
      name. Closes issue #479.

    * Don't emit an unused-wildcard-import when the imported name comes
      from another module and it is in fact a __future__ name.

    * The colorized reporter now works on Windows. Closes issue #96.

    * Remove pointless-except warning. It was previously disabled by
      default and it wasn't very useful. Closes issue #506.

    * Fix a crash on Python 3 related to the string checker, which
      crashed when it encountered a bytes string with a .format
      method called.

    * Don't warn about no-self-use for builtin properties.

    * Fix a false positive for bad-reversed-sequence, when a subclass
      of a `dict` provides a __reversed__ method.

    * Change the default no-docstring-rgx so missing-docstring isn't
      emitted for private functions.

    * Don't emit redefined-outer-name for __future__ directives.
      Closes issue #520.

    * Provide some hints for the bad-builtin message. Closes issue #522.

    * When checking for invalid arguments to a callable, in typecheck.py,
      look up for the __init__ in case the found __new__ comes from builtins.

      Since the __new__ comes from builtins, it will not have attached any
      information regarding what parameters it expects, so the check
      will be useless. Retrieving __init__ in that case will at least
      detect a couple of false negatives. Closes issue #429.

    * Don't emit no-member for classes with unknown bases.

      Since we don't know what those bases might add, we simply ignore
      the error in this case.

    * Lookup in the implicit metaclass when checking for no-member,
      if the class in question has an implicit metaclass, which is
      True for new style classes. Closes issue #438.

    * Add two new warnings, duplicate-bases and inconsistent-mro.

      duplicate-bases is emitted when a class has the same bases
      listed more than once in its bases definition, while inconsistent-mro
      is emitted when no sane mro hierarchy can be determined. Closes issue #526.

    * Remove interface-not-implemented warning. Closes issue #532.

    * Remove the rest of interface checks: interface-is-not-class,
      missing-interface-method, unresolved-interface. The reason is that
      its better to start recommending ABCs instead of the old Zope era
      of interfaces. One side effect of this change is that ignore-iface-methods
      becomes a noop, it's deprecated and it will be removed at some time.

    * Emit a proper deprecation warning for reporters.BaseReporter.add_message.

      The alternative way is to use handle_message. add_message will be removed in
      Pylint 1.6.

    * Added new module 'extensions' for optional checkers with the test
      directory 'test/extensions' and documentation file 'doc/extensions.rst'.

    * Added new checker 'extensions.check_docs' that verifies parameter
      documention in Sphinx, Google, and Numpy style.

    * Detect undefined variable cases, where the "definition" of an undefined
      variable was in del statement. Instead of emitting used-before-assignment,
      which is totally misleading, it now emits undefined-variable.
      Closes issue #528.

    * Don't emit attribute-defined-outside-init and access-member-before-definition
      for mixin classes. Actual errors can occur in mixin classes, but this is
      controlled by the ignore-mixin-members option. Closes issue #412.

    * Improve the detection of undefined variables and variables used before
      assignment for variables used as default arguments to function,
      where the variable was first defined in the class scope.
      Closes issue #342 and issue #404.

    * Add a new warning, 'unexpected-special-method-signature', which is emitted
      when a special method (dunder method) doesn't have the expected signature,
      which can lead to actual errors in the application code.
      Closes issue #253.

    * Remove 'bad-context-manager' due to the inclusion of 'unexpected-special-method-signature'.

    * Don't emit no-name-in-module if the import is guarded by an ImportError, Exception or
      a bare except clause.

    * Don't emit no-member if the attribute access node is protected by an
      except handler, which handles AttributeError, Exception or it is a
      bare except.

    * Don't emit import-error if the import is guarded by an ImportError, Exception or a
      bare except clause.

    * Don't emit undefined-variable if the node is guarded by a NameError, Exception
      or bare except clause.

    * Add a new warning, 'using-constant-test', which is emitted when a conditional
      statement (If, IfExp) uses a test which is always constant, such as numbers,
      classes, functions etc. This is most likely an error from the user's part.
      Closes issue #524.

    * Don't emit 'raising-non-exception' when the exception has unknown
      bases. We don't know what those bases actually are and it's better
      to assume that the user knows what he is doing rather than emitting
      a message which can be considered a false positive.

    * Look for a .pylintrc configuration file in the current folder,
      if pylintrc is not found. Dotted pylintrc files will not be searched
      in the parents of the current folder, as it is done for pylintrc.

    * Add a new error, 'invalid-unary-type-operand', emitted when
      an unary operand is used on something which doesn't support that
      operation (for instance, using the unary bitwise inversion operator
      on an instance which doesn't implement __invert__).

    * Take in consideration differences between arguments of various
      type of functions (classmethods, staticmethods, properties)
      when checking for `arguments-differ`. Closes issue #548.

    * astroid.inspector was moved to pylint.pyreverse, since it belongs
      there and it doesn't need to be in astroid.

    * astroid.utils.LocalsVisitor was moved to pylint.pyreverse.LocalsVisitor.

    * pylint.checkers.utils.excepts_import_error was removed.
      Use pylint.chekcers.utils.error_of_type instead.

    * Don't emit undefined-all-variables for nodes which can't be
      inferred (YES nodes).

    * yield-outside-func is also emitted for `yield from`.

    * Add a new error, 'too-many-star-expressions', emitted when
      there are more than one starred expression (`*x`) in an assignment.
      The warning is emitted only on Python 3.

    * Add a new error, 'invalid-star-assignment-target', emitted when
      a starred expression (`*x`) is used as the lhs side of an assignment,
      as in `*x = [1, 2]`. This is not a SyntaxError on Python 3 though.

    * Detect a couple of objects which can't be base classes (bool,
      slice, range and memoryview, which weren't detected until now).

    * Add a new error for the Python 3 porting checker, `import-star-module-level`,
      which is used when a star import is detected in another scope than the
      module level, which is an error on Python 3. Using this will emit a
      SyntaxWarning on Python 2.

    * Add a new error, 'star-needs-assignment-target', emitted on Python 3 when
      a Starred expression (`*x`) is not used in an assignment target. This is not
      caught when parsing the AST on Python 3, so it needs to be a separate check.

    * Add a new error, 'unsupported-binary-operation', emitted when
      two a binary arithmetic operation is executed between two objects
      which don't support it (a number plus a string for instance).
      This is currently disabled, since the it exhibits way too many false
      positives, but it will be reenabled as soon as possible.

    * New imported features from astroid into pyreverse: pyreverse.inspector.Project,
      pyreverse.inspector.project_from_files and pyreverse.inspector.interfaces.

      These were moved since they didn't belong in astroid.

    * Enable misplaced-future for Python 3. Closes issue #580.

    * Add a new error, 'nonlocal-and-global', which is emitted when a
      name is found to be both nonlocal and global in the same scope.
      Closes issue #581.

    * ignored-classes option can work with qualified names (ignored-classes=optparse.Values)
      Closes issue #297.

    * ignored-modules can work with qualified names as well as with Unix pattern
      matching for recursive ignoring. Closes issues #244.

    * Improve detection of relative imports in non-packages, as well as importing
      missing modules with a relative import from a package.

    * Don't emit no-init if not all the bases from a class are known.
      Closes issue #604.

    * --no-space-check option accepts `empty-line` as a possible option.
      Closes issue #541.

    * --generate-rcfile generates by default human readable symbols
      for the --disable option. Closes issue #608.

    * Improved the not-in-loop checker to properly detect more cases.

    * Add a new error, 'continue-in-finally', which is emitted when
      the `continue` keyword is found inside a `finally` clause, which
      is a SyntaxError.

    * The --zope flag is deprecated and it is slated for removal
      in Pylint 1.6.

      The reason behind this removal is the fact that it's a specialized
      flag and there are solutions for the original problem:
      use --generated-members with the members that causes problems
      when using Zope or add AST transforms tailored to the zope
      project.

      At the same time, --include-ids and --symbols will also be removed
      in Pylint 1.6. Closes issue #570.

    * missing-module-attribute was removed and the corresponding
      CLI option, required-attributes, which is slated for removal
      in Pylint 1.6.

    * missing-reversed-argument was removed.

      The reason behind this is that this kind of errors should be
      detected by the type checker for *all* the builtins and not
      as a special case for the reversed builtin. This will happen
      shortly in the future.

    * --comment flag is obsolete and it will be removed in Pylint 1.6.

    * --profile flag is obsolete and it will be removed in Pylint 1.6.

    * Add a new error, 'misplaced-bare-raise'.

      The error is used when a bare raise is not used inside an except clause.
      This can generate a RuntimeError in Python, if there are no active exceptions
      to be reraised. While it works in Python 2 due to the fact that the exception
      leaks outside of the except block, it's nevertheless a behaviour that
      an user shouldn't depend upon, since it's not obvious to the reader of the code
      what exception will be raised and it will not be compatible with Python 3 anyhow.
      Closes issue #633.

    * Bring logilab-common's ureports into pylint.reporters.

      With this change, we moved away from depending on logilab-common,
      having in Pylint all the components that were used from logilab-common.
      The API should be considered an implementation detail and can change at
      some point in the future.
      Closes issue #621.

    * `reimported` is emitted for reimported objects on the same line.

      Closes issue #639.

    * Abbreviations of command line options are not supported anymore.

      Using abbreviations for CLI options was never considered to be
      a feature of pylint, this fact being only a side effect of using optparse.
      As this was the case, using --load-plugin or other abbreviation
      for --load-plugins never actually worked, while it also didn't raise
      an error. Closes issue #424.

    * Add a new error, 'nonlocal-without-binding'

      The error is emitted on Python 3 when a nonlocal name is not bound
      to any variable in the parents scopes. Closes issue #582.

    * 'deprecated-module' can be shown for modules which aren't
       available. Closes issue #362.

    * Don't consider a class abstract if its members can't
      be properly inferred.

      This fixes a false positive related to abstract-class-instantiated.
      Closes issue #648.

    * Add a new checker for the async features added by PEP 492.

    * Add a new error, 'yield-inside-async-function', emitted on
      Python 3.5 and upwards when the `yield` statement is found inside
      a new coroutine function (PEP 492).

    * Add a new error, 'not-async-context-manager', emitted when
      an async context manager block is used with an object which doesn't
      support this protocol (PEP 492).

    * Add a new convention warning, 'singleton-comparison', emitted when
      comparison to True, False or None is found.

    * Don't emit 'assigning-non-slot' for descriptors. Closes issue #652.

    * Add a new error, 'repeated-keyword', when a keyword argument is passed
      multiple times into a function call.

      This is similar with redundant-keyword-arg, but it's mildly different
      that it needs to be a separate error.

    * --enable=all can now be used. Closes issue #142.

    * Add a new convention message, 'misplaced-comparison-constant',
      emitted when a constant is placed in the left hand side of a comparison,
      as in '5 == func()'. This is also called Yoda condition, since the
      flow of code reminds of the Star Wars green character, conditions usually
      encountered in languages with variabile assignments in conditional
      statements.

    * Add a new convention message, 'consider-using-enumerate', which is
      emitted when code that uses `range` and `len` for iterating is encountered.
      Closes issue #684.

    * Added two new refactoring messages, 'no-classmethod-decorator' and
      'no-staticmethod-decorator', which are emitted when a static method or a class
      method is declared without using decorators syntax.

      Closes issue #675.
jperkin pushed a commit that referenced this issue Oct 5, 2016
Patch #326 - 2016/09/25

    updated appdata file (report by Richard Hughes).
    improve discussion of the different terminal emulations provided by xterm in the manual page.
    add examples of setting the icon title with/without the window title in the manual (Debian #833984).
    correct a limit-check when using a numeric value for extended Booleans e.g., *fullscreen:3 rather than a name such as *fullscreen:never.
    add action allow-bold-fonts
    improved formatting fixes for manual page, using script to find mismatches in spelling of resources, actions and menu entries.
    improve documentation of logging resources.
    fix a special case of flickering cursor by adding GraphicsExpose to the list of event types that should not trigger making the mouse cursor visible (patch by Joe Peterson).
    correct initialization of line-drawing in VT52-mode, overlooked in changes for patch #297 (report/patch by Ben Wiley Sittler).
    minor clarification of form-feed versus line-feed in ctlseqs.ms (suggested by David Kemper).
    amend fix for Debian #738794 to restore a check for missing characters which are not combining characters. Also fill in a corresponding special case for TrueType fonts (Debian #827905).
jperkin pushed a commit that referenced this issue Oct 22, 2016
Changes in 2.8.2

Aug 15, 2016 - version 2.8.2

  * Bug

    o 2.8.1 introduced JRuby + SSL connection problem; in some cases it cannot
      connect to trusted TLS server. 2.8.1 failed to load multiple CA
      certificates in a file. #327.

Aug 16, 2016 - version 2.8.2.1

  * Bug

    o 2.8.1 introduced another bug that causes NPE from JRuby when JRuby
      program loads httpclient and uses OpenSSL::X509::Store outside of
      httpclient. 2.8.3 fixed this problem. #325

Aug 28, 2016 - version 2.8.2.3

  * Bug

    o 2.8.2 fixed VERIFY_NONE at JRuby but the fix was not enough.

Sep 11, 2016 - version 2.8.2.4

  * Bug

    o 2.8.2 caused unexpected resulting value change of
      OpenSSL::X509::Store#add_cert method. Fixed.

Changes in 2.8.1

Aug 8, 2016 - version 2.8.1

* Changes

    o Use TLSv1.2 always on JRuby #320
    o Do not reset keep-alive connection by configuration change #315
    o Add strict_response_size_check option #316 false by default, meaning it
      behavies like browsers by default.
    o Add MIME type for XML #308

* Bug

    o Direct access to SSLConfig#cert_store in JRuby was broken from 2.7
      #276 #317
    o OpenSSL::SSL::VERIFY_NONE does not work in JRuby #319
    o Allow receiving response body in block when follow_redirects => true. #304
    o Fix blocking issue with request_async when Encoding.default_internal is
      set. #307
    o Apply timeouts for chunked transfer encoding #309

Changes in 2.8.0

Apr 24, 2016 - version 2.8.0

* Changes

    o Force using RSA 2048bit CA cert set

      Use RSA 2048bit CA cert set every time if it runs with OpenSSL (==
      except JRuby.)

      Old openssl (<1.0.1p or <1.0.2d) cannot handle this CA set and causes
      SSL connection failure against some SSL servers including AWS S3
      API. For such case you can manually specify RSA 1024bit CA cert set as a
      workaround.

	c = HTTPClient.new { |c| c.ssl_config.add_trust_ca("cacert1024.pem") }
	c.get("https://www.ruby-lang.org/")

      RSA 1024bit CA cert set is not maintained over years so you should
      consider updating OpenSSL version so that HTTPClient uses RSA 2048 bit
      CA cert set.

Changes in 2.7.2

Apr 22, 2016 - version 2.7.2

* Changes

    o Use RSA 1024bit CA cert when linked to old openssl

      Based on comments to #297 this commit silently (without warning) accepts
      RSA 1024bit certificate set when runtime ruby is liked with old OpenSSL
      (<1.0.1p or <1.0.2d.)

      If you're unsure that your OpenSSL is patched or not, and want to make
      sure to use RSA 2048bit certificate set, please call
      HTTPClient::SSLConfig#add_trust_ca("cacert.pem").

	c = HTTPClient.new { |c| c.ssl_config.add_trust_ca("cacert.pem") }
	c.get("https://www.ruby-lang.org/")

      I'm going to remove RSA 1024bit certificate set and bump httpclient
      version to 2.8.0 soon after I release this as 2.7.2. I believe almost
      all OpenSSL installation is patched quickly these days so it should not
      cause SSL connectivity problem.
wiedi pushed a commit to wiedi/pkgsrc-legacy that referenced this issue Dec 1, 2016
-------------------------------
    Added U+25B6 (black right-pointing triangle) and U+25C0
       (black left-pointing triangle) (TritonDataCenter#289)
    Changed look of Markdown headers ## ### #### to make them easier to tell apart (TritonDataCenter#287)
    Fixed BBEdit incorrectly applying ligatures after tab (TritonDataCenter#274)
    Returned Nim pragmas {. .} (TritonDataCenter#279)
    Added Unicode increment U+2206 (TritonDataCenter#174, TritonDataCenter#298)
    Added fish operators >-> <-< (TritonDataCenter#297)
    Added safe navigation operators ?. .? ?: (TritonDataCenter#215)
    Added <~> (TritonDataCenter#179, used in IntelliJ for collapsed methods)
    Added F# piping operators ||> |||> <|| <||| (TritonDataCenter#184)
    Added shebang #! (TritonDataCenter#169, TritonDataCenter#193)
jperkin pushed a commit that referenced this issue Jan 16, 2017
Version 0.34
------------

Released on 2016-12-21.

Bug fixes:

* `#398 <https://github.com/Kozea/WeasyPrint/issues/398>`_:
  Honor the presentational_hints option for PDFs.
* `#399 <https://github.com/Kozea/WeasyPrint/pull/399>`_:
  Avoid CairoSVG-2.0.0rc* on Python 2.
* `#396 <https://github.com/Kozea/WeasyPrint/issues/396>`_:
  Correctly close files open by mkstemp.
* `#403 <https://github.com/Kozea/WeasyPrint/issues/403>`_:
  Cast the number of columns into int.
* Fix multi-page multi-columns and add related tests.


Version 0.33
------------

Released on 2016-11-28.

New features:

* `#393 <https://github.com/Kozea/WeasyPrint/issues/393>`_:
  Add tests on MacOS.
* `#370 <https://github.com/Kozea/WeasyPrint/issues/370>`_:
  Enable @font-face on MacOS.

Bug fixes:

* `#389 <https://github.com/Kozea/WeasyPrint/issues/389>`_:
  Always update resume_at when splitting lines.
* `#394 <https://github.com/Kozea/WeasyPrint/issues/394>`_:
  Don't build universal wheels.
* `#388 <https://github.com/Kozea/WeasyPrint/issues/388>`_:
  Fix logic when finishing block formatting context.


Version 0.32
------------

Released on 2016-11-17.

New features:

* `#28 <https://github.com/Kozea/WeasyPrint/issues/28>`_:
  Support @font-face on Linux.
* Support CSS fonts level 3 almost entirely, including OpenType features.
* `#253 <https://github.com/Kozea/WeasyPrint/issues/253>`_:
  Support presentational hints (optional).
* Support break-after, break-before and break-inside for pages and columns.
* `#384 <https://github.com/Kozea/WeasyPrint/issues/384>`_:
  Major performance boost.

Bux fixes:

* `#368 <https://github.com/Kozea/WeasyPrint/issues/368>`_:
  Respect white-space for shrink-to-fit.
* `#382 <https://github.com/Kozea/WeasyPrint/issues/382>`_:
  Fix the preferred width for column groups.
* Handle relative boxes in column-layout boxes.

Documentation:

* Add more and more documentation about Windows installation.
* `#355 <https://github.com/Kozea/WeasyPrint/issues/355>`_:
  Add fonts requirements for tests.


Version 0.31
------------

Released on 2016-08-28.

New features:

* `#124 <https://github.com/Kozea/WeasyPrint/issues/124>`_:
  Add MIME sniffing for images.
* `#60 <https://github.com/Kozea/WeasyPrint/issues/60>`_:
  CSS Multi-column Layout.
* `#197 <https://github.com/Kozea/WeasyPrint/pull/197>`_:
  Add hyphens at line breaks activated by a soft hyphen.

Bux fixes:

* `#132 <https://github.com/Kozea/WeasyPrint/pull/132>`_:
  Fix Python 3 compatibility on Windows.

Documentation:

* `#329 <https://github.com/Kozea/WeasyPrint/issues/329>`_:
  Add documentation about installation on Windows.


Version 0.30
------------

Released on 2016-07-18.

WeasyPrint now depends on html5lib-0.999999999.

Bux fixes:

* Fix Acid2
* `#325 <https://github.com/Kozea/WeasyPrint/issues/325>`_:
  Cutting lines is broken in page margin boxes.
* `#334 <https://github.com/Kozea/WeasyPrint/issues/334>`_:
  Newest html5lib 0.999999999 breaks rendering.


Version 0.29
------------

Released on 2016-06-17.

Bug fixes:

* `#263 <https://github.com/Kozea/WeasyPrint/pull/263>`_:
  Don't crash with floats with percents in positions.
* `#323 <https://github.com/Kozea/WeasyPrint/pull/323>`_:
  Fix CairoSVG 2.0 pre-release dependency in Python 2.x.


Version 0.28
------------

Released on 2016-05-16.

Bug fixes:

* `#189 <https://github.com/Kozea/WeasyPrint/issues/189>`_:
  ``white-space: nowrap`` still wraps on hyphens
* `#305 <https://github.com/Kozea/WeasyPrint/issues/305>`_:
  Fix crashes on some tables
* Don't crash when transform matrix isn't invertible
* Don't crash when rendering ratio-only SVG images
* Fix margins and borders on some tables


Version 0.27
------------

Released on 2016-04-08.

New features:

* `#295 <https://github.com/Kozea/WeasyPrint/pull/295>`_:
  Support the 'rem' unit.
* `#299 <https://github.com/Kozea/WeasyPrint/pull/299>`_:
  Enhance the support of SVG images.

Bug fixes:

* `#307 <https://github.com/Kozea/WeasyPrint/issues/307>`_:
  Fix the layout of cells larger than their tables.

Documentation:

* The website is now on GitHub Pages, the documentation is on Read the Docs.
* `#297 <https://github.com/Kozea/WeasyPrint/issues/297>`_:
  Rewrite the CSS chapter of the documentation.
jperkin pushed a commit that referenced this issue Jan 23, 2017
This upgrade fixes compatibility with new lxml.

Upstream changelog
==================
2.3.1

_This is a micro release and I have very little time on my hands right now sorry_

    Fix crash with no values when the print_values_position param is set (thanks @cristen)

2.3.0

    New call API: chart = Line(fill=True); chart.add('title', [1, 3, 12]); chart.render() can now be replaced with Line(fill=True)(1, 3, 12, title='title').render()
    Drop python 2.6 support

2.2.3

    Fix bar static value positioning (#315)
    Add stroke_opacity style (#321)
    Remove useless js in sparklines. (#312)

2.2.2

    Add classes option.
    Handle ellipsis in list type configs to auto-extend parent. (Viva python3)

2.2.0

    Support interruptions in line charts (thanks @piotrmaslanka #300)
    Fix confidence interval reactiveness (thanks @chartique #296)
    Add horizontal line charts (thanks @chartique #301)
    There is now a formatter config option to format values as specified. The formatter callable may or may not take chart, serie and index as argument. The default value formatting is now chart dependent and is value_formatter for most graph but could be a combination of value_formatter and x_value_formatter for dual charts.
    The human_readable option has been removed. Now you have to use the pygal.formatters.human_readable formatter (value_formatter=human_readable instead of human_readable=True)
    New chart type: SolidGauge (thanks @chartique #295)
    Fix range option for some Charts (#297 #298)
    Fix timezones for DateTimeLine for python 2 (#306, #302)
    Set default uri protocol to https (should fix a lot of "no tooltips" bugs).

2.1.1

    Import scipy as a last resort in stats.py (should workaround bugs like #294 if scipy is installed but not used)

2.1.0

    Bar print value positioning with print_values_position. Can be top, center or bottom (thanks @chartique #291) ci doc
    Confidence intervals (thanks @chartique #292) data doc

2.0.12

    Use custom xml_declaration avoiding conflict with processing instructions

2.0.11

    lxml 3.5 compatibility (#282)

2.0.10

    Fix transposable_node in case all attributes are not there. (thanks @yobuntu).

2.0.9

    Add dynamic_print_values to show print_values on legend hover. (#279)
    Fix unparse_color for python 3.5+ compatibility (thanks @felixonmars, @sjourdois)
    Process major labels as labels. (#263)
    Fix labels rotation > 180 (#257)
    Fix secondary axis
    Don't forget secondary series in table rendering (#260)
    Add defs config option to allow adding gradients and patterns.

2.0.8

    Fix value overwrite in map. (#275)

2.0.7

    Fixing to checks breaking rendering of DateTimeLine and TimeDeltaLine (#264) (thanks @mmrose)
    Fix render_in_browser. (#266) (#268) (thanks @waixwong)

2.0.6

    Avoid x label formatting when label is a string

2.0.5

    Fix x label formatting

2.0.4

    Fix map coloration

2.0.3

    Fix label adaptation. (#256)
    Fix wrong radar truncation. (#255)

2.0.2

    Fix view box differently to avoid getting a null height on huge numbers. (#254)
    Fix broken font_family default
    Fix non namespaced svg (without embed) javascript by adding uuid in config object. (config is in window.pygal now).

2.0.1

    Fix the missing title on x_labels with labels.
    Auto cast to str x labels in non dual charts (#178)
    Add print_labels option to print label too. (#197)
    Add value_label_font_family and value_label_font_size style options for print_labels.
    Default print_zeroes to True
    (Re)Add xlink in desc to show on tooltip
    Activate element on tooltip hovering. (#106)
    Fix radar axis behaviour (#247)
    Add tooltip support in metadata to add a title (#249).
    Take config class options in account too.

2.0.0

    Rework the ghost mechanism to come back to a more object oriented behavior, storing all state in a state object which is created on every render. (#161)
    Refactor maps
    Add world continents
    Add swiss cantons map (thanks @sergedroz)
    Add inverse_y_axis options to reverse graph (#24)
    Fix DateTimeLine time data loss (#193)
    Fix no data for graphs with only zeroes (#148)
    Support value formatter for pie graphs (#218) (thanks @never-eat-yellow-snow)
    Add new Box plot modes and outliers and set extremes as default (#226 #121 #149) (thanks @djezar)
    Add secondary_range option to set range for secondary values. (#203)
    Maps are now plugins, they are removed from pygal core and moved to packages (pygal_maps_world, pygal_maps_fr, pygal_maps_ch, ...) (#225)
    Dot now supports negative values
    Fix dot with log scale (#201)
    Fix y_labels behaviour for lines
    Fix x_labels and y_labels behaviour for xy like
    Improve gauge a bit
    Finally allow call chains on add
    Transform min_scale and max_scale as options
    mode option has been renamed to a less generic name: box_mode
    fix stack_from_top for stacked lines
    Add flake8 test to py.test in tox
    Remove stroke style in style and set it as a global / serie configuration.
    Fix None values in tables
    Fix timezones in DateTimeLine
    Rename in Style foreground_light as foreground_strong
    Rename in Style foreground_dark as foreground_subtle
    Add a render_data_uri method (#237)
    Move font_size config to style
    Add font_family for various elements in style
    Add googlefont:font support for style fonts
    Add tooltip_fancy_mode to revert to old tooltips
    Add auto print_value color + a configurable value_colors list in style
    Add guide_stroke_dasharray and guide_stroke_dasharray in style to customize guides (#242) (thanks @cbergmiller)
    Refactor label processing in a _compute_x_labels and _compute_y_labels method. Handle both string and numbers for all charts. Create a Dual base chart for dual axis charts. (#236)
    Better js integration in maps. Use the normal tooltip.
jperkin pushed a commit that referenced this issue Feb 6, 2017
Upstream Changelog:
Security

    gdImageCreate() doesn't check for oversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317)
    double-free in gdImageWebPtr() (CVE-2016-6912)
    potential unsigned underflow in gd_interpolation.c
    DOS vulnerability in gdImageCreateFromGd2Ctx()

Fixed

    Fix #354: Signed Integer Overflow gd_io.c
    Fix #340: System frozen
    Fix OOB reads of the TGA decompression buffer
    Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
    Fix potential unsigned underflow
    Fix double-free in gdImageWebPtr()
    Fix invalid read in gdImageCreateFromTiffPtr()
    Fix OOB reads of the TGA decompression buffer
    Fix #68: gif: buffer underflow reported by AddressSanitizer
    Avoid potentially dangerous signed to unsigned conversion
    Fix #304: test suite failure in gif/bug00006 [2.2.3]
    Fix #329: GD_BILINEAR_FIXED gdImageScale() can cause black border
    Fix #330: Integer overflow in gdImageScaleBilinearPalette()
    Fix 321: Null pointer dereferences in gdImageRotateInterpolated
    Fix whitespace and add missing comment block
    Fix #319: gdImageRotateInterpolated can have wrong background color
    Fix color quantization documentation
    Fix #309: gdImageGd2() writes wrong chunk sizes on boundaries
    Fix #307: GD_QUANT_NEUQUANT fails to unset trueColor flag
    Fix #300: gdImageClone() assigns res_y = res_x
    Fix #299: Regression regarding gdImageRectangle() with gdImageSetThickness()
    Replace GNU old-style field designators with C89 compatible initializers
    Fix #297: gdImageCrop() converts palette image to truecolor image
    Fix #290: TGA RLE decoding is broken
    Fix unnecessary non NULL checks
    Fix #289: Passing unrecognized formats to gdImageGd2 results in corrupted files
    Fix #280: gdImageWebpEx() quantization parameter is a misnomer
    Publish all gdImageCreateFromWebp*() functions and gdImageWebpCtx()
    Fix issue #276: Sometimes pixels are missing when storing images as BMPs
    Fix issue #275: gdImageBmpCtx() may segfault for non-seekable contexts
    Fix copy&paste error in gdImageScaleBicubicFixed()

Added

    More documentation
    Documentation on GD and GD2 formats
    More tests
jperkin pushed a commit that referenced this issue Mar 8, 2017
graphics/gd: security fix

Revisions pulled up:
- graphics/gd/Makefile                                          1.113
- graphics/gd/distinfo                                          1.43
- graphics/gd/patches/patch-src_gd__webp.c                      deleted

---
   Module Name:    pkgsrc
   Committed By:   spz
   Date:           Sat Feb  4 23:05:52 UTC 2017

   Modified Files:
           pkgsrc/graphics/gd: Makefile distinfo
   Removed Files:
           pkgsrc/graphics/gd/patches: patch-src_gd__webp.c

   Log Message:
   update of gd to 2.2.4.

   Upstream Changelog:
   Security

       gdImageCreate() doesn't check for oversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317)
       double-free in gdImageWebPtr() (CVE-2016-6912)
       potential unsigned underflow in gd_interpolation.c
       DOS vulnerability in gdImageCreateFromGd2Ctx()

   Fixed

       Fix #354: Signed Integer Overflow gd_io.c
       Fix #340: System frozen
       Fix OOB reads of the TGA decompression buffer
       Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
       Fix potential unsigned underflow
       Fix double-free in gdImageWebPtr()
       Fix invalid read in gdImageCreateFromTiffPtr()
       Fix OOB reads of the TGA decompression buffer
       Fix #68: gif: buffer underflow reported by AddressSanitizer
       Avoid potentially dangerous signed to unsigned conversion
       Fix #304: test suite failure in gif/bug00006 [2.2.3]
       Fix #329: GD_BILINEAR_FIXED gdImageScale() can cause black border
       Fix #330: Integer overflow in gdImageScaleBilinearPalette()
       Fix 321: Null pointer dereferences in gdImageRotateInterpolated
       Fix whitespace and add missing comment block
       Fix #319: gdImageRotateInterpolated can have wrong background color
       Fix color quantization documentation
       Fix #309: gdImageGd2() writes wrong chunk sizes on boundaries
       Fix #307: GD_QUANT_NEUQUANT fails to unset trueColor flag
       Fix #300: gdImageClone() assigns res_y = res_x
       Fix #299: Regression regarding gdImageRectangle() with gdImageSetThickness()
       Replace GNU old-style field designators with C89 compatible initializers
       Fix #297: gdImageCrop() converts palette image to truecolor image
       Fix #290: TGA RLE decoding is broken
       Fix unnecessary non NULL checks
       Fix #289: Passing unrecognized formats to gdImageGd2 results in corrupted files
       Fix #280: gdImageWebpEx() quantization parameter is a misnomer
       Publish all gdImageCreateFromWebp*() functions and gdImageWebpCtx()
       Fix issue #276: Sometimes pixels are missing when storing images as BMPs
       Fix issue #275: gdImageBmpCtx() may segfault for non-seekable contexts
       Fix copy&paste error in gdImageScaleBicubicFixed()

   Added

       More documentation
       Documentation on GD and GD2 formats
       More tests
jperkin pushed a commit that referenced this issue Mar 20, 2017
v1.2.1

* Add accessor to @internal_file_attributes #304
* Extended globbing #303
* README updates #283, #289
* Cleanup after tests #298, #306
* Fix permissions on new zip files #294, #300
* Fix examples #297
* Support cp932 encoding #308
* Fix Directory traversal vulnerability #315
* Allow open_buffer to work without a given block #314
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants