1. 15 Apr, 2020 1 commit
  2. 10 Feb, 2020 1 commit
  3. 07 Jan, 2020 1 commit
  4. 06 Nov, 2019 1 commit
  5. 23 Oct, 2019 1 commit
  6. 12 Oct, 2019 1 commit
    • Andrew Gregory's avatar
      run XferCommand via exec · 808a4f15
      Andrew Gregory authored
      
      
      system() runs the provided command via a shell, which is subject to
      command injection.  Even though pacman already provides a mechanism to
      sign and verify the databases containing the urls, certain distributions
      have yet to get their act together and start signing databases, leaving
      them vulnerable to MITM attacks.  Replacing the system call with an
      almost equivalent exec call removes the possibility of a shell-injection
      attack for those users.
      
      Signed-off-by: default avatarAndrew Gregory <andrew.gregory.8@gmail.com>
      808a4f15
  7. 08 May, 2019 1 commit
    • Rikard Falkeborn's avatar
      Fix clang 8 string-plus-int warnings · f2a7fb2b
      Rikard Falkeborn authored and Allan McRae's avatar Allan McRae committed
      Clang 8 warns that adding a string to an integer does not append to
      string. Indeed it doesn't, but that was not the intentetion. Use array
      indexing as suggested by the compiler to silence the warning. There
      should be no functional change.
      
      Example of warning message:
      
          alpm.c:71:54: warning: adding 'int' to a string does not append to the string [-Wstring-plus-int]
                  sprintf(hookdir, "%s%s", myhandle->root, SYSHOOKDIR + 1);
                                                           ~~~~~~~~~~~^~~
          alpm.c:71:54: note: use array indexing to silence this warning
                  sprintf(hookdir, "%s%s", myhandle->root, SYSHOOKDIR + 1);
                                                                      ^
                                                           &          [  ]
          1 warning generated.
      f2a7fb2b
  8. 07 Mar, 2019 2 commits
  9. 29 Aug, 2018 1 commit
  10. 13 May, 2018 1 commit
    • Eli Schwartz's avatar
      Remove all modelines from the project · 860e4c49
      Eli Schwartz authored and Allan McRae's avatar Allan McRae committed
      
      
      Many of these are pointless (e.g. there is no need to explicitly turn on
      spellchecking and language dictionaries for the manpages by default).
      
      The only useful modelines are the ones enforcing the project coding
      standards for indentation style (and "maybe" filetype/syntax, but
      everything except the asciidoc manpages and makepkg.conf is already
      autodetected), and indent style can be applied more easily with
      .editorconfig
      
      Signed-off-by: Eli Schwartz's avatarEli Schwartz <eschwartz@archlinux.org>
      Signed-off-by: Allan McRae's avatarAllan McRae <allan@archlinux.org>
      860e4c49
  11. 14 Mar, 2018 1 commit
  12. 18 Jan, 2018 2 commits
  13. 08 May, 2017 1 commit
  14. 12 Apr, 2017 1 commit
  15. 13 Jan, 2017 1 commit
  16. 04 Jan, 2017 1 commit
  17. 22 Oct, 2016 1 commit
  18. 04 Jan, 2016 1 commit
  19. 11 Nov, 2015 1 commit
  20. 19 Oct, 2015 1 commit
  21. 18 Oct, 2015 1 commit
  22. 08 Aug, 2015 1 commit
  23. 15 Jul, 2015 1 commit
  24. 01 Feb, 2015 1 commit
  25. 21 Jan, 2015 6 commits
  26. 28 Dec, 2014 1 commit
  27. 24 Dec, 2014 1 commit
  28. 18 Dec, 2014 1 commit
  29. 30 Sep, 2014 2 commits
  30. 27 Mar, 2014 1 commit
  31. 03 Mar, 2014 1 commit
  32. 28 Jan, 2014 1 commit