[announce] new tagged version of ipkg

[announce] new tagged version of ipkg

[Erik Hovland]

I have commited my recent work to improve the stability and general
robustness of the ipkg code base.

The cvs repo has been tagged with V0-99-164.

Feel free to try it out on your favorite ipkg based distro today.

I will gladly take feedback associated to any commit I made to take the
load off of Pigi (the current maintainer). So please either open a bug
in the handhelds.org bugzilla and assign the bug to me initially or
contact me directly if you find a problem.

Thanks!

E

-- 
Erik Hovland
mail: erik AT hovland DOT org
web: http://hovland.org/
PGP/GPG public key available on request

Re: [announce] new tagged version of ipkg

[Koen Kooi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Erik Hovland schreef:
> I have commited my recent work to improve the stability and general
> robustness of the ipkg code base.
> 
> The cvs repo has been tagged with V0-99-164.
> 
> Feel free to try it out on your favorite ipkg based distro today.

Tarball? ChangeLog?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFFpqDCMkyGM64RGpERAtjOAKCc1S1fvDsInNFBPQNBI1NOUsTZ+ACeJ9eN
ug5OHDioF5I+aySYsaM93uQ=
=PlnW
-----END PGP SIGNATURE-----

Re: [announce] new tagged version of ipkg

[Erik Hovland]

> Tarball?

No tarball at this time. If one is desired it can be facilitated.

> ChangeLog?

The ipkg/C/ChangeLog has been updated:

2007-01-11 erik ( erik@hovland.org)
        * Version update to 0.99.164
        * Fixed usage of temporary files to be more secure
        * Closed several potential memory/file descriptor leaks
        * Cleaned up warnings in several parts of the code
        * Added checking to libbb/unzip.c so it did not use tainted data
        * Changed code in several places where it is possible to dereference an invalid pointer

E

-- 
Erik Hovland
mail: erik AT hovland DOT org
web: http://hovland.org/
PGP/GPG public key available on request

Re: [announce] new tagged version of ipkg

[Michael 'Mickey' Lauer]

Hey Erik,

Erik Hovland wrote:
>> Tarball?
> No tarball at this time. If one is desired it can be facilitated.

Yes, a tarball would be appreciated.

>> ChangeLog?
> The ipkg/C/ChangeLog has been updated:

> 2007-01-11 erik ( erik@hovland.org)
>         * Version update to 0.99.164
>         * Fixed usage of temporary files to be more secure
>         * Closed several potential memory/file descriptor leaks
>         * Cleaned up warnings in several parts of the code
>         * Added checking to libbb/unzip.c so it did not use tainted data
>         * Changed code in several places where it is possible to dereference an invalid pointer

Cool, thanks. Any plans to improve the speed problems?

Regards,

:M:
-- 
Michael 'Mickey' Lauer | IT-Freelancer | http://www.vanille-media.de

Re: [announce] new tagged version of ipkg

[Erik Hovland]

On Thu, Jan 11, 2007 at 10:51:31PM +0100, Michael 'Mickey' Lauer wrote:
> Cool, thanks. Any plans to improve the speed problems?

No plans. But I might be convinced if bugs started showing up in
trackers that pointed at some specifics. The biggest interest to me is
seeing ipkg get to a '1.0' version. But I could see how speed might be
one of the goals of that.

E

-- 
Erik Hovland
mail: erik AT hovland DOT org
web: http://hovland.org/
PGP/GPG public key available on request

Re: [announce] new tagged version of ipkg

[Matt Reimer]

On 1/11/07, Erik Hovland <erik@hovland.org> wrote:
> > Tarball?
>
> No tarball at this time. If one is desired it can be facilitated.
>
> > ChangeLog?
>
> The ipkg/C/ChangeLog has been updated:
>
> 2007-01-11 erik ( erik@hovland.org)
>         * Version update to 0.99.164
>         * Fixed usage of temporary files to be more secure
>         * Closed several potential memory/file descriptor leaks
>         * Cleaned up warnings in several parts of the code
>         * Added checking to libbb/unzip.c so it did not use tainted data
>         * Changed code in several places where it is possible to dereference an invalid pointer

I'd like to see this added to the ChangeLog:

* Converted from storing metadata in flat files to storing it in an sqlite db

Of course, a bit of work might be needed to actually make that a true
statement. ;-)

Matt

Re: [Familiar] Re: [announce] new tagged version of ipkg

[Paul Sokolovsky]

Hello Matt,

Friday, January 12, 2007, 8:58:34 PM, you wrote:

> On 1/11/07, Erik Hovland <erik@hovland.org> wrote:
>> > Tarball?
>>
>> No tarball at this time. If one is desired it can be facilitated.
>>
>> > ChangeLog?
>>
>> The ipkg/C/ChangeLog has been updated:
>>
>> 2007-01-11 erik ( erik@hovland.org)
>>         * Version update to 0.99.164
>>         * Fixed usage of temporary files to be more secure
>>         * Closed several potential memory/file descriptor leaks
>>         * Cleaned up warnings in several parts of the code
>>         * Added checking to libbb/unzip.c so it did not use tainted data
>>         * Changed code in several places where it is possible to dereference an invalid pointer

> I'd like to see this added to the ChangeLog:

> * Converted from storing metadata in flat files to storing it in an sqlite db

> Of course, a bit of work might be needed to actually make that a true
> statement. ;-)

  I really have an itch for that myself, I just wonder if less steep
start can be made here, like to add separate simple hash-based index for
Packages file, so it was quick to look up package by name. Of course,
if that could help depends on ipkg code, and I didn't yet have chance
to peek at...

> Matt


-- 
Best regards,
 Paul                            mailto:pmiscml@gmail.com

Re: [Familiar] Re: [announce] new tagged version of ipkg

[Richard Purdie]

On Fri, 2007-01-12 at 21:31 +0200, Paul Sokolovsky wrote:
> > * Converted from storing metadata in flat files to storing it in an sqlite db
> 
> > Of course, a bit of work might be needed to actually make that a true
> > statement. ;-)
> 
>   I really have an itch for that myself, I just wonder if less steep
> start can be made here, like to add separate simple hash-based index for
> Packages file, so it was quick to look up package by name. Of course,
> if that could help depends on ipkg code, and I didn't yet have chance
> to peek at...

I've wondered about this too. I'd like to see it but its a lot of work
and it will turn into an ipkg fork as the original ipkg was supposed to
stay true to Debian.

Regards,

Richard

Re: [announce] new tagged version of ipkg

[Koen Kooi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matt Reimer schreef:
> On 1/11/07, Erik Hovland <erik@hovland.org> wrote:
>>> Tarball?
>> No tarball at this time. If one is desired it can be facilitated.
>>
>>> ChangeLog?
>> The ipkg/C/ChangeLog has been updated:
>>
>> 2007-01-11 erik ( erik@hovland.org)
>>         * Version update to 0.99.164
>>         * Fixed usage of temporary files to be more secure
>>         * Closed several potential memory/file descriptor leaks
>>         * Cleaned up warnings in several parts of the code
>>         * Added checking to libbb/unzip.c so it did not use tainted data
>>         * Changed code in several places where it is possible to dereference an invalid pointer
> 
> I'd like to see this added to the ChangeLog:
> 
> * Converted from storing metadata in flat files to storing it in an sqlite db
> 
> Of course, a bit of work might be needed to actually make that a true
> statement. ;-)

Marcin and I already have that information in a sqlite3 database for the feedbrowser we
wrote. All it needs it a wrapper that read the information and spawns 'ipkg install
http://foo/bar.ipk'

regards,

Koen

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFFp+5cMkyGM64RGpERAqBoAJ0RD6+IbqU7HT11aMvm6lcGsEVFpQCeJIug
mUZPTqKS5OzOtQ1+EJFtXX8=
=Lbl6
-----END PGP SIGNATURE-----

Re: [Familiar] Re: [announce] new tagged version of ipkg

[Erik Hovland]

On Fri, Jan 12, 2007 at 10:58:34AM -0800, Matt Reimer wrote:
> I'd like to see this added to the ChangeLog:
> 
> * Converted from storing metadata in flat files to storing it in an sqlite 
> db

And I would like a pony. If one shows up on my doorstep you've got
yourself a deal :)

> Of course, a bit of work might be needed to actually make that a true
> statement. ;-)

Just a little. Like a rewrite.

E

-- 
Erik Hovland
mail: erik@hovland.org
web: http://hovland.org/
PGP/GPG public key available on request