lp:busybox

Branch merges

This import branch has no branches proposed for merge into it.

No branches dependent on this one.

Related source package recipes

1 recipe using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

17840. By Vda-linux on 2025-04-21

cpio: error out if the file to be achived is >=4GB

function old new delta
.rodata 105715 105751 +36
cpio_o 1145 1167 +22
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 58/0) Total: 58 bytes

Signed-off-by: Denys Vlasenko <email address hidden>

17839. By Vda-linux on 2025-04-20

rpm2cpio: extract cpio even if compression is not known

This is more useful than failing outright.

function old new delta
rpm2cpio_main 110 144 +34
.rodata 105681 105715 +34
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 68/0) Total: 68 bytes

Signed-off-by: Denys Vlasenko <email address hidden>

17838. By Vda-linux on 2025-04-20

libbb/archival: make setup_unzip_on_fd() return bytes read if not compressed

setup_unzip_on_fd() does not return the transformer structure, so the user
does not know how much to seek back (or alternatively what the signature was)
when compressor signature is not detected.

Currently not needed (the only user is tar which dies anyway).
However, rpm2cpio may need this if we extend it to extract the internal .cpio
even if cpio's compressions algo is not known.

function old new delta
setup_unzip_on_fd 53 59 +6

Signed-off-by: Denys Vlasenko <email address hidden>

17837. By Jonathan Neuschäfer on 2025-04-17

runit: fix setuidgid help text

Signed-off-by: J. Neuschäfer <email address hidden>
Signed-off-by: Denys Vlasenko <email address hidden>

17836. By Vda-linux on 2025-04-16

archival: disallow path traversals (CVE-2023-39810)

Create new configure option for archival/libarchive based extractions to
disallow path traversals.
As this is a paranoid option and might introduce backward
incompatibility, default it to no.

Fixes: CVE-2023-39810

Based on the patch by Peter Kaestle <email address hidden>

function old new delta
data_extract_all 921 945 +24
strip_unsafe_prefix 101 102 +1
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 25/0) Total: 25 bytes

Signed-off-by: Denys Vlasenko <email address hidden>

17835. By Grant on 2025-04-08

syslogd: Fix 'OPT_locallog' check regression in 'syslogd_main'

In the recent refactoring of 'syslogd_main', a regression was
introduced in handling the manual bitwise OR of 'OPT_locallog' as
follows:

   if (ENABLE_FEATURE_REMOTE_LOG && !(opts & OPT_remotelog)) // -R
       option_mask32 |= OPT_locallog;

'opts' represents the locally-scoped output of 'getopt32' and
'option_mask32' represents the globally-scoped state of the
same. Consequently, the above performs a bitwise OR to include
'OPT_locallog' of the globally-scoped option state, which 'opts' will
not reflect locally.

Manipulating the global, rather than local, state is correct as
'timestamp_and_log_internal' will later need to check 'OPT_locallog'.

However, when the aforementioned refactor occurred, the following
regressing change was made:

    - if (!ENABLE_FEATURE_REMOTE_LOG || (option_mask32 & OPT_locallog)) {
    + if (!ENABLE_FEATURE_REMOTE_LOG || (opts & OPT_locallog)) {

breaking the spatially- and temporally-removed check in
'timestamp_and_log_internal'.

Fixes: 02378ce20c6d2 ("syslogd: decrease stack usage, ~50 bytes")

function old new delta
syslogd_init 1140 1137 -3

Signed-off-by: Grant Erickson <email address hidden>
Signed-off-by: Denys Vlasenko <email address hidden>

17834. By Vda-linux on 2025-04-07

udhcpd: send DHCPOFFERs as unicast (unless clients specifically asks for bcast)

RFC 2131 says we should do that.
Evidently, since for so many years no one complained, sending them broadcast
works too, but finally we've got someone who wants RFC-compliand behavior.

function old new delta
send_packet 141 179 +38
.rodata 105680 105681 +1
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 39/0) Total: 39 bytes

Signed-off-by: Denys Vlasenko <email address hidden>

17833. By Vda-linux on 2025-04-06

Makefile: fix passing of EXTRA_LDLIBS

Signed-off-by: Denys Vlasenko <email address hidden>

17832. By Sébastien Parisot <email address hidden> on 2025-04-06

init: improve log message when a process exits: show exit code

function old new delta
.rodata 105649 105680 +31
init_main 776 804 +28
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 59/0) Total: 59 bytes

Signed-off-by: Sébastien Parisot <email address hidden>
Signed-off-by: Denys Vlasenko <email address hidden>

17831. By Vda-linux on 2025-02-09

udhcpc6: fix copy-paste error in "generate a consistent IAID" commit

Signed-off-by: Denys Vlasenko <email address hidden>