From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Mon, 07 Jul 2025 18:28:23 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uYohb-00F52H-2e for lore@lore.pengutronix.de; Mon, 07 Jul 2025 18:28:23 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1uYohb-0000C7-HQ; Mon, 07 Jul 2025 18:28:23 +0200 Received: from mail-vi1eur05on2136.outbound.protection.outlook.com ([40.107.21.136] helo=EUR05-VI1-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1uYohO-0000Bw-0B for ptxdist@pengutronix.de; Mon, 07 Jul 2025 18:28:10 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=XZR2F+eXmAEKf5v7gcPUDb6Nbqvfh5Tg50vmgukDpDy/MwMIoPi75HPL99ETFIU3MNBA0tKA8rYlcuiM/k/+eveeNRFsC2mLf8iaaU0P3fCEOFNPKmwUZlqHvWTqFHVioVMbns6IyfbR67VdJnrCkPnAiLDHF7dLDxdrZJbK8m2r/Y89zigVKcwRzdjT+9BnUx9wj3TkGKRwLb+LVFVO/n3UnXdSGWFPuD0M/QK3I8SoMLHkDLo9V9FdboTAUFWScFQaUL31bN6KI/6Zd56Nl2sgYfsE8UGus7QHV4TkJiaQswTIQW+2n21dM1UECoIidrINCIeTBZXIDmfdOD7uXg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=nGQs6GwWsZ10q06zc1ZtzgkAIClm1/PFC+F/pHiaN80=; b=mQSN2IsGrD6/6K4trCy78JP3t/XCIvLLHFzbRulIBEcwTFZhTdhfQk23QkLez6oJ7Ro2R04R6pNiVoVXe5PnnCG117eicUDmVzv1AxY68ENebeMePzhX7Jgq+jgOoTec4UgCBxrb1iw0kqjEfopMQUjKOneR6R0ZWmGAimOqY/JlS/EgZfv2OdzedfoKBo1G+2lpSvqLrdxSCjQc73LDYGWvwQFKoQgRt4y8U05bVxybTG1JAcODmv0Yt9EWjHLbkX48fZEW/ezoBEXcsnIkEF47uWkKl/9TjLC85Bn89eDryqy6JNaCSXKBDhR8WXSM1Dzo0ygTB2luY6EQQKuobA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nGQs6GwWsZ10q06zc1ZtzgkAIClm1/PFC+F/pHiaN80=; b=jVCw2ohraxOkqdPCZNUusDNJwtoaiGzdi9j5QUaZeTbziuHTP5fYMWoiT+RBXjoRLMYx2ZViGfaPiLSgHK9r53LWyVbqcRTTAGqOQBNQ4Y7+2S1ijkl8QlIODcLVtKhDoaPm9ouAl/4MYg/w3YhpDXLkDX53G7h//ca18D38N0I= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by PRAP251MB0638.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:297::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.24; Mon, 7 Jul 2025 16:28:06 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%6]) with mapi id 15.20.8901.023; Mon, 7 Jul 2025 16:28:06 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Mon, 7 Jul 2025 18:27:59 +0200 Message-Id: <20250707162759.4163708-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV2PEPF00003853.SWEP280.PROD.OUTLOOK.COM (2603:10a6:144:1:0:9:0:1b) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|PRAP251MB0638:EE_ X-MS-Office365-Filtering-Correlation-Id: 573b39af-60db-466b-ed8a-08ddbd734083 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|366016|52116014|376014|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?G/VhYCzLbW8e3y5rx/akzYwS+eyjyv+CFscNSXi9K+PF/n0P5aewcvTshQY5?= =?us-ascii?Q?t3ekhPVw2TmRO3Gs0bAVh8PJY7XPmdO5PY0VPOTCBW8M1sbvld0kxuVlRBYt?= =?us-ascii?Q?TkGIeCmQpGLM2fhrWMlpWIrZpWpQ7mc4cAbXySOY59NETW7joh+JloixA0WP?= =?us-ascii?Q?hnFnXDZSfG9R79F21WdYJUxiEzUGeS9yKpDtg64wwEveKRWs2o4e/O3gPp5z?= =?us-ascii?Q?e4bC5/h4YyLAYIGYl0iZf90FkjklA3UP/MnV2K6Ao02bIH5admW1vnhr5tEe?= =?us-ascii?Q?+KmBnNqE95pctBGM5jsXwXcBp1o/2A41GL6+XVLp28y5gYO81zAJ+WPKqDqP?= =?us-ascii?Q?dSK59wgxoTY0VcYW6IzkbXXF+ftC56gnsT+fQYvryyNrpMmHbww1is61+4ku?= =?us-ascii?Q?c+vCH9zE5upaIRo0k8MBhGDsaxzDM0n+EekfzZnZQ6r0Km0jwM5vf613bg6F?= =?us-ascii?Q?vNFpAUiA53A92Avj+9rqTq/xkF7IBDhOsbFc8ctuvbsco2LRbXbbaltPRoZn?= =?us-ascii?Q?63K9kcSfQfSt+ciDjiXYx+fm576np5GJd+P6QIyxjKQw7na+jtfAvX0iQLoM?= =?us-ascii?Q?7/OWrdOvpajIdHiet9MTYBlkBolI5ikwJ8VliZK+ldgCJj/r6lMUd9IRKQEJ?= =?us-ascii?Q?OtXN5vd5vmN/1ZYzDbWSfUF0Dzsg1KEli0UOjI6lsxD50+JO5U2dCD5FHkwV?= =?us-ascii?Q?1TH2sWG7K1ILOF2uTquILdynrz0lEq3dK8UqNgTJZWKpmp/CBNORefVtdZbu?= =?us-ascii?Q?bMsXOznqA1n7w9XFMy9poIen/dnW4qYParN1I4bxmY/LQIl+Zqgmd8MsW13m?= =?us-ascii?Q?VbiZcToYt12hOLaGNQxP3o7o2p/EmRmv2kvVCCcodSBJC0paxMuhEyZ5JR1r?= =?us-ascii?Q?W2LKg5DDYc2L5H0o3IDwvy3p7gguKi36Kv2qfFVlJepVZ+mIXJPbo6LRaQ4R?= =?us-ascii?Q?iIEERAavCxbiYNPNkSp9CKw6ud0P2SknpsHwSO2tgz/q0f536IbgMzLzwEHc?= =?us-ascii?Q?lwnD1i4gDwmUKpWJ4nj5henTxDNv/xqapBLsXpr91He4Hypbgc8mgphvNkjm?= =?us-ascii?Q?51RGjT4xQoNnFFExtX9S6TEO1nixNQx2DFB+vjMIgdvXVc3mTKHky2NY/q1z?= =?us-ascii?Q?gITgP8IGTy4LOY6meNyq/j3nxrTgtgQuH2X5uR7pjxalQetZXszudD3VgPq/?= =?us-ascii?Q?IIEAWBNMBmFkTMqwVHqgBM8gcMUIl3jdUF8fVtxXxmmNDTnGSKtp8+AwxC0m?= =?us-ascii?Q?uCqFY/0fN8adQjA+n3Z1atamFKLs+VCtksGkfrZx++ZvW3eDVXMaerDu4uHY?= =?us-ascii?Q?9g463+0yvFJD1feF+wuU2mx27j6O9/cmrFZUmVqztn+Z3WB4TaenAwxlqhot?= =?us-ascii?Q?Kw7vTlQ2CBF//bp4BpEw/VNu4HvVEN+3mJU7qc6+bdFlEGnc/N1bmJvmPwwo?= =?us-ascii?Q?evLiMIFDTIsRGW/s7BOgNYzg/gj6n4dZd4RlIRduup3Ix5EXp6WkiAcyXhDz?= =?us-ascii?Q?rWNvVavmDs+tZxw=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(366016)(52116014)(376014)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?QepSG/tn7jexq2+R2lN0oxqftwO4D9m/XscbhHqO6b6p6PV46BE3PgqVkQ65?= =?us-ascii?Q?WbTLk0HV4cXK3l2RyIw4fhwL+D0Q0x+Md4ejqAVrctfWAHx7254KsIp8mI7x?= =?us-ascii?Q?TfvxzucQwKoLQl6ZpSdcb1YAhd4rntpxpTR6GYjqxRuOGuO5/K0xAO/GHBMt?= =?us-ascii?Q?R51iyv5SG/PYvVlzcjArZiLRY+a5EiszTlWv/sE/sSR9asi9DLW9O9BCK5U6?= =?us-ascii?Q?WVLQle/TybgQLwCR5M4Whwk24topZwGMf4zk1Skp979ZaAk16FHoLMJrH+DL?= =?us-ascii?Q?mmJS2HO9ZE1CPvLVRHijrcPO8GSXIakrnRH0Ebo+/ooJ68f1ng6UoHxlL5bk?= =?us-ascii?Q?V+foezGCi7GMSnJyqFhL5KNlaz1WovMX0gaHBpRaazzDyu8utsNF/rDP/Cnn?= =?us-ascii?Q?kSYBiGbNZcmdvwwxq0KxSqk2es9Mc/2FCiChMBJZukOYzTooqd4/N+3ReSu2?= =?us-ascii?Q?ZAlSg1PFCdb9uHYA/yc64tdB0g26vLNBzuY6r/SOeWileOCk7r0FLrV4woUA?= =?us-ascii?Q?TVIPbWUMOSjhnxSVCSaYDa6Vf0QygIEgnnW144w4Vl5v0oExFU/7n1LwgpdI?= =?us-ascii?Q?eiJbgOLuv5u3Od/2sgn2PdbNxKIs6dr38av5ylllNy8J0JmZppa8Cyz3FwIG?= =?us-ascii?Q?hrAPM9FRlxDOXGQyhDe+0zjcy1qFqkHeUqFj2BOj0kW32LNwbhVcJkPga2YY?= =?us-ascii?Q?WZpgYxo9uCdYuY5sXCNqXe+f7doy8fAsKlbkJHeo6a+/lwG+Ov3JOmabji5j?= =?us-ascii?Q?KHBoGfZWTe8H5CksrZmmun7iJ+aba+Rkd0JhoRFCED7FkVpboapRIxlQrYJF?= =?us-ascii?Q?Gozz1v40LRWMJ+fa487RiVKwo127OrN1nuj56YrtLPtTP3nz2zKn21OTzccF?= =?us-ascii?Q?AKiGw8Yk9gvFl42YcfEaOc7to0P9xxb+Sic4N59z0Pv5WAf0NcGMWeZjCmEz?= =?us-ascii?Q?uMj2nbDPWFZTdd8IDZX1fGGQcYA0ay2RSrh6x0fRxeD8j5Wbbh+wPl1WULzf?= =?us-ascii?Q?Fy0wQ+GqsHW24VUFzytmmoWBSujVXFHGZpoPlgYIkay5J4kUMEz469oBjJx4?= =?us-ascii?Q?4Yu1XOLF92iHCxZpLqR9qE2PhRRrhBbqWcfjpEQ2MhvtbtaUroLSef2xmoBF?= =?us-ascii?Q?U9lXGG5iPnjQzRQgQ/KVg921Gu6E4hnFwywKZsAW22buMPCfaqG3W0ieynaw?= =?us-ascii?Q?pCGF72IHFzgxGEPB+LHfTnTpHV27O1WRrbWBm6zZ9chAu230voYvtWgtnqJX?= =?us-ascii?Q?sIod6ngDui7HO00/5oGlXMjibTvAh+YArn9lRf5nAow9w4zwmwBH/TxdOW1z?= =?us-ascii?Q?EcJtXL7Q5+068XfawV8KYPL4hBfmRp75fd8uB83J2umJc4C7xXpICJRDSEkl?= =?us-ascii?Q?zFzFjzO4OAuRvD8yGKCrXjAfb8N47LJ/TguUCkSoEmxclS1GMPstDt7tVJLn?= =?us-ascii?Q?2PEDYq4Yjfiak0dqymoLzqqfwOrLyn4ZPn1Aut+Y7GiAaTMRXwzpjIbhV8hJ?= =?us-ascii?Q?pxUhaIh5XAZ4iBuDDmqymwni+8XABWPWVdCsZ2y+lnI3II6bkCsRojwgTgoB?= =?us-ascii?Q?X/VKCmjyySDihnAhGzxzZeX2ddXR0DQ1T7GbiWWDeBRsHJnbVYu0foirazV4?= =?us-ascii?Q?tA=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 573b39af-60db-466b-ed8a-08ddbd734083 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Jul 2025 16:28:05.9820 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 74AqLW4xBd1lHrLWzbi342Q3ce3vq5VZ2mbpxZHGfktVdPzCCzxGeae0OyOica7jBHMdBUgCX8Z8algm8cbyHfdOxtaK45CvKcxQRr0NBpU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PRAP251MB0638 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] bash: Version bump. 5.2.37 -> 5.3 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false https://lists.gnu.org/archive/html/bug-bash/2025-07/msg00005.html * Rearrange options, set a few options to their default to close down configure diff. Also pin down a couple of configure aliases that look like they were different options, but aren't. * Introduce new security option to scramble mem at free. * License diff, year update. Signed-off-by: Christian Melki --- rules/bash.in | 7 +++++++ rules/bash.make | 25 +++++++++++++++++++------ 2 files changed, 26 insertions(+), 6 deletions(-) diff --git a/rules/bash.in b/rules/bash.in index 0f8f33f82..1e7967d4a 100644 --- a/rules/bash.in +++ b/rules/bash.in @@ -178,6 +178,13 @@ config BASH_MULTIBYTE help Enable multibyte characters if OS supports them. +config BASH_MEM_SCRAMBLE + bool + prompt "Enable mem overwrite after free" + help + Security feature. Helps when handling sensitive data in variables. + But caveats apply, the probably is performance issues and bugs here. + config BASH_PROCSUBST bool prompt "Enable process substitution" diff --git a/rules/bash.make b/rules/bash.make index 1909fd509..1392eb1ac 100644 --- a/rules/bash.make +++ b/rules/bash.make @@ -13,8 +13,8 @@ PACKAGES-$(PTXCONF_BASH) += bash # # Paths and names # -BASH_VERSION := 5.2.37 -BASH_MD5 := 9c28f21ff65de72ca329c1779684a972 +BASH_VERSION := 5.3 +BASH_MD5 := 4c7fb7d82586f93ab1d833ef20378ee8 BASH := bash-$(BASH_VERSION) BASH_SUFFIX := tar.gz BASH_URL := $(call ptx/mirror, GNU, bash/$(BASH).$(BASH_SUFFIX)) @@ -23,7 +23,7 @@ BASH_DIR := $(BUILDDIR)/$(BASH) BASH_LICENSE := GPL-3.0-or-later BASH_LICENSE_FILES := \ file://COPYING;md5=d32239bcb673463ab874e80d47fae504 \ - file://general.c;startline=1;endline=19;md5=e33b255b2fde7a27805a07a2a59d571e + file://general.c;startline=1;endline=19;md5=58a7da9d30894a1d5a3c10e9eedbd393 # ---------------------------------------------------------------------------- # Prepare @@ -37,13 +37,13 @@ BASH_CONF_ENV := \ BASH_CONF_TOOL := autoconf BASH_CONF_OPT := \ $(CROSS_AUTOCONF_USR) \ - $(GLOBAL_LARGE_FILE_OPTION) \ - --without-bash-malloc \ --$(call ptx/endis, PTXCONF_BASH_SHLIKE)-minimal-config \ --$(call ptx/endis, PTXCONF_BASH_ALIASES)-alias \ + --disable-alt-array-implementation \ --$(call ptx/endis, PTXCONF_BASH_ARITHMETIC_FOR)-arith-for-command \ --$(call ptx/endis, PTXCONF_BASH_ARRAY)-array-variables \ --$(call ptx/endis, PTXCONF_BASH_HISTORY)-bang-history \ + --disable-bash-source-fullpath-default \ --$(call ptx/endis, PTXCONF_BASH_BRACE)-brace-expansion \ --$(call ptx/endis, PTXCONF_BASH_CASEMODATTR)-casemod-attributes \ --$(call ptx/endis, PTXCONF_BASH_CASEMODEXP)-casemod-expansions \ @@ -52,12 +52,14 @@ BASH_CONF_OPT := \ --$(call ptx/endis, PTXCONF_BASH_CONDITIONAL_REGEX)-cond-regexp \ --$(call ptx/endis, PTXCONF_BASH_COPROCESSES)-coprocesses \ --$(call ptx/endis, PTXCONF_BASH_DEBUGGER)-debugger \ + --disable-dev-fd-stat-broken \ --$(call ptx/endis, PTXCONF_BASH_DIREXPDEFLT)-direxpand-default \ --$(call ptx/endis, PTXCONF_BASH_DIRSTACK)-directory-stack \ --$(call ptx/endis, PTXCONF_BASH_DISABLED_BUILDINS)-disabled-builtins \ --$(call ptx/endis, PTXCONF_BASH_DPARAN_ARITH)-dparen-arithmetic \ --$(call ptx/endis, PTXCONF_BASH_EXTPATTERN)-extended-glob \ --$(call ptx/endis, PTXCONF_BASH_EXTPATTERN_DEFLT)-extended-glob-default \ + --enable-function-import \ --$(call ptx/endis, PTXCONF_BASH_GLOB_ASCIIRANGE_DEFLT)-glob-asciiranges-default \ --$(call ptx/endis, PTXCONF_BASH_HELP)-help-builtin \ --$(call ptx/endis, PTXCONF_BASH_CMDHISTORY)-history \ @@ -72,9 +74,20 @@ BASH_CONF_OPT := \ --$(call ptx/endis, PTXCONF_BASH_SELECT)-select \ --$(call ptx/endis, PTXCONF_BASH_SEP_HELPFILES)-separate-helpfiles \ --$(call ptx/endis, PTXCONF_BASH_SINGLE_HELPLINE)-single-help-strings \ + --disable-strict-posix-default \ + --enable-translatable-strings \ + --disable-usg-echo-default \ + --disable-xpg-echo-default \ + --$(call ptx/endis, PTXCONF_BASH_MEM_SCRAMBLE)-mem-scramble \ --$(call ptx/endis, PTXCONF_BASH_GPROF)-profiling \ --$(call ptx/endis, PTXCONF_BASH_STATIC)-static-link \ - --$(call ptx/wwo, PTXCONF_BASH_CURSES)-curses + $(GLOBAL_LARGE_FILE_OPTION) \ + --enable-threads=posix \ + --$(call ptx/endis, PTXDIST_Y2038)-year2038 \ + --without-afs \ + --without-bash-malloc \ + --$(call ptx/wwo, PTXCONF_BASH_CURSES)-curses \ + --without-gnu-malloc # ---------------------------------------------------------------------------- # Target-Install -- 2.34.1