|
 |
1025aa |
%bcond_without check
|
|
|
1025aa |
|
|
|
1025aa |
Name: http-parser
|
|
|
1025aa |
Version: 2.8.0
|
|
|
1025aa |
Release: 9%{?dist}
|
|
|
1025aa |
Summary: HTTP request/response parser for C
|
|
|
1025aa |
|
|
|
1025aa |
License: MIT
|
|
|
1025aa |
URL: https://github.com/nodejs/http-parser
|
|
|
1025aa |
Source0: %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
|
|
|
1025aa |
|
|
|
1025aa |
BuildRequires: meson
|
|
|
1025aa |
BuildRequires: gcc
|
|
|
1025aa |
|
|
|
1025aa |
Patch01: CVE-2018-7159.patch
|
|
|
1025aa |
Patch02: CVE-2018-12121.patch
|
|
|
1025aa |
Patch03: remove-unused-functions-from-test-runner.patch
|
|
|
1025aa |
Patch04: CVE-2019-15605-HTTP-request-smuggling.patch
|
|
|
1025aa |
|
|
|
1025aa |
%description
|
|
|
1025aa |
This is a parser for HTTP messages written in C. It parses both requests and
|
|
|
1025aa |
responses. The parser is designed to be used in performance HTTP applications.
|
|
|
1025aa |
It does not make any syscalls nor allocations, it does not buffer data, it can
|
|
|
1025aa |
be interrupted at anytime. Depending on your architecture, it only requires
|
|
|
1025aa |
about 40 bytes of data per message stream (in a web server that is per
|
|
|
1025aa |
connection).
|
|
|
1025aa |
|
|
|
1025aa |
%package devel
|
|
|
1025aa |
Summary: Development headers and libraries for http-parser
|
|
|
1025aa |
Requires: %{name}%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release}
|
|
|
1025aa |
|
|
|
1025aa |
%description devel
|
|
|
1025aa |
Development headers and libraries for http-parser.
|
|
|
1025aa |
|
|
|
1025aa |
%prep
|
|
|
1025aa |
%autosetup -p1
|
|
|
1025aa |
|
|
|
1025aa |
# TODO: try to send upstream?
|
|
|
1025aa |
cat > meson.build << EOF
|
|
|
1025aa |
project('%{name}', 'c', version : '%{version}')
|
|
|
1025aa |
install_headers('http_parser.h')
|
|
|
1025aa |
foreach x : [['http_parser', ['-DHTTP_PARSER_STRICT=0']],
|
|
|
1025aa |
['http_parser_strict', ['-DHTTP_PARSER_STRICT=1']]]
|
|
|
1025aa |
lib = library(x.get(0), 'http_parser.c',
|
|
|
1025aa |
c_args : x.get(1),
|
|
|
1025aa |
version : '%{version}',
|
|
|
1025aa |
install : true)
|
|
|
1025aa |
test('test-@0@'.format(x.get(0)),
|
|
|
1025aa |
executable('test-@0@'.format(x.get(0)), 'test.c',
|
|
|
1025aa |
c_args : x.get(1),
|
|
|
1025aa |
link_with : lib),
|
|
|
1025aa |
timeout : 60)
|
|
|
1025aa |
endforeach
|
|
|
1025aa |
EOF
|
|
|
1025aa |
|
|
|
1025aa |
%build
|
|
|
1025aa |
%meson
|
|
|
1025aa |
%meson_build
|
|
|
1025aa |
|
|
|
1025aa |
%install
|
|
|
1025aa |
%meson_install
|
|
|
1025aa |
|
|
|
1025aa |
%if %{with check}
|
|
|
1025aa |
%check
|
|
|
1025aa |
%meson_test
|
|
|
1025aa |
%endif
|
|
|
1025aa |
|
|
|
1025aa |
%ldconfig_scriptlets
|
|
|
1025aa |
|
|
|
1025aa |
%files
|
|
|
1025aa |
%license LICENSE-MIT
|
|
|
1025aa |
%doc AUTHORS README.md
|
|
|
1025aa |
%{_libdir}/libhttp_parser.so.*
|
|
|
1025aa |
%{_libdir}/libhttp_parser_strict.so.*
|
|
|
1025aa |
|
|
|
1025aa |
%files devel
|
|
|
1025aa |
%{_includedir}/http_parser.h
|
|
|
1025aa |
%{_libdir}/libhttp_parser.so
|
|
|
1025aa |
%{_libdir}/libhttp_parser_strict.so
|
|
|
1025aa |
|
|
|
1025aa |
%changelog
|
|
|
1025aa |
* Wed Feb 26 2020 Sergio Correia <scorreia@redhat.com> - 2.8.0-9
|
|
|
1025aa |
- Do not break ABI with CVE-2019-15605 fix
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Feb 19 2020 Sergio Correia <scorreia@redhat.com> - 2.8.0-8
|
|
|
1025aa |
- Update gating tests due to CVE-2019-15605
|
|
|
1025aa |
|
|
|
1025aa |
* Tue Feb 18 2020 Sergio Corrreia <scorreia@redhat.com> - 2.8.0-7
|
|
|
1025aa |
- Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
|
|
|
1025aa |
smuggling using malformed Transfer-Encoding header
|
|
|
1025aa |
|
|
|
1025aa |
* Tue Oct 29 2019 Sergio Correia <scorreia@redhat.com> - 2.8.0-6
|
|
|
1025aa |
- Provide -devel package
|
|
|
1025aa |
Resolves: rhbz#1748765: http-parser-devel package not available in CRB
|
|
|
1025aa |
|
|
|
1025aa |
* Mon Aug 12 2019 Sergio Correia <scorreia@redhat.com> - 2.8.0-5
|
|
|
1025aa |
- Resolves: rhbz#1686488: 'make test' fails with stringop-overflow error
|
|
|
1025aa |
|
|
|
1025aa |
* Thu Aug 08 2019 Sergio Correia <scorreia@redhat.com> - 2.8.0-4
|
|
|
1025aa |
- Resolves: rhbz#1666382: CVE-2018-12121 http-parser: nodejs: Denial of
|
|
|
1025aa |
Service with large HTTP headers [rhel-8]
|
|
|
1025aa |
|
|
|
1025aa |
* Thu Apr 11 2019 Daniel Kopecek <dkopecek@redhat.com> - 2.8.0-3
|
|
|
1025aa |
- spec: make the check phase conditional
|
|
|
1025aa |
|
|
|
1025aa |
* Mon Dec 3 2018 Jakub Hrozek <jhrozek@redhat.com> - 2.8.0-2
|
|
|
1025aa |
- Resolves: #rhbz1654223: CVE-2018-7159 http-parser: nodejs: HTTP parser
|
|
|
1025aa |
allowed for spaces inside Content-Length header
|
|
|
1025aa |
values [rhel-8]
|
|
|
1025aa |
|
|
|
1025aa |
* Sat Feb 10 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.8.0-1
|
|
|
1025aa |
- Update to 2.8.0
|
|
|
1025aa |
- Switch to meson buildsystem
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.1-9
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Sat Feb 03 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.7.1-8
|
|
|
1025aa |
- Switch to %%ldconfig_scriptlets
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.1-7
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.1-6
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.1-5
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Mon Nov 21 2016 Igor Gnatenko <i.gnatenko.brain@gmail.com> - 2.7.1-4
|
|
|
1025aa |
- Use CMake buildsystem
|
|
|
1025aa |
|
|
|
1025aa |
* Tue Oct 25 2016 Nathaniel McCallum <npmccallum@redhat.com> - 2.7.1-3
|
|
|
1025aa |
- Add (upstreamed) status code patch
|
|
|
1025aa |
|
|
|
1025aa |
* Tue Aug 16 2016 Stephen Gallagher <sgallagh@redhat.com> - 2.7.1-2
|
|
|
1025aa |
- Upgrade to version 2.7.1
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.0-2
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Tue Dec 01 2015 Stephen Gallagher <sgallagh@redhat.com> 2.6.0-1
|
|
|
1025aa |
- Upgrade to version 2.6.0
|
|
|
1025aa |
- Change to new upstream at https://github.com/nodejs/http-parser/
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0-9.20121128gitcd01361
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Sat May 02 2015 Kalev Lember <kalevlember@gmail.com> - 2.0-8.20121128gitcd01361
|
|
|
1025aa |
- Rebuilt for GCC 5 C++11 ABI change
|
|
|
1025aa |
|
|
|
1025aa |
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0-7.20121128gitcd01361
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0-6.20121128gitcd01361
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0-5.20121128gitcd01361
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0-4.20121128gitcd01361
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Sun Dec 02 2012 T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-3.20121128gitcd01361
|
|
|
1025aa |
- latest git snapshot
|
|
|
1025aa |
- fixes buffer overflow in tests
|
|
|
1025aa |
|
|
|
1025aa |
* Tue Nov 27 2012 T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
|
|
|
1025aa |
- latest git snapshot
|
|
|
1025aa |
- fixes tests
|
|
|
1025aa |
- use SMP make flags
|
|
|
1025aa |
- build as Release instead of Debug
|
|
|
1025aa |
- ship new strict variant
|
|
|
1025aa |
|
|
|
1025aa |
* Sat Oct 13 2012 T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-1
|
|
|
1025aa |
- new upstream release 2.0
|
|
|
1025aa |
- migrate to GYP buildsystem
|
|
|
1025aa |
|
|
|
1025aa |
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-3
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-2
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Mon Aug 22 2011 T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
|
|
|
1025aa |
- New upstream release 1.0
|
|
|
1025aa |
- Remove patches, no longer needed for nodejs
|
|
|
1025aa |
- Fix typo in -devel description
|
|
|
1025aa |
- use github tarball instead of checkout
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3-6.20100911git
|
|
|
1025aa |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
1025aa |
|
|
|
1025aa |
* Tue Jan 11 2011 Lubomir Rintel <lkundrak@v3.sk> - 0.3-5.20100911git
|
|
|
1025aa |
- Add support for methods used by node.js
|
|
|
1025aa |
|
|
|
1025aa |
* Thu Nov 4 2010 Dan Horák <dan[at]danny.cz> - 0.3-4.20100911git
|
|
|
1025aa |
- build with -fsigned-char
|
|
|
1025aa |
|
|
|
1025aa |
* Wed Sep 29 2010 jkeating - 0.3-3.20100911git
|
|
|
1025aa |
- Rebuilt for gcc bug 634757
|
|
|
1025aa |
|
|
|
1025aa |
* Mon Sep 20 2010 Lubomir Rintel <lkundrak@v3.sk> - 0.3-2.20100911git
|
|
|
1025aa |
- Call ldconfig (Peter Lemenkov)
|
|
|
1025aa |
|
|
|
1025aa |
* Fri Sep 17 2010 Lubomir Rintel <lkundrak@v3.sk> - 0.3-1.20100911git
|
|
|
1025aa |
- Initial packaging
|
|
|
1025aa |
|