From 9beafa1a7bb66ac05a20feac1f3f31f357629064 Mon Sep 17 00:00:00 2001 From: Jakub Jelinek Date: Fri, 15 Sep 2006 09:41:09 +0000 Subject: [PATCH] 4.1.1-22 --- .cvsignore | 2 +- README.libgcjwebplugin.so | 56 +++++++++++++++++++++++++++++++++++++++ gcc41.spec | 26 +++++++++++++++--- sources | 2 +- 4 files changed, 80 insertions(+), 6 deletions(-) create mode 100644 README.libgcjwebplugin.so diff --git a/.cvsignore b/.cvsignore index 057882e..ddaf593 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -gcc-4.1.1-20060908.tar.bz2 +gcc-4.1.1-20060915.tar.bz2 diff --git a/README.libgcjwebplugin.so b/README.libgcjwebplugin.so new file mode 100644 index 0000000..6acf439 --- /dev/null +++ b/README.libgcjwebplugin.so @@ -0,0 +1,56 @@ +gcjwebplugin is a Firefox plugin for running Java applets. It is now +included in the libgcj sub-package, though it is not enabled by +default. + +GNU Classpath and libgcj's security implementation is under active +development, but it is not ready to be declared secure. Specifically, +it cannot run untrusted applets safely. + +When gcjwebplugin is enabled, it prompts you with a dialog before +loading an applet. The dialog tells you that a certain URL would like +to load an applet, and asks if you trust the applet. Be aware though +that this dialog is mostly informative and doesn't provide much +protection: + +- http and DNS can be spoofed meaning that the URL named in the + warning dialog cannot be trusted + +- someone could create a browser denial-of-service attack by creating a + page with hundreds of applet tags, causing gcjwebplugin to create + warning dialog after warning dialog. The browser would have to be + closed to eliminate the latest dialog + +- the whitelist is provided as a convenience, but it is unsafe because a + domain may change hands from a trusted owner to an untrusted owner. + If that domain is in the whitelist then the warning dialog will not + appear when loading the new malicious applet. + +CURRENTLY GCJWEBPLUGIN RUNS WITH NO SECURITY MANAGER. THIS MEANS THAT +APPLETS CAN DO ANYTHING A JAVA APPLICATION THAT YOU DOWNLOAD AND RUN +COULD DO. BE *VERY* CAREFUL WHICH APPLETS YOU RUN. DO NOT USE +GCJWEBPLUGIN ON YOUR SYSTEM IF YOUR SYSTEM STORES IMPORTANT DATA. +THIS DATA CAN BE DESTROYED OR STOLEN. + +The same warning applies to gappletviewer, which also runs with no +security manager (in fact, gcjwebplugin spawns gappletviewer to do the +applet loading). When run on the command line, gappletviewer issues a +warning on startup and asks you if you want to continue. + +Even considering the risks involved, you may still want to try +gcjwebplugin. GNU Classpath's AWT and Swing implementations are now +sufficiently mature that they're able to run many applets deployed on +the web. If you're interested in trying gcjwebplugin, you can do so +by creating a symbolic link in ~/.mozilla/plugins like so: + +ln -s /usr/lib/gcj-4.1.1/libgcjwebplugin.so ~/.mozilla/plugins/ + +Type about:plugins in Firefox's URL bar to confirm that the plugin has +been loaded. To see gcjwebplugin debugging output, run: + +firefox -g + +then at the GDB prompt, type + +run + +Please report bugs in Red Hat Bugzilla: http://bugzilla.redhat.com diff --git a/gcc41.spec b/gcc41.spec index 2e4d528..cbd11ca 100644 --- a/gcc41.spec +++ b/gcc41.spec @@ -1,6 +1,6 @@ -%define DATE 20060908 +%define DATE 20060915 %define gcc_version 4.1.1 -%define gcc_release 21 +%define gcc_release 22 %define _unpackaged_files_terminate_build 0 %define multilib_64_archs sparc64 ppc64 s390x x86_64 %ifarch %{ix86} x86_64 ia64 @@ -29,6 +29,7 @@ License: GPL Group: Development/Languages Source0: gcc-%{version}-%{DATE}.tar.bz2 Source1: libgcc_post_upgrade.c +Source2: README.libgcjwebplugin.so URL: http://gcc.gnu.org BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root # Need binutils with -pie support >= 2.14.90.0.4-4 @@ -143,6 +144,7 @@ Patch35: gcc41-pr27898.patch Patch36: gcc41-pr26026.patch Patch37: gcc41-pr28659.patch Patch38: gcc41-pr27567.patch +Patch39: gcc41-pr28046.patch %define _gnu %{nil} %ifarch sparc @@ -464,6 +466,7 @@ which are required to run programs compiled with the GNAT. %patch36 -p0 -b .pr26026~ %patch37 -p0 -b .pr28659~ %patch38 -p0 -b .pr27567~ +%patch39 -p0 -b .pr28046~ sed -i -e 's/4\.1\.2/4.1.1/' gcc/BASE-VER gcc/version.c sed -i -e 's/" (Red Hat[^)]*)"/" (Red Hat %{version}-%{gcc_release})"/' gcc/version.c @@ -647,8 +650,8 @@ for i in {gcc,gcc/cp,gcc/java,gcc/ada,libstdc++-v3,libobjc,libmudflap,libgomp}/C cp -p $i rpm.doc/changelogs/$i done -(cd gcc/f; for i in ChangeLog*; do - cp -p $i ../../rpm.doc/gfortran/$i.f +(cd gcc/fortran; for i in ChangeLog*; do + cp -p $i ../../rpm.doc/gfortran/$i done) (cd libgfortran; for i in ChangeLog*; do cp -p $i ../rpm.doc/gfortran/$i.libgfortran @@ -1416,6 +1419,7 @@ fi %{_prefix}/%{_lib}/logging.properties %dir %{_prefix}/%{_lib}/gcj-%{version}/classmap.db.d %attr(0644,root,root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) %{_prefix}/%{_lib}/gcj-%{version}/classmap.db +%doc %{SOURCE2} %files -n libgcj-devel %defattr(-,root,root) @@ -1523,6 +1527,20 @@ fi %doc rpm.doc/changelogs/libmudflap/ChangeLog* %changelog +* Fri Sep 15 2006 Jakub Jelinek 4.1.1-22 +- update from gcc-4_1-branch (-r116778:116958) + - PRs ada/21952, ada/29025, c++/26957, fortran/28890, fortran/28923, + fortran/28959, libfortran/28890, libfortran/28923, libfortran/28947, + middle-end/28493, other/23541, other/26507, rtl-optimization/28243, + rtl-optimization/28634, rtl-optimization/28636, rtl-optimization/28726, + target/13685, target/26504, target/27537, target/27681, target/28621, + target/29006, testsuite/28950, testsuite/29007 +- fix #pragma omp atomic (PR middle-end/28046) +- speed up dominance frontiers calculation (Jan Hubicka) +- add README.libgcjwebplugin.so to libgcj %%doc (Tom Fitzsimmons) +- fix gcc-gfortran %%doc (#206333) +- fix gcc-debuginfo (#205500) + * Fri Sep 8 2006 Jakub Jelinek 4.1.1-21 - update from gcc-4_1-branch (-r116498:116778) - PRs c++/19809, c++/26102, c++/26195, c++/26571, c++/26670, c++/26671, diff --git a/sources b/sources index 4f1055b..16d38ed 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -9be7d1466ffb2b7de0f59adba43a5cdd gcc-4.1.1-20060908.tar.bz2 +0ac7df765d5ee8713670a30e4a0497a7 gcc-4.1.1-20060915.tar.bz2