4.1.1-22
This commit is contained in:
		
							parent
							
								
									434d46731d
								
							
						
					
					
						commit
						9beafa1a7b
					
				@ -1 +1 @@
 | 
			
		||||
gcc-4.1.1-20060908.tar.bz2
 | 
			
		||||
gcc-4.1.1-20060915.tar.bz2
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										56
									
								
								README.libgcjwebplugin.so
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										56
									
								
								README.libgcjwebplugin.so
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,56 @@
 | 
			
		||||
gcjwebplugin is a Firefox plugin for running Java applets.  It is now
 | 
			
		||||
included in the libgcj sub-package, though it is not enabled by
 | 
			
		||||
default.
 | 
			
		||||
 | 
			
		||||
GNU Classpath and libgcj's security implementation is under active
 | 
			
		||||
development, but it is not ready to be declared secure.  Specifically,
 | 
			
		||||
it cannot run untrusted applets safely.
 | 
			
		||||
 | 
			
		||||
When gcjwebplugin is enabled, it prompts you with a dialog before
 | 
			
		||||
loading an applet.  The dialog tells you that a certain URL would like
 | 
			
		||||
to load an applet, and asks if you trust the applet.  Be aware though
 | 
			
		||||
that this dialog is mostly informative and doesn't provide much
 | 
			
		||||
protection:
 | 
			
		||||
 | 
			
		||||
- http and DNS can be spoofed meaning that the URL named in the
 | 
			
		||||
  warning dialog cannot be trusted
 | 
			
		||||
 | 
			
		||||
- someone could create a browser denial-of-service attack by creating a
 | 
			
		||||
  page with hundreds of applet tags, causing gcjwebplugin to create
 | 
			
		||||
  warning dialog after warning dialog.  The browser would have to be
 | 
			
		||||
  closed to eliminate the latest dialog
 | 
			
		||||
 | 
			
		||||
- the whitelist is provided as a convenience, but it is unsafe because a
 | 
			
		||||
  domain may change hands from a trusted owner to an untrusted owner.
 | 
			
		||||
  If that domain is in the whitelist then the warning dialog will not
 | 
			
		||||
  appear when loading the new malicious applet.
 | 
			
		||||
 | 
			
		||||
CURRENTLY GCJWEBPLUGIN RUNS WITH NO SECURITY MANAGER.  THIS MEANS THAT
 | 
			
		||||
APPLETS CAN DO ANYTHING A JAVA APPLICATION THAT YOU DOWNLOAD AND RUN
 | 
			
		||||
COULD DO.  BE *VERY* CAREFUL WHICH APPLETS YOU RUN.  DO NOT USE
 | 
			
		||||
GCJWEBPLUGIN ON YOUR SYSTEM IF YOUR SYSTEM STORES IMPORTANT DATA.
 | 
			
		||||
THIS DATA CAN BE DESTROYED OR STOLEN.
 | 
			
		||||
 | 
			
		||||
The same warning applies to gappletviewer, which also runs with no
 | 
			
		||||
security manager (in fact, gcjwebplugin spawns gappletviewer to do the
 | 
			
		||||
applet loading).  When run on the command line, gappletviewer issues a
 | 
			
		||||
warning on startup and asks you if you want to continue.
 | 
			
		||||
 | 
			
		||||
Even considering the risks involved, you may still want to try
 | 
			
		||||
gcjwebplugin.  GNU Classpath's AWT and Swing implementations are now
 | 
			
		||||
sufficiently mature that they're able to run many applets deployed on
 | 
			
		||||
the web.  If you're interested in trying gcjwebplugin, you can do so
 | 
			
		||||
by creating a symbolic link in ~/.mozilla/plugins like so:
 | 
			
		||||
 | 
			
		||||
ln -s /usr/lib/gcj-4.1.1/libgcjwebplugin.so ~/.mozilla/plugins/
 | 
			
		||||
 | 
			
		||||
Type about:plugins in Firefox's URL bar to confirm that the plugin has
 | 
			
		||||
been loaded.  To see gcjwebplugin debugging output, run:
 | 
			
		||||
 | 
			
		||||
firefox -g
 | 
			
		||||
 | 
			
		||||
then at the GDB prompt, type
 | 
			
		||||
 | 
			
		||||
run
 | 
			
		||||
 | 
			
		||||
Please report bugs in Red Hat Bugzilla: http://bugzilla.redhat.com
 | 
			
		||||
							
								
								
									
										26
									
								
								gcc41.spec
									
									
									
									
									
								
							
							
						
						
									
										26
									
								
								gcc41.spec
									
									
									
									
									
								
							@ -1,6 +1,6 @@
 | 
			
		||||
%define DATE 20060908
 | 
			
		||||
%define DATE 20060915
 | 
			
		||||
%define gcc_version 4.1.1
 | 
			
		||||
%define gcc_release 21
 | 
			
		||||
%define gcc_release 22
 | 
			
		||||
%define _unpackaged_files_terminate_build 0
 | 
			
		||||
%define multilib_64_archs sparc64 ppc64 s390x x86_64
 | 
			
		||||
%ifarch %{ix86} x86_64 ia64
 | 
			
		||||
@ -29,6 +29,7 @@ License: GPL
 | 
			
		||||
Group: Development/Languages
 | 
			
		||||
Source0: gcc-%{version}-%{DATE}.tar.bz2
 | 
			
		||||
Source1: libgcc_post_upgrade.c
 | 
			
		||||
Source2: README.libgcjwebplugin.so
 | 
			
		||||
URL: http://gcc.gnu.org
 | 
			
		||||
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
 | 
			
		||||
# Need binutils with -pie support >= 2.14.90.0.4-4
 | 
			
		||||
@ -143,6 +144,7 @@ Patch35: gcc41-pr27898.patch
 | 
			
		||||
Patch36: gcc41-pr26026.patch
 | 
			
		||||
Patch37: gcc41-pr28659.patch
 | 
			
		||||
Patch38: gcc41-pr27567.patch
 | 
			
		||||
Patch39: gcc41-pr28046.patch
 | 
			
		||||
 | 
			
		||||
%define _gnu %{nil}
 | 
			
		||||
%ifarch sparc
 | 
			
		||||
@ -464,6 +466,7 @@ which are required to run programs compiled with the GNAT.
 | 
			
		||||
%patch36 -p0 -b .pr26026~
 | 
			
		||||
%patch37 -p0 -b .pr28659~
 | 
			
		||||
%patch38 -p0 -b .pr27567~
 | 
			
		||||
%patch39 -p0 -b .pr28046~
 | 
			
		||||
 | 
			
		||||
sed -i -e 's/4\.1\.2/4.1.1/' gcc/BASE-VER gcc/version.c
 | 
			
		||||
sed -i -e 's/" (Red Hat[^)]*)"/" (Red Hat %{version}-%{gcc_release})"/' gcc/version.c
 | 
			
		||||
@ -647,8 +650,8 @@ for i in {gcc,gcc/cp,gcc/java,gcc/ada,libstdc++-v3,libobjc,libmudflap,libgomp}/C
 | 
			
		||||
	cp -p $i rpm.doc/changelogs/$i
 | 
			
		||||
done
 | 
			
		||||
 | 
			
		||||
(cd gcc/f; for i in ChangeLog*; do
 | 
			
		||||
	cp -p $i ../../rpm.doc/gfortran/$i.f
 | 
			
		||||
(cd gcc/fortran; for i in ChangeLog*; do
 | 
			
		||||
	cp -p $i ../../rpm.doc/gfortran/$i
 | 
			
		||||
done)
 | 
			
		||||
(cd libgfortran; for i in ChangeLog*; do
 | 
			
		||||
	cp -p $i ../rpm.doc/gfortran/$i.libgfortran
 | 
			
		||||
@ -1416,6 +1419,7 @@ fi
 | 
			
		||||
%{_prefix}/%{_lib}/logging.properties
 | 
			
		||||
%dir %{_prefix}/%{_lib}/gcj-%{version}/classmap.db.d
 | 
			
		||||
%attr(0644,root,root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) %{_prefix}/%{_lib}/gcj-%{version}/classmap.db
 | 
			
		||||
%doc %{SOURCE2}
 | 
			
		||||
 | 
			
		||||
%files -n libgcj-devel
 | 
			
		||||
%defattr(-,root,root)
 | 
			
		||||
@ -1523,6 +1527,20 @@ fi
 | 
			
		||||
%doc rpm.doc/changelogs/libmudflap/ChangeLog*
 | 
			
		||||
 | 
			
		||||
%changelog
 | 
			
		||||
* Fri Sep 15 2006 Jakub Jelinek <jakub@redhat.com> 4.1.1-22
 | 
			
		||||
- update from gcc-4_1-branch (-r116778:116958)
 | 
			
		||||
  - PRs ada/21952, ada/29025, c++/26957, fortran/28890, fortran/28923,
 | 
			
		||||
	fortran/28959, libfortran/28890, libfortran/28923, libfortran/28947,
 | 
			
		||||
	middle-end/28493, other/23541, other/26507, rtl-optimization/28243,
 | 
			
		||||
	rtl-optimization/28634, rtl-optimization/28636, rtl-optimization/28726,
 | 
			
		||||
	target/13685, target/26504, target/27537, target/27681, target/28621,
 | 
			
		||||
	target/29006, testsuite/28950, testsuite/29007
 | 
			
		||||
- fix #pragma omp atomic (PR middle-end/28046)
 | 
			
		||||
- speed up dominance frontiers calculation (Jan Hubicka)
 | 
			
		||||
- add README.libgcjwebplugin.so to libgcj %%doc (Tom Fitzsimmons)
 | 
			
		||||
- fix gcc-gfortran %%doc (#206333)
 | 
			
		||||
- fix gcc-debuginfo (#205500)
 | 
			
		||||
 | 
			
		||||
* Fri Sep  8 2006 Jakub Jelinek <jakub@redhat.com> 4.1.1-21
 | 
			
		||||
- update from gcc-4_1-branch (-r116498:116778)
 | 
			
		||||
  - PRs c++/19809, c++/26102, c++/26195, c++/26571, c++/26670, c++/26671,
 | 
			
		||||
 | 
			
		||||
		Loading…
	
		Reference in New Issue
	
	Block a user