------------------------------------------------------------------------------- -- Phase: setup ------------------------------------------------------------------------------- Installing /packages/All/pkgconf-1.6.3,1.txz Installing /packages/All/indexinfo-0.3.1.txz Installing /packages/All/m4-1.4.18_1,1.txz Installing /packages/All/autoconf-wrapper-20131203.txz Installing /packages/All/perl5-5.30.2.txz ===== Message from perl5-5.30.2: -- The /usr/bin/perl symlink has been removed starting with Perl 5.20. For shebangs, you should either use: #!/usr/local/bin/perl or #!/usr/bin/env perl The first one will only work if you have a /usr/local/bin/perl, the second will work as long as perl is in PATH. Installing /packages/All/autoconf-2.69_3.txz Installing /packages/All/automake-1.16.2.txz Installing /packages/All/argp-standalone-1.3_4.txz ===== Message from argp-standalone-1.3_4: -- ===> NOTICE: The argp-standalone port currently does not have a maintainer. As a result, it is more likely to have unresolved issues, not be up-to-date, or even be removed in the future. To volunteer to maintain this port, please create an issue at: https://bugs.freebsd.org/bugzilla More information about port maintainership is available at: https://www.freebsd.org/doc/en/articles/contributing/ports-contributing.html#maintain-port Installing /packages/All/libconfig-1.7.2_1.txz Installing /packages/All/ncurses-6.1.20190525.txz Installing /packages/All/readline-8.0.4.txz Installing /packages/All/sqlite3-3.31.1_1,1.txz Installing /packages/All/gettext-runtime-0.20.2.txz Installing /packages/All/bash-5.0.17.txz SUCCEEDED 00:00:09 ------------------------------------------------------------------------------- -- Phase: check-sanity ------------------------------------------------------------------------------- SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: pkg-depends ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on file: /usr/local/sbin/pkg - found SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: fetch-depends ------------------------------------------------------------------------------- SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: fetch ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on file: /usr/local/sbin/pkg - found ===> Fetching all distfiles required by cvechecker-3.9 for building SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: checksum ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on file: /usr/local/sbin/pkg - found ===> Fetching all distfiles required by cvechecker-3.9 for building => SHA256 Checksum OK for sjvermeu-cvechecker-v3.9_GH0.tar.gz. SUCCEEDED 00:00:01 ------------------------------------------------------------------------------- -- Phase: extract-depends ------------------------------------------------------------------------------- SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: extract ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on file: /usr/local/sbin/pkg - found ===> Fetching all distfiles required by cvechecker-3.9 for building ===> Extracting for cvechecker-3.9 ===> cvechecker-3.9 depends on file: /usr/local/sbin/pkg - found ===> Fetching all distfiles required by cvechecker-3.9 for building => SHA256 Checksum OK for sjvermeu-cvechecker-v3.9_GH0.tar.gz. Extracted Memory Use: 17.74M SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: patch-depends ------------------------------------------------------------------------------- SUCCEEDED 00:00:01 ------------------------------------------------------------------------------- -- Phase: patch ------------------------------------------------------------------------------- ===> Patching for cvechecker-3.9 ===> Applying ports patches for cvechecker-3.9 ===> Cleanly applied ports patch(es) patch-scripts_cverules patch-scripts_pullcves SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: build-depends ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on package: pkgconf>=1.3.0_1 - found ===> cvechecker-3.9 depends on package: autoconf>=2.69 - found ===> cvechecker-3.9 depends on package: automake>=1.16.1 - found SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: lib-depends ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on shared library: libargp.so - found (/usr/local/lib/libargp.so) ===> cvechecker-3.9 depends on shared library: libconfig.so - found (/usr/local/lib/libconfig.so) ===> cvechecker-3.9 depends on shared library: libsqlite3.so - found (/usr/local/lib/libsqlite3.so) SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: configure ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on package: pkgconf>=1.3.0_1 - found ===> cvechecker-3.9 depends on package: autoconf>=2.69 - found ===> cvechecker-3.9 depends on package: automake>=1.16.1 - found ===> cvechecker-3.9 depends on shared library: libargp.so - found (/usr/local/lib/libargp.so) ===> cvechecker-3.9 depends on shared library: libconfig.so - found (/usr/local/lib/libconfig.so) ===> cvechecker-3.9 depends on shared library: libsqlite3.so - found (/usr/local/lib/libsqlite3.so) ===> Configuring for cvechecker-3.9 configure.ac:26: installing './compile' configure: loading site script /xports/Templates/config.site checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... (cached) /bin/mkdir -p checking for gawk... (cached) /usr/bin/awk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking Determining host operating system... DragonFly checking for gcc... cc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether cc accepts -g... yes checking for cc option to accept ISO C89... none needed checking whether cc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of cc... gcc3 checking how to run the C preprocessor... cpp checking for grep that handles long lines and -e... (cached) /usr/bin/grep checking for egrep... (cached) /usr/bin/egrep checking for ANSI C header files... (cached) yes checking for sys/types.h... (cached) yes checking for sys/stat.h... (cached) yes checking for stdlib.h... (cached) yes checking for string.h... (cached) yes checking for memory.h... (cached) yes checking for strings.h... (cached) yes checking for inttypes.h... (cached) yes checking for stdint.h... (cached) yes checking for unistd.h... (cached) yes checking for minix/config.h... (cached) no checking whether it is safe to define __EXTENSIONS__... yes checking for stdlib.h... (cached) yes checking for string.h... (cached) yes checking for unistd.h... (cached) yes checking argp.h usability... yes checking argp.h presence... yes checking for argp.h... yes checking for gethostname... (cached) yes checking for memset... (cached) yes checking for regcomp... yes checking for strchr... (cached) yes checking for strrchr... (cached) yes checking for strstr... (cached) yes checking for size_t... (cached) yes configure: WARNING: Please make sure pkg-config is installed and autoreconf run checking pkg-config is at least version 0.9.0... yes checking for CONFIG... yes checking for SQLITE3... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating src/Makefile config.status: creating data/Makefile config.status: creating conf/Makefile config.status: creating scripts/Makefile config.status: creating docs/Makefile config.status: creating config.h config.status: executing depfiles commands SUCCEEDED 00:00:09 ------------------------------------------------------------------------------- -- Phase: build ------------------------------------------------------------------------------- ===> Building for cvechecker-3.9 --- all --- /usr/bin/make all-recursive --- all-recursive --- Making all in src --- output/.dirstamp --- --- output/.deps/.dirstamp --- --- sqlite3/.dirstamp --- --- sqlite3/.deps/.dirstamp --- --- dummy/.dirstamp --- --- dummy/.deps/.dirstamp --- --- cvecheck.o --- --- swstring.o --- --- sqlite3/sqlite3_impl.o --- --- output/stringscmd.o --- --- sqlite3/sqlite3_impl.o --- depbase=`echo sqlite3/sqlite3_impl.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`; cc -DHAVE_CONFIG_H -I. -I.. -D_USE_SQLITE3 -isystem /usr/local/include -pipe -O2 -isystem /usr/local/include -fno-strict-aliasing -I/usr/local/include -I/usr/local/include -MT sqlite3/sqlite3_impl.o -MD -MP -MF $depbase.Tpo -c -o sqlite3/sqlite3_impl.o sqlite3/sqlite3_impl.c && mv -f $depbase.Tpo $depbase.Po --- output/stringscmd.o --- depbase=`echo output/stringscmd.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`; cc -DHAVE_CONFIG_H -I. -I.. -D_USE_SQLITE3 -isystem /usr/local/include -pipe -O2 -isystem /usr/local/include -fno-strict-aliasing -I/usr/local/include -I/usr/local/include -MT output/stringscmd.o -MD -MP -MF $depbase.Tpo -c -o output/stringscmd.o output/stringscmd.c && mv -f $depbase.Tpo $depbase.Po --- dummy/dummy_mysql.o --- --- cvecheck.o --- depbase=`echo cvecheck.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`; cc -DHAVE_CONFIG_H -I. -I.. -D_USE_SQLITE3 -isystem /usr/local/include -pipe -O2 -isystem /usr/local/include -fno-strict-aliasing -I/usr/local/include -I/usr/local/include -MT cvecheck.o -MD -MP -MF $depbase.Tpo -c -o cvecheck.o cvecheck.c && mv -f $depbase.Tpo $depbase.Po --- swstring.o --- depbase=`echo swstring.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`; cc -DHAVE_CONFIG_H -I. -I.. -D_USE_SQLITE3 -isystem /usr/local/include -pipe -O2 -isystem /usr/local/include -fno-strict-aliasing -I/usr/local/include -I/usr/local/include -MT swstring.o -MD -MP -MF $depbase.Tpo -c -o swstring.o swstring.c && mv -f $depbase.Tpo $depbase.Po --- dummy/dummy_mysql.o --- depbase=`echo dummy/dummy_mysql.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`; cc -DHAVE_CONFIG_H -I. -I.. -D_USE_SQLITE3 -isystem /usr/local/include -pipe -O2 -isystem /usr/local/include -fno-strict-aliasing -I/usr/local/include -I/usr/local/include -MT dummy/dummy_mysql.o -MD -MP -MF $depbase.Tpo -c -o dummy/dummy_mysql.o dummy/dummy_mysql.c && mv -f $depbase.Tpo $depbase.Po --- cvecheck.o --- cvecheck.c: In function 'cve_to_vars': cvecheck.c:213:2: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(buffer, start, s_start-s_end); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ cvecheck.c:210:12: note: length computed here s_start = strlen(start); ^~~~~~~~~~~~~ cvecheck.c:218:2: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(buffer, end+1, strlen(end+1)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --- output/stringscmd.o --- output/stringscmd.c: In function 'search_and_substitute_group': output/stringscmd.c:29:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(buffer2, cpe->version, strlen(cpe->version) - strlen(strstr(cpe->version, buffer))); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:29:34: note: length computed here strncpy(buffer2, cpe->version, strlen(cpe->version) - strlen(strstr(cpe->version, buffer))); ^~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:33:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(cpe->version, buffer2, strlen(buffer2)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:36:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(buffer2, cpe->update, strlen(cpe->update) - strlen(strstr(cpe->update, buffer))); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:36:33: note: length computed here strncpy(buffer2, cpe->update, strlen(cpe->update) - strlen(strstr(cpe->update, buffer))); ^~~~~~~~~~~~~~~~~~~ output/stringscmd.c:40:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(cpe->update, buffer2, strlen(buffer2)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:43:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(buffer2, cpe->edition, strlen(cpe->edition) - strlen(strstr(cpe->edition, buffer))); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:43:34: note: length computed here strncpy(buffer2, cpe->edition, strlen(cpe->edition) - strlen(strstr(cpe->edition, buffer))); ^~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:47:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(cpe->edition, buffer2, strlen(buffer2)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:50:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(buffer2, cpe->language, strlen(cpe->language) - strlen(strstr(cpe->language, buffer))); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:50:35: note: length computed here strncpy(buffer2, cpe->language, strlen(cpe->language) - strlen(strstr(cpe->language, buffer))); ^~~~~~~~~~~~~~~~~~~~~ output/stringscmd.c:54:3: warning: 'strncpy' specified bound depends on the length of the source argument [-Wstringop-overflow=] strncpy(cpe->language, buffer2, strlen(buffer2)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --- cvechecker --- cc -pipe -O2 -isystem /usr/local/include -fno-strict-aliasing -I/usr/local/include -I/usr/local/include -o cvechecker cvecheck.o swstring.o output/stringscmd.o sqlite3/sqlite3_impl.o dummy/dummy_mysql.o -largp -L/usr/local/lib -L/usr/local/lib -lconfig -L/usr/local/lib -lsqlite3 Making all in data Making all in conf --- cvechecker.conf --- rm -f cvechecker.conf cvechecker.conf.tmp srcdir=''; test -f ./cvechecker.conf.in || srcdir=./; sed -e 's|@localstatedir[@]|/var/db|g' -e 's|@pkgdatadir[@]|/usr/local/share/cvechecker|g' ${srcdir}cvechecker.conf.in > cvechecker.conf.tmp chmod a-w cvechecker.conf.tmp mv cvechecker.conf.tmp cvechecker.conf Making all in scripts Making all in docs SUCCEEDED 00:00:01 ------------------------------------------------------------------------------- -- Phase: run-depends ------------------------------------------------------------------------------- ===> cvechecker-3.9 depends on executable: bash - found SUCCEEDED 00:00:00 ------------------------------------------------------------------------------- -- Phase: stage ------------------------------------------------------------------------------- ===> Staging for cvechecker-3.9 ===> cvechecker-3.9 depends on executable: bash - found ===> Generating temporary packing list Making install in src /bin/mkdir -p '/construction/security/cvechecker/stage/usr/local/bin' install -s -m 555 cvechecker '/construction/security/cvechecker/stage/usr/local/bin' Making install in data /bin/mkdir -p '/construction/security/cvechecker/stage/usr/local/share/cvechecker' install -m 0644 nvdcve2simple.xsl cvereport.xsl report.css csv2xml.awk mysql_cvechecker.sql '/construction/security/cvechecker/stage/usr/local/share/cvechecker' /bin/mkdir -p "/construction/security/cvechecker/stage/var/db/cvechecker" "/construction/security/cvechecker/stage/var/db/cvechecker/local" "/construction/security/cvechecker/stage/var/db/cvechecker/cache" /bin/mkdir -p '/construction/security/cvechecker/stage/usr/local/share/doc/cvechecker' install -m 0644 acknowledgements.xml '/construction/security/cvechecker/stage/usr/local/share/doc/cvechecker' Making install in conf /bin/mkdir -p '/construction/security/cvechecker/stage/usr/local/etc' install -m 0644 cvechecker.conf '/construction/security/cvechecker/stage/usr/local/etc' Making install in scripts /bin/mkdir -p '/construction/security/cvechecker/stage/usr/local/bin' install -m 555 pullcves cvereport cvegenversdat cverules '/construction/security/cvechecker/stage/usr/local/bin' Making install in docs /bin/mkdir -p '/construction/security/cvechecker/stage/usr/local/share/doc/cvechecker' install -m 0644 userguide.xml '/construction/security/cvechecker/stage/usr/local/share/doc/cvechecker' /bin/mkdir -p '/construction/security/cvechecker/stage/usr/local/man/man1' install -m 0644 cvechecker.1 pullcves.1 cvereport.1 cverules.1 cvegenversdat.1 '/construction/security/cvechecker/stage/usr/local/man/man1' /bin/mv /construction/security/cvechecker/stage/usr/local/etc/cvechecker.conf /construction/security/cvechecker/stage/usr/local/etc/cvechecker.conf.sample ====> Compressing man pages (compress-man) ====> Running Q/A tests (stage-qa) Warning: You have disabled the licenses framework with DISABLE_LICENSES, unable to run checks SUCCEEDED 00:00:01 ------------------------------------------------------------------------------- -- Phase: package ------------------------------------------------------------------------------- ===> Building package for cvechecker-3.9 file sizes/checksums [18]: 0% file sizes/checksums [18]: 100% packing files [18]: 0% packing files [18]: 100% packing directories [3]: 0% packing directories [3]: 100% SUCCEEDED 00:00:01 TOTAL TIME 00:00:24