libtoxcore (0.2.20-1) [PTS] [DDPO]

COMMITS: VCS has seen 34 commits since the debian/0.2.19-1 tag

Git: https://salsa.debian.org/yangfl-guest/c-toxcore.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Repo size: 3444736
Browser: https://salsa.debian.org/yangfl-guest/c-toxcore
Last scan: 2025-09-06 15:53:02+00
Next scan: 2025-09-12 03:08:00+00
CI pipeline status: success

Debian changelog in Git:

libtoxcore (0.2.20-1) unstable; urgency=medium

  * New upstream release
  * Bump Standards-Version to 4.7.2

 -- Yangfl <mmyangfl@gmail.com>  Fri, 28 Mar 2025 11:37:55 +0800

This branch is 34 commits ahead of tag debian/0.2.19-1

Git log:

commit 097e9379436a4808ffa41ecbfaeaa4c87e3b5d0f
Author: yangfl <yangfl@users.noreply.github.com>
Date:   Fri Mar 28 11:39:38 2025 +0800

    debian: update to 0.2.20

commit e70df8fb079ca2a660cdfb9f746b540a3194625c
Merge: 4abb566 dfb1345
Author: yangfl <yangfl@users.noreply.github.com>
Date:   Fri Mar 28 11:37:35 2025 +0800

    Merge tag 'upstream/0.2.20'

commit dfb1345a764ed2ad4fc7db48fd818b5556d72bc6
Author: yangfl <yangfl@users.noreply.github.com>
Date:   Fri Mar 28 11:34:56 2025 +0800

    New upstream version 0.2.20

commit 934a8301113e6c6cb2bf1fb6791135cade908c72
Author: Robin Linden <dev@robinlinden.eu>
Date:   Mon Nov 11 00:54:53 2024 +0100

    chore: Release 0.2.20

commit 3acef4bf0441214e232d2bd55126d6268b079f33
Author: iphydf <iphydf@users.noreply.github.com>
Date:   Sat Nov 9 14:02:01 2024 +0000

    fix: Add missing free in dht_get_nodes_response event.
    
    This was added everywhere except here.

commit 55752a2e2ef894bfa6d7a2a21a0278e3f2bede7d
Author: Green Sky <green@g-s.xyz>
Date:   Fri Nov 8 11:43:30 2024 +0100

    fix(toxav): pass video bit rate as kbit
    Previously we unintentionally made it Mbit.

commit 7e573280a7593c859d0af957d1644845cafcea03
Author: Green Sky <green@g-s.xyz>
Date:   Sat Apr 27 12:09:05 2024 +0200

    docs(toxav): fix docs of toxav.h
    - fix units to be more readable
    - use width before height consistently
    - video -> audio typo

commit 5f88a084e8c67ea8d8aa733cbb57aabb5082e6d3
Author: Green Sky <green@g-s.xyz>
Date:   Thu Oct 10 17:10:42 2024 +0200

    fix: friend_connections leak on allocation failure
    clean up when it only contains connections in the NONE state

commit 6d27a1ae178edc4c2ebb8768bb3c455a6baac467
Author: Green Sky <Green-Sky@users.noreply.github.com>
Date:   Fri Nov 8 17:28:00 2024 +0100

    fix: wrong comment for closelist

commit ce4f29e80367580cfec24ad2b4f72ffd69e6f6f1
Author: iphydf <iphydf@users.noreply.github.com>
Date:   Fri Nov 8 17:14:48 2024 +0000

    cleanup: Fix all `-Wsign-compare` warnings.

commit 4d4251c397f2738d1bfcb09304d12ee34addc75b
Author: Green Sky <green@g-s.xyz>
Date:   Fri Nov 8 16:09:49 2024 +0100

    chore: lower cirrus ci timeout drastically

commit 4067628450744bb17b8ada1a11ad35480a386012
Author: Green Sky <green@g-s.xyz>
Date:   Wed Oct 9 12:48:41 2024 +0200

    fix: events leak that can occur if allocation fails
    rare in practice, found by fuzzing

commit 9610ac31c5f00f24f137478819d67e3eda832bec
Author: iphydf <iphydf@users.noreply.github.com>
Date:   Fri Nov 8 11:39:55 2024 +0000

    fix: Return an error instead of crashing on nullptr args in NGC.

commit a57c2c8f956fb5f577a9791802c019e391e743cb
Author: zoff99 <zoff99@users.noreply.github.com>
Date:   Wed Feb 7 22:47:27 2024 +0000

    refactor: Make ToxAV independent of toxcore internals.

commit 5752fc29f867e66d548ac87543534f71f8ec5a97
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Fri Feb 16 18:56:28 2024 -0500

    refactor: Make tox-bootstrapd use bool instead of int
    
    A continuation of the cleanup done in
    b7404f24f63054c00c26abab4bd0b9dc58f96efb.
    
    tox-bootrstrapd historically had used ints for boolean values, as it was
    initially written in C89 which has no stdbool.h. Since then it has
    modernized and moved on to using C11, but the usage of the int type to
    represent boolean values, "boolean ints", remained. Recently, driven by
    a desire to eliminate implicit int-to-bool conversion, @iphydf did a
    cleanup in b7404f24f63054c00c26abab4bd0b9dc58f96efb, changing some of
    the boolean ints to bools and doing manual int-to-bool conversion on the
    remaining boolean ints. This left the codebase in an inconsistent state
    of both ints and bools now being used to represent boolean values, not
    to mention that the explicit int-to-bool conversions are a bit ugly. The
    only boolean ints that remained are those stemming from libconfig's
    config_lookup_bool() taking an *int parameter to return a boolean value,
    as libconfig still uses C89. This commit adds a wrapper function around
    libconfig's config_lookup_bool() that takes a *bool instead, eliminating
    the remaining boolean ints and majority of the explicit int-to-bool
    conversions in tox-bootstrapd.

commit df675786eb2ae5aa0c1858d1f655e0e604678e66
Author: iphydf <iphydf@users.noreply.github.com>
Date:   Wed Nov 6 23:55:40 2024 +0000

    chore: Add release-drafter github action.

commit 03fd7a69dcf46cb66424c3045a687d7cf13fcffc
Author: iphydf <iphydf@users.noreply.github.com>
Date:   Wed Nov 6 15:50:01 2024 +0000

    chore: Use toktok's cmp instead of upstream.
    
    There are a few minor modifications in there that make it aligned with
    cimple's standards.

commit 350c0ba1205469c40c6e1d3141a2cfd91b0cb389
Author: iphydf <iphydf@users.noreply.github.com>
Date:   Wed Nov 6 15:43:33 2024 +0000

    cleanup: Sort apk/apt install commands in Dockerfiles.
    
    CodeQL scanning is complaining about this.

commit 8c1bda502cb7cb25dd923523a6ccf4efe9acb177
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Wed Nov 6 15:06:20 2024 +0000

    chore(deps): bump golang.org/x/net
    
    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0.
    - [Commits](https://github.com/golang/net/compare/v0.17.0...v0.23.0)
    
    ---
    updated-dependencies:
    - dependency-name: golang.org/x/net
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>

commit ddb9d3210da40645097b1446160ce7303c649755
Author: iphydf <iphydf@users.noreply.github.com>
Date:   Wed Nov 6 13:23:01 2024 +0000

    chore: Upgrade to FreeBSD 14.1 in cirrus build.
    
    14.0 is EOL.

commit e9076f45bd3385e44b32d1e75ee6e3d8afd00c1f
Author: Green Sky <green@g-s.xyz>
Date:   Tue Jul 16 11:26:31 2024 +0200

    chore(cmake): set options changes as cache and with force
    
    Without this, changes will not propergate to a parent if
    toxcore is used as a subdirectory.

commit 03e9fbf3703e430d21138c4f69e9ac7dbefb7564
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Fri May 10 01:07:43 2024 -0400

    fix: Use Opus in the CBR mode
    
    VBR is susceptible to a transcription attack, where words can be
    deducted from bandwidth fluctuations, even despite the audio being
    encrypted. Toxcore does add padding, but it's just 0-7 bytes, to pad to
    a 8 byte boundary, which might not be enough. CBR is safe from this
    attack, it is the industry recommendation to use CBR: "Applications
    conveying highly sensitive unstructured information SHOULD NOT use
    codecs in VBR mode."[1], and is what other secure messengers use too,
    e.g. Signal.
    
    Here are some papers on this topic:
    - A. M. White, A. R. Matthews, K. Z. Snow and F. Monrose, "Phonotactic
      Reconstruction of Encrypted VoIP Conversations: Hookt on Fon-iks,"
      2011 IEEE Symposium on Security and Privacy, Oakland, CA, USA, 2011,
      pp. 3-18, doi: 10.1109/SP.2011.34.
    - L. A. Khan, M. S. Baig, and Amr M. Youssef. Speaker recognition
      from encrypted VoIP communications. Digit. Investig. 7, 1–2 (October,
      2010), 65–73. https://doi.org/10.1016/j.diin.2009.10.001
    - C. V. Wright, L. Ballard, S. E. Coull, F. Monrose and G. M. Masson,
      "Spot Me if You Can: Uncovering Spoken Phrases in Encrypted VoIP
      Conversations," 2008 IEEE Symposium on Security and Privacy (sp 2008),
      Oakland, CA, USA, 2008, pp. 35-49, doi: 10.1109/SP.2008.21.
    
    Thanks to an IRC user who asked to remain anonymous for sending the
    diff.
    
    [1] https://datatracker.ietf.org/doc/html/rfc6562#section-3

commit 671b1f92332a8314dccf76d5df93c0b6c1230636
Author: Green Sky <green@g-s.xyz>
Date:   Tue Sep 17 15:46:33 2024 +0200

    fix: toxav rtp temp buffer allocation size was too large
    and cast from 32bit to 16bit, causing a overflow and making the
    allocated size too small

commit 258148bd4e115801d169f0d1a4398db500b75342
Author: Green Sky <green@g-s.xyz>
Date:   Tue Sep 17 16:15:22 2024 +0200

    chore(ci): new minimum for all android versions is 21

commit d369c93c48905eb7481cc01ade16662097e36987
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Sat Jul 13 09:50:47 2024 -0400

    chore: Fix Emscripten build failing with no host specified

commit 51b24d1c23996867eecfd5db6b29911a07608cfd
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Sat Jul 13 09:05:18 2024 -0400

    chore: Run CompCert on the stable branch of libsodium
    
    The master branch might include staging code that is subject to change,
    e.g. code including VLAs, which CompCert does not support and thus would
    fail on, which will be changed to not use VLAs once merged into the
    stable branch.
    
    See https://github.com/jedisct1/libsodium/pull/1188#issuecomment-2221660989

commit cab1f7d522b07fcf5499cc543b220c5d9458b648
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Sat Jul 13 09:00:26 2024 -0400

    chore: Update WineHQ's apt key hash

commit 102a1fa9b82a32274ab86583f3716139ba92295c
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Sat Apr 27 12:15:40 2024 -0400

    chore: Fix -Werror=maybe-uninitialized in a test

commit cc9515da9c776f10132c82574e0c2c2448e896fb
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Sat Apr 27 10:54:44 2024 -0400

    chore: Fix cpplint failing to install

commit 3485b5feef36525012af1eb1faaf76a8f826ff04
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Sat Apr 27 10:37:37 2024 -0400

    chore: Disable -Wswitch-default and -Wunsafe-buffer-usage

commit 719041e04b6abc54c003eef5e4858d729eb32284
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Sat Apr 27 09:19:08 2024 -0400

    chore: Fix Circle CI failing on a missing clang lib
    
    The ubsan build fails due to the missing
    /usr/lib/llvm-18/lib/clang/18/lib/linux/libclang_rt.ubsan_standalone-x86_64.a
    which is provided by the libclang-rt-18-dev package, which would be
    installed if we didn't disallow recommends.
    
    Installing it manually is not practical, as using libclang-rt-18-dev
    once clang updates to version 19 would be wrong, and installing
    libclang-rt-*-dev would attempt to install all of them, either failing
    or installing all of the clang version available along with them. Thus
    allowing apt to automatically install recommended packages seems like
    best solution.

commit 5344d7f84d060311f2147b343cdd3fd4c433d7dd
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date:   Wed Apr 3 23:20:12 2024 -0400

    fix: Memory leak in the bootstrap daemon

commit fa201681e188ef28b8397f6b20dbf8ceb998e962
Author: jfreegman <jfreegman@gmail.com>
Date:   Wed Feb 28 09:40:50 2024 -0500

    cleanup: Remove useless if clause

commit 7572888a218964e8deb6602b096c99a0f9040dc2
Author: Robin Linden <dev@robinlinden.eu>
Date:   Tue Mar 26 20:47:05 2024 +0100

    chore: Fix GitHub actions deprecation warnings
    
    actions/github-script@v6 is a Node.js 16 action, and Node.js 16 actions
    have been deprecated.