Package: libimobiledevice / 1.2.0+dfsg-3.1

Metadata

Package Version Patches format
libimobiledevice 1.2.0+dfsg-3.1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
02 fix link errors.patch | (download)

src/Makefile.am | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---
09_use_python_config.patch | (download)

m4/ac_python_devel.m4 | 7 1 + 6 - 0 !
1 file changed, 1 insertion(+), 6 deletions(-)

 use python-config to find headers.
   * 09_use_python_config.patch: Use python-config to find the python
     include paths, and fix the build failure with multi-arched python.
local only sockets.patch | (download)

common/socket.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 [patch] common: [security fix] make sure sockets only listen locally


gnutls api update.patch | (download)

src/idevice.c | 13 13 + 0 - 0 !
1 file changed, 13 insertions(+)

 [patch] updated gnutls certificate callback to new api (backwards
 compatible)


fix ssl version negotiation for newer versions of openssl.diff | (download)

src/idevice.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix ssl version negotiation for newer versions of openssl
 Depending on the OpenSSL version (and custom distribution patches), `SSLv3_method()`
 would return NULL on some systems and also `SSLv23_method()` fails with some older
 iOS versions...
idevice update gnutls code to support ios 10.diff | (download)

src/idevice.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 idevice: update gnutls code to support ios 10
 As of iOS 10 beta 4, the GnuTLS implementation idevice_connection_enable_ssl
 needs to be updated to support TLS. Using +VERS-TLS-ALL did not work on some
 of the devices I tested and I wasn't sure how to fix it, but +VERS-TLS1.0 is
 working on every device I've tested: iOS 9.0.2, 10.0b4, 8.1.1, 6.0, and 3.0.
userpref gnutls fix pairing record generation and improve error handling.diff | (download)

common/userpref.c | 85 45 + 40 - 0 !
1 file changed, 45 insertions(+), 40 deletions(-)

 userpref: [gnutls] fix pairing record generation and improve error handling
 In newer GnuTLS versions the parameters supplied to
 gnutls_x509_privkey_import_rsa_raw() are actually checked for somewhat
 sane values. Since we were passing the same values for all parameters,
 this check fails and the device certificate is never generated.
 .
 However due to missing checks the pairing record was saved anyway, with
 an empty device certificate. This led to TLS errors during communication,
 leading to the "GnuTLS: Error in pull function" error message appearing
 and the communication to fail.
 .
 This commit fixes the issue by passing some sane values, and also improves
 the overall error handling during generation of the paring record.