Branch :
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
| 1944839c | 2026-01-12 11:36:40 | Back out use of pledge(2) in mupen64plus-ui-console. Although pledge(2) was only called at the last possible moment, after nearly all initialization had been done, it turns out there was one case I missed: if the user is playing with a ujoy(4) gamepad, then SDL will call ioctl(2) with USB_GET_REPORT_DESC. No pledge(2) promise allows this. Due to mupen64plus's design, pledge(2) cannot be moved any later. The USB initialization takes place in a .so plugin with a documented public API. Calling pledge(2) inside the plugin would certainly break other mupen64plus frontends. It may be possible to reintroduce pledge(2) in mupen64plus, by hoisting joystick initialization to a place that gets executed earlier. However, this too might not be possible without breaking other frontends. Other alternatives could be to modify SDL's joystick initialization to not require USB_GET_REPORT_DESC, or perhaps to add a new "ujoy" promise. Either of these would benefit other SDL/ujoy(4)/pledge-using programs (e.g., mgba). But research needs to be done to see how much of a benefit this would actually provide. To be honest, complete removal of pledge(2) from mupen64plus would not be a great loss. mupen64plus initializes things late and reinitializes things often. That meant the tightest pledge(2) promise still required filesystem access *and* network access *and* exec. A better-designed program would perform initialization earlier and use privilege separation. Even other non-privilege-separated programs usually lend themselves better to pledge(2) than mupen64plus. Wrong pledge(2) promise reported by Fabien Romano. | ||
| 14bdfe3f | 2025-04-16 09:16:01 | Update to mupen64plus-2.6.0. Backport several security patches that have not yet been merged upstream: https://github.com/mupen64plus/mupen64plus-core/pull/1080 https://github.com/mupen64plus/mupen64plus-core/pull/1119 https://github.com/mupen64plus/mupen64plus-core/pull/1122 https://github.com/mupen64plus/mupen64plus-core/pull/1123 Add pledge to the mupen64plus binary: "stdio rpath wpath cpath inet flock unix dns sendfd recvfd prot_exec drm audio" | ||
| 7b10148b | 2025-02-11 19:27:53 | Force aarch64 detection to fix build with clang 19 Upstream's Makefile uses uname -m which returns arm64 on OpenBSD, and inadvertently matches the build options added for armv7, now rejected by clang 19: cc: error: unsupported option '-mno-thumb' for target 'aarch64-unknown-openbsd7.6' cc: error: unsupported option '-mfpu=' for target 'aarch64-unknown-openbsd7.6' cc: error: unsupported option '-mfloat-abi=' for target 'aarch64-unknown-openbsd7.6' | ||
| a2337d6c | 2024-12-17 11:56:15 | mupen64plus/video-glide64mk2: pull in upstream fixes for newer boost ok bentley (maintainer) | ||
| 3490df95 | 2023-09-21 13:10:25 | ->SITES | ||
| 9ed61913 | 2023-04-24 11:40:33 | x11/gtk+3,-guic -> x11/gtk+4,-guic + bump included inherits from MODULE. | ||
| 669a55e1 | 2022-03-31 17:12:50 | sync WANTLIB | ||
| 06ebc532 | 2022-03-11 18:59:33 | drop RCS Ids | ||
| 7d9f820c | 2021-02-14 12:41:34 | Pull in -fno-common fixes from upstream. | ||
| 3097032a | 2021-01-30 08:05:43 | Backport upstream fix for -fno-common. |