# Generate automatically. Do not edit.

commit f00183944fad943216ac5842f6b23ab5c4149e50
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-09

    Release 0.23.17

 NEWS         | 8 ++++++++
 configure.ac | 2 +-
 meson.build  | 2 +-
 3 files changed, 10 insertions(+), 2 deletions(-)

commit 2dea838a5dc284db29b0f8558cd3e1f1822f47ed
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-09

    uri: Supress cppcheck false-positive

 p11-kit/uri.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit 8db6d7eee38bbf1f511da6128d108a62833f84d0
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-09

    uri: Check return value of insert_attribute

 p11-kit/uri.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

commit d6c88b4735284394e73ad0228559fc8aca948318
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-09-09

    meson: Update project version

 meson.build | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit ead7a4a28f0505aa5602877538ef8be9970245b2
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-07-07

    build: Fix typo in checking program_invocation_short_name decl
    
    The decl should be in errno.h, not error.h.

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 99cdf3dc86ec7148e08351b63d8ee5f2f2a7f4d3
Author: Rosen Penev <rosenp@gmail.com>
Date:   2019-07-01

    common: Fix uClibc-ng compilation
    
    program_invocation_short_name is const under uClibc-ng.

 configure.ac | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit 5a89453fafab796d33c37dd6861c102fc28ebde2
Author: Alon Bar-Lev <alon.barlev@gmail.com>
Date:   2019-07-01

    trust: do not allow daylight to invalidate date validation
    
    Issue: 235
    Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>

 trust/builder.c | 1 +
 1 file changed, 1 insertion(+)

commit 787888e181543f5a85eb69d6a3caf14f9a4262b2
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-19

    build: Declare dependency chain between static libs in common
    
    In common/ there are sub-libraries namely libp11-common.a,
    libp11-library.a, libp11-tool.a, and libp11-test.a.
    
    All the latter 3 libs use the symbols from libp11-common.a, it would
    make sense to declare a dependency against it.

 common/meson.build  | 17 ++++++-----------
 p11-kit/meson.build | 22 ++++++++++------------
 trust/meson.build   | 10 +++-------
 3 files changed, 19 insertions(+), 30 deletions(-)

commit eb5eb7aea7fc41a2c15d853cd57c7c030644f4ee
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-19

    build: Make threads dependency more explicit

 common/meson.build  |  6 ++++--
 meson.build         | 12 ++++--------
 p11-kit/meson.build |  4 ++--
 3 files changed, 10 insertions(+), 12 deletions(-)

commit daf1a84de39c4cdbd308c6a0b80b437689a222c7
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-02

    .travis.yml: Use meson for building

 .travis.yml                         | 12 ++++++------
 .travis/autotools/after_failure.sh  |  3 +++
 .travis/autotools/after_success.sh  | 13 +++++++++++++
 .travis/autotools/before_install.sh |  9 +++++++++
 .travis/autotools/install.sh        | 14 ++++++++++++++
 .travis/autotools/script.sh         | 12 ++++++++++++
 .travis/linux/after_failure.sh      |  2 +-
 .travis/linux/after_success.sh      | 10 ++++------
 .travis/linux/before_install.sh     |  4 +++-
 .travis/linux/script.sh             | 33 +++++++++++++++++++++++----------
 build/cross_file_mingw64.txt        | 18 ++++++++++++++++++
 11 files changed, 106 insertions(+), 24 deletions(-)

commit 4f956698b64ac6eb8e5e8b7d143ceb11f1133814
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-15

    build: Add meson build support
    
    This adds support for meson as an alternative build system.

 .dir-locals.el                |   3 +-
 common/meson.build            |  99 ++++++++++++
 doc/manual/meson.build        |  75 +++++++++
 doc/manual/sysdir.xml.in      |   1 +
 doc/manual/userdir.xml.in     |   1 +
 doc/manual/version.xml.in     |   1 +
 meson.build                   | 368 ++++++++++++++++++++++++++++++++++++++++++
 meson_options.txt             |  47 ++++++
 p11-kit/gen-pkcs11-gnu.sh     |  16 ++
 p11-kit/gen-virtual-fixed.sh  |  28 ++++
 p11-kit/libp11-kit-0.dll.def  | 101 ++++++++++++
 p11-kit/libp11-kit.map        | 105 ++++++++++++
 p11-kit/meson.build           | 299 ++++++++++++++++++++++++++++++++++
 p11-kit/meson_post_install.sh |  15 ++
 p11-kit/pkcs11-gnu.c          |   3 +
 po/meson.build                |   1 +
 trust/meson.build             | 162 +++++++++++++++++++
 17 files changed, 1324 insertions(+), 1 deletion(-)

commit 411a7a6d31cd5584ff9837260d77d8c306d3b557
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-01

    trust: Fix mismatched return values

 trust/pem.c  | 2 +-
 trust/x509.c | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

commit 58481dbb0b0ee1384e62878283a398d96e0ff5f2
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-02

    po: Remove en@{,bold}quot from LINGUAS

 po/LINGUAS | 2 --
 1 file changed, 2 deletions(-)

commit cbdbfaaf255083091decc280058caa87db19aeb9
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-01

    build: Don't hardcode module path

 Makefile.am               |  4 +++-
 p11-kit/Makefile.am       | 12 ++++++++----
 p11-kit/test-deprecated.c |  2 +-
 p11-kit/test-init.c       |  2 +-
 p11-kit/test-server.c     | 12 ++++++------
 p11-kit/test-server.sh    |  4 +++-
 p11-kit/test-transport.c  |  6 +++---
 7 files changed, 25 insertions(+), 17 deletions(-)

commit 084347319f6e832ec2c36d7b27a64c8f2614f084
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-01

    build: Move check_PROGRAMS into subdirectories

 .gitignore               | 12 ++++++------
 common/Makefile.am       | 12 ++++++------
 common/test-compat.c     |  4 ++--
 p11-kit/Makefile.am      | 32 ++++++++++++++++----------------
 p11-kit/test-conf.c      |  2 +-
 p11-kit/test-messages.sh |  2 +-
 p11-kit/test-server.c    |  4 ++--
 p11-kit/test-server.sh   |  4 ++--
 p11-kit/test-transport.c |  6 +++---
 9 files changed, 39 insertions(+), 39 deletions(-)

commit 6bebd5747aa49d4a124d23d4967f65a771799fe5
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-01

    tests: Add tmpdir argument to p11_test_copy_setgid
    
    To prevent BUILDDIR being embedded in the library.

 common/test-compat.c | 4 ++--
 common/test.c        | 7 +++++--
 common/test.h        | 3 ++-
 p11-kit/test-conf.c  | 2 +-
 4 files changed, 10 insertions(+), 6 deletions(-)

commit 51382cd59c89e862443421a9d697a709f2244f36
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-16

    tests: Fix memleaks in test-jks.c

 trust/test-jks.c | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

commit 9c2022d292c00ccbe2413b53b7c91cf4ba4d7c14
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-03

    tests: Skip tests calling getauxval(AT_SECURE) if binary is on /tmp

 common/test-compat.c | 5 +++--
 p11-kit/test-conf.c  | 5 +++--
 2 files changed, 6 insertions(+), 4 deletions(-)

commit fd908a787cc868043067f5fab492f8e05b6d99ce
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-16

    tests: Fix temp file permission before deleting
    
    On mingw64/wine, unlink fails if the file has no write bit.

 trust/test-module.c | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

commit 2b3581c234f0097a2598395d1e0012b4ddd9a5ba
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-17

    tests: Don't assume / is not writable on Windows in test-token.c

 trust/test-token.c | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

commit 6708ccf6126734b4d98cc849bc4542c45ffce191
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-15

    conf: Skip root UID check on Windows

 p11-kit/conf.c | 2 ++
 1 file changed, 2 insertions(+)

commit 1e8ca781b983cb31d62e21a3a61f25be1fcc694f
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-20

    virtual: Rename virtual-fixed.c to virtual-fixed-generated.h
    
    Previously the generated .c file was included in another source file,
    which is not supported in some build systems (e.g., meson).

 .gitignore                     | 2 +-
 .travis/linux/after_success.sh | 2 +-
 p11-kit/Makefile.am            | 6 +++---
 p11-kit/virtual.c              | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

commit 045d7546fc317deefc2d84d524a211ce6ab4869b
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-03

    common: Make issetugid check simpler

 common/compat.c |  7 ++-----
 configure.ac    | 16 +---------------
 2 files changed, 3 insertions(+), 20 deletions(-)

commit bbb7f046ff430d33267487cb6f8a0e24d2eab832
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-06-02

    common: Fix vasprintf emulation
    
    va_list must be saved when calling vsnprintf() in a loop.

 common/compat.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

commit 5fc2d67b5ebb3daddb350d7ac60ede74dd99fcc6
Author: Simon Haggett <simon.haggett@gmail.com>
Date:   2019-06-13

    rpc: On UNIX wait on condition variable instead of FD if header is for a different thread.
    
    If rpc_socket_read() receives a header for a different thread, it tries to yield by
    releasing the read mutex and waiting on the socket's read FD. On Linux systems, this has
    been observed to cause a performance problem in cases where multiple threads are being
    used. Threads expecting a different header can rapidly unlock and relock the read mutex,
    as they resume when sock->read_code hasn't changed. This can result in contention on the
    read mutex, which delays the thread that is expecting to consume the header.
    
    This fix updates rpc_socket_read() on UNIX to wait on a condition variable instead of the
    socket's read FD. The condition variable is signalled when sock->read_code changes. This
    allows waiting threads to only resume once the header and payload have been consumed by
    their target thread. This fix only targets UNIX platforms, as the Windows version that
    p11-kit targets by default (Windows 2000) does not provide support for condition
    variables.
    
    Signed-off-by: Simon Haggett <simon.haggett@gmail.com>

 common/compat.h         | 13 +++++++++++++
 p11-kit/rpc-transport.c | 47 +++++++++++++++++++++++++++++++++++------------
 2 files changed, 48 insertions(+), 12 deletions(-)

commit c689917b393379d288b868f70b2f7b7f6aafe430
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-23

    tests: Avoid uninitialized value in test-proxy.c

 p11-kit/test-proxy.c | 4 ++++
 1 file changed, 4 insertions(+)

commit 330148bef17a39075a0af5e446c9502bf3a225ff
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-22

    build: Suppress compiler warning
    
    Remove unused "global" variable.

 p11-kit/proxy.c | 1 -
 1 file changed, 1 deletion(-)

commit 0eb1f6782c5315fc6b46861bc9f92a765e229e14
Author: Raphael Medaer <raphael@medaer.me>
Date:   2019-05-22

    doc: Add 'server' command in help
    
    'server' is the last common command which is not in CLI help.
    IMHO, adding this small documentation could help to promote usage of
    pkcs11 forwarding.

 p11-kit/p11-kit.c | 1 +
 1 file changed, 1 insertion(+)

commit 9a546b4571f20b271058990e94833f35e4ec39c0
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-22

    Release 0.23.16

 NEWS         | 10 ++++++++++
 configure.ac |  2 +-
 2 files changed, 11 insertions(+), 1 deletion(-)

commit 381d16e651d5bcace316fbab4095c8dea8c43a92
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-16

    proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified
    
    While fully implementing C_WaitForSlotEvent() would require a separate
    thread to monitor events, it is straightforward to implement the
    function if the CKF_DONT_BLOCK flag is given.
    
    Suggested by David Ward.

 p11-kit/Makefile.am       |  7 ++++-
 p11-kit/mock-module-ep7.c | 70 +++++++++++++++++++++++++++++++++++++++++++++++
 p11-kit/proxy.c           | 64 +++++++++++++++++++++++++++++++++----------
 p11-kit/test-proxy.c      | 40 +++++++++++++++++++++++++++
 4 files changed, 166 insertions(+), 15 deletions(-)

commit 68ce31aae9a22d18b28f4aa44b3e1006b7fe3aa7
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-17

    conf: Ignore user configuration if the program is running as root
    
    Suggested by Bastien Nocera:
    https://bugzilla.redhat.com/show_bug.cgi?id=1688583

 p11-kit/conf.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

commit 58cede114664e839b53d923863bff604ce58b1a7
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-05-15

    proxy: Refresh slot list on every C_GetSlotList call
    
    Previously, the proxy module calculated the slot list only once at the
    C_Initialize() call.  That was causing a usability limitation when the
    user attaches HSM after starting an application.
    
    Suggested by David Ward.

 p11-kit/Makefile.am       |   7 ++-
 p11-kit/mock-module-ep6.c |  76 ++++++++++++++++++++++++++++
 p11-kit/proxy.c           | 123 +++++++++++++++++++++++++++++-----------------
 p11-kit/test-proxy.c      |  34 ++++++++++++-
 4 files changed, 192 insertions(+), 48 deletions(-)

commit 793cc3b78f17bb5a3c151eba1144b73a5d51be3e
Author: Simon Haggett <simon.haggett@gmail.com>
Date:   2019-03-12

    modules: Fix index used in call to p11_dict_remove()
    
    This fixes a call to p11_dict_remove() in managed_steal_sessions_inlock() to use
    the correct index in the stolen array (i, rather than at). This avoids an
    assert, which was encountered on a host serving a PKCS#11 module to a remote
    Linux client.
    
    Signed-off-by: Simon Haggett <simon.haggett@gmail.com>

 p11-kit/modules.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit cbe95e35f8309493094c93d882d0c18e8063f292
Author: Tom Sutcliffe <tomsci@me.com>
Date:   2019-03-09

    Fix Win32 p11_dl_error crash
    
    Caused by returning a buffer that wasn't allocated with malloc and
    needed to be freed with LocalFree() instead. The fix is to strdup
    msg_buf so what's returned can be free()d.

 common/compat.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

commit 4a925177a81c2566d2a81a0a450607a5ff4d9048
Author: Stefano Garzarella <sgarzare@redhat.com>
Date:   2019-02-27

    modules: check gl.modules before iterates on it when freeing
    
    In some circumstances, as described in the BZ, can happen that
    free_modules_when_no_refs_unlocked() is called multiple times
    when the module destructor is invoked.
    We should check gl.modules before iterates on it in the
    free_modules_when_no_refs_unlocked() functions, to avoid
    a SIGSEGV.
    
    Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1680963

 p11-kit/modules.c | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

commit e2170b295992cb7fdf115227a78028ac3780619f
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-02-18

    trust: Ignore unreadable content in anchors
    
    This amends eb503f3a1467f21a5ecc9ae84ae23b216afc102f.  Instead of
    failing C_FindObjectsInit, treat any errors internally and accumulates
    the successfully loaded certificates.
    
    Reported by Andrej Kvasnica in:
    https://bugzilla.redhat.com/show_bug.cgi?id=1675441

 trust/module.c      |  3 +--
 trust/test-module.c | 77 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 trust/token.c       | 23 +++++++---------
 3 files changed, 88 insertions(+), 15 deletions(-)

commit 2a474e1fe8f4bd8b4ed7622e5cf3b2718a202562
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-01-28

    extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH
    
    Give _p11_extract_jks_timestamp precedence over SOURCE_DATE_EPOCH so
    that the test results are not affected by the envvar settings.

 trust/extract-jks.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

commit 1ba80c67c492f25581ed97c8c31ffb5f20636d06
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-01-14

    Release 0.23.15

 NEWS         | 8 ++++++++
 configure.ac | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

commit f277a1469aef05d3542e8ae9fd3f5dbadbe12463
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-01-11

    pem: Fix assert condition
    
    If the PEM header is "-----BEGIN -----", *type should be an empty
    string and the parser shouldn't fail.  Reported by Han Han in:
    https://bugzilla.redhat.com/show_bug.cgi?id=1665172

 trust/pem.c      |  2 +-
 trust/test-pem.c | 18 ++++++++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

commit bebf4f3442ea5cdaa3a9fa2d0fee366e7264a227
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-01-09

    test: Add test that exercises duplicated certs in JKS

 trust/extract-jks.c            |   2 +-
 trust/fixtures/duplicated.jks  | Bin 0 -> 2122 bytes
 trust/fixtures/duplicated1.der | Bin 0 -> 1010 bytes
 trust/fixtures/duplicated2.der | Bin 0 -> 1010 bytes
 trust/fixtures/multiple.jks    | Bin 2556 -> 2567 bytes
 trust/test-jks.c               |  58 ++++++++++++++++++++++++++++++++++++++---
 6 files changed, 55 insertions(+), 5 deletions(-)

commit 7289639cf41df1840002e865bf700f50afec523c
Author: Daiki Ueno <dueno@redhat.com>
Date:   2019-01-09

    trust: Fix alias generation in JKS extractor
    
    When there is a duplicate, the JKS extractor previously assigned
    somewhat obscure name "-<digit>" (not "<name>-<digit>").

 trust/extract-jks.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

commit 5e6a92b67ddade14a54769b05cc717043bc56b78
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-12-25

    trust: Continue parsing if the file cannot be read as persist format
    
    A corrupted file that contains "[p11-kit-object-v1]" can be a valid
    PEM certs file.  Continue with the next format if it cannot be read as
    a persistent format.

 trust/parser.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 4aa6ef9e82f6bb14746a47a7d56789d5e982a1f5
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-12-25

    trust: p11_token_load: Treat parse error as failure
    
    Those conditions can happen when the trust file is corrupted, so it
    makes more sense to treat them as a failure instead of programmer
    error.

 trust/token.c | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

commit eb503f3a1467f21a5ecc9ae84ae23b216afc102f
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-12-25

    trust: Fail if trust anchors are not loaded from a file
    
    If the trust path is a file, treat parse error as fatal and abort the
    C_FindObjectsInit call.

 trust/module.c | 11 ++++++++---
 trust/token.c  |  6 +++---
 2 files changed, 11 insertions(+), 6 deletions(-)

commit 0dd62395788ae566d3adef967611bce214a04435
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-12-23

    trust: Propagate library verbosity to module through init_args
    
    Previously, even when the -v option is used with the 'trust' command,
    the messages from p11-kit-trust.so module were suppressed because the
    verbosity setting is not propagated to the module.

 common/message.c           |  8 ++++----
 p11-kit/modules.c          | 29 +++++++++++++++++++++++------
 p11-kit/p11-kit.h          |  3 ++-
 trust/enumerate.c          | 11 +++++++++--
 trust/module.c             |  5 +++++
 trust/p11-kit-trust.module |  4 ++++
 6 files changed, 47 insertions(+), 13 deletions(-)

commit 95faa51a23fc416e718dbd740adfce31f642530b
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-12-29

    build: Fix typo spotted by codespell

 ChangeLog                     | 2 +-
 NEWS                          | 8 ++++----
 common/pkcs11.h               | 2 +-
 common/test-lexer.c           | 2 +-
 doc/manual/Makefile.am        | 2 +-
 p11-kit/iter.c                | 2 +-
 p11-kit/modules.c             | 2 +-
 p11-kit/rpc-message.c         | 6 +++---
 p11-kit/rpc-server.c          | 4 ++--
 p11-kit/test-pin.c            | 2 +-
 p11-kit/test-virtual.c        | 2 +-
 trust/test-enumerate.c        | 2 +-
 trust/test-parser.c           | 2 +-
 trust/test-token.c            | 4 ++--
 trust/trust-extract-compat.in | 2 +-
 15 files changed, 22 insertions(+), 22 deletions(-)

commit 4ee6545d0188e495f195b7fe5abbe9cc382a626d
Author: Jakub Jelen <jjelen@redhat.com>
Date:   2018-12-06

    doc: Make log-calls match the rest of the document style

 doc/manual/pkcs11.conf.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit b9eceda29965af989ad2150082454ae353266fa5
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-11-23

    build: Simplify assertions
    
    Let it leak memory when we assert, so not to confuse static analyzers
    as if this is the normal case.

 common/test.c | 6 ------
 1 file changed, 6 deletions(-)

commit b92e8c7f5c082a55073903d53293e6aeecb9d0ed
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-11-22

    travis: Add cppcheck profile

 .travis.yml                        |  4 ++++
 .travis/cppcheck/after_failure.sh  |  3 +++
 .travis/cppcheck/before_install.sh |  9 +++++++++
 .travis/cppcheck/install.sh        | 14 ++++++++++++++
 .travis/cppcheck/script.sh         |  3 +++
 5 files changed, 33 insertions(+)

commit d293fd54c754190da333496df070992e2d803a87
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-11-22

    travis: Allow profile override

 .travis.yml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

commit f0c82b07f8b31a4b86de32436cb4f5053de16336
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-11-22

    build: Suppress cppcheck errors

 common/test-tests.c  |  2 ++
 common/test.c        |  4 ++++
 p11-kit/server.c     |  8 ++++++--
 trust/test-bundle.c  |  9 ++++++---
 trust/test-openssl.c |  9 ++++++---
 trust/test-save.c    | 22 +++++++++++++++-------
 trust/test-trust.c   |  4 +++-
 7 files changed, 42 insertions(+), 16 deletions(-)

commit 8287689158403090b5828a568b122b5b3a3ce987
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-22

    tests: Ensure p11_proxy_module_cleanup is called
    
    Reported and suggested in #197.

 p11-kit/test-proxy.c | 2 ++
 1 file changed, 2 insertions(+)

commit f758142178b4cc5c650dde75152bfb85ac992178
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-15

    url: Prefer upper-case letters in hex characters when encoding
    
    This makes it more compliant with RFC 3986, where the use of
    upper-case letters is recommended (as "SHOULD").
    
    Suggested by Sumit Bose.

 common/test-path.c |  2 +-
 common/test-url.c  | 28 ++++++++++++++++++++++++++++
 common/url.c       | 24 +++++++++++++++++-------
 p11-kit/test-uri.c | 14 +++++++-------
 4 files changed, 53 insertions(+), 15 deletions(-)

commit e81f6af7ed3b39b8df0bb7ce150619ea8178d47c
Author: Harald Hoyer <harald@redhat.com>
Date:   2018-11-02

    trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time
    
    For reproducible builds, accept a define timestamp for the java
    keystore.
    
    See https://reproducible-builds.org/docs/source-date-epoch/

 trust/extract-jks.c | 38 ++++++++++++++++++++++++++++++++++----
 1 file changed, 34 insertions(+), 4 deletions(-)

commit 1d6913d5a551b6bd8efaa1705178e49f1527aa7e
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-30

    build: Require pkg.m4 >= 0.29 at bootstrap

 configure.ac | 2 ++
 1 file changed, 2 insertions(+)

commit 6e1046de2233fba7875d3d6a1b260192678dd0ad
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-19

    virtual: Prefer fixed closures to libffi closures
    
    On some circumstances (such as when loading p11-kit-proxy from httpd),
    it is known that creation of libffi closure always fails, due to
    SELinux policy.  Although this is harmless, it pollutes the journal
    and gives wrong hints when troubleshooting.  This patch changes the
    order of preference of libffi vs pre-compiled closures to avoid that.

 p11-kit/virtual.c | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

commit 83e92c2f9575707083d8b0c70ef330e285d70836
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-17

    trust: Check index->buckets is allocated on cleanup

 trust/index.c | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

commit 6417780ebbbbb0f01ddb001b239347655fb98578
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-17

    rpc-server: Check calloc failure

 p11-kit/rpc-server.c | 4 ++++
 1 file changed, 4 insertions(+)

commit da73c2804b3ca962fa51473bb4c303a5ed32d4a1
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    trust: Set umask before calling mkstemp

 trust/save.c | 3 +++
 1 file changed, 3 insertions(+)

commit 033cd90806cb1e2eab7e799703757abc2f07052e
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    proxy: Fix null dereference when reusing slots

 p11-kit/proxy.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

commit 1f78cb0b4dd193ec1f1b2b424a497a6c2edec043
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    rpc-server: p11_kit_remote_serve_tokens: Fix memleak

 p11-kit/rpc-server.c | 5 +++++
 1 file changed, 5 insertions(+)

commit 213ea0815ef45411bf6c134918b79d2aad69c1dc
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    build: Check return value of p11_rpc_buffer_get_uint64

 p11-kit/rpc-client.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

commit 06323aed926ddc67bd18ed98e5af92035a8e3d39
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    build: Check return value of p11_dict_set

 p11-kit/proxy.c      | 3 ++-
 p11-kit/rpc-server.c | 6 +++++-
 trust/module.c       | 3 ++-
 3 files changed, 9 insertions(+), 3 deletions(-)

commit b10dadce5a3c921149b2c9fe0dec614f8076ebda
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    build: Free memory before return{,_val}_if_* macros

 p11-kit/iter.c  |  5 ++++-
 p11-kit/proxy.c | 10 ++++++++--
 trust/asn1.c    | 15 ++++++++++++---
 trust/builder.c |  5 ++++-
 trust/index.c   | 10 ++++++++--
 trust/persist.c |  5 ++++-
 trust/save.c    | 29 +++++++++++++++++++++++++----
 trust/session.c | 10 ++++++++--
 trust/token.c   |  5 ++++-
 9 files changed, 77 insertions(+), 17 deletions(-)

commit c76197ddbbd0c29adc2bceff2ee9f740f71d134d
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    build: Call va_end() always when leaving the function

 common/attrs.c  | 4 +++-
 common/compat.c | 5 ++++-
 common/path.c   | 5 ++++-
 trust/parser.c  | 4 +++-
 4 files changed, 14 insertions(+), 4 deletions(-)

commit 8a8db182af533a43b4d478d28af8623035475d68
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-10-16

    debug: Work around cppcheck false-positives
    
    https://trac.cppcheck.net/ticket/8794

 common/debug.h | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

commit f4a9fa674e17cc470d9280237032f18a70313d8e
Author: Leonardo Brondani Schenkel <leo@tradeshift.com>
Date:   2018-05-28

    common: use /proc only on Linux
    
    Non-Linux systems do not have /proc, so do not attempt to open it and
    eliminate an unnecessary access() syscall on those systems.

 common/compat.c | 2 ++
 1 file changed, 2 insertions(+)

commit 7f1df14e041c6de9603a4720753ca8f31e32b4ff
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-31

    pkcs11: Don't redefine CKM_CAMELLIA_KEY_GEN
    
    Also reorder the CKM_CAMELLIA_* definitions.

 common/pkcs11.h | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

commit 3770793f026e46a000d2d8816d56122598289d5c
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-28

    Release 0.23.14

 NEWS         | 6 ++++++
 configure.ac | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

commit c1b565413dae632a4ab78cea08ed103d9418921b
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-22

    virtual: Tighten error handling when fixed closures are exhausted

 p11-kit/virtual.c | 17 ++++++++---------
 1 file changed, 8 insertions(+), 9 deletions(-)

commit 347a8793d23036433ab0ba39049f0e832bb05b3d
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-22

    virtual: Don't be too loud about recoverable failure

 p11-kit/virtual.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit 9a7892ef3fd9d4bd70df41fb0200782dc6134c70
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-24

    trust: Factor out module initialization into separate file
    
    This prevents double call to p11_library_init() in test-module.c, once
    from the ELF constructor, and secondly from the test itself.

 trust/Makefile.am   |  2 +-
 trust/module-init.c | 43 ++++++++++++++++++++++++++++++++++++++++++
 trust/module.c      | 54 -----------------------------------------------------
 3 files changed, 44 insertions(+), 55 deletions(-)

commit 0d7fbd5189ba1414d84326ddc8e4cff98f66a44b
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-27

    common: Factor out common initializer code into a header

 common/Makefile.am    |  1 +
 common/init.h         | 94 +++++++++++++++++++++++++++++++++++++++++++++++++++
 p11-kit/client-init.c | 60 +++-----------------------------
 p11-kit/proxy-init.c  | 59 +++-----------------------------
 4 files changed, 103 insertions(+), 111 deletions(-)

commit 0961cf527f1414bf5a900d958ee776cdd28f3525
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-24

    travis: Manually install cpp-coveralls
    
    To accommodate the gcov format change in gcc 8.1:
    https://github.com/eddyxu/cpp-coveralls/pull/127
    which is not yet available in the pip version.

 .travis/linux/after_success.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

commit 2066e7c57a7ae82e35fee3deaa06d89498d749a3
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-23

    travis: Check valgrind exit code more strictly

 .travis/linux/script.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 7a844d8e8c1c87401b161094023cf309ca111095
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-21

    README.md: Add CII Best Practices badge

 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit f2a17c5e1dbc75a0142c6330bab588deb0060151
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-21

    README.md: Mention contact method for security issues

 README.md | 5 +++++
 1 file changed, 5 insertions(+)

commit b9ef1c5f4dbdfbab504479fdc899e344ff7bb44a
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-17

    Revert "build: Explicitly link threaded test programs to libpthread"
    
    This reverts commit dc4a6eaddbb36a344cc6a9c7eb12cab9df4899b0.

 configure.ac        | 10 ----------
 p11-kit/Makefile.am |  8 ++++----
 2 files changed, 4 insertions(+), 14 deletions(-)

commit 35b39cb2bf6d50a117a9e4c8e18100d19716ea71
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-17

    Revert "build: Stop linking the library with libpthread when possible"
    
    This reverts commit 50f8906e63c9413a7687bab6608496d83c29a222.

 configure.ac | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

commit 56f3b9370747a7a33a9d56ff9365c89700dd0e67
Author: Daiki Ueno <dueno@redhat.com>
Date:   2018-08-17

    Revert "common: Prefer __register_atfork() to pthread_atfork() if possible"
    
    This reverts commit ce3cec7f8742254b8627b9db48973b81e91cbfc8.

 common/library.c | 19 +------------------
 configure.ac     |  2 --
