gnupg/g13, branch master

agent,dirmngr,g13,kbx,scd,gpgsm,tools: Fix help/usage strings.

2026-09-29T05:16:22Z

* agent/command.c (hlp_get_passphrase, hlp_scd, hlp_putval): Fix. * dirmngr/server.c (hlp_checkcrl, hlp_ad_query, hlp_getinfo): Fix. * g13/server.c (hlp_create): Likewise. * kbx/kbxserver.c (hlp_delete, hlp_getinfo): Likewise. * scd/command.c (hlp_learn, hlp_getattr, hlp_setattr): Likewise. (hlp_writekey, hlp_getinfo, hlp_restart, hlp_apdu): Likewise. (hlp_keyinfo): Likewise. * sm/server.c (hlp_encrypt, hlp_export): Likewise. * tools/gpg-auth.c (my_strusage): Likewise. * tools/gpg-card.c (cmd_yubikey): Likewise. -- Signed-off-by: NIIBE Yutaka

g13: Add sanity check on the syntax of the dmsetup algo string.

2026-08-05T13:56:09Z

* g13/sh-dmcrypt.c (is_valid_algostr): New (sh_dmcrypt_mount_container): Use here (sh_dmcrypt_resume_container): and here. -- Reported-by: Arthur Chan His reports is titled: g13-syshelp splices the client-supplied ALGOSTR into a device-mapper table with only a length check, letting an unprivileged client inject a dmsetup target row and map any block device as root Inserting a LF into the algostr can be used to add arbitrary mappings run as root by a local user. However that user must have been given permissions in /etc/g13tab to do run this code. The severity of that bug is low because the use of g13 requires to create (as root) a file named /etc/gnupg/Yes-g13-I-know-what-I-am-doing .

build,common,g13,sm,tools: Require GpgRT 1.56.

2025-10-21T04:16:55Z

* configure.ac (NEED_GPGRT_VERSION): Require 1.56. * g13/g13.c (main): Remove support of old gpgrt. * sm/gpgsm.c (main): Likewise. * tools/gpg-wks-client.c (wrong_args, main): Likewise. * tools/gpgconf.c (my_read_reg_string): Likewise. * common/util.h (GPG_ERR_UNEXPECTED_PACKET): Likewise. * common/mapstrings.c (map_static_macro_string): Likewise. -- GnuPG-bug-id: 7855 Signed-off-by: NIIBE Yutaka

g13: Finish migration to gpgrt_process_spawn API

2024-07-23T11:53:20Z

-- Fixes-commit: 953dd67368ceaeb8b42cfb8f9b5f3c4de8afdbe0

Use gpgrt_process_spawn API from libgpg-error.

2024-07-09T01:04:16Z

* agent/genkey.c (do_check_passphrase_pattern): Use the gpgrt API. * common/asshelp.c (start_new_service): Ditto. * common/exechelp.h: Remove gnupg_process_spawn API. * common/exechelp-posix.c: Remove gnupg_process_spawn implementation. * common/exechelp-w32.c: Likewise. * common/exectool.c (gnupg_exec_tool_stream): Use the gpgrt API. * common/t-exechelp.c (test_pipe_stream): Remove. * dirmngr/ldap-wrapper.c (destroy_wrapper, ldap_reaper_thread): Use the gpgrt API. (ldap_wrapper_connection_cleanup, ldap_wrapper): Ditto. * dirmngr/ldap.c, g10/call-keyboxd.c: No need to include exechelp.h. * g10/photoid.c (run_with_pipe, show_photo): Use the gpgrt API. * g13/be-encfs.c (run_umount_helper, run_encfs_tool): Ditto. * g13/g13.c, g13/mount.c, g13/runner.c: No need to include exechelp.h. * scd/apdu.c: No need to include exechelp.h. * scd/app.c (report_change): Use the gpgrt API. * sm/export.c, sm/import.c: No need to include exechelp.h. * tests/gpgscm/ffi.c (proc_object_finalize, proc_wrap) (do_process_spawn_io, do_process_spawn_fd, do_process_wait): Use the gpgrt API. * tools/gpg-auth.c: No need to include exechelp.h. * tools/gpg-card.c (cmd_gpg): Use the gpgrt API. * tools/gpg-connect-agent.c: No need to include exechelp.h. * tools/gpg-mail-tube.c (mail_tube_encrypt, prepare_for_appimage) (start_gpg_encrypt): Use the gpgrt API. * tools/gpgconf-comp.c (gpg_agent_runtime_change) (scdaemon_runtime_change, tpm2daemon_runtime_change) (dirmngr_runtime_change, keyboxd_runtime_change) (gc_component_launch, gc_component_check_options) (retrieve_options_from_program): Ditto. * tools/gpgconf.c (show_versions_via_dirmngr): Ditto. * tools/gpgtar-create.c (gpgtar_create): Ditto. * tools/gpgtar-extract.c (gpgtar_extract): Ditto. * tools/gpgtar-list.c (gpgtar_list): Ditto. -- GnuPG-bug-id: 7192 Signed-off-by: NIIBE Yutaka

indent: Fix spelling

2024-05-31T10:28:32Z

-- These are non-substantive corrections for minor spelling mistakes within the GnuPG codebase. With something like this applied to the codebase, and a judiciously tuned spellchecker integrated as part of a standard test suite, it should be possible to keep a uniform orthography within the project. GnuPG-bug-id: 7116

g13: Adjust for changed gnupg_process_spawn.

2024-05-31T10:28:30Z

* g13/be-encfs.c (run_umount_helper): Adjust gnupg_process_spawn. (run_encfs_tool): Ditto:

Merge branch 'STABLE-BRANCH-2-4'

2024-03-12T15:00:55Z

-- Resolved conflicts: NEWS common/exechelp-w32.c configure.ac

g13: Allow command line style "g13 mount foo".

2024-02-20T10:40:49Z

* g13/g13.c (main): Set flag ARGPARSE_FLAG_COMMAND. -- This requires gpgrt 1.48. Of course "g13 --mount foo" continues to work.

Merge branch 'STABLE-BRANCH-2-4'

2024-01-26T08:41:00Z

-- Fixed conflicts: NEWS configure.ac doc/gpg.texi