Initial CBL-Mariner commit to GitHub

CONTRIBUTING.md

@@ -0,0 +1,58 @@
+# Contributing
+
+This project welcomes contributions and suggestions. Most contributions require you to
+agree to a Contributor License Agreement (CLA) declaring that you have the right to,
+and actually do, grant us the rights to use your contribution. For details, visit
+https://cla.microsoft.com.
+
+When you submit a pull request, a CLA-bot will automatically determine whether you need
+to provide a CLA and decorate the PR appropriately (e.g., label, comment). Simply follow the
+instructions provided by the bot. You will only need to do this once across all repositories using our CLA.
+
+This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
+For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/)
+or contact [[email protected]](mailto:[email protected]) with any additional questions or comments.
+
+# Security Vulnerabilities
+
+<!-- BEGIN MICROSOFT SECURITY.MD V0.0.3 BLOCK -->
+
+## Security
+
+Microsoft takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations, which include [Microsoft](https://github.com/Microsoft), [Azure](https://github.com/Azure), [DotNet](https://github.com/dotnet), [AspNet](https://github.com/aspnet), [Xamarin](https://github.com/xamarin), and [our GitHub organizations](https://opensource.microsoft.com/).
+
+If you believe you have found a security vulnerability in any Microsoft-owned repository that meets Microsoft's [Microsoft's definition of a security vulnerability](https://docs.microsoft.com/en-us/previous-versions/tn-archive/cc751383(v=technet.10)) of a security vulnerability, please report it to us as described below.
+
+## Reporting Security Issues
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Instead, please report them to the Microsoft Security Response Center (MSRC) at [https://msrc.microsoft.com/create-report](https://msrc.microsoft.com/create-report).
+
+If you prefer to submit without logging in, send email to [[email protected]](mailto:[email protected]).  If possible, encrypt your message with our PGP key; please download it from the the [Microsoft Security Response Center PGP Key page](https://www.microsoft.com/en-us/msrc/pgp-key-msrc).
+
+You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Additional information can be found at [microsoft.com/msrc](https://www.microsoft.com/msrc).
+
+Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
+
+  * Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
+  * Full paths of source file(s) related to the manifestation of the issue
+  * The location of the affected source code (tag/branch/commit or direct URL)
+  * Any special configuration required to reproduce the issue
+  * Step-by-step instructions to reproduce the issue
+  * Proof-of-concept or exploit code (if possible)
+  * Impact of the issue, including how an attacker might exploit the issue
+
+This information will help us triage your report more quickly.
+
+If you are reporting for a bug bounty, more complete reports can contribute to a higher bounty award. Please visit our [Microsoft Bug Bounty Program](https://microsoft.com/msrc/bounty) page for more details about our active programs.
+
+## Preferred Languages
+
+We prefer all communications to be in English.
+
+## Policy
+
+Microsoft follows the principle of [Coordinated Vulnerability Disclosure](https://www.microsoft.com/en-us/msrc/cvd).
+
+<!-- END MICROSOFT SECURITY.MD BLOCK -->

LICENSES-AND-NOTICES/LICENSE.md

@@ -0,0 +1,22 @@
+Copyright (c) Microsoft Corporation.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

LICENSES-AND-NOTICES/LICENSES-MAP.md

@@ -0,0 +1,11 @@
+
+| Folder  |  Governing License(s)     | Description                         |
+|---------|---------------------------|-------------------------------------|
+|/        |  MIT                      | Except where noted otherwise, all source contained within this repository is governed by the [MIT License](LICENSE.md) |
+|/SPECS   |  Apache 2.0, MIT, et al   | Refer to [LICENSE-MAP](/SPECS/LICENSES-AND-NOTICES/LICENSES-MAP.md) |
+
+             
+
+
+
+

SPECS/Cython/Cython.signatures.json

@@ -0,0 +1,5 @@
+{
+ "Signatures": {
+  "Cython-0.28.5.tar.gz": "bcd6a24ca0cba54ad8b1755852bb5cd567bb06abea6f776c82fbb10bb46bae37"
+ }
+}

SPECS/Cython/Cython.spec

@@ -0,0 +1,76 @@
+%{!?python2_sitelib: %define python2_sitelib %(python2 -c "from distutils.sysconfig import get_python_lib;print(get_python_lib())")}
+Summary:       C extensions for Python
+Name:          Cython
+Version:       0.28.5
+Release:       6%{?dist}
+Group:         Development/Libraries
+License:       ASL 2.0
+URL:           https://cython.org
+#Source0:      https://github.com/cython/cython/archive/%{version}.tar.gz
+Source0:       %{name}-%{version}.tar.gz
+Patch0:        fix_abc_tests.patch
+Vendor:        Microsoft Corporation
+Distribution:  Mariner
+BuildRequires: python2-devel
+BuildRequires: python2-libs
+BuildRequires: python-xml
+Requires:      python2
+
+%description
+Cython is an optimising static compiler for both the Python programming language and the extended Cython programming language (based on Pyrex). It makes writing C extensions for Python as easy as Python itself.
+
+%prep
+%setup -q -n cython-%{version}
+%patch0 -p1
+
+%build
+python2 setup.py build
+
+%install
+python2 setup.py install --skip-build --root %{buildroot}
+
+%check
+make %{?_smp_mflags} test
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+%license LICENSE.txt
+%{_bindir}/*
+%{python2_sitelib}/Cython-%{version}-*.egg-info
+%{python2_sitelib}/Cython/*
+%{python2_sitelib}/cython.py*
+%{python2_sitelib}/pyximport/*
+
+
+%changelog
+* Sat May 09 00:21:11 PST 2020 Nick Samson <[email protected]> - 0.28.5-6
+- Added %%license line automatically
+
+*   Wed Apr 29 2020 Emre Girgin <[email protected]> 0.28.5-5
+-   Renaming cython to Cython
+*   Thu Apr 09 2020 Joe Schmitt <[email protected]> 0.28.5-4
+-   Update URL.
+-   Update Source0 with valid URL.
+-   Update license.
+-   Remove sha1 macro.
+-   Fix changelog styling.
+-   License verified.
+*   Tue Sep 03 2019 Mateusz Malisz <[email protected]> 0.28.5-3
+-   Initial CBL-Mariner import from Photon (license: Apache2).
+*   Thu Jan 10 2019 Michelle Wang <[email protected]> 0.28.5-2
+-   Add fix_abc_tests.patch to fix make check test.
+*   Mon Sep 10 2018 Ajay Kaher <[email protected]> 0.28.5-1
+-   Upgraded to version 0.28.5.
+*   Thu Jul 13 2017 Dheeraj Shetty <[email protected]> 0.25.2-2
+-   Build using python2 explicity.
+*   Mon Apr 24 2017 Bo Gan <[email protected]> 0.25.2-1
+-   Update to 0.25.2.
+*   Wed Oct 05 2016 ChangLee <[email protected]> 0.23.4-3
+-   Modified %check.
+*   Tue May 24 2016 Priyesh Padmavilasom <[email protected]> 0.23.4-2
+-   GA - Bump release of all rpms.
+*   Wed Oct 28 2015 Divya Thaluru <[email protected]> 0.23.4-1
+-   Initial build.

SPECS/Cython/fix_abc_tests.patch

@@ -0,0 +1,39 @@
+--- cython-0.28.5/tests/run/builtin_abs.pyx	2018-08-03 06:58:02.000000000 +0000
++++ cython-0.28.5/tests/run/builtin_abs.pyx	2019-01-10 22:47:02.208468689 +0000
+@@ -50,10 +50,8 @@
+     True
+     >>> int_abs(-5.1) == 5
+     True
+-    >>> int_abs(-max_int-1)     #doctest: +ELLIPSIS
+-    Traceback (most recent call last):
+-        ...
+-    OverflowError: ...
++    >>> int_abs(-max_int-1)    #doctest: +ELLIPSIS
++    -2147483648
+     >>> int_abs(max_int) == abs(max_int)         or (max_int, int_abs(max_int), abs(max_int))
+     True
+     """
+@@ -78,10 +76,8 @@
+     True
+     >>> long_abs(-5.1) == 5
+     True
+-    >>> long_abs(-max_long-1)     #doctest: +ELLIPSIS
+-    Traceback (most recent call last):
+-        ...
+-    OverflowError: ...
++    >>> long_abs(-max_long-1)    #doctest: +ELLIPSIS
++    -9223372036854775808
+     >>> long_abs(max_long) == abs(max_long)         or (max_long, long_abs(max_long), abs(max_long))
+     True
+     """
+@@ -107,9 +103,7 @@
+     >>> long_long_abs(-(2**33)) == 2**33
+     True
+     >>> long_long_abs(-max_long_long-1)     #doctest: +ELLIPSIS
+-    Traceback (most recent call last):
+-        ...
+-    OverflowError: ...
++    -9223372036854775808
+     >>> long_long_abs(max_long_long) == abs(max_long_long)        or (max_long_long, long_long_abs(max_long_long), abs(max_long_long))
+     True
+     """

SPECS/GSL/GSL.signatures.json

@@ -0,0 +1,5 @@
+{
+ "Signatures": {
+  "GSL-2.0.0.tar.gz": "6cce6fb16b651e62711a4f58e484931013c33979b795d1b1f7646f640cfa9c8e"
+ }
+}

SPECS/GSL/GSL.spec

@@ -0,0 +1,61 @@
+Summary:        GSL: Guidelines Support Library
+Name:           GSL
+Version:        2.0.0
+Release:        3%{?dist}
+License:        MIT
+Group:          Applications/File
+URL:            https://github.com/Microsoft/GSL
+Vendor:         Microsoft Corporation
+Distribution:   Mariner
+#Source0:       https://github.com/microsoft/%{name}/archive/v%{version}.tar.gz
+Source0:        %{name}-%{version}.tar.gz
+BuildRequires:  cmake
+BuildRequires:  build-essential
+
+
+%description
+The Guidelines Support Library (GSL) contains functions and types that are suggested
+for use by the C++ Core Guidelines maintained by the Standard C++ Foundation.
+This repo contains Microsoft's implementation of GSL.
+
+The library includes types like span<T>, string_span, owner<> and others.
+
+The entire implementation is provided inline in the headers under the gsl directory.
+The implementation generally assumes a platform that implements C++14 support.
+There are specific workarounds to support MSVC 2015.
+
+%global debug_package %{nil}
+
+%prep
+%setup
+
+%build
+mkdir -p cmake
+cd cmake
+cmake -DCMAKE_INSTALL_PREFIX:PATH=%{_prefix} -DGSL_TEST=OFF ..
+cmake --build .
+
+%install
+cd cmake
+make DESTDIR=%{buildroot} install
+rm -rf %{buildroot}/usr/cmake
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+%files
+%defattr(-, root, root, -)
+%license LICENSE
+%dir %{_includedir}/gsl
+%{_includedir}/gsl/*
+
+%changelog
+* Sat May 09 00:21:38 PST 2020 Nick Samson <[email protected]> - 2.0.0-3
+- Added %%license line automatically
+
+*   Thu Apr 09 2020 Joe Schmitt <[email protected]> 2.0.0-2
+-   Update Source0 with valid URL.
+-   Remove sha1 macro.
+-   License verified.
+*   Thu Dec 5 2019 Emre Girgin <[email protected]> 2.0.0-1
+-   Original version for CBL-Mariner.

SPECS/LICENSES-AND-NOTICES/LICENSE-EXCEPTIONS.PHOTON

@@ -0,0 +1,58 @@
+SPEC files that are derived from LFS sources, which are under the MIT license (www.linuxfromscratch.org/lfs/view/8.3/appendices/licenses.html):
+ca-certificates
+bash
+filesystem
+vim
+tzdata
+shadow-utils
+ntp
+unzip
+docbook-dtd-xml
+docbook-style-xsl
+
+SPEC files that are derived from LFS-RPM sources:
+ncurses
+readline
+
+SPEC files that are derived from package sources, which are under the package source license:
+haveged
+OpenIPMI
+xinted
+python-iniparse
+
+SPEC files that are derived from Fedora SPEC files, which are under the MIT license unless specifically noted otherwise (https://fedoraproject.org/wiki/Licensing:Main?rd=Licensing#License_of_Fedora_SPEC_Files):
+c-ares
+chkconfig
+initscripts
+oniguruma
+elfutils
+zsh
+perl-DBI
+perl-DBIx-simple
+perl-exporter-tiny
+perl-json-xs
+perl-libintl-perl
+perl-list-moreutils
+perl-module-build
+perl-module-install
+perl-module-scandeps
+perl-object-accessor
+perl-types-serializer
+perl-www-curl
+perl-yaml
+perl-yaml-tiny
+tcsh
+tcl
+python-pbr
+pypam
+pyyaml
+mariadb
+lvm2
+systemtap
+
+SPEC files that are derived from OpenSuse SPEC files, which are under the license of the package itself, or MIT license if it the package is not under an open source license (https://en.opensuse.org/openSUSE:Specfile_guidelines):
+python-jinja2
+acl
+
+SPEC files that are derived from Centos SPEC files:
+libaio