Please update xar to 1.6.1 and/or add ext2 patch

[gallafent]

Xar doesn't build for me in its current state, and is _very_ outdated. The xar-devel port exists but is also very outdated.

Attached portfile uses current release from github (rather than obsolescent google code) release, and adds the patch from ​https://github.com/voidlinux/void-packages/blob/master/srcpkgs/xar/patches/ext2.patch to allow the build to complete.

[gallafent]

Portfile adapted from those from xar and xar-devel to fetch and build 1.6.1 from github

[gallafent]

Ext2 patch to allow build to complete

[mf2k (Frank Schima)]

Thanks. ​Per the guidelines, please instead attach a unified diff of the Portfile so we can easily see what changes you are proposing.

[Schamschula (Marius Schamschula)]

Unfortunately, xar 1.6.1 is also 4 years old...

However, it is newer that xar-devel (@1.6_5).

The port file needed a number of changes:

1) replace $ID$ line with mode line

2) use github PortGroup

3) use worksrcdir

4) remove unused xz dependency

5) use_autoconf

6) remove obsolete configure.args

[Schamschula (Marius Schamschula)]

Portfile using GitHub PortGroup

[kurthindenburg (Kurt Hindenburg)]

What's the consensus here? Try to update the version here to 1.6.1 from above "unofficial" github? and then obsolete xar-devel and update the other ports? py-xar xpkg rmp54

[Schamschula (Marius Schamschula)]

Well, code.google.com is dead.

Wikipedia ​https://en.wikipedia.org/wiki/Xar_%28archiver%29 lists

​https://github.com/mackyle/xar or ​http://mackyle.github.io/xar/ as the official home page.

I've been using xar 1.6.1 since I uploaded Portfile.2 on all my machines.

The maintainer line probably needs to be updated, though.

[Schamschula (Marius Schamschula)]

However, also see

​https://github.com/mackyle/xar/issues/15

as noted in the current Portfile.

[kurthindenburg (Kurt Hindenburg)]

Yeah, I have an update w/ all the pull requests fixing some of the bad code (which appears a lot). mackyle doesn't seem like he has time to work on it.

[kurthindenburg (Kurt Hindenburg)]

and I meant to add - I would suggest you can commit your changes - there are a few lines I don't understand why are there.

[Schamschula (Marius Schamschula)]

I hope those PRs also address

CVE-2017-11124 and CVE-2017-11125

​http://www.cvedetails.com/vulnerability-list/vendor_id-16654/product_id-38736/Xar-Project-XAR.html

[Schamschula (Marius Schamschula)]

Replying to kurthindenburg:

and I meant to add - I would suggest you can commit your changes - there are a few lines I don't understand why are there.

Such as?

[Schamschula (Marius Schamschula)]

In c491a3f7131c2051c7366ecc18a267b9dc2a375d/macports-ports:

xar: update to version 1.6.1

move from Google Code to GitHub
Closes: #53206