SHA256
8
0
forked from pool/netcdf
Files
netcdf/NCD4_dumpbytes-Add-missing-initialization-of-float-types.patch
Egbert Eich 790b2ccff9 Accepting request 927323 from home:eeich:branches:science
- Fix:
   * CVE-2019-20007 https://sourceforge.net/p/ezxml/bugs/13
   * CVE-2019-20006 https://sourceforge.net/p/ezxml/bugs/15
   * CVE-2019-20201 https://sourceforge.net/p/ezxml/bugs/16
   * CVE-2019-20202 https://sourceforge.net/p/ezxml/bugs/17
   * CVE-2019-20199 https://sourceforge.net/p/ezxml/bugs/18
   * CVE-2019-20200 https://sourceforge.net/p/ezxml/bugs/19
   * CVE-2019-20198 https://sourceforge.net/p/ezxml/bugs/20
   * CVE-2021-26221 https://sourceforge.net/p/ezxml/bugs/21
   * CVE-2021-26222 https://sourceforge.net/p/ezxml/bugs/22
   * CVE-2021-30485 https://sourceforge.net/p/ezxml/bugs/25
   * CVE-2021-31229 https://sourceforge.net/p/ezxml/bugs/26
   * CVE-2021-31347 &
   * CVE-2021-31348 https://sourceforge.net/p/ezxml/bugs/27
   * CVE-2021-31598 https://sourceforge.net/p/ezxml/bugs/28
     (bsc#1191856)
  Note:
   * CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23
     not relevant for netcdf: code isn't used.
   * CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14
     Issue cannot be reproduced and no patch is available upstream.
  Added:
   * Fix-CVE-2021-30485-bug-25.patch
   * Fix-CVE-2021-31229-bug-26-CVE-2019-20201-bug-16-CVE-2019-20198-bug-20.patch
   * Fix-CVE-2021-31347-bug-27.patch
   * Fix-for-CVE-2019-20006-CVE-2019-20202-CVE-2021-31598-ezxml-bug-15-17-28.patch
   * Fix-for-CVE-2019-20007-ezxml-bug-13.patch
   * Fix-for-CVE-2019-20199-ezxml-bug-18.patch
   * Fix-for-CVE-2019-20200-ezxml-bug-19.patch
   * Fix-for-CVE-2021-26221-ezxml-bug-21.patch

OBS-URL: https://build.opensuse.org/request/show/927323
OBS-URL: https://build.opensuse.org/package/show/science/netcdf?expand=0&rev=120
2021-10-25 17:34:01 +00:00

27 lines
875 B
Diff

From: Egbert Eich <eich@suse.com>
Date: Mon Jul 12 08:24:58 2021 +0200
Subject: NCD4_dumpbytes(): Add missing initialization of float types
Patch-mainline: Not yet
Git-repo: https://github.com/Unidata/netcdf-c
Git-commit: 429efb0b136d35c54f9db23f3c6affa1087514d2
References:
Signed-off-by: Egbert Eich <eich@suse.com>
Signed-off-by: Egbert Eich <eich@suse.de>
---
libdap4/d4dump.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/libdap4/d4dump.c b/libdap4/d4dump.c
index b2e18931..442227ec 100644
--- a/libdap4/d4dump.c
+++ b/libdap4/d4dump.c
@@ -45,6 +45,8 @@ NCD4_dumpbytes(size_t size, const void* data0, int swap)
v.i32[0] = *((int*)pos);
v.u64[0] = *((unsigned long long*)pos);
v.i64[0] = *((long long*)pos);
+ v.f32[0] = *((float*)pos);
+ v.f64[0] = *((double*)pos);
if(swap) {
swapinline16(v.u16);
swapinline32(v.u32);