c074e654c4
- Update to version 1.0.7:
* Fix undefined behavior in the macros SET_BH, CLEAR_BH, &
ISSET_BH.
* bzip2: Fix return value when combining --test,-t and -q.
* bzip2recover: Fix buffer overflow for large argv[0].
* bzip2recover: Fix use after free issue with outFile
(CVE-2016-3189).
* Make sure nSelectors is not out of range (CVE-2019-12900).
- Drop patches fixed upstream:
* bzip2-unsafe_strcpy.patch.
* bzip2-1.0.6-CVE-2016-3189.patch.
- Refresh patches with quilt.
OBS-URL: https://build.opensuse.org/request/show/712284
OBS-URL: https://build.opensuse.org/package/show/Archiving/bzip2?expand=0&rev=76
16 lines
532 B
Diff
16 lines
532 B
Diff
Index: bzip2-1.0.7/bzgrep
|
|
===================================================================
|
|
--- bzip2-1.0.7.orig/bzgrep 2019-06-27 20:15:39.000000000 +0200
|
|
+++ bzip2-1.0.7/bzgrep 2019-06-27 23:12:37.027916706 +0200
|
|
@@ -63,9 +63,7 @@ for i do
|
|
bzip2 -cdfq "$i" | $grep $opt "$pat"
|
|
r=$?
|
|
else
|
|
- j=${i//\\/\\\\}
|
|
- j=${j//|/\\|}
|
|
- j=${j//&/\\&}
|
|
+ j=$(echo "$i" | sed 's/\\/&&/g;s/|/\\&/g;s/&/\\&/g')
|
|
j=`printf "%s" "$j" | tr '\n' ' '`
|
|
bzip2 -cdfq "$i" | $grep $opt "$pat" | sed "s|^|${j}:|"
|
|
r=$?
|