diff --git a/gs99-overrun.diff b/gs99-overrun.diff new file mode 100644 index 0000000..8d9ae81 --- /dev/null +++ b/gs99-overrun.diff @@ -0,0 +1,23 @@ +From: Jan Engelhardt +Date: 2020-04-08 11:47:38.536817437 +0200 +References: https://sourceforge.net/p/gsoap2/bugs/1277/ + +Fix a buffer overread introduced in gsoap 2.8.99. + +--- + gsoap/stdsoap2.cpp | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +Index: gsoap-2.8.100/gsoap/stdsoap2.cpp +=================================================================== +--- gsoap-2.8.100.orig/gsoap/stdsoap2.cpp ++++ gsoap-2.8.100/gsoap/stdsoap2.cpp +@@ -7075,7 +7075,7 @@ soap_accept(struct soap *soap) + if (getaddrinfo(soap->host, NULL, &hints, &res) == 0 && res) + { + struct sockaddr_storage result; +- (void)soap_memcpy(&result, sizeof(result), res->ai_addr, sizeof(result)); ++ (void)soap_memcpy(&result, sizeof(result), res->ai_addr, res->ai_addrlen); + freeaddrinfo(res); + if (result.ss_family == AF_INET6) + { diff --git a/gsoap-2.8.100.tar.xz b/gsoap-2.8.100.tar.xz new file mode 100644 index 0000000..eee13b2 --- /dev/null +++ b/gsoap-2.8.100.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:282bdc620793c13c03bb13018ad29748e03ba3d30c024684aabfd334e8557fc6 +size 16814704 diff --git a/gsoap-2.8.99.tar.xz b/gsoap-2.8.99.tar.xz deleted file mode 100644 index 1cc5423..0000000 --- a/gsoap-2.8.99.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d3fb5bf573105fb06fbceca149c41c5c52e27c9b4d99acecb045009de404988c -size 16962564 diff --git a/gsoap.changes b/gsoap.changes index 3e740f7..115d744 100644 --- a/gsoap.changes +++ b/gsoap.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Wed Apr 8 09:23:37 UTC 2020 - Jan Engelhardt + +- Update to release 2.8.100 + * Improved proxy connectivity on the client side to handle bearer + authentication. + * Improved soapcpp2 handling of the `#module` directive. + * Fixed an MTOM flag clearing issue hampering MTOM usability. +- Add gs99-overrun.diff + ------------------------------------------------------------------- Wed Mar 18 12:17:15 UTC 2020 - Jan Engelhardt diff --git a/gsoap.spec b/gsoap.spec index c447b6a..94fbe33 100644 --- a/gsoap.spec +++ b/gsoap.spec @@ -17,8 +17,8 @@ Name: gsoap -%define lname libgsoap-2_8_99 -Version: 2.8.99 +%define lname libgsoap-2_8_100 +Version: 2.8.100 Release: 0 Summary: Toolkit for SOAP/REST-based C/C++ server and client web service applications License: SUSE-GPL-2.0+-with-openssl-exception diff --git a/sanitize_source.sh b/sanitize_source.sh index 41eb009..6f0d768 100644 --- a/sanitize_source.sh +++ b/sanitize_source.sh @@ -13,7 +13,7 @@ if ! which hardlink >/dev/null; then exit 1; fi; -version="2.8.99" +version="2.8.100" shortver="2.8" # agh... if [ ! -e "gsoap_$version.zip" ]; then wget -c "http://downloads.sf.net/gsoap2/gsoap_$version.zip"