- Update to new upstream release 1.1.2

OBS-URL: https://build.opensuse.org/package/show/security:netfilter/libnftnl?expand=0&rev=36
This commit is contained in:
Jan Engelhardt 2018-11-13 14:08:24 +00:00 committed by Git OBS Bridge
parent 3a560f78de
commit ca27c3e687
7 changed files with 18 additions and 41 deletions

View File

@ -1,29 +0,0 @@
From: Jan Engelhardt <jengelh@inai.de>
Date: 2017-10-13 02:43:06.480980575 +0200
X-Upstream: reported
resolve a potential buffer overflow when i > 9
[reg->len > 36].
expr/data_reg.c:69:27: warning: '%d' directive writing between 1 and
10 bytes into a region of size 2 [-Wformat-overflow=]
sprintf(node_name, "data%d", i);
---
src/expr/data_reg.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: libnftnl-1.0.9/src/expr/data_reg.c
===================================================================
--- libnftnl-1.0.9.orig/src/expr/data_reg.c
+++ libnftnl-1.0.9/src/expr/data_reg.c
@@ -59,7 +59,7 @@ static int nftnl_data_reg_verdict_json_p
static int nftnl_data_reg_value_json_parse(union nftnl_data_reg *reg, json_t *data,
struct nftnl_parse_err *err)
{
- char node_name[8] = {}; /* strlen("data256") + 1 == 8 */
+ char node_name[16] = {}; /* strlen("data256") + 1 == 8 */
int ret, remain = sizeof(node_name), offset = 0, i;
if (nftnl_jansson_parse_val(data, "len", NFTNL_TYPE_U8, &reg->len, err) < 0)

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:5d6a65413f27ec635eedf6aba033f7cf671d462a2afeacc562ba96b19893aff2
size 372562

Binary file not shown.

3
libnftnl-1.1.2.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a5c7b7a6c13c9c5898b13fcb1126fefce2015d5a96d7c354b19aaa40b6aece5d
size 366014

BIN
libnftnl-1.1.2.tar.bz2.sig Normal file

Binary file not shown.

View File

@ -1,3 +1,13 @@
-------------------------------------------------------------------
Tue Nov 13 13:52:57 UTC 2018 - Jan Engelhardt <jengelh@inai.de>
- Update to new upstream release 1.1.2
* This release adds supports for new kernel extensions: tproxy,
tunneling, xfrm, osf, conntrack timeouts and helpers. This
release deprecates the nftnl_rule_cmp() interface and the low
level JSON infrastructure.
- Remove bufferov.diff (obsolete)
-------------------------------------------------------------------
Sat Jun 9 07:14:08 UTC 2018 - jengelh@inai.de

View File

@ -12,13 +12,13 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: libnftnl
%define lname libnftnl7
Version: 1.1.1
%define lname libnftnl11
Version: 1.1.2
Release: 0
Summary: Userspace library to access the nftables Netlink interface
License: GPL-2.0-or-later
@ -28,11 +28,9 @@ Url: http://netfilter.org/projects/libnftnl/
#Git-Clone: git://git.netfilter.org/libnftnl
Source: http://ftp.netfilter.org/pub/libnftnl/%name-%version.tar.bz2
Source2: http://ftp.netfilter.org/pub/libnftnl/%name-%version.tar.bz2.sig
Patch1: bufferov.diff
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: pkgconfig >= 0.21
BuildRequires: xz
BuildRequires: pkgconfig(jansson) >= 2.3
BuildRequires: pkgconfig(libmnl) >= 1.0.3
%description
@ -61,11 +59,9 @@ applications that want to make use of libnftnl.
%prep
%setup -q
%patch -P 1 -p1
%build
%configure --with-xml-parsing --with-json-parsing \
--includedir="%_includedir/%name"
%configure --with-xml-parsing --includedir="%_includedir/%name"
make %{?_smp_mflags}
%install
@ -77,7 +73,7 @@ rm -f "%buildroot/%_libdir"/*.la
%files -n %lname
%defattr(-,root,root)
%_libdir/libnftnl.so.7*
%_libdir/libnftnl.so.11*
%files devel
%defattr(-,root,root)