Accepting request 983648 from multimedia:libs
OBS-URL: https://build.opensuse.org/request/show/983648 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sratom?expand=0&rev=17
This commit is contained in:
commit
cd487cb8e1
@ -1,29 +0,0 @@
|
||||
From 03ea6915c99b9ca0d8ac576e4cfd1c2eca62338c Mon Sep 17 00:00:00 2001
|
||||
From: Martin Liska <mliska@suse.cz>
|
||||
Date: Mon, 11 Apr 2022 09:14:28 +0200
|
||||
Subject: [PATCH] Fix buffer overflow detected with -D_FORTIFY_SOURCE=3.
|
||||
|
||||
Correctly set maximum buffer length for snprintf call.
|
||||
Fixes: #5.
|
||||
---
|
||||
src/sratom.c | 5 +++--
|
||||
1 file changed, 3 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/src/sratom.c b/src/sratom.c
|
||||
index 692257d..b6ba7ed 100644
|
||||
--- a/src/sratom.c
|
||||
+++ b/src/sratom.c
|
||||
@@ -334,10 +334,11 @@ sratom_write(Sratom* sratom,
|
||||
new_node = true;
|
||||
datatype = serd_node_from_string(SERD_URI, USTR(LV2_MIDI__MidiEvent));
|
||||
|
||||
- uint8_t* str = (uint8_t*)calloc(size * 2 + 1, 1);
|
||||
+ size_t strlen = size * 2 + 1;
|
||||
+ uint8_t* str = (uint8_t*)calloc(strlen, 1);
|
||||
for (uint32_t i = 0; i < size; ++i) {
|
||||
snprintf((char*)str + (2 * i),
|
||||
- size * 2 + 1,
|
||||
+ strlen - (2 * i),
|
||||
"%02X",
|
||||
(unsigned)*((const uint8_t*)body + i));
|
||||
}
|
3
sratom-0.6.10.tar.bz2
Normal file
3
sratom-0.6.10.tar.bz2
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:e5951c0d7f0618672628295536a271d61c55ef0dab33ba9fc5767ed4db0a634d
|
||||
size 327047
|
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:3acb32b1adc5a2b7facdade2e0818bcd6c71f23f84a1ebc17815bb7a0d2d02df
|
||||
size 327027
|
@ -1,3 +1,11 @@
|
||||
-------------------------------------------------------------------
|
||||
Sat Jun 18 14:29:31 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 0.6.10:
|
||||
* Fix documentation installation directory
|
||||
* Fix potential blank node ID truncation
|
||||
- drop fix-FORTIFY_SOURCE3.patch: obsolete
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Apr 12 08:35:33 UTC 2022 - Martin Liška <mliska@suse.cz>
|
||||
|
||||
|
@ -18,15 +18,14 @@
|
||||
|
||||
%define sover 0
|
||||
Name: sratom
|
||||
Version: 0.6.8
|
||||
Version: 0.6.10
|
||||
Release: 0
|
||||
Summary: A library for serialising LV2 atoms to/from RDF
|
||||
License: ISC
|
||||
Group: Development/Libraries/C and C++
|
||||
URL: http://drobilla.net/software/sratom/
|
||||
Source0: http://download.drobilla.net/sratom-%{version}.tar.bz2
|
||||
URL: https://drobilla.net/software/sratom.html
|
||||
Source0: https://download.drobilla.net/sratom-%{version}.tar.bz2
|
||||
Source1: baselibs.conf
|
||||
Patch0: fix-FORTIFY_SOURCE3.patch
|
||||
BuildRequires: doxygen
|
||||
BuildRequires: graphviz
|
||||
BuildRequires: pkgconfig
|
||||
|
Loading…
x
Reference in New Issue
Block a user