Accepting request 983648 from multimedia:libs

OBS-URL: https://build.opensuse.org/request/show/983648
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sratom?expand=0&rev=17
This commit is contained in:
Dominique Leuenberger 2022-06-20 13:36:53 +00:00 committed by Git OBS Bridge
commit cd487cb8e1
5 changed files with 14 additions and 36 deletions

View File

@ -1,29 +0,0 @@
From 03ea6915c99b9ca0d8ac576e4cfd1c2eca62338c Mon Sep 17 00:00:00 2001
From: Martin Liska <mliska@suse.cz>
Date: Mon, 11 Apr 2022 09:14:28 +0200
Subject: [PATCH] Fix buffer overflow detected with -D_FORTIFY_SOURCE=3.
Correctly set maximum buffer length for snprintf call.
Fixes: #5.
---
src/sratom.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/src/sratom.c b/src/sratom.c
index 692257d..b6ba7ed 100644
--- a/src/sratom.c
+++ b/src/sratom.c
@@ -334,10 +334,11 @@ sratom_write(Sratom* sratom,
new_node = true;
datatype = serd_node_from_string(SERD_URI, USTR(LV2_MIDI__MidiEvent));
- uint8_t* str = (uint8_t*)calloc(size * 2 + 1, 1);
+ size_t strlen = size * 2 + 1;
+ uint8_t* str = (uint8_t*)calloc(strlen, 1);
for (uint32_t i = 0; i < size; ++i) {
snprintf((char*)str + (2 * i),
- size * 2 + 1,
+ strlen - (2 * i),
"%02X",
(unsigned)*((const uint8_t*)body + i));
}

3
sratom-0.6.10.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e5951c0d7f0618672628295536a271d61c55ef0dab33ba9fc5767ed4db0a634d
size 327047

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3acb32b1adc5a2b7facdade2e0818bcd6c71f23f84a1ebc17815bb7a0d2d02df
size 327027

View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Sat Jun 18 14:29:31 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.6.10:
* Fix documentation installation directory
* Fix potential blank node ID truncation
- drop fix-FORTIFY_SOURCE3.patch: obsolete
-------------------------------------------------------------------
Tue Apr 12 08:35:33 UTC 2022 - Martin Liška <mliska@suse.cz>

View File

@ -18,15 +18,14 @@
%define sover 0
Name: sratom
Version: 0.6.8
Version: 0.6.10
Release: 0
Summary: A library for serialising LV2 atoms to/from RDF
License: ISC
Group: Development/Libraries/C and C++
URL: http://drobilla.net/software/sratom/
Source0: http://download.drobilla.net/sratom-%{version}.tar.bz2
URL: https://drobilla.net/software/sratom.html
Source0: https://download.drobilla.net/sratom-%{version}.tar.bz2
Source1: baselibs.conf
Patch0: fix-FORTIFY_SOURCE3.patch
BuildRequires: doxygen
BuildRequires: graphviz
BuildRequires: pkgconfig