82eaadb5cf
- Update to 1.0.0 (bsc#1255000, CVE-2025-67899) * Fixed: [CVE-2025-67899] Protect from stack overflow during parsing by dissolving all 13 cases of recursion, both direct and indirect. The attack vector was long (or crafted) URI input. The known impact is denial of service or more. Thanks for the report to Sergey Svistunov! Thanks for in-depth review to Tim Düsterhus! (sponsored by Tideways GmbH) Thanks for C callgraph tool "egypt" (https://www.gson.org/egypt/) to Andreas Gustafsson and for "dot_find_cycles.py" to Jason Antman! * Changed: Start requiring a C99 compiler (GitHub #264, GitHub #273) * Changed: Require CMake >=3.15.0 (GitHub #270) * Fixed: Normalization of URIs with leading dot segments produced ambiguous results in the sense that a reparse after normalization would have misinterpreted path parts as a host (GitHub #262, GitHub #263, GitHub #265) Examples of affected URIs: - "scheme:/.//path1/path2" - "/.//path1/path2" - ".//path1/path2" The fix is to not remove that dot segment. Thanks to Ignace Nyamagana Butera and to Tim Düsterhus for the report! * Fixed: Insufficient pointer alignment from allocation wrappers used in the implementation of function uriCompleteMemoryManager. (GitHub #261) Thanks to Matthew Fernandez and Rolf Eike Beer for the report and review! * Fixed: Do not set absolutePath for empty paths when removing host Thanks for the report and pull request to Tim Düsterhus! (GitHub #275, GitHub #276) * Fixed: Documentation of functions uriCompleteMemoryManager, uriEmulateCalloc, uriEmulateReallocarray and uriTestMemoryManager
Adam Majer2026-01-13 15:33:47 +00:00
794b093b53
Accepting request 1285443 from devel:libraries:c_c++
Ana Guerrero2025-06-13 16:47:31 +00:00
940acfbfac
- Use Qt6's qhelpgenerator instead of Qt5's and fix its usage since Qt5 was being BuildRequired but qch docs weren't being generated.
Dirk Mueller2025-06-13 11:04:16 +00:00
a76fec2a2e
- Update to version 0.9.1 * Fixed Out-of-bounds read in uriParse*Ex* for incomplete URIs with IPv6 addresses with embedded IPv4 address, e.g. "//[::44.1" mitigated if passed parameter <afterLast> points to readable memory containing a '\0' byte. (bsc#1122193, CVE-2018-20721) * Fixed: When parsing a malformed URI with an IPvFuture address (e.g. "http://[vA.123456" missing "]"), errorPos would point to the first character after "v" than the actual position of the error (here: the end of the string) * Fixed: uriToStringCharsRequired* reported 1 more byte than needed for IPv4 address URIs (GitHub #41); * Improved: For parse errors, waterproof errorPos <= afterLast * Soname: 1:24:0
Adam Majer2019-01-16 14:08:15 +00:00
bf5cc028e2
- Update to version 0.9.0 * Fixed: Out-of-bounds write in uriComposeQuery* and uriComposeQueryEx* (bsc#1115722, CVE-2018-19198) * Fixed: Detect integer overflow in uriComposeQuery* and uriComposeQueryEx* (bsc#1115723, CVE-2018-19199) * Fixed: Protect uriResetUri* against acting on NULL input (bsc#1115724, CVE-2018-19200) * Changed: Marked as deprecated: Deprecated functions: uriNormalizeSyntaxMaskRequired[AW] uriParseUri[AW] uriParseUriEx[AW] Added: Add convenience functions to ease user code to parse a single URI New functions: uriParseSingleUri[AW] uriParseSingleUriEx[AW] uriParseSingleUriExMm[AW] Added: Support for custom memory managers (GitHub #26, #35), see Doxygen New functions (as extension of existing ones): uriAddBaseUriExMm[AW] uriComposeQueryMallocExMm[AW] uriDissectQueryMallocExMm[AW] uriFreeQueryListMm[AW] uriFreeUriMembersMm[AW] uriNormalizeSyntaxExMm[AW] uriParseSingleUriExMm[AW] uriRemoveBaseUriMm[AW] New functions (for convenience): uriCompleteMemoryManager uriEmulateCalloc
Adam Majer2018-11-16 14:13:06 +00:00
543d7a36cd
The library itself is licensed under BSD license. Use SPDX v3
Adam Majer2018-02-27 07:43:39 +00:00
c34afa4c01
- Fix License - the source code contains LGPL licensed test suite. The library itself is licensed under BSD license. - Test suite requires cpptest, which we don't have at the moment. - spec-cleaner cleanup.
Adam Majer2018-02-26 08:36:16 +00:00
33cf903726
Use %license instead of %doc for the license
Adam Majer2018-02-21 11:24:37 +00:00
efe54d316c
- Package COPYING and other basic documentation - Drop HTML documentation, for now, since it has no content.
Adam Majer2018-02-21 09:05:07 +00:00
56bc3a7707
- Fix Group of the library subpackage
Adam Majer2018-02-21 08:33:20 +00:00
191ed08191
Accepting request 578331 from home:jengelh:branches:devel:libraries:c_c++
Adam Majer2018-02-21 06:29:54 +00:00
7ebe130964
Package library in correct subpackage
Adam Majer2018-02-20 08:31:18 +00:00
6e4c0127f1
- Rename package to comply with openSUSE packaging guidelines (bnc#1081686, sr#577196) - Rename changes and spec file and drop usage of pkg_name
Adam Majer2018-02-20 08:20:44 +00:00
cbb03a5b9d
Accepting request 577196 from devel:libraries:c_c++
Adam Majer2018-02-20 08:15:18 +00:00