SHA256
1
0
forked from pool/sratom

Accepting request 983586 from home:dirkmueller:Factory

- update to 0.6.10:
  * Fix documentation installation directory
  * Fix potential blank node ID truncation
- drop fix-FORTIFY_SOURCE3.patch: obsolete

OBS-URL: https://build.opensuse.org/request/show/983586
OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/sratom?expand=0&rev=24
This commit is contained in:
Dave Plater 2022-06-19 05:59:00 +00:00 committed by Git OBS Bridge
parent 7b1dccbfda
commit 2ccebe96de
5 changed files with 14 additions and 36 deletions

View File

@ -1,29 +0,0 @@
From 03ea6915c99b9ca0d8ac576e4cfd1c2eca62338c Mon Sep 17 00:00:00 2001
From: Martin Liska <mliska@suse.cz>
Date: Mon, 11 Apr 2022 09:14:28 +0200
Subject: [PATCH] Fix buffer overflow detected with -D_FORTIFY_SOURCE=3.
Correctly set maximum buffer length for snprintf call.
Fixes: #5.
---
src/sratom.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/src/sratom.c b/src/sratom.c
index 692257d..b6ba7ed 100644
--- a/src/sratom.c
+++ b/src/sratom.c
@@ -334,10 +334,11 @@ sratom_write(Sratom* sratom,
new_node = true;
datatype = serd_node_from_string(SERD_URI, USTR(LV2_MIDI__MidiEvent));
- uint8_t* str = (uint8_t*)calloc(size * 2 + 1, 1);
+ size_t strlen = size * 2 + 1;
+ uint8_t* str = (uint8_t*)calloc(strlen, 1);
for (uint32_t i = 0; i < size; ++i) {
snprintf((char*)str + (2 * i),
- size * 2 + 1,
+ strlen - (2 * i),
"%02X",
(unsigned)*((const uint8_t*)body + i));
}

3
sratom-0.6.10.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e5951c0d7f0618672628295536a271d61c55ef0dab33ba9fc5767ed4db0a634d
size 327047

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3acb32b1adc5a2b7facdade2e0818bcd6c71f23f84a1ebc17815bb7a0d2d02df
size 327027

View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Sat Jun 18 14:29:31 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.6.10:
* Fix documentation installation directory
* Fix potential blank node ID truncation
- drop fix-FORTIFY_SOURCE3.patch: obsolete
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Apr 12 08:35:33 UTC 2022 - Martin Liška <mliska@suse.cz> Tue Apr 12 08:35:33 UTC 2022 - Martin Liška <mliska@suse.cz>

View File

@ -18,15 +18,14 @@
%define sover 0 %define sover 0
Name: sratom Name: sratom
Version: 0.6.8 Version: 0.6.10
Release: 0 Release: 0
Summary: A library for serialising LV2 atoms to/from RDF Summary: A library for serialising LV2 atoms to/from RDF
License: ISC License: ISC
Group: Development/Libraries/C and C++ Group: Development/Libraries/C and C++
URL: http://drobilla.net/software/sratom/ URL: https://drobilla.net/software/sratom.html
Source0: http://download.drobilla.net/sratom-%{version}.tar.bz2 Source0: https://download.drobilla.net/sratom-%{version}.tar.bz2
Source1: baselibs.conf Source1: baselibs.conf
Patch0: fix-FORTIFY_SOURCE3.patch
BuildRequires: doxygen BuildRequires: doxygen
BuildRequires: graphviz BuildRequires: graphviz
BuildRequires: pkgconfig BuildRequires: pkgconfig