Pisilinux/core
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

expat version bump

Browse Source
This commit is contained in:
aydemir
2016-11-12 09:33:33 +02:00
parent 7ba107a957
commit 0ac9519085
2 changed files with 37 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
system/base/expat/files/expat-2.2.0-CVE-2016-0718-regression.patch
+27
View File
@@ -0,0 +1,27 @@
From 3e6190e433479e56f8c1e5adc1198b3c86b15577 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Sun, 17 Jul 2016 20:22:29 +0200
Subject: [PATCH] Fix regression introduced by patch to CVE-2016-0718 (bug
#539)
Tag names were cut off in some cases; reported by Andy Wang
---
expat/lib/xmlparse.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/expat/lib/xmlparse.c b/expat/lib/xmlparse.c
index 13e080d..2630310 100644
--- a/expat/lib/xmlparse.c
+++ b/expat/lib/xmlparse.c
@@ -2430,7 +2430,7 @@ doContent(XML_Parser parser,
&fromPtr, rawNameEnd,
(ICHAR **)&toPtr, (ICHAR *)tag->bufEnd - 1);
convLen = (int)(toPtr - (XML_Char *)tag->buf);
- if ((convert_res == XML_CONVERT_COMPLETED) || (convert_res == XML_CONVERT_INPUT_INCOMPLETE)) {
+ if ((fromPtr >= rawNameEnd) || (convert_res == XML_CONVERT_INPUT_INCOMPLETE)) {
tag->name.strLen = convLen;
break;
}
--
2.9.2
system/base/expat/pspec.xml
+10 -2
View File
@@ -12,12 +12,13 @@
<IsA>library</IsA>
<Summary>XML parsing libraries</Summary>
<Description>This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parsed. A start tag is an example of the kind of structures for which you may register handlers.</Description>
<Archive sha1sum="b08197d146930a5543a7b99e871cba3da614f6f0" type="targz">mirrors://sourceforge/expat/expat-2.1.0.tar.gz</Archive>
<Archive sha1sum="8453bc52324be4c796fd38742ec48470eef358b3" type="tarbz2">mirrors://sourceforge/expat/expat-2.2.0.tar.bz2</Archive>
<BuildDependencies>
<Dependency>gnuconfig</Dependency>
<Dependency>glibc-devel</Dependency>
</BuildDependencies>
<Patches>
<Patch>expat-2.2.0-CVE-2016-0718-regression.patch</Patch>
</Patches>
</Source>
@@ -63,6 +64,13 @@
</Package>
<History>
<Update release="3">
<Date>2016-11-12</Date>
<Version>2.2.0</Version>
<Comment>Version bump.</Comment>
<Name>Yusuf Aydemir</Name>
<Email>yusuf.aydemir@pisilnux.org</Email>
</Update>
<Update release="2">
<Date>2016-04-27</Date>
<Version>2.1.0</Version>
@@ -78,4 +86,4 @@
<Email>ertugrulerata@gmail.com</Email>
</Update>
</History>
</PISI>
</PISI>