Compare commits

...

10 Commits

Author SHA1 Message Date
openeuler-ci-bot
1bd26bc6c6
!28 riscv64: 修复无效的补丁
From: @laokz 
Reviewed-by: @wk333 
Signed-off-by: @wk333
2024-06-07 02:49:38 +00:00
laokz
b40636b862 riscv64: fix OOM build failure 2024-06-02 09:59:25 +08:00
openeuler-ci-bot
789ec63960
!21 [sync] PR-20: RISCV64: update spec.
From: @openeuler-sync-bot 
Reviewed-by: @wk333 
Signed-off-by: @wk333
2024-04-02 02:47:15 +00:00
zke
19f3f95948 update spec
(cherry picked from commit b92237200995c92c255c9567972b91346b9cf0e5)
2024-03-31 22:32:14 +08:00
openeuler-ci-bot
a426f5fd86
!14 Fix build failure due to openjdk introduced a incomplete patch
From: @cherry530 
Reviewed-by: @caodongxia 
Signed-off-by: @caodongxia
2023-12-22 00:57:00 +00:00
cherry530
185bc8e08d fix build error
Signed-off-by: cherry530 <707078654@qq.com>
2023-12-20 10:24:07 +08:00
openeuler-ci-bot
6aeb672dfd
!11 [合规提升]spec文件的License声明有歧义
From: @wk333 
Reviewed-by: @myeuler 
Signed-off-by: @myeuler
2022-07-18 11:19:52 +00:00
wk333
fea950b930 License compliance rectification 2022-07-18 16:18:10 +08:00
openeuler-ci-bot
9f3f02a136 !3 Fix CVE-2019-12415
From: @hht8
Reviewed-by: @lei_ju,@licihua
Signed-off-by: @licihua
2020-12-03 09:25:22 +08:00
hht8
bf80364a70 Fix CVE-2019-12415 2020-12-02 09:44:19 +08:00
2 changed files with 87 additions and 3 deletions

View File

@ -0,0 +1,61 @@
From 06f28db213744590c98feed69bda7d5f5c011b38 Mon Sep 17 00:00:00 2001
From: PJ Fanning <fanningpj@apache.org>
Date: Tue, 24 Sep 2019 18:33:37 +0000
Subject: [PATCH] Bug 63768: Adjust handling of SchemaFactory
git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1867484 13f79535-47bb-0310-9956-ffa450edef68
---
.../poi/xssf/extractor/XSSFExportToXml.java | 16 +-
.../xssf/extractor/TestXSSFExportToXML.java | 532 +++++++++---------
test-data/spreadsheet/xxe_in_schema.xlsx | Bin 0 -> 9801 bytes
3 files changed, 286 insertions(+), 262 deletions(-)
create mode 100644 test-data/spreadsheet/xxe_in_schema.xlsx
diff --git a/src/ooxml/java/org/apache/poi/xssf/extractor/XSSFExportToXml.java b/src/ooxml/java/org/apache/poi/xssf/extractor/XSSFExportToXml.java
index 9320a226db..53984fec28 100644
--- a/src/ooxml/java/org/apache/poi/xssf/extractor/XSSFExportToXml.java
+++ b/src/ooxml/java/org/apache/poi/xssf/extractor/XSSFExportToXml.java
@@ -28,6 +28,7 @@ Licensed to the Apache Software Foundation (ASF) under one or more
import java.util.Map;
import java.util.Vector;
+import javax.xml.XMLConstants;
import javax.xml.transform.OutputKeys;
import javax.xml.transform.Source;
import javax.xml.transform.Transformer;
@@ -241,9 +242,10 @@ public void exportToXML(OutputStream os, String encoding, boolean validate) thro
* @throws SAXException If validating the document fails
*/
private boolean isValid(Document xml) throws SAXException{
- try{
+ try {
String language = "http://www.w3.org/2001/XMLSchema";
SchemaFactory factory = SchemaFactory.newInstance(language);
+ trySetFeature(factory, XMLConstants.FEATURE_SECURE_PROCESSING, true);
Source source = new DOMSource(map.getSchema());
Schema schema = factory.newSchema(source);
@@ -313,7 +315,7 @@ private Node getNodeByXPath(String xpath,Node rootNode,Document doc,boolean crea
String[] xpathTokens = xpath.split("/");
- Node currentNode =rootNode;
+ Node currentNode = rootNode;
// The first token is empty, the second is the root node
for(int i =2; i<xpathTokens.length;i++) {
@@ -535,4 +537,14 @@ private Node getComplexTypeNodeFromSchemaChildren(Node xmlSchema, Node complexTy
}
return complexTypeNode;
}
+
+ private static void trySetFeature(SchemaFactory sf, String feature, boolean enabled) {
+ try {
+ sf.setFeature(feature, enabled);
+ } catch (Exception e) {
+ LOG.log(POILogger.WARN, "SchemaFactory Feature unsupported", feature, e);
+ } catch (AbstractMethodError ame) {
+ LOG.log(POILogger.WARN, "Cannot set SchemaFactory feature because outdated XML parser in classpath", feature, ame);
+ }
+ }
}

View File

@ -1,11 +1,11 @@
%global reldate 20170915
Name: apache-poi
Version: 3.17
Release: 1
Release: 6
Summary: The Java API for Microsoft Documents
License: ASL 2.0 and (CC-BY and CC-BY-SA and W3C) and GPLv3
License: Apache-2.0 and GPL-3.0-only
URL: http://poi.apache.org/
Source0: http://archive.apache.org/dist/poi/release/src/poi-src-3.17-20170915.tar.gz
Source0: http://archive.apache.org/dist/poi/release/src/poi-src-%{version}-%{reldate}.tar.gz
# These two zip files renamed after download
#Source1: http://www.ecma-international.org/publications/files/ECMA-ST/Office%20Open%20XML%201st%20edition%20Part%204%20%28PDF%29.zip
#Source2: http://www.ecma-international.org/publications/files/ECMA-ST/Office%20Open%20XML%201st%20edition%20Part%202%20%28PDF%29.zip
@ -19,6 +19,7 @@ Source7: http://uri.etsi.org/01903/v1.3.2/XAdES.xsd
Source8: http://uri.etsi.org/01903/v1.4.1/XAdESv141.xsd
Patch1: apache-poi-3.14-compile-xsds.patch
Patch2: apache-poi-3.14-build.patch
Patch3: Adjust-handling-of-SchemaFactory.patch
BuildArch: noarch
BuildRequires: jacoco javapackages-local jmh jmh-generator-annprocess
BuildRequires: apache-commons-collections4 >= 4.1 apache-commons-codec apache-commons-logging
@ -63,6 +64,7 @@ This package contains the API documentation for %{name}.
%setup -q -n poi-%{version}
%patch1
%patch2
%patch3 -p1
find -name '*.class' -delete
find -name '*.jar' -delete
mkdir lib ooxml-lib
@ -92,8 +94,14 @@ rm src/ooxml/testcases/org/apache/poi/sl/TestFonts.java
rm -f src/ooxml/testcases/org/apache/poi/xssf/streaming/TestAutoSizeColumnTracker.java
rm -f src/ooxml/testcases/org/apache/poi/xssf/streaming/TestSXSSFSheet.java
rm -f src/ooxml/testcases/org/apache/poi/poifs/crypt/TestSignatureInfo.java
sed -i '/testPPTX/,+15d;:go;1,1!{P;N;D};N;bgo' src/ooxml/testcases/org/apache/poi/TestPOIXMLDocument.java
sed -i '$d' src/ooxml/testcases/org/apache/poi/TestPOIXMLDocument.java
%build
%if "%{_arch}" == "riscv64"
sed -i -E 's/timeout=60000/timeout=500000/' src/ooxml/testcases/org/apache/poi/xssf/extractor/TestXSSFImportFromXML.java
sed -i -e s/-Xmx512m/-Xmx1024m/ build.xml
%endif
cat > build.properties <<'EOF'
main.ant.jar=lib/ant.jar
main.commons-collections4.jar=lib/commons-collections4.jar
@ -132,5 +140,20 @@ done
%license LICENSE NOTICE
%changelog
* Mon Jun 3 2024 laokz <zhangkai@iscas.ac.cn> - 3.17-6
- riscv64: fix OOM build failure
* Wed Mar 6 2024 zke_012020 <keer.oerv@isrc.iscas.ac.cn> - 3.17-5
- Update spec for RISCV64
* Wed Nov 22 2023 Ge Wang <wang__ge@126.com> - 3.17-4
- Fix build failure due to openjdk introduced a incomplete patch
* Mon Jul 18 2022 wangkai <wangkai385@h-partners.com> - 3.17-3
- License compliance rectification
* Tue Dec 1 2020 huanghaitao <huanghaitao8@huawei.com> - 3.17-2
- Fix CVE-2019-12415
* Thu Aug 13 2020 chengzihan <chengzihan2@huawei.com> - 3.17-1
- Package init