!32 Update package to version 1.1.0

From: @lingjuer 
Reviewed-by: @dillon_chen 
Signed-off-by: @dillon_chen
This commit is contained in:
openeuler-ci-bot 2023-07-27 01:11:57 +00:00 committed by Gitee
commit 9083e7c6fc
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
4 changed files with 7 additions and 31 deletions

View File

@ -1,26 +0,0 @@
From 78a8af37c6fc43e5fe4487a7a0762c9473444e37 Mon Sep 17 00:00:00 2001
From: lingsheng <lingsheng@huawei.com>
Date: Fri, 4 Jun 2021 11:05:20 +0800
Subject: [PATCH] fix heap buffer overflow in redisvFormatCommand
---
hiredis.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/hiredis.c b/hiredis.c
index 73d0251..af3a079 100644
--- a/hiredis.c
+++ b/hiredis.c
@@ -375,6 +375,9 @@ int redisvFormatCommand(char **target, const char *format, va_list ap) {
touched = 1;
c++;
+ if (*c == '\0') {
+ goto format_err;
+ }
}
c++;
}
--
2.23.0

BIN
hiredis-1.1.0.tar.gz Normal file

Binary file not shown.

View File

@ -1,13 +1,13 @@
Name: hiredis
Version: 1.0.2
Release: 3
Version: 1.1.0
Release: 1
Summary: A minimalistic C client library for the Redis database
License: BSD
URL: https://github.com/redis/hiredis
Source0: https://github.com/redis/hiredis/archive/refs/tags/v%{version}.tar.gz
Source0: https://github.com/redis/hiredis/archive/refs/tags/v%{version}.tar.gz#/hiredis-1.1.0.tar.gz
BuildRequires: gcc redis
Patch0001: fix-heap-buffer-overflow-in-redisvFormatCommand.patch
Patch0002: fix-memory-uninitialized-in-fuzz-testcase.patch
%description
@ -28,7 +28,7 @@ Requires: hiredis = %{version}-%{release}
The hiredis-devel package contains development files to build applications for hiredis.
%prep
%autosetup -p1
%autosetup -p1
%build
%make_build PREFIX="%{_prefix}" LIBRARY_PATH="%{_lib}" DEBUG="%{optflags}" LDFLAGS="%{?__global_ldflags}"
@ -61,6 +61,8 @@ make check || true
%{_libdir}/pkgconfig/hiredis.pc
%changelog
* Thu Jul 20 2023 zhangchenglin <zhangchenglin@kylinos.cn> - 1.1.0-1
- Update to version 1.1.0
* Fri Dec 16 2022 xu_ping <xuping33@h-partners.com> - 1.0.2-3
- fix memory uninitialized in fuzz testcase

Binary file not shown.