update to 3.1.21
This commit is contained in:
parent
a4db65225d
commit
f811b1fa4a
@ -1,35 +0,0 @@
|
|||||||
From eff308af425b67093bab25f80f1ae950166bece1 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Mark Adler <fork@madler.net>
|
|
||||||
Date: Sat, 30 Jul 2022 15:51:11 -0700
|
|
||||||
Subject: [PATCH] Fix a bug when getting a gzip header extra field with
|
|
||||||
inflate().
|
|
||||||
|
|
||||||
If the extra field was larger than the space the user provided with
|
|
||||||
inflateGetHeader(), and if multiple calls of inflate() delivered
|
|
||||||
the extra header data, then there could be a buffer overflow of the
|
|
||||||
provided space. This commit assures that provided space is not
|
|
||||||
exceeded.
|
|
||||||
|
|
||||||
Conflict:NA
|
|
||||||
Reference:https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1
|
|
||||||
---
|
|
||||||
zlib/inflate.c | 5 +++--
|
|
||||||
1 file changed, 3 insertions(+), 2 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/zlib/inflate.c b/zlib/inflate.c
|
|
||||||
index 7be8c6366..7a7289749 100644
|
|
||||||
--- a/zlib/inflate.c
|
|
||||||
+++ b/zlib/inflate.c
|
|
||||||
@@ -763,9 +763,10 @@ int flush;
|
|
||||||
copy = state->length;
|
|
||||||
if (copy > have) copy = have;
|
|
||||||
if (copy) {
|
|
||||||
+ len = state->head->extra_len - state->length;
|
|
||||||
if (state->head != Z_NULL &&
|
|
||||||
- state->head->extra != Z_NULL) {
|
|
||||||
- len = state->head->extra_len - state->length;
|
|
||||||
+ state->head->extra != Z_NULL &&
|
|
||||||
+ len < state->head->extra_max) {
|
|
||||||
zmemcpy(state->head->extra + len, next,
|
|
||||||
len + copy > state->head->extra_max ?
|
|
||||||
state->head->extra_max - len : copy);
|
|
||||||
@ -1,32 +0,0 @@
|
|||||||
From 1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d Mon Sep 17 00:00:00 2001
|
|
||||||
From: Mark Adler <fork@madler.net>
|
|
||||||
Date: Mon, 8 Aug 2022 10:50:09 -0700
|
|
||||||
Subject: [PATCH] Fix extra field processing bug that dereferences NULL
|
|
||||||
state->head.
|
|
||||||
|
|
||||||
The recent commit to fix a gzip header extra field processing bug
|
|
||||||
introduced the new bug fixed here.
|
|
||||||
|
|
||||||
Conflict:NA
|
|
||||||
Reference:https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d
|
|
||||||
---
|
|
||||||
zlib/inflate.c | 4 ++--
|
|
||||||
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/zlib/inflate.c b/zlib/inflate.c
|
|
||||||
index 7a7289749..2a3c4fe98 100644
|
|
||||||
--- a/zlib/inflate.c
|
|
||||||
+++ b/zlib/inflate.c
|
|
||||||
@@ -763,10 +763,10 @@ int flush;
|
|
||||||
copy = state->length;
|
|
||||||
if (copy > have) copy = have;
|
|
||||||
if (copy) {
|
|
||||||
- len = state->head->extra_len - state->length;
|
|
||||||
if (state->head != Z_NULL &&
|
|
||||||
state->head->extra != Z_NULL &&
|
|
||||||
- len < state->head->extra_max) {
|
|
||||||
+ (len = state->head->extra_len - state->length) <
|
|
||||||
+ state->head->extra_max) {
|
|
||||||
zmemcpy(state->head->extra + len, next,
|
|
||||||
len + copy > state->head->extra_max ?
|
|
||||||
state->head->extra_max - len : copy);
|
|
||||||
Binary file not shown.
BIN
mariadb-connector-c-3.1.21-src.tar.gz
Normal file
BIN
mariadb-connector-c-3.1.21-src.tar.gz
Normal file
Binary file not shown.
@ -1,13 +1,11 @@
|
|||||||
Name: mariadb-connector-c
|
Name: mariadb-connector-c
|
||||||
Version: 3.1.13
|
Version: 3.1.21
|
||||||
Release: 7
|
Release: 7
|
||||||
Summary: MariaDB connector library in C
|
Summary: MariaDB connector library in C
|
||||||
License: LGPLv2+
|
License: LGPLv2+
|
||||||
URL: https://github.com/MariaDB/mariadb-connector-c
|
URL: https://github.com/MariaDB/mariadb-connector-c
|
||||||
Source0: https://downloads.mariadb.com/Connectors/c/connector-c-%{version}/mariadb-connector-c-%{version}-src.tar.gz
|
Source0: https://downloads.mariadb.com/Connectors/c/connector-c-%{version}/mariadb-connector-c-%{version}-src.tar.gz
|
||||||
|
|
||||||
Patch0001: 0001-CVE-2022-37434.patch
|
|
||||||
Patch0002: 0002-CVE-2022-37434.patch
|
|
||||||
Patch0003: mariadb-connector-c-3.1.13-src-sw.patch
|
Patch0003: mariadb-connector-c-3.1.13-src-sw.patch
|
||||||
|
|
||||||
BuildRequires: libcurl-devel zlib-devel openssl-devel
|
BuildRequires: libcurl-devel zlib-devel openssl-devel
|
||||||
@ -100,6 +98,9 @@ end
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Jun 9 2023 dillon chen <dillon.chen@gmail.com> - 3.1.21-1
|
||||||
|
- update package to 3.1.21
|
||||||
|
|
||||||
* Thu Mar 30 2023 laokz <zhangkai@iscas.ac.cn> - 3.1.13-7
|
* Thu Mar 30 2023 laokz <zhangkai@iscas.ac.cn> - 3.1.13-7
|
||||||
- Fix riscv64 pkgconfig directory
|
- Fix riscv64 pkgconfig directory
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user