tetromino 15/03/05 18:20:52
Added: rest-0.7.92-oauth-missing-include.patch
rest-0.7.92-tests-GError-pointers.patch
rest-0.7.92-xml-parser-missing-break.patch
Log:
Fix potentially exploitable memory corruption (bug #542264, thanks to
Agostino Sarubbo). Punt old.
(Portage version: 2.2.18/cvs/Linux x86_64, signed Manifest commit with key
0x18E5B6F2D8D5EC8D)
Revision Changes Path
1.1 net-libs/rest/files/rest-0.7.92-oauth-missing-include.patch
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/rest/files/rest-0.7.92-oauth-missing-include.patch?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/rest/files/rest-0.7.92-oauth-missing-include.patch?rev=1.1&content-type=text/plain
Index: rest-0.7.92-oauth-missing-include.patch
===================================================================
>From b50ace7738ea03817acdad87fb2b338a86018329 Mon Sep 17 00:00:00 2001
From: Christophe Fergeau <[email protected]>
Date: Wed, 3 Sep 2014 11:31:49 +0200
Subject: [PATCH 2/3] oauth: Add missing include
This fixes a compilation warning about a missing prototype.
---
rest/oauth-proxy-call.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/rest/oauth-proxy-call.c b/rest/oauth-proxy-call.c
index dce2c66..ab77b1a 100644
--- a/rest/oauth-proxy-call.c
+++ b/rest/oauth-proxy-call.c
@@ -25,6 +25,7 @@
#include <rest/rest-proxy-call.h>
#include "oauth-proxy-call.h"
#include "oauth-proxy-private.h"
+#include "rest-proxy-call-private.h"
#include "sha1.h"
G_DEFINE_TYPE (OAuthProxyCall, oauth_proxy_call, REST_TYPE_PROXY_CALL)
--
2.3.1
1.1 net-libs/rest/files/rest-0.7.92-tests-GError-pointers.patch
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/rest/files/rest-0.7.92-tests-GError-pointers.patch?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/rest/files/rest-0.7.92-tests-GError-pointers.patch?rev=1.1&content-type=text/plain
Index: rest-0.7.92-tests-GError-pointers.patch
===================================================================
>From 1bd0dc67914b7398acf60aaa42aa03bb4d36b839 Mon Sep 17 00:00:00 2001
From: Alexandre Rostovtsev <[email protected]>
Date: Thu, 5 Mar 2015 13:05:21 -0500
Subject: [PATCH] tests: GError pointers must be initialized
https://bugzilla.gnome.org/show_bug.cgi?id=745694
---
tests/custom-serialize.c | 2 +-
tests/proxy-continuous.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/tests/custom-serialize.c b/tests/custom-serialize.c
index b50405d..f683941 100644
--- a/tests/custom-serialize.c
+++ b/tests/custom-serialize.c
@@ -115,7 +115,7 @@ main (int argc, char **argv)
RestProxy *proxy;
RestProxyCall *call;
char *url;
- GError *error;
+ GError *error = NULL;
#if !GLIB_CHECK_VERSION (2, 36, 0)
g_type_init ();
diff --git a/tests/proxy-continuous.c b/tests/proxy-continuous.c
index 9395cd2..22ad0f7 100644
--- a/tests/proxy-continuous.c
+++ b/tests/proxy-continuous.c
@@ -139,7 +139,7 @@ static void
stream_test (RestProxy *proxy)
{
RestProxyCall *call;
- GError *error;
+ GError *error = NULL;
client_count = 1;
--
2.3.1
1.1
net-libs/rest/files/rest-0.7.92-xml-parser-missing-break.patch
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/rest/files/rest-0.7.92-xml-parser-missing-break.patch?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/rest/files/rest-0.7.92-xml-parser-missing-break.patch?rev=1.1&content-type=text/plain
Index: rest-0.7.92-xml-parser-missing-break.patch
===================================================================
>From 272db68e131a20652c98453b75b9c743cda2b327 Mon Sep 17 00:00:00 2001
From: Rob Bradford <[email protected]>
Date: Fri, 19 Sep 2014 17:06:00 +0100
Subject: [PATCH 3/3] xml-parser: Add missing break in switch statement
This would result in an inappropriate debug message appearing on valid
text data.
---
rest/rest-xml-parser.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/rest/rest-xml-parser.c b/rest/rest-xml-parser.c
index 49b49b4..4447a1a 100644
--- a/rest/rest-xml-parser.c
+++ b/rest/rest-xml-parser.c
@@ -197,6 +197,7 @@ rest_xml_parser_parse_from_data (RestXmlParser *parser,
cur_node->content = g_strdup (G(xmlTextReaderConstValue (reader)));
REST_DEBUG (XML_PARSER, "Text content found: %s",
cur_node->content);
+ break;
default:
REST_DEBUG (XML_PARSER, "Found unknown content with type: 0x%x",
xmlTextReaderNodeType (reader));
--
2.3.1
