Compare commits

..

No commits in common. "04ac64820b50c7b3708d3146fa0f044c5ec072f9" and "8457bce6307afbebb3241fd15775e3479490adc5" have entirely different histories.

6 changed files with 4 additions and 81 deletions

View File

@ -1,27 +0,0 @@
From adf41f36cf7214d7d6fa8d528b74eba47c377405 Mon Sep 17 00:00:00 2001
From: Zero0one1 <arya_lee@qq.com>
Date: Fri, 2 Apr 2021 16:45:56 +0800
Subject: [PATCH] Fix a small memory leak in sqlite3_exec()
Fixes https://github.com/hughsie/colord/issues/110
Conflict:NA
Reference:https://github.com/hughsie/colord/commit/adf41f36cf7214d7d6fa8d528b74eba47c377405
---
src/cd-device-db.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/cd-device-db.c b/src/cd-device-db.c
index a212c83d..3ae44ef2 100644
--- a/src/cd-device-db.c
+++ b/src/cd-device-db.c
@@ -91,7 +91,7 @@ cd_device_db_load (CdDeviceDb *ddb,
/* check properties version 2 */
rc = sqlite3_exec (priv->db, "SELECT * FROM properties_v2 LIMIT 1",
- NULL, NULL, &error_msg);
+ NULL, NULL, NULL);
if (rc != SQLITE_OK) {
statement = "CREATE TABLE properties_v2 ("
"device_id TEXT,"

View File

@ -1,25 +0,0 @@
From 1452a975ecae14299fb27d41522dfd32305481ce Mon Sep 17 00:00:00 2001
From: Richard Hughes <richard@hughsie.com>
Date: Wed, 13 Apr 2022 14:21:32 +0100
Subject: [PATCH] trivial: Fix a small memory leak on db open failure
Conflict:Using g_autofree will make the testcase fail, so here we use sqlite3_free to free the memory
Reference:https://github.com/hughsie/colord/commit/1452a975ecae14299fb27d41522dfd32305481ce
---
src/cd-profile-db.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/cd-profile-db.c b/src/cd-profile-db.c
index 5661d09..d6361ac 100644
--- a/src/cd-profile-db.c
+++ b/src/cd-profile-db.c
@@ -87,6 +87,7 @@ cd_profile_db_load (CdProfileDb *pdb,
"uid INTEGER,"
"value TEXT,"
"PRIMARY KEY (profile_id, property, uid));";
+ sqlite3_free (error_msg);
sqlite3_exec (priv->db, statement, NULL, NULL, NULL);
}
return TRUE;
--
2.33.0

BIN
colord-1.4.4.tar.xz Normal file

Binary file not shown.

Binary file not shown.

View File

@ -1,14 +1,11 @@
Name: colord
Version: 1.4.5
Release: 4
Version: 1.4.4
Release: 1
Summary: A system activated daemon
License: GPLv2+ and LGPLv2+
URL: https://www.freedesktop.org/software/colord/
Source0: https://www.freedesktop.org/software/colord/releases/%{name}-%{version}.tar.xz
Patch6000: backport-0001-CVE-2021-42523.patch
Patch6001: backport-0002-CVE-2021-42523.patch
BuildRequires: color-filesystem dbus-devel docbook5-style-xsl gettext glib2-devel
BuildRequires: gobject-introspection-devel gtk-doc libgudev1-devel
BuildRequires: libxslt meson sqlite-devel systemd systemd-devel vala-tools
@ -60,12 +57,8 @@ This help package contains help documents for color.
%build
ulimit -Sv 2000000
# colord-test-private test cases always fail, so we don't run this case
# https://github.com/hughsie/colord/issues/139 use this link to track bugs
sed -i 's/test('"'"'colord-test-private'"'"'/# test('"'"'colord-test-private'"'"'/g' %{_builddir}/%{name}-%{version}/lib/colord/meson.build
%meson -Dargyllcms_sensor=false -Dbash_completion=false -Ddaemon_user=colord \
-Dprint_profiles=false -Dvapi=true -Dinstalled_tests=true -Dtests=true
-Dprint_profiles=false -Dvapi=true -Dinstalled_tests=true
%meson_build
%install
@ -82,9 +75,6 @@ cat /etc/passwd | grep colord >/dev/null || useradd -r -g colord \
-s /sbin/nologin -d /var/lib/colord -c "User for colord" colord
exit 0
%check
%meson_test
%preun
%systemd_preun colord.service
@ -171,21 +161,6 @@ exit 0
%{_datadir}/man/man1/*.1.gz
%changelog
* Wed Aug 31 2022 wangkerong <wangkerong@h-partners.com> - 1.4.5-4
- fix CVE-2021-42523
* Mon Aug 29 2022 wangkerong <wangkerong@h-partners.com> - 1.4.5-3
- fix CVE-2021-42523
* Mon Mar 28 2022 wangkerong <wangkerong@h-partners.com> - 1.4.5-2
- enable test case
* Sat Jan 30 2021 yanglu <yanglu60@huawei.com> - 1.4.5-1
- Type:enhancement
- ID:NA
- SUG:NA
- DESC:upgrade to version 1.4.5
* Sat Jul 25 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 1.4.4-1
- Type:enhancement
- ID:NA

View File

@ -1,4 +1,4 @@
version_control: github
src_repo: hughsize/colord
tag_prefix:
separator: "."
seperator: "."