Compare commits

..

No commits in common. "675ea72e128c379c0366748a52ac995c6178795e" and "3a769b20707422c1d65e649f908fdb9c5e2e5fc4" have entirely different histories.

4 changed files with 0 additions and 102 deletions

View File

@ -1,24 +0,0 @@
From 6382711e9b0060bbd0408df512e48b2ce9cdb3be Mon Sep 17 00:00:00 2001
From: William Hubbs <w.d.hubbs@gmail.com>
Date: Tue, 22 Jun 2010 14:16:45 -0500
Subject: [PATCH] fix possible buffer overflow in get_path
If a pathname is longer than CFG_MAX_FILENAME, there was a possible
buffer overflow when copying the path name.
---
src/dotconf.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/dotconf.c b/src/dotconf.c
index af553b3..7ba2001 100644
--- a/src/dotconf.c
+++ b/src/dotconf.c
@@ -1440,7 +1440,7 @@ char *get_path(char *name)
} else {
len = tmp - name + 1;
if (len > CFG_MAX_FILENAME)
- len -= 1;
+ len = CFG_MAX_FILENAME;
}
snprintf(buf, len, "%s", name);
return buf;

View File

@ -1,74 +0,0 @@
Name: dotconf
Version: 1.3
Release: 24
Summary: A configuration file parser
License: LGPLv2
URL: https://github.com/williamh/dotconf
Source: https://github.com/williamh/dotconf/archive/v%{version}.tar.gz
# https://github.com/williamh/dotconf/commit/6382711e9b0060bbd0408df512e48b2ce9cdb3be
Patch0: Fix-possible-buffer-overflow-in-get_path.patch
BuildRequires: findutils glibc-common make autoconf automake libtool
%description
The dotconf package contains a library used to handle configuration
files.
%package devel
Summary: Development files for dotconf
Requires: %{name} = %{version}-%{release}
Requires: pkgconf-pkg-config
%description devel
The dotconf-devel package contains libraries and header files for
developing applications that use dotconf.
%package help
Summary: Documents for dotconf
%description help
The dotconf-help package contains related documents.
%prep
%autosetup -n dotconf-%{version} -p1
%build
autoreconf -fiv
%configure --disable-static
%make_build
%install
%make_install
%delete_la
mv %{buildroot}/%{_docdir}/%{name} __doc_dir
%post
/sbin/ldconfig
%postun
/sbin/ldconfig
%files
%doc AUTHORS COPYING
%{_libdir}/libdotconf*.so.*
%files devel
%{_libdir}/libdotconf*.so
%{_includedir}/dotconf.h
%{_libdir}/pkgconfig/dotconf.pc
%files help
%doc README
%doc __doc_dir/*
%changelog
* Wed Nov 29 2023 yaoxin <yao_xin001@hoperun.com> - 1.3-24
- Fix possible buffer overflow in get_path
* Tue Sep 8 2020 liuweibo <liuweibo10@huawei.com> - 1.3-23
- Fix Source0
* Fri Feb 14 2020 Tianfei <tianfei16@huawei.com> - 1.3-22
- Package init

View File

@ -1,4 +0,0 @@
version_control: github
src_repo: williamh/dotconf
tag_prefix: ^v
seperator: .

Binary file not shown.