Compare commits

...

No commits in common. "c8s" and "imports/c9-beta/libfastjson-0.99.9-3.el9" have entirely different histories.

6 changed files with 30 additions and 72 deletions

1
.gitignore vendored
View File

@ -1,2 +1 @@
SOURCES/libfastjson-0.99.9.tar.gz SOURCES/libfastjson-0.99.9.tar.gz
/libfastjson-0.99.9.tar.gz

1
.libfastjson.metadata Normal file
View File

@ -0,0 +1 @@
44f278fb75f91b77f79f61bfa9988eee27e24088 SOURCES/libfastjson-0.99.9.tar.gz

View File

@ -1,13 +1,13 @@
Name: libfastjson Name: libfastjson
Version: 0.99.9 Version: 0.99.9
Release: 2%{?dist} Release: 3%{?dist}
Summary: A JSON implementation in C Summary: A JSON implementation in C
License: MIT License: MIT
URL: https://github.com/rsyslog/libfastjson URL: https://github.com/rsyslog/libfastjson
Source0: http://download.rsyslog.com/libfastjson/libfastjson-%{version}.tar.gz Source0: http://download.rsyslog.com/libfastjson/libfastjson-%{version}.tar.gz
BuildRequires: autoconf automake libtool BuildRequires: autoconf automake libtool
Patch0: libfastjson-CVE-2020-12762.patch BuildRequires: make
%description %description
LIBFASTJSON implements a reference counting object LIBFASTJSON implements a reference counting object
@ -18,7 +18,6 @@ C representation of JSON objects.
%package devel %package devel
Summary: Development files for libfastjson Summary: Development files for libfastjson
Group: Development/Libraries
Requires: %{name}%{?_isa} = %{version}-%{release} Requires: %{name}%{?_isa} = %{version}-%{release}
%description devel %description devel
@ -27,7 +26,6 @@ developing applications that use libfastjson.
%prep %prep
%setup -q %setup -q
%patch0 -p1 -b .CVE-2020-12762
for doc in ChangeLog; do for doc in ChangeLog; do
iconv -f iso-8859-1 -t utf8 $doc > $doc.new && iconv -f iso-8859-1 -t utf8 $doc > $doc.new &&
@ -47,9 +45,7 @@ find %{buildroot} -name '*.la' -delete -print
%check %check
make V=1 check make V=1 check
%post -p /sbin/ldconfig %ldconfig_scriptlets
%postun -p /sbin/ldconfig
%files %files
%{!?_licensedir:%global license %%doc} %{!?_licensedir:%global license %%doc}
@ -63,13 +59,34 @@ make V=1 check
%{_libdir}/pkgconfig/libfastjson.pc %{_libdir}/pkgconfig/libfastjson.pc
%changelog %changelog
* Tue May 16 2023 Attila Lakatos <alakatos@redhat.com> - 0.99.9-2 * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 0.99.9-3
- Address CVE-2020-12762 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Resolves: rhbz#2203171 Related: rhbz#1991688
* Thu Apr 22 2021 Attila Lakatos <alakatos@redhat.com> - 0.99.9-1 * Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 0.99.9-2
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
* Mon Mar 08 2021 Attila Lakatos <alakatos@redhat.com> - 0.99.9-1
- rebase to v0.99.9 - rebase to v0.99.9
Resolves: rhbz#1936807 Resolves: rhbz#1920145
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-2 * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.99.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

View File

@ -1,6 +0,0 @@
--- !Policy
product_versions:
- rhel-8
decision_context: osci_compose_gate
rules:
- !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1.functional}

View File

@ -1,52 +0,0 @@
diff --git a/printbuf.c b/printbuf.c
index e9cde11..b02a363 100644
--- a/printbuf.c
+++ b/printbuf.c
@@ -13,6 +13,7 @@
#include "config.h"
+#include <limits.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
@@ -68,9 +69,16 @@ static int printbuf_extend(struct printbuf *p, int min_size)
if (p->size >= min_size)
return 0;
- new_size = p->size * 2;
- if (new_size < min_size + 8)
- new_size = min_size + 8;
+ /* Prevent signed integer overflows with large buffers. */
+ if (min_size > INT_MAX - 8)
+ return -1;
+ if (p->size > INT_MAX / 2)
+ new_size = min_size + 8;
+ else {
+ new_size = p->size * 2;
+ if (new_size < min_size + 8)
+ new_size = min_size + 8;
+ }
#ifdef PRINTBUF_DEBUG
MC_DEBUG("printbuf_memappend: realloc "
"bpos=%d min_size=%d old_size=%d new_size=%d\n",
@@ -85,6 +93,9 @@ static int printbuf_extend(struct printbuf *p, int min_size)
int printbuf_memappend(struct printbuf *p, const char *buf, int size)
{
+ /* Prevent signed integer overflows with large buffers. */
+ if (size > INT_MAX - p->bpos - 1)
+ return -1;
if (p->size <= p->bpos + size + 1) {
if (printbuf_extend(p, p->bpos + size + 1) < 0)
return -1;
@@ -136,6 +147,9 @@ int printbuf_memset(struct printbuf *pb, int offset, int charvalue, int len)
if (offset == -1)
offset = pb->bpos;
+ /* Prevent signed integer overflows with large buffers. */
+ if (len > INT_MAX - offset)
+ return -1;
size_needed = offset + len;
if (pb->size < size_needed)
{

View File

@ -1 +0,0 @@
SHA512 (libfastjson-0.99.9.tar.gz) = 90505fba033179aa92f12ac5dbbb071f69f3491de5bbbbb46d553b08ac325448459c9e33ba22ef4f9db0bae4496cca60046eebf6325d70b045c1a0a9845b0d48