From 5d0c8ef379f48ca523d29a0b4108ecaaa7e70ec0 Mon Sep 17 00:00:00 2001 From: Jakub Jelen Date: Tue, 30 Jul 2024 14:51:23 +0200 Subject: [PATCH] Fix SAST reports Resolves: RHEL-25067 --- libksba-1.5.1-coverity.patch | 31 +++++++++++++++++++++++++++++++ libksba.spec | 2 ++ 2 files changed, 33 insertions(+) diff --git a/libksba-1.5.1-coverity.patch b/libksba-1.5.1-coverity.patch index 0baca3e..954a4bd 100644 --- a/libksba-1.5.1-coverity.patch +++ b/libksba-1.5.1-coverity.patch @@ -155,3 +155,34 @@ index 1b72bf0..81c31ed 100644 -- 2.30.2 +From 75e94db38ccd9ed166b40fb2d8aaed7c094cff69 Mon Sep 17 00:00:00 2001 +From: Jakub Jelen +Date: Mon, 12 Feb 2024 09:52:43 +0100 +Subject: [PATCH] der-builder: Fix possible uninitialized variable. + +* src/der-builder.c (_ksba_der_builder_get): Initialize ERR. + +-- + +GnuPG-bug-id: 6992 +Signed-off-by: Jakub Jelen +--- + src/der-builder.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/der-builder.c b/src/der-builder.c +index 768bd0f..d136bb8 100644 +--- a/src/der-builder.c ++++ b/src/der-builder.c +@@ -549,7 +549,7 @@ compute_lengths (ksba_der_t d, int idx) + gpg_error_t + _ksba_der_builder_get (ksba_der_t d, unsigned char **r_obj, size_t *r_objlen) + { +- gpg_error_t err; ++ gpg_error_t err = 0; + int idx; + unsigned char *buffer = NULL; + unsigned char *p; +-- +2.45.2 + diff --git a/libksba.spec b/libksba.spec index 46d6d6d..fa595cc 100644 --- a/libksba.spec +++ b/libksba.spec @@ -11,6 +11,8 @@ Source0: https://www.gnupg.org/ftp/gcrypt/libksba/libksba-%{version}.tar.bz2 Source1: https://www.gnupg.org/ftp/gcrypt/libksba/libksba-%{version}.tar.bz2.sig Patch1: libksba-1.3.0-multilib.patch +# some patches from previous batches +# https://dev.gnupg.org/T6992 Patch2: libksba-1.5.1-coverity.patch # Fix for CVE-2022-3515 Patch3: libksba-1.5.1-overflow.patch