.fmf/version

@@ -0,0 +1 @@
+1

.gitignore

@@ -1 +1 @@
-SOURCES/sgpio-1.2-0.10-src.tar.gz
+/sgpio-1.2-0.10-src.tar.gz

.sgpio.metadata

@@ -1 +0,0 @@
-dc5f0343a3e54ca91a97ecc100011196a0a7cfb7 SOURCES/sgpio-1.2-0.10-src.tar.gz

ci.fmf

@@ -0,0 +1,4 @@
+summary: Basic smoke test
+execute:
+    how: tmt
+    script: sgpio -h

gating.yaml

@@ -0,0 +1,6 @@
+--- !Policy
+product_versions:
+  - rhel-8
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}

sgpio-1.2-buffer-overflow.patch

@@ -0,0 +1,11 @@
+--- sgpio/sgpio.c
++++ sgpio/sgpio.c
+@@ -126,7 +126,7 @@
+ 	int id;
+ 	int host_port;
+ 	int init;
+-	char name[7];
++	char name[5 /* prefix */ + 10 /* port number */ + 1 /* terminator */];
+ };
+ 
+ /* structure for the disks associated with the led structure */

sgpio.spec

@@ -1,7 +1,7 @@
 Summary: SGPIO captive backplane tool
 Name: sgpio
 Version: 1.2.0.10
-Release: 21%{?dist}
+Release: 23%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 URL: http://sources.redhat.com/lvm2/wiki/DMRAID_Eventing
@@ -10,6 +10,7 @@ Source: sgpio-1.2-0.10-src.tar.gz
 #Source: http://sources.redhat.com/lvm2/wiki/DMRAID_Eventing?action=AttachFile&do=get&target=sgpio-1.2.tgz
 Patch0: sgpio-1.2-makefile.patch
 Patch1: sgpio-1.2-coverity.patch
+Patch2: sgpio-1.2-buffer-overflow.patch
 BuildRequires: dos2unix
 
 %description
@@ -20,6 +21,7 @@ Intel SGPIO enclosure management utility
 dos2unix --keepdate Makefile README
 %patch0 -p1 -b .makefile
 %patch1 -p1 -b .coverity
+%patch2 -p1 -b .buffer-overflow
 chmod a-x *
 
 %build
@@ -36,6 +38,12 @@ make install INSTALL="%{__install} -p" DESTDIR=$RPM_BUILD_ROOT SBIN_DIR=$RPM_BUI
 %{_mandir}/man1/sgpio.*
 
 %changelog
+* Fri Oct 27 2023 Lukáš Zaoral <lzaoral@redhat.com> - 1.2.0.10-23
+- rebuild for updated gating.yaml
+
+* Mon Oct 09 2023 Lukáš Zaoral <lzaoral@redhat.com> - 1.2.0.10-22
+- fix buffer overflow with high port numbers (RHEL-11034)
+
 * Mon Feb 26 2018 Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-21
 - use distribution LDFLAGS during build (#1548559)
 

sources

@@ -0,0 +1 @@
+SHA512 (sgpio-1.2-0.10-src.tar.gz) = 63f7f6071b15b70862c5cc3bfdcf36cb68f8176f78c1fe97304992d0b2c6a814a45f273727d52e4cc6093477efbf488885fe538ec6ea16aea6db692186eb668e