diff --git a/zlib-1.2.11-covscan-issues.patch b/zlib-1.2.11-covscan-issues.patch index 2e777dc..743c035 100644 --- a/zlib-1.2.11-covscan-issues.patch +++ b/zlib-1.2.11-covscan-issues.patch @@ -23,29 +23,3 @@ index 089285a..9b09718 100644 bstate = DEFLATE_HOOK(strm, flush, &bstate) ? bstate : s->level == 0 ? deflate_stored(s, flush) : ---- zlib-1.2.11/test/crc32_test.c.old 2023-02-07 22:27:07.759829524 +0000 -+++ zlib-1.2.11/test/crc32_test.c 2023-02-07 22:28:03.729829524 +0000 -@@ -11,7 +11,7 @@ - # include - #endif - --void test_crc32 OF((uLong crc, Byte* buf, z_size_t len, uLong chk, int line)); -+void test_crc32 OF((uLong crc, char* buf, z_size_t len, uLong chk, int line)); - int main OF((void)); - - typedef struct { -@@ -24,12 +24,12 @@ typedef struct { - - void test_crc32(crc, buf, len, chk, line) - uLong crc; -- Byte *buf; -+ char *buf; - z_size_t len; - uLong chk; - int line; - { -- uLong res = crc32(crc, buf, len); -+ uLong res = crc32(crc, (Bytef *) buf, len); - if (res != chk) { - fprintf(stderr, "FAIL [%d]: crc32 returned 0x%08X expected 0x%08X\n", - line, (unsigned int)res, (unsigned int)chk); diff --git a/zlib.spec b/zlib.spec index 40e85d5..93166f9 100644 --- a/zlib.spec +++ b/zlib.spec @@ -2,7 +2,7 @@ Name: zlib Version: 1.2.11 -Release: 38%{?dist} +Release: 39%{?dist} Summary: Compression and decompression library # /contrib/dotzlib/ have Boost license License: zlib and Boost @@ -213,6 +213,9 @@ find $RPM_BUILD_ROOT -name '*.la' -delete %changelog +* Thu Feb 09 2023 Lukas Javorsky - 1.2.11-39 +- Fix covscan issue CWE-681 + * Tue Feb 07 2023 Lukas Javorsky - 1.2.11-38 - Resolve fuzzing issue for unknown memory access