Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package libid3tag for openSUSE:Factory 
checked in at 2022-04-10 19:05:18
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libid3tag (Old)
 and      /work/SRC/openSUSE:Factory/.libid3tag.new.1900 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "libid3tag"

Sun Apr 10 19:05:18 2022 rev:27 rq:967847 version:0.16.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/libid3tag/libid3tag.changes      2021-12-12 
21:27:28.180336572 +0100
+++ /work/SRC/openSUSE:Factory/.libid3tag.new.1900/libid3tag.changes    
2022-04-10 19:05:31.590418515 +0200
@@ -1,0 +2,9 @@
+Fri Apr  8 13:46:43 UTC 2022 - Manfred Hollstein <manfre...@gmx.net>
+
+- Add id3_ucs4_length-sanity-check.patch as Patch0.
+  The patch helps to avoid a segfault in programs using this library,
+  such as minidlna and potentially others; for details see
+  <https://github.com/tenacityteam/libid3tag/pull/7> and
+  <https://github.com/tenacityteam/libid3tag/issues/6>  
+
+-------------------------------------------------------------------

New:
----
  id3_ucs4_length-sanity-check.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ libid3tag.spec ++++++
--- /var/tmp/diff_new_pack.KPBAge/_old  2022-04-10 19:05:32.134412493 +0200
+++ /var/tmp/diff_new_pack.KPBAge/_new  2022-04-10 19:05:32.138412448 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package libid3tag
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -26,6 +26,7 @@
 URL:            https://github.com/tenacityteam/libid3tag
 Source0:        
%{url}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Source1:        baselibs.conf
+Patch0:         id3_ucs4_length-sanity-check.patch
 BuildRequires:  c++_compiler
 BuildRequires:  cmake
 BuildRequires:  gperf
@@ -55,6 +56,7 @@
 
 %prep
 %setup -q
+%patch0 -p1
 
 %build
 %cmake

++++++ id3_ucs4_length-sanity-check.patch ++++++
diff -rup libid3tag-0.16.1.orig/ucs4.c libid3tag-0.16.1/ucs4.c
--- libid3tag-0.16.1.orig/ucs4.c        2021-08-15 22:52:07.000000000 +0200
+++ libid3tag-0.16.1/ucs4.c     2022-04-08 09:47:54.980481313 +0200
@@ -39,6 +39,9 @@ id3_length_t id3_ucs4_length(id3_ucs4_t
 {
   id3_ucs4_t const *ptr = ucs4;
 
+  if (! ucs4)
+    return 0;
+
   while (*ptr)
     ++ptr;
 

Reply via email to