Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package ltrace for openSUSE:Factory checked 
in at 2023-04-12 12:50:59
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ltrace (Old)
 and      /work/SRC/openSUSE:Factory/.ltrace.new.19717 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "ltrace"

Wed Apr 12 12:50:59 2023 rev:47 rq:1078434 version:0.7.91

Changes:
--------
--- /work/SRC/openSUSE:Factory/ltrace/ltrace.changes    2021-04-12 
12:33:58.437073479 +0200
+++ /work/SRC/openSUSE:Factory/.ltrace.new.19717/ltrace.changes 2023-04-12 
12:51:00.668725372 +0200
@@ -1,0 +2,5 @@
+Tue Apr 11 10:59:57 UTC 2023 - Andreas Schwab <sch...@suse.de>
+
+- ppc64le-use-after-free.patch: fix use after free
+
+-------------------------------------------------------------------

New:
----
  ppc64le-use-after-free.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ ltrace.spec ++++++
--- /var/tmp/diff_new_pack.94y6in/_old  2023-04-12 12:51:01.244728739 +0200
+++ /var/tmp/diff_new_pack.94y6in/_new  2023-04-12 12:51:01.248728762 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package ltrace
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -34,6 +34,7 @@
 Patch6:         lens-double-free.patch
 Patch7:         gcc9-Wlto-type-mismatch.patch
 Patch8:         s390x-ptrace.patch
+Patch9:         ppc64le-use-after-free.patch
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  binutils-devel
@@ -66,6 +67,7 @@
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
+%patch9 -p1
 
 %build
 ./autogen.sh

++++++ ppc64le-use-after-free.patch ++++++
Index: ltrace-0.7.91/sysdeps/linux-gnu/ppc/plt.c
===================================================================
--- ltrace-0.7.91.orig/sysdeps/linux-gnu/ppc/plt.c
+++ ltrace-0.7.91/sysdeps/linux-gnu/ppc/plt.c
@@ -688,10 +688,10 @@ arch_elf_add_func_entry(struct process *
                    || library_symbol_init(libsym, addr, full_name, 1,
                                           LS_TOPLT_NONE) < 0) {
                        free(libsym);
-                       delete_symbol_chain(libsym);
-                       libsym = NULL;
                        fprintf(stderr, "Couldn't add symbol %s"
                                "for tracing.\n", name);
+                       free(full_name);
+                       return PLT_FAIL;
                }
                full_name = NULL;
                libsym->next = *ret;

Reply via email to