Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package lftp for openSUSE:Factory checked in at 2024-01-25 18:41:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/lftp (Old) and /work/SRC/openSUSE:Factory/.lftp.new.1815 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lftp" Thu Jan 25 18:41:35 2024 rev:80 rq:1141445 version:4.9.2 Changes: -------- --- /work/SRC/openSUSE:Factory/lftp/lftp.changes 2023-07-27 16:52:18.754324151 +0200 +++ /work/SRC/openSUSE:Factory/.lftp.new.1815/lftp.changes 2024-01-25 18:41:38.595594673 +0100 @@ -1,0 +2,8 @@ +Thu Jan 25 08:01:55 UTC 2024 - Peter Simons <psim...@suse.com> + +- Apply "0001-lftp_ssl-deinitialize-the-lftp_ssl_openssl_instance.patch" + to fix a crash that ocurred when lftp is run on s390x with an IBM + crypto card installed. The issue has been reported to upstream at + https://github.com/lavv17/lftp/issues/716. [bsc#1213984] + +------------------------------------------------------------------- @@ -1159 +1166,0 @@ - New: ---- 0001-lftp_ssl-deinitialize-the-lftp_ssl_openssl_instance.patch BETA DEBUG BEGIN: New: - Apply "0001-lftp_ssl-deinitialize-the-lftp_ssl_openssl_instance.patch" to fix a crash that ocurred when lftp is run on s390x with an IBM BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ lftp.spec ++++++ --- /var/tmp/diff_new_pack.ZWBfqz/_old 2024-01-25 18:41:39.323620648 +0100 +++ /var/tmp/diff_new_pack.ZWBfqz/_new 2024-01-25 18:41:39.323620648 +0100 @@ -1,7 +1,7 @@ # # spec file for package lftp # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # Copyright (c) 2012 Pascal Bleser <pascal.ble...@opensuse.org> # # All modifications and additions to the file contributed by third parties @@ -34,6 +34,8 @@ Patch2: 0002-Add-content-of-lftp-compat-addfiles.patch.patch Patch3: 0003-Add-content-of-lftp-completion.patch.patch Patch5: 0005-Add-the-wrapper-code-to-the-Makefile-in-order-to-bui.patch +# https://github.com/lavv17/lftp/issues/716 +Patch6: 0001-lftp_ssl-deinitialize-the-lftp_ssl_openssl_instance.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: gcc-c++ @@ -52,7 +54,7 @@ BuildRequires: pkgconfig(zlib) Requires: less Requires(post): update-alternatives -Requires(postun):update-alternatives +Requires(postun): update-alternatives Conflicts: ftp %description @@ -71,8 +73,7 @@ HTTP and FTP, and FXP transfers. %prep -%setup -q -%autopatch -p1 +%autosetup -p1 %build # It's necessary to update the Autotools build system, because of patches 2-6 ++++++ 0001-lftp_ssl-deinitialize-the-lftp_ssl_openssl_instance.patch ++++++ >From f5463495c401be1807d76b1dc00a62b1ef5ada23 Mon Sep 17 00:00:00 2001 From: Thomas Abraham <tabra...@suse.com> Date: Mon, 22 Jan 2024 10:35:18 -0500 Subject: [PATCH] lftp_ssl: deinitialize the lftp_ssl_openssl_instance If the instance isn't deinitialized prior to exit, the OPENSSL_cleanup exit handler may run before the lftp_ssl_openssl_instance destructor on exit resulting in a segfault. This fixes a null deref on exit. Fixes #716 --- src/lftp_ssl.cc | 1 + 1 file changed, 1 insertion(+) diff --git a/src/lftp_ssl.cc b/src/lftp_ssl.cc index 18f816e1..ba7d1edc 100644 --- a/src/lftp_ssl.cc +++ b/src/lftp_ssl.cc @@ -863,6 +863,7 @@ lftp_ssl_openssl::~lftp_ssl_openssl() { SSL_free(ssl); ssl=0; + global_deinit(); } static lftp_ssl_openssl *verify_callback_ssl; -- 2.35.3
