Hello community, here is the log from the commit of package apr for openSUSE:Factory checked in at 2018-04-22 14:34:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apr (Old) and /work/SRC/openSUSE:Factory/.apr.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apr" Sun Apr 22 14:34:32 2018 rev:6 rq:598066 version:1.6.2 Changes: -------- --- /work/SRC/openSUSE:Factory/apr/apr.changes 2018-02-03 15:36:09.143167309 +0100 +++ /work/SRC/openSUSE:Factory/.apr.new/apr.changes 2018-04-22 14:34:35.391932010 +0200 @@ -1,0 +2,6 @@ +Wed Apr 18 15:33:14 UTC 2018 - mli...@suse.cz + +- Add gcc8-integer-overflow.patch to handle an undefined + behavior (boo#1090085). + +------------------------------------------------------------------- New: ---- gcc8-integer-overflow.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apr.spec ++++++ --- /var/tmp/diff_new_pack.7alh8X/_old 2018-04-22 14:34:37.143868607 +0200 +++ /var/tmp/diff_new_pack.7alh8X/_new 2018-04-22 14:34:37.143868607 +0200 @@ -34,6 +34,7 @@ Patch5: apr-visibility.patch Patch6: apr-use-getrandom.patch Patch9: apr-proc-mutex-map-anon.patch +Patch10: gcc8-integer-overflow.patch BuildRequires: doxygen BuildRequires: fdupes BuildRequires: libtool @@ -87,6 +88,7 @@ %patch5 -p1 %patch6 -p1 %patch9 -p1 +%patch10 -p1 # Do not put date to doxy content sed -i \ ++++++ gcc8-integer-overflow.patch ++++++ diff --git a/test/teststr.c b/test/teststr.c index d9a505475..7c945886d 100644 --- a/test/teststr.c +++ b/test/teststr.c @@ -307,7 +307,8 @@ static void overflow_strfsize(abts_case *tc, void *data) for (; off < 999999999; off += 999) { apr_strfsize(off, buf); } - for (off = 1; off < LONG_MAX && off > 0; off *= 2) { + /* Be carefull about integer overflow. */ + for (off = 1; off < (LONG_MAX / 4) && off > 0; off *= 2) { apr_strfsize(off, buf); apr_strfsize(off + 1, buf); apr_strfsize(off - 1, buf);