Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package kdegraphics-mobipocket for
openSUSE:Factory checked in at 2025-04-18 16:17:05
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/kdegraphics-mobipocket (Old)
and /work/SRC/openSUSE:Factory/.kdegraphics-mobipocket.new.30101 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kdegraphics-mobipocket"
Fri Apr 18 16:17:05 2025 rev:15 rq:1270627 version:25.04.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/kdegraphics-mobipocket/kdegraphics-mobipocket.changes
2025-03-07 16:38:17.399618977 +0100
+++
/work/SRC/openSUSE:Factory/.kdegraphics-mobipocket.new.30101/kdegraphics-mobipocket.changes
2025-04-20 19:57:51.707640646 +0200
@@ -1,0 +2,21 @@
+Mon Apr 14 07:06:39 UTC 2025 - Christophe Marin <[email protected]>
+
+- Update to 25.04.0
+ * New feature release
+ * For more details please see:
+ * https://kde.org/announcements/gear/25.04.0/
+- No code change since 25.03.90
+
+-------------------------------------------------------------------
+Sat Mar 29 08:42:22 UTC 2025 - Christophe Marin <[email protected]>
+
+- Update to 25.03.90
+ * New feature release
+- Changes since 24.12.3:
+ * Avoid leaking Compressor instance
+ * Add missing bounds check for RLE decompressor
+ * Fix broken padding in BitReader
+ * Fix possible out-of-bounds access in BitReader
+ * Add xml/yaml linting
+
+-------------------------------------------------------------------
Old:
----
kdegraphics-mobipocket-24.12.3.tar.xz
kdegraphics-mobipocket-24.12.3.tar.xz.sig
New:
----
kdegraphics-mobipocket-25.04.0.tar.xz
kdegraphics-mobipocket-25.04.0.tar.xz.sig
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ kdegraphics-mobipocket.spec ++++++
--- /var/tmp/diff_new_pack.K68QxV/_old 2025-04-20 19:57:52.343667106 +0200
+++ /var/tmp/diff_new_pack.K68QxV/_new 2025-04-20 19:57:52.347667273 +0200
@@ -1,7 +1,7 @@
#
# spec file for package kdegraphics-mobipocket
#
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -21,7 +21,7 @@
%bcond_without released
Name: kdegraphics-mobipocket
-Version: 24.12.3
+Version: 25.04.0
Release: 0
Summary: E-book plugin and library
License: GPL-2.0-or-later
mobipocket.spec: same change
++++++ kdegraphics-mobipocket-24.12.3.tar.xz ->
kdegraphics-mobipocket-25.04.0.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/kdegraphics-mobipocket-24.12.3/.gitlab-ci.yml
new/kdegraphics-mobipocket-25.04.0/.gitlab-ci.yml
--- old/kdegraphics-mobipocket-24.12.3/.gitlab-ci.yml 2024-10-22
12:12:05.000000000 +0200
+++ new/kdegraphics-mobipocket-25.04.0/.gitlab-ci.yml 2025-03-23
22:29:09.000000000 +0100
@@ -7,7 +7,10 @@
- /gitlab-templates/android-qt6.yml
- /gitlab-templates/linux.yml
- /gitlab-templates/linux-qt6.yml
+ - /gitlab-templates/linux-qt6-next.yml
- /gitlab-templates/freebsd.yml
- /gitlab-templates/freebsd-qt6.yml
- /gitlab-templates/windows.yml
- /gitlab-templates/windows-qt6.yml
+ - /gitlab-templates/xml-lint.yml
+ - /gitlab-templates/yaml-lint.yml
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/kdegraphics-mobipocket-24.12.3/.kde-ci.yml
new/kdegraphics-mobipocket-25.04.0/.kde-ci.yml
--- old/kdegraphics-mobipocket-24.12.3/.kde-ci.yml 2024-10-22
12:12:05.000000000 +0200
+++ new/kdegraphics-mobipocket-25.04.0/.kde-ci.yml 2025-03-23
22:29:09.000000000 +0100
@@ -2,13 +2,13 @@
# SPDX-License-Identifier: CC0-1.0
Dependencies:
-- 'on': ['Linux/Qt6', 'FreeBSD/Qt6', 'Windows/Qt6', 'Android/Qt6']
- 'require':
+ - 'on': ['Linux/Qt6', 'Linux/Qt6Next', 'FreeBSD/Qt6', 'Windows/Qt6',
'Android/Qt6']
+ 'require':
'frameworks/extra-cmake-modules': '@latest-kf6'
-- 'on': ['Linux/Qt5', 'FreeBSD/Qt5', 'Windows/Qt5', 'Android/Qt5']
- 'require':
+ - 'on': ['Linux/Qt5', 'FreeBSD/Qt5', 'Windows/Qt5', 'Android/Qt5']
+ 'require':
'frameworks/extra-cmake-modules': '@stable'
Options:
- require-passing-tests-on: ['Linux', 'FreeBSD', 'Windows']
+ require-passing-tests-on: ['Linux', 'FreeBSD', 'Windows']
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/kdegraphics-mobipocket-24.12.3/lib/decompressor.cpp
new/kdegraphics-mobipocket-25.04.0/lib/decompressor.cpp
--- old/kdegraphics-mobipocket-24.12.3/lib/decompressor.cpp 2024-10-22
12:12:05.000000000 +0200
+++ new/kdegraphics-mobipocket-25.04.0/lib/decompressor.cpp 2025-03-23
22:29:09.000000000 +0100
@@ -56,10 +56,8 @@
class BitReader
{
public:
- BitReader(const QByteArray& d) : pos(0), data(d)
- {
- data.append("\000\000\000\000"); //krazy:exclude=strings
- len=data.size()*8;
+ BitReader(const QByteArray& d) : pos(0), len(d.size() * 8), data(d) {
+ data.append(4, '\0');
}
quint32 read() {
@@ -140,9 +138,13 @@
N+=(unsigned char)data.at(i++);
copyLength = (N & 7) + 3;
shift = (N & 0x3fff) / 8;
- shifted = ret.size()-shift;
- if (shifted>(ret.size()-1)) goto
endOfLoop;
- for (int i=0;i<copyLength;i++)
ret.append(ret.at(shifted+i));
+ if ((shift < 1) || (shift >
ret.size())) {
+ return ret;
+ }
+ shifted = ret.size() - shift;
+ for (int i = shifted; i < shifted +
copyLength; i++) {
+ ret.append(ret.at(i));
+ }
break;
}
}
@@ -229,12 +231,12 @@
valid=false;
}
-Decompressor* Decompressor::create(quint8 type, const PDB& pdb)
+std::unique_ptr<Decompressor> Decompressor::create(quint8 type, const PDB& pdb)
{
switch (type) {
- case 1 : return new NOOPDecompressor(pdb);
- case 2 : return new RLEDecompressor(pdb);
- case 'H' : return new HuffdicDecompressor(pdb);
+ case 1 : return std::make_unique<NOOPDecompressor>(pdb);
+ case 2 : return std::make_unique<RLEDecompressor>(pdb);
+ case 'H' : return std::make_unique<HuffdicDecompressor>(pdb);
default : return nullptr;
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/kdegraphics-mobipocket-24.12.3/lib/decompressor.h
new/kdegraphics-mobipocket-25.04.0/lib/decompressor.h
--- old/kdegraphics-mobipocket-24.12.3/lib/decompressor.h 2024-10-22
12:12:05.000000000 +0200
+++ new/kdegraphics-mobipocket-25.04.0/lib/decompressor.h 2025-03-23
22:29:09.000000000 +0100
@@ -11,6 +11,7 @@
#define MOBI_DECOMPRESSOR_H
#include <QByteArray>
+#include <memory>
namespace Mobipocket {
class PDB;
@@ -22,7 +23,7 @@
virtual ~Decompressor() {}
bool isValid() const { return valid; }
- static Decompressor* create(quint8 type, const PDB& pdb);
+ static std::unique_ptr<Decompressor> create(quint8 type, const PDB& pdb);
protected:
const PDB& pdb;
bool valid;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/kdegraphics-mobipocket-24.12.3/lib/mobipocket.cpp
new/kdegraphics-mobipocket-25.04.0/lib/mobipocket.cpp
--- old/kdegraphics-mobipocket-24.12.3/lib/mobipocket.cpp 2024-10-22
12:12:05.000000000 +0200
+++ new/kdegraphics-mobipocket-25.04.0/lib/mobipocket.cpp 2025-03-23
22:29:09.000000000 +0100
@@ -107,7 +107,7 @@
DocumentPrivate(Stream* d) : pdb(d), valid(true), firstImageRecord(0),
drm(false), thumbnailIndex(0) {}
PDB pdb;
- Decompressor* dec;
+ std::unique_ptr<Decompressor> dec;
quint16 ntextrecords;
quint16 maxRecordSize;
bool valid;
