Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libxmlb for openSUSE:Factory checked in at 2026-02-17 16:36:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libxmlb (Old) and /work/SRC/openSUSE:Factory/.libxmlb.new.1977 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libxmlb" Tue Feb 17 16:36:08 2026 rev:21 rq:1333271 version:0.3.25 Changes: -------- --- /work/SRC/openSUSE:Factory/libxmlb/libxmlb.changes 2025-09-24 15:23:09.753522207 +0200 +++ /work/SRC/openSUSE:Factory/.libxmlb.new.1977/libxmlb.changes 2026-02-17 16:36:12.899502631 +0100 @@ -1,0 +2,6 @@ +Fri Feb 13 15:24:03 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 0.3.25: + + Correctly decompress heavily compressed zstd streams + +------------------------------------------------------------------- Old: ---- libxmlb-0.3.24.tar.gz New: ---- libxmlb-0.3.25.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libxmlb.spec ++++++ --- /var/tmp/diff_new_pack.4eIH2Q/_old 2026-02-17 16:36:14.635575128 +0100 +++ /var/tmp/diff_new_pack.4eIH2Q/_new 2026-02-17 16:36:14.647575629 +0100 @@ -1,7 +1,7 @@ # # spec file for package libxmlb # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # Copyright (c) 2019 Bjørn Lie, Bryne, Norway. # # All modifications and additions to the file contributed by third parties @@ -19,7 +19,7 @@ %define sover 2 Name: libxmlb -Version: 0.3.24 +Version: 0.3.25 Release: 0 Summary: Library for querying compressed XML metadata License: LGPL-2.1-or-later ++++++ libxmlb-0.3.24.tar.gz -> libxmlb-0.3.25.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxmlb-0.3.24/.clang-format new/libxmlb-0.3.25/.clang-format --- old/libxmlb-0.3.24/.clang-format 2025-09-10 17:14:14.000000000 +0200 +++ new/libxmlb-0.3.25/.clang-format 2026-02-03 14:05:46.000000000 +0100 @@ -33,15 +33,11 @@ UseTab: 'Always' PenaltyBreakAssignment: '3' PenaltyBreakBeforeFirstCallParameter: '15' ---- -Language: 'Proto' ---- -Language: 'Cpp' IncludeCategories: - Regex: '^"config.h"$' - Priority: '0' + Priority: 0 - Regex: '^<' - Priority: '1' + Priority: 1 - Regex: '.*' - Priority: '2' + Priority: 2 ... diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxmlb-0.3.24/.github/workflows/scorecard.yml new/libxmlb-0.3.25/.github/workflows/scorecard.yml --- old/libxmlb-0.3.24/.github/workflows/scorecard.yml 2025-09-10 17:14:14.000000000 +0200 +++ new/libxmlb-0.3.25/.github/workflows/scorecard.yml 2026-02-03 14:05:46.000000000 +0100 @@ -37,7 +37,7 @@ persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2 + uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 with: results_file: results.sarif results_format: sarif @@ -59,7 +59,7 @@ # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: SARIF file path: results.sarif @@ -68,6 +68,6 @@ # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5 + uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5 with: sarif_file: results.sarif diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxmlb-0.3.24/NEWS new/libxmlb-0.3.25/NEWS --- old/libxmlb-0.3.24/NEWS 2025-09-10 17:14:14.000000000 +0200 +++ new/libxmlb-0.3.25/NEWS 2026-02-03 14:05:46.000000000 +0100 @@ -1,3 +1,10 @@ +Version 0.3.25 +~~~~~~~~~~~~~~ +Released: 2026-02-03 + +Bugfixes: + - Correctly decompress heavily compressed zstd streams (Richard Hughes) + Version 0.3.24 ~~~~~~~~~~~~~~ Released: 2025-09-10 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxmlb-0.3.24/RELEASE new/libxmlb-0.3.25/RELEASE --- old/libxmlb-0.3.24/RELEASE 2025-09-10 17:14:14.000000000 +0200 +++ new/libxmlb-0.3.25/RELEASE 2026-02-03 14:05:46.000000000 +0100 @@ -2,11 +2,11 @@ 1. Write NEWS entries for libxmlb in the same format as usual. -git shortlog 0.3.23.. | grep -i -v trivial | grep -v Merge > NEWS.new +git shortlog 0.3.24.. | grep -i -v trivial | grep -v Merge > NEWS.new -Version 0.3.24 +Version 0.3.25 ~~~~~~~~~~~~~~ -Released: 2025-xx-xx +Released: 2026-xx-xx New Features: Bugfixes: @@ -15,7 +15,7 @@ Commit changes to git: # MAKE SURE THESE ARE CORRECT -export release_ver="0.3.24" +export release_ver="0.3.25" git commit -a -m "Release libxmlb ${release_ver}" --no-verify git tag -s -f -m "Release libxmlb ${release_ver}" "${release_ver}" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxmlb-0.3.24/meson.build new/libxmlb-0.3.25/meson.build --- old/libxmlb-0.3.24/meson.build 2025-09-10 17:14:14.000000000 +0200 +++ new/libxmlb-0.3.25/meson.build 2026-02-03 14:05:46.000000000 +0100 @@ -1,5 +1,5 @@ project('libxmlb', 'c', - version : '0.3.24', + version : '0.3.25', license : 'LGPL-2.1-or-later', meson_version : '>=0.60.0', default_options : ['warning_level=2', 'c_std=c99'], diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxmlb-0.3.24/src/xb-builder-node.c new/libxmlb-0.3.25/src/xb-builder-node.c --- old/libxmlb-0.3.24/src/xb-builder-node.c 2025-09-10 17:14:14.000000000 +0200 +++ new/libxmlb-0.3.25/src/xb-builder-node.c 2026-02-03 14:05:46.000000000 +0100 @@ -1031,7 +1031,7 @@ /* process the attrs valist */ va_start(args, element); - for (guint i = 0;; i++) { + for (;;) { key = va_arg(args, const gchar *); if (key == NULL) break; @@ -1073,7 +1073,7 @@ /* process the attrs valist */ va_start(args, text); - for (guint i = 0;; i++) { + for (;;) { key = va_arg(args, const gchar *); if (key == NULL) break; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxmlb-0.3.24/src/xb-zstd-decompressor.c new/libxmlb-0.3.25/src/xb-zstd-decompressor.c --- old/libxmlb-0.3.24/src/xb-zstd-decompressor.c 2025-09-10 17:14:14.000000000 +0200 +++ new/libxmlb-0.3.25/src/xb-zstd-decompressor.c 2026-02-03 14:05:46.000000000 +0100 @@ -28,7 +28,8 @@ xb_zstd_decompressor_finalize(GObject *object) { XbZstdDecompressor *self = XB_ZSTD_DECOMPRESSOR(object); - ZSTD_freeDStream(self->zstdstream); + if (self->zstdstream != NULL) + ZSTD_freeDStream(self->zstdstream); G_OBJECT_CLASS(xb_zstd_decompressor_parent_class)->finalize(object); } @@ -89,6 +90,14 @@ }; size_t res; + /* constructor failure */ + if (self->zstdstream == NULL) { + g_set_error_literal(error, + G_IO_ERROR, + G_IO_ERROR_FAILED, + "failed to initialize libzstd"); + return G_CONVERTER_ERROR; + } res = ZSTD_decompressStream(self->zstdstream, &output, &input); if (ZSTD_isError(res)) { g_set_error(error, @@ -102,7 +111,27 @@ *bytes_written = output.pos; /* success */ - return res == 0 ? G_CONVERTER_FINISHED : G_CONVERTER_CONVERTED; + if (res == 0) + return G_CONVERTER_FINISHED; + + /* did nothing, need more input? */ + if (input.pos == 0 && output.pos == 0) { + if (flags & G_CONVERTER_INPUT_AT_END) { + g_set_error_literal(error, + G_IO_ERROR, + G_IO_ERROR_INVALID_DATA, + "unexpected end of zstd stream"); + return G_CONVERTER_ERROR; + } + g_set_error_literal(error, + G_IO_ERROR, + G_IO_ERROR_PARTIAL_INPUT, + "need more zstd data"); + return G_CONVERTER_ERROR; + } + + /* keep going */ + return G_CONVERTER_CONVERTED; } static void
