Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package mariadb-connector-c for
openSUSE:Factory checked in at 2026-09-08 16:51:28
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mariadb-connector-c (Old)
and /work/SRC/openSUSE:Factory/.mariadb-connector-c.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mariadb-connector-c"
Tue Sep 8 16:51:28 2026 rev:56 rq:1376197 version:3.4.9
Changes:
--------
--- /work/SRC/openSUSE:Factory/mariadb-connector-c/mariadb-connector-c.changes
2026-06-23 17:35:23.710837161 +0200
+++
/work/SRC/openSUSE:Factory/.mariadb-connector-c.new.1265/mariadb-connector-c.changes
2026-09-08 16:51:30.865416866 +0200
@@ -1,0 +2,5 @@
+Mon Sep 7 14:53:05 UTC 2026 - Adam Majer <[email protected]>
+
+- ead038d.patch: fix regresssion in mysql_stmt_bind_result (bsc#1273612)
+
+-------------------------------------------------------------------
@@ -6,0 +12,2 @@
+ * Fix CVE-2026-44172, mysql_real_escape_string() incorrectly handled
+ big5 (bsc#1266438)
New:
----
_scmsync.obsinfo
build.specials.obscpio
ead038d.patch
----------(New B)----------
New:
- ead038d.patch: fix regresssion in mysql_stmt_bind_result (bsc#1273612)
----------(New E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ mariadb-connector-c.spec ++++++
--- /var/tmp/diff_new_pack.QJXSmV/_old 2026-09-08 16:51:31.584447001 +0200
+++ /var/tmp/diff_new_pack.QJXSmV/_new 2026-09-08 16:51:31.586447085 +0200
@@ -35,6 +35,7 @@
# Imported from keyserver based on keyid @
https://mariadb.com/kb/en/mariadb-enterprise/mariadb-enterprise-installation-guide/
Source2: mariadb.keyring
Source3: baselibs.conf
+Patch1: ead038d.patch
Patch4: private_library.patch
BuildRequires: cmake
BuildRequires: curl-devel
++++++ _scmsync.obsinfo ++++++
mtime: 1788792828
commit: faf83b36f8679863299144fc1c5a6fc22e9616449f99d79d2da143fcb3e96d39
url: https://src.opensuse.org/adamm/mariadb-connector-c
revision: main
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-09-07 16:53:48.000000000 +0200
@@ -0,0 +1,4 @@
+*.obscpio
+*.osc
+_build.*
+.pbuild
++++++ ead038d.patch ++++++
>From ead038dc8a2b3d7819f87af33e14f105325f8cf9 Mon Sep 17 00:00:00 2001
From: Georg Richter <[email protected]>
Date: Thu, 3 Sep 2026 11:58:38 +0200
Subject: [PATCH] CONC-821: Avoid resetting length pointer for variable-length
types in mysql_stmt_bind_result
Prior fix for CONC-821 initialized the length pointer (*bind->length)
to 0 during mysql_stmt_bind_result() for variable-length types (strings,
blobs, etc.).
This broke third-party drivers and applications (e.g. Perl DBD::MariaDB,
Qt, and others) that perform a re-bind step after fetching data but prior
to reading/copying the bind buffer, as re-binding zeroed out the fetched
length prematurely.
Fix this regression by leaving the length pointer untouched during result
binding for non-fixed-sized types.
---
libmariadb/mariadb_stmt.c | 10 ++--
unittest/libmariadb/ps_bugs.c | 106 ++++++++++++++++++++--------------
2 files changed, 69 insertions(+), 47 deletions(-)
Index: mariadb-connector-c-3.4.9-src/libmariadb/mariadb_stmt.c
===================================================================
--- mariadb-connector-c-3.4.9-src.orig/libmariadb/mariadb_stmt.c
+++ mariadb-connector-c-3.4.9-src/libmariadb/mariadb_stmt.c
@@ -1442,7 +1442,9 @@ my_bool STDCALL mysql_stmt_bind_result(M
{
*stmt->bind[i].length= stmt->bind[i].length_value=
mysql_ps_fetch_functions[stmt->bind[i].buffer_type].pack_len;
} else {
- *stmt->bind[i].length= stmt->bind[i].length_value= 0;
+ /* CONC-821: We don't initialize length for variable length types to avoid
+ problems with applications which rebind before
storing/copying retrieved
+ values from bind buffer */
}
/* set length values for numeric types */
Index: mariadb-connector-c-3.4.9-src/unittest/libmariadb/ps_bugs.c
===================================================================
--- mariadb-connector-c-3.4.9-src.orig/unittest/libmariadb/ps_bugs.c
+++ mariadb-connector-c-3.4.9-src/unittest/libmariadb/ps_bugs.c
@@ -6035,7 +6035,7 @@ static int test_conc762(MYSQL *mysql)
mysql_stmt_fetch(stmt);
FAIL_IF(is_null[0]==0, "Expected NULL value");
FAIL_IF(is_null[1]==1, "Expected non-NULL value");
- FAIL_IF(length[0]!=0, "Expected length=0");
+ FAIL_IF(length[0]!=1, "Expected length=1 (unchanged)");
FAIL_IF(length[1]!=3, "Expected length=3");
mysql_stmt_fetch(stmt);
@@ -6063,7 +6063,8 @@ static int test_conc762(MYSQL *mysql)
check_stmt_rc(rc, stmt);
mysql_stmt_fetch(stmt);
- FAIL_IF(length[0]!=0, "Expected length=0");
+ FAIL_IF(length[0]==0, "Expected length>0 (untouched)");
+ FAIL_IF(is_null[0]==0, "Expected null indicator");
mysql_stmt_close(stmt);
return OK;
