Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dash for openSUSE:Factory checked in at 2021-12-21 18:40:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dash (Old) and /work/SRC/openSUSE:Factory/.dash.new.2520 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dash" Tue Dec 21 18:40:22 2021 rev:27 rq:941683 version:0.5.11.5 Changes: -------- --- /work/SRC/openSUSE:Factory/dash/dash.changes 2021-06-13 23:05:28.763596562 +0200 +++ /work/SRC/openSUSE:Factory/.dash.new.2520/dash.changes 2021-12-21 18:40:30.109866850 +0100 @@ -1,0 +2,6 @@ +Mon Dec 20 10:46:44 UTC 2021 - Dirk M??ller <dmuel...@suse.com> + +- update to 0.5.11.5: + * parser: Fix VSLENGTH parsing with trailing garbage + +------------------------------------------------------------------- Old: ---- dash-0.5.11.4.tar.gz New: ---- dash-0.5.11.5.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dash.spec ++++++ --- /var/tmp/diff_new_pack.CrZNoa/_old 2021-12-21 18:40:30.581867274 +0100 +++ /var/tmp/diff_new_pack.CrZNoa/_new 2021-12-21 18:40:30.585867277 +0100 @@ -18,7 +18,7 @@ Name: dash -Version: 0.5.11.4 +Version: 0.5.11.5 Release: 0 Summary: POSIX-compliant Implementation of /bin/sh License: BSD-3-Clause ++++++ dash-0.5.11.4.tar.gz -> dash-0.5.11.5.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dash-0.5.11.4/configure new/dash-0.5.11.5/configure --- old/dash-0.5.11.4/configure 2021-06-04 09:50:42.000000000 +0200 +++ new/dash-0.5.11.5/configure 2021-09-03 09:03:45.000000000 +0200 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for dash 0.5.11.4. +# Generated by GNU Autoconf 2.69 for dash 0.5.11.5. # # # Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc. @@ -577,8 +577,8 @@ # Identity of this package. PACKAGE_NAME='dash' PACKAGE_TARNAME='dash' -PACKAGE_VERSION='0.5.11.4' -PACKAGE_STRING='dash 0.5.11.4' +PACKAGE_VERSION='0.5.11.5' +PACKAGE_STRING='dash 0.5.11.5' PACKAGE_BUGREPORT='' PACKAGE_URL='' @@ -1281,7 +1281,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures dash 0.5.11.4 to adapt to many kinds of systems. +\`configure' configures dash 0.5.11.5 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1348,7 +1348,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of dash 0.5.11.4:";; + short | recursive ) echo "Configuration of dash 0.5.11.5:";; esac cat <<\_ACEOF @@ -1451,7 +1451,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -dash configure 0.5.11.4 +dash configure 0.5.11.5 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -2045,7 +2045,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by dash $as_me 0.5.11.4, which was +It was created by dash $as_me 0.5.11.5, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -2908,7 +2908,7 @@ # Define the identity of the package. PACKAGE='dash' - VERSION='0.5.11.4' + VERSION='0.5.11.5' cat >>confdefs.h <<_ACEOF @@ -5523,7 +5523,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by dash $as_me 0.5.11.4, which was +This file was extended by dash $as_me 0.5.11.5, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -5589,7 +5589,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -dash config.status 0.5.11.4 +dash config.status 0.5.11.5 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dash-0.5.11.4/configure.ac new/dash-0.5.11.5/configure.ac --- old/dash-0.5.11.4/configure.ac 2021-06-04 09:49:26.000000000 +0200 +++ new/dash-0.5.11.5/configure.ac 2021-09-03 09:03:16.000000000 +0200 @@ -1,4 +1,4 @@ -AC_INIT([dash],[0.5.11.4]) +AC_INIT([dash],[0.5.11.5]) AM_INIT_AUTOMAKE([foreign subdir-objects]) AC_CONFIG_SRCDIR([src/main.c]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dash-0.5.11.4/src/parser.c new/dash-0.5.11.5/src/parser.c --- old/dash-0.5.11.4/src/parser.c 2021-06-04 05:37:14.000000000 +0200 +++ new/dash-0.5.11.5/src/parser.c 2021-09-03 09:02:45.000000000 +0200 @@ -1262,7 +1262,8 @@ do { STPUTC(c, out); c = pgetc_eatbnl(); - } while (!subtype && is_digit(c)); + } while ((subtype <= 0 || subtype >= VSLENGTH) && + is_digit(c)); } else if (c != '}') { int cc = c; @@ -1322,6 +1323,8 @@ break; } } else { + if (subtype == VSLENGTH && c != '}') + subtype = 0; badsub: pungetc(); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dash-0.5.11.4/src/parser.h new/dash-0.5.11.5/src/parser.h --- old/dash-0.5.11.4/src/parser.h 2018-05-28 11:12:23.000000000 +0200 +++ new/dash-0.5.11.5/src/parser.h 2021-09-03 09:02:45.000000000 +0200 @@ -62,6 +62,7 @@ #define VSTRIMLEFT 0x8 /* ${var#pattern} */ #define VSTRIMLEFTMAX 0x9 /* ${var##pattern} */ #define VSLENGTH 0xa /* ${#var} */ +/* VSLENGTH must come last. */ /* values of checkkwd variable */ #define CHKALIAS 0x1