Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gtkwave for openSUSE:Factory checked in at 2023-03-12 16:24:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gtkwave (Old) and /work/SRC/openSUSE:Factory/.gtkwave.new.31432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gtkwave" Sun Mar 12 16:24:15 2023 rev:33 rq:1070942 version:3.3.114 Changes: -------- --- /work/SRC/openSUSE:Factory/gtkwave/gtkwave.changes 2022-12-25 15:15:29.661590906 +0100 +++ /work/SRC/openSUSE:Factory/.gtkwave.new.31432/gtkwave.changes 2023-03-12 16:26:13.173286256 +0100 @@ -1,0 +2,6 @@ +Sun Jan 22 16:20:29 UTC 2023 - Dirk Müller <dmuel...@suse.com> + +- update to 3.3.114: + * Buffer overflow fixes in FST reader. + +------------------------------------------------------------------- Old: ---- gtkwave-3.3.113.tar.gz New: ---- gtkwave-3.3.114.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gtkwave.spec ++++++ --- /var/tmp/diff_new_pack.Kththt/_old 2023-03-12 16:26:13.645288334 +0100 +++ /var/tmp/diff_new_pack.Kththt/_new 2023-03-12 16:26:13.653288370 +0100 @@ -1,7 +1,7 @@ # # spec file for package gtkwave # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: gtkwave -Version: 3.3.113 +Version: 3.3.114 Release: 0 Summary: Waveform viewer for Ditital Signals License: GPL-2.0-or-later ++++++ gtkwave-3.3.113.tar.gz -> gtkwave-3.3.114.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gtkwave-3.3.113/ChangeLog new/gtkwave-3.3.114/ChangeLog --- old/gtkwave-3.3.113/ChangeLog 2022-10-04 19:21:27.000000000 +0200 +++ new/gtkwave-3.3.114/ChangeLog 2022-11-23 06:52:58.000000000 +0100 @@ -1759,3 +1759,4 @@ VCD reader fixes for unnamed Icarus begin blocks. String data type crash fix in fst.c. 3.3.113 04oct22 Dummy release to keep in sync with gtk3 version. +3.3.114 23nov22 Buffer overflow fixes in FST reader. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gtkwave-3.3.113/LICENSE.TXT new/gtkwave-3.3.114/LICENSE.TXT --- old/gtkwave-3.3.113/LICENSE.TXT 2022-10-04 19:18:57.000000000 +0200 +++ new/gtkwave-3.3.114/LICENSE.TXT 2022-11-23 06:51:38.000000000 +0100 @@ -1,14 +1,14 @@ ########################################################################## -GTKWave 3.3.113 Wave Viewer is Copyright (C) 1999-2022 Tony Bybell. -Portions of GTKWave are Copyright (C) 1999-2022 Udi Finkelstein. -Context support is Copyright (C) 2007-2022 Kermin Elliott Fleming. -Trace group support is Copyright (C) 2009-2022 Donald Baltus. -GHW and additional GUI support is Copyright (C) 2005-2022 Tristan Gingold. -Analog support is Copyright (C) 2005-2022 Thomas Sailer. -External DnD support is Copyright (C) 2008-2022 Concept Engineering GmbH. -FastLZ is Copyright (C) 2005-2022 Ariya Hidayat. -LZ4 is Copyright (C) 2011-2022 Yann Collet. +GTKWave 3.3.114 Wave Viewer is Copyright (C) 1999-2023 Tony Bybell. +Portions of GTKWave are Copyright (C) 1999-2023 Udi Finkelstein. +Context support is Copyright (C) 2007-2023 Kermin Elliott Fleming. +Trace group support is Copyright (C) 2009-2023 Donald Baltus. +GHW and additional GUI support is Copyright (C) 2005-2023 Tristan Gingold. +Analog support is Copyright (C) 2005-2023 Thomas Sailer. +External DnD support is Copyright (C) 2008-2023 Concept Engineering GmbH. +FastLZ is Copyright (C) 2005-2023 Ariya Hidayat. +LZ4 is Copyright (C) 2011-2023 Yann Collet. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gtkwave-3.3.113/configure new/gtkwave-3.3.114/configure --- old/gtkwave-3.3.113/configure 2022-10-04 19:19:42.000000000 +0200 +++ new/gtkwave-3.3.114/configure 2022-11-23 06:54:17.000000000 +0100 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for gtkwave 3.3.113. +# Generated by GNU Autoconf 2.69 for gtkwave 3.3.114. # # Report bugs to <byb...@rocketmail.com>. # @@ -580,8 +580,8 @@ # Identity of this package. PACKAGE_NAME='gtkwave' PACKAGE_TARNAME='gtkwave' -PACKAGE_VERSION='3.3.113' -PACKAGE_STRING='gtkwave 3.3.113' +PACKAGE_VERSION='3.3.114' +PACKAGE_STRING='gtkwave 3.3.114' PACKAGE_BUGREPORT='byb...@rocketmail.com' PACKAGE_URL='' @@ -1405,7 +1405,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures gtkwave 3.3.113 to adapt to many kinds of systems. +\`configure' configures gtkwave 3.3.114 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1471,7 +1471,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of gtkwave 3.3.113:";; + short | recursive ) echo "Configuration of gtkwave 3.3.114:";; esac cat <<\_ACEOF @@ -1630,7 +1630,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -gtkwave configure 3.3.113 +gtkwave configure 3.3.114 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -2274,7 +2274,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by gtkwave $as_me 3.3.113, which was +It was created by gtkwave $as_me 3.3.114, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -3141,7 +3141,7 @@ # Define the identity of the package. PACKAGE='gtkwave' - VERSION='3.3.113' + VERSION='3.3.114' cat >>confdefs.h <<_ACEOF @@ -11499,7 +11499,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by gtkwave $as_me 3.3.113, which was +This file was extended by gtkwave $as_me 3.3.114, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -11565,7 +11565,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -gtkwave config.status 3.3.113 +gtkwave config.status 3.3.114 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gtkwave-3.3.113/configure.ac new/gtkwave-3.3.114/configure.ac --- old/gtkwave-3.3.113/configure.ac 2022-10-04 19:18:49.000000000 +0200 +++ new/gtkwave-3.3.114/configure.ac 2022-11-23 06:51:50.000000000 +0100 @@ -2,7 +2,7 @@ # Process this file with autoconf to produce a configure script. AC_PREREQ(2.59) -AC_INIT(gtkwave, 3.3.113, byb...@rocketmail.com) +AC_INIT(gtkwave, 3.3.114, byb...@rocketmail.com) AC_CONFIG_SRCDIR([src/vcd.c]) AM_INIT_AUTOMAKE AC_CONFIG_HEADER([config.h]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gtkwave-3.3.113/contrib/bundle_for_osx/Info-gtkwave.plist new/gtkwave-3.3.114/contrib/bundle_for_osx/Info-gtkwave.plist --- old/gtkwave-3.3.113/contrib/bundle_for_osx/Info-gtkwave.plist 2022-10-04 19:19:18.000000000 +0200 +++ new/gtkwave-3.3.114/contrib/bundle_for_osx/Info-gtkwave.plist 2022-11-23 06:52:33.000000000 +0100 @@ -8,7 +8,7 @@ <key>CFBundleExecutable</key> <string>gtkwave</string> <key>CFBundleGetInfoString</key> - <string>3.3.113, (C) 1999-2022 Tony Bybell http://gtkwave.sourceforge.net</string> + <string>3.3.114, (C) 1999-2023 Tony Bybell http://gtkwave.sourceforge.net</string> <key>CFBundleIconFile</key> <string>gtkwave.icns</string> <key>CFBundleIdentifier</key> @@ -18,13 +18,13 @@ <key>CFBundlePackageType</key> <string>APPL</string> <key>CFBundleShortVersionString</key> - <string>3.3.113</string> + <string>3.3.114</string> <key>CFBundleSignature</key> <string>????</string> <key>CFBundleVersion</key> - <string>3.3.113</string> + <string>3.3.114</string> <key>NSHumanReadableCopyright</key> - <string>Copyright 1999 - 2022 Tony Bybell, GNU General Public License.</string> + <string>Copyright 1999 - 2023 Tony Bybell, GNU General Public License.</string> <key>LSMinimumSystemVersion</key> <string>10.6</string> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gtkwave-3.3.113/src/helpers/fst/fstapi.c new/gtkwave-3.3.114/src/helpers/fst/fstapi.c --- old/gtkwave-3.3.113/src/helpers/fst/fstapi.c 2022-10-04 06:23:06.000000000 +0200 +++ new/gtkwave-3.3.114/src/helpers/fst/fstapi.c 2022-11-23 06:51:59.000000000 +0100 @@ -1,5 +1,5 @@ /* - * Copyright (c) 2009-2018 Tony Bybell. + * Copyright (c) 2009-2023 Tony Bybell. * * Permission is hereby granted, free of charge, to any person obtaining a * copy of this software and associated documentation files (the "Software"), @@ -140,7 +140,7 @@ #include <sys/sysctl.h> #endif -#if defined(FST_MACOSX) || defined(__MINGW32__) || defined(__OpenBSD__) || defined(__FreeBSD__) +#if defined(FST_MACOSX) || defined(__MINGW32__) || defined(__OpenBSD__) || defined(__FreeBSD__) || defined(__NetBSD__) #define FST_UNBUFFERED_IO #endif @@ -4130,26 +4130,35 @@ if(!(isfeof=feof(xc->fh))) { int tag = fgetc(xc->fh); + int cl; switch(tag) { case FST_ST_VCD_SCOPE: xc->hier.htyp = FST_HT_SCOPE; xc->hier.u.scope.typ = fgetc(xc->fh); xc->hier.u.scope.name = pnt = xc->str_scope_nam; + cl = 0; while((ch = fgetc(xc->fh))) { - *(pnt++) = ch; + if(cl <= FST_ID_NAM_SIZ) + { + pnt[cl++] = ch; + } }; /* scopename */ - *pnt = 0; - xc->hier.u.scope.name_length = pnt - xc->hier.u.scope.name; + pnt[cl] = 0; + xc->hier.u.scope.name_length = cl; xc->hier.u.scope.component = pnt = xc->str_scope_comp; + cl = 0; while((ch = fgetc(xc->fh))) { - *(pnt++) = ch; + if(cl <= FST_ID_NAM_SIZ) + { + pnt[cl++] = ch; + } }; /* scopecomp */ - *pnt = 0; - xc->hier.u.scope.component_length = pnt - xc->hier.u.scope.component; + pnt[cl] = 0; + xc->hier.u.scope.component_length = cl; break; case FST_ST_VCD_UPSCOPE: @@ -4161,12 +4170,16 @@ xc->hier.u.attr.typ = fgetc(xc->fh); xc->hier.u.attr.subtype = fgetc(xc->fh); xc->hier.u.attr.name = pnt = xc->str_scope_nam; + cl = 0; while((ch = fgetc(xc->fh))) { - *(pnt++) = ch; + if(cl <= FST_ID_NAM_SIZ) + { + pnt[cl++] = ch; + } }; /* scopename */ - *pnt = 0; - xc->hier.u.attr.name_length = pnt - xc->hier.u.scope.name; + pnt[cl] = 0; + xc->hier.u.attr.name_length = cl; xc->hier.u.attr.arg = fstReaderVarint64(xc->fh); @@ -4221,12 +4234,16 @@ xc->hier.u.var.typ = tag; xc->hier.u.var.direction = fgetc(xc->fh); xc->hier.u.var.name = pnt = xc->str_scope_nam; + cl = 0; while((ch = fgetc(xc->fh))) { - *(pnt++) = ch; + if(cl <= FST_ID_NAM_SIZ) + { + pnt[cl++] = ch; + } }; /* varname */ - *pnt = 0; - xc->hier.u.var.name_length = pnt - xc->hier.u.var.name; + pnt[cl] = 0; + xc->hier.u.var.name_length = cl; xc->hier.u.var.length = fstReaderVarint32(xc->fh); if(tag == FST_VT_VCD_PORT) { @@ -4273,6 +4290,7 @@ int attrtype, subtype; uint64_t attrarg; fstHandle maxhandle_scanbuild; +int cl; if(!xc) return(0); @@ -4355,11 +4373,15 @@ scopetype = fgetc(xc->fh); if((scopetype < FST_ST_MIN) || (scopetype > FST_ST_MAX)) scopetype = FST_ST_VCD_MODULE; pnt = str; + cl = 0; while((ch = fgetc(xc->fh))) { - *(pnt++) = ch; + if(cl <= FST_ID_NAM_ATTR_SIZ) + { + pnt[cl++] = ch; + } }; /* scopename */ - *pnt = 0; + pnt[cl] = 0; while(fgetc(xc->fh)) { }; /* scopecomp */ if(fv) fprintf(fv, "$scope %s %s $end\n", modtypes[scopetype], str); @@ -4373,11 +4395,15 @@ attrtype = fgetc(xc->fh); subtype = fgetc(xc->fh); pnt = str; + cl = 0; while((ch = fgetc(xc->fh))) { - *(pnt++) = ch; + if(cl <= FST_ID_NAM_ATTR_SIZ) + { + pnt[cl++] = ch; + } }; /* attrname */ - *pnt = 0; + pnt[cl] = 0; if(!str[0]) { strcpy(str, "\"\""); } @@ -4458,11 +4484,15 @@ vartype = tag; /* vardir = */ fgetc(xc->fh); /* unused in VCD reader, but need to advance read pointer */ pnt = str; + cl = 0; while((ch = fgetc(xc->fh))) { - *(pnt++) = ch; + if(cl <= FST_ID_NAM_ATTR_SIZ) + { + pnt[cl++] = ch; + } }; /* varname */ - *pnt = 0; + pnt[cl] = 0; len = fstReaderVarint32(xc->fh); alias = fstReaderVarint32(xc->fh); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/gtkwave-3.3.113/src/version.h new/gtkwave-3.3.114/src/version.h --- old/gtkwave-3.3.113/src/version.h 2022-10-04 19:19:32.000000000 +0200 +++ new/gtkwave-3.3.114/src/version.h 2022-11-23 06:54:39.000000000 +0100 @@ -1,5 +1,5 @@ /* - * Copyright (c) Tony Bybell 2010-2022. + * Copyright (c) Tony Bybell 2010-2023. * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License @@ -10,6 +10,6 @@ #ifndef WAVE_VERSION_H #define WAVE_VERSION_H -#define WAVE_VERSION_INFO "GTKWave Analyzer v" PACKAGE_VERSION " (w)1999-2022 BSI" +#define WAVE_VERSION_INFO "GTKWave Analyzer v" PACKAGE_VERSION " (w)1999-2023 BSI" #endif