Hello community, here is the log from the commit of package libsoup for openSUSE:Factory checked in at 2019-09-17 13:34:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libsoup (Old) and /work/SRC/openSUSE:Factory/.libsoup.new.7948 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libsoup" Tue Sep 17 13:34:06 2019 rev:116 rq:730445 version:2.66.3 Changes: -------- --- /work/SRC/openSUSE:Factory/libsoup/libsoup.changes 2019-05-22 10:56:10.838998060 +0200 +++ /work/SRC/openSUSE:Factory/.libsoup.new.7948/libsoup.changes 2019-09-17 13:34:16.601872825 +0200 @@ -1,0 +2,8 @@ +Wed Sep 11 15:01:17 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 2.66.3: + + docs: various gtk-doc fixes. + + SoupServer: Fixes to Windows path handling. +- Update options passed to meson following upstream changes. + +------------------------------------------------------------------- Old: ---- libsoup-2.66.2.tar.xz New: ---- libsoup-2.66.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libsoup.spec ++++++ --- /var/tmp/diff_new_pack.n6jjzA/_old 2019-09-17 13:34:18.461872528 +0200 +++ /var/tmp/diff_new_pack.n6jjzA/_new 2019-09-17 13:34:18.465872527 +0200 @@ -17,7 +17,7 @@ Name: libsoup -Version: 2.66.2 +Version: 2.66.3 Release: 0 Summary: HTTP client/server library for GNOME License: LGPL-2.1-or-later @@ -122,7 +122,7 @@ -Dgssapi=true \ -Dkrb5_config='%{_libexecdir}/mit/bin/krb5-config' \ -Dvapi=true \ - -Ddoc=true \ + -Dgtk_doc=true \ %{nil} %meson_build ++++++ libsoup-2.66.2.tar.xz -> libsoup-2.66.3.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsoup-2.66.2/NEWS new/libsoup-2.66.3/NEWS --- old/libsoup-2.66.2/NEWS 2019-05-15 15:36:29.000000000 +0200 +++ new/libsoup-2.66.3/NEWS 2019-09-11 15:53:38.000000000 +0200 @@ -1,3 +1,9 @@ +Changes in libsoup from 2.66.2 to 2.66.3: + + * docs: varios gtk-doc fixes [Claudio Saavedra] + + * SoupServer: Fixes to Windows path handling [Ignacio Casal Quinteiro] + Changes in libsoup from 2.66.1 to 2.66.2: * Make gettext optional (might not be available in Windows) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsoup-2.66.2/docs/reference/meson.build new/libsoup-2.66.3/docs/reference/meson.build --- old/libsoup-2.66.2/docs/reference/meson.build 2019-05-15 15:36:29.000000000 +0200 +++ new/libsoup-2.66.3/docs/reference/meson.build 2019-09-11 15:53:38.000000000 +0200 @@ -55,8 +55,9 @@ gnome.gtkdoc('libsoup-2.4', main_sgml : 'libsoup-2.4-docs.sgml', - src_dir : join_paths(meson.source_root(), 'libsoup'), + src_dir : srcdir, ignore_headers : ignore_headers, + namespace : 'soup', mkdb_args : mkdb_args, scan_args : scan_args, dependencies : libsoup_dep, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsoup-2.66.2/libsoup/soup-server.c new/libsoup-2.66.3/libsoup/soup-server.c --- old/libsoup-2.66.2/libsoup/soup-server.c 2019-05-15 15:36:29.000000000 +0200 +++ new/libsoup-2.66.3/libsoup/soup-server.c 2019-09-11 15:53:38.000000000 +0200 @@ -1303,7 +1303,15 @@ decoded_path = soup_uri_decode (uri->path); if (strstr (decoded_path, "/../") || - g_str_has_suffix (decoded_path, "/..")) { + g_str_has_suffix (decoded_path, "/..") +#ifdef G_OS_WIN32 + || + strstr (decoded_path, "\\..\\") || + strstr (decoded_path, "/..\\") || + strstr (decoded_path, "\\../") || + g_str_has_suffix (decoded_path, "\\..") +#endif + ) { /* Introducing new ".." segments is not allowed */ g_free (decoded_path); soup_message_set_status (msg, SOUP_STATUS_BAD_REQUEST); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsoup-2.66.2/meson.build new/libsoup-2.66.3/meson.build --- old/libsoup-2.66.2/meson.build 2019-05-15 15:36:29.000000000 +0200 +++ new/libsoup-2.66.3/meson.build 2019-09-11 15:53:38.000000000 +0200 @@ -1,5 +1,5 @@ project('libsoup', 'c', - version: '2.66.2', + version: '2.66.3', meson_version : '>=0.48', license : 'LGPL2', default_options : 'c_std=c89') @@ -321,6 +321,7 @@ subdir('tests') endif -if get_option('doc') +if get_option('gtk_doc') + srcdir = include_directories('libsoup') subdir('docs/reference') endif diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsoup-2.66.2/meson_options.txt new/libsoup-2.66.3/meson_options.txt --- old/libsoup-2.66.2/meson_options.txt 2019-05-15 15:36:29.000000000 +0200 +++ new/libsoup-2.66.3/meson_options.txt 2019-09-11 15:53:38.000000000 +0200 @@ -46,7 +46,7 @@ description : 'Build Vala bindings' ) -option('doc', +option('gtk_doc', type: 'boolean', value: false, description: 'Enable generating the API reference' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsoup-2.66.2/tests/server-test.c new/libsoup-2.66.3/tests/server-test.c --- old/libsoup-2.66.2/tests/server-test.c 2019-05-15 15:36:29.000000000 +0200 +++ new/libsoup-2.66.3/tests/server-test.c 2019-09-11 15:53:38.000000000 +0200 @@ -275,6 +275,72 @@ soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); g_object_unref (msg); + uri = soup_uri_new_with_base (sd->base_uri, "/%2e%2e%2ftest"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); + +#ifdef G_OS_WIN32 + uri = soup_uri_new_with_base (sd->base_uri, "\\..%5Ctest"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); + + uri = soup_uri_new_with_base (sd->base_uri, "\\../test"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); + + uri = soup_uri_new_with_base (sd->base_uri, "%5C..%2ftest"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); + + uri = soup_uri_new_with_base (sd->base_uri, "/..\\test"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); + + uri = soup_uri_new_with_base (sd->base_uri, "%2f..%5Ctest"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); + + uri = soup_uri_new_with_base (sd->base_uri, "\\%2e%2e%5ctest"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); + + uri = soup_uri_new_with_base (sd->base_uri, "\\..%%35%63..%%35%63test"); + msg = soup_message_new_from_uri ("GET", uri); + soup_uri_free (uri); + + soup_session_send_message (session, msg); + soup_test_assert_message_status (msg, SOUP_STATUS_BAD_REQUEST); + g_object_unref (msg); +#endif + soup_test_session_abort_unref (session); }
