Hello community, here is the log from the commit of package xmlrpc-c for openSUSE:Factory checked in at 2015-11-18 22:34:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xmlrpc-c (Old) and /work/SRC/openSUSE:Factory/.xmlrpc-c.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xmlrpc-c" Changes: -------- --- /work/SRC/openSUSE:Factory/xmlrpc-c/xmlrpc-c.changes 2015-04-21 10:53:31.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.xmlrpc-c.new/xmlrpc-c.changes 2015-11-18 22:34:46.000000000 +0100 @@ -1,0 +2,9 @@ +Tue Nov 17 12:20:54 UTC 2015 - [email protected] + +- Update to 1.3.18 + * Fix bug: infinite recursion if you try to format a floating + point value that was created from something other than a + finite number. Creation of a floating point XML-RPC value from + something other than a number now fails. + +------------------------------------------------------------------- Old: ---- xmlrpc-c-1.33.17.tgz New: ---- xmlrpc-c-1.33.18.tgz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xmlrpc-c.spec ++++++ --- /var/tmp/diff_new_pack.bezOJI/_old 2015-11-18 22:34:47.000000000 +0100 +++ /var/tmp/diff_new_pack.bezOJI/_new 2015-11-18 22:34:47.000000000 +0100 @@ -19,7 +19,7 @@ %define soname 3 %define soname_cpp 8 Name: xmlrpc-c -Version: 1.33.17 +Version: 1.33.18 Release: 0 Summary: Library implementing XML-based Remote Procedure Calls License: BSD-3-Clause and MIT ++++++ xmlrpc-c-1.33.17.tgz -> xmlrpc-c-1.33.18.tgz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/xmlrpc-c-1.33.17/src/xmlrpc_data.c new/xmlrpc-c-1.33.18/src/xmlrpc_data.c --- old/xmlrpc-c-1.33.17/src/xmlrpc_data.c 2014-12-28 19:55:09.000000000 +0100 +++ new/xmlrpc-c-1.33.18/src/xmlrpc_data.c 2015-09-23 04:51:43.000000000 +0200 @@ -6,6 +6,7 @@ #include <stdlib.h> #include <stdarg.h> #include <string.h> +#include <math.h> #include "bool.h" #include "mallocvar.h" @@ -440,11 +441,16 @@ xmlrpc_value * valP; - xmlrpc_createXmlrpcValue(envP, &valP); + if (!finite(value)) + xmlrpc_faultf(envP, "Value is not a finite number, " + "so cannot be represented in XML-RPC"); + else { + xmlrpc_createXmlrpcValue(envP, &valP); - if (!envP->fault_occurred) { - valP->_type = XMLRPC_TYPE_DOUBLE; - valP->_value.d = value; + if (!envP->fault_occurred) { + valP->_type = XMLRPC_TYPE_DOUBLE; + valP->_value.d = value; + } } return valP; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/xmlrpc-c-1.33.17/version.mk new/xmlrpc-c-1.33.18/version.mk --- old/xmlrpc-c-1.33.17/version.mk 2015-03-15 08:08:11.000000000 +0100 +++ new/xmlrpc-c-1.33.18/version.mk 2015-09-23 04:51:43.000000000 +0200 @@ -8,4 +8,4 @@ ############################################################################### XMLRPC_MAJOR_RELEASE = 1 XMLRPC_MINOR_RELEASE = 33 -XMLRPC_POINT_RELEASE = 17 +XMLRPC_POINT_RELEASE = 18
