!19 [sync] PR-16: upgrade version to 1.42.0
From: @openeuler-sync-bot Reviewed-by: @small_leek Signed-off-by: @small_leek
This commit is contained in:
commit
2d43fea40f
@ -1,41 +0,0 @@
|
||||
From 0e6e8620496dff0eb285589ef1e37a7f407f3ddd Mon Sep 17 00:00:00 2001
|
||||
From: Ben Noordhuis <info@bnoordhuis.nl>
|
||||
Date: Mon, 24 Aug 2020 11:42:27 +0200
|
||||
Subject: [PATCH] unix: don't use _POSIX_PATH_MAX
|
||||
|
||||
Libuv was using _POSIX_PATH_MAX wrong. Bug introduced in commit b56d279b
|
||||
("unix: do not require PATH_MAX to be defined") from September 2018.
|
||||
|
||||
_POSIX_PATH_MAX is the minimum max path size guaranteed by POSIX, not
|
||||
the actual max path size of the system libuv runs on. _POSIX_PATH_MAX
|
||||
is always 256, the real max is often much bigger.
|
||||
|
||||
This commit fixes buffer overruns when processing very long paths in
|
||||
uv_fs_readlink() and uv_fs_realpath() because libuv was not allocating
|
||||
enough memory to store the result.
|
||||
|
||||
Fixes: https://github.com/libuv/libuv/issues/2965
|
||||
PR-URL: https://github.com/libuv/libuv/pull/2966
|
||||
Reviewed-By: Richard Lau <riclau@uk.ibm.com>
|
||||
Reviewed-By: Santiago Gimeno <santiago.gimeno@gmail.com>
|
||||
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
|
||||
Reviewed-By: Jameson Nash <vtjnash@gmail.com>
|
||||
---
|
||||
src/unix/internal.h | 4 +---
|
||||
1 file changed, 1 insertion(+), 3 deletions(-)
|
||||
|
||||
diff --git a/src/unix/internal.h b/src/unix/internal.h
|
||||
index 30711673e0..9d3c2297f8 100644
|
||||
--- a/src/unix/internal.h
|
||||
+++ b/src/unix/internal.h
|
||||
@@ -62,9 +62,7 @@
|
||||
# include <AvailabilityMacros.h>
|
||||
#endif
|
||||
|
||||
-#if defined(_POSIX_PATH_MAX)
|
||||
-# define UV__PATH_MAX _POSIX_PATH_MAX
|
||||
-#elif defined(PATH_MAX)
|
||||
+#if defined(PATH_MAX)
|
||||
# define UV__PATH_MAX PATH_MAX
|
||||
#else
|
||||
# define UV__PATH_MAX 8192
|
||||
Binary file not shown.
BIN
libuv-v1.42.0.tar.gz
Normal file
BIN
libuv-v1.42.0.tar.gz
Normal file
Binary file not shown.
11
libuv.pc.in
11
libuv.pc.in
@ -1,11 +0,0 @@
|
||||
prefix=@prefix@
|
||||
exec_prefix=@exec_prefix@
|
||||
libdir=@libdir@
|
||||
includedir=@includedir@
|
||||
|
||||
Name: libuv
|
||||
Description: Development libraries for libuv
|
||||
Version: @version@
|
||||
Libs: -L${libdir} -luv -lrt -lpthread -lnsl -ldl
|
||||
Cflags: -I{includedir}
|
||||
URL: http://libuv.org/
|
||||
14
libuv.spec
14
libuv.spec
@ -1,15 +1,13 @@
|
||||
Name: libuv
|
||||
Epoch: 1
|
||||
Version: 1.38.1
|
||||
Release: 2
|
||||
Version: 1.42.0
|
||||
Release: 1
|
||||
Summary: A multi-platform support library with a focus on asynchronous I/O
|
||||
|
||||
# the licensing breakdown is described in detail in the LICENSE file
|
||||
License: MIT and BSD and ISC
|
||||
# from README.md
|
||||
License: MIT and CC-BY-4.0
|
||||
URL: http://libuv.org/
|
||||
Source0: http://dist.libuv.org/dist/v%{version}/%{name}-v%{version}.tar.gz
|
||||
Source2: %{name}.pc.in
|
||||
Patch0: CVE-2020-8252.patch
|
||||
|
||||
BuildRequires: autoconf automake libtool gcc
|
||||
|
||||
@ -29,7 +27,6 @@ Development libraries for libuv
|
||||
|
||||
%package_help
|
||||
|
||||
|
||||
%prep
|
||||
%autosetup -p1 -n %{name}-v%{version}
|
||||
|
||||
@ -61,6 +58,9 @@ Development libraries for libuv
|
||||
%doc ChangeLog
|
||||
|
||||
%changelog
|
||||
* Thu Mar 24 2022 wangkai <wangkai385@huawei.com> - 1.42.0-1
|
||||
- upgrade version to 1.42.0
|
||||
|
||||
* Mon Dec 14 2020 wangxiao <wangxiao65@huawei.com> - 1.38.1-2
|
||||
- fix CVE-2020-8252
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user