upgrade version to 1.42.0

(cherry picked from commit 72c55ed022b5d0f5b6ca4d4c05402c79cd486db9)
This commit is contained in:
wk333 2022-03-24 16:52:17 +08:00 committed by openeuler-sync-bot
parent c31791df1f
commit 6d1d67e89c
5 changed files with 7 additions and 59 deletions

View File

@ -1,41 +0,0 @@
From 0e6e8620496dff0eb285589ef1e37a7f407f3ddd Mon Sep 17 00:00:00 2001
From: Ben Noordhuis <info@bnoordhuis.nl>
Date: Mon, 24 Aug 2020 11:42:27 +0200
Subject: [PATCH] unix: don't use _POSIX_PATH_MAX
Libuv was using _POSIX_PATH_MAX wrong. Bug introduced in commit b56d279b
("unix: do not require PATH_MAX to be defined") from September 2018.
_POSIX_PATH_MAX is the minimum max path size guaranteed by POSIX, not
the actual max path size of the system libuv runs on. _POSIX_PATH_MAX
is always 256, the real max is often much bigger.
This commit fixes buffer overruns when processing very long paths in
uv_fs_readlink() and uv_fs_realpath() because libuv was not allocating
enough memory to store the result.
Fixes: https://github.com/libuv/libuv/issues/2965
PR-URL: https://github.com/libuv/libuv/pull/2966
Reviewed-By: Richard Lau <riclau@uk.ibm.com>
Reviewed-By: Santiago Gimeno <santiago.gimeno@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Jameson Nash <vtjnash@gmail.com>
---
src/unix/internal.h | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/src/unix/internal.h b/src/unix/internal.h
index 30711673e0..9d3c2297f8 100644
--- a/src/unix/internal.h
+++ b/src/unix/internal.h
@@ -62,9 +62,7 @@
# include <AvailabilityMacros.h>
#endif
-#if defined(_POSIX_PATH_MAX)
-# define UV__PATH_MAX _POSIX_PATH_MAX
-#elif defined(PATH_MAX)
+#if defined(PATH_MAX)
# define UV__PATH_MAX PATH_MAX
#else
# define UV__PATH_MAX 8192

Binary file not shown.

BIN
libuv-v1.42.0.tar.gz Normal file

Binary file not shown.

View File

@ -1,11 +0,0 @@
prefix=@prefix@
exec_prefix=@exec_prefix@
libdir=@libdir@
includedir=@includedir@
Name: libuv
Description: Development libraries for libuv
Version: @version@
Libs: -L${libdir} -luv -lrt -lpthread -lnsl -ldl
Cflags: -I{includedir}
URL: http://libuv.org/

View File

@ -1,15 +1,13 @@
Name: libuv
Epoch: 1
Version: 1.38.1
Release: 2
Version: 1.42.0
Release: 1
Summary: A multi-platform support library with a focus on asynchronous I/O
# the licensing breakdown is described in detail in the LICENSE file
License: MIT and BSD and ISC
# from README.md
License: MIT and CC-BY-4.0
URL: http://libuv.org/
Source0: http://dist.libuv.org/dist/v%{version}/%{name}-v%{version}.tar.gz
Source2: %{name}.pc.in
Patch0: CVE-2020-8252.patch
BuildRequires: autoconf automake libtool gcc
@ -29,7 +27,6 @@ Development libraries for libuv
%package_help
%prep
%autosetup -p1 -n %{name}-v%{version}
@ -61,6 +58,9 @@ Development libraries for libuv
%doc ChangeLog
%changelog
* Thu Mar 24 2022 wangkai <wangkai385@huawei.com> - 1.42.0-1
- upgrade version to 1.42.0
* Mon Dec 14 2020 wangxiao <wangxiao65@huawei.com> - 1.38.1-2
- fix CVE-2020-8252