From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Zdenek Dohnal To: git-commits@fedoraproject.org Subject: [rpms/hplip] f43: Fix more leaks after CVE-2026-8632 fix Date: Mon, 22 Jun 2026 13:09:44 GMT Message-ID: <178213378426.1.3129524836930745169.rpms-hplip-0a47faa5bb68@fedoraproject.org> List-ID: X-Git-Repo: rpms/hplip X-Git-Branch: f43 X-Git-Rev: 0a47faa5bb680e205590af0f06f4e598124ee304 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvaHBsaXAKQnJhbmNo IDogZjQzCkNvbW1pdCA6IDBhNDdmYWE1YmI2ODBlMjA1NTkwYWYwZjA2ZjRlNTk4MTI0ZWUzMDQK QXV0aG9yIDogWmRlbmVrIERvaG5hbCA8emRvaG5hbEByZWRoYXQuY29tPgpEYXRlICAgOiAyMDI2 LTA2LTE1VDEzOjAwOjIwKzAyOjAwClN0YXRzICA6ICs2NS8tMiBpbiAyIGZpbGUocykKVVJMICAg IDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9ocGxpcC9jLzBhNDdmYWE1YmI2 ODBlMjA1NTkwYWYwZjA2ZjRlNTk4MTI0ZWUzMDQ/YnJhbmNoPWY0MwoKTG9nOgpGaXggbW9yZSBs ZWFrcyBhZnRlciBDVkUtMjAyNi04NjMyIGZpeAoKLS0tCmRpZmYgLS1naXQgYS9ocGxpcC1DVkUt MjAyNi04NjMxLW9zaC5wYXRjaCBiL2hwbGlwLUNWRS0yMDI2LTg2MzEtb3NoLnBhdGNoCmluZGV4 IDJlOTA2ZDkuLjkxYmFhYTcgMTAwNjQ0Ci0tLSBhL2hwbGlwLUNWRS0yMDI2LTg2MzEtb3NoLnBh dGNoCisrKyBiL2hwbGlwLUNWRS0yMDI2LTg2MzEtb3NoLnBhdGNoCkBAIC0xLDUgKzEsNSBAQAog ZGlmZiAtLWdpdCBhL3BybnQvaHBjdXBzL2dlblBDTG0uY3BwIGIvcHJudC9ocGN1cHMvZ2VuUENM bS5jcHAKLWluZGV4IDBlMTY1MGMuLmUwYzUyNDggMTAwNjQ0CitpbmRleCAwZTE2NTBjLi41Zjgz Y2JhIDEwMDY0NAogLS0tIGEvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAKICsrKyBiL3BybnQvaHBj dXBzL2dlblBDTG0uY3BwCiBAQCAtMTkxNyw4ICsxOTE3LDExIEBAIGludCAgUENMbUdlbmVyYXRv cjo6RW5jYXBzdWxhdGUodm9pZCAqcEluQnVmZmVyLCBpbnQgaW5CdWZmZXJTaXplLCBpbnQgdGhp c0hlaWdoCkBAIC0zMywzICszMyw2MyBAQCBpbmRleCAwZTE2NTBjLi5lMGM1MjQ4IDEwMDY0NAog IAkJCW1lbXNldCh0bXBTdHJpcCx3aGl0ZVB0LHRtcFN0cmlwU2l6ZSk7CiAgCiAgCitAQCAtMjAx Miw3ICsyMDIxLDEwIEBAIGludCAgUENMbUdlbmVyYXRvcjo6RW5jYXBzdWxhdGUodm9pZCAqcElu QnVmZmVyLCBpbnQgaW5CdWZmZXJTaXplLCBpbnQgdGhpc0hlaWdoCisgCXsKKyAJCWludCBzb3Vy Y2VMZW49MDsKKyAJCWlmKCFzYWZlX211bF9pbnRfcG9zaXRpdmUobnVtTGluZXNUaGlzQ2FsbCwg c2NhbmxpbmVXaWR0aCwgJnNvdXJjZUxlbikpCisrCQl7CisrCQkJZnJlZShuZXdTdHJpcFB0cik7 CisgCQkJcmV0dXJuKGVycm9yT3V0QW5kQ2xlYW5VcCgpKTsKKysJCX0KKyAJCXVpbnQzMiBsZW49 KHVpbnQzMilzb3VyY2VMZW47CisgCQl1TG9uZ2YgZGVzdFNpemU9bGVuOworIAorQEAgLTIwMjEs MTIgKzIwMzMsMTggQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSW5C dWZmZXIsIGludCBpbkJ1ZmZlclNpemUsIGludCB0aGlzSGVpZ2gKKyAJCQl1Ynl0ZSB3aGl0ZVB0 PTB4ZmY7CisgCQkJc2l6ZV90IHRtcFN0cmlwU2l6ZT0wOworIAkJCWlmKCFzYWZlX211bF9zaXpl X3QoKHNpemVfdClzY2FubGluZVdpZHRoLCAoc2l6ZV90KXRvcE1hcmdpbkluUGl4LCAmdG1wU3Ry aXBTaXplKSkKKysJCQl7CisrCQkJCWZyZWUobmV3U3RyaXBQdHIpOworIAkJCQlyZXR1cm4oZXJy b3JPdXRBbmRDbGVhblVwKCkpOworKwkJCX0KKyAKKyAJCQkvLyBXZSBuZWVkIHRvIGluamVjdCBh IGJsYW5rIGltYWdlLXN0cmlwIHdpdGggYSBoZWlnaHQ9PXRvcE1hcmdpbkluUGl4CisgCQkJdWJ5 dGUgKnRtcFN0cmlwPSh1Ynl0ZSopbWFsbG9jKHRtcFN0cmlwU2l6ZSk7CisgCQkJaWYoIXRtcFN0 cmlwKQorKwkJCXsKKysJCQkJZnJlZShuZXdTdHJpcFB0cik7CisgCQkJCXJldHVybihlcnJvck91 dEFuZENsZWFuVXAoKSk7CisrCQkJfQorIAkJCXVMb25nZiB0bXBEZXN0U2l6ZT1kZXN0U2l6ZTsK KyAJCQltZW1zZXQodG1wU3RyaXAsd2hpdGVQdCx0bXBTdHJpcFNpemUpOworIAorQEAgLTIwNzUs MjAgKzIwOTMsMjkgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSW5C dWZmZXIsIGludCBpbkJ1ZmZlclNpemUsIGludCB0aGlzSGVpZ2gKKyAJeworIAkJaW50IHNvdXJj ZUxlbj0wOworIAkJaWYoIXNhZmVfbXVsX2ludF9wb3NpdGl2ZShudW1MaW5lc1RoaXNDYWxsLCBz Y2FubGluZVdpZHRoLCAmc291cmNlTGVuKSkKKysJCXsKKysJCQlmcmVlKG5ld1N0cmlwUHRyKTsK KyAJCQlyZXR1cm4oZXJyb3JPdXRBbmRDbGVhblVwKCkpOworKwkJfQorIAorIAkJaWYoZmlyc3RT dHJpcCAmJiB0b3BNYXJnaW5JblBpeCkKKyAJCXsKKyAJCQl1Ynl0ZSB3aGl0ZVB0PTB4ZmY7Cisg CQkJc2l6ZV90IHRtcFN0cmlwU2l6ZT0wOworIAkJCWlmKCFzYWZlX211bF9zaXplX3QoKHNpemVf dClzY2FubGluZVdpZHRoLCAoc2l6ZV90KXRvcE1hcmdpbkluUGl4LCAmdG1wU3RyaXBTaXplKSkK KysJCQl7CisrCQkJCWZyZWUobmV3U3RyaXBQdHIpOworIAkJCQlyZXR1cm4oZXJyb3JPdXRBbmRD bGVhblVwKCkpOworKwkJCX0KKyAKKyAJCQkvLyBXZSBuZWVkIHRvIGluamVjdCBhIGJsYW5rIGlt YWdlLXN0cmlwIHdpdGggYSBoZWlnaHQ9PXRvcE1hcmdpbkluUGl4CisgCisgCQkJdWJ5dGUgKnRt cFN0cmlwPSh1Ynl0ZSopbWFsbG9jKHRtcFN0cmlwU2l6ZSk7CisgCQkJaWYoIXRtcFN0cmlwKQor KwkJCXsKKysJCQkJZnJlZShuZXdTdHJpcFB0cik7CisgCQkJCXJldHVybihlcnJvck91dEFuZENs ZWFuVXAoKSk7CisrCQkJfQorIAkJCW1lbXNldCh0bXBTdHJpcCx3aGl0ZVB0LHRtcFN0cmlwU2l6 ZSk7CisgCisgCQkJZm9yKHNpbnQzMiBzdHJpcENudHI9MDsgc3RyaXBDbnRyPG51bUZ1bGxJbmpl Y3RlZFN0cmlwcztzdHJpcENudHIrKykKCmRpZmYgLS1naXQgYS9ocGxpcC5zcGVjIGIvaHBsaXAu c3BlYwppbmRleCAzZjJmMmNiLi5iZmM1Mjg2IDEwMDY0NAotLS0gYS9ocGxpcC5zcGVjCisrKyBi L2hwbGlwLnNwZWMKQEAgLTcsNyArNyw3IEBACiBTdW1tYXJ5OiBIUCBMaW51eCBJbWFnaW5nIGFu ZCBQcmludGluZyBQcm9qZWN0CiBOYW1lOiBocGxpcAogVmVyc2lvbjogMy4yNi40Ci1SZWxlYXNl OiA1JXs/ZGlzdH0KK1JlbGVhc2U6IDYlez9kaXN0fQogIyBtb3N0IGZpbGVzIChiYXNlLyosICos IHVpKi8uLi4pIC0gR1BMMisKICMgcHJudC9ocGlqcy8ganBlZyByZWxhdGVkIGZpbGVzIC0gSUpH CiAjIHBybnQvKiAtIEJTRC0zLUNsYXVzZS1IUCAtIGl0IGlzIG1vZGlmaWVkIGEgbGl0dGxlLCBh c2tlZCBoZXJlIGh0dHBzOi8vZ2l0bGFiLmNvbS9mZWRvcmEvbGVnYWwvZmVkb3JhLWxpY2Vuc2Ut ZGF0YS8tL2lzc3Vlcy8yNjcKQEAgLTEwMDEsNiArMTAwMSw5IEBAIGZpbmQgZG9jL2ltYWdlcyAt dHlwZSBmIC1leGVjIGNobW9kIDY0NCB7fSBcOwogJWNvbmZpZyhub3JlcGxhY2UpICV7X3N5c2Nv bmZkaXJ9L3NhbmUuZC9kbGwuZC9ocGFpbwogCiAlY2hhbmdlbG9nCisqIE1vbiBKdW4gMTUgMjAy NiBaZGVuZWsgRG9obmFsIDx6ZG9obmFsQHJlZGhhdC5jb20+IC0gMy4yNi40LTYKKy0gRml4IG1v cmUgbGVha3MgYWZ0ZXIgQ1ZFLTIwMjYtODYzMiBmaXgKKwogKiBGcmkgSnVuIDEyIDIwMjYgWWFh a292IFNlbGtvd2l0eiA8eXNlbGtvd2lAcmVkaGF0LmNvbT4gLSAzLjI2LjQtNQogLSBSZWJ1aWx0 IGZvciBvcGVuc3NsIDQuMAogCg==