From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Vitezslav Crhonek To: git-commits@fedoraproject.org Subject: [rpms/sblim-sfcc] main: Fix buffer overflows Date: Tue, 23 Jun 2026 08:05:32 GMT Message-ID: <178220193213.1.16777277720679301085.rpms-sblim-sfcc-05794bfb7158@fedoraproject.org> List-ID: X-Git-Repo: rpms/sblim-sfcc X-Git-Branch: main X-Git-Rev: 05794bfb71580f7c95223467518c49b87c079aa9 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvc2JsaW0tc2ZjYwpC cmFuY2ggOiBtYWluCkNvbW1pdCA6IDA1Nzk0YmZiNzE1ODBmN2M5NTIyMzQ2NzUxOGM0OWI4N2Mw NzlhYTkKQXV0aG9yIDogVml0ZXpzbGF2IENyaG9uZWsgPHZjcmhvbmVrQHJlZGhhdC5jb20+CkRh dGUgICA6IDIwMjYtMDYtMjNUMTA6MDQ6NTUrMDI6MDAKU3RhdHMgIDogKzU2Ly0xIGluIDMgZmls ZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3NibGltLXNm Y2MvYy8wNTc5NGJmYjcxNTgwZjdjOTUyMjM0Njc1MThjNDliODdjMDc5YWE5P2JyYW5jaD1tYWlu CgpMb2c6CkZpeCBidWZmZXIgb3ZlcmZsb3dzCgotLS0KZGlmZiAtLWdpdCBhL3NibGltLXNmY2Mt Mi4yLjgtZml4LW1ldGhvZC1idWZmZXItb3ZlcmZsb3cucGF0Y2ggYi9zYmxpbS1zZmNjLTIuMi44 LWZpeC1tZXRob2QtYnVmZmVyLW92ZXJmbG93LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLmUyYzlhYWYKLS0tIC9kZXYvbnVsbAorKysgYi9zYmxpbS1zZmNjLTIuMi44 LWZpeC1tZXRob2QtYnVmZmVyLW92ZXJmbG93LnBhdGNoCkBAIC0wLDAgKzEsMTIgQEAKK2RpZmYg LXVwIHNibGltLXNmY2MtMi4yLjgvYmFja2VuZC9jaW14bWwvY2xpZW50LmMub3JpZyBzYmxpbS1z ZmNjLTIuMi44L2JhY2tlbmQvY2lteG1sL2NsaWVudC5jCistLS0gc2JsaW0tc2ZjYy0yLjIuOC9i YWNrZW5kL2NpbXhtbC9jbGllbnQuYy5vcmlnCTIwMjYtMDYtMjIgMTA6NTA6NTkuMTQzNzkyNDkz ICswMjAwCisrKysgc2JsaW0tc2ZjYy0yLjIuOC9iYWNrZW5kL2NpbXhtbC9jbGllbnQuYwkyMDI2 LTA2LTIyIDEwOjUxOjA4LjY3MTczODc2NCArMDIwMAorQEAgLTQxMiw3ICs0MTIsNyBAQCBzdGF0 aWMgY2hhciogZ2VuUmVxdWVzdChDbGllbnRFbmMgKmNsZSwKKyAgICBjb24tPmZ0LT5pbml0aWFs aXplSGVhZGVycyhjb24pOworIAorICAgIC8vIEFkZCBDSU1NZXRob2QgaGVhZGVyCistICAgc3Ry Y2F0KG1ldGhvZCwgb3ApOworKyAgIHN0cm5jYXQobWV0aG9kLCBvcCwgc2l6ZW9mKG1ldGhvZCkg LSBzdHJsZW4obWV0aG9kKSAtIDEpOworICAgIGNvbi0+bUhlYWRlcnMgPSBjdXJsX3NsaXN0X2Fw cGVuZChjb24tPm1IZWFkZXJzLCBtZXRob2QpOworIAorICAgIC8vIEFkZCBDSU1PYmplY3QgaGVh ZGVyIHdpdGggY29wJ3MgbmFtZXNwYWNlLCBjbGFzcywga2V5cwoKZGlmZiAtLWdpdCBhL3NibGlt LXNmY2MtMi4yLjgtZml4LW5hbWVzcGFjZS1idWZmZXItb3ZlcmZsb3cucGF0Y2ggYi9zYmxpbS1z ZmNjLTIuMi44LWZpeC1uYW1lc3BhY2UtYnVmZmVyLW92ZXJmbG93LnBhdGNoCm5ldyBmaWxlIG1v ZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjIyYTFiZWUKLS0tIC9kZXYvbnVsbAorKysgYi9zYmxp bS1zZmNjLTIuMi44LWZpeC1uYW1lc3BhY2UtYnVmZmVyLW92ZXJmbG93LnBhdGNoCkBAIC0wLDAg KzEsMzUgQEAKK2RpZmYgLXVwIHNibGltLXNmY2MtMi4yLjgvYmFja2VuZC9jaW14bWwvY2xpZW50 LmMub3JpZyBzYmxpbS1zZmNjLTIuMi44L2JhY2tlbmQvY2lteG1sL2NsaWVudC5jCistLS0gc2Js aW0tc2ZjYy0yLjIuOC9iYWNrZW5kL2NpbXhtbC9jbGllbnQuYy5vcmlnCTIwMjYtMDYtMjIgMDk6 NDY6MjcuOTg0MzMyMTQ3ICswMjAwCisrKysgc2JsaW0tc2ZjYy0yLjIuOC9iYWNrZW5kL2NpbXht bC9jbGllbnQuYwkyMDI2LTA2LTIyIDA5OjQ3OjI1Ljc3MDAxMjkxMiArMDIwMAorQEAgLTQxOSwx MyArNDE5LDI3IEBAIHN0YXRpYyBjaGFyKiBnZW5SZXF1ZXN0KENsaWVudEVuYyAqY2xlLAorICAg IGlmIChjbGFzc1dpdGhLZXlzKQorICAgICAgICBwYXRoVG9DaGFycyhjb3AsIE5VTEwsICZDaW1P YmplY3RbMTFdLCAxKTsKKyAgICBlbHNlIHsKKysgICAgICAgc2l6ZV90IHJlbWFpbmluZyA9IHNp emVvZihDaW1PYmplY3QpIC0gc3RybGVuKENpbU9iamVjdCk7CisrICAgICAgIGNoYXIgKnB0ciA9 IENpbU9iamVjdCArIHN0cmxlbihDaW1PYmplY3QpOworKworICAgICAgICBuc2MgPSBnZXROYW1l U3BhY2VDb21wb25lbnRzKGNvcCk7CisgICAgICAgIG5zcCA9IG5zYy0+ZnQtPmdldEZpcnN0KG5z Yyk7CistICAgICAgIHdoaWxlIChuc3AgIT0gTlVMTCkgeworLQkgICBzdHJjYXQoQ2ltT2JqZWN0 LCBuc3ApOworKyAgICAgICB3aGlsZSAobnNwICE9IE5VTEwgJiYgcmVtYWluaW5nID4gMCkgewor KwkgICBzaXplX3QgbGVuID0gc25wcmludGYocHRyLCByZW1haW5pbmcsICIlcyIsIG5zcCk7Cisr CSAgIGlmIChsZW4gPj0gcmVtYWluaW5nKSB7CisrCSAgICAgICAvKiBXb3VsZCBvdmVyZmxvdyAt IHRydW5jYXRlIGFuZCBicmVhayAqLworKwkgICAgICAgZnJlZShuc3ApOworKwkgICAgICAgYnJl YWs7CisrCSAgIH0KKysJICAgcHRyICs9IGxlbjsKKysJICAgcmVtYWluaW5nIC09IGxlbjsKKyAJ ICAgZnJlZShuc3ApOyAvKiBWTTogZnJlZWluZyBzdHJkdXAnZWQgbWVtb3J5IC0gc2hvdWxkIGJl IHBhcnQgb2YgcmVsZWFzZSAqLworLSAgICAgICAgICAgaWYgKChuc3AgPSBuc2MtPmZ0LT5nZXRO ZXh0KG5zYykpICE9IE5VTEwpCistCSAgICAgICBzdHJjYXQoQ2ltT2JqZWN0LCAiJTJGIik7Cisr ICAgICAgICAgICBpZiAoKG5zcCA9IG5zYy0+ZnQtPmdldE5leHQobnNjKSkgIT0gTlVMTCAmJiBy ZW1haW5pbmcgPiAzKSB7CisrCSAgICAgICBsZW4gPSBzbnByaW50ZihwdHIsIHJlbWFpbmluZywg IiUlMkYiKTsKKysJICAgICAgIGlmIChsZW4gPj0gcmVtYWluaW5nKSBicmVhazsKKysJICAgICAg IHB0ciArPSBsZW47CisrCSAgICAgICByZW1haW5pbmcgLT0gbGVuOworKwkgICB9CisgICAgICAg IH0KKyAgICAgICAgQ01SZWxlYXNlKG5zYyk7CisgICAgfQoKZGlmZiAtLWdpdCBhL3NibGltLXNm Y2Muc3BlYyBiL3NibGltLXNmY2Muc3BlYwppbmRleCBlYzdjNWI3Li42NTgxYTljIDEwMDY0NAot LS0gYS9zYmxpbS1zZmNjLnNwZWMKKysrIGIvc2JsaW0tc2ZjYy5zcGVjCkBAIC03LDcgKzcsNyBA QAogU3VtbWFyeTogU21hbGwgRm9vdHByaW50IENJTSBDbGllbnQgTGlicmFyeQogTmFtZTogc2Js aW0tc2ZjYwogVmVyc2lvbjogMi4yLjgKLVJlbGVhc2U6IDMxJXs/ZGlzdH0KK1JlbGVhc2U6IDMy JXs/ZGlzdH0KIExpY2Vuc2U6IEVQTC0xLjAKIFVSTDogaHR0cDovL3d3dy5zYmxpbS5vcmcKIFNv dXJjZTA6IGh0dHA6Ly9kb3dubG9hZHMuc291cmNlZm9yZ2UubmV0L3Byb2plY3Qvc2JsaW0vJXtu YW1lfS8le25hbWV9LSV7dmVyc2lvbn0udGFyLmJ6MgpAQCAtMTcsNiArMTcsMTAgQEAgUGF0Y2gw OiBzYmxpbS1zZmNjLTIuMi44LWRvY2Rpci1saWNlbnNlLnBhdGNoCiBQYXRjaDE6IGM5OS5wYXRj aAogUGF0Y2gyOiBjODkucGF0Y2gKIFBhdGNoMzogc2JsaW0tc2ZjYy0yLjIuOC1maXgtY2xvbmUt c3RhY2stZXhoYXVzdC5wYXRjaAorIyBQYXRjaDQ6IGZpeGVzIGJ1ZmZlciBvdmVyZmxvdyBpbiBD SU1NZXRob2QgaGVhZGVyIGhhbmRsaW5nCitQYXRjaDQ6IHNibGltLXNmY2MtMi4yLjgtZml4LW1l dGhvZC1idWZmZXItb3ZlcmZsb3cucGF0Y2gKKyMgUGF0Y2g1OiBmaXhlcyBidWZmZXIgb3ZlcmZs b3cgaW4gQ0lNT2JqZWN0IG5hbWVzcGFjZSBoYW5kbGluZworUGF0Y2g1OiBzYmxpbS1zZmNjLTIu Mi44LWZpeC1uYW1lc3BhY2UtYnVmZmVyLW92ZXJmbG93LnBhdGNoCiBCdWlsZFJlcXVpcmVzOiBt YWtlCiBCdWlsZFJlcXVpcmVzOiBjdXJsLWRldmVsIGNocnBhdGgKIEJ1aWxkUmVxdWlyZXM6IGdj YyBnY2MtYysrCkBAIC02Nyw2ICs3MSwxMCBAQCBjaHJwYXRoIC0tZGVsZXRlICRSUE1fQlVJTERf Uk9PVCV7X2xpYmRpcn0vbGliY21waXNmY2Muc28uMS4wLjAKICV7X2xpYmRpcn0vbGliY21waXNm Y2Muc28KIAogJWNoYW5nZWxvZworKiBUdWUgSnVuIDIzIDIwMjYgVml0ZXpzbGF2IENyaG9uZWsg PHZjcmhvbmVrQHJlZGhhdC5jb20+IC0gMi4yLjgtMzIKKy0gRml4IGJ1ZmZlciBvdmVyZmxvdyBp biBDSU1NZXRob2QgaGVhZGVyIGhhbmRsaW5nCistIEZpeCBidWZmZXIgb3ZlcmZsb3cgaW4gQ0lN T2JqZWN0IG5hbWVzcGFjZSBoYW5kbGluZworCiAqIFdlZCBNYXkgMjcgMjAyNiBWaXRlenNsYXYg Q3Job25layA8dmNyaG9uZWtAcmVkaGF0LmNvbT4gLSAyLjIuOC0zMQogLSBGaXggcG9zc2libGUg X19jbG9uZSgpIHN0YWNrIGV4aGF1c3Rpb24KIAo=