From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jerry James To: git-commits@fedoraproject.org Subject: [rpms/antlr4-project] rawhide: Add patch to fix CVE-2026-13503 Date: Fri, 10 Jul 2026 21:42:43 GMT Message-ID: <178371976319.1.13176020174807774491.rpms-antlr4-project-059a29c493ae@fedoraproject.org> List-ID: X-Git-Repo: rpms/antlr4-project X-Git-Branch: rawhide X-Git-Rev: 059a29c493aedd894afe50c34b0d93dc2f703b74 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvYW50bHI0LXByb2pl Y3QKQnJhbmNoIDogcmF3aGlkZQpDb21taXQgOiAwNTlhMjljNDkzYWVkZDg5NGFmZTUwYzM0YjBk OTNkYzJmNzAzYjc0CkF1dGhvciA6IEplcnJ5IEphbWVzIDxsb2dhbmplcnJ5QGdtYWlsLmNvbT4K RGF0ZSAgIDogMjAyNi0wNy0xMFQxNTo0MjoyNS0wNjowMApTdGF0cyAgOiArNjgvLTMgaW4gMiBm aWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvYW50bHI0 LXByb2plY3QvYy8wNTlhMjljNDkzYWVkZDg5NGFmZTUwYzM0YjBkOTNkYzJmNzAzYjc0P2JyYW5j aD1yYXdoaWRlCgpMb2c6CkFkZCBwYXRjaCB0byBmaXggQ1ZFLTIwMjYtMTM1MDMKCi0tLQpkaWZm IC0tZ2l0IGEvNDk0Mi5wYXRjaCBiLzQ5NDIucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5k ZXggMDAwMDAwMC4uZGUzMmY3ZAotLS0gL2Rldi9udWxsCisrKyBiLzQ5NDIucGF0Y2gKQEAgLTAs MCArMSw2NiBAQAorRnJvbSA1M2IyZTg0N2U3MGRlYzhiYTRlYzFiMDgzNTkyOGFkM2FkMGZmM2Ix IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogZGlnaS1zY3J5cHQgPGRpZ2ljcnlwdEBn bWFpbC5jb20+CitEYXRlOiBGcmksIDUgSnVuIDIwMjYgMjA6MzY6MjcgKzA1MzAKK1N1YmplY3Q6 IFtQQVRDSF0gY29uZmluZSB0b2tlblZvY2FiIGxvb2t1cCB0byB0aGUgc2VhcmNoIGRpcmVjdG9y eQorCistLS0KKyAuLi4vb3JnL2FudGxyL3Y0L3BhcnNlL1Rva2VuVm9jYWJQYXJzZXIuamF2YSAg fCAzMSArKysrKysrKysrKysrKysrLS0tCisgMSBmaWxlIGNoYW5nZWQsIDI3IGluc2VydGlvbnMo KyksIDQgZGVsZXRpb25zKC0pCisKK2RpZmYgLS1naXQgYS90b29sL3NyYy9vcmcvYW50bHIvdjQv cGFyc2UvVG9rZW5Wb2NhYlBhcnNlci5qYXZhIGIvdG9vbC9zcmMvb3JnL2FudGxyL3Y0L3BhcnNl L1Rva2VuVm9jYWJQYXJzZXIuamF2YQoraW5kZXggY2Y4NGE5MjNhNS4uY2Y3YzE4MGUyMCAxMDA2 NDQKKy0tLSBhL3Rvb2wvc3JjL29yZy9hbnRsci92NC9wYXJzZS9Ub2tlblZvY2FiUGFyc2VyLmph dmEKKysrKyBiL3Rvb2wvc3JjL29yZy9hbnRsci92NC9wYXJzZS9Ub2tlblZvY2FiUGFyc2VyLmph dmEKK0BAIC0xMzcsNyArMTM3LDcgQEAgcHVibGljIEZpbGUgZ2V0SW1wb3J0ZWRWb2NhYkZpbGUo KSB7CisgCQkJCQkJICBGaWxlLnNlcGFyYXRvciArCisgCQkJCQkJICB2b2NhYk5hbWUgKworIAkJ CQkJCSAgQ29kZUdlbmVyYXRvci5WT0NBQl9GSUxFX0VYVEVOU0lPTik7CistCQlpZiAoZi5leGlz dHMoKSkgeworKwkJaWYgKGlzQ29udGFpbmVkSW4oZy50b29sLmxpYkRpcmVjdG9yeSwgZikgJiYg Zi5leGlzdHMoKSkgeworIAkJCXJldHVybiBmOworIAkJfQorIAorQEAgLTE0NiwxMCArMTQ2LDEw IEBAIHB1YmxpYyBGaWxlIGdldEltcG9ydGVkVm9jYWJGaWxlKCkgeworIAkJLy8gZmlsZXMgYXJl IGdlbmVyYXRlZCAoaW4gdGhlIGJhc2UsIG5vdCByZWxhdGl2ZSB0byB0aGUgaW5wdXQKKyAJCS8v IGxvY2F0aW9uLikKKyAJCWYgPSBuZXcgRmlsZShnLnRvb2wub3V0cHV0RGlyZWN0b3J5LCB2b2Nh Yk5hbWUgKyBDb2RlR2VuZXJhdG9yLlZPQ0FCX0ZJTEVfRVhURU5TSU9OKTsKKy0JCWlmICggZi5l eGlzdHMoKSApIHsKKysJCWlmICggaXNDb250YWluZWRJbihnLnRvb2wub3V0cHV0RGlyZWN0b3J5 LCBmKSAmJiBmLmV4aXN0cygpICkgeworIAkJCXJldHVybiBmOworIAkJfQorLQkJCisrCisgCQkv LyBTdGlsbCBub3QgZm91bmQ/IFVzZSB0aGUgZ3JhbW1hcidzIHN1YmZvbGRlciB0aGVuLgorIAkJ U3RyaW5nIGZpbGVEaXJlY3Rvcnk7CisgCitAQCAtMTYyLDYgKzE2MiwyOSBAQCBwdWJsaWMgRmls ZSBnZXRJbXBvcnRlZFZvY2FiRmlsZSgpIHsKKyAJCWVsc2UgeworIAkJCWZpbGVEaXJlY3Rvcnkg PSBnLmZpbGVOYW1lLnN1YnN0cmluZygwLCBnLmZpbGVOYW1lLmxhc3RJbmRleE9mKEZpbGUuc2Vw YXJhdG9yQ2hhcikpOworIAkJfQorLQkJcmV0dXJuIG5ldyBGaWxlKGZpbGVEaXJlY3RvcnksIHZv Y2FiTmFtZSArIENvZGVHZW5lcmF0b3IuVk9DQUJfRklMRV9FWFRFTlNJT04pOworKwkJZiA9IG5l dyBGaWxlKGZpbGVEaXJlY3RvcnksIHZvY2FiTmFtZSArIENvZGVHZW5lcmF0b3IuVk9DQUJfRklM RV9FWFRFTlNJT04pOworKwkJaWYgKCBpc0NvbnRhaW5lZEluKGZpbGVEaXJlY3RvcnksIGYpICkg eworKwkJCXJldHVybiBmOworKwkJfQorKwkJLy8gdG9rZW5Wb2NhYiBpcyB0aGUgdmFsdWUgb2Yg YSBncmFtbWFyIG9wdGlvbiBhbmQgY2FuIGJlIGFueSBzdHJpbmcsCisrCQkvLyBzbyBhIHZhbHVl IGxpa2UgIi4uLy4uL2ZvbyIgd291bGQgcmVzb2x2ZSB0aGUgLnRva2VucyBmaWxlIG91dHNpZGUK KysJCS8vIHRoZSBzZWFyY2ggZGlyZWN0b3J5LiBDb25maW5lIGl0IHRvIHRoZSBkaXJlY3Rvcnkn cyBvd24gZmlsZSBuYW1lCisrCQkvLyBzbyB0aGUgbG9hZCByZXBvcnRzIHRoZSB2b2NhYiBhcyBt aXNzaW5nIHJhdGhlciB0aGFuIHJlYWRpbmcgYW4KKysJCS8vIGFyYml0cmFyeSBmaWxlLgorKwkJ cmV0dXJuIG5ldyBGaWxlKGZpbGVEaXJlY3RvcnksIG5ldyBGaWxlKHZvY2FiTmFtZSkuZ2V0TmFt ZSgpICsgQ29kZUdlbmVyYXRvci5WT0NBQl9GSUxFX0VYVEVOU0lPTik7CisrCX0KKysKKysJLyoq IElzIHtAY29kZSBmfSB0aGUgc2VhcmNoIHtAY29kZSBkaXJlY3Rvcnl9IGl0c2VsZiBvciBhIGRl c2NlbmRhbnQgb2YgaXQsCisrCSAqICBhZnRlciByZXNvbHZpbmcgYW55IHtAY29kZSAuLn0gc2Vn bWVudHMgYW5kIHN5bWJvbGljIGxpbmtzPworKwkgKi8KKysJcHJpdmF0ZSBzdGF0aWMgYm9vbGVh biBpc0NvbnRhaW5lZEluKFN0cmluZyBkaXJlY3RvcnksIEZpbGUgZikgeworKwkJdHJ5IHsKKysJ CQlTdHJpbmcgYmFzZSA9IG5ldyBGaWxlKGRpcmVjdG9yeSkuZ2V0Q2Fub25pY2FsUGF0aCgpOwor KwkJCVN0cmluZyB0YXJnZXQgPSBuZXcgRmlsZShmLmdldENhbm9uaWNhbFBhdGgoKSkuZ2V0Q2Fu b25pY2FsUGF0aCgpOworKwkJCXJldHVybiB0YXJnZXQuZXF1YWxzKGJhc2UpIHx8IHRhcmdldC5z dGFydHNXaXRoKGJhc2UgKyBGaWxlLnNlcGFyYXRvcik7CisrCQl9CisrCQljYXRjaCAoSU9FeGNl cHRpb24gaW9lKSB7CisrCQkJcmV0dXJuIGZhbHNlOworKwkJfQorIAl9CisgfQoKZGlmZiAtLWdp dCBhL2FudGxyNC1wcm9qZWN0LnNwZWMgYi9hbnRscjQtcHJvamVjdC5zcGVjCmluZGV4IDFjNTlj ZGYuLjgyMjZkOGIgMTAwNjQ0Ci0tLSBhL2FudGxyNC1wcm9qZWN0LnNwZWMKKysrIGIvYW50bHI0 LXByb2plY3Quc3BlYwpAQCAtMzYsNiArMzYsOCBAQCBTb3VyY2U6ICAgICAgICAgJXtnaXR1cmx9 L2FyY2hpdmUvJXt2ZXJzaW9ufS9hbnRscjQtJXt2ZXJzaW9ufS50YXIuZ3oKICMgRml4IHNvbWUg amF2YWRvYyBwcm9ibGVtcwogIyBodHRwczovL2dpdGh1Yi5jb20vYW50bHIvYW50bHI0L3B1bGwv Mjk2MAogUGF0Y2g6ICAgICAgICAgIGFudGxyNC1qYXZhZG9jLnBhdGNoCisjIENvbmZpbmUgdG9r ZW5Wb2NhYiBsb29rdXAgdG8gdGhlIHNlYXJjaCBkaXJlY3RvcnkgKENWRS0yMDI2LTEzNTAzKQor UGF0Y2g6ICAgICAgICAgICV7Z2l0dXJsfS9wdWxsLzQ5NDIucGF0Y2gKIAogQnVpbGRSZXF1aXJl czogIGNtYWtlCiBCdWlsZFJlcXVpcmVzOiAgZ2NjLWMrKwpAQCAtMjIyLDkgKzIyNCw2IEBAIGZp bmQgLW5hbWUgXCouamFyIC1kZWxldGUKICMgaW8udGFrYXJpLm1hdmVuLnBsdWdpbnM6dGFrYXJp LXBsdWdpbi10ZXN0aW5nCiAlcG9tX3JlbW92ZV9kZXAgLXIgOnRha2FyaS1wbHVnaW4tdGVzdGlu ZwogCi0jIEFkYXB0IHRvIGpha2FydGEtanNvbiAyLngKLSVwb21fY2hhbmdlX2RlcCBvcmcuZ2xh c3NmaXNoOmphdmF4Lmpzb24gamFrYXJ0YS5qc29uOmpha2FydGEuanNvbi1hcGkgcnVudGltZS10 ZXN0c3VpdGUKLQogIyBNaXNzaW5nIHBsdWdpbnMKICMgaW8udGFrYXJpLm1hdmVuLnBsdWdpbnM6 dGFrYXJpLWxpZmVjeWNsZS1wbHVnaW4KICVwb21fcmVtb3ZlX3BsdWdpbiAtciA6dGFrYXJpLWxp ZmVjeWNsZS1wbHVnaW4K