From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jerry James To: git-commits@fedoraproject.org Subject: [rpms/antlr4-project] f43: Add patch to fix CVE-2026-13503 Date: Fri, 10 Jul 2026 22:05:13 GMT Message-ID: <178372111397.1.12672453256016279547.rpms-antlr4-project-586cfef6fdd0@fedoraproject.org> List-ID: X-Git-Repo: rpms/antlr4-project X-Git-Branch: f43 X-Git-Rev: 586cfef6fdd0635f04e1a90af4ece1ebe86ca12a QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvYW50bHI0LXByb2pl Y3QKQnJhbmNoIDogZjQzCkNvbW1pdCA6IDU4NmNmZWY2ZmRkMDYzNWYwNGUxYTkwYWY0ZWNlMWVi ZTg2Y2ExMmEKQXV0aG9yIDogSmVycnkgSmFtZXMgPGxvZ2FuamVycnlAZ21haWwuY29tPgpEYXRl ICAgOiAyMDI2LTA3LTEwVDE2OjA1OjAyLTA2OjAwClN0YXRzICA6ICs2OC8tMyBpbiAyIGZpbGUo cykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9hbnRscjQtcHJv amVjdC9jLzU4NmNmZWY2ZmRkMDYzNWYwNGUxYTkwYWY0ZWNlMWViZTg2Y2ExMmE/YnJhbmNoPWY0 MwoKTG9nOgpBZGQgcGF0Y2ggdG8gZml4IENWRS0yMDI2LTEzNTAzCgotLS0KZGlmZiAtLWdpdCBh LzQ5NDIucGF0Y2ggYi80OTQyLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAw MDAuLmRlMzJmN2QKLS0tIC9kZXYvbnVsbAorKysgYi80OTQyLnBhdGNoCkBAIC0wLDAgKzEsNjYg QEAKK0Zyb20gNTNiMmU4NDdlNzBkZWM4YmE0ZWMxYjA4MzU5MjhhZDNhZDBmZjNiMSBNb24gU2Vw IDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IGRpZ2ktc2NyeXB0IDxkaWdpY3J5cHRAZ21haWwuY29t PgorRGF0ZTogRnJpLCA1IEp1biAyMDI2IDIwOjM2OjI3ICswNTMwCitTdWJqZWN0OiBbUEFUQ0hd IGNvbmZpbmUgdG9rZW5Wb2NhYiBsb29rdXAgdG8gdGhlIHNlYXJjaCBkaXJlY3RvcnkKKworLS0t CisgLi4uL29yZy9hbnRsci92NC9wYXJzZS9Ub2tlblZvY2FiUGFyc2VyLmphdmEgIHwgMzEgKysr KysrKysrKysrKysrKy0tLQorIDEgZmlsZSBjaGFuZ2VkLCAyNyBpbnNlcnRpb25zKCspLCA0IGRl bGV0aW9ucygtKQorCitkaWZmIC0tZ2l0IGEvdG9vbC9zcmMvb3JnL2FudGxyL3Y0L3BhcnNlL1Rv a2VuVm9jYWJQYXJzZXIuamF2YSBiL3Rvb2wvc3JjL29yZy9hbnRsci92NC9wYXJzZS9Ub2tlblZv Y2FiUGFyc2VyLmphdmEKK2luZGV4IGNmODRhOTIzYTUuLmNmN2MxODBlMjAgMTAwNjQ0CistLS0g YS90b29sL3NyYy9vcmcvYW50bHIvdjQvcGFyc2UvVG9rZW5Wb2NhYlBhcnNlci5qYXZhCisrKysg Yi90b29sL3NyYy9vcmcvYW50bHIvdjQvcGFyc2UvVG9rZW5Wb2NhYlBhcnNlci5qYXZhCitAQCAt MTM3LDcgKzEzNyw3IEBAIHB1YmxpYyBGaWxlIGdldEltcG9ydGVkVm9jYWJGaWxlKCkgeworIAkJ CQkJCSAgRmlsZS5zZXBhcmF0b3IgKworIAkJCQkJCSAgdm9jYWJOYW1lICsKKyAJCQkJCQkgIENv ZGVHZW5lcmF0b3IuVk9DQUJfRklMRV9FWFRFTlNJT04pOworLQkJaWYgKGYuZXhpc3RzKCkpIHsK KysJCWlmIChpc0NvbnRhaW5lZEluKGcudG9vbC5saWJEaXJlY3RvcnksIGYpICYmIGYuZXhpc3Rz KCkpIHsKKyAJCQlyZXR1cm4gZjsKKyAJCX0KKyAKK0BAIC0xNDYsMTAgKzE0NiwxMCBAQCBwdWJs aWMgRmlsZSBnZXRJbXBvcnRlZFZvY2FiRmlsZSgpIHsKKyAJCS8vIGZpbGVzIGFyZSBnZW5lcmF0 ZWQgKGluIHRoZSBiYXNlLCBub3QgcmVsYXRpdmUgdG8gdGhlIGlucHV0CisgCQkvLyBsb2NhdGlv bi4pCisgCQlmID0gbmV3IEZpbGUoZy50b29sLm91dHB1dERpcmVjdG9yeSwgdm9jYWJOYW1lICsg Q29kZUdlbmVyYXRvci5WT0NBQl9GSUxFX0VYVEVOU0lPTik7CistCQlpZiAoIGYuZXhpc3RzKCkg KSB7CisrCQlpZiAoIGlzQ29udGFpbmVkSW4oZy50b29sLm91dHB1dERpcmVjdG9yeSwgZikgJiYg Zi5leGlzdHMoKSApIHsKKyAJCQlyZXR1cm4gZjsKKyAJCX0KKy0JCQorKworIAkJLy8gU3RpbGwg bm90IGZvdW5kPyBVc2UgdGhlIGdyYW1tYXIncyBzdWJmb2xkZXIgdGhlbi4KKyAJCVN0cmluZyBm aWxlRGlyZWN0b3J5OworIAorQEAgLTE2Miw2ICsxNjIsMjkgQEAgcHVibGljIEZpbGUgZ2V0SW1w b3J0ZWRWb2NhYkZpbGUoKSB7CisgCQllbHNlIHsKKyAJCQlmaWxlRGlyZWN0b3J5ID0gZy5maWxl TmFtZS5zdWJzdHJpbmcoMCwgZy5maWxlTmFtZS5sYXN0SW5kZXhPZihGaWxlLnNlcGFyYXRvckNo YXIpKTsKKyAJCX0KKy0JCXJldHVybiBuZXcgRmlsZShmaWxlRGlyZWN0b3J5LCB2b2NhYk5hbWUg KyBDb2RlR2VuZXJhdG9yLlZPQ0FCX0ZJTEVfRVhURU5TSU9OKTsKKysJCWYgPSBuZXcgRmlsZShm aWxlRGlyZWN0b3J5LCB2b2NhYk5hbWUgKyBDb2RlR2VuZXJhdG9yLlZPQ0FCX0ZJTEVfRVhURU5T SU9OKTsKKysJCWlmICggaXNDb250YWluZWRJbihmaWxlRGlyZWN0b3J5LCBmKSApIHsKKysJCQly ZXR1cm4gZjsKKysJCX0KKysJCS8vIHRva2VuVm9jYWIgaXMgdGhlIHZhbHVlIG9mIGEgZ3JhbW1h ciBvcHRpb24gYW5kIGNhbiBiZSBhbnkgc3RyaW5nLAorKwkJLy8gc28gYSB2YWx1ZSBsaWtlICIu Li8uLi9mb28iIHdvdWxkIHJlc29sdmUgdGhlIC50b2tlbnMgZmlsZSBvdXRzaWRlCisrCQkvLyB0 aGUgc2VhcmNoIGRpcmVjdG9yeS4gQ29uZmluZSBpdCB0byB0aGUgZGlyZWN0b3J5J3Mgb3duIGZp bGUgbmFtZQorKwkJLy8gc28gdGhlIGxvYWQgcmVwb3J0cyB0aGUgdm9jYWIgYXMgbWlzc2luZyBy YXRoZXIgdGhhbiByZWFkaW5nIGFuCisrCQkvLyBhcmJpdHJhcnkgZmlsZS4KKysJCXJldHVybiBu ZXcgRmlsZShmaWxlRGlyZWN0b3J5LCBuZXcgRmlsZSh2b2NhYk5hbWUpLmdldE5hbWUoKSArIENv ZGVHZW5lcmF0b3IuVk9DQUJfRklMRV9FWFRFTlNJT04pOworKwl9CisrCisrCS8qKiBJcyB7QGNv ZGUgZn0gdGhlIHNlYXJjaCB7QGNvZGUgZGlyZWN0b3J5fSBpdHNlbGYgb3IgYSBkZXNjZW5kYW50 IG9mIGl0LAorKwkgKiAgYWZ0ZXIgcmVzb2x2aW5nIGFueSB7QGNvZGUgLi59IHNlZ21lbnRzIGFu ZCBzeW1ib2xpYyBsaW5rcz8KKysJICovCisrCXByaXZhdGUgc3RhdGljIGJvb2xlYW4gaXNDb250 YWluZWRJbihTdHJpbmcgZGlyZWN0b3J5LCBGaWxlIGYpIHsKKysJCXRyeSB7CisrCQkJU3RyaW5n IGJhc2UgPSBuZXcgRmlsZShkaXJlY3RvcnkpLmdldENhbm9uaWNhbFBhdGgoKTsKKysJCQlTdHJp bmcgdGFyZ2V0ID0gbmV3IEZpbGUoZi5nZXRDYW5vbmljYWxQYXRoKCkpLmdldENhbm9uaWNhbFBh dGgoKTsKKysJCQlyZXR1cm4gdGFyZ2V0LmVxdWFscyhiYXNlKSB8fCB0YXJnZXQuc3RhcnRzV2l0 aChiYXNlICsgRmlsZS5zZXBhcmF0b3IpOworKwkJfQorKwkJY2F0Y2ggKElPRXhjZXB0aW9uIGlv ZSkgeworKwkJCXJldHVybiBmYWxzZTsKKysJCX0KKyAJfQorIH0KCmRpZmYgLS1naXQgYS9hbnRs cjQtcHJvamVjdC5zcGVjIGIvYW50bHI0LXByb2plY3Quc3BlYwppbmRleCAxYzU5Y2RmLi44MjI2 ZDhiIDEwMDY0NAotLS0gYS9hbnRscjQtcHJvamVjdC5zcGVjCisrKyBiL2FudGxyNC1wcm9qZWN0 LnNwZWMKQEAgLTM2LDYgKzM2LDggQEAgU291cmNlOiAgICAgICAgICV7Z2l0dXJsfS9hcmNoaXZl LyV7dmVyc2lvbn0vYW50bHI0LSV7dmVyc2lvbn0udGFyLmd6CiAjIEZpeCBzb21lIGphdmFkb2Mg cHJvYmxlbXMKICMgaHR0cHM6Ly9naXRodWIuY29tL2FudGxyL2FudGxyNC9wdWxsLzI5NjAKIFBh dGNoOiAgICAgICAgICBhbnRscjQtamF2YWRvYy5wYXRjaAorIyBDb25maW5lIHRva2VuVm9jYWIg bG9va3VwIHRvIHRoZSBzZWFyY2ggZGlyZWN0b3J5IChDVkUtMjAyNi0xMzUwMykKK1BhdGNoOiAg ICAgICAgICAle2dpdHVybH0vcHVsbC80OTQyLnBhdGNoCiAKIEJ1aWxkUmVxdWlyZXM6ICBjbWFr ZQogQnVpbGRSZXF1aXJlczogIGdjYy1jKysKQEAgLTIyMiw5ICsyMjQsNiBAQCBmaW5kIC1uYW1l IFwqLmphciAtZGVsZXRlCiAjIGlvLnRha2FyaS5tYXZlbi5wbHVnaW5zOnRha2FyaS1wbHVnaW4t dGVzdGluZwogJXBvbV9yZW1vdmVfZGVwIC1yIDp0YWthcmktcGx1Z2luLXRlc3RpbmcKIAotIyBB ZGFwdCB0byBqYWthcnRhLWpzb24gMi54Ci0lcG9tX2NoYW5nZV9kZXAgb3JnLmdsYXNzZmlzaDpq YXZheC5qc29uIGpha2FydGEuanNvbjpqYWthcnRhLmpzb24tYXBpIHJ1bnRpbWUtdGVzdHN1aXRl Ci0KICMgTWlzc2luZyBwbHVnaW5zCiAjIGlvLnRha2FyaS5tYXZlbi5wbHVnaW5zOnRha2FyaS1s aWZlY3ljbGUtcGx1Z2luCiAlcG9tX3JlbW92ZV9wbHVnaW4gLXIgOnRha2FyaS1saWZlY3ljbGUt cGx1Z2luCg==