From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Richard Hughes To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: - Backport a patch from git master to avoid a segfault when doing the Date: Tue, 11 Aug 2026 10:34:28 GMT Message-ID: <178644446873.1.7230750388709594274.rpms-glib2-bf0da4ed34e9@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: bf0da4ed34e96d1666803007745377611977dba4 ICAgICAgICBBIG5ldyBjb21taXQgaGFzIGJlZW4gcHVzaGVkLgoKICAgICAgICBSZXBvICAgOiBy cG1zL2dsaWIyCiAgICAgICAgQnJhbmNoIDogY3ZlLTIwMjYtNTgwMTYtZjQ0CiAgICAgICAgQ29t bWl0IDogYmYwZGE0ZWQzNGU5NmQxNjY2ODAzMDA3NzQ1Mzc3NjExOTc3ZGJhNAogICAgICAgIEF1 dGhvciA6IFJpY2hhcmQgSHVnaGVzIDxyaHVnaGVzQGZlZG9yYXByb2plY3Qub3JnPgogICAgICAg IERhdGUgICA6IDIwMTAtMDYtMjJUMDg6NTQ6NDErMDA6MDAKICAgICAgICBTdGF0cyAgOiArNDUv LTEgaW4gMiBmaWxlKHMpCiAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVj dC5vcmcvcnBtcy9nbGliMi9jL2JmMGRhNGVkMzRlOTZkMTY2NjgwMzAwNzc0NTM3NzYxMTk3N2Ri YTQ/YnJhbmNoPWN2ZS0yMDI2LTU4MDE2LWY0NAoKICAgICAgICBMb2c6CiAgICAgICAgLSBCYWNr cG9ydCBhIHBhdGNoIGZyb20gZ2l0IG1hc3RlciB0byBhdm9pZCBhIHNlZ2ZhdWx0IHdoZW4gZG9p bmcgdGhlCnNjaGVtYSBmaWxlIGNoZWNrIGZvciBzZXZlcmFsIEdOT01FIHByb2plY3RzLgoKLS0t CmRpZmYgLS1naXQgYS8wMDAzLUZpeC1idWctaW4tc3RyaW5mby5wYXRjaCBiLzAwMDMtRml4LWJ1 Zy1pbi1zdHJpbmZvLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjgx OGMxZjcKLS0tIC9kZXYvbnVsbAorKysgYi8wMDAzLUZpeC1idWctaW4tc3RyaW5mby5wYXRjaApA QCAtMCwwICsxLDM2IEBACitGcm9tIGE3Njg5NTM3NjA1YWRlNTFiMTliZTc2YmFhM2ZiYTMwMzUy NzQ4M2QgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBSeWFuIExvcnRpZSA8ZGVzcnRA ZGVzcnQuY2E+CitEYXRlOiBTYXQsIDE5IEp1biAyMDEwIDExOjM4OjU3IC0wNDAwCitTdWJqZWN0 OiBbUEFUQ0ggMDMvNDVdIEZpeCBidWcgaW4gc3RyaW5mbworCitXZSBjYW4ndCBzZWFyY2ggZm9y IGEgbGFyZ2VyIG5lZWRsZSBpbnNpZGUgb2YgYSBzbWFsbGVyIGhheXN0YWNrLCBhbmQKK3Vuc2ln bmVkIGludGVnZXIgc3VidHJhY3Rpb24gdGVuZHMgdG8gcmVzdWx0IGluIHZlcnkgbGFyZ2UgbnVt YmVycworcmF0aGVyIHRoYW4gc21hbGwgb25lcy4KKworQWRkIGEgY2hlY2sgZm9yIHRoaXMgY2Fz ZSBhbmQgYWJvcnQgb3V0IGltbWVkaWF0ZWx5LgorCitBbHNvIGFkZCBhIHRlc3QgY2FzZSAobGlm dGVkIGRpcmVjdGx5IGZyb20gdGhlIGRvY3MpIHRoYXQgZGVtb25zdHJhdGVzCit0aGUgcHJvYmxl bS4KKworSXNzdWUgZGlzY292ZXJlZCBhbmQgdHJhY2tlZCBkb3duIGJ5IE1pbGFuIEJvdWNoZXQt VmFsYXQKKy0tLQorIGdpby9zdHJpbmZvLmMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IHwgICAgMyArKworIGdpby90ZXN0cy9nc2NoZW1hLWNvbXBpbGUuYyAgICAgICAgICAgICAgICAg IHwgICAgMyArLQorIGdpby90ZXN0cy9zY2hlbWEtdGVzdHMvZnJvbS1kb2NzLmdzY2hlbWEueG1s IHwgICAzNCArKysrKysrKysrKysrKysrKysrKysrKysrKworIDMgZmlsZXMgY2hhbmdlZCwgMzkg aW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbnMoLSkKKyBjcmVhdGUgbW9kZSAxMDA2NDQgZ2lvL3Rl c3RzL3NjaGVtYS10ZXN0cy9mcm9tLWRvY3MuZ3NjaGVtYS54bWwKKworZGlmZiAtLWdpdCBhL2dp by9zdHJpbmZvLmMgYi9naW8vc3RyaW5mby5jCitpbmRleCA5YmExOGFhLi5mNzYyZmM1IDEwMDY0 NAorLS0tIGEvZ2lvL3N0cmluZm8uYworKysrIGIvZ2lvL3N0cmluZm8uYworQEAgLTE0Nyw2ICsx NDcsOSBAQCBzdHJpbmZvX3NjYW4gKGNvbnN0IGd1aW50MzIgKnN0cmluZm8sCisgeworICAgZ3Vp bnQgaSA9IDA7CisgCisrICBpZiAobGVuZ3RoIDwgbl93b3JkcykKKysgICAgcmV0dXJuIC0xOwor KworICAgd2hpbGUgKGkgPD0gbGVuZ3RoIC0gbl93b3JkcykKKyAgICAgeworICAgICAgIGd1aW50 IGogPSAwOwoKZGlmZiAtLWdpdCBhL2dsaWIyLnNwZWMgYi9nbGliMi5zcGVjCmluZGV4IDBjY2Fi MWEuLjgyZWMwNGMgMTAwNjQ0Ci0tLSBhL2dsaWIyLnNwZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAt Myw3ICszLDcgQEAKIFN1bW1hcnk6IEEgbGlicmFyeSBvZiBoYW5keSB1dGlsaXR5IGZ1bmN0aW9u cwogTmFtZTogZ2xpYjIKIFZlcnNpb246IDIuMjUuOQotUmVsZWFzZTogMSV7P2Rpc3R9CitSZWxl YXNlOiAyJXs/ZGlzdH0KIExpY2Vuc2U6IExHUEx2MisKIEdyb3VwOiBTeXN0ZW0gRW52aXJvbm1l bnQvTGlicmFyaWVzCiBVUkw6IGh0dHA6Ly93d3cuZ3RrLm9yZwpAQCAtMjYsNiArMjYsOSBAQCBC dWlsZFJlcXVpcmVzOiBndGstZG9jCiAjIHJlcXVpcmVkIGZvciBHSU8gY29udGVudC10eXBlIHN1 cHBvcnQKIFJlcXVpcmVzOiBzaGFyZWQtbWltZS1pbmZvCiAKKyMgYWxyZWFkeSB1cHN0cmVhbQor UGF0Y2gxOiAwMDAzLUZpeC1idWctaW4tc3RyaW5mby5wYXRjaAorCiAlZGVzY3JpcHRpb24KIEdM aWIgaXMgdGhlIGxvdy1sZXZlbCBjb3JlIGxpYnJhcnkgdGhhdCBmb3JtcyB0aGUgYmFzaXMgZm9y IHByb2plY3RzCiBzdWNoIGFzIEdUSysgYW5kIEdOT01FLiBJdCBwcm92aWRlcyBkYXRhIHN0cnVj dHVyZSBoYW5kbGluZyBmb3IgQywKQEAgLTUyLDYgKzU1LDcgQEAgVGhlIGdsaWIyLXN0YXRpYyBw YWNrYWdlIGluY2x1ZGVzIHN0YXRpYyBsaWJyYXJpZXMgb2YgdGhlIEdMaWIgbGlicmFyeS4KIAog JXByZXAKICVzZXR1cCAtcSAtbiBnbGliLSV7dmVyc2lvbn0KKyVwYXRjaDEgLXAxIC1iIC5zdHJp bmZvLWJ1ZwogCiAlYnVpbGQKICVjb25maWd1cmUgLS1kaXNhYmxlLWd0ay1kb2MgXApAQCAtMTYx LDYgKzE2NSwxMCBAQCBnaW8tcXVlcnltb2R1bGVzLSV7X19pc2FfYml0c30gJXtfbGliZGlyfS9n aW8vbW9kdWxlcwogJXtfbGliZGlyfS9saWIqLmEKIAogJWNoYW5nZWxvZworKiBUdWUgSnVuIDIy IDIwMTAgUmljaGFyZCBIdWdoZXMgPHJodWdoZXNAcmVkaGF0LmNvbT4gLSAyLjI1LjktMgorLSBC YWNrcG9ydCBhIHBhdGNoIGZyb20gZ2l0IG1hc3RlciB0byBhdm9pZCBhIHNlZ2ZhdWx0IHdoZW4g ZG9pbmcgdGhlCisgIHNjaGVtYSBmaWxlIGNoZWNrIGZvciBzZXZlcmFsIEdOT01FIHByb2plY3Rz LgorCiAqIEZyaSBKdW4gMTggMjAxMCBNYXR0aGlhcyBDbGFzZW4gPG1jbGFzZW5AcmVkaGF0LmNv bT4gLSAyLjI1LjktMQogLSBVcGRhdGUgdG8gMi4yNS45CiAK