From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Richard Hughes To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Backport a patch from master to stop gnome-settings-daemon crashing Date: Tue, 11 Aug 2026 10:35:36 GMT Message-ID: <178644453649.1.9717234040572774241.rpms-glib2-5ccb823475db@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 5ccb823475db01d83d1c562968ca022cf2edd2a6 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IDVjY2I4MjM0NzVkYjAxZDgzZDFjNTYyOTY4 Y2EwMjJjZjJlZGQyYTYKQXV0aG9yIDogUmljaGFyZCBIdWdoZXMgPHJpY2hhcmRAaHVnaHNpZS5j b20+CkRhdGUgICA6IDIwMTMtMTItMDlUMDg6NDI6MDMrMDA6MDAKU3RhdHMgIDogKzk1Ly0xIGlu IDIgZmlsZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2ds aWIyL2MvNWNjYjgyMzQ3NWRiMDFkODNkMWM1NjI5NjhjYTAyMmNmMmVkZDJhNj9icmFuY2g9Y3Zl LTIwMjYtNTgwMTYtZjQ0CgpMb2c6CkJhY2twb3J0IGEgcGF0Y2ggZnJvbSBtYXN0ZXIgdG8gc3Rv cCBnbm9tZS1zZXR0aW5ncy1kYWVtb24gY3Jhc2hpbmcKCi0tLQpkaWZmIC0tZ2l0IGEvMDAwMS1H REJ1c09iamVjdE1hbmFnZXJDbGllbnQta2VlcC10aGUtbWFuYWdlci1hbGl2ZS13aGlsLnBhdGNo IGIvMDAwMS1HREJ1c09iamVjdE1hbmFnZXJDbGllbnQta2VlcC10aGUtbWFuYWdlci1hbGl2ZS13 aGlsLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjY1MDI5ZjYKLS0t IC9kZXYvbnVsbAorKysgYi8wMDAxLUdEQnVzT2JqZWN0TWFuYWdlckNsaWVudC1rZWVwLXRoZS1t YW5hZ2VyLWFsaXZlLXdoaWwucGF0Y2gKQEAgLTAsMCArMSw4NyBAQAorRnJvbSAxMzAwMTA4ZTBj NTBlNzBkNTQxNGMxOTU2NDlhZDQxNDE5MDc0ZTFhIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQor RnJvbTogUnVpIE1hdG9zIDx0aWFnb21hdG9zQGdtYWlsLmNvbT4KK0RhdGU6IFdlZCwgMjcgTm92 IDIwMTMgMTQ6MzI6MDUgKzAxMDAKK1N1YmplY3Q6IFtQQVRDSF0gR0RCdXNPYmplY3RNYW5hZ2Vy Q2xpZW50OiBrZWVwIHRoZSBtYW5hZ2VyIGFsaXZlIHdoaWxlIGZpcmluZworIHNpZ25hbHMKKwor SGFuZGxlcnMgZm9yIHRoZSBzaWduYWxzIHdlIGVtaXQgbWlnaHQgdW5yZWYgdGhlIG9iamVjdCBt YW5hZ2VyLiBNYWtlCitzdXJlIHdlIGtlZXAgaXQgYWxpdmUgdW50aWwgd2UgYXJlIGRvbmUgd2l0 aCBpdC4KKworaHR0cHM6Ly9idWd6aWxsYS5nbm9tZS5vcmcvc2hvd19idWcuY2dpP2lkPTcxOTQw MgorLS0tCisgZ2lvL2dkYnVzb2JqZWN0bWFuYWdlcmNsaWVudC5jIHwgOSArKysrKysrKy0KKyAx IGZpbGUgY2hhbmdlZCwgOCBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCisKK2RpZmYgLS1n aXQgYS9naW8vZ2RidXNvYmplY3RtYW5hZ2VyY2xpZW50LmMgYi9naW8vZ2RidXNvYmplY3RtYW5h Z2VyY2xpZW50LmMKK2luZGV4IGQ5Y2NmNzEuLmYzM2NhMjEgMTAwNjQ0CistLS0gYS9naW8vZ2Ri dXNvYmplY3RtYW5hZ2VyY2xpZW50LmMKKysrKyBiL2dpby9nZGJ1c29iamVjdG1hbmFnZXJjbGll bnQuYworQEAgLTEwMDYsNiArMTAwNiw3IEBAIHNpZ25hbF9jYiAoR0RCdXNDb25uZWN0aW9uICpj b25uZWN0aW9uLAorIAorICAgLy9nX2RlYnVnICgieWF5LCBzaWduYWxfY2IgJXMgJXM6ICVzXG4i LCBzaWduYWxfbmFtZSwgb2JqZWN0X3BhdGgsIGdfdmFyaWFudF9wcmludCAocGFyYW1ldGVycywg VFJVRSkpOworIAorKyAgZ19vYmplY3RfcmVmIChtYW5hZ2VyKTsKKyAgIGlmIChnX3N0cmNtcDAg KGludGVyZmFjZV9uYW1lLCAib3JnLmZyZWVkZXNrdG9wLkRCdXMuUHJvcGVydGllcyIpID09IDAp CisgICAgIHsKKyAgICAgICBpZiAoZ19zdHJjbXAwIChzaWduYWxfbmFtZSwgIlByb3BlcnRpZXND aGFuZ2VkIikgPT0gMCkKK0BAIC0xMDg3LDYgKzEwODgsNyBAQCBzaWduYWxfY2IgKEdEQnVzQ29u bmVjdGlvbiAqY29ubmVjdGlvbiwKKyAgICAgICAgICAgZ19vYmplY3RfdW5yZWYgKGludGVyZmFj ZSk7CisgICAgICAgICB9CisgICAgIH0KKysgIGdfb2JqZWN0X3VucmVmIChtYW5hZ2VyKTsKKyAK KyAgb3V0OgorICAgZ19jbGVhcl9vYmplY3QgKCZvYmplY3RfcHJveHkpOworQEAgLTEyNDMsNiAr MTI0NSw3IEBAIG9uX25vdGlmeV9nX25hbWVfb3duZXIgKEdPYmplY3QgICAgKm9iamVjdCwKKyAg IG5ld19uYW1lX293bmVyID0gZ19kYnVzX3Byb3h5X2dldF9uYW1lX293bmVyIChtYW5hZ2VyLT5w cml2LT5jb250cm9sX3Byb3h5KTsKKyAgIG1hbmFnZXItPnByaXYtPm5hbWVfb3duZXIgPSBOVUxM OworIAorKyAgZ19vYmplY3RfcmVmIChtYW5hZ2VyKTsKKyAgIGlmIChnX3N0cmNtcDAgKG9sZF9u YW1lX293bmVyLCBuZXdfbmFtZV9vd25lcikgIT0gMCkKKyAgICAgeworICAgICAgIEdMaXN0ICps OworQEAgLTEzMTksNiArMTMyMiw3IEBAIG9uX25vdGlmeV9nX25hbWVfb3duZXIgKEdPYmplY3Qg ICAgKm9iamVjdCwKKyAKKyAgICAgfQorICAgZ19mcmVlIChvbGRfbmFtZV9vd25lcik7CisrICBn X29iamVjdF91bnJlZiAobWFuYWdlcik7CisgfQorIAorIHN0YXRpYyBnYm9vbGVhbgorQEAgLTE1 NDMsNiArMTU0Nyw3IEBAIGFkZF9pbnRlcmZhY2VzIChHREJ1c09iamVjdE1hbmFnZXJDbGllbnQg Km1hbmFnZXIsCisgICBnX211dGV4X3VubG9jayAoJm1hbmFnZXItPnByaXYtPmxvY2spOworIAor ICAgLyogbm93IHRoYXQgd2UgZG9uJ3QgaG9sZCB0aGUgbG9jayBhbnkgbW9yZSwgZW1pdCBzaWdu YWxzICovCisrICBnX29iamVjdF9yZWYgKG1hbmFnZXIpOworICAgZm9yIChsID0gaW50ZXJmYWNl X2FkZGVkX3NpZ25hbHM7IGwgIT0gTlVMTDsgbCA9IGwtPm5leHQpCisgICAgIHsKKyAgICAgICBp bnRlcmZhY2VfcHJveHkgPSBHX0RCVVNfUFJPWFkgKGwtPmRhdGEpOworQEAgLTE1NTgsOCArMTU2 Myw4IEBAIGFkZF9pbnRlcmZhY2VzIChHREJ1c09iamVjdE1hbmFnZXJDbGllbnQgKm1hbmFnZXIs CisgICAgICAgICAgICAgICAgICAgICAgICAgICAgb3ApOworICAgICAgIGdfc2lnbmFsX2VtaXRf YnlfbmFtZSAobWFuYWdlciwgIm9iamVjdC1hZGRlZCIsIG9wKTsKKyAgICAgfQorKyAgZ19vYmpl Y3RfdW5yZWYgKG1hbmFnZXIpOworICAgZ19vYmplY3RfdW5yZWYgKG9wKTsKKy0KKyB9CisgCisg c3RhdGljIHZvaWQKK0BAIC0xNTkyLDYgKzE1OTcsNyBAQCByZW1vdmVfaW50ZXJmYWNlcyAoR0RC dXNPYmplY3RNYW5hZ2VyQ2xpZW50ICAgKm1hbmFnZXIsCisgICBudW1faW50ZXJmYWNlc190b19y ZW1vdmUgPSBnX3N0cnZfbGVuZ3RoICgoZ2NoYXIgKiopIGludGVyZmFjZV9uYW1lcyk7CisgCisg ICAvKiBzZWUgaWYgd2UgYXJlIGdvaW5nIHRvIGNvbXBsZXRldHkgcmVtb3ZlIHRoZSBvYmplY3Qg Ki8KKysgIGdfb2JqZWN0X3JlZiAobWFuYWdlcik7CisgICBpZiAobnVtX2ludGVyZmFjZXNfdG9f cmVtb3ZlID09IG51bV9pbnRlcmZhY2VzKQorICAgICB7CisgICAgICAgZ19vYmplY3RfcmVmIChv cCk7CitAQCAtMTYxNyw2ICsxNjIzLDcgQEAgcmVtb3ZlX2ludGVyZmFjZXMgKEdEQnVzT2JqZWN0 TWFuYWdlckNsaWVudCAgICptYW5hZ2VyLAorICAgICAgICAgfQorICAgICAgIGdfb2JqZWN0X3Vu cmVmIChvcCk7CisgICAgIH0KKysgIGdfb2JqZWN0X3VucmVmIChtYW5hZ2VyKTsKKyAgb3V0Ogor ICAgOworIH0KKy0tIAorMS44LjQuMgorCgpkaWZmIC0tZ2l0IGEvZ2xpYjIuc3BlYyBiL2dsaWIy LnNwZWMKaW5kZXggMjY3ZWE0MC4uNTNmNTQ4MCAxMDA2NDQKLS0tIGEvZ2xpYjIuc3BlYworKysg Yi9nbGliMi5zcGVjCkBAIC0zLDEzICszLDE2IEBACiBTdW1tYXJ5OiBBIGxpYnJhcnkgb2YgaGFu ZHkgdXRpbGl0eSBmdW5jdGlvbnMKIE5hbWU6IGdsaWIyCiBWZXJzaW9uOiAyLjM5LjEKLVJlbGVh c2U6IDElez9kaXN0fQorUmVsZWFzZTogMiV7P2Rpc3R9CiBMaWNlbnNlOiBMR1BMdjIrCiBHcm91 cDogU3lzdGVtIEVudmlyb25tZW50L0xpYnJhcmllcwogVVJMOiBodHRwOi8vd3d3Lmd0ay5vcmcK ICNWQ1M6IGdpdDpnaXQ6Ly9naXQuZ25vbWUub3JnL2dsaWIKIFNvdXJjZTogaHR0cDovL2Rvd25s b2FkLmdub21lLm9yZy9zb3VyY2VzL2dsaWIvMi4zOS9nbGliLSV7dmVyc2lvbn0udGFyLnh6CiAK KyMgYWxyZWFkeSB1cHN0cmVhbQorUGF0Y2gwOiAwMDAxLUdEQnVzT2JqZWN0TWFuYWdlckNsaWVu dC1rZWVwLXRoZS1tYW5hZ2VyLWFsaXZlLXdoaWwucGF0Y2gKKwogQnVpbGRSZXF1aXJlczogcGtn Y29uZmlnCiBCdWlsZFJlcXVpcmVzOiBnZXR0ZXh0CiBCdWlsZFJlcXVpcmVzOiBsaWJhdHRyLWRl dmVsCkBAIC03NSw2ICs3OCw3IEBAIHRoZSBmdW5jdGlvbmFsaXR5IG9mIHRoZSBpbnN0YWxsZWQg Z2xpYjIgcGFja2FnZS4KIAogJXByZXAKICVzZXR1cCAtcSAtbiBnbGliLSV7dmVyc2lvbn0KKyVw YXRjaDAgLXAxIC1iIGZpeC1nc2QKIAogIyBXb3JrYXJvdW5kIHdyb25nIGd0ay1kb2MubWFrZSB0 aW1lc3RhbXAKICMgaHR0cHM6Ly9idWd6aWxsYS5nbm9tZS5vcmcvc2hvd19idWcuY2dpP2lkPTcw MDM1MApAQCAtMjA4LDYgKzIxMiw5IEBAIGdpby1xdWVyeW1vZHVsZXMtJXtfX2lzYV9iaXRzfSAl e19saWJkaXJ9L2dpby9tb2R1bGVzCiAle19kYXRhZGlyfS9pbnN0YWxsZWQtdGVzdHMKIAogJWNo YW5nZWxvZworKiBNb24gRGVjIDA5IDIwMTMgUmljaGFyZCBIdWdoZXMgPHJodWdoZXNAcmVkaGF0 LmNvbT4gLSAyLjM5LjEtMgorLSBCYWNrcG9ydCBhIHBhdGNoIGZyb20gbWFzdGVyIHRvIHN0b3Ag Z25vbWUtc2V0dGluZ3MtZGFlbW9uIGNyYXNoaW5nLgorCiAqIFRodSBOb3YgMTQgMjAxMyBSaWNo YXJkIEh1Z2hlcyA8cmh1Z2hlc0ByZWRoYXQuY29tPiAtIDIuMzkuMS0xCiAtIFVwZGF0ZSB0byAy LjM5LjEKIAo=