| Message ID | 20180820001208.10551-1-casantos@datacom.com.br |
|---|---|
| State | Accepted |
| Commit | cba4062a34c62a4539cf8b0e6e5e033ddde8d344 |
| Headers | show |
| Series | liburiparser: bump to version 0.8.6 | expand |
>>>>> "Carlos" == Carlos Santos <casantos@datacom.com.br> writes: > Version 0.8.6 is a bugfix release including a nasty bug that has > potential to crash applications when parsing certain URIs (like > "//:%aa@", excluding quotes). > For more details please check the change log at > https://github.com/uriparser/uriparser/blob/uriparser-0.8.6/ChangeLog > Signed-off-by: Carlos Santos <casantos@datacom.com.br> Committed, thanks. When was this issue introduced? 2018.02.x has 0.8.4.
> From: "Peter Korsgaard" <peter@korsgaard.com> > To: "DATACOM" <casantos@datacom.com.br> > Cc: "buildroot" <buildroot@buildroot.org>, "Bernd Kuhls" <bernd.kuhls@t-online.de> > Sent: Monday, August 20, 2018 2:22:58 PM > Subject: Re: [PATCH] liburiparser: bump to version 0.8.6 >>>>>> "Carlos" == Carlos Santos <casantos@datacom.com.br> writes: > > > Version 0.8.6 is a bugfix release including a nasty bug that has > > potential to crash applications when parsing certain URIs (like > > "//:%aa@", excluding quotes). > > > For more details please check the change log at > > > https://github.com/uriparser/uriparser/blob/uriparser-0.8.6/ChangeLog > > > Signed-off-by: Carlos Santos <casantos@datacom.com.br> > > Committed, thanks. > > When was this issue introduced? 2018.02.x has 0.8.4. Looking a the code it seems to predate 0.8.4 by several years since it fixes a function that was introduced in 2008: https://github.com/uriparser/uriparser/commit/451eb07f3a289e0d1b7800629f4814bf6b48c121
>>>>> "Carlos" == Carlos Santos <casantos@datacom.com.br> writes: Hi, >> Committed, thanks. >> >> When was this issue introduced? 2018.02.x has 0.8.4. > Looking a the code it seems to predate 0.8.4 by several years since it > fixes a function that was introduced in 2008: > https://github.com/uriparser/uriparser/commit/451eb07f3a289e0d1b7800629f4814bf6b48c121 Ok, thanks. I'll cherry pick this bump for 2018.02.x as well next time I sync then.
diff --git a/package/liburiparser/liburiparser.hash b/package/liburiparser/liburiparser.hash index c03e832f9f..1fd65d2f19 100644 --- a/package/liburiparser/liburiparser.hash +++ b/package/liburiparser/liburiparser.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 58eacd5c03d9e341c04eb0b30831faec89f3b415949ff8d72254e63432352cdd uriparser-0.8.5.tar.bz2 +sha256 0709a7e572417db763f0356250d91686c19a64ab48e9da9f5a1e8055dc2a4a54 uriparser-0.8.6.tar.bz2 sha256 ee90029e62d11f48faa59360d15c3ad8e7c094c74cc25b055716d92340da561f COPYING diff --git a/package/liburiparser/liburiparser.mk b/package/liburiparser/liburiparser.mk index 4b32b7f7f2..baed4506a4 100644 --- a/package/liburiparser/liburiparser.mk +++ b/package/liburiparser/liburiparser.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBURIPARSER_VERSION = 0.8.5 +LIBURIPARSER_VERSION = 0.8.6 LIBURIPARSER_SOURCE = uriparser-$(LIBURIPARSER_VERSION).tar.bz2 LIBURIPARSER_SITE = https://github.com/uriparser/uriparser/releases/download/uriparser-$(LIBURIPARSER_VERSION) LIBURIPARSER_LICENSE = BSD-3-Clause
Version 0.8.6 is a bugfix release including a nasty bug that has potential to crash applications when parsing certain URIs (like "//:%aa@", excluding quotes). For more details please check the change log at https://github.com/uriparser/uriparser/blob/uriparser-0.8.6/ChangeLog Signed-off-by: Carlos Santos <casantos@datacom.com.br> --- package/liburiparser/liburiparser.hash | 2 +- package/liburiparser/liburiparser.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)