Changelog:
=========
* Fixed: [CVE-2021-46141]
Fix a bug affecting both uriNormalizeSyntax* and uriMakeOwner*
functions where the text range in .hostText would not be duped using
malloc but remain unchanged (and hence "not owned") for URIs with
an IPv4 or IPv6 address hostname; depending on how an application
uses uriparser, this could lead the application into a use-after-free
situation.
As the second half, fix uriFreeUriMembers* functions that would not
free .hostText memory for URIs with an IPv4 or IPv6 address host;
also, calling uriFreeUriMembers* multiple times on a URI of this
very nature would result in trying to free pointers to stack
(rather than heap) memory (GitHub #121, GitHub #124)
Commit 987b046e41f407d17c622e580fc82a5e834b4329
Commit b1a34743bc1472e055d886e29e9b53f670eb3282
* Fixed: [CVE-2021-46142]
Fix functions uriNormalizeSyntax* for out-of-memory situations
(i.e. malloc returning NULL) for URIs containing empty segments
(any of user info, host text, query, or fragment) where previously
pointers to stack (rather than heap) memory were freed (GitHub #122,
GitHub #124)
Commit c0483990e6b5b454f7c8752b36760cfcb0d093f5
* Fixed: CMake: Call "enable_language(CXX)" prior to tinkering with
CMAKE_CXX_* variables (GitHub #110)
* Fixed: CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
and CMAKE_INSTALL_INCLUDEDIR (GitHub #114)
* Fixed: Windows: Address MSVC compiler warnings (GitHub #111, GitHub #113)
* Fixed: Documentation: Space requirements for uriUriStringToUnixFilename
did not take into account short form "file:/bin/bash" of RFC 8089 of 2017
(with prefix "file:/" rather than "file:///") that uriparser supports
since release 0.8.6 in 2018 (GitHub #118, GitHub #119)
* Fixed: Compile error with MinGW GCC 9 related to a mismatched prototype
for function inet_ntop (GitHub #117, GitHub #120)
* Fixed: Compile warnings in test suite code (GitHub #120)
* Improved: Respect variable ${CPP} in doc/preprocess.sh (GitHub #115)
* Added: Test suite invocation for MinGW using Wine (GitHub #120)
* Soname: 1:29:0 - see https://verbump.de/ for what these numbers do
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: copyright years updated
Changelog:
2020-05-31 -- 0.9.4
* Fixed: testrunner: No longer crashes when compiled with NDEBUG (GitHub #67)
* Fixed: CMake: Support GTest 1.8.0 (GitHub #68)
Thanks to Ryan Schmidt for the related report!
* Fixed: CMake: Use variable GTEST_INCLUDE_DIRS (with plural "S") rather than
GTEST_INCLUDE_DIR (GitHub #79, #81)
Thanks to Wouter Beek for the related report!
* Improved: CMake: Send config summary to stdout, not stderr (GitHub #72)
Thanks to Scott Donelan for the patch!
* Improved: Make -DURIPARSER_BUILD_TESTS=OFF unlock compilation without
a C++ compiler; thanks to Fabrice Fontaine for the patch! (GitHub #69)
* Added: Functions to make UriUri[AW] instances independent of the original
URI string (GitHub #77 and #78)
New functions:
uriMakeOwner[AW]
uriMakeOwnerMm[AW]
* Added: CMake option URIPARSER_ENABLE_INSTALL to toggle installation of
files, defaults to "ON" (GitHub #74, #75)
Thanks to Scott Donelan for the patch!
* Soname: 1:26:0
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fixes:
INFO: Skip package uriparser (status = UNKNOWN_BROKEN, current version = 0.9.3, next version = N/A)
After this commit:
INFO: Skip package uriparser (status = MATCH, current version = 0.9.3, next version = 0.9.3)
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
It is useful to be able to build a native version of uriparser
e.g. when you're building your entire distribution on native for
validation and testing purposes.
Signed-off-by: Sam Nobs <samuel.nobs@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Currently I'm aware of the following layers/recipes which depend on uriparser:
- meta-measured/recipes-tpm/tpm2-tss
- meta-webos-ports/meta-luneos/recipes-webos/luna-sysservice
- meta-webos-ports/meta-luneos/recipes-webos/libpbnjson
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
