View | Details | Raw Unified | Return to bug 250971
Collapse All | Expand All

(-)textproc/raptor2/Makefile (-1 / +1 lines)
Lines 3-9 Link Here
3
3
4
PORTNAME=	raptor2
4
PORTNAME=	raptor2
5
PORTVERSION=	2.0.15
5
PORTVERSION=	2.0.15
6
PORTREVISION=	15
6
PORTREVISION=	16
7
CATEGORIES=	textproc
7
CATEGORIES=	textproc
8
MASTER_SITES=	http://download.librdf.org/source/ \
8
MASTER_SITES=	http://download.librdf.org/source/ \
9
		SF/librdf/${PORTNAME}/${PORTVERSION}
9
		SF/librdf/${PORTNAME}/${PORTVERSION}
(-)textproc/raptor2/files/patch-CVE-2017-18926 (+40 lines)
Line 0 Link Here
1
From 590681e546cd9aa18d57dc2ea1858cb734a3863f Mon Sep 17 00:00:00 2001
2
From: Dave Beckett <dave@dajobe.org>
3
Date: Sun, 16 Apr 2017 23:15:12 +0100
4
Subject: [PATCH] Calcualte max nspace declarations correctly for XML writer
5
6
(raptor_xml_writer_start_element_common): Calculate max including for
7
each attribute a potential name and value.
8
9
Fixes Issues #0000617 http://bugs.librdf.org/mantis/view.php?id=617
10
and #0000618 http://bugs.librdf.org/mantis/view.php?id=618
11
---
12
 src/raptor_xml_writer.c | 7 ++++---
13
 1 file changed, 4 insertions(+), 3 deletions(-)
14
15
diff --git src/raptor_xml_writer.c.orig src/raptor_xml_writer.c
16
index 693b9468..0d3a36a5 100644
17
--- src/raptor_xml_writer.c.orig
18
+++ src/raptor_xml_writer.c
19
@@ -181,9 +181,10 @@ raptor_xml_writer_start_element_common(raptor_xml_writer* xml_writer,
20
   size_t nspace_declarations_count = 0;  
21
   unsigned int i;
22
 
23
-  /* max is 1 per element and 1 for each attribute + size of declared */
24
   if(nstack) {
25
-    int nspace_max_count = element->attribute_count+1;
26
+    int nspace_max_count = element->attribute_count * 2; /* attr and value */
27
+    if(element->name->nspace)
28
+      nspace_max_count++;
29
     if(element->declared_nspaces)
30
       nspace_max_count += raptor_sequence_size(element->declared_nspaces);
31
     if(element->xml_language)
32
@@ -237,7 +238,7 @@ raptor_xml_writer_start_element_common(raptor_xml_writer* xml_writer,
33
         }
34
       }
35
 
36
-      /* Add the attribute + value */
37
+      /* Add the attribute's value */
38
       nspace_declarations[nspace_declarations_count].declaration=
39
         raptor_qname_format_as_xml(element->attributes[i],
40
                                    &nspace_declarations[nspace_declarations_count].length);

Return to bug 250971