Hello community, here is the log from the commit of package id3lib checked in at Thu Sep 13 18:45:24 CEST 2007. -------- --- id3lib/id3lib.changes 2007-03-29 13:23:23.000000000 +0200 +++ /mounts/work_src_done/STABLE/id3lib/id3lib.changes 2007-09-05 13:56:19.000000000 +0200 @@ -1,0 +2,5 @@ +Wed Sep 5 13:54:53 CEST 2007 - ltinkl@suse.cz + +- fix #307073 - VUL-0: id3lib: New id3lib3.8.3 + +------------------------------------------------------------------- New: ---- id3lib-3.8.3-tag_file.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ id3lib.spec ++++++ --- /var/tmp/diff_new_pack.Y10624/_old 2007-09-13 18:45:15.000000000 +0200 +++ /var/tmp/diff_new_pack.Y10624/_new 2007-09-13 18:45:15.000000000 +0200 @@ -12,12 +12,12 @@ Name: id3lib BuildRequires: doxygen gcc-c++ zlib-devel -License: GNU Library General Public License v. 2.0 and 2.1 (LGPL) +License: LGPL v2 or later Group: System/Libraries Group: System/Libraries Autoreqprov: on Version: 3.8.3 -Release: 134 +Release: 164 Source0: %{name}-%{version}.tar.bz2 Patch: id3lib-3.8.2-autoconf.diff Patch2: id3lib-3.8.2-cleanup.diff @@ -26,6 +26,7 @@ Patch5: id3lib-3.8.3-UTF16-writing-bug.patch Patch6: id3lib-3.8.3-zlib.patch Patch7: id3lib-3.8.3-uninitialized.patch +Patch8: id3lib-3.8.3-tag_file.diff URL: http://id3lib.sourceforge.net/ BuildRoot: %{_tmppath}/%{name}-%{version}-build Summary: A Library for Manipulating ID3v1 and ID3v2 tags @@ -91,6 +92,7 @@ %patch5 -p1 %patch6 %patch7 +%patch8 %build rm acconfig.h @@ -153,6 +155,8 @@ %{_prefix}/bin/id3* %changelog +* Wed Sep 05 2007 - ltinkl@suse.cz +- fix #307073 - VUL-0: id3lib: New id3lib3.8.3 * Thu Mar 29 2007 - rguenther@suse.de - add zlib-devel BuildRequires * Fri Jun 30 2006 - nadvornik@suse.cz ++++++ id3lib-3.8.3-tag_file.diff ++++++ --- src/tag_file.cpp +++ src/tag_file.cpp @@ -242,8 +242,8 @@ strcpy(sTempFile, filename.c_str()); strcat(sTempFile, sTmpSuffix.c_str()); -#if ((defined(__GNUC__) && __GNUC__ >= 3 ) || !defined(HAVE_MKSTEMP)) - // This section is for Windows folk && gcc 3.x folk +#if !defined(HAVE_MKSTEMP) + // This section is for Windows folk fstream tmpOut; createFile(sTempFile, tmpOut); @@ -257,7 +257,7 @@ tmpOut.write((char *)tmpBuffer, nBytes); } -#else //((defined(__GNUC__) && __GNUC__ >= 3 ) || !defined(HAVE_MKSTEMP)) +#else //!defined(HAVE_MKSTEMP) // else we gotta make a temp file, copy the tag into it, copy the // rest of the old file after the tag, delete the old file, rename @@ -270,7 +270,7 @@ //ID3_THROW_DESC(ID3E_NoFile, "couldn't open temp file"); } - ofstream tmpOut(fd); + ofstream tmpOut(sTempFile); if (!tmpOut) { tmpOut.close(); @@ -285,14 +285,14 @@ uchar tmpBuffer[BUFSIZ]; while (file) { - file.read(tmpBuffer, BUFSIZ); + file.read((char *)tmpBuffer, BUFSIZ); size_t nBytes = file.gcount(); - tmpOut.write(tmpBuffer, nBytes); + tmpOut.write((char *)tmpBuffer, nBytes); } close(fd); //closes the file -#endif ////((defined(__GNUC__) && __GNUC__ >= 3 ) || !defined(HAVE_MKSTEMP)) +#endif ////!defined(HAVE_MKSTEMP) tmpOut.close(); file.close(); ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org