0007-Fix-using-int-instead-of-size_t.patch 1.0 KB

1234567891011121314151617181920212223242526272829303132
  1. From 5709dfffb6fdc5b66ce001bf82a755ad8ad1d992 Mon Sep 17 00:00:00 2001
  2. From: Patrick Griffis <pgriffis@igalia.com>
  3. Date: Mon, 28 Oct 2024 12:29:48 -0500
  4. Subject: [PATCH] Fix using int instead of size_t for strcspn return
  5. CVE: CVE-2025-32050
  6. Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/commit/9bb0a55de55c6940ced811a64fbca82fe93a9323]
  7. Upstream: https://git.openembedded.org/meta-openembedded/tree/meta-oe/recipes-support/libsoup/libsoup-2.4/CVE-2025-32050.patch
  8. Signed-off-by: Changqing Li <changqing.li@windriver.com>
  9. Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
  10. ---
  11. libsoup/soup-headers.c | 2 +-
  12. 1 file changed, 1 insertion(+), 1 deletion(-)
  13. diff --git a/libsoup/soup-headers.c b/libsoup/soup-headers.c
  14. index 9707ca0..67905b2 100644
  15. --- a/libsoup/soup-headers.c
  16. +++ b/libsoup/soup-headers.c
  17. @@ -902,7 +902,7 @@ append_param_quoted (GString *string,
  18. const char *name,
  19. const char *value)
  20. {
  21. - int len;
  22. + gsize len;
  23. g_string_append (string, name);
  24. g_string_append (string, "=\"");
  25. --
  26. 2.34.1