Activity for Florian Weimer
-
Florian Weimer committed [c2b6cc] on xorg-x11-server
Make more functions available in fb.h with !FB_ACCESS_WRAPPER
-
Document fetch triggered by XML writer raw XML validation
-
Thank. Please proceed to make this issue public (if that's what you want to do). Red Hat does not require an embargo for this.
-
We received another closely related report. I've been instructed to mention: Found by AISLE in partnership with Red Hat The reconstructed reproducer: from docutils.core import publish_string PEP_RST = """\ PEP: 1 Title: </title><script>alert('XSS')</script> Author: Test Author Status: Draft Type: Standards Track Content-Type: text/x-rst Created: 01-Jan-2000 Body text. """ print(publish_string( PEP_RST, reader_name="pep", writer_name="pep_html", settings_overrides={ "raw_enabled": False, "file_insertion_enabled":...
-
XSS via unescaped HTML in PEP email masking transform
-
This avoids an error: i_read(spawn_id fd=6): invalid or incomplete multibyte or wide character
-
Disable text mode translation in unbuffer
-
The code is non-portable, but for ASCII character sets, the construct is fine because '\200' plus a printable character is in the range of char, whether char is signed or not. The cppcheck warning is bogus.
-
In Fedora, we have a downstream patch to fix some pointer incompatibles, but it only changed the minimum required to fix a bug on s390x. I fixed some more problems, and the compilation errors are gone.
-
In Fedoraw, we have a downstream patch to fix some pointer incompatibles, but it only changed the minimum required to fix a bug on s390x. I fixed some more problems, and the compilation errors are gone.
-
sblim-sfcc: Pointer casts for compatibility with C89, GCC 14
-
Incompatible pointer types, const correctness (GCC 14/Clang 16 compilation fixes)
-
And another fix for exp_chan.c. This ports expect to the current channel code (I hope).
-
C type errors in the SWIG-generated Perl bindings
-
GCC 14/Clang compatibility fix
-
Fix type errors in the cgreen with constraints facility
-
Good catch, but that's already not working with any compiler because CLOCK_REALTIME is undefined. We are focusing mostly on regressions, especially with the current instrumentation that suppresses error logging in case of unrelated errors.
-
Fix C compatibility issues in the configure script
-
Updated patch, looks better now.
-
These probes only have uninitialized variable warnings: configure:5348: gcc -c -pipe -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Werror=implicit-function-declaration -Werror=implicit-int -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection...
-
Patch
-
Fix type errors in configure script
-
Configure probes for gethostbyname_r and getpwuid_r fail incorrectly with strict compilers
-
https://regina-rexx.sourceforge.io/ Sourceforge links mostly broken
-
And this one fixes errors in the configure probes that were flagged in our tester.
-
Updated patch with another fix for the 3-DES code.
-
-Wreturn-mismatch C compatibility fix
-
Thanks for the hint, moved: https://gitlab.com/gnu-clisp/clisp/-/issues/42
-
configure: Add fake prototypes for C99 compatibility.
-
Related to: https://fedoraproject.org/wiki/Changes/PortingToModernC https://fedoraproject.org/wiki/Toolchain/PortingToModernC
-
C99 compatibility fixes (implicit ints, implicit function declarations)
-
C99 compatibility fix for src/maint/hediag.c
-
configure: Add fake prototypes for C99 compatibility
-
configure: Add fake prototypes for C99 compatibility
-
sblim-smis-hba C99 compatibility fix
-
C99 compatibility fix for the configure script
-
Don't you need #include <stdlib.h> as well, for exit?
-
Avoid implicit declaration of exit in cmake/modules/TestForHighBitCharacters.c
-
Enable AC_USE_SYSTEM_EXTENSIONS to avoid implicit function declarations
-
We have to fix this in Fedora for compatibility with future compilers. Attached is the patch we are going to use. Related to: https://fedoraproject.org/wiki/Changes/PortingToModernC https://fedoraproject.org/wiki/Toolchain/PortingToModernC
-
Debian fixed this in a slightly different way: https://sources.debian.org/src/guix/1.4.0-1/gnu/packages/patches/sdl-pango-header-guard.patch/?hl=7#L7 That patch reuses the existing header guard, which is maybe slightly more appropriate (although it's still problematic, of course).
-
CL_MACH_VM configure check will fail with future compilers
-
Improve C99 compatibility of stresstest
-
sblim-cmpi-nfsv3 C99 compatibility in lexer/parser integration
-
Improve C99 compatibility of configure script
-
It's not urgent at all. We carry a downstream for now. As long as it gets fixed before the next upstream release, Fedora will be fine (and even if a release does not change these files at all, then we'll just carry the downstream patch forward).
-
Include <sys/ioctl.h>for the ioctl function (C99 compatibility)
-
C99 compatibility of tm_gmtoff autoconf probes
-
Implicit declaration of readlink due to _POSIX_*_SOURCE macro changes (C99 compatibility)
-
Avoid implicit ints in mcrypt_symb.c for C99 compatibility
-
C99 compatibility fixes for configure scripts
-
C99 compatibility fixes
-
Updated patch.
-
Additional C99 compatibility fixes.
-
Avoid implicit int types in PyMca5/PyMcaIO/sps/Src/sps_lut.c
-
C99 compatibility fixes for ip.c
-
Include <unistd.h> for a declaration of unlink
-
Include <string.h> in rwpng.c
-
Make sure that <time.h> declares strptime in ftp-ls.c
-
C99 compatibility fix for bmp.c
-
C99 compatibility fix for snprintf configure check
-
C99 compatibility fixes
-
Port configure script to C99
-
C99 fix for parser/lexer interface
-
C99 compatibility fix for the configure script
-
C99 compatibility fixes for imap_proxy
-
C99 compatibility fix
-
C99 compatibility fixes
-
Add forward declaration of the handle function
-
Additional prototypes for improved C99 compatibility
-
Add missing declaration of the fhstat function for C99 compatibility
-
It's not that bad, implicit ints are somewhat rare and easy to fix. The implicit function declarations are more work in my experience, but they also provide greater benefit to programmers (although I've seen bugs due to implicit ints as well).
-
C99 fixes for echolinux
-
Another implicit function declaration/header inclusion fix
-
sblim-cmpi-sysfs patch for C99 compatibility
-
Port configure script to C99
-
C99 fixes for acinclude.m4
-
Sure, but where? Here I find only links pointing to the Sourceforge repository.
-
Missing #include directives in main.c
-
Missing #include <stdlib.h> in help.c
-
Fix some issues which prevent building with strict(er) C99 compilers
-
Port configure script to C99
-
References to undeclared exit function in configure script
-
sblim-cmpi-rpm configure check updates for C99
-
Implicit int declarations are incompatible with C99
-
Implicit declaration of sleep, exit in configure tests
-
Implicit declaration of Tcldom_libxml2_Init
-
Current readline calls ding rl_ding instead
-
configure.in: Close stream with fclose, not close
-
Additional changes are required in the configure script. I'm attaching what we will be using in Fedora.
-
Port configure.ac to C99 compilers
1
