summaryrefslogtreecommitdiff
path: root/external
AgeCommit message (Collapse)Author
2022-12-15upgrade to libtiff 4.5.0Caolán McNamara
Change-Id: Ic54ecba50862860a67f92a2fc6e45fd275fa9a31 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/144121 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-12-14poppler: upgrade to release 22.12.0Taichi Haradaguchi
Change-Id: Ic0544fa378705b97b437132fc8860a65692634da Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143977 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 1ec7f8b5b21bf74f684095b97a2b9900a71a0979) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/144066 Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2022-12-14nss: upgrade to release 3.86.0Taichi Haradaguchi
Change-Id: Ia236c7124d920785f7a2856db5ee1ccbef7a2d68 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143038 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit a2969884af71e88d2541bd2bfdebea222876fef4) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/144068 Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2022-12-03accept Apple's patch utility - pickier than GNU patch, but should be OKChristian Lohmaier
macOS Ventura replaced the patch utility by Apple's version: patch 2.0-12u11-Apple (as of macOS 13.0.1) It is picker/less robust when it comes to locating matches, and absolutely refuses to apply when the hunks are out of order. Only one patch needed rework in the current codebase (master an 7-4 branch), and being more correct about the locations in the files to be patched is not a bad thing either, so accept Apple's version of patch (with a warning for now) Change-Id: I707d00958b814307b13caf9923f1de7f3919442c Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143461 Tested-by: Jenkins Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com> (cherry picked from commit ce31e09a6d40295cec4be9da8f4cec886d6c92c1) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143438 Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
2022-12-02pixman: upgrade to release 0.42.2Taichi Haradaguchi
Fixes CVE-2022-44638 Remove Wincompatible-function-pointer-types.patch.0, fixed upstream. Change-Id: If6589a701a252f71da145264ee3a6f0e333492ae Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143423 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 93a69d37c1dbcc7365dc0cf2493d1ca27babef2b) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143439
2022-11-23macOS (janitor): remove workarounds for no longer supported SDKsChristian Lohmaier
since we won't accept anything lower than 10.14 on master (and 10.13 on libreoffice-7-4 branch), we don't need those quirks anymore. Change-Id: Ibc71a2ce7a0dc60769d03d477991b48fc99d534d Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143040 Tested-by: Jenkins Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com> (cherry picked from commit a7a766aa4119bf9616223d0de6587a3f30549eac) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143063 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-11-22Update freetype to 2.12.0Miklos Vajna
- fixes CVE-2022-27404 - dropped the no longer applying parts of ubsan.patch Change-Id: Ia8a496d53b62f68a27dbd9be08c89273b6bd01cd Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142768 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com> (cherry picked from commit 7229a380d3d607dc896e1d48b1a13f7b301aef80) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142927 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-11-14tdf#115007 tdf#148672 bump libnumbertext 1.0.11László Németh
tdf#115007 fix missing currency of en-BZ, en-DK, en-IL, en-LK, en-ZM, en-ZW; es-PA, es-SV, es-VE; and ga (Irish). tdf#148672 fix of transliteration of parenthesized words of hu-Hung. – remove EmptyString.patch1 wich was merged up-stream; – add test for hu_Hung transliteration of parenthesized words; – add new Persian (Farsi) module; – fixes for Czech, English, Irish, Romanian, Russian, Slovenian, Spanish and Ukrainian. Follow-up to commit 2a1d2d42af7f365330479f4032ddfdd9eeba7c1d "tdf#115007 add NatNum12 number format list items, fix title case". Conflicts: external/libnumbertext/UnpackedTarball_libnumbertext.mk sw/qa/extras/uiwriter/uiwriter6.cxx (cherry-picked from commit 6064b3382102bcbc153156f5874fbc8dfde97b98) Change-Id: I24aa32ad28c853e4c97a10dc8039ca6232eaed4c Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142657 Reviewed-by: László Németh <nemeth@numbertext.org> Tested-by: László Németh <nemeth@numbertext.org> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142673 Tested-by: Jenkins
2022-11-10external/openssl: fix and remove some patchesTaichi Haradaguchi
* configurable-z-option.patch.0, openssl-no-multilib.patch.0: fix patch coverage * opensslios.patch: remove this patch as it is not used. Change-Id: Iaa23e5bb9ca9d63f5ca7451d02726ad24211f078 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142349 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-11-04upgrade Expat to 2.5.0Taichi Haradaguchi
Fixes CVE-2022-43680 Change-Id: I5bf8d1ab0ac352833c76a7edfc1d8eb78dd03e10 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142205 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-11-04Fix ARM64 build after postgres upgrade to 13.8Xisco Fauli
Partially revert 096e2ba8e4fce64c04a7d7e842dd1dbab8699801 "postgresql: upgrade to release 13.8" Change-Id: I3fa2a96f9765788ab6193133c4f420eed7eb99bb Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142255 Tested-by: Jenkins Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> (cherry picked from commit 2cfd5a875231cc9ae59cc495ba82efc54de2016d) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142209 Reviewed-by: Thorsten Behrens <thorsten.behrens@allotropia.de>
2022-11-01Python3: update to 3.8.15Taichi Haradaguchi
* Fixes CVE-2022-40674 * Removed 0001-3.6-bpo-17239-Disable-external-entities-in-SAX-parse.patch.1 as fixed upstream Change-Id: I8e71f9a6b013ca4c45bf8774b284be98eee71bab Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141691 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit ea5843b67f1c2006aa1f68f2d00a991e1d463262) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141738 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2022-10-27curl: upgrade to release 7.86.0Michael Stahl
Fixes CVE-2022-32221 which could affect libcmis, CVE-2022-42915, and 2 more CVEs that probably don't affect LO. * remove --without-ssl: On the one hand, on GNU/Linux this now results in: configure: error: --without-ssl has been set together with an explicit option to use an ssl library On the other hand, using the more obvious --without-openssl yields a link failure on Android on the nss check in configure: configure:28220: checking for SSL_VersionRangeSet in -lnss /home/cl/Android/Sdk/ndk/20.1.5948944/toolchains/llvm/prebuilt/linux-x86_64/bin/../lib/gcc/aarch64-linux-android/4.9.x/../../../../aarch64-linux-android/bin/ld: warning: liblog.so, needed by /home/cl/rpmbuild/BUILD/lo-android2/workdir/UnpackedTarball/nss/dist/out/lib/libnss3.so, not found (try using -rpath or -rpath-link) /home/cl/rpmbuild/BUILD/lo-android2/workdir/UnpackedTarball/nss/dist/out/lib/libnspr4.so: undefined reference to `__android_log_write' /home/cl/rpmbuild/BUILD/lo-android2/workdir/UnpackedTarball/nss/dist/out/lib/libnspr4.so: undefined reference to `__android_log_assert' ... so add the -llog for android in curl-nss.patch.1 Change-Id: I3931a1eec2d681c2ce0e5695039492772e9fcc81 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141866 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit a76a88203d8508f38b10d9bbb94c3bba2485fcaf) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141846 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2022-10-25zlib: upgrade to release 1.2.13Taichi Haradaguchi
Fixes CVE-2022-37434 Removed two patches as fixed upstream. Change-Id: I10465b7eafc4952cf8dc64e6d7a77f5e5255a386 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141757 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit b2d6ad64473527f88dfb7088376ccf1242d97666) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141750 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-09-23postgresql: upgrade to release 13.8Taichi Haradaguchi
* Fixes 2 CVEs that don't affect LO (CVE-2022-1552 and CVE-2022-2625). * Changes some patch files for upstream changes. Change-Id: I4964c43fefc94f12a16c45d8727ae41cf1ce278b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140392 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> Tested-by: Xisco Fauli <xiscofauli@libreoffice.org>
2022-09-23curl: upgrade to release 7.85.0Taichi Haradaguchi
Fixes CVE-2022-35252 Change-Id: I549240f6ae31ae94f925422517cd03ef2e3b5732 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140494 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Tested-by: Jenkins
2022-09-23upgrade libepoxy to 1.5.10Taichi Haradaguchi
removed epoxy.android.patch: fixed upstream (https://github.com/anholt/libepoxy/pull/263/commits/063c1df27974f58b0f3c0a57417732da068923cf) Change-Id: If0c6c438014121bc480efeaeb1018b6b74e51fcc Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140359 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 2329128fa16a4e08a5f8fee0a83dd8b4d5c9c279) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140383
2022-09-22libpng: update to release 1.6.38Taichi Haradaguchi
Change-Id: Ife594699cc8736ffdfc8f68e462d11416d7930e9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140311 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 18f4fc547a8c055afdaec4aad69c9fea387696c3) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140377 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2022-09-21nss: update to release 3.83Taichi Haradaguchi
Change-Id: Ic1cb36b3a56cde40296fd46ef356dea286932692 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140231 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140305
2022-09-17upgrade to libwebp-1.2.4Taichi Haradaguchi
Change-Id: Iaa3872345abcc2b9042abb32a824ff4b95ec57b5 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139989 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-09-15harfbuzz: add patch for CVE-2022-33068Michael Stahl
Should be fixed in release 4.4.0 Change-Id: I9ff234f9687c7f57d9226df91b17ddb0bc083cca Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139950 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-09-15poppler: upgrade to release 22.09.0Michael Stahl
Fixes CVE-2022-38784 Add external/poppler/disable-freetype.patch.1 to get rid of some new code that unconditionally requires freetype, to avoid building that on WNT/MACOSX. Change-Id: I854d1865286b6fb4112cdf37898cda0203c52f2e Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139941 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 8fce9a0a41b1bbebd325fc9d98a79d8decd3950c) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139850 Reviewed-by: Thorsten Behrens <thorsten.behrens@allotropia.de>
2022-09-15zlib: add patch for CVE-2022-37434Michael Stahl
Change-Id: If09c419ba00fc9be021249e4d4da27d1650b9080 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139913 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 521e920dda79f44a0ad637b6062f3dcb574f884b) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139848 Reviewed-by: Thorsten Behrens <thorsten.behrens@allotropia.de>
2022-09-15libxml2: upgrade to release 2.10.2Michael Stahl
Fixes CVE-2022-2309 Change-Id: I180218be275d3b6d38f8f74aa51c57e50d2734ee Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139911 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit d621a8839cebf96fe3ac374026f344f8e68bf011) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139847 Reviewed-by: Thorsten Behrens <thorsten.behrens@allotropia.de>
2022-09-07python3: upgrade to release 3.8.13Taichi Haradaguchi
Remove some code in external/python3/darwin.patch.0 as it was fixed upstream(https://bugs.python.org/issue45405). Change-Id: Ie6bfb2456f96a63adbf0dbcb9c902dc56f1151ee Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139501 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-08-19tdf#150247: patch orcus to use UTF-16 paths on WindowsMike Kaganski
This adds UTF8->UTF16 conversion of the paths passed to ctor of file_content on Windows, since both boost::filesystem::file_size and boost::interprocess::file_mapping take UTF-16 strings on this platform. So the assumption is that 8-bit path strings passed to orcus are UTF-8-encoded. This partially reverts commit 75252e58d9b5d020bf7bd6ca66b3a9d780463051 (it keeps use of osl_getThreadTextEncoding for platforms other than Windows). Change-Id: Ie467f71a65945f4f07ff432136ea06b811c3f794 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/137759 Tested-by: Jenkins Reviewed-by: Mike Kaganski <mike.kaganski@collabora.com> (cherry picked from commit c2e86396b741b956efc05e9dfea1e1c3286dfb9d) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/137960 Reviewed-by: Eike Rathke <erack@redhat.com>
2022-08-18tdf#150452: Revert "tdf#130795 use concurrent hashmap in SharedStringPool"Xisco Fauli
This commit reverts 3749d9af3745c0eaff7239e379578e4e2af89e9d which removes the dependency on the external library cuckoo Without using cuckoo the same file in tdf#130795 takes real 0m4,892s user 0m5,298s sys 0m0,449s With it, it takes real 0m4,914s user 0m5,276s sys 0m0,444s pretty much the same time Change-Id: I4cc9000ac5bf26de22bb9835283ae8d5b3230196 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/138435 Tested-by: Jenkins Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk> Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> (cherry picked from commit dbc53fbbd13ee53da0160eaf9dbe84455653590f) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/138418
2022-08-02more_fonts: Update Reem KufiKhaled Hosny
Also update test expectation due to changed glyph order. Change-Id: I8f6d1a057077cb6de5e5d7fce4bec29929edb8b9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/137663 Tested-by: Jenkins Reviewed-by: Heiko Tietze <heiko.tietze@documentfoundation.org> (cherry picked from commit f1540e05327873a73c0bbb232689d2be5c0072b7) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/137610 Reviewed-by: خالد حسني <khaled@aliftype.com> Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
2022-06-27crashtesting: fix assert seen on loading forum-nl-1226.odsCaolán McNamara
Change-Id: If8c08a51b11a459a03b4a0604c1fb9897351e598 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/136466 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-06-24external/liborcus: Fix heap-buffer-overflowStephan Bergmann
...as seen during CppunitTest_vcl_pdfexport: > ==573913==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x62b0001dba0e at pc 0x560576627186 bp 0x7ffeab9fa730 sp 0x7ffeab9f9ef0 > READ of size 26624 at 0x62b0001dba0e thread T0 > #0 in StrtolFixAndCheck(void*, char const*, char**, char*, int) at ~/github.com/llvm/llvm-project/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc:3629:3 > #1 in strtol at ~/github.com/llvm/llvm-project/compiler-rt/lib/asan/asan_interceptors.cpp:485:3 > #2 in orcus::sax_token_handler_wrapper_base::attribute(std::basic_string_view<char, std::char_traits<char>>, std::basic_string_view<char, std::char_traits<char>>) at workdir/UnpackedTarball/liborcus/src/parser/sax_token_parser.cpp:344:22 > #3 in orcus::sax_ns_parser<orcus::sax_token_parser<orcus::xml_stream_handler>::handler_wrapper>::handler_wrapper::attribute(orcus::sax::parser_attribute const&) at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_ns_parser.hpp:212:27 > #4 in orcus::sax_parser<orcus::sax_ns_parser<orcus::sax_token_parser<orcus::xml_stream_handler>::handler_wrapper>::handler_wrapper, orcus::sax_parser_default_config>::attribute() at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_parser.hpp:570:15 > #5 in orcus::sax_parser<orcus::sax_ns_parser<orcus::sax_token_parser<orcus::xml_stream_handler>::handler_wrapper>::handler_wrapper, orcus::sax_parser_default_config>::declaration(char const*) at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_parser.hpp:389:9 > #6 in orcus::sax_parser<orcus::sax_ns_parser<orcus::sax_token_parser<orcus::xml_stream_handler>::handler_wrapper>::handler_wrapper, orcus::sax_parser_default_config>::element() at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_parser.hpp:242:13 > #7 in orcus::sax_parser<orcus::sax_ns_parser<orcus::sax_token_parser<orcus::xml_stream_handler>::handler_wrapper>::handler_wrapper, orcus::sax_parser_default_config>::body() at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_parser.hpp:214:13 > #8 in orcus::sax_parser<orcus::sax_ns_parser<orcus::sax_token_parser<orcus::xml_stream_handler>::handler_wrapper>::handler_wrapper, orcus::sax_parser_default_config>::parse() at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_parser.hpp:182:5 > #9 in orcus::sax_ns_parser<orcus::sax_token_parser<orcus::xml_stream_handler>::handler_wrapper>::parse() at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_ns_parser.hpp:277:14 > #10 in orcus::sax_token_parser<orcus::xml_stream_handler>::parse() at workdir/UnpackedTarball/liborcus/src/liborcus/../../include/orcus/sax_token_parser.hpp:215:14 > #11 in orcus::xml_stream_parser::parse() at workdir/UnpackedTarball/liborcus/src/liborcus/xml_stream_parser.cpp:68:9 > #12 in orcus::orcus_xls_xml::detect(unsigned char const*, unsigned long) at workdir/UnpackedTarball/liborcus/src/liborcus/orcus_xls_xml.cpp:94:16 > #13 in orcus::detect(unsigned char const*, unsigned long) at workdir/UnpackedTarball/liborcus/src/liborcus/format_detection.cpp:68:9 > #14 in (anonymous namespace)::OrcusFormatDetect::detect(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>&) at sc/source/filter/orcus/filterdetect.cxx:83:31 > 0x62b0001dba0e is located 0 bytes to the right of 26638-byte region [0x62b0001d5200,0x62b0001dba0e) > allocated by thread T0 here: > #0 in operator new[](unsigned long) at ~/github.com/llvm/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:98:3 > #1 in SvMemoryStream::AllocateMemory(unsigned long) at tools/source/stream/stream.cxx:1698:12 > #2 in SvMemoryStream::SvMemoryStream(unsigned long, unsigned long) at tools/source/stream/stream.cxx:1544:9 > #3 in (anonymous namespace)::OrcusFormatDetect::detect(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>&) at sc/source/filter/orcus/filterdetect.cxx:71:20 This started to occur now after a95c585433246813096e8890b7ed6ef4fe30c621 "Pump XInputStream into an SvMemoryStream rather than an OStringBuffer" no longer guarantees that the memory range passed into orcus::detect(const unsigned char* buffer, size_t length) is followed by a null byte at buffer[length]. (There appears to be no documentation for that function, but it looks unreasonable to me that it should require callers to provide a buffer thus terminated, and I rather assume that what is observed here is an orcus bug.) The problematic calls of std::strtol were used in code apparently meant to parse strings matching the XML VersionNum grammar production, and then store the two dot-separated numbers each as uint8_t. The new code using a local readUint8 accepts a different set of strings now than the original code using std::strtol, but the new set is arguably closer to what the actual XML VersionNum grammar production accepts (which is '1.' [0-9]+ for XML 1.0 and '1.1' for XML 1.1), so this change should be OK. Change-Id: I1668542c96ced64667cb9f251e79126e1a54ac30 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/136405 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com> (cherry picked from commit b56f5ac2b9678d589c50e446bcbf906f4400b5fa) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/136416
2022-06-19upstream Skia fix for Vulkan crash on texture binding (tdf#148624)Luboš Luňák
Change-Id: Ic16a516bfde04aba0336baca58f605d6cf9fd413 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/136011 Tested-by: Jenkins Reviewed-by: Luboš Luňák <l.lunak@collabora.com> (cherry picked from commit dce3cf219479c353f332b99a51aaa20843530100) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/136034 Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-06-10external/libtiff: Missing include for _byteswap_uint64 on WindowsStephan Bergmann
...now causing a -Wimplicit-function-declaration error with Clang 15 trunk after <https://github.com/llvm/llvm-project/commit/7d644e1215b376ec5e915df9ea2eeb56e2d94626> "[C11/C2x] Change the behavior of the implicit function declaration warning". (Unconditionally including <stdlib.h> on all platforms even for those that don't need it should be harmless.) Change-Id: Ic2191308ea252cb4b88842a2767167ab2d23d9fb Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135572 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
2022-06-09ofz#47901 fix read overflowCaolán McNamara
Change-Id: I707fe54e68ef548edcb8b69b83ba64c0674e44ce Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135532 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-06-09redland WASM: add Emscripten flags to fix NEH buildJan-Marek Glogowski
Change-Id: I4ed242e774e1ce2ac05dabb9fc657329dc4a63c6 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135519 Tested-by: Jenkins Reviewed-by: Jan-Marek Glogowski <glogow@fbihome.de>
2022-06-08libtiff WASM: add Emscripten flags to fix NEH buildJan-Marek Glogowski
Change-Id: I3ea1ca064cdddee1bea6b5816f63f0e4a93217de Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135505 Tested-by: Jenkins Reviewed-by: Jan-Marek Glogowski <glogow@fbihome.de>
2022-06-03upgrade libtiff to 4.4.0Caolán McNamara
dropping ubsan.patch which was fixed upstream in this release Change-Id: Ic2e35b24f7a9c7c3e2a00da8bc5b5b7d500746fd Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135359 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-06-01nss: remove nss-3.13.5-zlib-werror.patchMichael Stahl
The zlib module should be used instead of NSS' bundled zlib since commit 1c748fefc3c5b42e3548a1a7f5017a579982005a Change-Id: I0d820cdd795712a7dbe27ef114f0efddd3f436ef Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135235 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-06-01nss: upgrade to release 3.79Michael Stahl
Fixes CVE-2022-1097 and moz#1767590 "memory safety violations" Change-Id: I6895f066ad943402231b616dae0d7ed6f5678b5e Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135234 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-05-31curl: remove curl-7.26.0_win-proxy.patchMichael Stahl
There is no justification why this patch was added, upstream doesn't want to add such a feature[1], and maintaining feature patches in LO for bundled externals doesn't make sense. Also, this doesn't respect the Inet::Settings::ooInetHTTPProxy* settings from the configuration. Let's remove it and hope nobody complains. [1] https://curl.se/mail/lib-2022-05/0083.html Change-Id: I1ccdefb76f69e6795a28d4d25bf443555c16ab0b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135182 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-05-24We actually want to divide by 257 hereCaolán McNamara
follow the * 257 suggestion at https://gitlab.com/libtiff/libtiff/-/merge_requests/336 I did think it looked a tiny bit different than the others Change-Id: I92306ae22d2acc485a4162160a8c0464a32591d9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134844 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-05-23external/libtiff: Silence invalid-null-argumentStephan Bergmann
...during CppunitTest_vcl_filters_test, > tif_dirread.c:4176:40: runtime error: null pointer passed as argument 2, which is declared to never be null > /usr/include/string.h:44:28: note: nonnull attribute specified here > #0 in TIFFReadDirectory at workdir/UnpackedTarball/libtiff/libtiff/tif_dirread.c:4176:17 (instdir/program/libvcllo.so +0xc4dbb6d) > #1 in ImportTiffGraphicImport(SvStream&, Graphic&) at vcl/source/filter/itiff/itiff.cxx:238:14 (instdir/program/libvcllo.so +0xa691680) > #2 in TiffFilterTest::load(rtl::OUString const&, rtl::OUString const&, rtl::OUString const&, SfxFilterFlags, SotClipboardFormatId, unsigned int) at vcl/qa/cppunit/graphicfilter/filters-tiff-test.cxx:70:12 (workdir/LinkTarget/CppunitTest/libtest_vcl_filters_test.so +0x16dc48) > #3 in test::FiltersTest::recursiveScan(test::filterStatus, rtl::OUString const&, rtl::OUString const&, rtl::OUString const&, SfxFilterFlags, SotClipboardFormatId, unsigned int, bool) at unotest/source/cpp/filters-test.cxx:132:20 (workdir/LinkTarget/CppunitTest/../Library/libunotest.so +0xd8d5c) > #4 in test::FiltersTest::testDir(rtl::OUString const&, std::basic_string_view<char16_t, std::char_traits<char16_t>>, rtl::OUString const&, SfxFilterFlags, SotClipboardFormatId, unsigned int, bool) at unotest/source/cpp/filters-test.cxx:160:5 (workdir/LinkTarget/CppunitTest/../Library/libunotest.so +0xdcc71) > #5 in TiffFilterTest::testCVEs() at vcl/qa/cppunit/graphicfilter/filters-tiff-test.cxx:76:5 (workdir/LinkTarget/CppunitTest/libtest_vcl_filters_test.so +0x16e1c5) Change-Id: I2de4363ff0f5552e89fd0af84b7b88e38b7bb209 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134823 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
2022-05-23README libtiffJulien Nabet
Change-Id: Icece0daad46896334cba7dc66435351a347bd2cb Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134819 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-05-23Missing #include <stdint.h> in various external codeStephan Bergmann
...which is a problem presumably since GCC 13 trunk <https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=6f038efd93593da6e661b829d1bd3877e75550f1> "libstdc++: Avoid including <cstdint> for std::char_traits". (All the broken C++ code used unqualified uintptr_t etc. rather than std::uintptr_t etc., so I deemed it more appropriate to include <stdint.h> rather than <cstdint>.) Change-Id: Id9dfc383c5986126a425971c4557b90ac45ac963 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134760 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
2022-05-23skia: fix GCC12 -Werror=shadowMichael Stahl
Change-Id: I0ec8e9d7d54b48281332cb5128d03ac28dad87e8 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134737 Tested-by: Jenkins Reviewed-by: Michael Weghorn <m.weghorn@posteo.de>
2022-05-22tdf#131199 add some basic 16bitcielab supportCaolán McNamara
to get that final tiff loadable Change-Id: Ia772c06521c93ac860e9d3014706d677f16c8d4e Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134734 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-05-21tiff: enable webpCaolán McNamara
Change-Id: Ifd277fd89393f964817bf58dead53074321252d8 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134711 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-05-21libtiff: enable jpeg and zlibCaolán McNamara
Change-Id: Ied6ab75342f5cdaadefbff7f75fbe63e9d67e992 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134667 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-05-21explicitly disable some things that might otherwise get enabledCaolán McNamara
depending on what happens to be installed on the build system Change-Id: Ic0c3eed721aeba6361aa6da82b467891d24d7557 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134709 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-05-21update Skia to chrome/m103Luboš Luňák
Change-Id: I35f1ca3fc703dbf31c68f4b145344b23029a156d Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134688 Tested-by: Jenkins Reviewed-by: Luboš Luňák <l.lunak@collabora.com>
2022-05-20build libtiffJulien Nabet
Change-Id: Id9b6e1355147c3f68b9922db14f1b4904a05c686 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134650 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>