Update ABI/API compatibility reports after commit 51f097e6d5754ddae93e716276fe8176b44...

diff --git a/abi-check/changelog/openjpeg/current/log.html b/abi-check/changelog/openjpeg/current/log.html
index 729e363d7881217bfd0cbe43f11e27d2437dfd10..438293681fdea60b091f6be59be26623ee9c8db0 100644 (file)
--- a/abi-check/changelog/openjpeg/current/log.html
+++ b/abi-check/changelog/openjpeg/current/log.html
@@ -20,7 +20,33 @@
 <br/>
 <h1>Changelog from Git</h1><br/><br/>
 <div class='changelog'>
-<pre class='wrap'>commit e7640f58f122d1228f3d750864543ad4703e18fc
+<pre class='wrap'>commit 51f097e6d5754ddae93e716276fe8176b44ec548
+Merge: e7640f5 8ee3352
+Author: Even Rouault &lt;even.rouault@mines-paris.org&gt;
+Date:   2018-12-21 16:41:00 +0100
+
+    Merge pull request #1172 from hlef/master
+    
+    convertbmp: detect invalid file dimensions early (CVE-2018-6616)
+
+commit 8ee335227bbcaf1614124046aa25e53d67b11ec3
+Author: Hugo Lefeuvre &lt;hle@debian.org&gt;
+Date:   2018-12-14 04:58:40 +0100
+
+    convertbmp: detect invalid file dimensions early
+    
+    width/length dimensions read from bmp headers are not necessarily
+    valid. For instance they may have been maliciously set to very large
+    values with the intention to cause DoS (large memory allocation, stack
+    overflow). In these cases we want to detect the invalid size as early
+    as possible.
+    
+    This commit introduces a counter which verifies that the number of
+    written bytes corresponds to the advertized width/length.
+    
+    Fixes #1059 (CVE-2018-6616).
+
+commit e7640f58f122d1228f3d750864543ad4703e18fc
 Merge: e0f5212 05be308
 Author: Even Rouault &lt;even.rouault@mines-paris.org&gt;
 Date:   2018-12-07 21:27:38 +0100
@@ -841,28 +867,6 @@ Date:   2017-09-22 12:03:29 +0200
 
     INSTALL.md: add instructions to build with Visual Studio (#1023, from Winfried instructions)
 
-commit e5a561b5d86e6292832a7baefdcdf24e25821ae3
-Merge: 4c8aba2 f92d30f
-Author: Even Rouault &lt;even.rouault@mines-paris.org&gt;
-Date:   2017-09-21 17:39:24 +0200
-
-    Merge pull request #1024 from stweil/warnings
-    
-    Add missing newline at end of file
-
-commit f92d30f9e7340f50294cca438c1fb62fb4fb03dd
-Author: Stefan Weil &lt;sw@weilnetz.de&gt;
-Date:   2017-09-14 22:02:41 +0200
-
-    Add missing newline at end of file
-    
-    This fixes warnings from the clang compiler:
-    
-    /openjpeg/src/lib/openjp2/sparse_array.h:141:32: warning:
-     no newline at end of file [-Wnewline-eof]
-    
-    Signed-off-by: Stefan Weil &lt;sw@weilnetz.de&gt;
-
 ...</pre></div>
 
 </body>

diff --git a/abi-check/db/openjpeg/Tracker.data b/abi-check/db/openjpeg/Tracker.data
index aa49aa38e411d2b02318e846f30e5adb45984ca5..0fbfe65da445a5519cb03fdb5cc1358576a2bf14 100644 (file)
--- a/abi-check/db/openjpeg/Tracker.data
+++ b/abi-check/db/openjpeg/Tracker.data
@@ -633,7 +633,7 @@ $VAR1 = {
                       '2.1.2' => '2016-09-28 18:18',
                       '2.2.0' => '2017-08-10 00:31',
                       '2.3.0' => '2017-10-04 22:23',
-                      'current' => '2018-12-07 21:27:38'
+                      'current' => '2018-12-21 16:41:00'
                     },
           'HeadersDiff' => {
                              '1.1' => {
@@ -731,7 +731,7 @@ $VAR1 = {
           'Maintainer' => 'OpenJPEG team',
           'MaintainerUrl' => 'http://www.openjpeg.org/',
           'PackageDiff' => {},
-          'ScmUpdateTime' => '1544215193',
+          'ScmUpdateTime' => '1545407690',
           'Soname' => {
                         '1.1' => {
                                    'lib/libopenjpeg.so' => 'libopenjpeg.so'

diff --git a/abi-check/installed/openjpeg/current/lib/libopenjp2.a b/abi-check/installed/openjpeg/current/lib/libopenjp2.a
index ae24260cdbff2c0676ca85ff87bc76e80899cca6..48a2c2a3be5397fb2861d322d1bff8a47752d48a 100644 (file)
Binary files a/abi-check/installed/openjpeg/current/lib/libopenjp2.a and b/abi-check/installed/openjpeg/current/lib/libopenjp2.a differ

diff --git a/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.0 b/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.0
index 0cd85673465426e356f6f4628425c90c099a6394..e06d918502666d73244a1d97448909b938175803 100644 (file)
Binary files a/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.0 and b/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.0 differ

diff --git a/abi-check/timeline/openjpeg/index.html b/abi-check/timeline/openjpeg/index.html
index 0236758f75d1b3a45c3c6681fb0286320259cc96..1c1f74583922bee934a0f9e459350c19dff7c20a 100644 (file)
--- a/abi-check/timeline/openjpeg/index.html
+++ b/abi-check/timeline/openjpeg/index.html
@@ -30,7 +30,7 @@
 <th>Headers<br/>Diff</th>
 </tr>
 <tr id='current'><td>current</td>
-<td>2018-12-07<br/>21:27</td>
+<td>2018-12-21<br/>16:41</td>
 <td>7</td>
 <td><a href='../../changelog/openjpeg/current/log.html'>changelog</a></td>
 <td class='ok'><a href='../../objects_report/openjpeg/2.3.0/current/report.html'>100%</a></td>
@@ -170,7 +170,7 @@
 <td>N/A</td>
 <td>N/A</td>
 </tr>
-</table><br/>Maintained by <a href='http://www.openjpeg.org/'>OpenJPEG team</a>. Last updated on Fri Dec  7 20:40:17 2018.<br/>
+</table><br/>Maintained by <a href='http://www.openjpeg.org/'>OpenJPEG team</a>. Last updated on Fri Dec 21 15:55:13 2018.<br/>
 <br/>
 <hr/>
 <div align='right'><a class='home' title="Andrey Ponomarenko's ABI laboratory" href='http://abi-laboratory.pro/'>abi-laboratory.pro</a></div>