mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
* ext/psych/lib/psych.rb: Merge psych-2.0.5. bump version to
libyaml-0.1.6 for CVE-2014-2525. * ext/psych/yaml/config.h: ditto. * ext/psych/yaml/scanner.c: ditto. * ext/psych/yaml/yaml_private.h: ditto. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@45453 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
parent
fb3bd78725
commit
e221c6cefc
5 changed files with 21 additions and 8 deletions
|
@ -1,3 +1,11 @@
|
|||
Fri Mar 28 09:11:06 2014 SHIBATA Hiroshi <shibata.hiroshi@gmail.com>
|
||||
|
||||
* ext/psych/lib/psych.rb: Merge psych-2.0.5. bump version to
|
||||
libyaml-0.1.6 for CVE-2014-2525.
|
||||
* ext/psych/yaml/config.h: ditto.
|
||||
* ext/psych/yaml/scanner.c: ditto.
|
||||
* ext/psych/yaml/yaml_private.h: ditto.
|
||||
|
||||
Thu Mar 27 18:58:10 2014 Nobuyoshi Nakada <nobu@ruby-lang.org>
|
||||
|
||||
* re.c (match_regexp): set regexp for MatchData from string.
|
||||
|
|
|
@ -217,7 +217,7 @@ require 'psych/class_loader'
|
|||
|
||||
module Psych
|
||||
# The version is Psych you're using
|
||||
VERSION = '2.0.4'
|
||||
VERSION = '2.0.5'
|
||||
|
||||
# The version of libyaml Psych is using
|
||||
LIBYAML_VERSION = Psych.libyaml_version.join '.'
|
||||
|
|
|
@ -1,11 +1,10 @@
|
|||
|
||||
#define PACKAGE_NAME "yaml"
|
||||
#define PACKAGE_TARNAME "yaml"
|
||||
#define PACKAGE_VERSION "0.1.5"
|
||||
#define PACKAGE_STRING "yaml 0.1.5"
|
||||
#define PACKAGE_VERSION "0.1.6"
|
||||
#define PACKAGE_STRING "yaml 0.1.6"
|
||||
#define PACKAGE_BUGREPORT "http://pyyaml.org/newticket?component libyaml"
|
||||
#define PACKAGE_URL ""
|
||||
#define YAML_VERSION_MAJOR 0
|
||||
#define YAML_VERSION_MINOR 1
|
||||
#define YAML_VERSION_PATCH 5
|
||||
#define YAML_VERSION_STRING "0.1.5"
|
||||
#define YAML_VERSION_PATCH 6
|
||||
#define YAML_VERSION_STRING "0.1.6"
|
||||
|
|
|
@ -2629,6 +2629,9 @@ yaml_parser_scan_tag_uri(yaml_parser_t *parser, int directive,
|
|||
/* Check if it is a URI-escape sequence. */
|
||||
|
||||
if (CHECK(parser->buffer, '%')) {
|
||||
if (!STRING_EXTEND(parser, string))
|
||||
goto error;
|
||||
|
||||
if (!yaml_parser_scan_uri_escapes(parser,
|
||||
directive, start_mark, &string)) goto error;
|
||||
}
|
||||
|
|
|
@ -146,9 +146,12 @@ yaml_string_join(
|
|||
(string).start = (string).pointer = (string).end = 0)
|
||||
|
||||
#define STRING_EXTEND(context,string) \
|
||||
(((string).pointer+5 < (string).end) \
|
||||
((((string).pointer+5 < (string).end) \
|
||||
|| yaml_string_extend(&(string).start, \
|
||||
&(string).pointer, &(string).end))
|
||||
&(string).pointer, &(string).end)) ? \
|
||||
1 : \
|
||||
((context)->error = YAML_MEMORY_ERROR, \
|
||||
0))
|
||||
|
||||
#define CLEAR(context,string) \
|
||||
((string).pointer = (string).start, \
|
||||
|
|
Loading…
Add table
Reference in a new issue