diff --git a/backport-Do-not-assume-PATH_MAX-is-defined.patch b/backport-Do-not-assume-PATH_MAX-is-defined.patch new file mode 100644 index 0000000000000000000000000000000000000000..3769af8dc06a90a7b0df1be6b8d1175af6f8e831 --- /dev/null +++ b/backport-Do-not-assume-PATH_MAX-is-defined.patch @@ -0,0 +1,41 @@ +From eea6fbc196872eeca6f02fcfba298f3e1bb62880 Mon Sep 17 00:00:00 2001 +From: Guillem Jover +Date: Thu, 11 Jan 2024 02:18:07 +0100 +Subject: [PATCH] Do not assume PATH_MAX is defined + +--- + filename.c | 15 +++++++++++++++ + 1 file changed, 15 insertions(+) + +diff --git a/filename.c b/filename.c +index eb6b16c..19021ac 100644 +--- a/filename.c ++++ b/filename.c +@@ -830,9 +830,24 @@ lrealpath(path) + char *path; + { + #if HAVE_REALPATH ++ /* ++ * Not all systems support the POSIX.1-2008 realpath() behavior ++ * of allocating when passing a NULL argument. And PATH_MAX is ++ * not required to be defined, or might contain an exceedingly ++ * big value. We assume that if it is not defined (such as on ++ * GNU/Hurd), then realpath() accepts NULL. ++ */ ++#ifndef PATH_MAX ++ char *rpath; ++ ++ rpath = realpath(path, NULL); ++ if (rpath != NULL) ++ return (rpath); ++#else + char rpath[PATH_MAX]; + if (realpath(path, rpath) != NULL) + return (save(rpath)); ++#endif + #endif + return (save(path)); + } +-- +2.27.0 + diff --git a/less.spec b/less.spec index d03c4f4532fdc5640e30bb45dfb56b00688d9ece..5496f63c3564e1d9a3422c3cb54933b81f1f38ac 100644 --- a/less.spec +++ b/less.spec @@ -1,6 +1,6 @@ Name: less Version: 590 -Release: 6 +Release: 7 Summary: Less is a pager that displays text files. License: GPLv3+ or BSD URL: http://www.greenwoodsoftware.com/less @@ -13,6 +13,7 @@ Patch6003: backport-Shell-quote-filenames-when-invoking-LESSCLOSE.patch Patch6004: backport-Some-constifying.patch Patch6005: backport-Implement-osc8_open.patch Patch6006: backport-CVE-2024-32487.patch +Patch6007: backport-Do-not-assume-PATH_MAX-is-defined.patch BuildRequires: gcc make ncurses-devel autoconf automake libtool @@ -51,6 +52,9 @@ autoreconf -ivf %{_mandir}/man1/* %changelog +* Fri May 10 2024 baiguo - 590-7 +- Do not assume PATH_MAX is defined + * Mon Apr 22 2024 wangjiang - 590-6 - fix CVE-2024-32487