Debian Patches

Status for libre/2.0.1-4

Patch Description Author Forwarded Bugs Origin Last update
1001_system_header_locations.patch Avoid hardcoded locations of system headers libre checks for header existence
by searching them in a few filesystem locations.
Debian's /usr/include/<triplet> is not always among those locations
and that makes libre fail to build when built
against a non-glibc or a glibc with multiarch headers
(see <https://bugs.debian.org/798955>).
This patch replaces those file existence tests with compile tests.
The compiler knows much better whether headers exists.
Helmut Grohne <helmut@subdivi.de> no debian 2018-10-19
1002_remove_SYSROOT.patch Remove unused MACHINE. With properly resolved system header locations (see separate patch)
the SYSROOT variable is unused and can be removed.
Helmut Grohne <helmut@subdivi.de> no debian 2018-10-19
1003_remove_MACHINE.patch Remove unused MACHINE. Without SYSROOT (see separate patch) MACHINE is mostly unused:
The only use is setting up CROSS_COMPILE and OS,
but these are supposed to be set by a user for cross compilation.
Removing this code makes win32 behave just like any other arch
and MACHINE can go in the bucket.
Helmut Grohne <helmut@subdivi.de> no debian 2018-10-19
0001-websock-Fix-integer-overflow-in-websock_decode-maske.patch websock: Fix integer overflow in websock_decode() masked frame length check (#1584)

When a masked WebSocket frame uses the 64-bit extended length encoding
with a value close to UINT64_MAX, the bounds check expression
(4 + hdr->len) wraps to a small value due to unsigned overflow. This
causes the check to pass, and the subsequent XOR unmasking loop writes
past the end of the buffer.

Add an explicit overflow guard before the addition. If hdr->len exceeds
SIZE_MAX - 4, the frame is rejected as too large before the overflowing
addition can occur.
Tristan <1075304+TristanInSec@users.noreply.github.com> no 2026-05-28

All known versions for source package 'libre'

Links