Debian Patches

Status for opencc/1.1.9+ds1-4

Patch Description Author Forwarded Bugs Origin Last update
0001-use-cmake-install-libdir.patch use-cmake-install-libdir
Update 2021-09-18: Also use GNUInstallDirs.		 IME Packaging Team <pkg-ime-devel@lists.alioth.debian.org> no 2024-07-28
0002-Force-build-with-c-17.patch Force build with c++17
Needed by googletest.		 Boyuan Yang <byang@debian.org> no 2025-09-09
0003-no-remote-images-when-reading-docs-on-disk.patch Don't fetch remote images when reading docs on disk
This fixes a privacy breach previously reported as Lintian warnings		 Gunnar Hjalmarsson <gunnarhj@ubuntu.com> not-needed 2024-07-28
0004-Use-system-googletest.patch Use system googletest Shengjing Zhu <zhsj@debian.org> not-needed 2024-07-28
0005-Disable-build-in-setup.py.patch Disable build in setup.py Shengjing Zhu <zhsj@debian.org> no 2024-08-02
backport/0006-Fix-build-for-gcc-15-934.patch Fix build for gcc 15 (#934) Peng Wu <alexepico@gmail.com> no debian 2025-02-13
backport/0007-Fix-deprecated-declarations-in-C-17.patch Fix deprecated declarations in C++17 WhiredPlanck <whiredplanck@outlook.com> no 2025-07-05
backport/345c9a50ab07018f1b4439776bad78a0d40778ec.patch [PATCH] Fix two out-of-bounds read issues when handling truncated UTF-8 input (#1005)

Two independent out-of-bounds read issues were identified in OpenCC's UTF-8
processing logic when handling malformed or truncated UTF-8 sequences.

1) MaxMatchSegmentation:
NextCharLength() could return a value larger than the remaining input size.
The previous logic subtracted this value from a size_t length counter,
potentially causing underflow and subsequent out-of-bounds reads.

2) Conversion:
Similar length handling could allow reads past the end of the input buffer
during dictionary matching, potentially propagating unintended bytes to the
conversion output.

This patch fixes both issues by:
- Explicitly tracking the end of the input buffer
- Recomputing remaining length on each iteration
- Clamping matched character and key lengths to the remaining buffer size
- Preventing reads past the null terminator

The changes preserve existing behavior for valid UTF-8 input and add test
coverage for truncated UTF-8 sequences.

These issues may have security implications when processing untrusted input
and are classified as heap out-of-bounds reads (CWE-125).		 frankslin <frankslin@users.noreply.github.com> no 2026-01-12
0009-setup.py-Handle-python-binding-instead-of-cmake.patch setup.py: Handle python binding instead of cmake Boyuan Yang <byang@debian.org> no 2026-01-13

All known versions for source package 'opencc'

Links