Package Release Info

libdwarf-0.11.0-bp160.1.13

Update Info: Base Release
Available in Package Hub : 16.0

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

libdwarf-devel
libdwarf-devel-static
libdwarf-doc
libdwarf-tools
libdwarf0

Change Logs

* Sun Aug 18 2024 Dirk Müller <dmueller@suse.com>
- update to 0.11.0:
  * Identifies git fix id now for ossfuzz 70721
    DW202407-010
  * Correcting use-after-free with a specific corrupted
    DWARF section.
  * This simplfies getting correct cooked
    addresses for entries from .debug_ranges
  * The new code about .debug_ranges had
    small leaks when the library was told
    not to record or clean-up most memory allocations.
    Shown by -fsanitize.
  * Fixed a mistake in examplev, .debug_ranges
  * Added new argument to print_ranges_list_to_extra()
    so it can print both raw and cooked values.
  * Now calulates the cooked value of .debug_ranges
    and prints both raw and cooked values.
  * New date, some Dwarf_Ranges doc has been updated
    in libdwarf.
  * Added clarifying comment paragraphs about Dwarf_Ranges
  * Final on the rnglists ossfuzz issues so far.
  * ossfuzz 70246 DW202407-002 fixed.
  * Removing esb_append_printf() which is the last use of  *sprintf()
  * ossfuzz 70244 fixed  DW202407-001
  * Removing esb_append_printf() as it is no
    longer necessary.
  * Added blank line after d=  semantic version
  * Fixed trailing whitespace and indents.
  * Refine the information on rnglists base with
  * cc_rnglists_base_via_at  (similar to loclists)
  * Added cc_loclists_base_via_at and
  * Due to the addition of dwarf_get_locdesc_entry_e()
    we revise the version for the next release to be
  * Issue #247, github libdwarf-code.
  * Fix indents and eliminate trailing whitespace.
  * Corrected the gitfixid as there was
    a use-after-free in new-today code, now fixed.
  * Fixing a nasty double free that was caused a few
    minutes ago.
  * New oss fuzz 69639 and 69641 are fixed.
    Here identfied as DW202406-001 and DW202406-002
  * Remove debug printf (was #if 0 ... #endif)
    Fixed DW202406-001  ossfuzz 69639
    and
    DW202406-002 ossfuzz 69641
  * Implemented spelling change ld_kind  to ld_lkind
  * In dwarf_formref() we correct the reading
    of DW_FORM_loclistx and DW_FORM_rnglistx
    to read a uleb. Been wrong since 2022 at least..
    Another spot reading these had it right all along.
  * Renamed ll_kind to ll_lkind as it names a DW_LKIND value
  * Renamed ld_kind to ld_lkind as it names a DW_LKIND value
  * Revises the dwarfdump reporting of debug_loclists to
    clarify the dwarf 5 debug_loclists structure content.
  * The --print-raw-loclists option is more useful now.
  * Revises the dwarfdump reporting of debug_rnglists to
    clarify the dwarf 5 debug_rnglists structure content.
  * The --print-raw-rnglists option is more useful now.
  * In certain error cases the revised rnglists code
    was failing to dwarf_dealloc_error() where
  * Updated the output format of --print-raw-loclists
    to be more useful and to essentially match the rnglists
    version.
  * Separated out part of loclists data structs to
    be a better match with dwarf_rnglists.h
  * Corrected calculations related to rnglists array of
    offsets (were calling entries address size when they are offset
    size).
  * Removed some lines related to merging skeleton and split,
    they were wrong.  debug_rnglists and debug_rnglists.dwo
  * Initialize the three new fields in Dwarf_Debug_s
    used for DWARF5 GNU extension .debug_addr printing.
  * Renaming  DW_DLE_PE_SECTION_SIZE_ERROR
    to  DW_DLE_PE_SECTION_SIZE_HEURISTIC_FAIL
    so any failure of the three such tests are
    clearly reported.  Should never happen.
  * A heuristic sanity check on section VirtualSize
    was too concervative at s00MB, a PE object file had a
    section over 200MB in size.
  * Adding release xz name
* Wed May 29 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 0.9.2:
  + Fixed four vulnerabilities that could crash the library
    (segmentation violation etc) reading specific corruptions to
    DWARF.
    DW202402-001, DW202402-002,DW202402-003, and DW202403-001.
    Now the library returns an error code for those. Corrected a
    dwarf.h misspelling of DW_CFA_hi_user.
* Tue Jan 30 2024 Dirk Müller <dmueller@suse.com>
- update to 0.9.1:
  * "--disable-decompression" tells the build to compile
    libdwarf and dwarfdump with no reference to the zlib or
    zstd libraries.
  * Latest DW_LANG names now present.
- build with zstd support
* Thu Dec 28 2023 Dirk Müller <dmueller@suse.com>
- update to 0.9.0:
  * Added support for reading Apple MacOS universal binaries.
  * Added callers access to certain fields from object files
    (for all three supported object formats), and
  * added the --print-machine-arch option to dwarfdump to show the
    fields.
  * Three functions were added to the API, see the Changes section
    of the latest documentation or in libdwarf.pdf in the release.
    No functions were deleted or had their meaning changed.
  * Vulnerabilities found by fuzzing were fixed.
  * See https://www.prevanders.net/dwarfbug.html for vulnerability
    details.
* Sat Nov 18 2023 Dirk Müller <dmueller@suse.com>
- update to 0.8.0:
  * The release fixes many vulnerabilities from corrupt DWARF
    and/or corrupt Elf. Two new functions are added for DWARF Frame
    access to get the correct sign of an argument (the pre-existing
    functions remain in place and working avoiding any need for
    recompilation or relinking of user code).
* Mon May 29 2023 Dirk Müller <dmueller@suse.com>
- update to 0.7.0:
  * The release fixes more than 50 vulnerabilities from corrupt
    DWARF and/or corrupt Elf.
  * Elf section counts can exceed 16 bits (on linux see man 5 elf)
    so some function prototype members of struct
    Dwarf_Obj_Access_Methods_a_s changed.  Specifically,
    om_get_section_info() om_load_section(), and om_relocate_a_section()
    now pass section indexes as Dwarf_Unsigned instead of Dwarf_Half.
  * Two functions have been removed from libdwarf.h and the library:
    dwarf_dnames_abbrev_by_code() and dwarf_dnames_abbrev_form_by_index().
  * dwarf_dnames_abbrev_by_code() is slow and pointless. Use either
    dwarf_dnames_name() or dwarf_dnames_abbrevtable() instead,
    depending on what you want to accomplish.
  * dwarf_dnames_abbrev_form_by_index() is not needed, was difficult
    to call due to argument list requirements, and never worked.
* Mon Feb 27 2023 Dirk Müller <dmueller@suse.com>
- update to 0.6.0:
  Fixes for Denial Of Service (possible libdwarf crash):
  * The dealloc required for dwarf_offset_list() was incorrect,
    possibly leading to a crash.
  * The function prototype for dwarf_dietype_offset() changed so
    it can work correctly on DWARF4 objects.
  * A memory leak from dwarf_load_loclists() has been fixed.
  * The function dwarf_get_pubtypes() changed, Dwarf_Type no longer
    exists, correcting a library design mistake made in 1993.
    The function applied to DWARF3 and DWARF4 objects.
  * The set of functions using Dwarf_Type are gone, use Dwarf_Global
    instead.  An object with DW_FORM_strx3 (DWARF5) could result in
    the library either crashing or returning an inappropriate error.
    DW_FORM_strx3 is now handled
  * https://newreleases.io/github/davea42/libdwarf-code?version=v0.6.0
* Fri Dec 02 2022 Dirk Müller <dmueller@suse.com>
- update to 0.5.0:
  * libdwarf-0.5.0 improves library performance reading
    DWARF DIEs by several percent (with no change in API).
  * It adds functions allowing acess to the .debug_addr
    section independent of other sections.
    dwarfdump has a new option to show that
    section.
  * Corrects the handling of some aspects of
    reading the .debug_names section.
  * Enhances dwarf_get_globals() to return
    all globals that .debug_pubnames and .debug_names
    refer to (no change in the API except adding
    a function to return the DW_TAG of any globals
    derived from .debug_names)
* Mon Oct 03 2022 Dirk Müller <dmueller@suse.com>
- update to 0.4.2:
  * memory leak fixes
  * How to deal with a dwarf_init*() call
    that fails (DW_DLV_ERROR) in a simple way is finally
    documented in libdwarf.pdf and in the on-line html.
* Fri Jul 15 2022 Dirk Müller <dmueller@suse.com>
- update to 0.4.1 (bsc#1200899, CVE-2022-34299):
  * Two places where a carefully corrupted object file
    could result in libdwarf crashing a caller due to
    referencing memory outside the intended read area
    have been fixed (DW202205-001 and DW202206-001).
    One related to DW_FORM_ref_sig8, the other to
    the .debug_pubnames section.
  * The library now accepts DW_AT_entry_pc in a CU DIE as a base address
    when DW_AT_low_pc is missing (an extension used by
    a current compiler).
  * Added function dwarf_suppress_debuglink_crc() to allow
    callers to turn off doing a CRC calculation
    reading GNU debuglink data (saves time for library
    users accessing near-identical builds).
- drop fix-CVE-2022-32200.patch (upstream)