Version: 0.11.0-bp160.1.13
* Sun Aug 18 2024 Dirk Müller <dmueller@suse.com>
- update to 0.11.0:
* Identifies git fix id now for ossfuzz 70721
DW202407-010
* Correcting use-after-free with a specific corrupted
DWARF section.
* This simplfies getting correct cooked
addresses for entries from .debug_ranges
* The new code about .debug_ranges had
small leaks when the library was told
not to record or clean-up most memory allocations.
Shown by -fsanitize.
* Fixed a mistake in examplev, .debug_ranges
* Added new argument to print_ranges_list_to_extra()
so it can print both raw and cooked values.
* Now calulates the cooked value of .debug_ranges
and prints both raw and cooked values.
* New date, some Dwarf_Ranges doc has been updated
in libdwarf.
* Added clarifying comment paragraphs about Dwarf_Ranges
* Final on the rnglists ossfuzz issues so far.
* ossfuzz 70246 DW202407-002 fixed.
* Removing esb_append_printf() which is the last use of *sprintf()
* ossfuzz 70244 fixed DW202407-001
* Removing esb_append_printf() as it is no
longer necessary.
* Added blank line after d= semantic version
* Fixed trailing whitespace and indents.
* Refine the information on rnglists base with
* cc_rnglists_base_via_at (similar to loclists)
* Added cc_loclists_base_via_at and
* Due to the addition of dwarf_get_locdesc_entry_e()
we revise the version for the next release to be
* Issue #247, github libdwarf-code.
* Fix indents and eliminate trailing whitespace.
* Corrected the gitfixid as there was
a use-after-free in new-today code, now fixed.
* Fixing a nasty double free that was caused a few
minutes ago.
* New oss fuzz 69639 and 69641 are fixed.
Here identfied as DW202406-001 and DW202406-002
* Remove debug printf (was #if 0 ... #endif)
Fixed DW202406-001 ossfuzz 69639
and
DW202406-002 ossfuzz 69641
* Implemented spelling change ld_kind to ld_lkind
* In dwarf_formref() we correct the reading
of DW_FORM_loclistx and DW_FORM_rnglistx
to read a uleb. Been wrong since 2022 at least..
Another spot reading these had it right all along.
* Renamed ll_kind to ll_lkind as it names a DW_LKIND value
* Renamed ld_kind to ld_lkind as it names a DW_LKIND value
* Revises the dwarfdump reporting of debug_loclists to
clarify the dwarf 5 debug_loclists structure content.
* The --print-raw-loclists option is more useful now.
* Revises the dwarfdump reporting of debug_rnglists to
clarify the dwarf 5 debug_rnglists structure content.
* The --print-raw-rnglists option is more useful now.
* In certain error cases the revised rnglists code
was failing to dwarf_dealloc_error() where
* Updated the output format of --print-raw-loclists
to be more useful and to essentially match the rnglists
version.
* Separated out part of loclists data structs to
be a better match with dwarf_rnglists.h
* Corrected calculations related to rnglists array of
offsets (were calling entries address size when they are offset
size).
* Removed some lines related to merging skeleton and split,
they were wrong. debug_rnglists and debug_rnglists.dwo
* Initialize the three new fields in Dwarf_Debug_s
used for DWARF5 GNU extension .debug_addr printing.
* Renaming DW_DLE_PE_SECTION_SIZE_ERROR
to DW_DLE_PE_SECTION_SIZE_HEURISTIC_FAIL
so any failure of the three such tests are
clearly reported. Should never happen.
* A heuristic sanity check on section VirtualSize
was too concervative at s00MB, a PE object file had a
section over 200MB in size.
* Adding release xz name
* Wed May 29 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 0.9.2:
+ Fixed four vulnerabilities that could crash the library
(segmentation violation etc) reading specific corruptions to
DWARF.
DW202402-001, DW202402-002,DW202402-003, and DW202403-001.
Now the library returns an error code for those. Corrected a
dwarf.h misspelling of DW_CFA_hi_user.
* Tue Jan 30 2024 Dirk Müller <dmueller@suse.com>
- update to 0.9.1:
* "--disable-decompression" tells the build to compile
libdwarf and dwarfdump with no reference to the zlib or
zstd libraries.
* Latest DW_LANG names now present.
- build with zstd support
* Thu Dec 28 2023 Dirk Müller <dmueller@suse.com>
- update to 0.9.0:
* Added support for reading Apple MacOS universal binaries.
* Added callers access to certain fields from object files
(for all three supported object formats), and
* added the --print-machine-arch option to dwarfdump to show the
fields.
* Three functions were added to the API, see the Changes section
of the latest documentation or in libdwarf.pdf in the release.
No functions were deleted or had their meaning changed.
* Vulnerabilities found by fuzzing were fixed.
* See https://www.prevanders.net/dwarfbug.html for vulnerability
details.
* Sat Nov 18 2023 Dirk Müller <dmueller@suse.com>
- update to 0.8.0:
* The release fixes many vulnerabilities from corrupt DWARF
and/or corrupt Elf. Two new functions are added for DWARF Frame
access to get the correct sign of an argument (the pre-existing
functions remain in place and working avoiding any need for
recompilation or relinking of user code).
* Mon May 29 2023 Dirk Müller <dmueller@suse.com>
- update to 0.7.0:
* The release fixes more than 50 vulnerabilities from corrupt
DWARF and/or corrupt Elf.
* Elf section counts can exceed 16 bits (on linux see man 5 elf)
so some function prototype members of struct
Dwarf_Obj_Access_Methods_a_s changed. Specifically,
om_get_section_info() om_load_section(), and om_relocate_a_section()
now pass section indexes as Dwarf_Unsigned instead of Dwarf_Half.
* Two functions have been removed from libdwarf.h and the library:
dwarf_dnames_abbrev_by_code() and dwarf_dnames_abbrev_form_by_index().
* dwarf_dnames_abbrev_by_code() is slow and pointless. Use either
dwarf_dnames_name() or dwarf_dnames_abbrevtable() instead,
depending on what you want to accomplish.
* dwarf_dnames_abbrev_form_by_index() is not needed, was difficult
to call due to argument list requirements, and never worked.
* Mon Feb 27 2023 Dirk Müller <dmueller@suse.com>
- update to 0.6.0:
Fixes for Denial Of Service (possible libdwarf crash):
* The dealloc required for dwarf_offset_list() was incorrect,
possibly leading to a crash.
* The function prototype for dwarf_dietype_offset() changed so
it can work correctly on DWARF4 objects.
* A memory leak from dwarf_load_loclists() has been fixed.
* The function dwarf_get_pubtypes() changed, Dwarf_Type no longer
exists, correcting a library design mistake made in 1993.
The function applied to DWARF3 and DWARF4 objects.
* The set of functions using Dwarf_Type are gone, use Dwarf_Global
instead. An object with DW_FORM_strx3 (DWARF5) could result in
the library either crashing or returning an inappropriate error.
DW_FORM_strx3 is now handled
* https://newreleases.io/github/davea42/libdwarf-code?version=v0.6.0
* Fri Dec 02 2022 Dirk Müller <dmueller@suse.com>
- update to 0.5.0:
* libdwarf-0.5.0 improves library performance reading
DWARF DIEs by several percent (with no change in API).
* It adds functions allowing acess to the .debug_addr
section independent of other sections.
dwarfdump has a new option to show that
section.
* Corrects the handling of some aspects of
reading the .debug_names section.
* Enhances dwarf_get_globals() to return
all globals that .debug_pubnames and .debug_names
refer to (no change in the API except adding
a function to return the DW_TAG of any globals
derived from .debug_names)
* Mon Oct 03 2022 Dirk Müller <dmueller@suse.com>
- update to 0.4.2:
* memory leak fixes
* How to deal with a dwarf_init*() call
that fails (DW_DLV_ERROR) in a simple way is finally
documented in libdwarf.pdf and in the on-line html.
* Fri Jul 15 2022 Dirk Müller <dmueller@suse.com>
- update to 0.4.1 (bsc#1200899, CVE-2022-34299):
* Two places where a carefully corrupted object file
could result in libdwarf crashing a caller due to
referencing memory outside the intended read area
have been fixed (DW202205-001 and DW202206-001).
One related to DW_FORM_ref_sig8, the other to
the .debug_pubnames section.
* The library now accepts DW_AT_entry_pc in a CU DIE as a base address
when DW_AT_low_pc is missing (an extension used by
a current compiler).
* Added function dwarf_suppress_debuglink_crc() to allow
callers to turn off doing a CRC calculation
reading GNU debuglink data (saves time for library
users accessing near-identical builds).
- drop fix-CVE-2022-32200.patch (upstream)
Version: 20161124-150000.3.6.1
* Mon Jul 03 2023 matz@suse.com
- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
(bsc#1193102).
* Wed Apr 21 2021 wolfgang.frisch@suse.com
- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).
* Mon Jan 02 2017 dmueller@suse.com
- add missing splitrequires
- revert rpm groups messup
* Mon Jan 02 2017 jengelh@inai.de
- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.
* Mon Jan 02 2017 dmueller@suse.com
- update to 20161124 (bsc#1012823, bsc#1001133,
CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
* removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added
* Wed Jan 21 2015 matz@suse.com
- Add libdwarf-fix-parallel-build.diff.
* Mon Jan 19 2015 matz@suse.com
- Update to new upstream release 20150115:
* New checking options added to dwarfdump
(-ku -kuf -kD -kG -O file=<path>).
* Deal better with internal errors (invalid ELF files/DWARF
sections or out of memory) (fixes boo#911839).
* Remove dwarfdump2: it had no advantages over dwarfdump anymore.
* Thu Oct 23 2014 idonmez@suse.com
- Package COPYING and related license files.
* Wed Oct 15 2014 jengelh@inai.de
- Update to new upstream release 20140805
* A mistake in handling DW_OP_GNU_const_type could lead to a
libdwarf coredump at times.
* Added AARCH64 relocation support.
* Adds GNU-specific DW_FORM codes so recent gcc objects can be
read usefully.
* Adds new functions to libdwarf for new DWARF reference types.
* Libdwarf now follows the DWARF2 standard properly in reading
DW_FORM_ref_addr.
* Source incompatibility for users of producer code:
dwarf_producer_init() now has a new interface and a sensible way
to select the output ABI/ISA for relocation numbers. Part of
preparation to emit DWARF3,4,5.
* The reader code now handles DebugFission, called Split Dwarf
objects in the draft DWARF5 standard.
* The reader now can get the content of .gdbindex and
.debug_cu_index and .debug_tu_index sections and dwarfdump -I
can print them. Support is incomplete for the cu,tu sections:
They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections
* Thu Dec 06 2012 jw@suse.com
- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
assumed upstream as a different implementation.
* Thu Dec 06 2012 jw@suse.com
- updated to 20121130
which fixes http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681748
dwarfdump ERROR: dwarf_loclist: DW_DLE_LOC_EXPR_BAD (128)
- enabled dwarfdump2 in specfile
* Mon Feb 13 2012 coolo@suse.com
- patch license to follow spdx.org standard
* Sun Sep 19 2010 jengelh@medozas.de
- Update to newer libdwarf (20100808), because the "perf" package
needs a version >= 20100214. Fixes include:
* dwarfdump was counting eh_frame low-pc as a duplicate of
.debug_frame low-pc
* Fixes some CFA_expression handling in libdwarf and allows some
compiler mistakes a bit more leeway in dwarfdump (so the dump
continues in the face of certain errors).
* ARM and MIPS64BE handling
- Stripped changelog from .spec file, since it is already in
.changes.
* Wed Oct 08 2008 dgollub@suse.de
- added libdwarf-dwarf3-dw_attributes.patch:
Allow attribute DW_AT_const_value in dwarf_add_AT_targ_address_b().
GCC generates code which has DW_AT_const_value with DW_FORM_addr.
Additional DWARF3 enhancments:
- allow DW_AT_entry_pc in dwarf_add_AT_targ_address_b()
- allow DW_AT_call_column, DW_AT_call_file, DW_AT_call_line in
dwarf_add_AT_unsigned_const
* Wed Oct 01 2008 dgollub@suse.de
- added libdwarf-relocation-support.patch:
initial ELF relocation support for libdwarf
* Wed Oct 01 2008 dgollub@suse.de
- removed dwarfextract from libdwarf-tools package
(got split into seperated package: dwarfextract)
- reenabled static build of libdwarf
* Fri Aug 22 2008 bwalle@suse.de
- update to 20080818
Minor improvements: dwarfdump print_reloc.c referred to
sym_data_entry_count in one place where sym_data_64_entry_count
should have been tested. DW_DLA_PUBTYPE_CONTEXT was a typo,
DW_DLE_PUBTYPE_CONTEXT was intended. Fixed indentation and
removed some tabs in favor of spaces (in five files). A couple
files had a couple lines with CR-LF line endings, the CR is now
gone. Corrected minor typographical errors in libdwarf2p.1.mm and
libdwarf2.1.mm and regenerated the pdfs.
* Tue Aug 12 2008 bwalle@suse.de
- update dwarfextract: fold dwarf-dwarfextract4.patch into
(from LKCD CVS) libdwarf-add-dwarfextract
* Tue Jun 17 2008 bwalle@suse.de
- update to 20080615
fixed wrong directory name in tarball (20060813 -> 20080815)
* Mon Jun 16 2008 bwalle@suse.de
- update to 20080613
Removed __SGI_FAST_LIBELF code, no one could use it anyway.
Fixed an off-by-one in dwarfdump which could reference off the
end of an array in a specfic circumstance and verify string table
index refers to inside the table when printing relocations.
Corrected return code from libdwarf when there is no dwarf
information. Thanks to Carlos Alberto Enciso for noticing the
bugs. Fixed indentation and removed some tabs in favor of
spaces (in a few files).