Package Release Info

libdwarf-20161124-bp152.3.23

Update Info: Base Release
Available in Package Hub : 15 SP2

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

libdwarf-devel
libdwarf-devel-static
libdwarf-doc
libdwarf-tools
libdwarf1

Change Logs

Version: 0.11.0-bp160.1.13
* Sun Aug 18 2024 Dirk Müller <dmueller@suse.com>
- update to 0.11.0:
  * Identifies git fix id now for ossfuzz 70721
    DW202407-010
  * Correcting use-after-free with a specific corrupted
    DWARF section.
  * This simplfies getting correct cooked
    addresses for entries from .debug_ranges
  * The new code about .debug_ranges had
    small leaks when the library was told
    not to record or clean-up most memory allocations.
    Shown by -fsanitize.
  * Fixed a mistake in examplev, .debug_ranges
  * Added new argument to print_ranges_list_to_extra()
    so it can print both raw and cooked values.
  * Now calulates the cooked value of .debug_ranges
    and prints both raw and cooked values.
  * New date, some Dwarf_Ranges doc has been updated
    in libdwarf.
  * Added clarifying comment paragraphs about Dwarf_Ranges
  * Final on the rnglists ossfuzz issues so far.
  * ossfuzz 70246 DW202407-002 fixed.
  * Removing esb_append_printf() which is the last use of  *sprintf()
  * ossfuzz 70244 fixed  DW202407-001
  * Removing esb_append_printf() as it is no
    longer necessary.
  * Added blank line after d=  semantic version
  * Fixed trailing whitespace and indents.
  * Refine the information on rnglists base with
  * cc_rnglists_base_via_at  (similar to loclists)
  * Added cc_loclists_base_via_at and
  * Due to the addition of dwarf_get_locdesc_entry_e()
    we revise the version for the next release to be
  * Issue #247, github libdwarf-code.
  * Fix indents and eliminate trailing whitespace.
  * Corrected the gitfixid as there was
    a use-after-free in new-today code, now fixed.
  * Fixing a nasty double free that was caused a few
    minutes ago.
  * New oss fuzz 69639 and 69641 are fixed.
    Here identfied as DW202406-001 and DW202406-002
  * Remove debug printf (was #if 0 ... #endif)
    Fixed DW202406-001  ossfuzz 69639
    and
    DW202406-002 ossfuzz 69641
  * Implemented spelling change ld_kind  to ld_lkind
  * In dwarf_formref() we correct the reading
    of DW_FORM_loclistx and DW_FORM_rnglistx
    to read a uleb. Been wrong since 2022 at least..
    Another spot reading these had it right all along.
  * Renamed ll_kind to ll_lkind as it names a DW_LKIND value
  * Renamed ld_kind to ld_lkind as it names a DW_LKIND value
  * Revises the dwarfdump reporting of debug_loclists to
    clarify the dwarf 5 debug_loclists structure content.
  * The --print-raw-loclists option is more useful now.
  * Revises the dwarfdump reporting of debug_rnglists to
    clarify the dwarf 5 debug_rnglists structure content.
  * The --print-raw-rnglists option is more useful now.
  * In certain error cases the revised rnglists code
    was failing to dwarf_dealloc_error() where
  * Updated the output format of --print-raw-loclists
    to be more useful and to essentially match the rnglists
    version.
  * Separated out part of loclists data structs to
    be a better match with dwarf_rnglists.h
  * Corrected calculations related to rnglists array of
    offsets (were calling entries address size when they are offset
    size).
  * Removed some lines related to merging skeleton and split,
    they were wrong.  debug_rnglists and debug_rnglists.dwo
  * Initialize the three new fields in Dwarf_Debug_s
    used for DWARF5 GNU extension .debug_addr printing.
  * Renaming  DW_DLE_PE_SECTION_SIZE_ERROR
    to  DW_DLE_PE_SECTION_SIZE_HEURISTIC_FAIL
    so any failure of the three such tests are
    clearly reported.  Should never happen.
  * A heuristic sanity check on section VirtualSize
    was too concervative at s00MB, a PE object file had a
    section over 200MB in size.
  * Adding release xz name
* Wed May 29 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 0.9.2:
  + Fixed four vulnerabilities that could crash the library
    (segmentation violation etc) reading specific corruptions to
    DWARF.
    DW202402-001, DW202402-002,DW202402-003, and DW202403-001.
    Now the library returns an error code for those. Corrected a
    dwarf.h misspelling of DW_CFA_hi_user.
* Tue Jan 30 2024 Dirk Müller <dmueller@suse.com>
- update to 0.9.1:
  * "--disable-decompression" tells the build to compile
    libdwarf and dwarfdump with no reference to the zlib or
    zstd libraries.
  * Latest DW_LANG names now present.
- build with zstd support
* Thu Dec 28 2023 Dirk Müller <dmueller@suse.com>
- update to 0.9.0:
  * Added support for reading Apple MacOS universal binaries.
  * Added callers access to certain fields from object files
    (for all three supported object formats), and
  * added the --print-machine-arch option to dwarfdump to show the
    fields.
  * Three functions were added to the API, see the Changes section
    of the latest documentation or in libdwarf.pdf in the release.
    No functions were deleted or had their meaning changed.
  * Vulnerabilities found by fuzzing were fixed.
  * See https://www.prevanders.net/dwarfbug.html for vulnerability
    details.
* Sat Nov 18 2023 Dirk Müller <dmueller@suse.com>
- update to 0.8.0:
  * The release fixes many vulnerabilities from corrupt DWARF
    and/or corrupt Elf. Two new functions are added for DWARF Frame
    access to get the correct sign of an argument (the pre-existing
    functions remain in place and working avoiding any need for
    recompilation or relinking of user code).
* Mon May 29 2023 Dirk Müller <dmueller@suse.com>
- update to 0.7.0:
  * The release fixes more than 50 vulnerabilities from corrupt
    DWARF and/or corrupt Elf.
  * Elf section counts can exceed 16 bits (on linux see man 5 elf)
    so some function prototype members of struct
    Dwarf_Obj_Access_Methods_a_s changed.  Specifically,
    om_get_section_info() om_load_section(), and om_relocate_a_section()
    now pass section indexes as Dwarf_Unsigned instead of Dwarf_Half.
  * Two functions have been removed from libdwarf.h and the library:
    dwarf_dnames_abbrev_by_code() and dwarf_dnames_abbrev_form_by_index().
  * dwarf_dnames_abbrev_by_code() is slow and pointless. Use either
    dwarf_dnames_name() or dwarf_dnames_abbrevtable() instead,
    depending on what you want to accomplish.
  * dwarf_dnames_abbrev_form_by_index() is not needed, was difficult
    to call due to argument list requirements, and never worked.
* Mon Feb 27 2023 Dirk Müller <dmueller@suse.com>
- update to 0.6.0:
  Fixes for Denial Of Service (possible libdwarf crash):
  * The dealloc required for dwarf_offset_list() was incorrect,
    possibly leading to a crash.
  * The function prototype for dwarf_dietype_offset() changed so
    it can work correctly on DWARF4 objects.
  * A memory leak from dwarf_load_loclists() has been fixed.
  * The function dwarf_get_pubtypes() changed, Dwarf_Type no longer
    exists, correcting a library design mistake made in 1993.
    The function applied to DWARF3 and DWARF4 objects.
  * The set of functions using Dwarf_Type are gone, use Dwarf_Global
    instead.  An object with DW_FORM_strx3 (DWARF5) could result in
    the library either crashing or returning an inappropriate error.
    DW_FORM_strx3 is now handled
  * https://newreleases.io/github/davea42/libdwarf-code?version=v0.6.0
* Fri Dec 02 2022 Dirk Müller <dmueller@suse.com>
- update to 0.5.0:
  * libdwarf-0.5.0 improves library performance reading
    DWARF DIEs by several percent (with no change in API).
  * It adds functions allowing acess to the .debug_addr
    section independent of other sections.
    dwarfdump has a new option to show that
    section.
  * Corrects the handling of some aspects of
    reading the .debug_names section.
  * Enhances dwarf_get_globals() to return
    all globals that .debug_pubnames and .debug_names
    refer to (no change in the API except adding
    a function to return the DW_TAG of any globals
    derived from .debug_names)
* Mon Oct 03 2022 Dirk Müller <dmueller@suse.com>
- update to 0.4.2:
  * memory leak fixes
  * How to deal with a dwarf_init*() call
    that fails (DW_DLV_ERROR) in a simple way is finally
    documented in libdwarf.pdf and in the on-line html.
* Fri Jul 15 2022 Dirk Müller <dmueller@suse.com>
- update to 0.4.1 (bsc#1200899, CVE-2022-34299):
  * Two places where a carefully corrupted object file
    could result in libdwarf crashing a caller due to
    referencing memory outside the intended read area
    have been fixed (DW202205-001 and DW202206-001).
    One related to DW_FORM_ref_sig8, the other to
    the .debug_pubnames section.
  * The library now accepts DW_AT_entry_pc in a CU DIE as a base address
    when DW_AT_low_pc is missing (an extension used by
    a current compiler).
  * Added function dwarf_suppress_debuglink_crc() to allow
    callers to turn off doing a CRC calculation
    reading GNU debuglink data (saves time for library
    users accessing near-identical builds).
- drop fix-CVE-2022-32200.patch (upstream)
Version: 20161124-bp150.2.4
* Wed Jun 11 2008 bwalle@suse.de
- update to 20080125
  In the producer library code dwarf_die_link() is now O(1) where
  it was O(N) before. Thanks to Daniel Gollub for finding this
  performance improvement. dwarf_die_link() now back-links siblings
  (in its internal lists) correctly. The back link bug had no
  (known) effect on dwarf generated by libdwarf.
- update to 20080208
  Due to a typo, calling _dwarf_fde_section_offset() (a interface
  which is still supported) would lead to an infinite loop in
  libdwarf-20071209 and libdwarf-20080125. The libdwarf producer
  forms code now allows more of the newer attributes (so is more
  complete). Alloca is no longer used anywhere (it was really only
  used one place). The libdwarf producer code controlling the
  offset-size is more sensible: standard DWARF (32 bit offsets) is
  the default, use configure --enable-dwarf-format-sgi-irix to get
  IRIX 64bit offsets. See the libdwarf README and libdwarf2p.1.pdf
  for details. Thanks to Carlos Alberto Enciso and Melanie Zumwalde
  for noticing some of these errors.
- update to 20080228
  This changes the libdwarf-internal implementation of reading libelf
  so that the reader is not directly tied to libelf or even elf.
  Meaning a libdwarf can be built that reads other object file types
  or that uses some library other than libelf to do the reading
  (subject only to simple constraints, see libdwarf.h). Thanks to
  Josh Fuhs for designing and implementing the object-file-reader
  revisions.
- update to 20080409
  A giant a.out exposed an inflexible (slow) handling of
  abbreviations in libdwarf as well as showing that one (internal)
  field was too small to accommodate over 64K abbreviations in one
  compilation unit. The relevant hash table adapts now and the field
  is 'large enough'. Added -H and -n options to dwarfdump. Added a
  dwarfdump -ka new check for correctness.
* Fri Jan 25 2008 dgollub@suse.de
- removed README.SUSE, which contained obsolate information about
  shared library and versioning.
- update to 20080125
  o producer interface:
    dwarf_die_link() is now O(1) where it was O(N) before.
Version: 20161124-150000.3.6.1
* Mon Jul 03 2023 matz@suse.com
- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).
* Wed Apr 21 2021 wolfgang.frisch@suse.com
- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).
* Mon Jan 02 2017 dmueller@suse.com
- add missing splitrequires
- revert rpm groups messup
* Mon Jan 02 2017 jengelh@inai.de
- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.
* Mon Jan 02 2017 dmueller@suse.com
- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added
* Wed Jan 21 2015 matz@suse.com
- Add libdwarf-fix-parallel-build.diff.
* Mon Jan 19 2015 matz@suse.com
- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=<path>).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.
* Thu Oct 23 2014 idonmez@suse.com
- Package COPYING and related license files.
* Wed Oct 15 2014 jengelh@inai.de
- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections
* Thu Dec 06 2012 jw@suse.com
- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.
* Thu Dec 06 2012 jw@suse.com
- updated to 20121130
  which fixes http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681748
  dwarfdump ERROR:  dwarf_loclist:  DW_DLE_LOC_EXPR_BAD (128)
- enabled dwarfdump2 in specfile
* Mon Feb 13 2012 coolo@suse.com
- patch license to follow spdx.org standard
* Sun Sep 19 2010 jengelh@medozas.de
- Update to newer libdwarf (20100808), because the "perf" package
  needs a version >= 20100214. Fixes include:
  * dwarfdump was counting eh_frame low-pc as a duplicate of
  .debug_frame low-pc
  * Fixes some CFA_expression handling in libdwarf and allows some
  compiler mistakes a bit more leeway in dwarfdump (so the dump
  continues in the face of certain errors).
  * ARM and MIPS64BE handling
- Stripped changelog from .spec file, since it is already in
  .changes.
* Wed Oct 08 2008 dgollub@suse.de
- added libdwarf-dwarf3-dw_attributes.patch:
  Allow attribute DW_AT_const_value in dwarf_add_AT_targ_address_b().
  GCC generates code which has DW_AT_const_value with DW_FORM_addr.
  Additional DWARF3 enhancments:
  - allow DW_AT_entry_pc in dwarf_add_AT_targ_address_b()
  - allow DW_AT_call_column, DW_AT_call_file, DW_AT_call_line in
    dwarf_add_AT_unsigned_const
* Wed Oct 01 2008 dgollub@suse.de
- added libdwarf-relocation-support.patch:
  initial ELF relocation support for libdwarf
* Wed Oct 01 2008 dgollub@suse.de
- removed dwarfextract from libdwarf-tools package
  (got split into seperated package: dwarfextract)
- reenabled static build of libdwarf
* Fri Aug 22 2008 bwalle@suse.de
- update to 20080818
  Minor improvements: dwarfdump print_reloc.c referred to
  sym_data_entry_count in one place where sym_data_64_entry_count
  should have been tested. DW_DLA_PUBTYPE_CONTEXT was a typo,
  DW_DLE_PUBTYPE_CONTEXT was intended. Fixed indentation and
  removed some tabs in favor of spaces (in five files). A couple
  files had a couple lines with CR-LF line endings, the CR is now
  gone. Corrected minor typographical errors in libdwarf2p.1.mm and
  libdwarf2.1.mm and regenerated the pdfs.
* Tue Aug 12 2008 bwalle@suse.de
- update dwarfextract: fold dwarf-dwarfextract4.patch into
  (from LKCD CVS) libdwarf-add-dwarfextract
* Tue Jun 17 2008 bwalle@suse.de
- update to 20080615
  fixed wrong directory name in tarball (20060813 -> 20080815)
* Mon Jun 16 2008 bwalle@suse.de
- update to 20080613
  Removed __SGI_FAST_LIBELF code, no one could use it anyway.
  Fixed an off-by-one in dwarfdump which could reference off the
  end of an array in a specfic circumstance and verify string table
  index refers to inside the table when printing relocations.
  Corrected return code from libdwarf when there is no dwarf
  information. Thanks to Carlos Alberto Enciso for noticing the
  bugs. Fixed indentation and removed some tabs in favor of
  spaces (in a few files).