[Buildroot] [PATCH] liburiparser: bump to version 0.8.6

[Buildroot] [PATCH] liburiparser: bump to version 0.8.6

[Carlos Santos]

Version 0.8.6 is a bugfix release including a nasty bug that has
potential to crash applications when parsing certain URIs (like
"//:%aa@", excluding quotes).

For more details please check the change log at

    https://github.com/uriparser/uriparser/blob/uriparser-0.8.6/ChangeLog

Signed-off-by: Carlos Santos <casantos@datacom.com.br>
---
 package/liburiparser/liburiparser.hash | 2 +-
 package/liburiparser/liburiparser.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/liburiparser/liburiparser.hash b/package/liburiparser/liburiparser.hash
index c03e832f9f..1fd65d2f19 100644
--- a/package/liburiparser/liburiparser.hash
+++ b/package/liburiparser/liburiparser.hash
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  58eacd5c03d9e341c04eb0b30831faec89f3b415949ff8d72254e63432352cdd  uriparser-0.8.5.tar.bz2
+sha256  0709a7e572417db763f0356250d91686c19a64ab48e9da9f5a1e8055dc2a4a54  uriparser-0.8.6.tar.bz2
 sha256  ee90029e62d11f48faa59360d15c3ad8e7c094c74cc25b055716d92340da561f  COPYING
diff --git a/package/liburiparser/liburiparser.mk b/package/liburiparser/liburiparser.mk
index 4b32b7f7f2..baed4506a4 100644
--- a/package/liburiparser/liburiparser.mk
+++ b/package/liburiparser/liburiparser.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBURIPARSER_VERSION = 0.8.5
+LIBURIPARSER_VERSION = 0.8.6
 LIBURIPARSER_SOURCE = uriparser-$(LIBURIPARSER_VERSION).tar.bz2
 LIBURIPARSER_SITE = https://github.com/uriparser/uriparser/releases/download/uriparser-$(LIBURIPARSER_VERSION)
 LIBURIPARSER_LICENSE = BSD-3-Clause
-- 
2.17.1

[Buildroot] [PATCH] liburiparser: bump to version 0.8.6

[Peter Korsgaard]

>>>>> "Carlos" == Carlos Santos <casantos@datacom.com.br> writes:

 > Version 0.8.6 is a bugfix release including a nasty bug that has
 > potential to crash applications when parsing certain URIs (like
 > "//:%aa@", excluding quotes).

 > For more details please check the change log at

 >     https://github.com/uriparser/uriparser/blob/uriparser-0.8.6/ChangeLog

 > Signed-off-by: Carlos Santos <casantos@datacom.com.br>

Committed, thanks.

When was this issue introduced? 2018.02.x has 0.8.4.

-- 
Bye, Peter Korsgaard

[Buildroot] [PATCH] liburiparser: bump to version 0.8.6

[Carlos Santos]

> From: "Peter Korsgaard" <peter@korsgaard.com>
> To: "DATACOM" <casantos@datacom.com.br>
> Cc: "buildroot" <buildroot@buildroot.org>, "Bernd Kuhls" <bernd.kuhls@t-online.de>
> Sent: Monday, August 20, 2018 2:22:58 PM
> Subject: Re: [PATCH] liburiparser: bump to version 0.8.6

>>>>>> "Carlos" == Carlos Santos <casantos@datacom.com.br> writes:
> 
> > Version 0.8.6 is a bugfix release including a nasty bug that has
> > potential to crash applications when parsing certain URIs (like
> > "//:%aa@", excluding quotes).
> 
> > For more details please check the change log at
> 
> >     https://github.com/uriparser/uriparser/blob/uriparser-0.8.6/ChangeLog
> 
> > Signed-off-by: Carlos Santos <casantos@datacom.com.br>
> 
> Committed, thanks.
> 
> When was this issue introduced? 2018.02.x has 0.8.4.

Looking a the code it seems to predate 0.8.4 by several years since it
fixes a function that was introduced in 2008:

   https://github.com/uriparser/uriparser/commit/451eb07f3a289e0d1b7800629f4814bf6b48c121

-- 
Carlos Santos (Casantos) - DATACOM, P&D
?Marched towards the enemy, spear upright, armed with the certainty
that only the ignorant can have.? ? Epitaph of a volunteer

[Buildroot] [PATCH] liburiparser: bump to version 0.8.6

[Peter Korsgaard]

>>>>> "Carlos" == Carlos Santos <casantos@datacom.com.br> writes:

Hi,

 >> Committed, thanks.
 >> 
 >> When was this issue introduced? 2018.02.x has 0.8.4.

 > Looking a the code it seems to predate 0.8.4 by several years since it
 > fixes a function that was introduced in 2008:

 >    https://github.com/uriparser/uriparser/commit/451eb07f3a289e0d1b7800629f4814bf6b48c121

Ok, thanks. I'll cherry pick this bump for 2018.02.x as well next time I
sync then.

-- 
Bye, Peter Korsgaard