[tcllib] Update to new 1.16
Dmitrij S. Kryzhevich
krege at fedoraproject.org
Tue Mar 3 05:43:39 UTC 2015
commit ef43118e860831d125864519ac2dca25de4e7ad7
Author: Dmitrij S. Kryzhevich <krege at land.ru>
Date: Tue Mar 3 11:43:35 2015 +0600
Update to new 1.16
tcllib-1.16-textarea.patch | 82 ++++++++++++++++++++++++++++++++++++++++++++++
tcllib.spec | 15 +++++++--
2 files changed, 94 insertions(+), 3 deletions(-)
---
diff --git a/tcllib-1.16-textarea.patch b/tcllib-1.16-textarea.patch
new file mode 100644
index 0000000..090b3cc
--- /dev/null
+++ b/tcllib-1.16-textarea.patch
@@ -0,0 +1,82 @@
+Index: modules/html/html.man
+==================================================================
+--- modules/html/html.man
++++ modules/html/html.man
+@@ -1,7 +1,7 @@
+ [comment {-*- tcl -*- doctools manpage}]
+-[vset HTML_VERSION 1.4.3]
++[vset HTML_VERSION 1.4.4]
+ [manpage_begin html n [vset HTML_VERSION]]
+ [see_also htmlparse]
+ [see_also ncgi]
+ [keywords checkbox]
+ [keywords checkbutton]
+
+Index: modules/html/html.tcl
+==================================================================
+--- modules/html/html.tcl
++++ modules/html/html.tcl
+@@ -13,11 +13,11 @@
+ #
+ # Originally by Brent Welch, with help from Dan Kuchler and Melissa Chawla
+
+ package require Tcl 8.2
+ package require ncgi
+-package provide html 1.4.3
++package provide html 1.4.4
+
+ namespace eval ::html {
+
+ # State about the current page
+
+@@ -910,11 +910,11 @@
+ #
+ # Results:
+ # The html fragment
+
+ proc ::html::textarea {name {param {}} {current {}}} {
+- ::set value [ncgi::value $name $current]
++ ::set value [quoteFormValue [ncgi::value $name $current]]
+ return "<[string trimright \
+ "textarea name=\"$name\"\
+ [tagParam textarea $param]"]>$value</textarea>\n"
+ }
+
+
+Index: modules/html/html.test
+==================================================================
+--- modules/html/html.test
++++ modules/html/html.test
+@@ -451,10 +451,22 @@
+ ncgi::reset info=[ncgi::encode "The textarea value."]
+ ncgi::parse
+ html::textarea info
+ } {<textarea name="info" cols="50" rows="8">The textarea value.</textarea>
+ }
++
++test html-23.3 {html::textarea, dangerous input} {
++ html::init {
++ textarea.cols 50
++ textarea.rows 8
++ }
++ ncgi::reset info=[ncgi::encode "</textarea><script>alert(1)</script>"]
++ ncgi::parse
++ html::textarea info
++} {<textarea name="info" cols="50" rows="8"></textarea><script>alert(1)</script></textarea>
++}
++
+
+ test html-24.1 {html::submit} {
+ catch {html::submit}
+ } {1}
+
+
+Index: modules/html/pkgIndex.tcl
+==================================================================
+--- modules/html/pkgIndex.tcl
++++ modules/html/pkgIndex.tcl
+@@ -1,2 +1,2 @@
+ if {![package vsatisfies [package provide Tcl] 8.2]} {return}
+-package ifneeded html 1.4.3 [list source [file join $dir html.tcl]]
++package ifneeded html 1.4.4 [list source [file join $dir html.tcl]]
+
diff --git a/tcllib.spec b/tcllib.spec
index 9d55057..dfeb743 100644
--- a/tcllib.spec
+++ b/tcllib.spec
@@ -3,14 +3,17 @@
Summary: The standard Tcl library
Name: tcllib
-Version: 1.15
-Release: 8%{?dist}
+Version: 1.16
+Release: 1%{?dist}
License: BSD
Group: Development/Libraries
-Source: http://downloads.sourceforge.net/tcllib/tcllib-1.15.tar.gz
+Source: http://downloads.sourceforge.net/tcllib/Tcllib-%{version}.tar.gz
URL: http://tcllib.sourceforge.net/
BuildArch:: noarch
+# Upstream patch for RHBZ #1197669
+Patch50: tcllib-1.16-textarea.patch
+
Requires: tcl(abi) = 8.6
@@ -23,6 +26,7 @@ programmers.
%prep
%setup -q
+%patch50 -p0
chmod -x modules/doctools/mpformats/fr.msg
# Convert a couple of files to UTF-8
for file in modules/struct/pool.html ; do
@@ -70,6 +74,10 @@ find %{buildroot}/%{_datadir} -name \*.tcl -exec chmod 0644 {} \;
%{_bindir}/tcldocstrip
%changelog
+* Tue Mar 03 2015 Dmitrij S. Kryzhevich <krege at land.ru> - 1.16-1
+- Update to 1.16.
+- Patch for RHBZ #1197669.
+
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.15-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
@@ -81,6 +89,7 @@ find %{buildroot}/%{_datadir} -name \*.tcl -exec chmod 0644 {} \;
* Wed May 21 2014 Jaroslav Škarvada <jskarvad at redhat.com> - 1.15-5
- Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86
+>>>>>>> 35f897ac8154ead9438d89049def35a8fbbfc7f2
* Tue Feb 25 2014 Dmitrij S. Kryzhevich <krege at land.ru> - 1.15-4
- Add two more man files to conflict-list. Again.
More information about the scm-commits
mailing list