Overview

Request 1189074 accepted

- Update to version 0.4.39:
- Security: Fix error message printing buffer overflow leading
to possible code execution in orcc with specific input files
(CVE-2024-40897). This only affects developers and CI
environments using orcc, not users of liborc (boo#1228184)
- div255w: fix off-by-one error in the implementations
- x86: only run AVX detection if xgetbv is available
- x86: fix AVX detection by implementing the check recommended
by Intel
- Only enable JIT compilation on Apple arm64 if running on macOS,
fixes crashes on iOS
- Fix potential crash in emulation mode if logging is enabled
- Handle undefined TARGET_OS_OSX correctly
- orconce: Fix typo in GCC __sync-based implementation
- orconce: Fix usage of __STDC_NO_ATOMICS__
- Fix build with MSVC 17.10 + C11
- Support stack unwinding on Windows
- Major opcode and instruction set code clean-ups and refactoring
- Refactor allocation and chunk initialization of code regions
- Fall back to emulation on Linux if JIT support is not
available, e.g. because of SELinux sandboxing or noexec
mounting)

Loading...
Request History
Bjørn Lie's avatar

iznogood created request

- Update to version 0.4.39:
- Security: Fix error message printing buffer overflow leading
to possible code execution in orcc with specific input files
(CVE-2024-40897). This only affects developers and CI
environments using orcc, not users of liborc (boo#1228184)
- div255w: fix off-by-one error in the implementations
- x86: only run AVX detection if xgetbv is available
- x86: fix AVX detection by implementing the check recommended
by Intel
- Only enable JIT compilation on Apple arm64 if running on macOS,
fixes crashes on iOS
- Fix potential crash in emulation mode if logging is enabled
- Handle undefined TARGET_OS_OSX correctly
- orconce: Fix typo in GCC __sync-based implementation
- orconce: Fix usage of __STDC_NO_ATOMICS__
- Fix build with MSVC 17.10 + C11
- Support stack unwinding on Windows
- Major opcode and instruction set code clean-ups and refactoring
- Refactor allocation and chunk initialization of code regions
- Fall back to emulation on Linux if JIT support is not
available, e.g. because of SELinux sandboxing or noexec
mounting)


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Saul Goodman's avatar

licensedigger accepted review

ok


Ana Guerrero's avatar

anag+factory set openSUSE:Factory:Staging:L as a staging project

Being evaluated by staging project "openSUSE:Factory:Staging:L"


Ana Guerrero's avatar

anag+factory accepted review

Picked "openSUSE:Factory:Staging:L"


Dominique Leuenberger's avatar

dimstar accepted review


Dominique Leuenberger's avatar

dimstar_suse accepted review

Staging Project openSUSE:Factory:Staging:L got accepted.


Dominique Leuenberger's avatar

dimstar_suse approved review

Staging Project openSUSE:Factory:Staging:L got accepted.


Dominique Leuenberger's avatar

dimstar_suse accepted request

Staging Project openSUSE:Factory:Staging:L got accepted.

openSUSE Build Service is sponsored by