Mock Version: 4.1
Mock Version: 4.1
Mock Version: 4.1
ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target aarch64 --nodeps /builddir/build/SPECS/xerces-c.spec'], chrootPath='/var/lib/mock/dist-ocs23-build-130751-8997/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;<mock-chroot>\\007"', 'PS1': '<mock-chroot> \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=<mockbuild.trace_decorator.getLog object at 0xffff7e3074d0>timeout=86400uid=981gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False)
Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target aarch64 --nodeps /builddir/build/SPECS/xerces-c.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;<mock-chroot>\\007"', 'PS1': '<mock-chroot> \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False
Building target platforms: aarch64
Building for target aarch64
Wrote: /builddir/build/SRPMS/xerces-c-3.2.4-2.ocs23.src.rpm
Child return code was: 0
ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/xerces-c.spec'], chrootPath='/var/lib/mock/dist-ocs23-build-130751-8997/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;<mock-chroot>\\007"', 'PS1': '<mock-chroot> \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=<mockbuild.trace_decorator.getLog object at 0xffff7e3074d0>timeout=86400uid=981gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False)
Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/xerces-c.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;<mock-chroot>\\007"', 'PS1': '<mock-chroot> \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False
Building target platforms: aarch64
Building for target aarch64
Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.xTFygl
+ umask 022
+ cd /builddir/build/BUILD
+ cd /builddir/build/BUILD
+ rm -rf xerces-c-3.2.4
+ /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/xerces-c-3.2.4.tar.gz
+ STATUS=0
+ '[' 0 -ne 0 ']'
+ cd xerces-c-3.2.4
+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Fix-CVE-2024-23807.patch
+ /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch -f
The text leading up to this was:
--------------------------
|From b38ab79e934b9c27de191ee7af6926c7af42069d Mon Sep 17 00:00:00 2001
|From: Karen Arutyunov <karen@codesynthesis.com>
|Date: Wed, 13 Dec 2023 09:59:07 +0200
|Subject: [PATCH 1/2] XERCESC-2188 - Use-after-free on external DTD scan
| (CVE-2018-1311)
|
|These are the instructions for observing the bug (before this commit):
|
|$ git clone https://github.com/apache/xerces-c.git
|$ cd xerces-c
|$ mkdir build
|$ cd build
|$ cmake -G "Unix Makefiles" -DCMAKE_BUILD_TYPE=Debug ..
|$ make -j8
|$ cp ../samples/data/personal.xml .
|
|$ cat <<EOF >personal.dtd
|<?xml encoding="ISO-8859-1"?>
|<!ENTITY % nonExistentEntity SYSTEM "non-existent.ent">
|%nonExistentEntity;
|EOF
|
|$ gdb samples/StdInParse
|(gdb) b IGXMLScanner.cpp:1544
|(gdb) run <personal.xml
|1544 fReaderMgr.pushReader(reader, declDTD);
|(gdb) p declDTD
|$1 = (xercesc_4_0::DTDEntityDecl *) 0x49ac68
|(gdb) n
|1547 dtdScanner.scanExtSubsetDecl(false, true);
|(gdb) n
|1548 }
|(gdb) s
|...
|(gdb) s # The Janitor is about to delete the above declDTD.
|90 delete fData;
|(gdb) p fData
|$1 = (xercesc_4_0::DTDEntityDecl *) 0x49ac68
|(gdb) b ReaderMgr.cpp:1024
|(gdb) n
|...
|(gdb) n # Now we about to dereference the deleted declDTD.
|1024 if (curEntity && !curEntity->isExternal())
|(gdb) p curEntity
|$2 = (const xercesc_4_0::XMLEntityDecl *) 0x49ac68
|---
| src/xercesc/internal/DGXMLScanner.cpp | 6 +-
| src/xercesc/internal/IGXMLScanner.cpp | 6 +-
| src/xercesc/internal/ReaderMgr.cpp | 207 ++++++++++++++++++--------
| src/xercesc/internal/ReaderMgr.hpp | 92 ++++++++++--
| 4 files changed, 229 insertions(+), 82 deletions(-)
|
|diff --git a/src/xercesc/internal/DGXMLScanner.cpp b/src/xercesc/internal/DGXMLScanner.cpp
|index 38e58f49a..069598ecd 100644
|--- a/src/xercesc/internal/DGXMLScanner.cpp
|+++ b/src/xercesc/internal/DGXMLScanner.cpp
--------------------------
No file to patch. Skipping patch.
2 out of 2 hunks ignored
The text leading up to this was:
--------------------------
|diff --git a/src/xercesc/internal/IGXMLScanner.cpp b/src/xercesc/internal/IGXMLScanner.cpp
|index 4417d44a0..7d1540948 100644
|--- a/src/xercesc/internal/IGXMLScanner.cpp
|+++ b/src/xercesc/internal/IGXMLScanner.cpp
--------------------------
No file to patch. Skipping patch.
2 out of 2 hunks ignored
The text leading up to this was:
--------------------------
|diff --git a/src/xercesc/internal/ReaderMgr.cpp b/src/xercesc/internal/ReaderMgr.cpp
|index 4e59a4a19..cc08284ef 100644
|--- a/src/xercesc/internal/ReaderMgr.cpp
|+++ b/src/xercesc/internal/ReaderMgr.cpp
--------------------------
No file to patch. Skipping patch.
15 out of 15 hunks ignored
The text leading up to this was:
--------------------------
|diff --git a/src/xercesc/internal/ReaderMgr.hpp b/src/xercesc/internal/ReaderMgr.hpp
|index d362af566..b36dbd9b7 100644
|--- a/src/xercesc/internal/ReaderMgr.hpp
|+++ b/src/xercesc/internal/ReaderMgr.hpp
--------------------------
No file to patch. Skipping patch.
5 out of 5 hunks ignored
RPM build errors:
error: Bad exit status from /var/tmp/rpm-tmp.xTFygl (%prep)
Bad exit status from /var/tmp/rpm-tmp.xTFygl (%prep)
Child return code was: 1
EXCEPTION: [Error('Command failed: \n # bash --login -c /usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/xerces-c.spec\n', 1)]
Traceback (most recent call last):
File "/usr/lib/python3.11/site-packages/mockbuild/trace_decorator.py", line 93, in trace
result = func(*args, **kw)
^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/site-packages/mockbuild/util.py", line 597, in do_with_status
raise exception.Error("Command failed: \n # %s\n%s" % (command, output), child.returncode)
mockbuild.exception.Error: Command failed:
# bash --login -c /usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/xerces-c.spec