Page MenuHomePhabricator Dev

Bug 1855486 - Update nestegg local patches to apply cleanly
Needs ReviewPublic

Authored by update-bot on Jul 9 2026, 3:03 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Oct 11, 10:18 AM
Unknown Object (File)
Fri, Oct 9, 1:02 PM
Unknown Object (File)
Thu, Sep 24, 1:12 AM
Unknown Object (File)
Aug 10 2026, 10:19 PM
Unknown Object (File)
Aug 9 2026, 5:26 AM
Unknown Object (File)
Jul 29 2026, 7:02 PM
Unknown Object (File)
Jul 21 2026, 12:03 AM
Unknown Object (File)
Jul 20 2026, 5:05 AM
Subscribers
None
This revision needs review, but there are no reviewers specified.

Details

Reviewers
None
Bugzilla Bug ID
1855486
Summary
  • patches/0001-clamp-nestegg-uint-reads.patch failed to apply: its context expected the guard 'if (length == 0 || length > 8)' followed immediately by 'r = ne_io_read(io, &b, 1);', but upstream ne_read_uint in src/nestegg.c has been refactored.
  • Upstream removed the 'length == 0' term from the guard (it is now 'if (length > 8)') and restructured the body to zero *val and loop with 'while (length--)', so zero-length EBML integers are now accepted and return 0, consistent with RFC 8794 (0..8 octets). ne_read_int likewise now handles length == 0 explicitly.
  • The local patch only inserts a documentation comment above the length guard, so its context was retargeted to the new 'if (length > 8)' line; it now applies cleanly (verified via ./mach vendor --patch-mode only).
  • Because upstream made a non-trivial behavioral change to the guarded code, and the preserved comment wording ('1..8 bytes wide') is now slightly inconsistent with code that permits zero-length integers, this is reported as uncertain success and a human should confirm the comment wording.

Diff Detail

Branch
default
Build Status
Buildable 5182

Event Timeline

phab-bot published this revision for review.Jul 9 2026, 3:03 AM
phab-bot changed the visibility from "Custom Policy" to "Public (No Login Required)".
phab-bot changed the edit policy from "Custom Policy" to "Restricted Project (Project)".
phab-bot removed a project: Restricted Project.