]> dgit.raspbian.org Git - libreoffice.git/commit
[PATCH] match the package content provider when checking a vnd.sun.star.pkg url
authorCaolán McNamara <caolan.mcnamara@collabora.com>
Fri, 12 Jun 2026 20:32:27 +0000 (20:32 +0000)
committerRene Engelhard <rene@debian.org>
Tue, 21 Jul 2026 16:41:22 +0000 (13:41 -0300)
commitfd2081bdb2f0dd1fe40922bfc019dd341b44868d
tree02df2ed5353ffeaa34353574187aa3c25f3bd35d
parent6976f3e267ac3c22e7c031b23e7eabfb4f2eb328
[PATCH] match the package content provider when checking a vnd.sun.star.pkg url

IsExoticProtocol used GetHost() to recover the nested package url of a
vnd.sun.star.pkg url, but the package content provider in
ucb/source/ucp/package/pkguri.cxx uses the whole authority between "://"
and the next '/', which GetHost() truncates at '@'. Check the same
substring the provider does.

The vnd.sun.star.zip branch below already did the equivalent extraction,
so pull the shared parts into a helper that both branches call.

Signed-off-by: Caolán McNamara <caolan.mcnamara@collabora.com>
Change-Id: I27be6a839108f2e58d62baefc1a71dcbfc9a4568
Reviewed-on: https://gerrit.collaboraoffice.com/c/online/+/4410
Tested-by: Jenkins CPCI <releng@collaboraoffice.com>
Reviewed-by: Stephan Bergmann <stephan.bergmann@collabora.com>
(cherry picked from commit ce436efb34d2e0e90ee2cdb450da285530c562f7)
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/206681
Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
Tested-by: Jenkins
(cherry picked from commit 4ba5567cc44be760066c0c45c99949f790cf181a)
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/206701

Gbp-Pq: Name CVE-2026-63278.diff
tools/qa/cppunit/test_urlobj.cxx
tools/source/fsys/urlobj.cxx