Merge opencc (1.1.9+ds1-4) import into refs/heads/workingbranch

setup.py: Handle python binding instead of cmake

Gbp-Pq: Name 0009-setup.py-Handle-python-binding-instead-of-cmake.patch

[PATCH] Fix two out-of-bounds read issues when handling truncated UTF-8 input (#1005)

Two independent out-of-bounds read issues were identified in OpenCC's UTF-8
processing logic when handling malformed or truncated UTF-8 sequences.

1) MaxMatchSegmentation:
   NextCharLength() could return a value larger than the remaining input size.
   The previous logic subtracted this value from a size_t length counter,
   potentially causing underflow and subsequent out-of-bounds reads.

2) Conversion:
   Similar length handling could allow reads past the end of the input buffer
   during dictionary matching, potentially propagating unintended bytes to the
   conversion output.

This patch fixes both issues by:
- Explicitly tracking the end of the input buffer
- Recomputing remaining length on each iteration
- Clamping matched character and key lengths to the remaining buffer size
- Preventing reads past the null terminator

The changes preserve existing behavior for valid UTF-8 input and add test
coverage for truncated UTF-8 sequences.

These issues may have security implications when processing untrusted input
and are classified as heap out-of-bounds reads (CWE-125).

Co-authored-by: Claude <noreply@anthropic.com>
Applied-Upstream: https://github.com/BYVoid/OpenCC/commit/345c9a50ab07018f1b4439776bad78a0d40778ec

Gbp-Pq: Topic backport
Gbp-Pq: Name 345c9a50ab07018f1b4439776bad78a0d40778ec.patch

Fix deprecated declarations in C++17

Gbp-Pq: Topic backport
Gbp-Pq: Name 0007-Fix-deprecated-declarations-in-C-17.patch

Fix build for gcc 15 (#934)

Co-authored-by: Peng Wu <pwu@redhat.com>
Bug-Debian: https://bugs.debian.org/1097512

Gbp-Pq: Topic backport
Gbp-Pq: Name 0006-Fix-build-for-gcc-15-934.patch

Disable build in setup.py

Gbp-Pq: Name 0005-Disable-build-in-setup.py.patch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0003-no-remote-images-when-reading-docs-on-disk.patch

Force build with c++17

Needed by googletest.

Gbp-Pq: Name 0002-Force-build-with-c-17.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.9+ds1-4) unstable; urgency=medium

  * debian/control: Bump Standards-Version to 4.7.3.
  * Build-dep on python3-all-dev instead of python3-dev. (Closes: #1125410)
  * debian/rules: Enable DH_VERBOSE for better debugging.
  * debian/pybuild.testfiles: Added to enable python binding post-build tests.
  * debian/patches/backport/345c9a50ab07018f1b4439776bad78a0d40778ec.patch:
    Add patch from upstream to fix out-of-bounds read issues when handling
    truncated UTF-8 input.
  * debian/patches/0009-setup.py-Handle-python-binding-instead-of-cmake.patch:
    Add patch so that the python3 binding as well as pybind11 usage is handled
    by setup.py, not CMakeLists.txt. This is required to build for all
    supported python3 versions instead of just the default one.
  * debian/rules: Adjust python-related building accordingly.

[dgit import unpatched opencc 1.1.9+ds1-4]

Import opencc_1.1.9+ds1-4.debian.tar.xz

[dgit import tarball opencc 1.1.9+ds1-4 opencc_1.1.9+ds1-4.debian.tar.xz]

Declare fast forward from 1.1.9+ds1-2

[dgit --quilt=gbp --overwrite]

Fix deprecated declarations in C++17

Gbp-Pq: Topic backport
Gbp-Pq: Name 0007-Fix-deprecated-declarations-in-C-17.patch

Fix build for gcc 15 (#934)

Co-authored-by: Peng Wu <pwu@redhat.com>
Bug-Debian: https://bugs.debian.org/1097512

Gbp-Pq: Topic backport
Gbp-Pq: Name 0006-Fix-build-for-gcc-15-934.patch

Disable build in setup.py

Gbp-Pq: Name 0005-Disable-build-in-setup.py.patch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0003-no-remote-images-when-reading-docs-on-disk.patch

Force build with c++17

Needed by googletest.

Gbp-Pq: Name 0002-Force-build-with-c-17.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

Upload to unstable.

Test rebuild against libmarisa 0.3.1.

Force building with c++17 standard

Declare fast forward from 1.1.9+ds1-1

[dgit --quilt=gbp --overwrite]

Fix deprecated declarations in C++17

Gbp-Pq: Topic backport
Gbp-Pq: Name 0007-Fix-deprecated-declarations-in-C-17.patch

Fix build for gcc 15 (#934)

Co-authored-by: Peng Wu <pwu@redhat.com>
Bug-Debian: https://bugs.debian.org/1097512

Gbp-Pq: Topic backport
Gbp-Pq: Name 0006-Fix-build-for-gcc-15-934.patch

Disable build in setup.py

Gbp-Pq: Name 0005-Disable-build-in-setup.py.patch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0003-no-remote-images-when-reading-docs-on-disk.patch

Force build with c++17

Needed by googletest.

Gbp-Pq: Name 0002-Force-build-with-c-17.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

Fix FTBFS with gcc-15

Upload to unstable.

Disable build in setup.py

Gbp-Pq: Name 0005-Disable-build-in-setup.py.patch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0003-no-remote-images-when-reading-docs-on-disk.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.9+ds1-1) unstable; urgency=medium

  * Upload to unstable.

[dgit import unpatched opencc 1.1.9+ds1-1]

Import opencc_1.1.9+ds1-1.debian.tar.xz

[dgit import tarball opencc 1.1.9+ds1-1 opencc_1.1.9+ds1-1.debian.tar.xz]

Allow incorrect python test infra for now

Import opencc_1.1.9+ds1.orig.tar.xz

[dgit import orig opencc_1.1.9+ds1.orig.tar.xz]

Update build-dep

Update upstream source from tag 'upstream/1.1.9+ds1'

Update to upstream version '1.1.9+ds1'
with Debian dir 126bbcc44631798ac522e64af80abad1dfc4d7cc

New upstream version 1.1.9+ds1

Use dh-sequence-python3, pyproject

debian/rules: Use pyproject instead of distutils for pybuild

debian/control: Move main description to source pkg section

Close #1077816 in changelog

Update changelog for 1.1.8+ds1-2 release

Enable python binding

Co-authored-by: Shengjing Zhu <zhsj@debian.org>

Disable build in setup.py

Upload to unstable.

Use dh-sequence-pkgkde-symbolshelper

Update symbols

Refresh patches

New upload

Update upstream source from tag 'upstream/1.1.8+ds1'

Update to upstream version '1.1.8+ds1'
with Debian dir cfcc47111f06e021b850e93f4a71585b4176ac88

New upstream version 1.1.8+ds1

debian/copyright: Updated

Upload 1.1.7+ds1-1 to unstable

Install CMake config modules

Update upstream source from tag 'upstream/1.1.7+ds1'

Update to upstream version '1.1.7+ds1'
with Debian dir 26cfbd6bbe193f22e66f16647637bd2fe0daff67

New upstream version 1.1.7+ds1

Fix FTCBFS; Add B-D: opencc <cross>

Upload 1.1.6+ds1-1 to unstable

Refresh patches

Update upstream source from tag 'upstream/1.1.6+ds1'

Update to upstream version '1.1.6+ds1'
with Debian dir 7ef99613e2bab28432fa545889459d0ad3a986b8

New upstream version 1.1.6+ds1

Upload 1.1.5+ds1-1 to unstable

Update upstream source from tag 'upstream/1.1.5+ds1'

Update to upstream version '1.1.5+ds1'
with Debian dir f2665e9631999c7ea2a4ea1384d893533cc1aa58

New upstream version 1.1.5+ds1

Upload 1.1.4+ds1-4 to unstable

Work around uscan issue with GitHub releases page

The releases pages at GitHub are currently generated in a way which is
not compatible with uscan. This commit replaces "releases" with "tags"
in debian/watch to work around the issue.

Upload 1.1.4+ds1-3 to unstable

Build with GCC-12

Update symbols file for LTO using buildd logs

Closes: #1015565

Upload 1.1.4+ds1-2 to unstable

debian/copyright: Bump copyright year to 2022

Bump Standards-Version to 4.6.1

Create symbols file for amd64 only

debian/rules: Enable LTO

Refresh symbols

Prepare new upload.

debian/patches: Refresh patches

Update upstream source from tag 'upstream/1.1.4+ds1'

Update to upstream version '1.1.4+ds1'
with Debian dir dfbc3a089c531c3de4ff66b9e161449546c81799

New upstream version 1.1.4+ds1

update-debian-copyright to 2021 year

Signed-off-by: xiao sheng wen <atzlinux@sina.com>

Upload to unstable

Refresh symbols using buildd logs for all archs

Upload to unstable

Re-build with GCC 11

Prepare new upload.

Prepare new upload.

debian/symbols: Refresh symbols again

Refresh symbols again

refresh symbols again

debian/libopencc1.1.symbols: Refresh symbosl

debian/changelog: New version

debian/patches: Refresh patch 0005

debian/patches/0004: Refresh