Merge opencc (1.1.9+ds1-1+deb13u1) import into refs/heads/workingbranch

Fix two out-of-bounds read issues when handling truncated UTF-8 input (#1005)

Two independent out-of-bounds read issues were identified in OpenCC's UTF-8
processing logic when handling malformed or truncated UTF-8 sequences.

1) MaxMatchSegmentation:
   NextCharLength() could return a value larger than the remaining input size.
   The previous logic subtracted this value from a size_t length counter,
   potentially causing underflow and subsequent out-of-bounds reads.

2) Conversion:
   Similar length handling could allow reads past the end of the input buffer
   during dictionary matching, potentially propagating unintended bytes to the
   conversion output.

This patch fixes both issues by:
- Explicitly tracking the end of the input buffer
- Recomputing remaining length on each iteration
- Clamping matched character and key lengths to the remaining buffer size
- Preventing reads past the null terminator

The changes preserve existing behavior for valid UTF-8 input and add test
coverage for truncated UTF-8 sequences.

These issues may have security implications when processing untrusted input
and are classified as heap out-of-bounds reads (CWE-125).

Co-authored-by: Claude <noreply@anthropic.com>
Gbp-Pq: Name 0001-Fix-two-out-of-bounds-read-issues-when-handling-trun.patch

Disable build in setup.py

Gbp-Pq: Name 0005-Disable-build-in-setup.py.patch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0003-no-remote-images-when-reading-docs-on-disk.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.9+ds1-1+deb13u1) trixie; urgency=medium

  * Non-maintainer upload.
  * CVE-2025-15536: Out-of-bounds read (Closes: #1126286)

[dgit import unpatched opencc 1.1.9+ds1-1+deb13u1]

Import opencc_1.1.9+ds1-1+deb13u1.debian.tar.xz

[dgit import tarball opencc 1.1.9+ds1-1+deb13u1 opencc_1.1.9+ds1-1+deb13u1.debian.tar.xz]

Merge opencc (1.1.9+ds1-1) import into refs/heads/workingbranch

Disable build in setup.py

Gbp-Pq: Name 0005-Disable-build-in-setup.py.patch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0003-no-remote-images-when-reading-docs-on-disk.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.9+ds1-1) unstable; urgency=medium

  * Upload to unstable.

[dgit import unpatched opencc 1.1.9+ds1-1]

Import opencc_1.1.9+ds1-1.debian.tar.xz

[dgit import tarball opencc 1.1.9+ds1-1 opencc_1.1.9+ds1-1.debian.tar.xz]

Import opencc_1.1.9+ds1.orig.tar.xz

[dgit import orig opencc_1.1.9+ds1.orig.tar.xz]

Merge opencc (1.1.8+ds1-3) import into refs/heads/workingbranch

Disable build in setup.py

Gbp-Pq: Name 0005-Disable-build-in-setup.py.patch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0003-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0002-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.8+ds1-3) unstable; urgency=medium

  * Upload to unstable. Closes: #1077816
  * debian/control: Move main description to source package section.
  * debian/control: Add new build-dependency pybuild-plugin-pyproject.
  * debian/control: Use dh-sequence-python3.
  * debian/rules: Use pyproject instead of distutils for pybuild.

[dgit import unpatched opencc 1.1.8+ds1-3]

Import opencc_1.1.8+ds1-3.debian.tar.xz

[dgit import tarball opencc 1.1.8+ds1-3 opencc_1.1.8+ds1-3.debian.tar.xz]

Merge opencc (1.1.8+ds1-1) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

This fixes a privacy breach previously reported as Lintian warnings

Forwarded: not-needed
Last-Update: 2024-07-28

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2024-07-28

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.8+ds1-1) unstable; urgency=medium

  * Upload to unstable.
  * debian/libopencc1.1.symbols: Reconfirm symbols.

[dgit import unpatched opencc 1.1.8+ds1-1]

Import opencc_1.1.8+ds1-1.debian.tar.xz

[dgit import tarball opencc 1.1.8+ds1-1 opencc_1.1.8+ds1-1.debian.tar.xz]

Import opencc_1.1.8+ds1.orig.tar.xz

[dgit import orig opencc_1.1.8+ds1.orig.tar.xz]

Merge opencc (1.1.7+ds1-1) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2022-12-10

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2022-12-10

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.7+ds1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.1.7+ds1
  * debian/libopencc-dev.install:
    - Install CMake config modules

[dgit import unpatched opencc 1.1.7+ds1-1]

Import opencc_1.1.7+ds1.orig.tar.xz

[dgit import orig opencc_1.1.7+ds1.orig.tar.xz]

Import opencc_1.1.7+ds1-1.debian.tar.xz

[dgit import tarball opencc 1.1.7+ds1-1 opencc_1.1.7+ds1-1.debian.tar.xz]

Merge opencc (1.1.6+ds1-2) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2022-12-10

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2022-12-10

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.6+ds1-2) unstable; urgency=medium

  [ Helmut Grohne ]
  * Fix FTCBFS: Add B-D: opencc <cross> for opencc_dict. (Closes: #1051036)

[dgit import unpatched opencc 1.1.6+ds1-2]

Import opencc_1.1.6+ds1-2.debian.tar.xz

[dgit import tarball opencc 1.1.6+ds1-2 opencc_1.1.6+ds1-2.debian.tar.xz]

Merge opencc (1.1.6+ds1-1) import into refs/heads/workingbranch

Import opencc_1.1.6+ds1.orig.tar.xz

[dgit import orig opencc_1.1.6+ds1.orig.tar.xz]

Use system googletest

Forwarded: not-needed
Last-Update: 2022-12-10

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2022-12-10

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.6+ds1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.1.6+ds1
  * Refresh patches:
    - d/p/0001-use-cmake-install-libdir.patch
    - d/p/0005-Use-system-googletest.patch

[dgit import unpatched opencc 1.1.6+ds1-1]

Import opencc_1.1.6+ds1-1.debian.tar.xz

[dgit import tarball opencc 1.1.6+ds1-1 opencc_1.1.6+ds1-1.debian.tar.xz]

Merge opencc (1.1.5+ds1-1) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2021-09-18

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2021-09-18

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.5+ds1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.1.5+ds1

[dgit import unpatched opencc 1.1.5+ds1-1]

Import opencc_1.1.5+ds1.orig.tar.xz

[dgit import orig opencc_1.1.5+ds1.orig.tar.xz]

Import opencc_1.1.5+ds1-1.debian.tar.xz

[dgit import tarball opencc 1.1.5+ds1-1 opencc_1.1.5+ds1-1.debian.tar.xz]

Merge opencc (1.1.4+ds1-4) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2021-09-18

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2021-09-18

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.4+ds1-4) unstable; urgency=medium

  * Team upload
  * Work around uscan issue with GitHub releases page

[dgit import unpatched opencc 1.1.4+ds1-4]

Import opencc_1.1.4+ds1-4.debian.tar.xz

[dgit import tarball opencc 1.1.4+ds1-4 opencc_1.1.4+ds1-4.debian.tar.xz]

Merge opencc (1.1.4+ds1-3) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2021-09-18

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2021-09-18

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.4+ds1-3) unstable; urgency=medium

  * Team upload
  * debian/libopencc1.1.symbols:
    - Update other archs for LTO using buildd logs (closes: #1015565)
  * Build with GCC-12
    - It builds fine now with GCC-12, so the symbols fix for LTO also
      closes: #1013008.

[dgit import unpatched opencc 1.1.4+ds1-3]

Import opencc_1.1.4+ds1-3.debian.tar.xz

[dgit import tarball opencc 1.1.4+ds1-3 opencc_1.1.4+ds1-3.debian.tar.xz]

Import opencc_1.1.4+ds1.orig.tar.xz

[dgit import orig opencc_1.1.4+ds1.orig.tar.xz]

Merge opencc (1.1.4+ds1-1) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2021-09-18

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2021-09-18

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.4+ds1-1) unstable; urgency=medium

  [ xiao sheng wen ]
  * update-debian-copyright to 2021 year.

  [ Boyuan Yang ]
  * New upstream version 1.1.4+ds1.
  * debian/patches: Refresh patches.
  * debian/libopencc1.1.symbols: Refresh symbols.

[dgit import unpatched opencc 1.1.4+ds1-1]

Import opencc_1.1.4+ds1-1.debian.tar.xz

[dgit import tarball opencc 1.1.4+ds1-1 opencc_1.1.4+ds1-1.debian.tar.xz]

Merge opencc (1.1.3+ds1-5) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2021-09-18

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2021-09-18

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.3+ds1-5) unstable; urgency=medium

  * Team upload
  * debian/libopencc1.1.symbols:
    - Refresh using buildd logs for all archs and pkgkde-symbolshelper
      (Closes: #997412)

[dgit import unpatched opencc 1.1.3+ds1-5]

Import opencc_1.1.3+ds1-5.debian.tar.xz

[dgit import tarball opencc 1.1.3+ds1-5 opencc_1.1.3+ds1-5.debian.tar.xz]

Merge opencc (1.1.3+ds1-3) import into refs/heads/workingbranch

Use system googletest

Forwarded: not-needed
Last-Update: 2021-09-18

Gbp-Pq: Name 0005-Use-system-googletest.patch

Don't fetch remote images when reading docs on disk

Forwarded: no
Last-Update: 2021-09-18

This fixes a privacy breach previously reported as Lintian warnings

Gbp-Pq: Name 0004-no-remote-images-when-reading-docs-on-disk.patch

data/: Explicitly use python3

Before "python" is default to python3, this patch should be kept.

Last-Update: 2020-06-25

Gbp-Pq: Name 0003-data-Explicitly-use-python3.patch

use-cmake-install-libdir

Update 2021-09-18: Also use GNUInstallDirs.

Last-Update: 2021-09-18

Gbp-Pq: Name 0001-use-cmake-install-libdir.patch

opencc (1.1.3+ds1-3) unstable; urgency=medium

  * Refresh symbols again for all archs using buildd logs.

[dgit import unpatched opencc 1.1.3+ds1-3]

Import opencc_1.1.3+ds1-3.debian.tar.xz

[dgit import tarball opencc 1.1.3+ds1-3 opencc_1.1.3+ds1-3.debian.tar.xz]

Import opencc_1.1.3+ds1.orig.tar.xz

[dgit import orig opencc_1.1.3+ds1.orig.tar.xz]