Fix segmentation fault when passed bad arguments

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
Update to 4.0.3
2025-12-02 14:25:20 -05:00 · 2025-12-01 22:46:08 -05:00 · 2025-12-01 12:58:55 -05:00 · 2025-11-21 15:26:14 -05:00 · 2025-10-23 10:58:35 -04:00 · 2025-08-11 05:11:43 -04:00
4 changed files with 50 additions and 4 deletions
--- a/.gitignore
+++ b/.gitignore
@ -29,3 +29,8 @@
 /sscg-3.0.5.tar.gz
 /sscg-3.0.6.tar.gz
 /sscg-3.0.7.tar.gz
+/sscg-3.0.8.tar.gz
+/sscg-4.0.0.tar.gz
+/sscg-4.0.1.tar.gz
+/sscg-4.0.2.tar.gz
+/sscg-4.0.3.tar.gz
--- a/0001-Avoid-segfault-on-receiving-bad-CLI-arguments.patch
+++ b/0001-Avoid-segfault-on-receiving-bad-CLI-arguments.patch
@ -0,0 +1,38 @@
+From 0c37e7ace585cfb550a0ffd9d5c331d059fd687f Mon Sep 17 00:00:00 2001
+From: Stephen Gallagher <sgallagh@redhat.com>
+Date: Tue, 2 Dec 2025 12:12:26 -0500
+Subject: [PATCH] Avoid segfault on receiving bad CLI arguments
+
+Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
+---
+ src/sscg.c | 7 +++++--
+ 1 file changed, 5 insertions(+), 2 deletions(-)
+
+diff --git a/src/sscg.c b/src/sscg.c
+index b9b191f109300f6447262858f57a3a8321a14966..00e2862c2d6be5c44a4a362fc926e1a07d31d7bf 100644
+--- a/src/sscg.c
+++ b/src/sscg.c
+@@ -59,7 +59,7 @@ int
+ main (int argc, const char **argv)
+ {
+   int ret, sret;
+-  struct sscg_options *options;
+  struct sscg_options *options = NULL;
+   bool build_client_cert = false;
+   char *dhparams_file = NULL;
+ 
+@@ -342,7 +342,10 @@ main (int argc, const char **argv)
+ done:
+   if (ret != EOK)
+     {
+-      sscg_io_utils_delete_output_files (options->streams);
+      if (options)
+        {
+          sscg_io_utils_delete_output_files (options->streams);
+        }
+     }
+   talloc_zfree (main_ctx);
+   if (getenv ("SSCG_TALLOC_REPORT"))
+-- 
+2.52.0
+
--- a/2
+++ b/2
@ -1 +1 @@
-SHA512 (sscg-3.0.7.tar.gz) = d9cb1700b835c5d4d358d821a1022f285bed1a199fdd140fe31339248c5e859a438a26bc8cd55f1d3a8eadaed77e1aa655a22d6a4e483d4fb26db007c4248009
+SHA512 (sscg-4.0.3.tar.gz) = f629cf7e32d4d4e7c1f58c4a53be925b96980e6fb3106e3a36a72f85c723bd79fba6aecdbf092b50f915a8833297bc7c6c1ccbe04fef488db38bbdc1e3a95b96
--- a/sscg.spec
+++ b/sscg.spec
@ -9,9 +9,9 @@
 %{!?meson_test: %global meson_test %{__meson} test -C %{_vpath_builddir} --num-processes %{_smp_build_ncpus} --print-errorlogs}

 Name:           sscg
-Version:        3.0.7
+Version:        4.0.3
 Release:        %autorelease
-Summary:        Simple SSL certificate generator
+Summary:        Simple Signed Certificate Generator

 License:        GPL-3.0-or-later WITH cryptsetup-OpenSSL-exception
 URL:            https://%{provider_prefix}
@ -21,11 +21,14 @@ BuildRequires:  libtalloc-devel
 BuildRequires:  openssl
 BuildRequires:  openssl-devel
 BuildRequires:  popt-devel
-BuildRequires:  libpath_utils-devel
 BuildRequires:  meson
 BuildRequires:  ninja-build
 BuildRequires:  help2man

+# Upstream patch to avoid segfaults when receiving bad CLI arguments
+# https://github.com/sgallagher/sscg/commit/0c37e7ace585cfb550a0ffd9d5c331d059fd687f
+Patch: 0001-Avoid-segfault-on-receiving-bad-CLI-arguments.patch
+

 %description
 A utility to aid in the creation of more secure "self-signed"
Author	SHA1	Message	Date
Stephen Gallagher	a03c0c7017	Fix segmentation fault when passed bad arguments Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>	2025-12-02 14:25:20 -05:00
Stephen Gallagher	9a650699eb	Update to 4.0.3 - Don't truncate destination files until just prior to writing. - Add test for file replacement - Use int type for POPT_ARG_NONE values to fix a bug on s390x Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>	2025-12-01 22:46:08 -05:00
Stephen Gallagher	91a6bb94a6	Update to SSCG 4.0.2 Fixes a regression when attempting to use the same output file for both the CA and service certificates. Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>	2025-12-01 12:58:55 -05:00
Stephen Gallagher	9017cd8b5a	Update to SSCG 4.0.1 * Drop dependency on libpath_utils * Minor fixes and code cleanups Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>	2025-11-21 15:26:14 -05:00
Stephen Gallagher	900e10c558	Release SSCG 4.0.0 - Support for ML-DSA keys for post-quantum cryptography (PQC) when built against OpenSSL 3.5 or later - Support for EC-DSA keys for elliptic curves - RSA certificate authority is now created with a minimum key strength of 4096 bits - Improved --help output - Deprecated support for generating custom DH parameters - Stopped producing the DH parameter file by default (it may be requested explicitly with the --dhparams-file argument) - Minimum OpenSSL version is now 3.0 Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>	2025-10-23 10:58:35 -04:00
Stephen Gallagher	9111b85386	Fix Summary Upstream renamed the project years ago from "Simple SSL Certificate Generator" to "Simple Signed Certificate Generator" and we never updated the packaging to match. Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>	2025-08-11 05:11:43 -04:00
Stephen Gallagher	0954d1a211	Update to SSCG 3.0.8 - Fix IP address handling in CA certificate SAN constraints * Add automatic single-IP subnet mask to IP addresses in CA name constraints * Update help text to show simplified IP format without subnet mask - Greatly expand the in-tree test suite Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>	2025-07-23 16:46:15 -04:00