From 9af00d9b3deea8fafbf71cc4fcf50de36f87f3cb Mon Sep 17 00:00:00 2001
From: topazus <topazus@outlook.com>
Date: Tue, 9 Apr 2024 08:37:03 +0800
Subject: [PATCH] Update to 0.9.0; fix rhbz#2274045 and rhbz#2266791

* comments from upstream repo with CVE-2024-25713:
* If you have already called yyjson_doc_free() on a doc, the doc and its internal values are invalid.
* Any further operation on the doc or its values is undefined behavior.
*
* While this is not a bug in yyjson itself, a defensive patch has been provided:
* https://github.com/ibireme/yyjson/commit/0eca326fe57aeeb866e6f04c9ef9ea9f8343157e
* If you mistakenly call yyjson_doc_free() twice on the same doc against the documentation,
* this patch will cause your program to crash immediately, alerting you to the incorrect usage.
---
 sources     | 2 +-
 yyjson.spec | 8 +++-----
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/sources b/sources
index 8e0483d..02636dd 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (yyjson-e0bacd5bffb7142a1a29ac6becbca4b87e45b429.tar.gz) = 8a8bd0484b4f4afe8cf610b14fd62c6046107a211880d4bc2d40b429618faae5fbf18a7013a00969d0cf4a983dc89e38ecd32436d9ae082c353652247ce977be
+SHA512 (yyjson-0.9.0.tar.gz) = 4b9ca85096ccfe2f513a5869eb63b175f44c67785940e02414f6a586d7dd7b772fed77a1775d9416a5f1bf17f20e18a31f0dc4e65be263019d9b95bf95366219
diff --git a/yyjson.spec b/yyjson.spec
index 7423a82..4cff69c 100644
--- a/yyjson.spec
+++ b/yyjson.spec
@@ -1,11 +1,9 @@
 %global forgeurl https://github.com/ibireme/yyjson
-%global date 20231205
-%global commit e0bacd5bffb7142a1a29ac6becbca4b87e45b429
-%global shortcommit %(c=%{commit}; echo ${c:0:7})
+Version:        0.9.0
+%global tag %{version}
 %forgemeta
 
 Name:           yyjson
-Version:        0.8.0
 Release:        %autorelease
 Summary:        A high performance JSON library written in ANSI C
 License:        MIT
@@ -38,7 +36,7 @@ Summary:        Development files for %{name}
 Requires:       %{name}%{?_isa} = %{version}-%{release}
 
 %description    devel
-The %{name}-devel package contains development files for %{name}.
+This package contains development files for %{name}.
 
 %prep
 %forgeautosetup -p1