Mock Version: 6.0 Mock Version: 6.0 Mock Version: 6.0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target aarch64 --nodeps /builddir/build/SPECS/libXfont2.spec'], chrootPath='/var/lib/mock/dist-an23.5-build-548416-87756/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=86400uid=982gid=135user='mockbuild'unshare_net=TrueprintOutput=Falsenspawn_args=['--capability=cap_ipc_lock']) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target aarch64 --nodeps /builddir/build/SPECS/libXfont2.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: aarch64 Building for target aarch64 setting SOURCE_DATE_EPOCH=1783641600 Wrote: /builddir/build/SRPMS/libXfont2-2.0.6-3.an23.src.rpm Child return code was: 0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/libXfont2.spec'], chrootPath='/var/lib/mock/dist-an23.5-build-548416-87756/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=86400uid=982gid=135user='mockbuild'unshare_net=TrueprintOutput=Falsenspawn_args=['--capability=cap_ipc_lock']) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/libXfont2.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: aarch64 Building for target aarch64 setting SOURCE_DATE_EPOCH=1783641600 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.nfaHp2 + umask 022 + cd /builddir/build/BUILD + cd /builddir/build/BUILD + rm -rf libXfont2-2.0.6 + /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/libXfont2-2.0.6.tar.xz + STATUS=0 + '[' 0 -ne 0 ']' + cd libXfont2-2.0.6 + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-CVE-2026-56001.patch + /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch -f The text leading up to this was: -------------------------- |From be0b08e2d354138d3222b4490e2a77c6ee42f778 Mon Sep 17 00:00:00 2001 |From: Peter Hutterer |Date: Mon, 1 Jun 2026 16:46:10 +1000 |Subject: [PATCH] bitscale: fix integer overflow in BitmapScaleBitmaps | bytestoalloc | |bytestoalloc is declared as unsigned int (32-bit). When the sum of |per-glyph byte counts exceeds 2^32, the value wraps around and calloc() |allocates a buffer that is too small. The subsequent ScaleBitmap loop |then writes past the end of the allocated buffer. | |Change bytestoalloc from unsigned int to size_t to match the actual |allocation size type, and add an explicit overflow check in the |accumulation loop to bail out if the total would exceed SIZE_MAX. | |This vulnerability was discovered by: |Anonymous working with TrendAI Zero Day Initiative | |CVE-2026-56001/ZDI-CAN-30558 | |Assisted-by: Claude:claude-opus-4-6 |Signed-off-by: Peter Hutterer |Part-of: |--- | src/bitmap/bitscale.c | 23 ++++++++++++++++++++--- | 1 file changed, 20 insertions(+), 3 deletions(-) | |diff --git a/src/bitmap/bitscale.c b/src/bitmap/bitscale.c |index 3f3c10e..5f465d1 100644 |--- a/src/bitmap/bitscale.c |+++ b/src/bitmap/bitscale.c -------------------------- No file to patch. Skipping patch. 2 out of 2 hunks ignored RPM build errors: error: Bad exit status from /var/tmp/rpm-tmp.nfaHp2 (%prep) Bad exit status from /var/tmp/rpm-tmp.nfaHp2 (%prep) Child return code was: 1 EXCEPTION: [Error("Command failed: \n # bash --login -c '/usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/libXfont2.spec'\n", 1)] Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/mockbuild/trace_decorator.py", line 93, in trace result = func(*args, **kw) File "/usr/lib/python3.6/site-packages/mockbuild/util.py", line 610, in do_with_status raise exception.Error("Command failed: \n # %s\n%s" % (cmd_pretty(command, env), output), child.returncode) mockbuild.exception.Error: Command failed: # bash --login -c '/usr/bin/rpmbuild -bb --noclean --target aarch64 --nodeps /builddir/build/SPECS/libXfont2.spec'