msgpack 1.8.1 → 1.8.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d1a4547753fc5b20daba726fb0f395b89b0534b093486e73973fd23795dd14fd
4
- data.tar.gz: aba8b99b2f196f40bff319146f343740dc7ac0b598fd1270904bd8f5908e7ce5
3
+ metadata.gz: 862389c2f51c867e3321cf2fbe4e27fcda54cd56d2bb83f6b9aaa86739754edf
4
+ data.tar.gz: 664d19a5e5beeb65605722029377acd9775aedb14b27cbce83e8ae0077ea0216
5
5
  SHA512:
6
- metadata.gz: 366dc8c062839235df5703eb926cc584546cd0749a53fccfc497ef4738311e2290cecfb8c2634c8c5f2734ce41f3876eaf40c22ce1d653f234c78e4846d25019
7
- data.tar.gz: 0e55754ae5f041f8e447a99d22e2fb4c07550426bf2ef1b4b10aee1f5711704f672e1d62c0769bdf69a04432b1e783fafad582f9967d0681332dcf804467735a
6
+ metadata.gz: 43f018a1b67b57bf9f1b1d6c42d9e233f2eac7eb0eeec62fd57749d064c656fde252edb729cb54fead8b873c925c63a06092594ea4c616f19fea3ba5c51d1a67
7
+ data.tar.gz: 35a7c61e2e5b3298417f8cd54ad348cc588b2fd47030b76f5441f7eec70593a4bb05a28a7a77006837ab16cc4ebe78701d04a6e94a237667d2048930505c6f16
data/ChangeLog CHANGED
@@ -1,3 +1,9 @@
1
+ 2026-06-09 1.8.2
2
+
3
+ * Fix `Buffer#clear` to properly reset memory chunks before adding them back to the pool.
4
+ This could have caused data to leak across buffers when using the MessagePack::Buffer API
5
+ directly. [CVE-PENDING].
6
+
1
7
  2026-05-28 1.8.1
2
8
 
3
9
  * Workaround rare compilation issue when `rb_hash_new_capa` isn't properly detected.
data/ext/msgpack/buffer.c CHANGED
@@ -134,6 +134,9 @@ bool _msgpack_buffer_shift_chunk(msgpack_buffer_t* b)
134
134
  * because head should be always available */
135
135
  b->tail_buffer_end = NULL;
136
136
  b->read_buffer = NULL;
137
+ b->rmem_end = NULL;
138
+ b->rmem_last = NULL;
139
+ b->rmem_owner = NULL;
137
140
  return false;
138
141
  }
139
142
 
@@ -1,5 +1,5 @@
1
1
  module MessagePack
2
- VERSION = "1.8.1"
2
+ VERSION = "1.8.2"
3
3
  # Note for maintainers:
4
4
  # Don't miss building/releasing the JRuby version (rake buld:java)
5
5
  # See "How to build -java rubygems" in README for more details.
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: msgpack
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.8.1
4
+ version: 1.8.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Sadayuki Furuhashi
@@ -210,7 +210,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
210
210
  - !ruby/object:Gem::Version
211
211
  version: '0'
212
212
  requirements: []
213
- rubygems_version: 4.0.10
213
+ rubygems_version: 4.0.12
214
214
  specification_version: 4
215
215
  summary: MessagePack, a binary-based efficient data interchange format.
216
216
  test_files: []