head	1.1;
access;
symbols
	pkgsrc-2026Q1:1.1.0.4
	pkgsrc-2026Q1-base:1.1
	pkgsrc-2025Q4:1.1.0.2
	pkgsrc-2025Q4-base:1.1;
locks; strict;
comment	@// @;


1.1
date	2025.10.25.13.20.08;	author kikadf;	state Exp;
branches;
next	;
commitid	6akKFKYV9FxX8XfG;


desc
@@


1.1
log
@
textproc/FlightCrew: fix CVE-2019-13032, fix build with boost-1.89
@
text
@$NetBSD$

* Fix CVE-2019-13032 with upstream commits:
  https://github.com/Sigil-Ebook/flightcrew/commit/c75c100218ed5c0e7652947051e28b54a75212ae
  https://github.com/Sigil-Ebook/flightcrew/commit/b4f4a70f604ddcb4e8e343aa0e690764fc46d780

--- src/FlightCrew/Framework/ValidateEpub.cpp.orig	2025-10-04 12:04:47.334261964 +0000
+++ src/FlightCrew/Framework/ValidateEpub.cpp
@@@@ -118,10 +118,15 @@@@ fs::path GetRelativePathToNcx( const xc:
         std::string href       = fromX( item->getAttribute( toX( "href" )       ) );
         std::string media_type = fromX( item->getAttribute( toX( "media-type" ) ) );
 
-        if ( xc::XMLUri::isValidURI( true, toX( href ) ) &&
-             media_type == NCX_MIME )
-        {
-            return Util::Utf8PathToBoostPath( Util::UrlDecode( href ) );  
+        // prevent segfault here that would result as toX() will return null when 
+        // passed and empty string
+        if (!href.empty()) {
+
+             if ( xc::XMLUri::isValidURI( true, toX( href ) ) &&
+                  media_type == NCX_MIME )
+             {
+                 return Util::Utf8PathToBoostPath( Util::UrlDecode( href ) );  
+             }
         }
     }
 
@@@@ -141,10 +146,13 @@@@ std::vector< fs::path > GetRelativePaths
         std::string href       = fromX( item->getAttribute( toX( "href" )       ) );
         std::string media_type = fromX( item->getAttribute( toX( "media-type" ) ) );
 
-        if ( xc::XMLUri::isValidURI( true, toX( href ) ) &&
-             ( media_type == XHTML_MIME || media_type == OEB_DOC_MIME ) )
-        {                    
-            paths.push_back( Util::Utf8PathToBoostPath( Util::UrlDecode( href ) ) );
+        if (!href.empty()) {
+
+             if ( xc::XMLUri::isValidURI( true, toX( href ) ) &&
+                  ( media_type == XHTML_MIME || media_type == OEB_DOC_MIME ) )
+             {
+                  paths.push_back( Util::Utf8PathToBoostPath( Util::UrlDecode( href ) ) );
+             }
         }
     }
 
@