[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#965942: marked as done (barcode does not correctly encode XML characters in SVG output)



Your message dated Wed, 26 Feb 2025 13:06:18 +0000
with message-id <E1tnH7C-00D8VE-6m@fasolo.debian.org>
and subject line Bug#965942: fixed in barcode 0.99-9
has caused the Debian Bug report #965942,
regarding barcode does not correctly encode XML characters in SVG output
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
965942: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965942
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: barcode
Version: 0.99-3
Severity: normal
Tags: upstream

Dear Maintainer,

barcode does not correctly encode XML characters in svg output mode (-S),
leading at least to broken SVG documents. The plain text of the barcode is
embedded three times into the SVG document: Twice in a comment before and after
the actual barcode, once in a character-by-character fashion to show the
contents of the barcode.

When creating a "128" barcode of the character "<", this breaks the SVG file in
the character-by-character display:

$ barcode -S -e 128 -b "<"
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<svg xmlns="http://www.w3.org/2000/svg"; version="1.1" width="66pt" height="100pt">
<rect x="0pt" y="0pt" width="66pt" height="100pt" style="fill:#ffffff;fill-opacity:1" />
<!-- Printing barcode for "<", scaled  1.00, encoded using "code 128" -->
<!-- The space/bar succession is represented by the following widths (space first): 02112143221123222112331112 -->
[...]
<text x="21.000000pt" y="90.000000pt" fill="black" style="font-family:Helvetica;font-size:12pt"><</text>
<!-- End barcode for "<" -->
</svg>


Similarly, it is possible to break out of the comments:
$ barcode -S -e 128 -b "\"--><text>123</text>"

--- End Message ---
--- Begin Message ---
Source: barcode
Source-Version: 0.99-9
Done: Doan Manh <doanvanmanh87@gmail.com>

We believe that the bug you reported is fixed in the latest version of
barcode, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 965942@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Doan Manh <doanvanmanh87@gmail.com> (supplier of updated barcode package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 25 Feb 2025 19:38:21 +0700
Source: barcode
Architecture: source
Version: 0.99-9
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Doan Manh <doanvanmanh87@gmail.com>
Closes: 965942
Changes:
 barcode (0.99-9) unstable; urgency=medium
 .
   * QA upload.
   * Handle xml special character to fix issue. (Closes: #965942)
Checksums-Sha1:
 15784d5735a863b55d8d986edf337864407c0c41 1979 barcode_0.99-9.dsc
 0e1f135a495458d48d646f8b138cb28183352adc 12684 barcode_0.99-9.debian.tar.xz
 316e66e72e7770780c0c1cd22d2c036cd060f3bb 5094 barcode_0.99-9_source.buildinfo
Checksums-Sha256:
 be696b8845a50e016de9373d4e60c63d7826a6e01719f9b8b652faa92c7ab746 1979 barcode_0.99-9.dsc
 eba507b9c81e08faea319ebd153c54452501e6da04cb404de06d48a4d579fe7c 12684 barcode_0.99-9.debian.tar.xz
 3acd337d3ce54397df94c71ca9d1d6f557e718be78479828f7eee528bc01351e 5094 barcode_0.99-9_source.buildinfo
Files:
 1cdf7c1e22904be1012633f95e04bdbe 1979 graphics optional barcode_0.99-9.dsc
 5c0caf98f02cfed7784354871affc182 12684 graphics optional barcode_0.99-9.debian.tar.xz
 31aee53c99f299576f9af3e151e1c808 5094 graphics optional barcode_0.99-9_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=o6Tj
-----END PGP SIGNATURE-----

Attachment: pgpnPl73f2GPw.pgp
Description: PGP signature


--- End Message ---

Reply to: