Makefile.in | 10 1 + 9 - 0 !
1 file changed, 1 insertion(+), 9 deletions(-)

---

config_host.mk.in | 1 1 + 0 - 0 !
configure.ac | 3 3 + 0 - 0 !
2 files changed, 4 insertions(+)

---

ridljar/com/sun/star/lib/util/NativeLibraryLoader.java | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

---

postprocess/CustomTarget_registry.mk | 5 3 + 2 - 0 !
scp2/InstallModule_gnome.mk | 4 4 + 0 - 0 !
scp2/source/gnome/file_gnome.scp | 10 10 + 0 - 0 !
scp2/source/gnome/module_gnome.scp | 3 3 + 0 - 0 !
4 files changed, 20 insertions(+), 2 deletions(-)

---

config_host.mk.in | 1 1 + 0 - 0 !
configure.ac | 4 4 + 0 - 0 !
solenv/gbuild/platform/com_GCC_defs.mk | 2 2 + 0 - 0 !
3 files changed, 7 insertions(+)

---

RepositoryExternal.mk | 1 1 + 0 - 0 !
configure.ac | 3 2 + 1 - 0 !
2 files changed, 3 insertions(+), 1 deletion(-)

---

bin/distro-install-file-lists | 148 2 + 146 - 0 !
1 file changed, 2 insertions(+), 146 deletions(-)

---

include/svtools/strings.hrc | 6 3 + 3 - 0 !
jvmfwk/plugins/sunmajor/javaenvsetup/javaldx.cxx | 3 3 + 0 - 0 !
2 files changed, 6 insertions(+), 3 deletions(-)

---

include/sfx2/strings.hrc | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

officecfg/registry/data/org/openoffice/Office/Common.xcu | 2 1 + 1 - 0 !
shell/source/unix/misc/senddoc.sh | 26 26 + 0 - 0 !
2 files changed, 27 insertions(+), 1 deletion(-)

---

dbaccess/inc/strings.hrc | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

officecfg/registry/data/org/openoffice/Office/DataAccess.xcu | 24 24 + 0 - 0 !
1 file changed, 24 insertions(+)

---

Repository.mk | 48 27 + 21 - 0 !
scp2/AutoInstall.mk | 1 1 + 0 - 0 !
scp2/InstallModule_draw.mk | 1 1 + 0 - 0 !
scp2/source/draw/module_draw.scp | 4 3 + 1 - 0 !
4 files changed, 32 insertions(+), 22 deletions(-)

---

swext/mediawiki/src/registry/data/org/openoffice/Office/OptionsDialog.xcu | 4 2 + 2 - 0 !
swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Filter.xcu | 4 2 + 2 - 0 !
swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Types.xcu | 2 1 + 1 - 0 !
3 files changed, 5 insertions(+), 5 deletions(-)

---

config_host.mk.in | 1 1 + 0 - 0 !
configure.ac | 5 5 + 0 - 0 !
solenv/gbuild/gbuild.mk | 2 2 + 0 - 0 !
3 files changed, 8 insertions(+)

---

solenv/gbuild/platform/com_GCC_defs.mk | 4 0 + 4 - 0 !
1 file changed, 4 deletions(-)

---

chart2/Module_chart2.mk | 2 1 + 1 - 0 !
sc/qa/unoapi/sc_1.sce | 7 0 + 7 - 0 !
sc/qa/unoapi/sc_2.sce | 5 0 + 5 - 0 !
svx/qa/unoapi/svx.sce | 2 1 + 1 - 0 !
sw/qa/extras/ooxmlimport/ooxmlimport2.cxx | 4 2 + 2 - 0 !
toolkit/Module_toolkit.mk | 8 4 + 4 - 0 !
uitest/writer_tests8/tdf79236.py | 3 3 + 0 - 0 !
7 files changed, 11 insertions(+), 20 deletions(-)

---

external/hsqldb/UnpackedTarball_hsqldb.mk | 1 1 + 0 - 0 !
external/hsqldb/patches/use-system-servlet-api.jar.diff | 29 29 + 0 - 0 !
2 files changed, 30 insertions(+)

---

Repository.mk | 2 1 + 1 - 0 !
configure.ac | 62 42 + 20 - 0 !
odk/CustomTarget_check.mk | 2 1 + 1 - 0 !
odk/Module_odk.mk | 6 4 + 2 - 0 !
odk/util/check.pl | 2 1 + 1 - 0 !
5 files changed, 49 insertions(+), 25 deletions(-)

---

configure.ac | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

officecfg/registry/data/org/openoffice/Office/Common.xcu | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

---

bin/odfvalidator.sh.in | 2 1 + 1 - 0 !
bin/officeotron.sh.in | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

---

RepositoryExternal.mk | 72 2 + 70 - 0 !
config_host.mk.in | 4 0 + 4 - 0 !
configure.ac | 61 0 + 61 - 0 !
connectivity/Library_mysqlc.mk | 1 0 + 1 - 0 !
connectivity/Library_postgresql-sdbc-impl.mk | 1 0 + 1 - 0 !
external/Module_external.mk | 1 0 + 1 - 0 !
oox/CppunitTest_oox_tokenmap.mk | 9 0 + 9 - 0 !
oox/Library_oox.mk | 9 0 + 9 - 0 !
ucb/CppunitTest_ucb_webdav_local_neon.mk | 1 0 + 1 - 0 !
ucb/CppunitTest_ucb_webdav_neon_opts.mk | 1 0 + 1 - 0 !
ucb/CppunitTest_ucb_webdav_propfindcache.mk | 1 0 + 1 - 0 !
ucb/CppunitTest_ucb_webdav_res_access.mk | 1 0 + 1 - 0 !
ucb/Library_ucpdav1.mk | 2 0 + 2 - 0 !
13 files changed, 2 insertions(+), 162 deletions(-)

---

config_host.mk.in | 1 1 + 0 - 0 !
configure.ac | 9 9 + 0 - 0 !
sal/Module_sal.mk | 7 6 + 1 - 0 !
sdext/Executable_pdf2xml.mk | 12 10 + 2 - 0 !
smoketest/Module_smoketest.mk | 4 4 + 0 - 0 !
test/Module_test.mk | 2 2 + 0 - 0 !
testtools/Module_testtools.mk | 4 4 + 0 - 0 !
unotest/Module_unotest.mk | 3 3 + 0 - 0 !
8 files changed, 39 insertions(+), 3 deletions(-)

---

sysui/desktop/apparmor/program.oosplash | 2 1 + 1 - 0 !
sysui/desktop/apparmor/program.soffice.bin | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

---

sysui/desktop/menus/math.desktop | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 hide startcenter and math from the shell

sysui/desktop/menus/startcenter.desktop | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

---

config_host.mk.in | 1 1 + 0 - 0 !
configure.ac | 9 9 + 0 - 0 !
odk/Module_odk.mk | 4 4 + 0 - 0 !
3 files changed, 14 insertions(+)

---

odk/build-examples_common.mk | 7 1 + 6 - 0 !
solenv/gbuild/CppunitTest.mk | 7 1 + 6 - 0 !
solenv/gbuild/JunitTest.mk | 12 1 + 11 - 0 !
solenv/gbuild/PythonTest.mk | 7 1 + 6 - 0 !
solenv/gbuild/UITest.mk | 11 1 + 10 - 0 !
5 files changed, 5 insertions(+), 39 deletions(-)

---

sysui/desktop/apparmor/program.soffice.bin | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

---

sysui/desktop/apparmor/program.senddoc | 4 2 + 2 - 0 !
sysui/desktop/apparmor/program.soffice.bin | 5 3 + 2 - 0 !
sysui/desktop/apparmor/program.xpdfimport | 5 2 + 3 - 0 !
3 files changed, 7 insertions(+), 7 deletions(-)

 [patch] apparmor: use dri-enumerate abstraction

Remove backported rule and use new dri-enumerate abstraction instead.
dri-enumerate is available in AppArmor 2.13, which recently migrated
into Debian Buster.

sysui/desktop/apparmor/program.soffice.bin | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

---

configure.ac | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

---

connectivity/qa/complex/connectivity/JdbcLongVarCharTest.java | 2 1 + 1 - 0 !
connectivity/registry/mysql_jdbc/org/openoffice/Office/DataAccess/Drivers.xcu | 2 1 + 1 - 0 !
connectivity/source/drivers/mysql_jdbc/YDriver.cxx | 4 2 + 2 - 0 !
3 files changed, 4 insertions(+), 4 deletions(-)

 [patch] mariadb

sysui/desktop/apparmor/program.soffice.bin | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

---

sc/qa/uitest/statistics/anova.py | 4 2 + 2 - 0 !
sc/qa/uitest/statistics/descriptiveStatistics.py | 2 1 + 1 - 0 !
2 files changed, 3 insertions(+), 3 deletions(-)

 fix rounding errors that cause autopkgtests to fail on i386

testtools/source/bridgetest/bridgetest.cxx | 12 8 + 4 - 0 !
1 file changed, 8 insertions(+), 4 deletions(-)

 add safer float comparisons to bridgetest equals()

wizards/source/access2base/access2base.html | 25334 25334 + 0 - 0 !
1 file changed, 25334 insertions(+)

---

sc/source/core/data/global.cxx | 8 7 + 1 - 0 !
1 file changed, 7 insertions(+), 1 deletion(-)

---

bin/lo-xlate-lang | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

cui/qa/uitest/dialogs/shortcuts.py | 43 0 + 43 - 0 !
1 file changed, 43 deletions(-)

---

officecfg/registry/schema/org/openoffice/Office/Common.xcs | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch] resolves: rhbz#1432468 disable opencl by default

oox/source/crypto/AgileEngine.cxx | 16 10 + 6 - 0 !
oox/source/crypto/Standard2007Engine.cxx | 28 20 + 8 - 0 !
svl/source/items/poolitem.cxx | 3 2 + 1 - 0 !
svl/source/misc/msodocumentlockfile.cxx | 12 10 + 2 - 0 !
vcl/qa/cppunit/pdfexport/pdfexport.cxx | 19 19 + 0 - 0 !
vcl/source/filter/png/PngImageReader.cxx | 11 10 + 1 - 0 !
6 files changed, 71 insertions(+), 18 deletions(-)

 convert attribute value to utf-8 when passing it to libxml2

Using toUtf8, requiring the OUString to actually contain well-formed data, but
which is likely OK for this test-code--only function, and is also what similar
dumpAsXml functions e.g. in editeng/source/items/textitem.cxx already use.

This appears to have been broken ever since the code's introduction in
553f10c71a2cc92f5f5890e24948f5277e3d2758 "add dumpAsXml() to more pool items",
and it would typically only have written the leading zero or one
(depending on the architecture's endianness) characters.  (I ran across it on
big-endian s390x, where CppunitTest_sd_tiledrendering
SdTiledRenderingTest::testTdf104405 failed because of

> Entity: line 2: parser error : Input is not proper UTF-8, indicate encoding !
> Bytes: 0xCF 0x22 0x2F 0x3E
> ation=""/><SfxPoolItem whichId="4017" typeName="13SvxBulletItem" presentation="%
>                                                                                ^

apparently reported from within libxml2.)

RepositoryExternal.mk | 4 2 + 2 - 0 !
configure.ac | 2 1 + 1 - 0 !
download.lst | 8 4 + 4 - 0 !
external/liborcus/0001-Mark-all-untentionally-unused-variables.patch | 752 376 + 376 - 0 !
external/liborcus/ExternalPackage_liborcus.mk | 8 4 + 4 - 0 !
external/liborcus/ExternalProject_liborcus.mk | 4 2 + 2 - 0 !
external/liborcus/Library_orcus-parser.mk | 1 1 + 0 - 0 !
external/liborcus/Library_orcus.mk | 4 4 + 0 - 0 !
external/liborcus/UnpackedTarball_liborcus.mk | 2 1 + 1 - 0 !
external/liborcus/libtool.patch.0 | 10 5 + 5 - 0 !
external/liborcus/windows-constants-hack.patch | 2 1 + 1 - 0 !
sc/source/filter/inc/orcusinterface.hxx | 21 17 + 4 - 0 !
sc/source/filter/orcus/interface.cxx | 82 56 + 26 - 0 !
sc/source/filter/orcus/xmlcontext.cxx | 7 3 + 4 - 0 !
sc/source/ui/xmlsource/xmlsourcedlg.cxx | 6 5 + 1 - 0 !
15 files changed, 482 insertions(+), 431 deletions(-)

 upgrade liborcus to 0.16.0.

bin/generate-bash-completion.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 add pdf to drawdocs for bash-completion

sd/Library_sd.mk | 5 4 + 1 - 0 !
1 file changed, 4 insertions(+), 1 deletion(-)

---

odk/CustomTarget_unowinreg.mk | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

external/pdfium/configs/build_config.h | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

---

sysui/desktop/apparmor/program.soffice.bin | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

include/xmloff/xmlimp.hxx | 6 5 + 1 - 0 !
include/xmloff/xmlnmspe.hxx | 7 7 + 0 - 0 !
include/xmloff/xmltoken.hxx | 13 13 + 0 - 0 !
xmloff/source/core/xmlimp.cxx | 26 15 + 11 - 0 !
xmloff/source/core/xmltoken.cxx | 13 13 + 0 - 0 !
xmloff/source/token/tokens.txt | 10 10 + 0 - 0 !
xmlsecurity/source/helper/xsecparser.cxx | 1634 1313 + 321 - 0 !
xmlsecurity/source/helper/xsecparser.hxx | 99 51 + 48 - 0 !
8 files changed, 1427 insertions(+), 381 deletions(-)

 xmlsecurity: replace xsecparser implementation
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Implement Namespaces in XML and follow xmldsig-core and XAdES schemas.

Reviewed-on: https://gerrit.libreoffice.org/c/core/+/110833
Tested-by: Jenkins

include/svl/sigstruct.hxx | 7 5 + 2 - 0 !
xmlsecurity/inc/xsecctl.hxx | 5 2 + 3 - 0 !
xmlsecurity/source/helper/ooxmlsecparser.cxx | 4 2 + 2 - 0 !
xmlsecurity/source/helper/xsecctl.cxx | 2 1 + 1 - 0 !
xmlsecurity/source/helper/xsecparser.cxx | 81 40 + 41 - 0 !
xmlsecurity/source/helper/xsecparser.hxx | 6 0 + 6 - 0 !
xmlsecurity/source/helper/xsecsign.cxx | 4 2 + 2 - 0 !
xmlsecurity/source/helper/xsecverify.cxx | 39 16 + 23 - 0 !
8 files changed, 68 insertions(+), 80 deletions(-)

 xmlsecurity: xsecparser confused about multiple timestamps
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

LO writes timestamp both to dc:date and xades:SigningTime elements.

The parser tries to avoid reading multiple dc:date, preferring the first
one, but doesn't care about multiple xades:SigningTime, for undocumented
reasons.

Ideally something should check all read values for consistency.

Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111160
Tested-by: Jenkins

xmlsecurity/inc/xsecctl.hxx | 1 1 + 0 - 0 !
xmlsecurity/source/helper/xsecparser.cxx | 290 200 + 90 - 0 !
xmlsecurity/source/helper/xsecparser.hxx | 1 1 + 0 - 0 !
xmlsecurity/source/helper/xsecverify.cxx | 19 19 + 0 - 0 !
4 files changed, 221 insertions(+), 90 deletions(-)

 xmlsecurity: ignore elements in ds:object that aren't signed
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

xmlsecurity/source/xmlsec/mscrypt/securityenvironment_mscryptimpl.cxx | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 default to certificatevalidity::invalid

so if CertGetCertificateChain fails we don't want validity to be
css::security::CertificateValidity::VALID which is what the old default
of 0 equates to

notably

commit 1e0bc66d16aee28ce8bd9582ea32178c63841902
Date:   Thu Nov 5 16:55:26 2009 +0100

    jl137:  #103420# better logging

turned the nss equivalent of SecurityEnvironment_NssImpl::verifyCertificate
from 0 to CertificateValidity::INVALID like this change does

include/svl/sigstruct.hxx | 32 24 + 8 - 0 !
svl/source/crypto/cryptosign.cxx | 16 12 + 4 - 0 !
sw/source/core/edit/edfcol.cxx | 3 2 + 1 - 0 !
xmlsecurity/inc/biginteger.hxx | 3 3 + 0 - 0 !
xmlsecurity/inc/xmlsignaturehelper.hxx | 12 12 + 0 - 0 !
xmlsecurity/inc/xsecctl.hxx | 14 10 + 4 - 0 !
xmlsecurity/source/component/documentdigitalsignatures.cxx | 54 32 + 22 - 0 !
xmlsecurity/source/dialogs/digitalsignaturesdialog.cxx | 15 9 + 6 - 0 !
xmlsecurity/source/helper/documentsignaturehelper.cxx | 63 43 + 20 - 0 !
xmlsecurity/source/helper/documentsignaturemanager.cxx | 12 12 + 0 - 0 !
xmlsecurity/source/helper/ooxmlsecexporter.cxx | 22 15 + 7 - 0 !
xmlsecurity/source/helper/ooxmlsecparser.cxx | 22 18 + 4 - 0 !
xmlsecurity/source/helper/pdfsignaturehelper.cxx | 8 6 + 2 - 0 !
xmlsecurity/source/helper/xmlsignaturehelper.cxx | 161 161 + 0 - 0 !
xmlsecurity/source/helper/xsecctl.cxx | 80 48 + 32 - 0 !
xmlsecurity/source/helper/xsecparser.cxx | 144 73 + 71 - 0 !
xmlsecurity/source/helper/xsecsign.cxx | 30 19 + 11 - 0 !
xmlsecurity/source/helper/xsecverify.cxx | 124 102 + 22 - 0 !
xmlsecurity/source/xmlsec/mscrypt/x509certificate_mscryptimpl.cxx | 47 47 + 0 - 0 !
xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx | 2 2 + 0 - 0 !
xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx | 25 25 + 0 - 0 !
xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx | 3 3 + 0 - 0 !
22 files changed, 678 insertions(+), 214 deletions(-)

 xmlsecurity: improve handling of multiple x509data elements
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Combine everything related to a certificate in a new struct X509Data.

The CertDigest is not actually written in the X509Data element but in
xades:Cert, so try to find the matching entry in
XSecController::setX509CertDigest().

There was a confusing interaction with PGP signatures, where ouGpgKeyID
was used for import, but export wrote the value from ouCertDigest
instead - this needed fixing.

The main point of this is enforcing a constraint from xmldsig-core 4.5.4:

  All certificates appearing in an X509Data element MUST relate to the
  validation key by either containing it or being part of a certification
  chain that terminates in a certificate containing the validation key.

Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111254
Tested-by: Jenkins

i18npool/source/localedata/data/hr_HR.xml | 8 8 + 0 - 0 !
officecfg/registry/data/org/openoffice/Office/Calc.xcu | 11 11 + 0 - 0 !
sc/source/core/tool/interpr2.cxx | 3 2 + 1 - 0 !
wizards/source/euro/Init.xba | 16 16 + 0 - 0 !
wizards/source/resources/resources_en_US.properties | 1 1 + 0 - 0 !
5 files changed, 38 insertions(+), 1 deletion(-)

 resolves: tdf#150011 add hrk croatian kuna conversion to eur euro

TODO: switch defaults before 2023-01-01 in
i18npool/source/localedata/data/hr_HR.xml

xmlsecurity/inc/xmlsec-wrapper.h | 4 4 + 0 - 0 !
xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx | 4 4 + 0 - 0 !
xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx | 4 4 + 0 - 0 !
3 files changed, 12 insertions(+)

 [patch] only use x509data