Fix a security vulerability in crossdump that is supposed to use uint32_t but accidently used uint8_t, set to tessesframework=0.0.5

CMakeLists.txt

@@ -4,6 +4,7 @@ include(cmake/version.cmake)
 project(TessesCrossLang VERSION ${CROSSLANG_MAJOR_VERSION}.${CROSSLANG_MINOR_VERSION}.${CROSSLANG_PATCH_VERSION})
 
 set(CMAKE_CXX_STANDARD 17)
+include(CMakePackageConfigHelpers)
 include(GNUInstallDirs)
 include(CheckLibraryExists)
 include(FetchContent)

Packaging/Linux/PKGBUILD

@@ -1,16 +1,16 @@
 # Maintainer: Mike Nolan <tesses@tesses.net>
 pkgname=crosslang # '-bzr', '-git', '-hg' or '-svn'
-pkgver=0.0.6
+pkgver=0.0.7
 pkgrel=1
 pkgdesc=""
 arch=('x86_64' 'powerpc')
 url="https://git.tesses.org/tesses50/crosslang"
 license=('GPLv3')
 groups=()
-depends=('mbedtls' 'tessesframework=0.0.4')
+depends=('mbedtls' 'tessesframework=0.0.5')
 makedepends=('git' 'cmake' 'make' 'base-devel' 'wget') # 'bzr', 'git', 'mercurial' or 'subversion'
 install=
-source=('crosslang::git+https://git.tesses.org/tesses50/crosslang')
+source=('crosslang::git+https://git.tesses.org/tesses50/crosslang#tag=v0.0.7')
 noextract=()
 sha256sums=('SKIP')
 if [[ -z "$CMAKE_TOOLCHAIN" ]]; then
@@ -30,14 +30,14 @@ prepare() {
 build() {
 	cd "$srcdir/${pkgname}"
 	mkdir build
+	cd build
 
 	if [[ -z "$CMAKE_TOOLCHAIN" ]]; then
- 	cmake -S . -B build -DCMAKE_INSTALL_PREFIX=/usr -DCROSSLANG_FETCHCONTENT=OFF -DCMAKE_BUILD_TYPE=Release
+ 	cmake -S .. -B . -DCMAKE_INSTALL_PREFIX=/usr -DCROSSLANG_FETCHCONTENT=OFF -DCMAKE_BUILD_TYPE=Release
   	else
-	cmake -S . -B build -DCMAKE_INSTALL_PREFIX=/usr -DCROSSLANG_FETCHCONTENT=OFF -DCMAKE_BUILD_TYPE=Release -DCMAKE_TOOLCHAIN_FILE="$CMAKE_TOOLCHAIN"
+	cmake -S .. -B . -DCMAKE_INSTALL_PREFIX=/usr -DCROSSLANG_FETCHCONTENT=OFF -DCMAKE_BUILD_TYPE=Release -DCMAKE_TOOLCHAIN_FILE="$CMAKE_TOOLCHAIN"
 	fi
 
-	cd build
 	make -j`nproc`
 
 }

changelog.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.0.7
+Fix a security vulerability in crossdump that is supposed to use uint32_t but accidently used uint8_t, set to tessesframework=0.0.5
+
 ## 0.0.6
 Fix bug with classes, use slim exclusively, add package private data and change rehaul cmake configs
 

cmake/findtf.cmake

@@ -5,7 +5,7 @@ set(CROSSLANG_STATIC ${TESSESFRAMEWORK_STATIC} CACHE INTERNAL "For CrossLang" FO
 FetchContent_Declare(
     TessesFramework
     GIT_REPOSITORY https://git.tesses.org/tesses50/tessesframework.git
-    GIT_TAG 25d67053ccebf209f50e6928fad8827164eb4c28
+    GIT_TAG 41d503cfb535eca95068b0265418ab2f580264d6
 )
 set(TESSESFRAMEWORK_ENABLE_EXAMPLES OFF)
 FetchContent_MakeAvailable(TessesFramework)

cmake/version.cmake

@@ -1,3 +1,3 @@
 set(CROSSLANG_MAJOR_VERSION 0)
 set(CROSSLANG_MINOR_VERSION 0)
-set(CROSSLANG_PATCH_VERSION 6)
+set(CROSSLANG_PATCH_VERSION 7)

src/program_lib/crossdump.cpp

@@ -94,7 +94,7 @@ void CrossLangDump(std::shared_ptr<Tesses::Framework::Streams::Stream> strm) {
 
                 uint32_t ents = EnsureInt(strm);
 
-                for (uint8_t k = 0; k < ents; k++) {
+                for (uint32_t k = 0; k < ents; k++) {
                     Ensure(strm, main_header, 1);
                     uint8_t flags = main_header[0];
                     std::cout << "\t\t/^" << strs.at(EnsureInt(strm)) << "^/"

src/runtime_methods/console.cpp

@@ -3,7 +3,17 @@
 #include <iostream>
 
 namespace Tesses::CrossLang {
-
+TObject Console_setInvertedColors(GCList &ls, std::vector<TObject> args) {
+    bool inverted;
+    if (GetArgument(args, 0, inverted)) {
+        Tesses::Framework::Console::SetInvertedColors(inverted);
+    }
+    return Undefined();
+}
+TObject Console_Reset(GCList &ls, std::vector<TObject> args) {
+    Tesses::Framework::Console::Reset();
+    return Undefined();
+}
 TObject Console_getIsTTY(GCList &ls, std::vector<TObject> args) {
 
     return Tesses::Framework::Console::IsTTY();

src/runtime_methods/process.cpp

@@ -280,6 +280,16 @@ void TStd::RegisterProcess(std::shared_ptr<GC> gc, TRootEnvironment *env) {
             }
             return Undefined();
         });
+
+    process->DeclareFunction(
+        gc, "ShellFileOrUrl", "Launch file or url in shell", {"urlOrFilename"},
+        [](GCList &ls, std::vector<TObject> args) -> TObject {
+            std::string fileOrUrl;
+            if (GetArgument(args, 0, fileOrUrl))
+                Tesses::Framework::Platform::ShellFileOrUrl(fileOrUrl);
+
+            return Undefined();
+        });
     gc->BarrierEnd();
 }
 } // namespace Tesses::CrossLang