Fix a heap overread in search_brace/lexi

indent.spec

@@ -1,7 +1,7 @@
 Summary:    A GNU program for formatting C code
 Name:       indent
 Version:    2.2.13
-Release:    3%{?dist}
+Release:    4%{?dist}
 # COPYING:                      GPL-3.0 text
 # doc/indent.texi:              Latex2e-translated-notice
 #                               (AND a subset of Latex2e WITH a texinfo-commented GPL clause;
@@ -110,6 +110,9 @@ Source2:    https://shadura.me/key.pgp
 # Check for setlocale() at configure time, proposed to an upstream,
 # <https://lists.gnu.org/archive/html/bug-indent/2023-04/msg00001.html>.
 Patch0:     indent-2.2.13-Check-for-setlocale-function.patch
+# Fix a heap overread in search_brace/lexi, proposed to the upstream,
+# <https://savannah.gnu.org/bugs/index.php?64503>
+Patch1:     indent-2.2.13-Fix-an-out-of-buffer-read-in-search_brace-lexi-on-an.patch
 BuildRequires:  autoconf2.7x >= 2.71
 # autoconf-archive for unbundled ax_cc_for_build.m4
 BuildRequires:  autoconf-archive
@@ -173,6 +176,9 @@ make check %{?_smp_mflags}
 %{_infodir}/indent.info*
 
 %changelog
+* Wed Aug 16 2023 Petr Pisar <ppisar@redhat.com> - 2.2.13-4
+- Fix a heap overread in search_brace/lexi
+
 * Mon Apr 17 2023 Petr Pisar <ppisar@redhat.com> - 2.2.13-3
 - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND
   Latex2e-translated-notice"