1
0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-31 10:46:16 +00:00

Correct a remotely exploitable vulnerability in subversion's date

parsing.
http://vuxml.freebsd.org/5d36ef32-a9cf-11d8-9c6d-0020ed76ef5a.html

The patch was supplied by Stefan Esser and verified by Ben Reser.
This commit is contained in:
Jacques Vidrine 2004-05-19 20:22:30 +00:00
parent 343dd5f453
commit 0140554d03
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=109520
8 changed files with 56 additions and 0 deletions

View File

@ -6,6 +6,7 @@
PORTNAME= subversion
PORTVERSION= 1.0.2
PORTREVISION= 1
CATEGORIES= devel
MASTER_SITES= http://subversion.tigris.org/tarballs/

View File

@ -0,0 +1,13 @@
Index: subversion/libsvn_subr/time.c
===================================================================
--- subversion/libsvn_subr/time.c (revision 9636)
+++ subversion/libsvn_subr/time.c (working copy)
@@ -55,7 +55,7 @@
* compatibility, but no longer generated.
*/
static const char * const old_timestamp_format =
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
/* Our human representation of dates looks like this:
*

View File

@ -6,6 +6,7 @@
PORTNAME= subversion
PORTVERSION= 1.0.2
PORTREVISION= 1
CATEGORIES= devel
MASTER_SITES= http://subversion.tigris.org/tarballs/

View File

@ -0,0 +1,13 @@
Index: subversion/libsvn_subr/time.c
===================================================================
--- subversion/libsvn_subr/time.c (revision 9636)
+++ subversion/libsvn_subr/time.c (working copy)
@@ -55,7 +55,7 @@
* compatibility, but no longer generated.
*/
static const char * const old_timestamp_format =
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
/* Our human representation of dates looks like this:
*

View File

@ -6,6 +6,7 @@
PORTNAME= subversion
PORTVERSION= 1.0.2
PORTREVISION= 1
CATEGORIES= devel
MASTER_SITES= http://subversion.tigris.org/tarballs/

View File

@ -0,0 +1,13 @@
Index: subversion/libsvn_subr/time.c
===================================================================
--- subversion/libsvn_subr/time.c (revision 9636)
+++ subversion/libsvn_subr/time.c (working copy)
@@ -55,7 +55,7 @@
* compatibility, but no longer generated.
*/
static const char * const old_timestamp_format =
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
/* Our human representation of dates looks like this:
*

View File

@ -6,6 +6,7 @@
PORTNAME= subversion
PORTVERSION= 1.0.2
PORTREVISION= 1
CATEGORIES= devel
MASTER_SITES= http://subversion.tigris.org/tarballs/

View File

@ -0,0 +1,13 @@
Index: subversion/libsvn_subr/time.c
===================================================================
--- subversion/libsvn_subr/time.c (revision 9636)
+++ subversion/libsvn_subr/time.c (working copy)
@@ -55,7 +55,7 @@
* compatibility, but no longer generated.
*/
static const char * const old_timestamp_format =
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
/* Our human representation of dates looks like this:
*