mirror of
https://git.FreeBSD.org/ports.git
synced 2025-01-31 10:46:16 +00:00
Correct a remotely exploitable vulnerability in subversion's date
parsing. http://vuxml.freebsd.org/5d36ef32-a9cf-11d8-9c6d-0020ed76ef5a.html The patch was supplied by Stefan Esser and verified by Ben Reser.
This commit is contained in:
parent
343dd5f453
commit
0140554d03
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=109520
@ -6,6 +6,7 @@
|
||||
|
||||
PORTNAME= subversion
|
||||
PORTVERSION= 1.0.2
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= devel
|
||||
MASTER_SITES= http://subversion.tigris.org/tarballs/
|
||||
|
||||
|
@ -0,0 +1,13 @@
|
||||
Index: subversion/libsvn_subr/time.c
|
||||
===================================================================
|
||||
--- subversion/libsvn_subr/time.c (revision 9636)
|
||||
+++ subversion/libsvn_subr/time.c (working copy)
|
||||
@@ -55,7 +55,7 @@
|
||||
* compatibility, but no longer generated.
|
||||
*/
|
||||
static const char * const old_timestamp_format =
|
||||
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
|
||||
/* Our human representation of dates looks like this:
|
||||
*
|
@ -6,6 +6,7 @@
|
||||
|
||||
PORTNAME= subversion
|
||||
PORTVERSION= 1.0.2
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= devel
|
||||
MASTER_SITES= http://subversion.tigris.org/tarballs/
|
||||
|
||||
|
@ -0,0 +1,13 @@
|
||||
Index: subversion/libsvn_subr/time.c
|
||||
===================================================================
|
||||
--- subversion/libsvn_subr/time.c (revision 9636)
|
||||
+++ subversion/libsvn_subr/time.c (working copy)
|
||||
@@ -55,7 +55,7 @@
|
||||
* compatibility, but no longer generated.
|
||||
*/
|
||||
static const char * const old_timestamp_format =
|
||||
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
|
||||
/* Our human representation of dates looks like this:
|
||||
*
|
@ -6,6 +6,7 @@
|
||||
|
||||
PORTNAME= subversion
|
||||
PORTVERSION= 1.0.2
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= devel
|
||||
MASTER_SITES= http://subversion.tigris.org/tarballs/
|
||||
|
||||
|
13
devel/subversion/files/patch-subversion::libsvn_subr::time.c
Normal file
13
devel/subversion/files/patch-subversion::libsvn_subr::time.c
Normal file
@ -0,0 +1,13 @@
|
||||
Index: subversion/libsvn_subr/time.c
|
||||
===================================================================
|
||||
--- subversion/libsvn_subr/time.c (revision 9636)
|
||||
+++ subversion/libsvn_subr/time.c (working copy)
|
||||
@@ -55,7 +55,7 @@
|
||||
* compatibility, but no longer generated.
|
||||
*/
|
||||
static const char * const old_timestamp_format =
|
||||
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
|
||||
/* Our human representation of dates looks like this:
|
||||
*
|
@ -6,6 +6,7 @@
|
||||
|
||||
PORTNAME= subversion
|
||||
PORTVERSION= 1.0.2
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= devel
|
||||
MASTER_SITES= http://subversion.tigris.org/tarballs/
|
||||
|
||||
|
@ -0,0 +1,13 @@
|
||||
Index: subversion/libsvn_subr/time.c
|
||||
===================================================================
|
||||
--- subversion/libsvn_subr/time.c (revision 9636)
|
||||
+++ subversion/libsvn_subr/time.c (working copy)
|
||||
@@ -55,7 +55,7 @@
|
||||
* compatibility, but no longer generated.
|
||||
*/
|
||||
static const char * const old_timestamp_format =
|
||||
-"%s %d %s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
+"%3s %d %3s %d %02d:%02d:%02d.%06d (day %03d, dst %d, gmt_off %06d)";
|
||||
|
||||
/* Our human representation of dates looks like this:
|
||||
*
|
Loading…
Reference in New Issue
Block a user