mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-11 07:22:22 +00:00
Code Issues Releases Activity

- Add fix for recent IMAP buffer overflow vulnerability.

Browse Source 
PR:		ports/99698
Submitted by:	shaun (me)
Approved by:	SHIOZAKI Takehiko <st@be.to> (maintainer),
		ahze (mentor)
Security:	VuXML d2a43243-087b-11db-bc36-0008743bf21a
This commit is contained in:
Shaun Amott 2006-07-03 15:44:27 +00:00
parent c7d49534e6
commit 1411ebddc1
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=166847
2 changed files with 28 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
japanese/mutt-devel/Makefile
View File

@ -9,7 +9,7 @@
PORTNAME= mutt-devel
PORTVERSION= ${VERSION}.j${JP_VERSION}
PORTREVISION= 2
PORTREVISION= 3
CATEGORIES= japanese mail
MASTER_SITES= http://www.emaillab.org/mutt/1.5/ \
http://my.reset.jp/~iwashita/mutt/distfiles/ \

27
japanese/mutt-devel/files/patch-imap_browse.c Normal file
View File

@ -0,0 +1,27 @@
--- imap/browse.c.orig Wed Nov 5 09:41:36 2003
+++ imap/browse.c Sat Jul 1 20:47:53 2006
@@ -452,7 +452,7 @@
if (*s == '\"')
{
s++;
- while (*s && *s != '\"')
+ while (*s && *s != '\"' && n < sizeof (ns) - 1)
{
if (*s == '\\')
s++;
@@ -463,12 +463,14 @@
s++;
}
else
- while (*s && !ISSPACE (*s))
+ while (*s && !ISSPACE (*s) && n < sizeof (ns) - 1)
{
ns[n++] = *s;
s++;
}
ns[n] = '\0';
+ if (n == sizeof (ns) - 1)
+ dprint (1, (debugfile, "browse_get_namespace: too long: [%s]\n", ns));
/* delim? */
s = imap_next_word (s);
/* delimiter is meaningless if namespace is "". Why does