mirror of
https://git.FreeBSD.org/ports.git
synced 2024-11-20 00:21:35 +00:00
Fix an exploitable buffer overflow.
PR: ports/95397 Submitted by: Petr Rehor <prehor@gmail.com>
This commit is contained in:
parent
6f9844f3ea
commit
4aa2bd955e
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=158935
@ -7,7 +7,7 @@
|
||||
|
||||
PORTNAME= zoo
|
||||
PORTVERSION= 2.10.1
|
||||
PORTREVISION= 1
|
||||
PORTREVISION= 2
|
||||
CATEGORIES= archivers
|
||||
MASTER_SITES= ftp://ftp.kiarchive.ru/pub/unix/arcers/
|
||||
DISTNAME= zoo-2.10pl1
|
||||
|
20
archivers/zoo/files/patch-misc.c
Normal file
20
archivers/zoo/files/patch-misc.c
Normal file
@ -0,0 +1,20 @@
|
||||
--- misc.c.orig Tue Jul 16 17:52:54 1991
|
||||
+++ misc.c Thu Apr 6 08:45:41 2006
|
||||
@@ -135,11 +135,16 @@
|
||||
char *fullpath (direntry)
|
||||
struct direntry *direntry;
|
||||
{
|
||||
- static char result[PATHSIZE];
|
||||
+ static char result[PATHSIZE+PATHSIZE+12]; /* Room for enough space */
|
||||
combine (result,
|
||||
direntry->dirlen != 0 ? direntry->dirname : "",
|
||||
(direntry->namlen != 0) ? direntry->lfname : direntry->fname
|
||||
);
|
||||
+
|
||||
+ if (strlen (result) >= PATHSIZE) {
|
||||
+ prterror ('f', "Combined dirname and filename too long\n");
|
||||
+ }
|
||||
+
|
||||
return (result);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user