mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-28 05:29:48 +00:00
Code Issues Releases Activity

Fix libxml2 heap buffer overflow vulnability.

Browse Source 
PR:		ports/164270
Submitted by:	kj <b4039413@nwldx.com>
Security:	57f1a624-6197-11e1-b98c-bcaec565249c
This commit is contained in:
Koop Mast 2012-02-27 23:12:03 +00:00
parent 20f0df8834
commit 6966f2b88e
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=292333
2 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
textproc/libxml2/Makefile
View File

@ -13,7 +13,7 @@
PORTNAME= libxml2
PORTVERSION= 2.7.8
PORTREVISION?= 1
PORTREVISION?= 2
CATEGORIES?= textproc gnome
MASTER_SITES= ftp://fr.rpmfind.net/pub/libxml/ \
ftp://gd.tuwien.ac.at/pub/libxml/ \

25
textproc/libxml2/files/patch-parser.c Normal file
View File

@ -0,0 +1,25 @@
Commit doesn't mention it but this fixes CVE-2011-3919
From 5bd3c061823a8499b27422aee04ea20aae24f03e Mon Sep 17 00:00:00 2001
From: Daniel Veillard <veillard@redhat.com>
Date: Fri, 16 Dec 2011 10:53:35 +0000
Subject: Fix an allocation error when copying entities
---
(limited to 'parser.c')
diff --git a/parser.c b/parser.c
index 4e5dcb9..c55e41d 100644
--- parser.c
+++ parser.c
@@ -2709,7 +2709,7 @@ xmlStringLenDecodeEntities(xmlParserCtxtPtr ctxt, const xmlChar *str, int len,
buffer[nbchars++] = '&';
if (nbchars > buffer_size - i - XML_PARSER_BUFFER_SIZE) {
- growBuffer(buffer, XML_PARSER_BUFFER_SIZE);
+ growBuffer(buffer, i + XML_PARSER_BUFFER_SIZE);
}
for (;i > 0;i--)
buffer[nbchars++] = *cur++;
--
cgit v0.9.0.2