mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-28 01:06:17 +00:00
Code Issues Releases Activity

Upgrade to 0.9.31: back-ported utp vulnerability fix from

Browse Source 
libtorrent-rasterbar.

Changelog at http://twister.net.co/?p=575

Security:	uTP vulnerability (also known as DRDoS in torrent world) and lazy_bdecode overrun
This commit is contained in:
Thierry Thomas 2015-10-26 21:46:13 +00:00
parent 5aab2164d0
commit fa6d4812c0
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=400210
3 changed files with 29 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
net-p2p/twister/Makefile
View File

@ -2,7 +2,7 @@
# $FreeBSD$
PORTNAME= twister-core
PORTVERSION= 0.9.30
PORTVERSION= 0.9.31
DISTVERSIONPREFIX= v
PORTEPOCH= 1
CATEGORIES= net-p2p

4
net-p2p/twister/distinfo
View File

@ -1,2 +1,2 @@
SHA256 (miguelfreitas-twister-core-v0.9.30_GH0.tar.gz) = f37b7f5dc359629dfe69b11770c180be66829e39b3c49d0c82b9886f308e69c4
SIZE (miguelfreitas-twister-core-v0.9.30_GH0.tar.gz) = 6206014
SHA256 (miguelfreitas-twister-core-v0.9.31_GH0.tar.gz) = ccb85f5eaac46a668908c69063adcc796a2bb4cb69907b1c093dbf8fcf58c101
SIZE (miguelfreitas-twister-core-v0.9.31_GH0.tar.gz) = 6211128

26
net-p2p/twister/files/patch-src_twister.cpp Normal file
View File

@ -0,0 +1,26 @@
--- src/twister.cpp.orig 2015-10-19 01:02:01 UTC
+++ src/twister.cpp
@@ -1624,7 +1624,7 @@ bool usernameExists(std::string const &u
bool createSignedUserpost(entry &v, std::string const &username, int k,
int flag, std::string const &msg,
- entry const *ent, entry const *sig,
+ entry const *ent, entry const *sig_rtfav,
std::string const &reply_n = "", int reply_k = 0)
{
entry &userpost = v["userpost"];
@@ -1657,12 +1657,12 @@ bool createSignedUserpost(entry &v, std:
}
//userpost["t"] = "rt";
userpost["rt"] = *ent;
- userpost["sig_rt"] = *sig;
+ userpost["sig_rt"] = *sig_rtfav;
break;
}
case USERPOST_FLAG_FAV:
userpost["fav"] = *ent;
- userpost["sig_fav"] = *sig;
+ userpost["sig_fav"] = *sig_rtfav;
break;
case USERPOST_FLAG_DM:
//userpost["t"] = "dm";