tags 404723 + patch
thanks

Hi,

Attached is the diff for my neon26 0.26.2-3.1 NMU.
diff -u neon26-0.26.2/debian/changelog neon26-0.26.2/debian/changelog
--- neon26-0.26.2/debian/changelog
+++ neon26-0.26.2/debian/changelog
@@ -1,3 +1,13 @@
+neon26 (0.26.2-3.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * In the uri_lookup() macro, cast to unsigned char instead of unsigned
+    (which equals unsigned int), to avoid buffer overruns and SIGSEGV when
+    parsing URIs with non-ASCII characters; patch from Modestas Vainius.
+    (Closes: #404723)
+
+ -- Steinar H. Gunderson <[EMAIL PROTECTED]>  Fri,  5 Jan 2007 21:40:29 +0100
+
 neon26 (0.26.2-3) unstable; urgency=medium
 
   * Fix FTBFS caused by my previous upload, patch didn't apply on 64 bit
only in patch2:
unchanged:
--- neon26-0.26.2.orig/src/ne_uri.c
+++ neon26-0.26.2/src/ne_uri.c
@@ -110,7 +110,7 @@
 /*   Fx */ OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT
 };
 
-#define uri_lookup(ch) (uri_chars[(unsigned)ch])
+#define uri_lookup(ch) (uri_chars[(unsigned char)ch])
 
 char *ne_path_parent(const char *uri) 
 {

Reply via email to