OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 05-Sep-2005 16:35:14
Branch: HEAD Handle: 2005090515351400
Modified files:
openpkg-src/l2 l2.patch l2.spec
Log:
apply Security Fix (CAN-2005-2491)
Summary:
Revision Changes Path
1.2 +30 -0 openpkg-src/l2/l2.patch
1.31 +1 -1 openpkg-src/l2/l2.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/l2/l2.patch
============================================================================
$ cvs diff -u -r1.1 -r1.2 l2.patch
--- openpkg-src/l2/l2.patch 8 Mar 2005 09:14:17 -0000 1.1
+++ openpkg-src/l2/l2.patch 5 Sep 2005 14:35:14 -0000 1.2
@@ -10,3 +10,33 @@
if (he->h_addrtype == AF_INET) {
sa4.sin_family = AF_INET;
sa4.sin_port = htons(nPort);
+
+-----------------------------------------------------------------------------
+
+Security Fix (CAN-2005-2491, partially only)
+
+Index: l2_ut_pcre.c
+--- l2_ut_pcre.c.orig 2003-01-28 10:10:39 +0100
++++ l2_ut_pcre.c 2005-09-05 16:22:43 +0200
+@@ -674,6 +674,10 @@
+
+ while ((cd->ctypes[*p] & ctype_digit) != 0)
+ min = min * 10 + *p++ - '0';
++ if (min < 0 || min > 65535) {
++ *errorptr = ERR5;
++ return p;
++ }
+
+ if (*p == '}')
+ max = min;
+@@ -682,6 +686,10 @@
+ max = 0;
+ while ((cd->ctypes[*p] & ctype_digit) != 0)
+ max = max * 10 + *p++ - '0';
++ if (max < 0 || max > 65535) {
++ *errorptr = ERR5;
++ return p;
++ }
+ if (max < min) {
+ *errorptr = ERR4;
+ return p;
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/l2/l2.spec
============================================================================
$ cvs diff -u -r1.30 -r1.31 l2.spec
--- openpkg-src/l2/l2.spec 15 Jun 2005 14:01:13 -0000 1.30
+++ openpkg-src/l2/l2.spec 5 Sep 2005 14:35:14 -0000 1.31
@@ -33,7 +33,7 @@
Group: System
License: MIT-style
Version: 0.9.10
-Release: 20050615
+Release: 20050905
# list of sources
Source0: ftp://ftp.ossp.org/pkg/lib/l2/l2-%{version}.tar.gz
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [email protected]
