RPM Package Manager, CVS Repository
  http://rpm5.org/cvs/
  ____________________________________________________________________________

  Server: rpm5.org                         Name:   Jeff Johnson
  Root:   /v/rpm/cvs                       Email:  [email protected]
  Module: rpm                              Date:   16-Jul-2017 16:24:54
  Branch: rpm-5_4                          Handle: 2017071614245400

  Modified files:           (Branch: rpm-5_4)
    rpm/tools               rpm2cpio.c

  Log:
    - fix: avoid a stack buffer overflow.

  Summary:
    Revision    Changes     Path
    2.11.2.5    +1  -1      rpm/tools/rpm2cpio.c
  ____________________________________________________________________________

  patch -p0 <<'@@ .'
  Index: rpm/tools/rpm2cpio.c
  ============================================================================
  $ cvs diff -u -r2.11.2.4 -r2.11.2.5 rpm2cpio.c
  --- rpm/tools/rpm2cpio.c      16 Jul 2017 04:44:27 -0000      2.11.2.4
  +++ rpm/tools/rpm2cpio.c      16 Jul 2017 14:24:54 -0000      2.11.2.5
  @@ -119,7 +119,7 @@
        xx = headerGet(h, he, 0);
        payload_compressor = (xx ? he->p.str : "gzip");
   
  -     rpmio_flags = t = alloca(sizeof("r.gzdio"));
  +     rpmio_flags = t = alloca(sizeof("r.gzdio")+32);
        *t++ = 'r';
        if (!strcmp(payload_compressor, "gzip"))
            t = stpcpy(t, ".gzdio");
  @@ .
______________________________________________________________________
RPM Package Manager                                    http://rpm5.org
CVS Sources Repository                                [email protected]

Reply via email to