diff options
| author | fhajny <fhajny@pkgsrc.org> | 2014-11-13 09:45:47 +0000 |
|---|---|---|
| committer | fhajny <fhajny@pkgsrc.org> | 2014-11-13 09:45:47 +0000 |
| commit | e97a4b88861beb3efa346b7ee8ebd8c1bf83018b (patch) | |
| tree | ef4e9f8d4c389b3ee30602a63bb9f720cd8a6977 /chat/ejabberd/patches | |
| parent | a9bfbce5638d759228e6dca993d7e69e91ccad8d (diff) | |
| download | pkgsrc-e97a4b88861beb3efa346b7ee8ebd8c1bf83018b.tar.gz | |
Backport upstream commit to fix CVE-2014-8760. Bump PKGREVISION.
Diffstat (limited to 'chat/ejabberd/patches')
| -rw-r--r-- | chat/ejabberd/patches/patch-src_ejabberd__c2s.erl | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/chat/ejabberd/patches/patch-src_ejabberd__c2s.erl b/chat/ejabberd/patches/patch-src_ejabberd__c2s.erl new file mode 100644 index 00000000000..252d5ddf71b --- /dev/null +++ b/chat/ejabberd/patches/patch-src_ejabberd__c2s.erl @@ -0,0 +1,23 @@ +$NetBSD: patch-src_ejabberd__c2s.erl,v 1.1 2014/11/13 09:45:47 fhajny Exp $ + +Backport upstream commit to fix CVE-2014-8760 +--- src/ejabberd_c2s.erl.orig 2014-07-22 15:42:49.000000000 +0000 ++++ src/ejabberd_c2s.erl +@@ -718,7 +718,7 @@ wait_for_feature_request({xmlstreameleme + (StateData#state.sockmod):get_sockmod(StateData#state.socket), + case {xml:get_attr_s(<<"xmlns">>, Attrs), Name} of + {?NS_SASL, <<"auth">>} +- when not ((SockMod == gen_tcp) and TLSRequired) -> ++ when TLSEnabled or not TLSRequired -> + Mech = xml:get_attr_s(<<"mechanism">>, Attrs), + ClientIn = jlib:decode_base64(xml:get_cdata(Els)), + case cyrsasl:server_start(StateData#state.sasl_state, +@@ -832,7 +832,7 @@ wait_for_feature_request({xmlstreameleme + end + end; + _ -> +- if (SockMod == gen_tcp) and TLSRequired -> ++ if TLSRequired and not TLSEnabled -> + Lang = StateData#state.lang, + send_element(StateData, + ?POLICY_VIOLATION_ERR(Lang, |