diff options
author | itojun <itojun@pkgsrc.org> | 2001-09-30 05:11:57 +0000 |
---|---|---|
committer | itojun <itojun@pkgsrc.org> | 2001-09-30 05:11:57 +0000 |
commit | 16fa29957c7c31cc0927ed20569978d8c41345b3 (patch) | |
tree | 9d3af8e40b84f4f7dd3aeda5148ea6bcf18c598e /graphics/magicpoint/patches | |
parent | 04c443aea2275eafbb0f4425bd653d67566995ab (diff) | |
download | pkgsrc-16fa29957c7c31cc0927ed20569978d8c41345b3.tar.gz |
upgrade to 1.09a. a lot of bugfixes, new directives, security hole fix
(has been incorporated as pkgsrc patch), etc.
Diffstat (limited to 'graphics/magicpoint/patches')
-rw-r--r-- | graphics/magicpoint/patches/patch-ab | 35 |
1 files changed, 0 insertions, 35 deletions
diff --git a/graphics/magicpoint/patches/patch-ab b/graphics/magicpoint/patches/patch-ab deleted file mode 100644 index 6ab857be9c5..00000000000 --- a/graphics/magicpoint/patches/patch-ab +++ /dev/null @@ -1,35 +0,0 @@ -$NetBSD: patch-ab,v 1.1 2001/08/31 00:22:12 itojun Exp $ - -Plug security hole inherited from xloadimage. - -Index: image/faces.c -=================================================================== -RCS file: /usr/cvsroot/mgp/kit/image/faces.c,v -retrieving revision 1.4 -retrieving revision 1.5 -diff -u -r1.4 -r1.5 ---- faces.c 1998/12/28 08:22:58 1.4 -+++ faces.c 2001/08/30 17:10:30 1.5 -@@ -18,6 +18,7 @@ - - #define HEXIGNORE -1 - #define HEXBAD -2 -+#define MAXFACESNAME 256 /* to avoid buffer overflow */ - - /* build a hex digit value table with the bits inverted - */ -@@ -107,10 +108,11 @@ - while (zgets((byte *)buf, BUFSIZ - 1, zf)) { - if (! strcmp(buf, "\n")) - break; -- if (!strncmp(buf, "FirstName:", 10)) -- strcpy(fname, buf + 11); -+ if (!strncmp(buf, "FirstName:", 10)){ -+ strncpy(fname, buf + 11, MAXFACESNAME); -+ } - else if (!strncmp(buf, "LastName:", 9)) -- strcpy(lname, buf + 10); -+ strncpy(lname, buf + 10, MAXFACESNAME); - else if (!strncmp(buf, "Image:", 6)) { - if (sscanf(buf + 7, "%d%d%d", &iw, &ih, &id) != 3) { - fprintf(stderr, "%s: Bad Faces Project image\n", fullname); |