diff options
| author | itojun <itojun> | 2000-07-15 11:57:06 +0000 |
|---|---|---|
| committer | itojun <itojun> | 2000-07-15 11:57:06 +0000 |
| commit | 12ed99f65726ac2e128a0dc5bac72193eca6c17d (patch) | |
| tree | f3c7c23e8e8c29e8f676b7c486d8c0c3ba350228 /japanese | |
| parent | 1b67aea10870c678c05179c825033dd724054e38 (diff) | |
| download | pkgsrc-12ed99f65726ac2e128a0dc5bac72193eca6c17d.tar.gz | |
add patch to prevent buffer overflow. see FreeBSD security advisory 00:31.
Diffstat (limited to 'japanese')
| -rw-r--r-- | japanese/canna-lib/files/patch-sum | 3 | ||||
| -rw-r--r-- | japanese/canna-lib/patches/patch-ad | 22 |
2 files changed, 24 insertions, 1 deletions
diff --git a/japanese/canna-lib/files/patch-sum b/japanese/canna-lib/files/patch-sum index 5451c196c02..19faafb537d 100644 --- a/japanese/canna-lib/files/patch-sum +++ b/japanese/canna-lib/files/patch-sum @@ -1,5 +1,6 @@ -$NetBSD: patch-sum,v 1.4 1999/12/08 08:24:43 rh Exp $ +$NetBSD: patch-sum,v 1.5 2000/07/15 11:57:06 itojun Exp $ MD5 (patch-aa) = aca638a5b0fa561dcacb27590ff9a70a MD5 (patch-ab) = 9c308687cdc856ed489713dc2e929014 MD5 (patch-ac) = a1fd7fea8cc51e12336ab061a6e2a838 +MD5 (patch-ad) = 9e09b258b32de008104a6654f6197f5d diff --git a/japanese/canna-lib/patches/patch-ad b/japanese/canna-lib/patches/patch-ad new file mode 100644 index 00000000000..48328fc6e45 --- /dev/null +++ b/japanese/canna-lib/patches/patch-ad @@ -0,0 +1,22 @@ +--- server/misc.c~ Fri Jul 29 12:03:54 1994 ++++ server/misc.c Fri Jun 30 10:16:39 2000 +@@ -788,12 +788,19 @@ + + if (client->username && client->username[0]) { + if (client->groupname && client->groupname[0]) { ++ if (strlen(DDUSER) + strlen(client->username) + ++ strlen(DDGROUP) + strlen(client->groupname) + ++ strlen(DDPATH) + 4 >= 256) ++ return ( -1 ); + sprintf(dichome, "%s/%s:%s/%s:%s", + DDUSER, client->username, + DDGROUP, client->groupname, + DDPATH); + } + else { ++ if (strlen(DDUSER) + strlen(client->username) + ++ strlen(DDPATH) + 2 >= 256) ++ return ( -1 ); + sprintf(dichome, "%s/%s:%s", + DDUSER, client->username, + DDPATH); |