summaryrefslogtreecommitdiff
path: root/shells
diff options
context:
space:
mode:
authortron <tron@pkgsrc.org>2014-09-25 14:02:34 +0000
committertron <tron@pkgsrc.org>2014-09-25 14:02:34 +0000
commitbcff414f875d4073e9a145f4d6e252c116eeaa14 (patch)
tree6a3586daa2b5784199aa07084686f284bf491b52 /shells
parent3d9c48affd004ed5f5a673af663c8fdf4e27a810 (diff)
downloadpkgsrc-bcff414f875d4073e9a145f4d6e252c116eeaa14.tar.gz
Add fix for CVE-2014-7169.
Diffstat (limited to 'shells')
-rw-r--r--shells/bash/Makefile6
-rw-r--r--shells/bash/distinfo3
-rw-r--r--shells/bash/patches/patch-parse.y17
3 files changed, 24 insertions, 2 deletions
diff --git a/shells/bash/Makefile b/shells/bash/Makefile
index 0869b23da0b..a55ad08d84f 100644
--- a/shells/bash/Makefile
+++ b/shells/bash/Makefile
@@ -1,10 +1,11 @@
-# $NetBSD: Makefile,v 1.64 2014/09/24 15:24:35 wiz Exp $
+# $NetBSD: Makefile,v 1.65 2014/09/25 14:02:34 tron Exp $
BASH_VERSION= 4.3
BASH_PATCHLEVEL= 025
DISTNAME= bash-${BASH_VERSION}
PKGNAME= bash-${BASH_VERSION}.${BASH_PATCHLEVEL}
+PKGREVISION= 1
CATEGORIES= shells
MASTER_SITES= ${MASTER_SITE_GNU:=bash/} \
ftp://ftp.cwru.edu/pub/bash/
@@ -102,6 +103,9 @@ CONFIGURE_ENV+= bash_cv_func_ctype_nonascii=yes
CONFIGURE_ENV+= bash_cv_wexitstatus_offset=8
.endif
+pre-configure:
+ ${RM} -f ${WRKSRC}/y.tab.c
+
post-install:
${INSTALL_MAN} ${WRKSRC}/doc/bash.1 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1
${INSTALL_MAN} ${WRKSRC}/doc/bashbug.1 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1
diff --git a/shells/bash/distinfo b/shells/bash/distinfo
index 9a6356d83aa..dc696f6e1ab 100644
--- a/shells/bash/distinfo
+++ b/shells/bash/distinfo
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.31 2014/09/24 15:24:35 wiz Exp $
+$NetBSD: distinfo,v 1.32 2014/09/25 14:02:34 tron Exp $
SHA1 (bash-4.3.tar.gz) = 45ac3c5727e7262334f4dfadecdf601b39434e84
RMD160 (bash-4.3.tar.gz) = cd21a9f51ea7780994d4e2c9c7d16d5eb000f845
@@ -83,3 +83,4 @@ SHA1 (patch-ag) = 4da0a43f6b890482affff46b18eef4be67770e48
SHA1 (patch-aj) = 8b3c52c2aee9cf53ee5a9ce64ead243d0970305e
SHA1 (patch-builtins_ulimit.def) = d4cb59bedc6a6199f9a99a3530c99374e428baeb
SHA1 (patch-lib_readline_colors.c) = f2f47e7aa0b5c1e999368109de10f80e39fd4438
+SHA1 (patch-parse.y) = 41c747ef8095b43c6b077a3fab54105d338f156e
diff --git a/shells/bash/patches/patch-parse.y b/shells/bash/patches/patch-parse.y
new file mode 100644
index 00000000000..a9bae586848
--- /dev/null
+++ b/shells/bash/patches/patch-parse.y
@@ -0,0 +1,17 @@
+$NetBSD: patch-parse.y,v 1.1 2014/09/25 14:02:34 tron Exp $
+
+Fix for CVE-2014-7169 taken from here:
+
+http://www.openwall.com/lists/oss-security/2014/09/25/10
+
+--- parse.y.orig 2014-09-25 14:24:07.000000000 +0100
++++ parse.y 2014-09-25 14:25:05.000000000 +0100
+@@ -2953,6 +2953,8 @@
+ FREE (word_desc_to_read);
+ word_desc_to_read = (WORD_DESC *)NULL;
+
++ eol_ungetc_lookahead = 0;
++
+ current_token = '\n'; /* XXX */
+ last_read_token = '\n';
+ token_to_read = '\n';