summaryrefslogtreecommitdiff
path: root/chat/bitchx/patches/patch-aj
diff options
context:
space:
mode:
Diffstat (limited to 'chat/bitchx/patches/patch-aj')
-rw-r--r--chat/bitchx/patches/patch-aj20
1 files changed, 17 insertions, 3 deletions
diff --git a/chat/bitchx/patches/patch-aj b/chat/bitchx/patches/patch-aj
index 2b73e993c9d..79d90105e8c 100644
--- a/chat/bitchx/patches/patch-aj
+++ b/chat/bitchx/patches/patch-aj
@@ -1,12 +1,15 @@
-$NetBSD: patch-aj,v 1.1 2003/03/29 21:20:30 salo Exp $
+$NetBSD: patch-aj,v 1.2 2003/05/14 20:09:13 salo Exp $
Fixes potential remote buffer overflows. See the following url for more
details: http://securityfocus.com/archive/1/315057
Patch by caf@guarana.org.
---- source/names.c.orig 2003-03-29 21:48:19.000000000 +0100
-+++ source/names.c 2003-03-29 21:52:59.000000000 +0100
+Fix major core bug with channel mode -k * on hybrid7 servers.
+From BitchX CVS.
+
+--- source/names.c.orig 2002-03-25 21:47:30.000000000 +0100
++++ source/names.c 2003-05-14 21:51:01.000000000 +0200
@@ -572,7 +572,7 @@
*nmodes = 0;
@@ -25,3 +28,14 @@ Patch by caf@guarana.org.
{
if (tucm->o_ed)
{
+@@ -1003,8 +1003,9 @@
+ malloc_strcpy(key, next_arg(rest, &rest));
+ else
+ {
+- if (rest && *key && !my_strnicmp(rest, *key, strlen(*key)))
++ if (rest && *key && (!my_strnicmp(rest, *key, strlen(*key)) || rest[0] == '*'))
+ next_arg(rest, &rest);
++
+ new_free(key);
+ }
+ (*channel)->i_mode = -1;