summaryrefslogtreecommitdiff
path: root/devel/pcre/patches/patch-pcreposix.c
diff options
context:
space:
mode:
Diffstat (limited to 'devel/pcre/patches/patch-pcreposix.c')
-rw-r--r--devel/pcre/patches/patch-pcreposix.c26
1 files changed, 26 insertions, 0 deletions
diff --git a/devel/pcre/patches/patch-pcreposix.c b/devel/pcre/patches/patch-pcreposix.c
new file mode 100644
index 00000000000..4b5c03c4acf
--- /dev/null
+++ b/devel/pcre/patches/patch-pcreposix.c
@@ -0,0 +1,26 @@
+$NetBSD: patch-pcreposix.c,v 1.1 2016/03/22 19:38:15 tez Exp $
+
+Fix for CVE-2016-3191 from
+ http://vcs.pcre.org/pcre?view=revision&revision=1631
+
+--- pcreposix.c.orig 2016-03-22 19:29:47.648202900 +0000
++++ pcreposix.c
+@@ -6,7 +6,7 @@
+ and semantics are as close as possible to those of the Perl 5 language.
+
+ Written by Philip Hazel
+- Copyright (c) 1997-2014 University of Cambridge
++ Copyright (c) 1997-2016 University of Cambridge
+
+ -----------------------------------------------------------------------------
+ Redistribution and use in source and binary forms, with or without
+@@ -173,7 +173,8 @@ static const int eint[] = {
+ REG_BADPAT, /* group name must start with a non-digit */
+ /* 85 */
+ REG_BADPAT, /* parentheses too deeply nested (stack check) */
+- REG_BADPAT /* missing digits in \x{} or \o{} */
++ REG_BADPAT, /* missing digits in \x{} or \o{} */
++ REG_BADPAT /* pattern too complicated */
+ };
+
+ /* Table of texts corresponding to POSIX error codes */