[gentoo-commits] gentoo-x86 commit in mail-mta/ssmtp/files: CVE-2008-3962.patch

[Tobias Scherbaum (dertobi123)]

dertobi123    08/09/09 19:30:26

  Added:                CVE-2008-3962.patch
  Log:
  Version bump, security bug #234391
  (Portage version: 2.2_rc8/cvs/Linux 2.6.25-gentoo-r7 x86_64)

Revision  Changes    Path
1.1                  mail-mta/ssmtp/files/CVE-2008-3962.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/mail-mta/ssmtp/files/CVE-2008-3962.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/mail-mta/ssmtp/files/CVE-2008-3962.patch?rev=1.1&content-type=text/plain

Index: CVE-2008-3962.patch
===================================================================
--- ssmtp.orig/ssmtp.c
+++ ssmtp/ssmtp.c
@@ -485,6 +485,11 @@ char *from_format(char *str, bool_t over
 				die("from_format() -- snprintf() failed");
 			}
 		}
+		else {
+			if(snprintf(buf, BUF_SZ, "%s", str) == -1) {
+				die("from_format() -- snprintf() failed");
+			}
+		}
 	}
 
 #if 0