[gentoo-commits] gentoo-x86 commit in media-sound/orpheus/files: 101_fix-buffer-overflow.diff digest-orpheus-1.6-r1

[Samuli Suominen (drac)]

drac        07/11/06 21:14:01

  Added:                101_fix-buffer-overflow.diff digest-orpheus-1.6-r1
  Log:
  Fix security bug 113683, CVE-2005-3863, a stack-based buffer overflow in kkstrtext.h in ktools library and stabilize amd64.
  (Portage version: 2.1.3.18, RepoMan options: --force)

Revision  Changes    Path
1.1                  media-sound/orpheus/files/101_fix-buffer-overflow.diff

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-sound/orpheus/files/101_fix-buffer-overflow.diff?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-sound/orpheus/files/101_fix-buffer-overflow.diff?rev=1.1&content-type=text/plain

Index: 101_fix-buffer-overflow.diff
===================================================================
Fix a stack-based buffer overflow in kkstrtext.h in ktools library.
(CVE-2005-3863) (Closes: #368402)
Index: orpheus-1.5/kkstrtext-0.1/kkstrtext.h
===================================================================
--- orpheus-1.5.orig/kkstrtext-0.1/kkstrtext.h	2003-12-14 11:51:38.000000000 +0100
+++ orpheus-1.5/kkstrtext-0.1/kkstrtext.h	2006-08-01 21:57:14.000000000 +0200
@@ -87,7 +87,7 @@
     { \
 	va_list vgs__ap; char vgs__buf[1024]; \
 	va_start(vgs__ap, fmt); \
-	vsprintf(vgs__buf, fmt, vgs__ap); c = vgs__buf; \
+	vsnprintf(vgs__buf, 1024, fmt, vgs__ap); c = vgs__buf; \
 	va_end(vgs__ap); \
     }
 



1.1                  media-sound/orpheus/files/digest-orpheus-1.6-r1

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-sound/orpheus/files/digest-orpheus-1.6-r1?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/media-sound/orpheus/files/digest-orpheus-1.6-r1?rev=1.1&content-type=text/plain

Index: digest-orpheus-1.6-r1
===================================================================
MD5 718b57d507d4dfae5008e7fb53f7b840 orpheus-1.6.tar.gz 440553
RMD160 bd1b04f8c1195074e648d1ed8731970f512e120a orpheus-1.6.tar.gz 440553
SHA256 18a6a4b0171c8a2a5a09be6e2cd8fc781c145fde1b266e43a9902fef10ee6ff5 orpheus-1.6.tar.gz 440553



-- 
gentoo-commits@g.o mailing list