[gentoo-commits] gentoo-x86 commit in dev-libs/glib/files: glib-2.16.3-pcre-buffer-overflow.patch

[Mart Raudsepp (leio)]

leio        08/07/01 00:52:21

  Added:                glib-2.16.3-pcre-buffer-overflow.patch
  Log:
  Fix for a heap-based buffer overflow possibility in the included modified copy of PCRE, bug 230039, related to CVE-2008-2371
  (Portage version: 2.2_rc1/cvs/Linux 2.6.25-gentoo-r4 i686, RepoMan options: --force)

Revision  Changes    Path
1.1                  dev-libs/glib/files/glib-2.16.3-pcre-buffer-overflow.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-libs/glib/files/glib-2.16.3-pcre-buffer-overflow.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-libs/glib/files/glib-2.16.3-pcre-buffer-overflow.patch?rev=1.1&content-type=text/plain

Index: glib-2.16.3-pcre-buffer-overflow.patch
===================================================================
--- glib/pcre/pcre_compile.c.orig	2008-06-30 10:42:54.000000000 +0300
+++ glib/pcre/pcre_compile.c	2008-06-30 10:43:10.000000000 +0300
@@ -4699,11 +4699,11 @@ we set the flag only if there is a liter
           {
           if (code == cd->start_code + 1 + LINK_SIZE &&
                (lengthptr == NULL || *lengthptr == 2 + 2*LINK_SIZE))
             {
             cd->external_options = newoptions;
-            options = newoptions;
+            options = *optionsptr = newoptions;
             }
          else
             {
             if ((options & PCRE_IMS) != (newoptions & PCRE_IMS))
               {



-- 
gentoo-commits@l.g.o mailing list