Gentoo Archives: gentoo-commits

From: Aaron Bauman <bman@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: dev-libs/libmspack/files/
Date: Sat, 05 May 2018 01:26:22
Message-Id: 1525483367.07f1f53c96e552cdb6c318b4dfdf420f9f2886f2.bman@gentoo
1 commit: 07f1f53c96e552cdb6c318b4dfdf420f9f2886f2
2 Author: Michael Mair-Keimberger <m.mairkeimberger <AT> gmail <DOT> com>
3 AuthorDate: Sat Apr 28 07:57:18 2018 +0000
4 Commit: Aaron Bauman <bman <AT> gentoo <DOT> org>
5 CommitDate: Sat May 5 01:22:47 2018 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=07f1f53c
7
8 dev-libs/libmspack: remove unused patch
9
10 Closes: https://github.com/gentoo/gentoo/pull/8178
11
12 .../files/libmspack-0.5_alpha-CVE-2017-6419.patch | 41 ----------------------
13 1 file changed, 41 deletions(-)
14
15 diff --git a/dev-libs/libmspack/files/libmspack-0.5_alpha-CVE-2017-6419.patch b/dev-libs/libmspack/files/libmspack-0.5_alpha-CVE-2017-6419.patch
16 deleted file mode 100644
17 index 1b81fdcbfcd..00000000000
18 --- a/dev-libs/libmspack/files/libmspack-0.5_alpha-CVE-2017-6419.patch
19 +++ /dev/null
20 @@ -1,41 +0,0 @@
21 -From a83773682e856ad6529ba6db8d1792e6d515d7f1 Mon Sep 17 00:00:00 2001
22 -From: Mickey Sola <msola@××××××××××.com>
23 -Date: Wed, 29 Mar 2017 14:55:26 -0400
24 -Subject: [PATCH] fixing potential OOB window write when unpacking chm files
25 -
26 ----
27 - libclamav/libmspack-0.5alpha/mspack/lzxd.c | 11 +++++++++--
28 - libclamav/libmspack.c | 6 +++++-
29 - 2 files changed, 14 insertions(+), 3 deletions(-)
30 -
31 -diff --git a/libclamav/libmspack-0.5alpha/mspack/lzxd.c b/libclamav/libmspack-0.5alpha/mspack/lzxd.c
32 -index 2281e7b9d..45105a583 100644
33 ---- a/mspack/lzxd.c
34 -+++ b/mspack/lzxd.c
35 -@@ -766,8 +766,13 @@ int lzxd_decompress(struct lzxd_stream *lzx, off_t out_bytes) {
36 - case LZX_BLOCKTYPE_UNCOMPRESSED:
37 - /* as this_run is limited not to wrap a frame, this also means it
38 - * won't wrap the window (as the window is a multiple of 32k) */
39 -+ if (window_posn + this_run > lzx->window_size) {
40 -+ D(("match ran over window boundary"))
41 -+ return lzx->error = MSPACK_ERR_DECRUNCH;
42 -+ }
43 - rundest = &window[window_posn];
44 - window_posn += this_run;
45 -+
46 - while (this_run > 0) {
47 - if ((i = i_end - i_ptr) == 0) {
48 - READ_IF_NEEDED;
49 -@@ -888,8 +893,10 @@ void lzxd_free(struct lzxd_stream *lzx) {
50 - struct mspack_system *sys;
51 - if (lzx) {
52 - sys = lzx->sys;
53 -- sys->free(lzx->inbuf);
54 -- sys->free(lzx->window);
55 -+ if(lzx->inbuf)
56 -+ sys->free(lzx->inbuf);
57 -+ if(lzx->window)
58 -+ sys->free(lzx->window);
59 - sys->free(lzx);
60 - }
61 - }