1 |
commit: 07f1f53c96e552cdb6c318b4dfdf420f9f2886f2 |
2 |
Author: Michael Mair-Keimberger <m.mairkeimberger <AT> gmail <DOT> com> |
3 |
AuthorDate: Sat Apr 28 07:57:18 2018 +0000 |
4 |
Commit: Aaron Bauman <bman <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat May 5 01:22:47 2018 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=07f1f53c |
7 |
|
8 |
dev-libs/libmspack: remove unused patch |
9 |
|
10 |
Closes: https://github.com/gentoo/gentoo/pull/8178 |
11 |
|
12 |
.../files/libmspack-0.5_alpha-CVE-2017-6419.patch | 41 ---------------------- |
13 |
1 file changed, 41 deletions(-) |
14 |
|
15 |
diff --git a/dev-libs/libmspack/files/libmspack-0.5_alpha-CVE-2017-6419.patch b/dev-libs/libmspack/files/libmspack-0.5_alpha-CVE-2017-6419.patch |
16 |
deleted file mode 100644 |
17 |
index 1b81fdcbfcd..00000000000 |
18 |
--- a/dev-libs/libmspack/files/libmspack-0.5_alpha-CVE-2017-6419.patch |
19 |
+++ /dev/null |
20 |
@@ -1,41 +0,0 @@ |
21 |
-From a83773682e856ad6529ba6db8d1792e6d515d7f1 Mon Sep 17 00:00:00 2001 |
22 |
-From: Mickey Sola <msola@××××××××××.com> |
23 |
-Date: Wed, 29 Mar 2017 14:55:26 -0400 |
24 |
-Subject: [PATCH] fixing potential OOB window write when unpacking chm files |
25 |
- |
26 |
---- |
27 |
- libclamav/libmspack-0.5alpha/mspack/lzxd.c | 11 +++++++++-- |
28 |
- libclamav/libmspack.c | 6 +++++- |
29 |
- 2 files changed, 14 insertions(+), 3 deletions(-) |
30 |
- |
31 |
-diff --git a/libclamav/libmspack-0.5alpha/mspack/lzxd.c b/libclamav/libmspack-0.5alpha/mspack/lzxd.c |
32 |
-index 2281e7b9d..45105a583 100644 |
33 |
---- a/mspack/lzxd.c |
34 |
-+++ b/mspack/lzxd.c |
35 |
-@@ -766,8 +766,13 @@ int lzxd_decompress(struct lzxd_stream *lzx, off_t out_bytes) { |
36 |
- case LZX_BLOCKTYPE_UNCOMPRESSED: |
37 |
- /* as this_run is limited not to wrap a frame, this also means it |
38 |
- * won't wrap the window (as the window is a multiple of 32k) */ |
39 |
-+ if (window_posn + this_run > lzx->window_size) { |
40 |
-+ D(("match ran over window boundary")) |
41 |
-+ return lzx->error = MSPACK_ERR_DECRUNCH; |
42 |
-+ } |
43 |
- rundest = &window[window_posn]; |
44 |
- window_posn += this_run; |
45 |
-+ |
46 |
- while (this_run > 0) { |
47 |
- if ((i = i_end - i_ptr) == 0) { |
48 |
- READ_IF_NEEDED; |
49 |
-@@ -888,8 +893,10 @@ void lzxd_free(struct lzxd_stream *lzx) { |
50 |
- struct mspack_system *sys; |
51 |
- if (lzx) { |
52 |
- sys = lzx->sys; |
53 |
-- sys->free(lzx->inbuf); |
54 |
-- sys->free(lzx->window); |
55 |
-+ if(lzx->inbuf) |
56 |
-+ sys->free(lzx->inbuf); |
57 |
-+ if(lzx->window) |
58 |
-+ sys->free(lzx->window); |
59 |
- sys->free(lzx); |
60 |
- } |
61 |
- } |