[gentoo-commits] gentoo-x86 commit in net-libs/gnutls/files: gnutls-2.12.23-CVE-2013-2116.patch

[Tim Harder (radhermit)]

radhermit    13/05/30 19:56:09

  Added:                gnutls-2.12.23-CVE-2013-2116.patch
  Log:
  Revision bump to fix CVE-2013-2116 (bug #471788), drop redundant --disable-silent-rules econf option for EAPI 5 ebuilds, and run tests serially since they often fail in parallel.
  
  (Portage version: 2.2.0_alpha177/cvs/Linux x86_64, signed Manifest commit with key 4AB3E85B4F064CA3)

Revision  Changes    Path
1.1                  net-libs/gnutls/files/gnutls-2.12.23-CVE-2013-2116.patch

file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/gnutls/files/gnutls-2.12.23-CVE-2013-2116.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-libs/gnutls/files/gnutls-2.12.23-CVE-2013-2116.patch?rev=1.1&content-type=text/plain

Index: gnutls-2.12.23-CVE-2013-2116.patch
===================================================================
From 5164d5a1d57cd0372a5dd074382ca960ca18b27d Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@××××××.org>
Date: Thu, 23 May 2013 09:54:37 +0200
Subject: [PATCH] re-applied sanity check patch

---
 lib/gnutls_cipher.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/lib/gnutls_cipher.c b/lib/gnutls_cipher.c
index 2835121..71f5a98 100644
--- a/lib/gnutls_cipher.c
+++ b/lib/gnutls_cipher.c
@@ -561,6 +561,8 @@ _gnutls_ciphertext2compressed (gnutls_session_t session,
           return GNUTLS_E_DECRYPTION_FAILED;
         }
       pad = ciphertext.data[ciphertext.size - 1];   /* pad */
+      if (pad+1 > ciphertext.size-hash_size)
+        pad_failed = GNUTLS_E_DECRYPTION_FAILED;
 
       /* Check the pading bytes (TLS 1.x). 
        * Note that we access all 256 bytes of ciphertext for padding check
-- 
1.7.1