| 1 |
pacho 12/03/03 16:00:27 |
| 2 |
|
| 3 |
Added: rioutil-1.5.0-buffer-overflow.patch |
| 4 |
Log: |
| 5 |
Fix overflow, bug 339451 by Kevin McCarthy. |
| 6 |
|
| 7 |
(Portage version: 2.1.10.49/cvs/Linux x86_64) |
| 8 |
|
| 9 |
Revision Changes Path |
| 10 |
1.1 app-misc/rioutil/files/rioutil-1.5.0-buffer-overflow.patch |
| 11 |
|
| 12 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-misc/rioutil/files/rioutil-1.5.0-buffer-overflow.patch?rev=1.1&view=markup |
| 13 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-misc/rioutil/files/rioutil-1.5.0-buffer-overflow.patch?rev=1.1&content-type=text/plain |
| 14 |
|
| 15 |
Index: rioutil-1.5.0-buffer-overflow.patch |
| 16 |
=================================================================== |
| 17 |
flist->genre is defined as 'char genre[17]' so don't copy 22 into it |
| 18 |
|
| 19 |
Patch by Kevin McCarthy <signals42@×××××.com> |
| 20 |
|
| 21 |
--- librioutil/file_list.c |
| 22 |
+++ librioutil/file_list.c |
| 23 |
@@ -241,7 +241,7 @@ |
| 24 |
strncpy(flist->title, info.data->title, 64); |
| 25 |
strncpy(flist->album, info.data->album, 64); |
| 26 |
strncpy(flist->name, info.data->name, 64); |
| 27 |
- strncpy(flist->genre, (char *)info.data->genre2, 22); |
| 28 |
+ strncpy(flist->genre, (char *)info.data->genre2, 17); |
| 29 |
|
| 30 |
strncpy(flist->year, (char *)info.data->year2, 4); |
Archives