Gentoo Archives: gentoo-commits

From: "Federico Ferri (mescalinum)" <mescalinum@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in dev-libs/newt/files: newt-CVE-2009-2905.patch
Date: Wed, 07 Oct 2009 17:25:12
Message-Id: E1MvaGE-0006na-OX@stork.gentoo.org
1 mescalinum 09/10/07 17:25:10
2
3 Added: newt-CVE-2009-2905.patch
4 Log:
5 CVE-2009-2905, bug #285854
6 (Portage version: 2.2_rc40/cvs/Linux x86_64)
7
8 Revision Changes Path
9 1.1 dev-libs/newt/files/newt-CVE-2009-2905.patch
10
11 file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-libs/newt/files/newt-CVE-2009-2905.patch?rev=1.1&view=markup
12 plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-libs/newt/files/newt-CVE-2009-2905.patch?rev=1.1&content-type=text/plain
13
14 Index: newt-CVE-2009-2905.patch
15 ===================================================================
16 diff -up newt-0.52.10/textbox.c.orig newt-0.52.10/textbox.c
17 --- newt-0.52.10/textbox.c.orig 2008-07-30 14:42:55.000000000 +0200
18 +++ newt-0.52.10/textbox.c 2009-09-21 14:59:24.000000000 +0200
19 @@ -179,7 +179,7 @@ static void doReflow(const char * text,
20
21 if (resultPtr) {
22 /* XXX I think this will work */
23 - result = malloc(strlen(text) + (strlen(text) / width) + 2);
24 + result = malloc(strlen(text) + (strlen(text) / (width - 1)) + 2);
25 *result = '\0';
26 }