Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 154929 Details for
Bug 223963
mail-client/evolution < 2.12-3-r2 iCalendar Buffer Overflow Vulnerabilities (CVE-2008-{1108,1109})
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
evolution-2.12.3-CVE-2008-1109.patch
evolution-2.12.3-CVE-2008-1109.patch (text/plain), 1.39 KB, created by
Robert Buchholz (RETIRED)
on 2008-05-31 11:04:51 UTC
(
hide
)
Description:
evolution-2.12.3-CVE-2008-1109.patch
Filename:
MIME Type:
Creator:
Robert Buchholz (RETIRED)
Created:
2008-05-31 11:04:51 UTC
Size:
1.39 KB
patch
obsolete
>Index: calendar/gui/itip-utils.c >=================================================================== >--- calendar/gui/itip-utils.c.orig >+++ calendar/gui/itip-utils.c >@@ -176,50 +176,16 @@ get_attendee_if_attendee_sentby_is_user > } > > static char * >-html_new_lines_for (char *string) >+html_new_lines_for (const char *string) > { >- char *html_string = (char *) malloc (sizeof (char)* (3500)); >- int length = strlen (string); >- int index = 0; >- char *index_ptr = string; >- char *temp = string; >+ gchar **lines; >+ gchar *joined; > >- /*Find the first occurence*/ >- index_ptr = strstr ((const char *)temp, "\n"); >+ lines = g_strsplit_set (string, "\n", -1); >+ joined = g_strjoinv ("<br>", lines); >+ g_strfreev (lines); > >- /*Doesn't occur*/ >- if (index_ptr == NULL) { >- strcpy (html_string, (const char *)string); >- html_string[length] = '\0'; >- return html_string; >- } >- >- /*Split into chunks inserting <br> for \n */ >- do{ >- while (temp != index_ptr){ >- html_string[index++] = *temp; >- temp++; >- } >- temp++; >- >- html_string[index++] = '<'; >- html_string[index++] = 'b'; >- html_string[index++] = 'r'; >- html_string[index++] = '>'; >- >- index_ptr = strstr ((const char *)temp, "\n"); >- >- } while (index_ptr); >- >- /*Don't leave out the last chunk*/ >- while (*temp != '\0'){ >- html_string[index++] = *temp; >- temp++; >- } >- >- html_string[index] = '\0'; >- >- return html_string; >+ return joined; > } > > char *
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 223963
:
154593
|
154595
|
154927
| 154929 |
154995
|
154999