Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 190333 Details for
Bug 268643
<dev-libs/apr-util-1.3.5: Off-by-one in apr_brigade_vprintf() (CVE-2009-1956)
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch to remove an unnessary null terminator that causes a buffer overflow.
1.3.4-apr_brigade_vprintf-skip_null_terminator.patch (text/plain), 507 bytes, created by
Duncan Exon Smith
on 2009-05-04 17:51:05 UTC
(
hide
)
Description:
Patch to remove an unnessary null terminator that causes a buffer overflow.
Filename:
MIME Type:
Creator:
Duncan Exon Smith
Created:
2009-05-04 17:51:05 UTC
Size:
507 bytes
patch
obsolete
>diff --unified -r apr-util-1.3.4/buckets/apr_brigade.c apr-util-1.3.4/buckets/apr_brigade.c >--- apr-util-1.3.4/buckets/apr_brigade.c 2008-05-28 17:15:35.000000000 -0400 >+++ apr-util-1.3.4/buckets/apr_brigade.c 2009-05-04 13:12:06.000000000 -0400 >@@ -689,9 +689,6 @@ > return -1; > } > >- /* tack on null terminator to remaining string */ >- *(vd.vbuff.curpos) = '\0'; >- > /* write out what remains in the buffer */ > return apr_brigade_write(b, flush, ctx, buf, vd.vbuff.curpos - buf); > }
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 268643
: 190333