Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 362224 Details for
Bug 486948
<dev-libs/icu-51.2-r1 : Use-after-free vulnerability (CVE-2013-2924)
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
changeset_34076.diff
changeset_34076.diff (text/plain), 1.41 KB, created by
Chí-Thanh Christopher Nguyễn
on 2013-10-29 12:18:23 UTC
(
hide
)
Description:
changeset_34076.diff
Filename:
MIME Type:
Creator:
Chí-Thanh Christopher Nguyễn
Created:
2013-10-29 12:18:23 UTC
Size:
1.41 KB
patch
obsolete
>Index: /icu/trunk/source/i18n/csrucode.cpp >=================================================================== >--- /icu/trunk/source/i18n/csrucode.cpp (revision 34075) >+++ /icu/trunk/source/i18n/csrucode.cpp (revision 34076) >@@ -1,5 +1,5 @@ > /* > ********************************************************************** >- * Copyright (C) 2005-2012, International Business Machines >+ * Copyright (C) 2005-2013, International Business Machines > * Corporation and others. All Rights Reserved. > ********************************************************************** >@@ -34,6 +34,7 @@ > const uint8_t *input = textIn->fRawInput; > int32_t confidence = 0; >+ int32_t length = textIn->fRawLength; > >- if (input[0] == 0xFE && input[1] == 0xFF) { >+ if (length >=2 && input[0] == 0xFE && input[1] == 0xFF) { > confidence = 100; > } >@@ -58,6 +59,7 @@ > const uint8_t *input = textIn->fRawInput; > int32_t confidence = 0; >+ int32_t length = textIn->fRawLength; > >- if (input[0] == 0xFF && input[1] == 0xFE && (input[2] != 0x00 || input[3] != 0x00)) { >+ if (length >= 4 && input[0] == 0xFF && input[1] == 0xFE && (input[2] != 0x00 || input[3] != 0x00)) { > confidence = 100; > } >@@ -82,5 +84,5 @@ > int32_t confidence = 0; > >- if (getChar(input, 0) == 0x0000FEFFUL) { >+ if (limit > 0 && getChar(input, 0) == 0x0000FEFFUL) { > hasBOM = TRUE; > }
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 486948
: 362224