From bd01acb531d52447bf5a41a2948a114695d0042a Mon Sep 17 00:00:00 2001 From: "Alan J. Wylie" Date: Mon, 11 Jul 2005 16:59:02 +0000 Subject: [PATCH] alanw: patch to fix security vulnerability in inftrees.c http://secunia.com/advisories/15949/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096 [2005071015401216666] (https://www.rocklinux.net/submaster) git-svn-id: http://www.rocklinux.org/svn/rock-linux/trunk@6215 c5f82cb5-29bc-0310-9cd0-bff59a50e3bc --- package/base/zlib/inftrees.patch | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 package/base/zlib/inftrees.patch diff --git a/package/base/zlib/inftrees.patch b/package/base/zlib/inftrees.patch new file mode 100644 index 000000000..b8e0b527a --- /dev/null +++ b/package/base/zlib/inftrees.patch @@ -0,0 +1,12 @@ +diff -Naur zlib-1.2.2/inftrees.c zlib-1.2.2.new/inftrees.c +--- zlib-1.2.2/inftrees.c 2004-09-15 15:30:06.000000000 +0100 ++++ zlib-1.2.2.new/inftrees.c 2005-07-10 14:30:32.000000000 +0100 +@@ -134,7 +134,7 @@ + left -= count[len]; + if (left < 0) return -1; /* over-subscribed */ + } +- if (left > 0 && (type == CODES || (codes - count[0] != 1))) ++ if (left > 0 && (type == CODES || max != 1)) + return -1; /* incomplete set */ + + /* generate offsets into symbol table for each length for sorting */