Browse Source

security fix ...

git-svn-id: http://www.rocklinux.org/svn/rock-linux/trunk@1281 c5f82cb5-29bc-0310-9cd0-bff59a50e3bc
rocklinux
Rene Rebe 21 years ago
parent
commit
c26a8b874e
1 changed files with 17 additions and 0 deletions
  1. +17
    -0
      package/base/gzip/gzip-1.2.4b.patch

+ 17
- 0
package/base/gzip/gzip-1.2.4b.patch

@ -0,0 +1,17 @@
--- gzip-1.2.4/gzip.c Thu Aug 19 15:39:43 1993
+++ gzip-1.2.4b/gzip.c Tue Jan 8 21:44:18 2002
@@ -1005,7 +1005,14 @@
#ifdef NO_MULTIPLE_DOTS
char *dot; /* pointer to ifname extension, or NULL */
#endif
+ int max_suffix_len = (z_len > 3 ? z_len : 3);
+ /* Leave enough room in ifname or ofname for suffix: */
+ if (strlen(iname) >= sizeof(ifname) - max_suffix_len) {
+ strncpy(ifname, iname, sizeof(ifname) - 1);
+ /* last byte of ifname is already zero and never overwritten */
+ error("file name too long");
+ }
strcpy(ifname, iname);
/* If input file exists, return OK. */

Loading…
Cancel
Save