SOURCES: dhcpcd-security.patch (NEW) - security patch from Debian/...

blues blues at pld-linux.org
Wed Jul 27 22:57:10 CEST 2005


Author: blues                        Date: Wed Jul 27 20:57:08 2005 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- security patch from Debian/Gentoo (CAN-2005-1848)

---- Files affected:
SOURCES:
   dhcpcd-security.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/dhcpcd-security.patch
diff -u /dev/null SOURCES/dhcpcd-security.patch:1.1
--- /dev/null	Wed Jul 27 22:57:08 2005
+++ SOURCES/dhcpcd-security.patch	Wed Jul 27 22:57:03 2005
@@ -0,0 +1,11 @@
+--- client.c.orig	2005-07-10 10:16:43.000000000 +0100
++++ client.c	2005-07-10 10:22:31.000000000 +0100
+@@ -129,6 +129,8 @@
+        	default:
+ 	  if ( p[1] )
+ 	    {
++	      if (p + 2 + p[1] >= end)
++		  goto swend; /* Corrupt packet */
+ 	      if ( DhcpOptions.len[*p] == p[1] )
+ 	        memcpy(DhcpOptions.val[*p],p+2,p[1]);
+ 	      else
================================================================



More information about the pld-cvs-commit mailing list