SOURCES: qt4-CVE-2007-4137.patch (NEW) - initial release

pascalek pascalek at pld-linux.org
Mon Sep 17 10:01:20 CEST 2007


Author: pascalek                     Date: Mon Sep 17 08:01:20 2007 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- initial release

---- Files affected:
SOURCES:
   qt4-CVE-2007-4137.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/qt4-CVE-2007-4137.patch
diff -u /dev/null SOURCES/qt4-CVE-2007-4137.patch:1.1
--- /dev/null	Mon Sep 17 10:01:20 2007
+++ SOURCES/qt4-CVE-2007-4137.patch	Mon Sep 17 10:01:15 2007
@@ -0,0 +1,12 @@
+diff -Nur qt-x11-opensource-src-4.3.1.orig/src/corelib/codecs/qutfcodec.cpp qt-x11-opensource-src-4.3.1.chng/src/corelib/codecs/qutfcodec.cpp
+--- qt-x11-opensource-src-4.3.1.orig/src/corelib/codecs/qutfcodec.cpp	2007-08-07 15:08:39.000000000 +0200
++++ qt-x11-opensource-src-4.3.1.chng/src/corelib/codecs/qutfcodec.cpp	2007-09-17 09:56:04.000000000 +0200
+@@ -165,7 +165,7 @@
+ 
+     int originalLength = target->length();
+     QString &result = *target;
+-    result.resize(originalLength + len); // worst case
++    result.resize(originalLength + len + 1); // worst case
+     QChar *qch = result.data() + originalLength;
+     uchar ch;
+     int invalid = 0;
================================================================


More information about the pld-cvs-commit mailing list