SOURCES: udev-encoding-overflow.patch (NEW) - fix for CVE-2009-1186 for ude...

hawk hawk at pld-linux.org
Sat Apr 25 14:08:38 CEST 2009


Author: hawk                         Date: Sat Apr 25 12:08:38 2009 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- fix for CVE-2009-1186 for udev 124, taken from Gentoo

---- Files affected:
SOURCES:
   udev-encoding-overflow.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/udev-encoding-overflow.patch
diff -u /dev/null SOURCES/udev-encoding-overflow.patch:1.1
--- /dev/null	Sat Apr 25 14:08:38 2009
+++ SOURCES/udev-encoding-overflow.patch	Sat Apr 25 14:08:32 2009
@@ -0,0 +1,13 @@
+diff --git a/udev_utils_string.c b/udev_utils_string.c
+index e3dc137..0995da5 100644
+--- a/udev_utils_string.c
++++ b/udev_utils_string.c
+@@ -52,7 +52,7 @@ void remove_trailing_chars(char *path, char c)
+ 
+ size_t path_encode(char *s, size_t len)
+ {
+-	char t[(len * 3)+1];
++	char t[(len * 4)+1];
+ 	size_t i, j;
+ 
+ 	t[0] = '\0';
================================================================


More information about the pld-cvs-commit mailing list