[packages/mhash] - fix bad coding in test - rel 5

baggins baggins at pld-linux.org
Tue Mar 10 23:33:10 CET 2015


commit 92c5977053b741cfffa21b58c7df892250f8b213
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Tue Mar 10 23:32:53 2015 +0100

    - fix bad coding in test
    - rel 5

 mhash.spec           |  4 +++-
 use-after-free.patch | 11 +++++++++++
 2 files changed, 14 insertions(+), 1 deletion(-)
---
diff --git a/mhash.spec b/mhash.spec
index 3aacadd..c098dc4 100644
--- a/mhash.spec
+++ b/mhash.spec
@@ -7,12 +7,13 @@ Summary(pl.UTF-8):	Biblioteka funkcji mieszających (skrótu)
 Summary(pt_BR.UTF-8):	Interface uniforme para vários algoritmos hash
 Name:		mhash
 Version:	0.9.9.9
-Release:	4
+Release:	5
 License:	LGPL v2+
 Group:		Libraries
 Source0:	http://dl.sourceforge.net/mhash/%{name}-%{version}.tar.bz2
 # Source0-md5:	f91c74f9ccab2b574a98be5bc31eb280
 Patch0:		%{name}-shared.patch
+Patch1:		use-after-free.patch
 URL:		http://mhash.sourceforge.net/
 BuildRequires:	autoconf >= 2.59
 BuildRequires:	automake
@@ -82,6 +83,7 @@ biblioteca mhash.
 %prep
 %setup -q
 %patch0 -p0
+%patch1 -p1
 
 %build
 %{__libtoolize}
diff --git a/use-after-free.patch b/use-after-free.patch
new file mode 100644
index 0000000..8b726a4
--- /dev/null
+++ b/use-after-free.patch
@@ -0,0 +1,11 @@
+--- mhash-0.9.9.9/src/keygen_test.c.orig	2015-03-10 23:30:04.054905341 +0100
++++ mhash-0.9.9.9/src/keygen_test.c	2015-03-10 23:30:19.141571475 +0100
+@@ -121,8 +121,6 @@
+ 	
+ 	mhash_keygen_ext(KEYGEN_S2K_SALTED, data, key, keysize, password, passlen);
+ 
+-	mutils_memset(tmp, 0, keysize * 2);
+-
+ 	tmp = mutils_asciify(key, keysize);
+ 
+ 	result = mutils_strcmp((mutils_word8 *) KEY2, tmp);
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/mhash.git/commitdiff/92c5977053b741cfffa21b58c7df892250f8b213



More information about the pld-cvs-commit mailing list