[packages/mhash] - fix bad coding in test - rel 5
baggins
baggins at pld-linux.org
Tue Mar 10 23:33:10 CET 2015
commit 92c5977053b741cfffa21b58c7df892250f8b213
Author: Jan Rękorajski <baggins at pld-linux.org>
Date: Tue Mar 10 23:32:53 2015 +0100
- fix bad coding in test
- rel 5
mhash.spec | 4 +++-
use-after-free.patch | 11 +++++++++++
2 files changed, 14 insertions(+), 1 deletion(-)
---
diff --git a/mhash.spec b/mhash.spec
index 3aacadd..c098dc4 100644
--- a/mhash.spec
+++ b/mhash.spec
@@ -7,12 +7,13 @@ Summary(pl.UTF-8): Biblioteka funkcji mieszających (skrótu)
Summary(pt_BR.UTF-8): Interface uniforme para vários algoritmos hash
Name: mhash
Version: 0.9.9.9
-Release: 4
+Release: 5
License: LGPL v2+
Group: Libraries
Source0: http://dl.sourceforge.net/mhash/%{name}-%{version}.tar.bz2
# Source0-md5: f91c74f9ccab2b574a98be5bc31eb280
Patch0: %{name}-shared.patch
+Patch1: use-after-free.patch
URL: http://mhash.sourceforge.net/
BuildRequires: autoconf >= 2.59
BuildRequires: automake
@@ -82,6 +83,7 @@ biblioteca mhash.
%prep
%setup -q
%patch0 -p0
+%patch1 -p1
%build
%{__libtoolize}
diff --git a/use-after-free.patch b/use-after-free.patch
new file mode 100644
index 0000000..8b726a4
--- /dev/null
+++ b/use-after-free.patch
@@ -0,0 +1,11 @@
+--- mhash-0.9.9.9/src/keygen_test.c.orig 2015-03-10 23:30:04.054905341 +0100
++++ mhash-0.9.9.9/src/keygen_test.c 2015-03-10 23:30:19.141571475 +0100
+@@ -121,8 +121,6 @@
+
+ mhash_keygen_ext(KEYGEN_S2K_SALTED, data, key, keysize, password, passlen);
+
+- mutils_memset(tmp, 0, keysize * 2);
+-
+ tmp = mutils_asciify(key, keysize);
+
+ result = mutils_strcmp((mutils_word8 *) KEY2, tmp);
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/mhash.git/commitdiff/92c5977053b741cfffa21b58c7df892250f8b213
More information about the pld-cvs-commit
mailing list