[packages/wget] fix for double free in free_vec
draenog
draenog at pld-linux.org
Mon Apr 20 20:23:42 CEST 2015
commit f813fc4fd0d14eb559ab6467b2e8a4a4ef9ea519
Author: Kacper Kornet <draenog at pld-linux.org>
Date: Mon Apr 20 19:20:56 2015 +0100
fix for double free in free_vec
wget-free.patch | 26 ++++++++++++++++++++++++++
wget.spec | 4 +++-
2 files changed, 29 insertions(+), 1 deletion(-)
---
diff --git a/wget.spec b/wget.spec
index 9f7ea7c..48b44a4 100644
--- a/wget.spec
+++ b/wget.spec
@@ -18,7 +18,7 @@ Summary(uk.UTF-8): Утиліта для отримання файлів по п
Summary(zh_CN.UTF-8): [通讯]功能强大的下载程序,支持断点续传
Name: wget
Version: 1.16.3
-Release: 2
+Release: 3
License: GPL v3+ with OpenSSL exception
Group: Networking/Utilities
Source0: http://ftp.gnu.org/gnu/wget/%{name}-%{version}.tar.xz
@@ -30,6 +30,7 @@ Patch1: %{name}-wgetrc_path.patch
Patch2: %{name}-home_etc.patch
Patch3: %{name}-ssl-certs.patch
Patch4: user.xdg.origin.url.patch
+Patch5: %{name}-free.patch
URL: http://www.gnu.org/software/wget/
BuildRequires: attr-devel
BuildRequires: autoconf >= 2.61
@@ -134,6 +135,7 @@ Proxy серверів, настроюваність.
%patch2 -p1
%patch3 -p1
%patch4 -p1
+%patch5 -p1
%{__rm} doc/wget.info doc/sample.wgetrc.munged_for_texi_inclusion po/stamp-po
diff --git a/wget-free.patch b/wget-free.patch
new file mode 100644
index 0000000..f4cc07c
--- /dev/null
+++ b/wget-free.patch
@@ -0,0 +1,26 @@
+commit ac40b84ee138d45379046e21e31d237f6937a014
+Author: Hubert Tarasiuk <hubert.tarasiuk at gmail.com>
+Date: Fri Apr 10 11:52:34 2015 +0200
+
+ Fix error in free_vec.
+
+ * src/utils.c (free_vec): Increment pointer instead of its value.
+
+ Reported-by: Gisle Vanem <gvanem at yahoo.no>
+
+diff --git a/src/utils.c b/src/utils.c
+index 617f547..3c8f4f9 100644
+--- a/src/utils.c
++++ b/src/utils.c
+@@ -1284,7 +1284,10 @@ free_vec (char **vec)
+ {
+ char **p = vec;
+ while (*p)
+- xfree (*p++);
++ {
++ xfree (*p);
++ p++;
++ }
+ xfree (vec);
+ }
+ }
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/wget.git/commitdiff/f813fc4fd0d14eb559ab6467b2e8a4a4ef9ea519
More information about the pld-cvs-commit
mailing list