summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAaron Bauman <bman@gentoo.org>2019-03-23 20:22:31 -0400
committerAaron Bauman <bman@gentoo.org>2019-03-23 20:26:04 -0400
commit31e0e8db9e641bbe158add9c6d4907f2c3eb2d57 (patch)
treeff7e7a962225bfa929a8c06be2ba5974f46fa908 /mail-filter/procmail/files
parentnet-misc/cgminer: Use ${PKG_CONFIG} instead of pkg-config (diff)
downloadgentoo-31e0e8db9e641bbe158add9c6d4907f2c3eb2d57.tar.gz
gentoo-31e0e8db9e641bbe158add9c6d4907f2c3eb2d57.tar.bz2
gentoo-31e0e8db9e641bbe158add9c6d4907f2c3eb2d57.zip
mail-filter/procmail: revbump to fix longstanding vulnerabilities
This patch is a combination of patches from the OSS ML and the Debian bug tracker. Both patches and authors can be found in the below referenced bugs. Bug: https://bugs.gentoo.org/522114 Bug: https://bugs.gentoo.org/638108 Signed-off-by: Aaron Bauman <bman@gentoo.org>
Diffstat (limited to 'mail-filter/procmail/files')
-rw-r--r--mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch25
1 files changed, 25 insertions, 0 deletions
diff --git a/mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch b/mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch
new file mode 100644
index 000000000000..4f1714063c9e
--- /dev/null
+++ b/mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch
@@ -0,0 +1,25 @@
+--- a/src/formisc.c 2019-03-23 19:52:18.450174402 -0400
++++ b/src/formisc.c 2019-03-23 19:52:47.914351039 -0400
+@@ -84,12 +84,11 @@
+ case '"':*target++=delim='"';start++;
+ }
+ ;{ int i;
+- do
++ while(*start);
+ if((i= *target++= *start++)==delim) /* corresponding delimiter? */
+ break;
+ else if(i=='\\'&&*start) /* skip quoted character */
+ *target++= *start++;
+- while(*start); /* anything? */
+ }
+ hitspc=2;
+ }
+@@ -104,7 +103,7 @@
+ }
+ /* append to buf */
+ void loadbuf(text,len)const char*const text;const size_t len;
+-{ if(buffilled+len>buflen) /* buf can't hold the text */
++{ while(buffilled+len>buflen) /* buf can't hold the text */
+ buf=realloc(buf,buflen+=Bsize);
+ tmemmove(buf+buffilled,text,len);buffilled+=len;
+ }