diff options
author | Aaron Bauman <bman@gentoo.org> | 2019-03-23 20:22:31 -0400 |
---|---|---|
committer | Aaron Bauman <bman@gentoo.org> | 2019-03-23 20:26:04 -0400 |
commit | 31e0e8db9e641bbe158add9c6d4907f2c3eb2d57 (patch) | |
tree | ff7e7a962225bfa929a8c06be2ba5974f46fa908 /mail-filter/procmail/files | |
parent | net-misc/cgminer: Use ${PKG_CONFIG} instead of pkg-config (diff) | |
download | gentoo-31e0e8db9e641bbe158add9c6d4907f2c3eb2d57.tar.gz gentoo-31e0e8db9e641bbe158add9c6d4907f2c3eb2d57.tar.bz2 gentoo-31e0e8db9e641bbe158add9c6d4907f2c3eb2d57.zip |
mail-filter/procmail: revbump to fix longstanding vulnerabilities
This patch is a combination of patches from the OSS ML and the Debian
bug tracker. Both patches and authors can be found in the below
referenced bugs.
Bug: https://bugs.gentoo.org/522114
Bug: https://bugs.gentoo.org/638108
Signed-off-by: Aaron Bauman <bman@gentoo.org>
Diffstat (limited to 'mail-filter/procmail/files')
-rw-r--r-- | mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch b/mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch new file mode 100644 index 000000000000..4f1714063c9e --- /dev/null +++ b/mail-filter/procmail/files/procmail-CVE-2014-3618-16844.patch @@ -0,0 +1,25 @@ +--- a/src/formisc.c 2019-03-23 19:52:18.450174402 -0400 ++++ b/src/formisc.c 2019-03-23 19:52:47.914351039 -0400 +@@ -84,12 +84,11 @@ + case '"':*target++=delim='"';start++; + } + ;{ int i; +- do ++ while(*start); + if((i= *target++= *start++)==delim) /* corresponding delimiter? */ + break; + else if(i=='\\'&&*start) /* skip quoted character */ + *target++= *start++; +- while(*start); /* anything? */ + } + hitspc=2; + } +@@ -104,7 +103,7 @@ + } + /* append to buf */ + void loadbuf(text,len)const char*const text;const size_t len; +-{ if(buffilled+len>buflen) /* buf can't hold the text */ ++{ while(buffilled+len>buflen) /* buf can't hold the text */ + buf=realloc(buf,buflen+=Bsize); + tmemmove(buf+buffilled,text,len);buffilled+=len; + } |