public inbox for gentoo-commits@lists.gentoo.org
 help / color / mirror / Atom feed
* [gentoo-commits] gentoo-x86 commit in net-im/centerim/files: centerim-4.22.7-libgadu-CVE-2008-4776.patch
@ 2009-04-05 10:18 Sven Wegener (swegener)
  0 siblings, 0 replies; 2+ messages in thread
From: Sven Wegener (swegener) @ 2009-04-05 10:18 UTC (permalink / raw
  To: gentoo-commits

swegener    09/04/05 10:18:56

  Added:                centerim-4.22.7-libgadu-CVE-2008-4776.patch
  Log:
  Revision bump, security bug #264607.
  (Portage version: 2.2_rc28/cvs/Linux x86_64)

Revision  Changes    Path
1.1                  net-im/centerim/files/centerim-4.22.7-libgadu-CVE-2008-4776.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-im/centerim/files/centerim-4.22.7-libgadu-CVE-2008-4776.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-im/centerim/files/centerim-4.22.7-libgadu-CVE-2008-4776.patch?rev=1.1&content-type=text/plain

Index: centerim-4.22.7-libgadu-CVE-2008-4776.patch
===================================================================
https://bugs.gentoo.org/264607
https://bugs.gentoo.org/244888

--- centerim-4.22.7/libgadu/events.c
+++ centerim-4.22.7/libgadu/events.c
@@ -578,7 +578,7 @@
 				if (GG_S_D(n->status)) {
 					unsigned char descr_len = *((char*) n + sizeof(struct gg_notify_reply60));
 
-					if (descr_len < length) {
+					if (sizeof(struct gg_notify_reply60) + descr_len < length) {
 						if (!(e->event.notify60[i].descr = malloc(descr_len + 1))) {
 							gg_debug(GG_DEBUG_MISC, "// gg_watch_fd_connected() not enough memory for notify data\n");
 							goto fail;






^ permalink raw reply	[flat|nested] 2+ messages in thread

* [gentoo-commits] gentoo-x86 commit in net-im/centerim/files: centerim-4.22.7-libgadu-CVE-2008-4776.patch
@ 2011-03-12 13:29 Sven Wegener (swegener)
  0 siblings, 0 replies; 2+ messages in thread
From: Sven Wegener (swegener) @ 2011-03-12 13:29 UTC (permalink / raw
  To: gentoo-commits

swegener    11/03/12 13:29:59

  Removed:              centerim-4.22.7-libgadu-CVE-2008-4776.patch
  Log:
  Cleanup.
  
  (Portage version: 2.2.0_alpha26/cvs/Linux x86_64)



^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2011-03-12 13:30 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-03-12 13:29 [gentoo-commits] gentoo-x86 commit in net-im/centerim/files: centerim-4.22.7-libgadu-CVE-2008-4776.patch Sven Wegener (swegener)
  -- strict thread matches above, loose matches on Subject: below --
2009-04-05 10:18 Sven Wegener (swegener)

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox