From: "Christian Faulhammer (fauli)" <fauli@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] gentoo-x86 commit in mail-client/claws-mail/files: claws-mail-3.8.1_procmime-vuln.patch
Date: Thu, 11 Oct 2012 19:05:34 +0000 (UTC) [thread overview]
Message-ID: <20121011190534.2DE0920E47@flycatcher.gentoo.org> (raw)
fauli 12/10/11 19:05:34
Added: claws-mail-3.8.1_procmime-vuln.patch
Log:
version bump for security bug 437814 (CVE 2012-4507), null pointer exception
(Portage version: 2.1.11.9/cvs/Linux i686)
Revision Changes Path
1.1 mail-client/claws-mail/files/claws-mail-3.8.1_procmime-vuln.patch
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/mail-client/claws-mail/files/claws-mail-3.8.1_procmime-vuln.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/mail-client/claws-mail/files/claws-mail-3.8.1_procmime-vuln.patch?rev=1.1&content-type=text/plain
Index: claws-mail-3.8.1_procmime-vuln.patch
===================================================================
A specific mail in the user mbox file cause claws-mail to crash reliabily.
claws-mail-3.8.1
truncated backtrace:
:Thread no. 1 (10 frames)
: #0 strchr at ../sysdeps/x86_64/strchr.S:33
: #1 parse_parameters at procmime.c:1756
: #2 procmime_parse_content_disposition at procmime.c:1842
: #3 procmime_parse_mimepart at procmime.c:1967
: #4 procmime_parse_multipart at procmime.c:1566
: #5 procmime_parse_mimepart at procmime.c:1994
: #6 procmime_parse_message_rfc822 at procmime.c:1393
: #7 procmime_scan_file_with_offset at procmime.c:2058
: #8 procmime_scan_file_full at procmime.c:2071
: #9 procmime_scan_file at procmime.c:2078
CVE-2012-4507
Gentoo bug: https://bugs.gentoo.org/show_bug.cgi?id=437814
CVE request: http://permalink.gmane.org/gmane.comp.security.oss.general/8561
redhat bug: https://bugzilla.redhat.com/show_bug.cgi?id=862578
claws-mail bug: http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2743
--- claws-mail-3.8.1-orig/src/procmime.c 2012-06-27 11:05:22.000000000 +0200
+++ claws-mail-3.8.1/src/procmime.c 2012-10-03 18:00:09.438577924 +0200
@@ -1753,6 +1753,8 @@
continue;
charset = value;
+ if (charset == NULL)
+ continue;
lang = strchr(charset, '\'');
if (lang == NULL)
continue;
reply other threads:[~2012-10-11 19:05 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20121011190534.2DE0920E47@flycatcher.gentoo.org \
--to=fauli@gentoo.org \
--cc=gentoo-commits@lists.gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox