* [gentoo-commits] gentoo-x86 commit in sci-libs/ccp4-libs/files: 6.1.3-overflows.patch
@ 2010-10-04 17:02 99% Kacper Kowalik (xarthisius)
0 siblings, 0 replies; 1+ results
From: Kacper Kowalik (xarthisius) @ 2010-10-04 17:02 UTC (permalink / raw
To: gentoo-commits
xarthisius 10/10/04 17:02:08
Added: 6.1.3-overflows.patch
Log:
Fix buffer overflows wrt bug 339706. Thanks to Diego for the report.
(Portage version: 2.1.9.13/cvs/Linux x86_64)
Revision Changes Path
1.1 sci-libs/ccp4-libs/files/6.1.3-overflows.patch
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sci-libs/ccp4-libs/files/6.1.3-overflows.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sci-libs/ccp4-libs/files/6.1.3-overflows.patch?rev=1.1&content-type=text/plain
Index: 6.1.3-overflows.patch
===================================================================
Fix overflows and array subscript above array bounds
http://bugs.gentoo.org/show_bug.cgi?id=339706
--- ccp4-6.1.3/lib/ccif/f_interface.c
+++ ccp4-6.1.3/lib/ccif/f_interface.c
@@ -926,7 +926,7 @@
#endif
{
- char logname_c[81];
+ char logname_c[MAXFLEN];
size_t Length;
int unit;
CIF_FILE_LIST file_list_entry;
@@ -4064,7 +4064,7 @@
#endif
{
- char lognam_c[81], *blknam_c;
+ char lognam_c[MAXFLEN], *blknam_c;
size_t loglen, blklen;
int i, j, new;
--- ccp4-6.1.3/lib/src/ccp4_diskio_f.c
+++ ccp4-6.1.3/lib/src/ccp4_diskio_f.c
@@ -705,7 +705,7 @@
log_name = strdup("diskio.dft");
if (!(file_name = getenv(log_name)))
file_name = log_name;
- for ( *istrm = 1; *istrm == MAXFILES; *istrm++)
+ for ( *istrm = 1; *istrm < MAXFILES; *istrm++)
if (!strcmp(file_name,_ioChannels[*istrm]->iobj->name)) break;
}
if (*istrm != MAXFILES) {
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2010-10-04 17:02 99% [gentoo-commits] gentoo-x86 commit in sci-libs/ccp4-libs/files: 6.1.3-overflows.patch Kacper Kowalik (xarthisius)
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox