diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2018-09-10 08:55:40 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2018-09-15 19:03:30 +0000 |
| commit | 3a7af8e23991602dc2ea89818a625b98bcebe8e2 (patch) | |
| tree | 5741d8e35bb98b7fbe96bbeb0de25de7d544e4d4 | |
| parent | Adding debian version 1.3-4. (diff) | |
| download | zutils-3a7af8e23991602dc2ea89818a625b98bcebe8e2.tar.xz zutils-3a7af8e23991602dc2ea89818a625b98bcebe8e2.zip | |
Adding patch from upstream to fix a buffer overrun in zcat [CVE-2018-1000637] (Closes: #902936).
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
| -rw-r--r-- | debian/patches/0003-zcat-buffer-overrun.patch | 18 | ||||
| -rw-r--r-- | debian/patches/series | 1 |
2 files changed, 19 insertions, 0 deletions
diff --git a/debian/patches/0003-zcat-buffer-overrun.patch b/debian/patches/0003-zcat-buffer-overrun.patch new file mode 100644 index 0000000..230987f --- /dev/null +++ b/debian/patches/0003-zcat-buffer-overrun.patch @@ -0,0 +1,18 @@ +Author: Antonio Diaz-Diaz <antonio@gnu.org> +Description: zcat.cc: Fixed a buffer overrun on outbuf when '-v' is used [CVE-2018-1000637] (Closes: #902936). + +diff -Naurp zutils.orig/zcat.cc zutils/zcat.cc +--- zutils.orig/zcat.cc ++++ zutils/zcat.cc +@@ -229,8 +229,9 @@ int cat( int infd, const int format_inde + enum { buffer_size = 4096 }; + // buffer with space for sentinel newline at the end + uint8_t * const inbuf = new uint8_t[buffer_size+1]; +- // buffer with space for character quoting and 255-digit line number +- uint8_t * const outbuf = new uint8_t[(4*buffer_size)+256]; ++ // buffer with space for character quoting, 255-digit line number and ++ // worst case flushing respect to inbuf. ++ uint8_t * const outbuf = new uint8_t[(5*buffer_size)+256]; + int retval = 0; + Children children; + if( !set_data_feeder( &infd, children, format_index ) ) retval = 1; diff --git a/debian/patches/series b/debian/patches/series index 202a17f..71e5023 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -1,2 +1,3 @@ 0001-build.patch 0002-zupdate.patch +0003-zcat-buffer-overrun.patch |