← Back to branch summary

~ubuntu-branches/ubuntu/maverick/gnutls26/maverick-updates

« back to all changes in this revision

Viewing changes to lib/opencdk/literal.c

  • Committer: Bazaar Package Importer
  • Author(s): Andreas Metzler
  • Date: 2009-08-14 19:14:29 UTC
  • mfrom: (1.1.7 upstream) (12.1.3 sid)
  • Revision ID: james.westby@ubuntu.com-20090814191429-6hovzz3oaqq101rm
Tags: 2.8.3-1
http://bugs.debian.org/540449
http://bugs.debian.org/541439
* New upstream version.
  + Stops hardcoding a hard dependency on the versions of gcrypt and tasn it
    was built against. Closes: #540449
  + Fixes CVE-2009-2730, a vulnerability related to NUL bytes in X.509
    certificate name fields. Closes: #541439        GNUTLS-SA-2009-4
    http://lists.gnu.org/archive/html/help-gnutls/2009-08/msg00011.html
* Drop 15_chainverify_expiredcert.diff, included upstream.
* Urgency high, since 541439 applies to testing, too.

Show diffs side-by-side

added added

removed removed

Lines of Context:
lib/opencdk/literal.c
1
1
/* literal.c - Literal packet filters
2
 
 * Copyright (C) 2002, 2003, 2008 Free Software Foundation, Inc.
 
2
 * Copyright (C) 2002, 2003, 2008, 2009 Free Software Foundation, Inc.
3
3
 *
4
4
 * Author: Timo Schulz
5
5
 *
199
199
 
200
200
  filelen = strlen (pfx->filename);
201
201
  cdk_pkt_new (&pkt);
202
 
  pt = pkt->pkt.literal = cdk_calloc (1, sizeof *pt + filelen - 1);
 
202
  pt = pkt->pkt.literal = cdk_calloc (1, sizeof *pt + filelen);
 
203
  pt->name = (char*) pt + sizeof(*pt);
203
204
  if (!pt)
204
205
    {
205
206
      cdk_pkt_release (pkt);