← Back to branch summary

~ubuntu-branches/ubuntu/trusty/expat/trusty-proposed

« back to all changes in this revision

Viewing changes to debian/patches/551936_CVE_2009_2625.dpatch

  • Committer: Package Import Robot
  • Author(s): Matthias Klose
  • Date: 2012-03-20 22:37:22 UTC
  • mfrom: (1.1.4) (5.1.7 precise)
  • Revision ID: package-import@ubuntu.com-20120320223722-wq8sq4gykhlvc8j9
Tags: 2.1.0~beta3-1
http://bugs.debian.org/663579
http://bugs.debian.org/653526
* QA upload.
* Beta release 2.1.0 beta3. Closes: #663579.
  - CVE-2012-1147 - Resource leak in readfilemap.c.
  - CVE-2012-1148 - Memory leak in poolGrow.
  - CVE-2012-0876 - Hash DOS attack.
  - Remove patches applied upstream.
* Remove Daniel from uploaders (orphaned package).
* Update package format to 3.0.
* Enable hardened build. Closes: #653526.
* Add a symbols file.
* Install expat pkgconfig file.

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/patches/551936_CVE_2009_2625.dpatch
1
 
#! /bin/sh /usr/share/dpatch/dpatch-run
2
 
## 551936_CVE_2009_2625.dpatch by Daniel Leidert (dale) <daniel.leidert@wgdd.de>
3
 
##
4
 
## All lines beginning with `## DP:' are a description of the patch.
5
 
## DP: A vulnarability allows remote attackers to cause a denial of service
6
 
## DP: infinite loop and application hang) via malformed XML input.
7
 
## DP:
8
 
## DP: <URL:http://bugs.debian.org/551936>
9
 
## DP: <URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625>
10
 
## DP: <URL:http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.15&r2=1.13>
11
 
 
12
 
@DPATCH@
13
 
diff -urNad trunk~/lib/xmltok_impl.c trunk/lib/xmltok_impl.c
14
 
--- trunk~/lib/xmltok_impl.c    2006-11-26 18:34:46.000000000 +0100
15
 
+++ trunk/lib/xmltok_impl.c     2009-10-22 21:42:41.000000000 +0200
16
 
@@ -1744,7 +1744,7 @@
17
 
                        const char *end,
18
 
                        POSITION *pos)
19
 
 {
20
 
-  while (ptr != end) {
21
 
+  while (ptr < end) {
22
 
     switch (BYTE_TYPE(enc, ptr)) {
23
 
 #define LEAD_CASE(n) \
24
 
     case BT_LEAD ## n: \