/[pkgs]/devel/texlive/texlive-poolfix.patch
ViewVC logotype

Contents of /devel/texlive/texlive-poolfix.patch

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.2 - (show annotations) (download) (as text)
Fri Oct 16 05:36:20 2009 UTC (5 weeks, 2 days ago) by jnovy
Branch: MAIN
CVS Tags: texlive-2007-46_fc13, texlive-2007-47_fc13, texlive-2007-45_fc13, HEAD
Changes since 1.1: +16 -51 lines
File MIME type: text/x-patch
* Thu Oct 15 2009 Jindrich Novy <jnovy@redhat.com> 2007-45
- make kpathsea not dependent on texlive
- fix lacheck again (#451513)
- fix dvips configuration (#467542)
- update kpathsea description and summary (#519257)
- use upstream patch to fix pool overflow CVE-2009-1284 (#492136)
1 diff -up texlive-2007/texk/web2c/bibtex.ch.poolfix texlive-2007/texk/web2c/bibtex.ch
2 --- texlive-2007/texk/web2c/bibtex.ch.poolfix 2006-12-27 00:37:34.000000000 +0100
3 +++ texlive-2007/texk/web2c/bibtex.ch 2009-10-16 06:55:52.000000000 +0200
4 @@ -1134,6 +1134,15 @@ while ((ex_buf_xptr < ex_buf_ptr) and
5 @y
6 @z
7
8 +% Forgot to check for pool overflow here. Triggered by test case linked
9 +% from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520920.
10 +@x
11 +while (sp_ptr < sp_end) do {shift the substring}
12 +@y
13 +str_room(sp_end - sp_ptr);
14 +while (sp_ptr < sp_end) do {shift the substring}
15 +@z
16 +
17 % [459] Eliminate unreferenced statement label, because `undefined' is
18 % now a constant expression that is not evaluated at the Web level. If
19 % this label were ever required, it could be replaced by the constant

admin@fedoraproject.org
ViewVC Help
Powered by ViewVC 1.1.2