You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
43 lines
1.4 KiB
43 lines
1.4 KiB
# --- SDE-COPYRIGHT-NOTE-BEGIN --- |
|
# This copyright note is auto-generated by ./scripts/Create-CopyPatch. |
|
# |
|
# Filename: package/.../gv/CVE-2006-5864.patch |
|
# Copyright (C) 2006 The OpenSDE Project |
|
# |
|
# More information can be found in the files COPYING and README. |
|
# |
|
# This patch file is dual-licensed. It is available under the license the |
|
# patched project is licensed under, as long as it is an OpenSource license |
|
# as defined at http://www.opensource.org/ (e.g. BSD, X11) or under the terms |
|
# of the GNU General Public License as published by the Free Software |
|
# Foundation; either version 2 of the License, or (at your option) any later |
|
# version. |
|
# --- SDE-COPYRIGHT-NOTE-END --- |
|
|
|
CVE-2006-5864 from submaster by daja77 |
|
https://www.rocklinux.net/submaster/index.websplb?mode=patch&uid=2006112114050583380 |
|
|
|
--- ./src/ps.c.sec2 2006-11-09 17:31:34.000000000 +0000 |
|
+++ ./src/ps.c 2006-11-09 17:37:07.000000000 +0000 |
|
@@ -1423,6 +1423,8 @@ |
|
quoted=1; |
|
line++; |
|
while (*line && !(*line == ')' && level == 0 )) { |
|
+ if (cp - text >= PSLINELENGTH - 2) |
|
+ break; |
|
if (*line == '\\') { |
|
if (*(line+1) == 'n') { |
|
*cp++ = '\n'; |
|
@@ -1477,8 +1479,11 @@ |
|
} |
|
} |
|
} else { |
|
- while (*line && !(*line == ' ' || *line == '\t' || *line == '\n')) |
|
+ while (*line && !(*line == ' ' || *line == '\t' || *line == '\n')) { |
|
+ if (cp - text >= PSLINELENGTH - 2) |
|
+ break; |
|
*cp++ = *line++; |
|
+ } |
|
} |
|
*cp = '\0'; |
|
if (next_char) *next_char = line;
|
|
|