mirror of
https://github.com/pentoo/pentoo-overlay
synced 2025-12-16 21:33:30 +01:00
18 lines
519 B
Diff
18 lines
519 B
Diff
Description: Fix for CVE-2006-0048
|
|
Author: Cédric Delfosse <cedric@debian.org>
|
|
Origin: vendor
|
|
Bug-Debian: http://bugs.debian.org/360571
|
|
Last-Update: 2006-04-14
|
|
|
|
--- a/src/write.c
|
|
+++ b/src/write.c
|
|
@@ -244,6 +244,9 @@ out_flavour( enum FLAVOUR flavour,
|
|
if( flags.separator && ( out == stdout ) ) /* FIXME: sucks? */
|
|
color( c_SEPARATOR, stdout, SEPARATOR "\n" );
|
|
|
|
+ /* Temporary fix for CVE-2006-0048 */
|
|
+ if (buflen < 0) buflen = 0;
|
|
+
|
|
switch ( flavour ) {
|
|
case HEX_ASCII_DUMP:
|
|
out_xa( out, buf, buflen );
|