fix buffer overflow, #72371

diff --git a/net-p2p/opendchub/ChangeLog b/net-p2p/opendchub/ChangeLog
index ef2afd22d60dd95de48129ba4b5d733101dc3052..5859124e18d2d55f05ee8c88f00db418984eda23 100644 (file)
--- a/net-p2p/opendchub/ChangeLog
+++ b/net-p2p/opendchub/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-p2p/opendchub
 # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/ChangeLog,v 1.10 2004/10/18 12:31:23 weeve Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/ChangeLog,v 1.11 2004/11/27 15:59:34 squinky86 Exp $
+
+*opendchub-0.7.14-r2 (27 Nov 2004)
+
+  27 Nov 2004; Jon Hood <squinky86@gentoo.org> +files/0.7.14-overflow.patch,
+  -opendchub-0.7.14-r1.ebuild, +opendchub-0.7.14-r2.ebuild:
+  Fix buffer overflow, #72371. Thanks JG <jg@cms.ac> and lewk.
 
   18 Oct 2004; Jason Wever <weeve@gentoo.org> opendchub-0.7.14-r1.ebuild:
   Added ~sparc keyword, resolves bug #66923.

diff --git a/net-p2p/opendchub/Manifest b/net-p2p/opendchub/Manifest
index 43faa1d587cc274ad446f9a4c89b61e7a2d91b2c..8e21566f337c16c3c8dc0bbb657103f2606028e2 100644 (file)
--- a/net-p2p/opendchub/Manifest
+++ b/net-p2p/opendchub/Manifest
@@ -1,7 +1,8 @@
+MD5 de62cc840c860e435d83c7fdce187960 opendchub-0.7.14-r2.ebuild 1203
 MD5 2ed05eb15375c2143873d7b66032d1e6 ChangeLog 1201
 MD5 8abcb326775f027b2e13f23344036e34 metadata.xml 224
-MD5 f7be65dee1fa1447f4147cdcae627fce opendchub-0.7.14-r1.ebuild 1162
-MD5 75859d782548bffdb8575c89649978e3 files/opendchub-gentoo.patch 873
 MD5 e4fcbf6d8443605a548547abee4903e5 files/opendchub_setup.sh 556
+MD5 75859d782548bffdb8575c89649978e3 files/opendchub-gentoo.patch 873
+MD5 b3f6c1cbb5fe9b71718857859086b680 files/0.7.14-overflow.patch 421
+MD5 a2d8a9229bd7080e20a266ce68778903 files/digest-opendchub-0.7.14-r2 68
 MD5 796b8b6feea2a657348eb4ee6b9d102e files/0.7.14-telnet.patch 540
-MD5 a2d8a9229bd7080e20a266ce68778903 files/digest-opendchub-0.7.14-r1 68

diff --git a/net-p2p/opendchub/files/0.7.14-overflow.patch b/net-p2p/opendchub/files/0.7.14-overflow.patch
new file mode 100644 (file)
index 0000000..996ff65
--- /dev/null
+++ b/net-p2p/opendchub/files/0.7.14-overflow.patch
@@ -0,0 +1,12 @@
+diff -Naur opendchub-0.7.14.vanilla/src/commands.c opendchub-0.7.14/src/commands.c
+--- opendchub-0.7.14.vanilla/src/commands.c    2003-11-15 08:07:43.000000000 -0600
++++ opendchub-0.7.14/src/commands.c    2004-11-27 09:54:57.113410240 -0600
+@@ -2842,7 +2842,7 @@
+ {
+    char move_string[MAX_HOST_LEN+20];
+    
+-   sprintf(move_string, "$ForceMove %s", buf);
++   snprintf(move_string, MAX_HOST_LEN, "$ForceMove %s", buf);
+  
+    send_to_humans(move_string, REGULAR | REGISTERED | OP, user);
+    remove_all(UNKEYED | NON_LOGGED | REGULAR | REGISTERED | OP, 1, 1);

diff --git a/net-p2p/opendchub/files/digest-opendchub-0.7.14-r1 b/net-p2p/opendchub/files/digest-opendchub-0.7.14-r2
similarity index 100%
rename from net-p2p/opendchub/files/digest-opendchub-0.7.14-r1
rename to net-p2p/opendchub/files/digest-opendchub-0.7.14-r2

diff --git a/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild b/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild
similarity index 91%
rename from net-p2p/opendchub/opendchub-0.7.14-r1.ebuild
rename to net-p2p/opendchub/opendchub-0.7.14-r2.ebuild
index 8f6cbb209772c0ef75fd380ef25c4e651bfcea9b..b97a556936780c3b4542b831089aaedd89b5fbd5 100644 (file)
--- a/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild
+++ b/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild,v 1.3 2004/10/18 12:31:23 weeve Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild,v 1.1 2004/11/27 15:59:34 squinky86 Exp $
 
 inherit eutils
 
@@ -21,6 +21,7 @@ src_unpack() {
        cd ${S}
        epatch ${FILESDIR}/opendchub-gentoo.patch
        epatch ${FILESDIR}/${PV}-telnet.patch
+       epatch ${FILESDIR}/${PV}-overflow.patch
 }
 
 src_compile() {