From bdec5298215d4b999f318558642937eafd26ebff Mon Sep 17 00:00:00 2001 From: Jon Hood Date: Sat, 27 Nov 2004 15:59:34 +0000 Subject: [PATCH] fix buffer overflow, #72371 --- net-p2p/opendchub/ChangeLog | 8 +++++++- net-p2p/opendchub/Manifest | 7 ++++--- net-p2p/opendchub/files/0.7.14-overflow.patch | 12 ++++++++++++ ...pendchub-0.7.14-r1 => digest-opendchub-0.7.14-r2} | 0 ...b-0.7.14-r1.ebuild => opendchub-0.7.14-r2.ebuild} | 3 ++- 5 files changed, 25 insertions(+), 5 deletions(-) create mode 100644 net-p2p/opendchub/files/0.7.14-overflow.patch rename net-p2p/opendchub/files/{digest-opendchub-0.7.14-r1 => digest-opendchub-0.7.14-r2} (100%) rename net-p2p/opendchub/{opendchub-0.7.14-r1.ebuild => opendchub-0.7.14-r2.ebuild} (91%) diff --git a/net-p2p/opendchub/ChangeLog b/net-p2p/opendchub/ChangeLog index ef2afd22d60d..5859124e18d2 100644 --- a/net-p2p/opendchub/ChangeLog +++ b/net-p2p/opendchub/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for net-p2p/opendchub # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/ChangeLog,v 1.10 2004/10/18 12:31:23 weeve Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/ChangeLog,v 1.11 2004/11/27 15:59:34 squinky86 Exp $ + +*opendchub-0.7.14-r2 (27 Nov 2004) + + 27 Nov 2004; Jon Hood +files/0.7.14-overflow.patch, + -opendchub-0.7.14-r1.ebuild, +opendchub-0.7.14-r2.ebuild: + Fix buffer overflow, #72371. Thanks JG and lewk. 18 Oct 2004; Jason Wever opendchub-0.7.14-r1.ebuild: Added ~sparc keyword, resolves bug #66923. diff --git a/net-p2p/opendchub/Manifest b/net-p2p/opendchub/Manifest index 43faa1d587cc..8e21566f337c 100644 --- a/net-p2p/opendchub/Manifest +++ b/net-p2p/opendchub/Manifest @@ -1,7 +1,8 @@ +MD5 de62cc840c860e435d83c7fdce187960 opendchub-0.7.14-r2.ebuild 1203 MD5 2ed05eb15375c2143873d7b66032d1e6 ChangeLog 1201 MD5 8abcb326775f027b2e13f23344036e34 metadata.xml 224 -MD5 f7be65dee1fa1447f4147cdcae627fce opendchub-0.7.14-r1.ebuild 1162 -MD5 75859d782548bffdb8575c89649978e3 files/opendchub-gentoo.patch 873 MD5 e4fcbf6d8443605a548547abee4903e5 files/opendchub_setup.sh 556 +MD5 75859d782548bffdb8575c89649978e3 files/opendchub-gentoo.patch 873 +MD5 b3f6c1cbb5fe9b71718857859086b680 files/0.7.14-overflow.patch 421 +MD5 a2d8a9229bd7080e20a266ce68778903 files/digest-opendchub-0.7.14-r2 68 MD5 796b8b6feea2a657348eb4ee6b9d102e files/0.7.14-telnet.patch 540 -MD5 a2d8a9229bd7080e20a266ce68778903 files/digest-opendchub-0.7.14-r1 68 diff --git a/net-p2p/opendchub/files/0.7.14-overflow.patch b/net-p2p/opendchub/files/0.7.14-overflow.patch new file mode 100644 index 000000000000..996ff65fd0ae --- /dev/null +++ b/net-p2p/opendchub/files/0.7.14-overflow.patch @@ -0,0 +1,12 @@ +diff -Naur opendchub-0.7.14.vanilla/src/commands.c opendchub-0.7.14/src/commands.c +--- opendchub-0.7.14.vanilla/src/commands.c 2003-11-15 08:07:43.000000000 -0600 ++++ opendchub-0.7.14/src/commands.c 2004-11-27 09:54:57.113410240 -0600 +@@ -2842,7 +2842,7 @@ + { + char move_string[MAX_HOST_LEN+20]; + +- sprintf(move_string, "$ForceMove %s", buf); ++ snprintf(move_string, MAX_HOST_LEN, "$ForceMove %s", buf); + + send_to_humans(move_string, REGULAR | REGISTERED | OP, user); + remove_all(UNKEYED | NON_LOGGED | REGULAR | REGISTERED | OP, 1, 1); diff --git a/net-p2p/opendchub/files/digest-opendchub-0.7.14-r1 b/net-p2p/opendchub/files/digest-opendchub-0.7.14-r2 similarity index 100% rename from net-p2p/opendchub/files/digest-opendchub-0.7.14-r1 rename to net-p2p/opendchub/files/digest-opendchub-0.7.14-r2 diff --git a/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild b/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild similarity index 91% rename from net-p2p/opendchub/opendchub-0.7.14-r1.ebuild rename to net-p2p/opendchub/opendchub-0.7.14-r2.ebuild index 8f6cbb209772..b97a55693678 100644 --- a/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild +++ b/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild @@ -1,6 +1,6 @@ # Copyright 1999-2004 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild,v 1.3 2004/10/18 12:31:23 weeve Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild,v 1.1 2004/11/27 15:59:34 squinky86 Exp $ inherit eutils @@ -21,6 +21,7 @@ src_unpack() { cd ${S} epatch ${FILESDIR}/opendchub-gentoo.patch epatch ${FILESDIR}/${PV}-telnet.patch + epatch ${FILESDIR}/${PV}-overflow.patch } src_compile() { -- 2.26.2