rpms/libcdio
6
0
Fork 0
Code Issues Pull Requests Releases Activity

- fixed security fix (was off by two)

Browse Source
This commit is contained in:
Adrian Reber 2008-01-04 09:50:28 +00:00
parent 7d4c83498b
commit 59c6bcad44
2 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libcdio-info-buffer.patch
View File

@ -6,7 +6,7 @@ diff -Naur libcdio-0.78.2-orig/work/libcdio-0.78.2/src/cd-info.c libcdio-0.78.2/
char *psz_iso_name = p_statbuf->filename; char *psz_iso_name = p_statbuf->filename;
char _fullname[4096] = { 0, }; char _fullname[4096] = { 0, };
- char translated_name[MAX_ISONAME+1]; - char translated_name[MAX_ISONAME+1];
+ char *translated_name = (char *) alloca(strlen(psz_iso_name+1)); + char *translated_name = (char *) alloca(strlen(psz_iso_name)+1);
if (yep != p_statbuf->rr.b3_rock || 1 == opts.no_rock_ridge) { if (yep != p_statbuf->rr.b3_rock || 1 == opts.no_rock_ridge) {
iso9660_name_translate_ext(psz_iso_name, translated_name, iso9660_name_translate_ext(psz_iso_name, translated_name,
@ -18,7 +18,7 @@ diff -Naur libcdio-0.78.2-orig/work/libcdio-0.78.2/src/iso-info.c libcdio-0.78.2
char *psz_iso_name = p_statbuf->filename; char *psz_iso_name = p_statbuf->filename;
char _fullname[4096] = { 0, }; char _fullname[4096] = { 0, };
- char translated_name[MAX_ISONAME+1]; - char translated_name[MAX_ISONAME+1];
+ char *translated_name = (char *) alloca(strlen(psz_iso_name+1)); + char *translated_name = (char *) alloca(strlen(psz_iso_name)+1);
+ +
if (yep != p_statbuf->rr.b3_rock || 1 == opts.no_rock_ridge) { if (yep != p_statbuf->rr.b3_rock || 1 == opts.no_rock_ridge) {

7
libcdio.spec
View File

@ -1,6 +1,6 @@
Name: libcdio Name: libcdio
Version: 0.79 Version: 0.79
Release: 1%{?dist} Release: 2%{?dist}
Summary: CD-ROM input and control library Summary: CD-ROM input and control library
Group: Applications/Multimedia Group: Applications/Multimedia
@ -37,7 +37,7 @@ This package contains header files and static libraries for %{name}.
%prep %prep
%setup -q %setup -q
%patch -p3 %patch -p3
f=src/cd-paranoia/doc/jp/cd-paranoia.1.in f=src/cd-paranoia/doc/ja/cd-paranoia.1.in
iconv -f euc-jp -t utf-8 -o $f.utf8 $f && mv $f.utf8 $f iconv -f euc-jp -t utf-8 -o $f.utf8 $f && mv $f.utf8 $f
@ -113,6 +113,9 @@ fi
%changelog %changelog
* Fri Jan 04 2008 Adrian Reber <adrian@lisas.de> - 0.79-2
- fixed security fix (was off by two)
* Wed Jan 02 2008 Adrian Reber <adrian@lisas.de> - 0.79-1 * Wed Jan 02 2008 Adrian Reber <adrian@lisas.de> - 0.79-1
- updated to 0.79 - updated to 0.79
- fixes #427197 (Long Joliet file name overflows cdio's buffer) - fixes #427197 (Long Joliet file name overflows cdio's buffer)