- fixed security fix (was off by two)

This commit is contained in:
Adrian Reber 2008-01-04 09:50:28 +00:00
parent 7d4c83498b
commit 59c6bcad44
2 changed files with 7 additions and 4 deletions

View File

@ -6,7 +6,7 @@ diff -Naur libcdio-0.78.2-orig/work/libcdio-0.78.2/src/cd-info.c libcdio-0.78.2/
char *psz_iso_name = p_statbuf->filename;
char _fullname[4096] = { 0, };
- char translated_name[MAX_ISONAME+1];
+ char *translated_name = (char *) alloca(strlen(psz_iso_name+1));
+ char *translated_name = (char *) alloca(strlen(psz_iso_name)+1);
if (yep != p_statbuf->rr.b3_rock || 1 == opts.no_rock_ridge) {
iso9660_name_translate_ext(psz_iso_name, translated_name,
@ -18,7 +18,7 @@ diff -Naur libcdio-0.78.2-orig/work/libcdio-0.78.2/src/iso-info.c libcdio-0.78.2
char *psz_iso_name = p_statbuf->filename;
char _fullname[4096] = { 0, };
- char translated_name[MAX_ISONAME+1];
+ char *translated_name = (char *) alloca(strlen(psz_iso_name+1));
+ char *translated_name = (char *) alloca(strlen(psz_iso_name)+1);
+
if (yep != p_statbuf->rr.b3_rock || 1 == opts.no_rock_ridge) {

View File

@ -1,6 +1,6 @@
Name: libcdio
Version: 0.79
Release: 1%{?dist}
Release: 2%{?dist}
Summary: CD-ROM input and control library
Group: Applications/Multimedia
@ -37,7 +37,7 @@ This package contains header files and static libraries for %{name}.
%prep
%setup -q
%patch -p3
f=src/cd-paranoia/doc/jp/cd-paranoia.1.in
f=src/cd-paranoia/doc/ja/cd-paranoia.1.in
iconv -f euc-jp -t utf-8 -o $f.utf8 $f && mv $f.utf8 $f
@ -113,6 +113,9 @@ fi
%changelog
* Fri Jan 04 2008 Adrian Reber <adrian@lisas.de> - 0.79-2
- fixed security fix (was off by two)
* Wed Jan 02 2008 Adrian Reber <adrian@lisas.de> - 0.79-1
- updated to 0.79
- fixes #427197 (Long Joliet file name overflows cdio's buffer)