Patch for CVE-2008-2371: Fix propsed by the reporter of the issue - Tavis Ormandy. Reviewed by upstream, but not yet in upstream SVN as of 2008-07-04. --- pcre-7.3/pcre_compile.c.orig 2008-07-04 16:19:28.000000000 +0200 +++ pcre-7.3/pcre_compile.c 2008-07-04 16:20:19.000000000 +0200 @@ -4709,7 +4709,7 @@ for (;; ptr++) (lengthptr == NULL || *lengthptr == 2 + 2*LINK_SIZE)) { cd->external_options = newoptions; - options = newoptions; + *optionsptr = options = newoptions; } else {