pcre/pcre-7.3-CVE-2008-2371.patch

17 lines
585 B
Diff

Patch for CVE-2008-2371:
Fix propsed by the reporter of the issue - Tavis Ormandy.
Reviewed by upstream, but not yet in upstream SVN as of 2008-07-04.
--- pcre-7.3/pcre_compile.c.orig 2008-07-04 16:19:28.000000000 +0200
+++ pcre-7.3/pcre_compile.c 2008-07-04 16:20:19.000000000 +0200
@@ -4709,7 +4709,7 @@ for (;; ptr++)
(lengthptr == NULL || *lengthptr == 2 + 2*LINK_SIZE))
{
cd->external_options = newoptions;
- options = newoptions;
+ *optionsptr = options = newoptions;
}
else
{