From 6c06fa9976a89bdf60f483c58bb7247d907a5339 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
Date: Mon, 2 Sep 2019 09:56:57 +0200
Subject: [PATCH] Fix a buffer overread when compiling a regular expression
 with many escapes

---
 ...-PATCH-perl-134325-Heap-buffer-overflow.patch | Bin 0 -> 3461 bytes
 perl.spec                                        |   8 ++++++++
 2 files changed, 8 insertions(+)
 create mode 100644 perl-5.31.3-PATCH-perl-134325-Heap-buffer-overflow.patch

diff --git a/perl-5.31.3-PATCH-perl-134325-Heap-buffer-overflow.patch b/perl-5.31.3-PATCH-perl-134325-Heap-buffer-overflow.patch
new file mode 100644
index 0000000000000000000000000000000000000000..7f1da16a696eaefb17f7401a56c90da05ebd82c3
GIT binary patch
literal 3461
zcmbVP%W~T|7F8C#!D>F?Mo!vt^dj}JUU4e!M45P!xDre5si{_%1|&fVZ3<u$U?jEU
z%6H5c%xY$zRWDrqUwr}6k?czBnb0mi0NjIn?mf7GUL<k>t!9rly^wX=omP+09`k9_
zZFU*~Wq!Nkw5d;NGw@t^BL$3D3~mP;r*HqE;W#dNfiQh|MUx2r&ZCIag~Fka&*sag
zeoRG8CbK8xIn}HWBdROVXu)ARLtD28Zm;il`uI|H_8o_eQtub$>puMS_Hg{{<<DRr
z_!%=q-*KC*W~2Qxyks;6FAYPMfPBxAFp^91=IG6^`Xfsem!c1D%^}aE&`jv+cpc;1
znyqv_jwlxc@aHs9Odp(%UsSuBaS0U)F{?x2%YchnAG#jbgpB80!ICP_a|Q`hX{14h
zpp!KY0xiMEnYc)qd5;Y=&`_gu38NAJ%?_GVO_mInEMYK{x!s(;w>AmOtWsq<B8j(O
z(nYLl0Cw&i-*ie5t;w9mF%v9+<(vt`%qKDpcTK?s$Rt4Dv?RVvg*Fajl;%t^1yrn;
zbX~z`09;$nQ~=eQEn;ohDdRCk8>IlD(2OK(##R`DMa(0Xpe@FV>$yxd1Q}6`+7^Q)
z+YL+<HBAr_`z&{Y;3)=fLmon-Pcy({GcE+O&m6-hByDaX7hKI*P=TdPqX1pGftn@9
zu*@gAVp=2QrCc%;PsQ+9NTtE2CIs3fJCIC?T@7;<#TlbK&@*Pju%t<lsey@r7%5!Q
zfD+Qr0)vXnL9+&g)!aX0dJo-YAQ-00*cryeq&s7`#5Dwp%|dEq=HYrYVL^jHT8~Tu
zxJG4+<TV(ScS4CxOqNBYh(jzLOwIz+nTIFyJlClLC2_f$q~R1?`DQ_xcT~k^p%Uw?
zan#BZf%y#OSCwH{_11lO%X9*7FaM+HAOC{Kam*D>o+d0n(bsV9C!|`f5}bZ!R8sQ+
zJ^*x~T*hYGqw5K)$2eGHkK4kY&1EbbnCS>}gX>nzOuBIl7m6hs7rQEzF```vSj4jL
z>K-8h4@0O{XGohO`qj+d=ACd6pm3db5cFu9b-Y@QdY;qhg<anP*Kzh+E#vsMJwd-<
z8{_Fys5U#Dirav)d3FI?lulA#!^v><Y>I-^Y^vd$z)rwWungPZogSSGr$3w=9zT2e
zw^A6<874o^&NN~AJ&pF@)@wp+_h|fPJROY>PsVV5>-al5bGYqM)_auRm78z??qGYs
zE$<Ujz1hn{D7`*<HGKV#(tS8Op1wUi86J=DF&gdd-QoNf;0%2I5gf~W9m%WkZ7oH<
zSg?R&_@g!8^jLRL(s+FZ4jz5hJA&oQ!`8!16|uEa!K1pt$*-@#J+f(q4+ofUn;}Da
zG`ur}Ux7naq=~p<nTzC3urHFmxbplPo)c2OY4xo{4bB(fzLjVOXPvtMyDo;u&j}DC
zlT+NDBU9AuhHHutmWsUm+C<xm95GW{t?sqdG@9nwrWzdFG_RMGt&-){Hy?RXVeJ+T
zLqF)XYPEgZ-S37i&kwE_l`W&Js%$lwveIZ*I#9NE{QP0~*P~-oMbsIOr!<O6yTXVb
zx2_<K*zO*r0!t)rUAD*s@cr|(psyvxy}sY~q}0<*!(an5&G+hQDmb2cuvAeGaY}nQ
zhE(yqgqu9>V+szQKzF~1irazHIKWkvZ7p^mrhz#w)w2q0jzq?yM#?wMTmP3i<}OLa
z)Pj{h^Yf8AON@86_BKtBn$60-DZIB0-+{5^k)06ccn+&!Nyb2=-o_3CjN6U57HfE*
z@R%4+kvhhfPqmy1s`-0XDo$2GShNwcW6!NC4cBR-8)ba9DtJmpe^%#?fB#}Km<%re
zd-?Cn-=Xla?u7OGg%{ry3iZ74^3&v9;a;Jz`pf0-*<Ybhxcr2-kN?a7?hS0q<Xz^P
zo%6<x;g$gpejD^FP%Kv9{GtN8p_IGENpoFbyzI(7$B&&G2kOn5HmrY5rDg}k$>d#e
zaJ|Q){+a2ROm6msA-1o=@MgP-or)7KbO^=zWa54(eR!z$9;$~5{iyR|Wix|ubNk91
zffa7;HF#j=#`pc+|6<YJvS{6AfM<jiw7Oe7BYwt8s3Y@>qZB7{W`tjSpfIRP<6270
zw~GgkUz7T&SWxZb`4c9kI!4+A_=1!PTwsWYc!b82;Wc@ga^w#1PywV-Ynb0C<WDFD
B&h`KR

literal 0
HcmV?d00001

diff --git a/perl.spec b/perl.spec
index f51ff2a..f4cf059 100644
--- a/perl.spec
+++ b/perl.spec
@@ -275,6 +275,10 @@ Patch55:        perl-5.31.3-PATCH-perl-134133-read-beyond-end-of-buffer.patch
 # fixed after 5.31.3
 Patch56:        perl-5.31.3-perl-134230-don-t-interpret-0x-0b-when-numifying-str.patch
 
+# Fix a buffer overread when compiling a regular expression with many escapes,
+# RT#134325, fixed after 5.31.3
+Patch57:        perl-5.31.3-PATCH-perl-134325-Heap-buffer-overflow.patch
+
 # Link XS modules to libperl.so with EU::CBuilder on Linux, bug #960048
 Patch200:       perl-5.16.3-Link-XS-modules-to-libperl.so-with-EU-CBuilder-on-Li.patch
 
@@ -2853,6 +2857,7 @@ Perl extension for Version Objects
 %patch54 -p1
 %patch55 -p1
 %patch56 -p1
+%patch57 -p1
 %patch200 -p1
 %patch201 -p1
 
@@ -2916,6 +2921,7 @@ perl -x patchlevel.h \
     'Fedora Patch54: Fix parsing a Unicode property name when compiling a regular expression' \
     'Fedora Patch55: Fix a buffer overread when parsing a Unicode property while compiling a regular expression (RT#134133)' \
     'Fedora Patch56: Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)' \
+    'Fedora Patch57: Fix a buffer overread when compiling a regular expression with many escapes (RT#134325)' \
     'Fedora Patch200: Link XS modules to libperl.so with EU::CBuilder on Linux' \
     'Fedora Patch201: Link XS modules to libperl.so with EU::MM on Linux' \
     %{nil}
@@ -5167,6 +5173,8 @@ popd
 - Fix a buffer overread when parsing a Unicode property while compiling
   a regular expression (RT#134133)
 - Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)
+- Fix a buffer overread when compiling a regular expression with many escapes
+  (RT#134325)
 
 * Thu Aug 22 2019 Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
 - Fix a NULL pointer dereference in PerlIOVia_pushed()