From 3b5a8be450459b551af5c1209f5c2e30b1d3a2ac Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Zaoral?= Date: Mon, 23 Oct 2023 12:47:00 +0200 Subject: [PATCH] fix buffer overflow with high port numbers Resolves: RHEL-11034 --- sgpio-1.2-buffer-overflow.patch | 11 +++++++++++ sgpio.spec | 7 ++++++- 2 files changed, 17 insertions(+), 1 deletion(-) create mode 100644 sgpio-1.2-buffer-overflow.patch diff --git a/sgpio-1.2-buffer-overflow.patch b/sgpio-1.2-buffer-overflow.patch new file mode 100644 index 0000000..9a277d8 --- /dev/null +++ b/sgpio-1.2-buffer-overflow.patch @@ -0,0 +1,11 @@ +--- sgpio/sgpio.c ++++ sgpio/sgpio.c +@@ -126,7 +126,7 @@ + int id; + int host_port; + int init; +- char name[7]; ++ char name[5 /* prefix */ + 10 /* port number */ + 1 /* terminator */]; + }; + + /* structure for the disks associated with the led structure */ diff --git a/sgpio.spec b/sgpio.spec index 025e9fe..9f31683 100644 --- a/sgpio.spec +++ b/sgpio.spec @@ -1,7 +1,7 @@ Summary: SGPIO captive backplane tool Name: sgpio Version: 1.2.0.10 -Release: 21%{?dist} +Release: 22%{?dist} License: GPLv2+ Group: System Environment/Base URL: http://sources.redhat.com/lvm2/wiki/DMRAID_Eventing @@ -10,6 +10,7 @@ Source: sgpio-1.2-0.10-src.tar.gz #Source: http://sources.redhat.com/lvm2/wiki/DMRAID_Eventing?action=AttachFile&do=get&target=sgpio-1.2.tgz Patch0: sgpio-1.2-makefile.patch Patch1: sgpio-1.2-coverity.patch +Patch2: sgpio-1.2-buffer-overflow.patch BuildRequires: dos2unix %description @@ -20,6 +21,7 @@ Intel SGPIO enclosure management utility dos2unix --keepdate Makefile README %patch0 -p1 -b .makefile %patch1 -p1 -b .coverity +%patch2 -p1 -b .buffer-overflow chmod a-x * %build @@ -36,6 +38,9 @@ make install INSTALL="%{__install} -p" DESTDIR=$RPM_BUILD_ROOT SBIN_DIR=$RPM_BUI %{_mandir}/man1/sgpio.* %changelog +* Mon Oct 09 2023 Lukáš Zaoral - 1.2.0.10-22 +- fix buffer overflow with high port numbers (RHEL-11034) + * Mon Feb 26 2018 Jan Synáček - 1.2.0.10-21 - use distribution LDFLAGS during build (#1548559)