diff --git a/shadow-4.1.4.2-underflow.patch b/shadow-4.1.4.2-underflow.patch index a3c0d47..8553f8f 100644 --- a/shadow-4.1.4.2-underflow.patch +++ b/shadow-4.1.4.2-underflow.patch @@ -52,7 +52,7 @@ diff -up shadow-4.1.4.3/src/lastlog.c.underflow shadow-4.1.4.3/src/lastlog.c - - if (offset <= (statbuf.st_size - sizeof (ll))) { + offset = (off_t) pw->pw_uid * sizeof (ll); -+ if (offset + sizeof (ll) <= statbuf.st_size - sizeof (ll)) { ++ if (offset + sizeof (ll) <= statbuf.st_size) { /* fseeko errors are not really relevant for us. */ int err = fseeko (lastlogfile, offset, SEEK_SET); assert (0 == err); diff --git a/shadow-utils.spec b/shadow-utils.spec index 38f119b..de49399 100644 --- a/shadow-utils.spec +++ b/shadow-utils.spec @@ -1,7 +1,7 @@ Summary: Utilities for managing accounts and shadow password files Name: shadow-utils Version: 4.1.4.3 -Release: 2%{?dist} +Release: 3%{?dist} Epoch: 2 URL: http://pkg-shadow.alioth.debian.org/ Source0: ftp://pkg-shadow.alioth.debian.org/pub/pkg-shadow/shadow-%{version}.tar.bz2 @@ -200,6 +200,9 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man8/vigr.8* %changelog +* Mon Jun 06 2011 Peter Vrabec - 2:4.1.4.3-3 +- fix shadow-4.1.4.2-underflow.patch + * Tue May 31 2011 Peter Vrabec - 2:4.1.4.3-2 - fix integer underflow in laslog (#706321)