diff options
| author | Natanael Copa <ncopa@alpinelinux.org> | 2019-02-26 10:58:59 +0100 |
|---|---|---|
| committer | Natanael Copa <ncopa@alpinelinux.org> | 2019-02-26 11:10:55 +0100 |
| commit | 76e44d18256f2526af97aa27603c154b5066ee97 (patch) | |
| tree | 82f42f15cc9e6d928b4d06eb25d8a514aecd75d0 /testing/gpm/fix-signedness-issue.patch | |
| parent | d51e013bca5601e50443c35b9c23a26ec744f73b (diff) | |
| download | aports-76e44d18256f2526af97aa27603c154b5066ee97.tar.bz2 aports-76e44d18256f2526af97aa27603c154b5066ee97.tar.xz | |
testing/gpm: resurrect
get patches from https://github.com/telmich/gpm
Diffstat (limited to 'testing/gpm/fix-signedness-issue.patch')
| -rw-r--r-- | testing/gpm/fix-signedness-issue.patch | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/testing/gpm/fix-signedness-issue.patch b/testing/gpm/fix-signedness-issue.patch new file mode 100644 index 0000000000..6b2b6ce75a --- /dev/null +++ b/testing/gpm/fix-signedness-issue.patch @@ -0,0 +1,24 @@ +From 4337fd9fc2d2ea83654f2ca69245503730231ac3 Mon Sep 17 00:00:00 2001 +From: iljavs <ivansprundel@ioactive.com> +Date: Mon, 27 Jun 2016 01:17:57 -0700 +Subject: [PATCH] fix signedness issue + +This commit fixes a signedness issue, where a negative vc coming from a malicious client could possibly cause memory corruption. +--- + src/daemon/processconn.c | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + +diff --git a/src/daemon/processconn.c b/src/daemon/processconn.c +index a5839a3..e92fa63 100644 +--- a/src/daemon/processconn.c ++++ b/src/daemon/processconn.c +@@ -67,7 +67,8 @@ int processConn(int fd) + return -1; + } + +- if((vc = request->vc) > MAX_VC) { ++ vc = request->vc; ++ if(vc > MAX_VC || vc < 0) { + gpm_report(GPM_PR_DEBUG, GPM_MESS_REQUEST_ON, vc, MAX_VC); + free(info); + close(newfd); |