diff options
| author | V3n3RiX <venerix@redcorelinux.org> | 2018-06-16 05:02:38 +0100 |
|---|---|---|
| committer | V3n3RiX <venerix@redcorelinux.org> | 2018-06-16 05:02:38 +0100 |
| commit | f1bc537f089cc8477a9a18db597cb349e1b00e91 (patch) | |
| tree | c48eb730c43e5f35729fabbe5cb4bfbe4a1bc794 /sys-apps/file/files | |
| parent | cb3e8c6af7661fbcafdcacc7e0ecdfb610d098fa (diff) | |
gentoo resync : 16.06.2018
Diffstat (limited to 'sys-apps/file/files')
| -rw-r--r-- | sys-apps/file/files/file-5.33-CVE-2018-10360.patch | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/sys-apps/file/files/file-5.33-CVE-2018-10360.patch b/sys-apps/file/files/file-5.33-CVE-2018-10360.patch new file mode 100644 index 000000000000..a489846b10f8 --- /dev/null +++ b/sys-apps/file/files/file-5.33-CVE-2018-10360.patch @@ -0,0 +1,18 @@ +Avoid reading past the end of buffer + +CVE-2018-10360 + +https://github.com/file/file/commit/a642587a9c9e2dd7feacdf513c3643ce26ad3c22 + +--- a/src/readelf.c ++++ b/src/readelf.c +@@ -842,7 +842,8 @@ do_core_note(struct magic_set *ms, unsigned char *nbuf, uint32_t type, + + cname = (unsigned char *) + &nbuf[doff + prpsoffsets(i)]; +- for (cp = cname; *cp && isprint(*cp); cp++) ++ for (cp = cname; cp < nbuf + size && *cp ++ && isprint(*cp); cp++) + continue; + /* + * Linux apparently appends a space at the end |