FreeBSD Bugzilla – Attachment 187885 Details for
Bug 223574
[PATCH] net/libosip2: fix security vulnerability (CVE-2017-7853)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Add the upstream patch to fix the vulnerability
libosip2.diff (text/plain), 1.52 KB, created by
Jung-uk Kim
on 2017-11-09 20:33:40 UTC
(
hide
)
Description:
Add the upstream patch to fix the vulnerability
Filename:
MIME Type:
Creator:
Jung-uk Kim
Created:
2017-11-09 20:33:40 UTC
Size:
1.52 KB
patch
obsolete
>Index: net/libosip2/Makefile >=================================================================== >--- net/libosip2/Makefile (revision 453852) >+++ net/libosip2/Makefile (working copy) >@@ -2,6 +2,7 @@ > > PORTNAME= libosip2 > PORTVERSION= 5.0.0 >+PORTREVISION= 1 > CATEGORIES= net > MASTER_SITES= GNU/osip > >Index: net/libosip2/files/patch-src_osipparser2_osip__message__parse.c >=================================================================== >--- net/libosip2/files/patch-src_osipparser2_osip__message__parse.c (nonexistent) >+++ net/libosip2/files/patch-src_osipparser2_osip__message__parse.c (working copy) >@@ -0,0 +1,15 @@ >+--- src/osipparser2/osip_message_parse.c.orig 2016-09-05 14:19:31 UTC >++++ src/osipparser2/osip_message_parse.c >+@@ -784,6 +784,12 @@ msg_osip_body_parse (osip_message_t * sip, const char >+ if ('\n' == start_of_body[0] || '\r' == start_of_body[0]) >+ start_of_body++; >+ >++ /* if message body is empty or contains a single CR/LF */ >++ if (end_of_body <= start_of_body) { >++ osip_free (sep_boundary); >++ return OSIP_SYNTAXERROR; >++ } >++ >+ body_len = end_of_body - start_of_body; >+ >+ /* Skip CR before end boundary. */ > >Property changes on: net/libosip2/files/patch-src_osipparser2_osip__message__parse.c >___________________________________________________________________ >Added: fbsd:nokeywords >## -0,0 +1 ## >+yes >\ No newline at end of property >Added: svn:eol-style >## -0,0 +1 ## >+native >\ No newline at end of property >Added: svn:mime-type >## -0,0 +1 ## >+text/plain >\ No newline at end of property
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 223574
: 187885