FreeBSD Bugzilla – Attachment 17449 Details for
Bug 31676
converters/mpack heap buffer overflow in header parsing code
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
file.diff
file.diff (text/plain), 953 bytes, created by
Tim J. Robbins
on 2001-11-01 00:00:00 UTC
(
hide
)
Description:
file.diff
Filename:
MIME Type:
Creator:
Tim J. Robbins
Created:
2001-11-01 00:00:00 UTC
Size:
953 bytes
patch
obsolete
>diff -ruN mpack-1.5/decode.c mpack/decode.c >--- mpack-1.5/decode.c Fri Feb 17 08:39:44 1995 >+++ mpack/decode.c Thu Nov 1 10:40:23 2001 >@@ -467,6 +467,7 @@ > if (!--left) { > alloced += VALUEGROWSIZE; > value = xrealloc(value, alloced); >+ left = VALUEGROWSIZE; > to = value + alloced - left - 2; > } > if (*from == '\\') { >@@ -483,6 +484,7 @@ > if (!--left) { > alloced += VALUEGROWSIZE; > value = xrealloc(value, alloced); >+ left = VALUEGROWSIZE; > to = value + alloced - left - 2; > } > *to++ = *from++; >@@ -572,6 +574,7 @@ > if (!--left) { > alloced += VALUEGROWSIZE; > value = xrealloc(value, alloced); >+ left = VALUEGROWSIZE; > to = value + alloced - left - 2; > } > if (*disposition == '\\') { >@@ -589,6 +592,7 @@ > if (!--left) { > alloced += VALUEGROWSIZE; > value = xrealloc(value, alloced); >+ left = VALUEGROWSIZE; > to = value + alloced - left - 2; > } > *to++ = *disposition++;
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=17449">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 31676
: 17449