Date: Mon, 11 Dec 2000 20:34:49 +0100 (CET) From: cj@vallcom.net To: FreeBSD-gnats-submit@freebsd.org Subject: ports/23486: update port: irc/bitchx Message-ID: <200012111934.eBBJYnF04234@214.norrgarden.se> Resent-Message-ID: <200012120100.eBC10Hx98840@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 23486
>Category: ports
>Synopsis: update port: irc/bitchx
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Mon Dec 11 17:00:01 PST 2000
>Closed-Date:
>Last-Modified:
>Originator: Carl Johan Madestrand
>Release: FreeBSD 4.2-STABLE i386
>Organization:
>Environment:
>Description:
This update contains the patch which fixes the buffer overflow vulnerability
>How-To-Repeat:
>Fix:
diff -urN /usr/ports/irc/bitchx/Makefile bitchx/Makefile
--- /usr/ports/irc/bitchx/Makefile Mon Dec 11 19:49:59 2000
+++ bitchx/Makefile Mon Dec 11 20:05:38 2000
@@ -14,7 +14,6 @@
MAINTAINER= cj@vallcom.net
WRKSRC= ${WRKDIR}/BitchX
-FORBIDDEN= "Buffer overflow in bugtraq"
USE_AUTOCONF= yes
USE_GMAKE= yes
diff -urN /usr/ports/irc/bitchx/files/patch-al bitchx/files/patch-al
--- /usr/ports/irc/bitchx/files/patch-al Thu Jan 1 01:00:00 1970
+++ bitchx/files/patch-al Mon Dec 11 20:07:41 2000
@@ -0,0 +1,23 @@
+*** source/misc.c~ Fri Sep 1 23:08:52 2000
+--- source/misc.c Fri Dec 8 10:52:56 2000
+***************
+*** 2641,2646 ****
+--- 2641,2648 ----
+ switch(type)
+ {
+ case T_A :
++ if (dlen != sizeof(struct in_addr))
++ return 0;
+ rptr->re_he.h_length = dlen;
+ if (ans == 1)
+ rptr->re_he.h_addrtype=(class == C_IN) ?
+***************
+*** 2687,2692 ****
+--- 2689,2695 ----
+ *alias = NULL;
+ break;
+ default :
++ cp += dlen;
+ break;
+ }
+ }
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200012111934.eBBJYnF04234>