aboutsummaryrefslogtreecommitdiffstats
path: root/news
diff options
context:
space:
mode:
authorniels <niels@FreeBSD.org>2005-02-01 17:20:40 +0800
committerniels <niels@FreeBSD.org>2005-02-01 17:20:40 +0800
commit63f5f47fa245640ac16a2ee3549e2f0bcc2460ba (patch)
treefbc7236eb06d392ed69d740698353e94edf95098 /news
parente2aa192a74701de27ff5fcd95b4196bf89c85dac (diff)
downloadfreebsd-ports-gnome-63f5f47fa245640ac16a2ee3549e2f0bcc2460ba.tar.gz
freebsd-ports-gnome-63f5f47fa245640ac16a2ee3549e2f0bcc2460ba.tar.zst
freebsd-ports-gnome-63f5f47fa245640ac16a2ee3549e2f0bcc2460ba.zip
Fixed a buffer overflow vulnerability in the NNTP server
response handling code. Approved by: nectar (mentor), maintainer VuXML: http://vuxml.freebsd.org/7f13607b-6948-11d9-8937-00065be4b5b6.html
Diffstat (limited to 'news')
-rw-r--r--news/newspost/Makefile1
-rw-r--r--news/newspost/files/patch-base::socket.c11
2 files changed, 12 insertions, 0 deletions
diff --git a/news/newspost/Makefile b/news/newspost/Makefile
index 64bc822aa0c2..54875ae7a63c 100644
--- a/news/newspost/Makefile
+++ b/news/newspost/Makefile
@@ -8,6 +8,7 @@
PORTNAME= newspost
PORTVERSION= 2.1.1
+PORTREVISION= 1
CATEGORIES= news
MASTER_SITES= http://newspost.unixcab.org/download/
diff --git a/news/newspost/files/patch-base::socket.c b/news/newspost/files/patch-base::socket.c
new file mode 100644
index 000000000000..d7dbf7b75d6b
--- /dev/null
+++ b/news/newspost/files/patch-base::socket.c
@@ -0,0 +1,11 @@
+--- base/socket.c.orig Tue Jan 18 11:08:02 2005
++++ base/socket.c Tue Jan 18 11:10:08 2005
+@@ -126,7 +126,7 @@
+
+ i = 0;
+ pi = buffer;
+- while (TRUE) {
++ while (read_count < STRING_BUFSIZE - 1) {
+ retval = read(sockfd, pi, 1);
+ if(retval < 0)
+ ui_socket_error(errno);