diff options
Diffstat (limited to 'net')
| -rw-r--r-- | net/freeradius2/Makefile | 2 | ||||
| -rw-r--r-- | net/freeradius2/files/patch-CVE-2012-3547 | 11 |
2 files changed, 12 insertions, 1 deletions
diff --git a/net/freeradius2/Makefile b/net/freeradius2/Makefile index f8433b58bf1a..e216ef87f216 100644 --- a/net/freeradius2/Makefile +++ b/net/freeradius2/Makefile @@ -9,7 +9,7 @@ PORTNAME= freeradius DISTVERSION= 2.1.12 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= net MASTER_SITES= ftp://ftp.freeradius.org/pub/freeradius/%SUBDIR%/ \ ftp://ftp.ntua.gr/pub/net/radius/freeradius/%SUBDIR%/ \ diff --git a/net/freeradius2/files/patch-CVE-2012-3547 b/net/freeradius2/files/patch-CVE-2012-3547 new file mode 100644 index 000000000000..59e80ad90be6 --- /dev/null +++ b/net/freeradius2/files/patch-CVE-2012-3547 @@ -0,0 +1,11 @@ +--- ./src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c.orig 2011-09-30 10:12:07.000000000 -0400 ++++ ./src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c 2012-09-11 07:28:34.000000000 -0400 +@@ -531,7 +531,7 @@ + */ + buf[0] = '\0'; + asn_time = X509_get_notAfter(client_cert); +- if ((lookup <= 1) && asn_time && (asn_time->length < MAX_STRING_LEN)) { ++ if ((lookup <= 1) && asn_time && (asn_time->length < sizeof(buf))) { + memcpy(buf, (char*) asn_time->data, asn_time->length); + buf[asn_time->length] = '\0'; + pairadd(&handler->certs, |