diff options
author | Richard Purdie <richard@openedhand.com> | 2005-08-31 10:45:47 +0000 |
---|---|---|
committer | Richard Purdie <richard@openedhand.com> | 2005-08-31 10:45:47 +0000 |
commit | 4b46c1f6e891b1ddd5968536440b888661fade3e (patch) | |
tree | e0ba2c1f56f61b868bf746da5c4feabb25b800b2 /openembedded/packages/ipkg/ipkg-0.99.129 | |
download | openembedded-core-4b46c1f6e891b1ddd5968536440b888661fade3e.tar.gz openembedded-core-4b46c1f6e891b1ddd5968536440b888661fade3e.tar.bz2 openembedded-core-4b46c1f6e891b1ddd5968536440b888661fade3e.tar.xz openembedded-core-4b46c1f6e891b1ddd5968536440b888661fade3e.zip |
Initial population
git-svn-id: https://svn.o-hand.com/repos/poky@1 311d38ba-8fff-0310-9ca6-ca027cbcb966
Diffstat (limited to 'openembedded/packages/ipkg/ipkg-0.99.129')
-rw-r--r-- | openembedded/packages/ipkg/ipkg-0.99.129/buffer-overflow.patch | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/openembedded/packages/ipkg/ipkg-0.99.129/buffer-overflow.patch b/openembedded/packages/ipkg/ipkg-0.99.129/buffer-overflow.patch new file mode 100644 index 000000000..91234fd53 --- /dev/null +++ b/openembedded/packages/ipkg/ipkg-0.99.129/buffer-overflow.patch @@ -0,0 +1,38 @@ +Index: ipkg_cmd.c +=================================================================== +RCS file: /cvs/familiar/dist/ipkg/C/ipkg_cmd.c,v +retrieving revision 1.96 +diff -u -r1.96 ipkg_cmd.c +--- C/ipkg_cmd.c 19 Aug 2004 10:55:47 -0000 1.96 ++++ C/ipkg_cmd.c 11 Sep 2004 19:43:14 -0000 +@@ -860,6 +860,7 @@ + str_list_elt_t *iter; + char *pkg_version; + size_t buff_len = 8192; ++ size_t used_len; + char *buff ; + + buff = (char *)malloc(buff_len); +@@ -891,9 +892,20 @@ + } + #else + if (buff) { +- snprintf(buff, buff_len, "Package %s (%s) is installed on %s and has the following files:\n", +- pkg->name, pkg_version, pkg->dest->name); ++ try_again: ++ used_len = snprintf(buff, buff_len, "Package %s (%s) is installed on %s and has the following files:\n", ++ pkg->name, pkg_version, pkg->dest->name) + 1; ++ if (used_len > buff_len) { ++ buff_len *= 2; ++ buff = realloc (buff, buff_len); ++ goto try_again; ++ } + for (iter = installed_files->head; iter; iter = iter->next) { ++ used_len += strlen (iter->data) + 1; ++ while (buff_len <= used_len) { ++ buff_len *= 2; ++ buff = realloc (buff, buff_len); ++ } + strncat(buff, iter->data, buff_len); + strncat(buff, "\n", buff_len); + } |