- Fixed invalid read in cupsAddDest (bug #547460).

cups-str3448.patch

@@ -0,0 +1,16 @@
+diff -up cups-1.4.2/cups/dest.c.str3448 cups-1.4.2/cups/dest.c
+--- cups-1.4.2/cups/dest.c.str3448	2009-08-28 23:54:34.000000000 +0100
++++ cups-1.4.2/cups/dest.c	2009-12-10 18:15:50.910079549 +0000
+@@ -145,6 +145,12 @@ cupsAddDest(const char  *name,		/* I  - 
+ 
+     dest = cups_add_dest(name, instance, &num_dests, dests);
+ 
++   /*
++    * Find the base dest again now the array has been realloc'd.
++    */
++
++    parent = cupsGetDest(name, NULL, num_dests, *dests);
++
+     if (instance && parent && parent->num_options > 0)
+     {
+      /*

cups.spec

@@ -9,7 +9,7 @@
 Summary: Common Unix Printing System
 Name: cups
 Version: 1.4.2
-Release: 16%{?dist}
+Release: 17%{?dist}
 License: GPLv2
 Group: System Environment/Daemons
 Source: http://ftp.easysw.com/pub/cups/%{version}/cups-%{version}-source.tar.bz2
@@ -541,7 +541,7 @@ rm -rf $RPM_BUILD_ROOT
 %{php_extdir}/phpcups.so
 
 %changelog
-* Thu Dec 10 2009 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-16
+* Thu Dec 10 2009 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-17
 - Fixed invalid read in cupsAddDest (bug #547460).
 
 * Wed Dec  9 2009 Tim Waugh <twaugh@redhat.com> - 1:1.4.2-15