Go to file
Jozef Mlich 48f39f63a0 out of bounds read access in is_utf8_well_formed()
Resolves: #1201310
CVE-2014-9488

This is an update of previous patch.

The function is_utf8_well_formed was defined in charset.c with single parameter. I was surprised, that it is even compiling.

This new patch is updating own implementation of function is_utf8_well_formed and fixing also its other use. The code is taken from Mark Nudelman's unreleased version of less.
2015-06-01 09:13:01 +02:00
.gitignore Update to 471 2014-12-17 17:43:11 +01:00
less-394-search.patch Use POSIX regcomp instead of PCRE - revert 406-11 2012-05-14 17:20:55 +02:00
less-394-time.patch - incorporate the package review 2007-02-07 12:40:08 +00:00
less-418-fsync.patch Added lzma support Added test if fsync produces EIVAL on tty 2009-03-17 07:44:54 +00:00
less-436-help.patch - The new "--old-bot" option is not documented in the man page 2010-12-22 14:07:18 +01:00
less-436-manpage-add-old-bot-option.patch - The new "--old-bot" option is not documented in the man page 2010-12-22 14:07:18 +01:00
less-444-Foption.v2.patch Update to 471 2014-12-17 17:43:11 +01:00
less-458-less-filters-man.patch Update to 471 2014-12-17 17:43:11 +01:00
less-458-lessecho-usage.patch Expanded lessecho usage (#948597) 2013-05-07 14:41:56 +02:00
less-458-lesskey-usage.patch Resolves #1036326 fixing command line parsing in lesskey 2013-12-02 15:12:42 +01:00
less-458-old-bot-in-help.patch The data in less-458-old-bot-in-help.patch was not 2014-02-10 09:54:22 +01:00
less-458-outdated-unicode-data.patch FIXES outdated ubin_table in charset.c; 2014-03-31 09:57:35 +02:00
less-471-out_of_bounds_read.patch out of bounds read access in is_utf8_well_formed() 2015-06-01 09:13:01 +02:00
less.csh - Don't require correct exit status from LESSOPEN scripts 2011-02-14 17:05:46 +01:00
less.sh Fix less.sh not to override user-defined LESSOPEN variable 2012-05-14 17:07:32 +02:00
less.spec out of bounds read access in is_utf8_well_formed() 2015-06-01 09:13:01 +02:00
lesspipe.sh rollback of previous regression/not a bug; early handling of 0 2014-06-23 16:32:33 +02:00
sources Update to 471 2014-12-17 17:43:11 +01:00