rpms
/
pcsc-lite
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix up incorrect checks in CVE-2010-0407.patch (#596426)

This commit is contained in:
Kalev Lember 2010-07-04 14:30:40 +00:00
parent e7a10ec46f
commit a28c7042ad
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pcsc-lite-CVE-2010-0407.patch
View File

@ -36,7 +36,7 @@ diff -ru pcsc-lite-1.4.102.orig//src/winscard_svc.c pcsc-lite-1.4.102/src/winsca
if (rv != 0) return rv;
+ /* avoids buffer overflow */
+ if ((ctStr->cbRecvLength > sizeof(ctStr->cbRecvLength))
+ if ((ctStr->cbRecvLength > sizeof(ctStr->pbRecvBuffer))
+ || (ctStr->cbSendLength > sizeof(ctStr->pbSendBuffer)))
+ {
+ ctStr->rv = SCARD_E_INSUFFICIENT_BUFFER;
@ -66,7 +66,7 @@ diff -ru pcsc-lite-1.4.102.orig//src/winscard_svc.c pcsc-lite-1.4.102/src/winsca
if (rv != 0) return rv;
+
+ /* avoids buffer overflow */
+ if (gsStr->cbAttrLen <= sizeof(gsStr->pbAttr))
+ if (gsStr->cbAttrLen > sizeof(gsStr->pbAttr))
+ {
+ gsStr->rv = SCARD_E_INSUFFICIENT_BUFFER ;
+ break;

5
pcsc-lite.spec
View File

@ -1,6 +1,6 @@
Name: pcsc-lite
Version: 1.5.2
Release: 4%{?dist}
Release: 5%{?dist}
Summary: PC/SC Lite smart card framework and applications
%define upstream_build 2795
@ -154,6 +154,9 @@ fi
%changelog
* Sun Jul 04 2010 Kalev Lember <kalev@smartlink.ee> - 1.5.2-5
- Fix up incorrect checks in CVE-2010-0407.patch (#596426)
* Tue Jun 15 2010 Kalev Lember <kalev@smartlink.ee> - 1.5.2-4
- Patch for CVE-2010-0407