rpms/perl
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix a buffer overread when parsin a Unicode property while compiling a regular expression

Browse Source
This commit is contained in:
Petr Písař 2019-09-02 09:33:26 +02:00
parent 126a7ebead
commit a37c37e211
2 changed files with 39 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
perl-5.31.3-PATCH-perl-134133-read-beyond-end-of-buffer.patch Normal file
View File

@ -0,0 +1,31 @@
From c6f37d61adb39a6d7764b1bcb6bb67accb22a0a0 Mon Sep 17 00:00:00 2001
From: Karl Williamson <khw@cpan.org>
Date: Fri, 24 May 2019 09:01:46 -0600
Subject: [PATCH] PATCH: [perl #134133] read beyond end of buffer
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
The code was using the wrong limit variable.
Signed-off-by: Petr Písař <ppisar@redhat.com>
---
regcomp.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/regcomp.c b/regcomp.c
index d61fd434fe..b2cc6672cb 100644
--- a/regcomp.c
+++ b/regcomp.c
@@ -22946,7 +22946,7 @@ Perl_parse_uniprop_string(pTHX_
/* Certain properties whose values are numeric need special handling.
* They may optionally be prefixed by 'is'. Ignore that prefix for the
* purposes of checking if this is one of those properties */
- if (memBEGINPs(lookup_name, name_len, "is")) {
+ if (memBEGINPs(lookup_name, j, "is")) {
lookup_offset = 2;
}
--
2.21.0

8
perl.spec
View File

@ -267,6 +267,10 @@ Patch53: perl-5.31.2-Run-tests-in-ext-File-Find-t-in-series.patch
# fixed after 5.31.3 # fixed after 5.31.3
Patch54: perl-5.31.3-regcomp.c-Fix-wrong-limit-test.patch Patch54: perl-5.31.3-regcomp.c-Fix-wrong-limit-test.patch
# Fix a buffer overread when parsing a Unicode property while compiling
# a regular expression, RT#134133, fixed after 5.31.3
Patch55: perl-5.31.3-PATCH-perl-134133-read-beyond-end-of-buffer.patch
# Link XS modules to libperl.so with EU::CBuilder on Linux, bug #960048 # Link XS modules to libperl.so with EU::CBuilder on Linux, bug #960048
Patch200: perl-5.16.3-Link-XS-modules-to-libperl.so-with-EU-CBuilder-on-Li.patch Patch200: perl-5.16.3-Link-XS-modules-to-libperl.so-with-EU-CBuilder-on-Li.patch
@ -2843,6 +2847,7 @@ Perl extension for Version Objects
%patch52 -p1 %patch52 -p1
%patch53 -p1 %patch53 -p1
%patch54 -p1 %patch54 -p1
%patch55 -p1
%patch200 -p1 %patch200 -p1
%patch201 -p1 %patch201 -p1
@ -2904,6 +2909,7 @@ perl -x patchlevel.h \
'Fedora Patch52: Fix a documentation about a future API change' \ 'Fedora Patch52: Fix a documentation about a future API change' \
'Fedora Patch53: Do not run File-Find tests in parallel' \ 'Fedora Patch53: Do not run File-Find tests in parallel' \
'Fedora Patch54: Fix parsing a Unicode property name when compiling a regular expression' \ 'Fedora Patch54: Fix parsing a Unicode property name when compiling a regular expression' \
'Fedora Patch55: Fix a buffer overread when parsing a Unicode property while compiling a regular expression (RT#134133)' \
'Fedora Patch200: Link XS modules to libperl.so with EU::CBuilder on Linux' \ 'Fedora Patch200: Link XS modules to libperl.so with EU::CBuilder on Linux' \
'Fedora Patch201: Link XS modules to libperl.so with EU::MM on Linux' \ 'Fedora Patch201: Link XS modules to libperl.so with EU::MM on Linux' \
%{nil} %{nil}
@ -5152,6 +5158,8 @@ popd
* Mon Sep 02 2019 Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445 * Mon Sep 02 2019 Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445
- Adjust spec file to rpm-build-4.15.0-0.rc1.1 - Adjust spec file to rpm-build-4.15.0-0.rc1.1
- Fix parsing a Unicode property name when compiling a regular expression - Fix parsing a Unicode property name when compiling a regular expression
- Fix a buffer overread when parsing a Unicode property while compiling
a regular expression (RT#134133)
* Thu Aug 22 2019 Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444 * Thu Aug 22 2019 Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
- Fix a NULL pointer dereference in PerlIOVia_pushed() - Fix a NULL pointer dereference in PerlIOVia_pushed()