rpms/star
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fix buffer overflow for files with names of length 100 chars(#556664)

Browse Source
This commit is contained in:
Ondrej Vasik 2010-02-03 12:55:39 +00:00
parent 38660a054f
commit 61ef746a4c
2 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
star-1.5.1-bufferoverflow.patch Normal file
View File

@ -0,0 +1,12 @@
diff -urNp star-1.5.1-orig/star/longnames.c star-1.5.1/star/longnames.c
--- star-1.5.1-orig/star/longnames.c 2009-10-16 00:38:55.000000000 +0200
+++ star-1.5.1/star/longnames.c 2010-02-03 13:36:03.000000000 +0100
@@ -155,7 +155,7 @@ name_to_tcb(info, ptb)
if (add)
strcatl(ptb->dbuf.t_name, name, "/", (char *)NULL);
else
- strcpy(ptb->dbuf.t_name, name);
+ strncpy(ptb->dbuf.t_name, name, props.pr_maxsname);
return (TRUE);
}

9
star.spec
View File

@ -4,7 +4,7 @@
Summary: An archiving tool with ACL support Summary: An archiving tool with ACL support
Name: star Name: star
Version: 1.5 Version: 1.5
Release: 8%{?dist} Release: 9%{?dist}
URL: http://cdrecord.berlios.de/old/private/star.html URL: http://cdrecord.berlios.de/old/private/star.html
Source: ftp://ftp.berlios.de/pub/star/%{name}-%{version}.tar.bz2 Source: ftp://ftp.berlios.de/pub/star/%{name}-%{version}.tar.bz2
@ -18,6 +18,8 @@ Patch3: star-1.5-changewarnSegv.patch
Patch4: star-1.5-removenames_c.patch Patch4: star-1.5-removenames_c.patch
#do not conflict with glibc stdio functions (#494213) #do not conflict with glibc stdio functions (#494213)
Patch5: star-1.5-stdioconflict.patch Patch5: star-1.5-stdioconflict.patch
#Prevent buffer overflow for filenames with length of 100 characters (#556664)
Patch6: star-1.5.1-bufferoverflow.patch
License: CDDL License: CDDL
Group: Applications/Archiving Group: Applications/Archiving
@ -38,6 +40,7 @@ and can restore individual files from the archive. Star supports ACL.
%patch3 -p1 -b .changewarnSegv %patch3 -p1 -b .changewarnSegv
%patch4 -p1 -b .removenames %patch4 -p1 -b .removenames
%patch5 -p1 -b .conflict %patch5 -p1 -b .conflict
%patch6 -p1 -b .namesoverflow
iconv -f iso_8859-1 -t utf-8 AN-1.5 >AN-1.5_utf8 iconv -f iso_8859-1 -t utf-8 AN-1.5 >AN-1.5_utf8
mv AN-1.5_utf8 AN-1.5 mv AN-1.5_utf8 AN-1.5
cp -a READMEs/README.linux . cp -a READMEs/README.linux .
@ -113,6 +116,10 @@ rm -rf ${RPM_BUILD_ROOT}
%{_mandir}/man1/ustar.1* %{_mandir}/man1/ustar.1*
%changelog %changelog
* Wed Feb 03 2010 Ondrej Vasik <ovasik@redhat.com> 1.5-9
- fix buffer overflow for files with names of length
100 chars(#556664)
* Thu Aug 27 2009 Ondrej Vasik <ovasik@redhat.com> 1.5-8 * Thu Aug 27 2009 Ondrej Vasik <ovasik@redhat.com> 1.5-8
- provide symlinked manpage for ustar - provide symlinked manpage for ustar