Bugzilla – Attachment 38585 Details for
Bug 81518
VUL-0: CVE-2005-1391: pound buffer overflow
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
IDP Log In
|
Forgot Password
[patch]
pound-1.8.2-CAN-2005-1391.diff
pound-1.8.2-CAN-2005-1391.diff (text/plain), 1.34 KB, created by
Ludwig Nussel
on 2005-06-03 10:08:09 UTC
(
hide
)
Description:
pound-1.8.2-CAN-2005-1391.diff
Filename:
MIME Type:
Creator:
Ludwig Nussel
Created:
2005-06-03 10:08:09 UTC
Size:
1.34 KB
patch
obsolete
># only last hunk is CAN-2005-1391 > >Index: Pound-1.8.2/config.c >=================================================================== >--- Pound-1.8.2.orig/config.c >+++ Pound-1.8.2/config.c >@@ -755,7 +755,7 @@ config_parse(int argc, char **argv) > user = NULL; > groups = NULL; > root = NULL; >- e500 = e501 = e503 = NULL; >+ e500 = e501 = e503 = e414 = NULL; > CS_segment = CS_parm = CS_qid = CS_qval = CS_frag = NULL; > head_off = NULL; > check_URL = 0; >Index: Pound-1.8.2/http.c >=================================================================== >--- Pound-1.8.2.orig/http.c >+++ Pound-1.8.2/http.c >@@ -204,6 +204,7 @@ err_reply(BIO *c, char *head, char *txt) > snprintf(cont, sizeof(cont), err_cont, head, head, txt); > snprintf(rep, sizeof(rep), err_head, head, strlen(cont), cont); > BIO_write(c, rep, strlen(rep)); >+ BIO_flush(c); > return; > } > >Index: Pound-1.8.2/svc.c >=================================================================== >--- Pound-1.8.2.orig/svc.c >+++ Pound-1.8.2/svc.c >@@ -690,7 +690,7 @@ add_port(char *host, struct sockaddr_in > if(strchr(host, ':') != NULL) > /* the host already contains a port */ > return NULL; >- sprintf(res, "Host: %s:%hd", host, ntohs(to_host->sin_port)); >+ snprintf(res, MAXBUF - 1, "Host: %s:%hd", host, ntohs(to_host->sin_port)); > return strdup(res); > } >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
Actions:
View
|
Diff
Attachments on
bug 81518
: 38585