SECURITY update to gnuchess-6.2.4

Input buffer overflow
This commit is contained in:
jca 2016-11-17 02:06:46 +00:00
parent bf8bd13b2d
commit 3cccd9a872
4 changed files with 6 additions and 20 deletions

View File

@ -1,10 +1,9 @@
# $OpenBSD: Makefile,v 1.38 2016/09/01 10:53:27 jasper Exp $
# $OpenBSD: Makefile,v 1.39 2016/11/17 02:06:46 jca Exp $
COMMENT= chess program
DISTNAME= gnuchess-6.2.2
DISTNAME= gnuchess-6.2.4
DISTFILES= ${DISTNAME}.tar.gz book_1.02.pgn.gz
REVISION= 0
CATEGORIES= games
HOMEPAGE= http://www.gnu.org/software/chess/

View File

@ -1,4 +1,4 @@
SHA256 (book_1.02.pgn.gz) = 3qx37bBhpZJJoZ3rA9o0nK4FHlJSemy1r4CNk5jTLUQ=
SHA256 (gnuchess-6.2.2.tar.gz) = d3bBFO61iJ3qadxHFaNiLsV/Ze+rZnmH59cYPMBTgag=
SHA256 (gnuchess-6.2.4.tar.gz) = PEJcAmTyU/xcwrqWmr5mfXdwPHKHcL1LI8RWy+Xggu8=
SIZE (book_1.02.pgn.gz) = 26265281
SIZE (gnuchess-6.2.2.tar.gz) = 747054
SIZE (gnuchess-6.2.4.tar.gz) = 757985

View File

@ -1,14 +0,0 @@
$OpenBSD: patch-src_main_cc,v 1.1 2015/10/20 07:46:28 dcoppa Exp $
upstream svn revision r128: set QUIT flag for -a option (--addbook)
--- src/main.cc.orig Tue Oct 13 01:03:42 2015
+++ src/main.cc Tue Oct 20 09:24:16 2015
@@ -412,6 +412,7 @@ There is NO WARRANTY, to the extent permitted by law.\
char data[9+MAXSTR+1+4]="";
sprintf( data, "book add %s\nquit", opt_addbook );
SendToEngine( data );
+ SET (flags, QUIT);
}
if ( opt_easy == 0 )

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST,v 1.10 2015/10/20 07:46:28 dcoppa Exp $
@comment $OpenBSD: PLIST,v 1.11 2016/11/17 02:06:46 jca Exp $
@bin bin/gnuchess
bin/gnuchessu
bin/gnuchessx
@ -27,3 +27,4 @@ share/locale/pt_BR/LC_MESSAGES/gnuchess.mo
share/locale/sr/LC_MESSAGES/gnuchess.mo
share/locale/uk/LC_MESSAGES/gnuchess.mo
share/locale/vi/LC_MESSAGES/gnuchess.mo
share/locale/zh_CN/LC_MESSAGES/gnuchess.mo