SECURITY: upgrade to 1.5.0;

fixes several secuirty vulnerabilities.
http://www.vuxml.org/openbsd/0dfcb310-0f38-11da-ba28-00065bd5b0b6.html

ok brad@ pvalchev@
This commit is contained in:
robert 2005-08-17 16:22:34 +00:00
parent f1e7eab840
commit 613ac4d41a
4 changed files with 37 additions and 51 deletions

View File

@ -1,11 +1,10 @@
# $OpenBSD: Makefile,v 1.81 2005/08/11 16:58:52 fgsch Exp $
# $OpenBSD: Makefile,v 1.82 2005/08/17 16:22:34 robert Exp $
SHARED_ONLY= Yes
COMMENT= "Gtk AIM, ICQ, IRC, Jabber, MSN, Yahoo, SILC and Zephyr client"
DISTNAME= gaim-1.4.0
PKGNAME= ${DISTNAME}p2
DISTNAME= gaim-1.5.0
CATEGORIES= net
HOMEPAGE= http://gaim.sourceforge.net/

View File

@ -1,4 +1,4 @@
MD5 (gaim-1.4.0.tar.gz) = 3267349ec179426c113f6fc0f2cd6573
RMD160 (gaim-1.4.0.tar.gz) = 1ab0b29b0b35e69edf126848f3f4efa0edbe465a
SHA1 (gaim-1.4.0.tar.gz) = eb00a81580de00476ce811550b4d2bf55c4294ea
SIZE (gaim-1.4.0.tar.gz) = 8481677
MD5 (gaim-1.5.0.tar.gz) = dd984bd3116d8146545a492d314b0dae
RMD160 (gaim-1.5.0.tar.gz) = e49e1aa323fa70b9b0ed0792e5d16a5d68b183f8
SHA1 (gaim-1.5.0.tar.gz) = 35b30a5a804c15d06b24a92ad555282d0caadcc9
SIZE (gaim-1.5.0.tar.gz) = 8660250

View File

@ -1,43 +0,0 @@
$OpenBSD: patch-src_protocols_msn_msg_c,v 1.2 2005/08/11 16:58:52 fgsch Exp $
--- src/protocols/msn/msg.c.orig Thu Jun 9 23:29:45 2005
+++ src/protocols/msn/msg.c Thu Aug 11 13:31:35 2005
@@ -187,7 +187,8 @@ msn_message_parse_slp_body(MsnMessage *m
if (body_len > 0) {
msg->body_len = len - (tmp - body);
- msg->body = g_memdup(tmp, msg->body_len);
+ msg->body = g_malloc0(msg->body_len + 1);
+ memcpy(msg->body, tmp, msg->body_len);
tmp += body_len;
}
}
@@ -300,7 +301,8 @@ msn_message_parse_payload(MsnMessage *ms
/* Import the body. */
if (body_len > 0) {
msg->body_len = body_len;
- msg->body = g_memdup(tmp, msg->body_len);
+ msg->body = g_malloc0(msg->body_len + 1);
+ memcpy(msg->body, tmp, msg->body_len);
tmp += body_len;
}
@@ -315,7 +317,8 @@ msn_message_parse_payload(MsnMessage *ms
{
if (payload_len - (tmp - tmp_base) > 0) {
msg->body_len = payload_len - (tmp - tmp_base);
- msg->body = g_memdup(tmp, msg->body_len);
+ msg->body = g_malloc0(msg->body_len + 1);
+ memcpy(msg->body, tmp, msg->body_len);
}
}
@@ -511,7 +514,8 @@ msn_message_set_bin_data(MsnMessage *msg
if (data != NULL && len > 0)
{
- msg->body = g_memdup(data, len);
+ msg->body = g_malloc0(len + 1);
+ memcpy(msg->body, data, len);
msg->body_len = len;
}
else

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST,v 1.42 2005/07/23 20:57:02 brad Exp $
@comment $OpenBSD: PLIST,v 1.43 2005/08/17 16:22:34 robert Exp $
bin/gaim
bin/gaim-remote
include/gaim/
@ -131,17 +131,24 @@ lib/gaim/ticker.so
lib/gaim/timestamp.so
lib/libgaim-remote.la
@lib lib/libgaim-remote.so.0.0
lib/pkgconfig/
lib/pkgconfig/gaim.pc
@man man/man1/gaim-remote.1
@man man/man1/gaim.1
share/applications/
share/applications/gaim.desktop
share/locale/
share/locale/am/
share/locale/am/LC_MESSAGES/
share/locale/am/LC_MESSAGES/gaim.mo
share/locale/az/
share/locale/az/LC_MESSAGES/
share/locale/az/LC_MESSAGES/gaim.mo
share/locale/bg/
share/locale/bg/LC_MESSAGES/
share/locale/bg/LC_MESSAGES/gaim.mo
share/locale/ca/
share/locale/ca/LC_MESSAGES/
share/locale/ca/LC_MESSAGES/gaim.mo
share/locale/cs/
share/locale/cs/LC_MESSAGES/
@ -155,7 +162,11 @@ share/locale/de/LC_MESSAGES/gaim.mo
share/locale/en_AU/
share/locale/en_AU/LC_MESSAGES/
share/locale/en_AU/LC_MESSAGES/gaim.mo
share/locale/en_CA/
share/locale/en_CA/LC_MESSAGES/
share/locale/en_CA/LC_MESSAGES/gaim.mo
share/locale/en_GB/
share/locale/en_GB/LC_MESSAGES/
share/locale/en_GB/LC_MESSAGES/gaim.mo
share/locale/es/
share/locale/es/LC_MESSAGES/
@ -172,6 +183,8 @@ share/locale/fr/LC_MESSAGES/gaim.mo
share/locale/he/
share/locale/he/LC_MESSAGES/
share/locale/he/LC_MESSAGES/gaim.mo
share/locale/hi/
share/locale/hi/LC_MESSAGES/
share/locale/hi/LC_MESSAGES/gaim.mo
share/locale/hu/
share/locale/hu/LC_MESSAGES/
@ -188,7 +201,11 @@ share/locale/ka/LC_MESSAGES/gaim.mo
share/locale/ko/
share/locale/ko/LC_MESSAGES/
share/locale/ko/LC_MESSAGES/gaim.mo
share/locale/lt/
share/locale/lt/LC_MESSAGES/
share/locale/lt/LC_MESSAGES/gaim.mo
share/locale/mk/
share/locale/mk/LC_MESSAGES/
share/locale/mk/LC_MESSAGES/gaim.mo
share/locale/my_MM/
share/locale/my_MM/LC_MESSAGES/
@ -202,6 +219,8 @@ share/locale/nl/LC_MESSAGES/gaim.mo
share/locale/nn/
share/locale/nn/LC_MESSAGES/
share/locale/nn/LC_MESSAGES/gaim.mo
share/locale/pa/
share/locale/pa/LC_MESSAGES/
share/locale/pa/LC_MESSAGES/gaim.mo
share/locale/pl/
share/locale/pl/LC_MESSAGES/
@ -224,8 +243,14 @@ share/locale/sk/LC_MESSAGES/gaim.mo
share/locale/sl/
share/locale/sl/LC_MESSAGES/
share/locale/sl/LC_MESSAGES/gaim.mo
share/locale/sq/
share/locale/sq/LC_MESSAGES/
share/locale/sq/LC_MESSAGES/gaim.mo
share/locale/sr/
share/locale/sr/LC_MESSAGES/
share/locale/sr/LC_MESSAGES/gaim.mo
share/locale/sr@Latn/
share/locale/sr@Latn/LC_MESSAGES/
share/locale/sr@Latn/LC_MESSAGES/gaim.mo
share/locale/sv/
share/locale/sv/LC_MESSAGES/
@ -236,7 +261,12 @@ share/locale/tr/LC_MESSAGES/gaim.mo
share/locale/uk/
share/locale/uk/LC_MESSAGES/
share/locale/uk/LC_MESSAGES/gaim.mo
share/locale/vi/
share/locale/vi/LC_MESSAGES/
share/locale/vi/LC_MESSAGES/gaim.mo
share/locale/xh/
share/locale/xh/LC_MESSAGES/
share/locale/xh/LC_MESSAGES/gaim.mo
share/locale/zh_CN/
share/locale/zh_CN/LC_MESSAGES/
share/locale/zh_CN/LC_MESSAGES/gaim.mo