cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

A bug discovered in 2.0.6 allows a remote user to crash the client.

Browse Source 
All users should upgrade to a patched 2.0.6 immediately.
http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html

ok couderc@
This commit is contained in:
margarida 2003-12-14 21:25:37 +00:00
parent b9d3d9f4ac
commit 88116f8a01
2 changed files with 24 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
net/xchat2/Makefile
View File

@ -1,11 +1,11 @@
# $OpenBSD: Makefile,v 1.5 2003/12/08 03:32:01 margarida Exp $
# $OpenBSD: Makefile,v 1.6 2003/12/14 21:25:37 margarida Exp $
COMMENT= "GTK+2 IRC client"
MAJOR= 2.0
VERSION= ${MAJOR}.6
DISTNAME= xchat-${VERSION}
PKGNAME= xchat2-${VERSION}
PKGNAME= xchat2-${VERSION}p1
CATEGORIES= net x11
HOMEPAGE= http://www.xchat.org/

22
net/xchat2/patches/patch-src_common_dcc_c Normal file
View File

@ -0,0 +1,22 @@
$OpenBSD: patch-src_common_dcc_c,v 1.1 2003/12/14 21:25:38 margarida Exp $
--- src/common/dcc.c.orig 2003-11-28 03:06:57.000000000 +0000
+++ src/common/dcc.c 2003-12-14 20:33:44.000000000 +0000
@@ -1659,9 +1659,15 @@ handle_dcc (struct session *sess, char *
* sending file.
*/
dcc = find_dcc_from_id (pasvid, TYPE_SEND);
- dcc->addr = addr;
- dcc->port = port;
- dcc_connect(dcc);
+ if (dcc)
+ {
+ dcc->addr = addr;
+ dcc->port = port;
+ dcc_connect (dcc);
+ } else
+ {
+ dcc_malformed (sess, nick, word_eol[4] + 2);
+ }
return;
}