update to remind-3.1.15

This commit is contained in:
jasper 2015-08-21 14:11:14 +00:00
parent a52d2349ec
commit f7ce414278
3 changed files with 7 additions and 26 deletions

View File

@ -1,10 +1,9 @@
# $OpenBSD: Makefile,v 1.35 2015/08/04 09:53:26 jasper Exp $
# $OpenBSD: Makefile,v 1.36 2015/08/21 14:11:14 jasper Exp $
COMMENT= scripting language for reminders, with a Tk front end
DISTNAME= remind-03.01.14
PKGNAME= remind-3.1.14
REVISION= 0
DISTNAME= remind-03.01.15
PKGNAME= remind-3.1.15
CATEGORIES= misc
MASTER_SITES= http://www.roaringpenguin.com/files/download/
@ -17,8 +16,8 @@ PERMIT_PACKAGE_CDROM= Yes
WANTLIB= c m
MODULES= x11/tk
RUN_DEPENDS= ${MODTK_RUN_DEPENDS} \
devel/tcllib
RUN_DEPENDS= ${MODTK_RUN_DEPENDS} \
devel/tcllib
CONFIGURE_STYLE= gnu

View File

@ -1,2 +1,2 @@
SHA256 (remind-03.01.14.tar.gz) = CtFK55bf2ETikBxpHQPr3Rc/2KcRQd8MJsHRkvKQMa0=
SIZE (remind-03.01.14.tar.gz) = 362771
SHA256 (remind-03.01.15.tar.gz) = itq0wLMKVWw0IjCUxcdHeRZNXzuL5muAOfRLV35njsE=
SIZE (remind-03.01.15.tar.gz) = 363101

View File

@ -1,18 +0,0 @@
$OpenBSD: patch-src_var_c,v 1.2 2015/08/20 07:54:34 jasper Exp $
CVE-2015-5957 remind: unspecified buffer overflow flaw
http://seclists.org/oss-sec/2015/q3/232
--- src/var.c.orig Tue Aug 4 11:50:13 2015
+++ src/var.c Tue Aug 4 11:51:00 2015
@@ -757,6 +757,10 @@ static void DumpSysVar(char const *name, const SysVar
if (!v && !name) return; /* Shouldn't happen... */
buffer[0]='$'; buffer[1] = 0;
+ if (name && strlen(name) > VAR_NAME_LEN) {
+ fprintf(ErrFp, "$%s: Name too long\n", name);
+ return;
+ }
if (name) strcat(buffer, name); else strcat(buffer, v->name);
fprintf(ErrFp, "%*s ", VAR_NAME_LEN+1, buffer);
if (v) {