openbsd-ports/net/samba/patches/patch-lib_iconv.c
brad 3874e6995b Update to Samba 3.0.30; bug fixes and a security issue fixed,
CVE-2008-1105.

Specifically crafted SMB responses can result in a heap overflow
in the Samba client code. Because the server process, smbd, can
itself act as a client during operations such as printer
notification and domain authentication, this issue affects both
Samba client and server installations.

Feedback from sthen@
ok mbalmer@ sthen@
2008-07-11 11:40:33 +00:00

13 lines
436 B
C

$OpenBSD: patch-lib_iconv.c,v 1.2 2008/07/11 11:40:33 brad Exp $
--- lib/iconv.c.orig Wed May 28 08:41:11 2008
+++ lib/iconv.c Thu Jul 3 04:19:09 2008
@@ -137,7 +137,7 @@ static size_t sys_iconv(void *cd,
char **outbuf, size_t *outbytesleft)
{
size_t ret = iconv((iconv_t)cd,
- (char **)inbuf, inbytesleft,
+ inbuf, inbytesleft,
outbuf, outbytesleft);
if (ret == (size_t)-1) {
int saved_errno = errno;