9e5aaab242
- A vulnerability in ClamAV's chm-parser allowed remote attackers to cause a denial of service (application crash) via a malformed CHM file (CVE-2008-1389). - A vulnerability in libclamav would allow attackers to cause a denial of service via vectors related to an out-of-memory condition (CVE-2008-3912). - Multiple memory leaks were found in ClamAV that could possibly allow attackers to cause a denial of service via excessive memory consumption (CVE-2008-3913). - A number of unspecified vulnerabilities in ClamAV were reported that have an unknown impact and attack vectors related to file descriptor leaks (CVE-2008-3914). various OpenBSD patches rolled in upstream. thanks to sturm@ for looking over systrace.filter (needed for the test of sendmsg() in configure to enable FD passing).
21 lines
854 B
Plaintext
21 lines
854 B
Plaintext
--- clamav-milter/clamav-milter.c.orig Mon Sep 1 18:19:44 2008
|
|
+++ clamav-milter/clamav-milter.c Fri Sep 5 02:32:34 2008
|
|
@@ -1201,7 +1201,7 @@ main(int argc, char **argv)
|
|
* uid == 0 for that
|
|
*/
|
|
on = 1;
|
|
- if(setsockopt(broadcastSock, SOL_SOCKET, SO_BROADCAST, (int *)&on, sizeof(on)) < 0) {
|
|
+ if(setsockopt(broadcastSock, SOL_SOCKET, 0, (int *)&on, sizeof(on)) < 0) {
|
|
perror("setsockopt");
|
|
return EX_UNAVAILABLE;
|
|
}
|
|
@@ -1224,7 +1224,7 @@ main(int argc, char **argv)
|
|
memset(&ifr, '\0', sizeof(struct ifreq));
|
|
strncpy(ifr.ifr_name, iface, sizeof(ifr.ifr_name) - 1);
|
|
ifr.ifr_name[sizeof(ifr.ifr_name)-1]='\0';
|
|
- if(setsockopt(broadcastSock, SOL_SOCKET, SO_BINDTODEVICE, &ifr, sizeof(ifr)) < 0) {
|
|
+ if(setsockopt(broadcastSock, SOL_SOCKET, 0, &ifr, sizeof(ifr)) < 0) {
|
|
perror(iface);
|
|
return EX_CONFIG;
|
|
}
|