openbsd-ports/net/gftp/patches/patch-lib_local_c
ajacoutot d2dc2575e1 - SECURITY: fix two boundary errors in fsplib code when processing
overly long directory or file names (CVE-2007-3961 & CVE-2007-3962
from Gentoo CVS via FreeBSD
- regen patches while here
2007-11-06 12:14:18 +00:00

13 lines
491 B
Plaintext

$OpenBSD: patch-lib_local_c,v 1.2 2007/11/06 12:14:18 ajacoutot Exp $
--- lib/local.c.orig Wed Feb 2 02:24:51 2005
+++ lib/local.c Tue Nov 6 13:05:08 2007
@@ -372,7 +372,7 @@ local_get_file_size (gftp_request * request, const cha
static int
local_chdir (gftp_request * request, const char *directory)
{
- char tempstr[255];
+ char tempstr[PATH_MAX];
g_return_val_if_fail (request != NULL, GFTP_EFATAL);
g_return_val_if_fail (request->protonum == GFTP_LOCAL_NUM, GFTP_EFATAL);