openbsd-ports/lang/ruby/patches/patch-eval_c
bernd ede46f770e Security update to ruby-1.8.6-p369.
Fixes a denial of service vulnerability in the BigDecimal
standard library of Ruby.

http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/
2009-06-16 09:12:44 +00:00

20 lines
717 B
Plaintext

$OpenBSD: patch-eval_c,v 1.7 2009/06/16 09:12:44 bernd Exp $
Fix usage of short-named constants.
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=18485
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=22679
https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/282302
--- eval.c.orig Mon Mar 23 10:26:03 2009
+++ eval.c Wed Jun 10 12:27:20 2009
@@ -1401,7 +1401,7 @@ ruby_init()
rb_call_inits();
ruby_class = rb_cObject;
ruby_frame->self = ruby_top_self;
- ruby_top_cref = rb_node_newnode(NODE_CREF,rb_cObject,0,0);
+ ruby_top_cref = NEW_CREF(rb_cObject, 0);
ruby_cref = ruby_top_cref;
rb_define_global_const("TOPLEVEL_BINDING", rb_f_binding(ruby_top_self));
#ifdef __MACOS__