r6138 - in /trunk/libdevice-cdio-perl/debian/patches: 00list 05_buffer_overflows_in_perliso9660.dpatch

[tincho-guest at users.alioth.debian.org]

Author: tincho-guest
Date: Mon Jul 30 17:39:48 2007
New Revision: 6138

URL: http://svn.debian.org/wsvn/?sc=1&rev=6138
Log:
Fix to a buffer overflow

Added:
    trunk/libdevice-cdio-perl/debian/patches/05_buffer_overflows_in_perliso9660.dpatch
Modified:
    trunk/libdevice-cdio-perl/debian/patches/00list

Modified: trunk/libdevice-cdio-perl/debian/patches/00list
URL: http://svn.debian.org/wsvn/trunk/libdevice-cdio-perl/debian/patches/00list?rev=6138&op=diff
==============================================================================
--- trunk/libdevice-cdio-perl/debian/patches/00list (original)
+++ trunk/libdevice-cdio-perl/debian/patches/00list Mon Jul 30 17:39:48 2007
@@ -2,3 +2,4 @@
 02_wrong_function_name
 03_version_information_in_swig
 04_wrong_handling_of_output_parameters
+05_buffer_overflows_in_perliso9660

Added: trunk/libdevice-cdio-perl/debian/patches/05_buffer_overflows_in_perliso9660.dpatch
URL: http://svn.debian.org/wsvn/trunk/libdevice-cdio-perl/debian/patches/05_buffer_overflows_in_perliso9660.dpatch?rev=6138&op=file
==============================================================================
--- trunk/libdevice-cdio-perl/debian/patches/05_buffer_overflows_in_perliso9660.dpatch (added)
+++ trunk/libdevice-cdio-perl/debian/patches/05_buffer_overflows_in_perliso9660.dpatch Mon Jul 30 17:39:48 2007
@@ -1,0 +1,28 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## 05_buffer_overflows_in_perliso9660.dpatch by Martín Ferrari <martin.ferrari at gmail.com>
+##
+## All lines beginning with `## DP:' are a description of the patch.
+## DP: There are a coupĺe of offbyone errors that lead to buffer overflows
+
+ at DPATCH@
+diff -urNad libdevice-cdio-perl~/perliso9660.swg libdevice-cdio-perl/perliso9660.swg
+--- libdevice-cdio-perl~/perliso9660.swg	2007-07-30 18:38:48.000000000 +0100
++++ libdevice-cdio-perl/perliso9660.swg	2007-07-30 18:39:18.000000000 +0100
+@@ -445,7 +445,7 @@
+ %inline %{
+ char *
+ name_translate(const char *psz_oldname) {
+-  char *psz_newname=calloc(sizeof(char), strlen(psz_oldname));
++  char *psz_newname=calloc(sizeof(char), strlen(psz_oldname)+1);
+   iso9660_name_translate(psz_oldname, psz_newname);
+   return psz_newname;
+ }
+@@ -470,7 +470,7 @@
+ %inline %{
+ char * 
+ name_translate_ext(const char *psz_oldname, uint8_t i_joliet_level) {
+-  char *psz_newname=calloc(sizeof(char), strlen(psz_oldname));
++  char *psz_newname=calloc(sizeof(char), strlen(psz_oldname)+1);
+   iso9660_name_translate_ext(psz_oldname, psz_newname, i_joliet_level);
+   return psz_newname;
+ }