diff options
author | Max Rees <maxcrees@me.com> | 2019-09-12 02:15:41 -0500 |
---|---|---|
committer | Max Rees <maxcrees@me.com> | 2019-09-17 14:34:12 -0500 |
commit | f446d9b9ff1db370d47e068d2a074f2b0830f02d (patch) | |
tree | 950776a9cc02452a8f371dd79d6b15f9e3c7e234 /system/curl/curl-do-bounds-check-using-a-double-comparison.patch | |
parent | c1f0e5323ce8e2c68c22e2370311d6043861c4af (diff) | |
download | packages-f446d9b9ff1db370d47e068d2a074f2b0830f02d.tar.gz packages-f446d9b9ff1db370d47e068d2a074f2b0830f02d.tar.bz2 packages-f446d9b9ff1db370d47e068d2a074f2b0830f02d.tar.xz packages-f446d9b9ff1db370d47e068d2a074f2b0830f02d.zip |
system/curl: [CVE] bump to 7.66.0, fix network access violation
Diffstat (limited to 'system/curl/curl-do-bounds-check-using-a-double-comparison.patch')
-rw-r--r-- | system/curl/curl-do-bounds-check-using-a-double-comparison.patch | 32 |
1 files changed, 0 insertions, 32 deletions
diff --git a/system/curl/curl-do-bounds-check-using-a-double-comparison.patch b/system/curl/curl-do-bounds-check-using-a-double-comparison.patch deleted file mode 100644 index 34e2b6c71..000000000 --- a/system/curl/curl-do-bounds-check-using-a-double-comparison.patch +++ /dev/null @@ -1,32 +0,0 @@ -From 45a560390c4356bcb81d933bbbb229c8ea2acb63 Mon Sep 17 00:00:00 2001 -From: Adam Sampson <ats@offog.org> -Date: Wed, 9 Aug 2017 14:11:17 +0100 -Subject: [PATCH] curl: do bounds check using a double comparison - -The fix for this in 8661a0aacc01492e0436275ff36a21734f2541bb wasn't -complete: if the parsed number in num is larger than will fit in a long, -the conversion is undefined behaviour (causing test1427 to fail for me -on IA32 with GCC 7.1, although it passes on AMD64 and ARMv7). Getting -rid of the cast means the comparison will be done using doubles. - -It might make more sense for the max argument to also be a double... - -Fixes #1750 -Closes #1749 ---- - src/tool_paramhlp.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/src/tool_paramhlp.c b/src/tool_paramhlp.c -index b9dedc989e..85c5e79a7e 100644 ---- a/src/tool_paramhlp.c -+++ b/src/tool_paramhlp.c -@@ -218,7 +218,7 @@ static ParameterError str2double(double *val, const char *str, long max) - num = strtod(str, &endptr); - if(errno == ERANGE) - return PARAM_NUMBER_TOO_LARGE; -- if((long)num > max) { -+ if(num > max) { - /* too large */ - return PARAM_NUMBER_TOO_LARGE; - } |