diff options
| author | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2018-06-26 05:56:36 -0500 |
|---|---|---|
| committer | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2018-06-26 05:56:36 -0500 |
| commit | eaf000db48d9eba9437b682e92dfa3d235623613 (patch) | |
| tree | a84e78babb69a87c5067b51edf68cc377cfc44b6 /system/perl-digest-sha1/perl-digest-sha1-check-object.patch | |
| parent | f45ba5475597853facdbbdb7bb242373ff43ffbd (diff) | |
| download | packages-eaf000db48d9eba9437b682e92dfa3d235623613.tar.gz packages-eaf000db48d9eba9437b682e92dfa3d235623613.tar.bz2 packages-eaf000db48d9eba9437b682e92dfa3d235623613.tar.xz packages-eaf000db48d9eba9437b682e92dfa3d235623613.zip | |
system/perl-digest-sha1: pull in for git-email
Diffstat (limited to 'system/perl-digest-sha1/perl-digest-sha1-check-object.patch')
| -rw-r--r-- | system/perl-digest-sha1/perl-digest-sha1-check-object.patch | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/system/perl-digest-sha1/perl-digest-sha1-check-object.patch b/system/perl-digest-sha1/perl-digest-sha1-check-object.patch new file mode 100644 index 000000000..110ef42d7 --- /dev/null +++ b/system/perl-digest-sha1/perl-digest-sha1-check-object.patch @@ -0,0 +1,22 @@ +https://rt.cpan.org/Public/Ticket/Attachment/WithHeaders/712715 + +The get_sha_info() function in SHA1.xs does not check that its argument +is an actual object. This means that segfaults can be generated by +commands such as: + +$ perl -Mblib -e "use Digest::SHA1; print Digest::SHA1->add(q(a))->hexdigest" +Segmentation fault + +diff -Naur Digest-SHA1-2.13/SHA1.xs Digest-SHA1-2.13.patched/SHA1.xs +--- Digest-SHA1-2.13/SHA1.xs 2010-07-02 23:51:12.000000000 -0700 ++++ Digest-SHA1-2.13.patched/SHA1.xs 2014-03-25 12:43:53.233272555 -0700 +@@ -372,7 +372,7 @@ + + static SHA_INFO* get_sha_info(pTHX_ SV* sv) + { +- if (sv_derived_from(sv, "Digest::SHA1")) ++ if (sv_isobject(sv) && sv_derived_from(sv, "Digest::SHA1")) + return INT2PTR(SHA_INFO*, SvIV(SvRV(sv))); + croak("Not a reference to a Digest::SHA1 object"); + return (SHA_INFO*)0; /* some compilers insist on a return value */ + |