summaryrefslogtreecommitdiff
path: root/user/netqmail/0005-CVE-2005-1513.patch
diff options
context:
space:
mode:
authorLaurent Bercot <ska-adelie@skarnet.org>2020-05-21 11:41:37 +0000
committerLaurent Bercot <ska-adelie@skarnet.org>2020-05-21 11:41:37 +0000
commit78b054312b6c6e22a862c94d7a544f44c5161eb3 (patch)
tree2fc177cd9db0605940318f259f21c77df5ed5b4b /user/netqmail/0005-CVE-2005-1513.patch
parent357959274975f567bea4548c97719e4f573544f5 (diff)
downloadpackages-78b054312b6c6e22a862c94d7a544f44c5161eb3.tar.gz
packages-78b054312b6c6e22a862c94d7a544f44c5161eb3.tar.bz2
packages-78b054312b6c6e22a862c94d7a544f44c5161eb3.tar.xz
packages-78b054312b6c6e22a862c94d7a544f44c5161eb3.zip
user/netqmail: fix CVE-2005-1513
Diffstat (limited to 'user/netqmail/0005-CVE-2005-1513.patch')
-rw-r--r--user/netqmail/0005-CVE-2005-1513.patch19
1 files changed, 19 insertions, 0 deletions
diff --git a/user/netqmail/0005-CVE-2005-1513.patch b/user/netqmail/0005-CVE-2005-1513.patch
new file mode 100644
index 000000000..3b3876cb3
--- /dev/null
+++ b/user/netqmail/0005-CVE-2005-1513.patch
@@ -0,0 +1,19 @@
+diff -rNU3 netqmail-1.06.old/alloc.c netqmail-1.06/alloc.c
+--- netqmail-1.06.old/alloc.c 1998-06-15 10:53:16.000000000 +0000
++++ netqmail-1.06/alloc.c 2020-05-21 11:33:24.689739728 +0000
+@@ -1,3 +1,4 @@
++#include <limits.h>
+ #include "alloc.h"
+ #include "error.h"
+ extern char *malloc();
+@@ -15,6 +16,10 @@
+ unsigned int n;
+ {
+ char *x;
++ if (n >= (INT_MAX >> 3)) {
++ errno = error_nomem;
++ return 0;
++ }
+ n = ALIGNMENT + n - (n & (ALIGNMENT - 1)); /* XXX: could overflow */
+ if (n <= avail) { avail -= n; return space + avail; }
+ x = malloc(n);