summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDuPol <DuPol@gmx.de>2015-10-03 18:38:17 +0200
committerDuPol <DuPol@gmx.de>2015-10-03 18:38:17 +0200
commitb63120bf56b3b33a06750d64d9d83a3e55a8f33d (patch)
tree7cb77ce13834b5773ec598628eb930f60fdcdbde /media-libs/devil/files/devil-1.7.8-CVE-2009-3994.patch
parent[media-video/lives] Version bump and drop old. (diff)
downloadDuPol-b63120bf56b3b33a06750d64d9d83a3e55a8f33d.tar.gz
DuPol-b63120bf56b3b33a06750d64d9d83a3e55a8f33d.tar.bz2
DuPol-b63120bf56b3b33a06750d64d9d83a3e55a8f33d.zip
[media-libs/devil] Copy devil-1.7.8-r2.ebuild from main tree and add
patch to fix test execution with latest automake.
Diffstat (limited to 'media-libs/devil/files/devil-1.7.8-CVE-2009-3994.patch')
-rw-r--r--media-libs/devil/files/devil-1.7.8-CVE-2009-3994.patch17
1 files changed, 17 insertions, 0 deletions
diff --git a/media-libs/devil/files/devil-1.7.8-CVE-2009-3994.patch b/media-libs/devil/files/devil-1.7.8-CVE-2009-3994.patch
new file mode 100644
index 0000000..6c9f2db
--- /dev/null
+++ b/media-libs/devil/files/devil-1.7.8-CVE-2009-3994.patch
@@ -0,0 +1,17 @@
+http://bugs.gentoo.org/297760
+
+--- src-IL/src/il_dicom.c
++++ src-IL/src/il_dicom.c
+@@ -427,9 +427,11 @@ ILboolean GetUID(ILubyte *UID)
+ return IL_FALSE;
+
+ ValLen = GetLittleUShort();
++ if (ValLen > 64)
++ return IL_FALSE;
+ if (iread(UID, ValLen, 1) != 1)
+ return IL_FALSE;
+- UID[64] = 0; // Just to make sure that our string is terminated.
++ UID[ValLen] = 0; // Just to make sure that our string is terminated.
+
+ return IL_TRUE;
+ }