Mageia Bugzilla – Attachment 4299 Details for
Bug 11112
cyrus-sasl: NULL deref causing SIGSEGV in gssapi.c, NULL derefs from crypt() (CVE-2013-4122)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
New Account
|
Forgot Password
[patch]
Patch to cyrus-sasl-2.1.25 that fixes the segfault in sasl_gss_encode
cyrus-sasl-gssapi-segfault.patch (text/plain), 703 bytes, created by
Luca Olivetti
on 2013-08-30 22:20:42 CEST
(
hide
)
Description:
Patch to cyrus-sasl-2.1.25 that fixes the segfault in sasl_gss_encode
Filename:
MIME Type:
Creator:
Luca Olivetti
Created:
2013-08-30 22:20:42 CEST
Size:
703 bytes
patch
obsolete
>diff --unified --recursive cyrus-sasl-2.1.25.orig/plugins/gssapi.c cyrus-sasl-2.1.25/plugins/gssapi.c >--- cyrus-sasl-2.1.25.orig/plugins/gssapi.c 2013-08-30 21:58:00.093211359 +0200 >+++ cyrus-sasl-2.1.25/plugins/gssapi.c 2013-08-30 22:00:23.234203759 +0200 >@@ -373,7 +373,7 @@ > } > > if (output_token->value && output) { >- unsigned char * p = (unsigned char *) text->encode_buf; >+ unsigned char * p; > > ret = _plug_buf_alloc(text->utils, > &(text->encode_buf), >@@ -387,6 +387,8 @@ > return ret; > } > >+ p = (unsigned char *) text->encode_buf; >+ > p[0] = (output_token->length>>24) & 0xFF; > p[1] = (output_token->length>>16) & 0xFF; > p[2] = (output_token->length>>8) & 0xFF;
diff --unified --recursive cyrus-sasl-2.1.25.orig/plugins/gssapi.c cyrus-sasl-2.1.25/plugins/gssapi.c --- cyrus-sasl-2.1.25.orig/plugins/gssapi.c 2013-08-30 21:58:00.093211359 +0200 +++ cyrus-sasl-2.1.25/plugins/gssapi.c 2013-08-30 22:00:23.234203759 +0200 @@ -373,7 +373,7 @@ } if (output_token->value && output) { - unsigned char * p = (unsigned char *) text->encode_buf; + unsigned char * p; ret = _plug_buf_alloc(text->utils, &(text->encode_buf), @@ -387,6 +387,8 @@ return ret; } + p = (unsigned char *) text->encode_buf; + p[0] = (output_token->length>>24) & 0xFF; p[1] = (output_token->length>>16) & 0xFF; p[2] = (output_token->length>>8) & 0xFF;
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 11112
: 4299