瀏覽代碼

Security Fix (CVE-2005-3962, OpenPKG-SA-2005.025-perl)

Ralf S. Engelschall 20 年之前
父節點
當前提交
91b73f5b22
共有 2 個文件被更改,包括 22 次插入1 次删除
  1. 21 0
      perl/perl.patch
  2. 1 1
      perl/perl.spec

+ 21 - 0
perl/perl.patch

@@ -305,3 +305,24 @@ Index: hints/solaris_2.sh
  	#
  	# Using gcc.
  	#
+
+-----------------------------------------------------------------------------
+
+Security Fix (CVE-2005-3962, OpenPKG-SA-2005.025-perl)
+
+Index: sv.c
+--- sv.c.orig	2005-05-27 12:38:11 +0200
++++ sv.c	2005-12-03 13:49:26 +0100
+@@ -8519,7 +8519,10 @@
+ 	if (EXPECT_NUMBER(q, width)) {
+ 	    if (*q == '$') {
+ 		++q;
+-		efix = width;
++		if (width > PERL_INT_MAX)
++		    efix = PERL_INT_MAX;
++		else
++		    efix = width;
+ 	    } else {
+ 		goto gotwidth;
+ 	    }
+

+ 1 - 1
perl/perl.spec

@@ -33,7 +33,7 @@ Class:        CORE
 Group:        Language
 License:      GPL/Artistic
 Version:      5.8.7
-Release:      20050921
+Release:      20051203
 
 #   list of sources
 Source0:      ftp://ftp.cpan.org/pub/CPAN/src/perl-%{version}.tar.gz