r791 - packages/netpanzer/netpanzer/trunk/debian/patches

[Gonéri Le Bouder]

Author: goneri-guest
Date: 2006-06-04 12:21:25 +0000 (Sun, 04 Jun 2006)
New Revision: 791

Added:
   packages/netpanzer/netpanzer/trunk/debian/patches/02_setframe_denial_of_service.patch
Log:
#370146
netpanzer: [CVE-2006-2575] setFrame() Denial of Service Vulnerability


Added: packages/netpanzer/netpanzer/trunk/debian/patches/02_setframe_denial_of_service.patch
===================================================================
--- packages/netpanzer/netpanzer/trunk/debian/patches/02_setframe_denial_of_service.patch	2006-06-02 13:56:00 UTC (rev 790)
+++ packages/netpanzer/netpanzer/trunk/debian/patches/02_setframe_denial_of_service.patch	2006-06-04 12:21:25 UTC (rev 791)
@@ -0,0 +1,17 @@
+# Eddy & Goneri
+--- src/Lib/2D/Surface.hpp.orig	2006-06-04 14:16:29.000000000 +0200
++++ src/Lib/2D/Surface.hpp	2006-06-04 14:09:17.000000000 +0200
+@@ -366,8 +366,11 @@
+ 
+     void setFrame(const float &frameNum)
+     {
+-        assert(frameNum >= 0.0);
+-        assert(frameNum < frameCount);
++        if (frameNum < 0.0 || frameNum >= frameCount) {
++            throw Exception("frameNum out of range.");
++            return;
++        }
++        
+         mem = frame0 + (pix.y * stride) * int(frameNum);
+     }
+