[libyaml-libyaml-perl] 03/04: Revert "Add libyaml-string-overflow.patch patch"
Salvatore Bonaccorso
carnil at debian.org
Mon Feb 10 15:24:30 UTC 2014
This is an automated email from the git hooks/post-receive script.
carnil pushed a commit to branch master
in repository libyaml-libyaml-perl.
commit 654f6b352ee1564e47fc3e442a4f70cbde9c4ced
Author: Salvatore Bonaccorso <carnil at debian.org>
Date: Mon Feb 10 16:16:23 2014 +0100
Revert "Add libyaml-string-overflow.patch patch"
This reverts commit 5960435971a7f8c06685dab5da119cf0ab7653cf.
---
debian/patches/libyaml-string-overflow.patch | 26 --------------------------
debian/patches/series | 1 -
2 files changed, 27 deletions(-)
diff --git a/debian/patches/libyaml-string-overflow.patch b/debian/patches/libyaml-string-overflow.patch
deleted file mode 100644
index d0d14ff..0000000
--- a/debian/patches/libyaml-string-overflow.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-Description: CVE-2013-6393: yaml_parser_scan_tag_uri: fix int overflow leading to buffer overflow
- This is a proposed patch from Florian Weimer <fweimer at redhat.com> for
- the string overflow issue. It has been ack'd by upstream.
-Origin: https://bugzilla.redhat.com/show_bug.cgi?id=1033990
-Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1033990
-Last-Update: 2014-01-29
----
-# HG changeset patch
-# User Florian Weimer <fweimer at redhat.com>
-# Date 1389273500 -3600
-# Thu Jan 09 14:18:20 2014 +0100
-# Node ID a54d7af707f25dc298a7be60fd152001d2b3035b
-# Parent 3e6507fa0c26d20c09f8f468f2bd04aa2fd1b5b5
-yaml_parser_scan_tag_uri: fix int overflow leading to buffer overflow
-
---- a/LibYAML/scanner.c
-+++ b/LibYAML/scanner.c
-@@ -2574,7 +2574,7 @@
-
- /* Resize the string to include the head. */
-
-- while (string.end - string.start <= (int)length) {
-+ while ((size_t)(string.end - string.start) <= length) {
- if (!yaml_string_extend(&string.start, &string.pointer, &string.end)) {
- parser->error = YAML_MEMORY_ERROR;
- goto error;
diff --git a/debian/patches/series b/debian/patches/series
index 74850df..5816c31 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,2 @@
fix_ftbfs_hardening_flags.diff
disable-update.sh.patch
-libyaml-string-overflow.patch
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libyaml-libyaml-perl.git
More information about the Pkg-perl-cvs-commits
mailing list