[libyaml-libyaml-perl] 01/04: Add libyaml-string-overflow.patch patch

[Salvatore Bonaccorso]

This is an automated email from the git hooks/post-receive script.

carnil pushed a commit to branch squeeze
in repository libyaml-libyaml-perl.

commit 950fc61bb7f2d327ee690958d5faa370573abd5c
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Sat Feb 8 23:45:15 2014 +0100

    Add libyaml-string-overflow.patch patch
    
    Addresses CVE-2013-6393 for the LibYAML embedded copy in YAML::LibYAML.
---
 debian/patches/libyaml-string-overflow.patch | 26 ++++++++++++++++++++++++++
 debian/patches/series                        |  1 +
 2 files changed, 27 insertions(+)

diff --git a/debian/patches/libyaml-string-overflow.patch b/debian/patches/libyaml-string-overflow.patch
new file mode 100644
index 0000000..3ba2009
--- /dev/null
+++ b/debian/patches/libyaml-string-overflow.patch
@@ -0,0 +1,26 @@
+Description: CVE-2013-6393: yaml_parser_scan_tag_uri: fix int overflow leading to buffer overflow
+ This is a proposed patch from Florian Weimer <fweimer at redhat.com> for
+ the string overflow issue. It has been ack'd by upstream.
+Origin: https://bugzilla.redhat.com/show_bug.cgi?id=1033990
+Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1033990
+Last-Update: 2014-01-29
+---
+# HG changeset patch
+# User Florian Weimer <fweimer at redhat.com>
+# Date 1389273500 -3600
+#      Thu Jan 09 14:18:20 2014 +0100
+# Node ID a54d7af707f25dc298a7be60fd152001d2b3035b
+# Parent  3e6507fa0c26d20c09f8f468f2bd04aa2fd1b5b5
+yaml_parser_scan_tag_uri: fix int overflow leading to buffer overflow
+
+--- a/LibYAML/scanner.c
++++ b/LibYAML/scanner.c
+@@ -2572,7 +2572,7 @@
+ 
+     /* Resize the string to include the head. */
+ 
+-    while (string.end - string.start <= (int)length) {
++    while ((size_t)(string.end - string.start) <= length) {
+         if (!yaml_string_extend(&string.start, &string.pointer, &string.end)) {
+             parser->error = YAML_MEMORY_ERROR;
+             goto error;
diff --git a/debian/patches/series b/debian/patches/series
index 39231ab..27d2543 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
 format-error.patch
+libyaml-string-overflow.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libyaml-libyaml-perl.git