[Pkg-php-commits] [php/debian-etch] fix for double-free regression in patch CVE-2008-5658

Sean Finney seanius at debian.org
Fri May 8 09:01:27 UTC 2009


Closes: #527560
Thanks: Sébastien Le Ray <s.le_ray at eutech-ssii.com>
---
 debian/patches/148-CVE-2008-5658.patch |    3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/debian/patches/148-CVE-2008-5658.patch b/debian/patches/148-CVE-2008-5658.patch
index aae5a17..88314b4 100644
--- a/debian/patches/148-CVE-2008-5658.patch
+++ b/debian/patches/148-CVE-2008-5658.patch
@@ -364,12 +364,11 @@ and then a bit of manual massaging to get the patch to apply
  	}
  
  	/* check again the full path, not sure if it
-@@ -158,6 +416,8 @@
+@@ -158,6 +416,7 @@
  		efree(fullpath);
  		efree(file_dirname_fullpath);
  		efree(file_basename);
 +		free(new_state.cwd);
-+		free(new_state.cwd);
  		return 0;
  	}
  
-- 
1.5.6.5




More information about the Pkg-php-commits mailing list