Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.2:Rings:1-MinimalX
mercurial
hg-mpatch-fix02.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File hg-mpatch-fix02.patch of Package mercurial
# HG changeset patch # User Augie Fackler <augie@google.com> # Date 1524895496 14400 # Node ID 1acfc35d478cdae60cf62c6f07fa6b6ad3070ea7 # Parent 90a274965de74cb0b4bea01a564b29b12a6af814 mpatch: protect against underflow in mpatch_apply (SEC) Also caught by oss-fuzz fuzzer during development. This defect is OVE-20180430-0002. A CVE has not been obtained as of this writing. diff -r 90a274965de7 -r 1acfc35d478c mercurial/mpatch.c --- a/mercurial/mpatch.c Sat Apr 28 00:42:16 2018 -0400 +++ b/mercurial/mpatch.c Sat Apr 28 02:04:56 2018 -0400 @@ -248,7 +248,7 @@ char *p = buf; while (f != l->tail) { - if (f->start < last || f->end > len) { + if (f->start < last || f->end > len || last < 0) { return MPATCH_ERR_INVALID_PATCH; } memcpy(p, orig + last, f->start - last); @@ -258,6 +258,9 @@ p += f->len; f++; } + if (last < 0) { + return MPATCH_ERR_INVALID_PATCH; + } memcpy(p, orig + last, len - last); return 0; }
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
