OSSP CVS Repository

ossp - Check-in [5231]
Not logged in
[Honeypot]  [Browse]  [Home]  [Login]  [Reports
[Search]  [Ticket]  [Timeline
  [Patchset]  [Tagging/Branching

Check-in Number: 5231
Date: 2005-Oct-03 11:22:04 (local)
2005-Oct-03 09:22:04 (UTC)
User:rse
Branch:
Comment: - Apply Security Fix (CAN-2005-2491, partially only) - Upgraded GNU shtool to 2.0.3 and GNU libtool to 1.5.20
Tickets:
Inspections:
Files:
ossp-pkg/pcre/ChangeLog.OSSP      1.22 -> 1.23     9 inserted, 0 deleted
ossp-pkg/pcre/devtool.conf      1.9 -> 1.10     2 inserted, 2 deleted
ossp-pkg/pcre/pcre.c      1.8 -> 1.9     11 inserted, 0 deleted

ossp-pkg/pcre/ChangeLog.OSSP 1.22 -> 1.23

--- ChangeLog.OSSP       2005/02/02 12:25:44     1.22
+++ ChangeLog.OSSP       2005/10/03 09:22:04     1.23
@@ -1,8 +1,17 @@
 
  OSSP ChangeLog for PCRE
  =======================
+  
+  Mon Oct  3 11:20:31 CEST 2005
+
+  *) Apply Security Fix (CAN-2005-2491, partially only)
+     [Ralf S. Engelschall <rse@engelschall.com>]
+
+  *) Upgraded GNU shtool to 2.0.3 and GNU libtool to 1.5.20
+     [Ralf S. Engelschall <rse@engelschall.com>]
 
   Wed Feb  2 13:23:26 CET 2005
+
   *) Upgraded GNU shtool to 2.0.1 and GNU libtool to 1.5.10
      [Thomas Lotterer <thomas@lotterer.net>]
 


ossp-pkg/pcre/devtool.conf 1.9 -> 1.10

--- devtool.conf 2005/02/02 12:25:44     1.9
+++ devtool.conf 2005/10/03 09:22:04     1.10
@@ -3,8 +3,8 @@
 ##
 
 %autogen
-    @autogen shtool   2.0.1  "2.0.*" echo fixperm install mkdir tarball version
-    @autogen libtool  1.5.10 "1.5.*"
+    @autogen shtool   2.0.3  "2.0.*" echo fixperm install mkdir tarball version
+    @autogen libtool  1.5.20 "1.5.*"
     @autogen autoconf 2.59   "2.5[4-9]*"
 
 %autoclean


ossp-pkg/pcre/pcre.c 1.8 -> 1.9

--- pcre.c       2002/01/07 15:21:06     1.8
+++ pcre.c       2005/10/03 09:22:04     1.9
@@ -716,12 +716,23 @@
 
 while ((cd->ctypes[*p] & ctype_digit) != 0) min = min * 10 + *p++ - '0';
 
+if (min < 0 || min > 65535)
+  {
+  *errorptr = ERR5;
+  return p;
+  }
+
 if (*p == '}') max = min; else
   {
   if (*(++p) != '}')
     {
     max = 0;
     while((cd->ctypes[*p] & ctype_digit) != 0) max = max * 10 + *p++ - '0';
+    if (max < 0 || max > 65535)
+      {
+      *errorptr = ERR5;
+      return p;
+      }
     if (max < min)
       {
       *errorptr = ERR4;

CVSTrac 2.0.1