fix buffer overflow, #72371

5 files changed, 25 insertions, 5 deletions

diff --git a/net-p2p/opendchub/ChangeLog b/net-p2p/opendchub/ChangeLog
index ef2afd22d60d..5859124e18d2 100644
--- a/net-p2p/opendchub/ChangeLog
+++ b/net-p2p/opendchub/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-p2p/opendchub
 # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/ChangeLog,v 1.10 2004/10/18 12:31:23 weeve Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/ChangeLog,v 1.11 2004/11/27 15:59:34 squinky86 Exp $
+
+*opendchub-0.7.14-r2 (27 Nov 2004)
+
+  27 Nov 2004; Jon Hood <squinky86@gentoo.org> +files/0.7.14-overflow.patch,
+  -opendchub-0.7.14-r1.ebuild, +opendchub-0.7.14-r2.ebuild:
+  Fix buffer overflow, #72371. Thanks JG <jg@cms.ac> and lewk.
 
   18 Oct 2004; Jason Wever <weeve@gentoo.org> opendchub-0.7.14-r1.ebuild:
   Added ~sparc keyword, resolves bug #66923.
diff --git a/net-p2p/opendchub/Manifest b/net-p2p/opendchub/Manifest
index 43faa1d587cc..8e21566f337c 100644
--- a/net-p2p/opendchub/Manifest
+++ b/net-p2p/opendchub/Manifest
@@ -1,7 +1,8 @@
+MD5 de62cc840c860e435d83c7fdce187960 opendchub-0.7.14-r2.ebuild 1203
 MD5 2ed05eb15375c2143873d7b66032d1e6 ChangeLog 1201
 MD5 8abcb326775f027b2e13f23344036e34 metadata.xml 224
-MD5 f7be65dee1fa1447f4147cdcae627fce opendchub-0.7.14-r1.ebuild 1162
-MD5 75859d782548bffdb8575c89649978e3 files/opendchub-gentoo.patch 873
 MD5 e4fcbf6d8443605a548547abee4903e5 files/opendchub_setup.sh 556
+MD5 75859d782548bffdb8575c89649978e3 files/opendchub-gentoo.patch 873
+MD5 b3f6c1cbb5fe9b71718857859086b680 files/0.7.14-overflow.patch 421
+MD5 a2d8a9229bd7080e20a266ce68778903 files/digest-opendchub-0.7.14-r2 68
 MD5 796b8b6feea2a657348eb4ee6b9d102e files/0.7.14-telnet.patch 540
-MD5 a2d8a9229bd7080e20a266ce68778903 files/digest-opendchub-0.7.14-r1 68
diff --git a/net-p2p/opendchub/files/0.7.14-overflow.patch b/net-p2p/opendchub/files/0.7.14-overflow.patch
new file mode 100644
index 000000000000..996ff65fd0ae
--- /dev/null
+++ b/net-p2p/opendchub/files/0.7.14-overflow.patch
@@ -0,0 +1,12 @@
+diff -Naur opendchub-0.7.14.vanilla/src/commands.c opendchub-0.7.14/src/commands.c
+--- opendchub-0.7.14.vanilla/src/commands.c	2003-11-15 08:07:43.000000000 -0600
++++ opendchub-0.7.14/src/commands.c	2004-11-27 09:54:57.113410240 -0600
+@@ -2842,7 +2842,7 @@
+ {
+    char move_string[MAX_HOST_LEN+20];
+    
+-   sprintf(move_string, "$ForceMove %s", buf);
++   snprintf(move_string, MAX_HOST_LEN, "$ForceMove %s", buf);
+  
+    send_to_humans(move_string, REGULAR | REGISTERED | OP, user);
+    remove_all(UNKEYED | NON_LOGGED | REGULAR | REGISTERED | OP, 1, 1);
diff --git a/net-p2p/opendchub/files/digest-opendchub-0.7.14-r1 b/net-p2p/opendchub/files/digest-opendchub-0.7.14-r2
index 6c64f2c5990a..6c64f2c5990a 100644
--- a/net-p2p/opendchub/files/digest-opendchub-0.7.14-r1
+++ b/net-p2p/opendchub/files/digest-opendchub-0.7.14-r2
diff --git a/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild b/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild
index 8f6cbb209772..b97a55693678 100644
--- a/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild
+++ b/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/opendchub-0.7.14-r1.ebuild,v 1.3 2004/10/18 12:31:23 weeve Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-p2p/opendchub/opendchub-0.7.14-r2.ebuild,v 1.1 2004/11/27 15:59:34 squinky86 Exp $
 
 inherit eutils
 
@@ -21,6 +21,7 @@ src_unpack() {
 	cd ${S}
 	epatch ${FILESDIR}/opendchub-gentoo.patch
 	epatch ${FILESDIR}/${PV}-telnet.patch
+	epatch ${FILESDIR}/${PV}-overflow.patch
 }
 
 src_compile() {