package/bash/0035-patchlevel-35.patch

   1 From http://ftp.gnu.org/pub/gnu/bash/bash-4.3-patches/bash43-035
   2
   3 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
   4
   5                              BASH PATCH REPORT
   6                              =================
   7
   8 Bash-Release:   4.3
   9 Patch-ID:       bash43-035
  10
  11 Bug-Reported-by:        <romerox.adrian@gmail.com>
  12 Bug-Reference-ID:       <CABV5r3zhPXmSKUe9uedeGc5YFBM2njJ1iVmY2h5neWdQpDBQug@mail.gmail.com>
  13 Bug-Reference-URL:      http://lists.gnu.org/archive/html/bug-bash/2014-08/msg00045.html
  14
  15 Bug-Description:
  16
  17 A locale with a long name can trigger a buffer overflow and core dump.  This
  18 applies on systems that do not have locale_charset in libc, are not using
  19 GNU libiconv, and are not using the libintl that ships with bash in lib/intl.
  20
  21 Patch (apply with `patch -p0'):
  22
  23 *** a/bash-4.3-patched/lib/sh/unicode.c 2014-01-30 16:47:19.000000000 -0500
  24 --- b/lib/sh/unicode.c  2015-05-01 08:58:30.000000000 -0400
  25 ***************
  26 *** 79,83 ****
  27     if (s)
  28       {
  29 !       strcpy (charsetbuf, s+1);
  30         t = strchr (charsetbuf, '@');
  31         if (t)
  32 --- 79,84 ----
  33     if (s)
  34       {
  35 !       strncpy (charsetbuf, s+1, sizeof (charsetbuf) - 1);
  36 !       charsetbuf[sizeof (charsetbuf) - 1] = '\0';
  37         t = strchr (charsetbuf, '@');
  38         if (t)
  39 ***************
  40 *** 85,89 ****
  41         return charsetbuf;
  42       }
  43 !   strcpy (charsetbuf, locale);
  44     return charsetbuf;
  45   }
  46 --- 86,91 ----
  47         return charsetbuf;
  48       }
  49 !   strncpy (charsetbuf, locale, sizeof (charsetbuf) - 1);
  50 !   charsetbuf[sizeof (charsetbuf) - 1] = '\0';
  51     return charsetbuf;
  52   }
  53 *** a/bash-4.3/patchlevel.h     2012-12-29 10:47:57.000000000 -0500
  54 --- b/patchlevel.h      2014-03-20 20:01:28.000000000 -0400
  55 ***************
  56 *** 26,30 ****
  57      looks for to find the patch level (for the sccs version string). */
  58
  59 ! #define PATCHLEVEL 34
  60
  61   #endif /* _PATCHLEVEL_H_ */
  62 --- 26,30 ----
  63      looks for to find the patch level (for the sccs version string). */
  64
  65 ! #define PATCHLEVEL 35
  66
  67   #endif /* _PATCHLEVEL_H_ */