package/textproc/htdig/CVE-2007-6110.patch

   1 # --- T2-COPYRIGHT-NOTE-BEGIN ---
   2 # This copyright note is auto-generated by ./scripts/Create-CopyPatch.
   3 #
   4 # T2 SDE: package/.../htdig/CVE-2007-6110.patch
   5 # Copyright (C) 2007 The T2 SDE Project
   6 #
   7 # More information can be found in the files COPYING and README.
   8 #
   9 # This patch file is dual-licensed. It is available under the license the
  10 # patched project is licensed under, as long as it is an OpenSource license
  11 # as defined at http://www.opensource.org/ (e.g. BSD, X11) or under the terms
  12 # of the GNU General Public License as published by the Free Software
  13 # Foundation; either version 2 of the License, or (at your option) any later
  14 # version.
  15 # --- T2-COPYRIGHT-NOTE-END ---
  16
  17 diff -Nur htdig-3.2.0b6-orig/htsearch/Display.cc htdig-3.2.0b6/htsearch/Display.cc
  18 --- htdig-3.2.0b6-orig/htsearch/Display.cc      2007-12-13 10:20:02.000000000 +0000
  19 +++ htdig-3.2.0b6/htsearch/Display.cc   2007-12-13 10:20:29.000000000 +0000
  20 @@ -137,7 +137,7 @@
  21        // Must temporarily stash the message in a String, since
  22        // displaySyntaxError will overwrite the static temp used in form.
  23
  24 -      String s(form("No such sort method: `%s'", (const char*)config->Find("sort")));
  25 +      String s("invalid sort method");
  26
  27        displaySyntaxError(s);
  28        return;
  29 diff -Nur htdig-3.2.0b6-orig/libhtdig/ResultFetch.cc htdig-3.2.0b6/libhtdig/ResultFetch.cc
  30 --- htdig-3.2.0b6-orig/libhtdig/ResultFetch.cc  2007-12-13 10:20:02.000000000 +0000
  31 +++ htdig-3.2.0b6/libhtdig/ResultFetch.cc       2007-12-13 10:20:29.000000000 +0000
  32 @@ -142,7 +142,7 @@
  33          // Must temporarily stash the message in a String, since
  34          // displaySyntaxError will overwrite the static temp used in form.
  35
  36 -        String s(form("No such sort method: `%s'", (const char *) config->Find("sort")));
  37 +        String s("invalid sort method");
  38
  39          displaySyntaxError(s);
  40          //return;