summaryrefslogtreecommitdiffstats
path: root/x11
diff options
context:
space:
mode:
authorFlorian Franzmann2020-01-01 13:52:11 +0100
committerFlorian Franzmann2020-01-01 13:52:11 +0100
commit1297b3bfb495d056de86e1eea3ff222dd238feb2 (patch)
tree51b57ab22c679f19d73c51eee42453d40e07677a /x11
parentc3b4bd6c49f17af7b5ff6532d4795aa2db057599 (diff)
x11/xsel: fix possible buffer overflow
Diffstat (limited to 'x11')
-rw-r--r--x11/xsel/0001-fix-possible-buffer-overflow.patch25
-rwxr-xr-xx11/xsel/DETAILS1
-rw-r--r--x11/xsel/HISTORY5
-rwxr-xr-xx11/xsel/PRE_BUILD5
4 files changed, 36 insertions, 0 deletions
diff --git a/x11/xsel/0001-fix-possible-buffer-overflow.patch b/x11/xsel/0001-fix-possible-buffer-overflow.patch
new file mode 100644
index 0000000000..8d21aa989d
--- /dev/null
+++ b/x11/xsel/0001-fix-possible-buffer-overflow.patch
@@ -0,0 +1,25 @@
+From 9f70bd72df9a77db54d5ed205cfee168008d27e7 Mon Sep 17 00:00:00 2001
+From: Florian Franzmann <siflfran@hawo.stw.uni-erlangen.de>
+Date: Wed, 1 Jan 2020 13:48:40 +0100
+Subject: [PATCH] fix possible buffer overflow
+
+---
+ xsel.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/xsel.c b/xsel.c
+index 79cc68b..1016727 100644
+--- a/xsel.c
++++ b/xsel.c
+@@ -79,7 +79,7 @@ static Boolean do_follow = False;
+ static Boolean no_daemon = False;
+
+ /* logfile: name of file to log error messages to when detached */
+-static char logfile[MAXFNAME];
++static char logfile[MAXFNAME + 1];
+
+ /* fstat() on stdin and stdout */
+ static struct stat in_statbuf, out_statbuf;
+--
+2.24.1
+
diff --git a/x11/xsel/DETAILS b/x11/xsel/DETAILS
index acdf8aa104..e2cb6e4eb4 100755
--- a/x11/xsel/DETAILS
+++ b/x11/xsel/DETAILS
@@ -1,5 +1,6 @@
SPELL=xsel
VERSION=1.2.0
+ SECURITY_PATCH=1
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=http://www.vergenet.net/~conrad/software/xsel/download/$SOURCE
diff --git a/x11/xsel/HISTORY b/x11/xsel/HISTORY
index 0f9a54d93e..083af59326 100644
--- a/x11/xsel/HISTORY
+++ b/x11/xsel/HISTORY
@@ -1,3 +1,8 @@
+2020-01-01 Florian Franzmann <siflfran@hawo.stw.uni-erlangen.de>
+ * PRE_BUILD, 0001-fix-possible-buffer-overflow.patch: fix possible
+ buffer overflow
+ * DETAILS: SECURITY_PATCH++
+
2009-02-27 Ethan Grammatikidis <eekee57@fastmail.fm>
* DETAILS, HISTORY: created spell
* DEPENDS: Added. Thanks sqweek.
diff --git a/x11/xsel/PRE_BUILD b/x11/xsel/PRE_BUILD
new file mode 100755
index 0000000000..5c48d20037
--- /dev/null
+++ b/x11/xsel/PRE_BUILD
@@ -0,0 +1,5 @@
+default_pre_build &&
+cd "$SOURCE_DIRECTORY" &&
+
+patch -p1 < "$SPELL_DIRECTORY/0001-fix-possible-buffer-overflow.patch"
+