Hello community,

here is the log from the commit of package dbus-1 for openSUSE:11.3
checked in at Sat Aug 6 00:27:56 CEST 2011.



--------
--- old-versions/11.3/UPDATES/all/dbus-1/dbus-1-x11.changes     2011-03-30 
17:48:41.000000000 +0200
+++ 11.3/dbus-1/dbus-1-x11.changes      2011-08-05 15:47:09.000000000 +0200
@@ -1,0 +2,8 @@
+Fri Aug  5 15:42:25 CEST 2011 - [email protected]
+
+- add patch: dbus-1.2.24-byteorder.patch
+  - Byte-swap foreign-endian messages correctly, preventing a
+    long-standing local DoS if foreign-endian messages are relayed
+    through the dbus-daemon (bnc#699712)
+
+-------------------------------------------------------------------
dbus-1.changes: same change

calling whatdependson for 11.3-i586


New:
----
  dbus-1.2.24-byteorder.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ dbus-1-x11.spec ++++++
--- /var/tmp/diff_new_pack.nX1pGo/_old  2011-08-06 00:27:38.000000000 +0200
+++ /var/tmp/diff_new_pack.nX1pGo/_new  2011-08-06 00:27:38.000000000 +0200
@@ -29,7 +29,7 @@
 BuildRequires:  doxygen libexpat-devel libzio pkgconfig
 BuildRequires:  audit-devel
 Version:        1.2.24
-Release:        2.<RELEASE2>
+Release:        2.<RELEASE3>
 AutoReqProv:    on
 # bug437293
 %ifarch ppc64
@@ -43,6 +43,7 @@
 Source4:        baselibs.conf
 Patch0:         dbus-log-deny.patch
 Patch1:         dbus-stackoverflow.patch
+Patch2:         dbus-1.2.24-byteorder.patch
 %if 0%{?suse_version} > 1100
 %bcond_without selinux
 %else
@@ -65,6 +66,7 @@
 %setup -n dbus-%{version} -q
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1
 
 %build
 autoreconf -fi

++++++ dbus-1.spec ++++++
--- /var/tmp/diff_new_pack.nX1pGo/_old  2011-08-06 00:27:38.000000000 +0200
+++ /var/tmp/diff_new_pack.nX1pGo/_new  2011-08-06 00:27:38.000000000 +0200
@@ -27,7 +27,7 @@
 BuildRequires:  doxygen libexpat-devel libzio pkgconfig
 BuildRequires:  audit-devel
 Version:        1.2.24
-Release:        2.<RELEASE2>
+Release:        2.<RELEASE5>
 AutoReqProv:    on
 # bug437293
 %ifarch ppc64
@@ -41,6 +41,7 @@
 Source4:        baselibs.conf
 Patch0:         dbus-log-deny.patch
 Patch1:         dbus-stackoverflow.patch
+Patch2:         dbus-1.2.24-byteorder.patch
 %if 0%{?suse_version} > 1100
 %bcond_without selinux
 %else
@@ -99,6 +100,7 @@
 %setup -n dbus-%{version} -q
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1
 
 %build
 autoreconf -fi

++++++ dbus-1.2.24-byteorder.patch ++++++
Index: dbus-1.2.24/dbus/dbus-marshal-header.c
===================================================================
--- dbus-1.2.24.orig/dbus/dbus-marshal-header.c
+++ dbus-1.2.24/dbus/dbus-marshal-header.c
@@ -1462,14 +1462,20 @@ void
 _dbus_header_byteswap (DBusHeader *header,
                        int         new_order)
 {
+  unsigned char byte_order;
+
   if (header->byte_order == new_order)
     return;
 
+  byte_order = _dbus_string_get_byte (&header->data, BYTE_ORDER_OFFSET);
+  _dbus_assert (header->byte_order == byte_order);
+
   _dbus_marshal_byteswap (&_dbus_header_signature_str,
                           0, header->byte_order,
                           new_order,
                           &header->data, 0);
 
+  _dbus_string_set_byte (&header->data, BYTE_ORDER_OFFSET, new_order);
   header->byte_order = new_order;
 }
 

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Remember to have fun...

-- 
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to