Hello community, here is the log from the commit of package e2fsprogs for openSUSE:Factory checked in at 2015-01-10 23:07:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/e2fsprogs (Old) and /work/SRC/openSUSE:Factory/.e2fsprogs.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "e2fsprogs" Changes: -------- --- /work/SRC/openSUSE:Factory/e2fsprogs/e2fsprogs.changes 2014-09-04 07:55:50.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.e2fsprogs.new/e2fsprogs.changes 2015-01-10 23:07:04.000000000 +0100 @@ -1,0 +2,5 @@ +Fri Jan 9 08:48:40 UTC 2015 - [email protected] + +- e2fsck-fix-free-pointer-dereferences.patch: Fix use after free (bnc#912229) + +------------------------------------------------------------------- New: ---- e2fsck-fix-free-pointer-dereferences.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ e2fsprogs.spec ++++++ --- /var/tmp/diff_new_pack.n8DSI1/_old 2015-01-10 23:07:04.000000000 +0100 +++ /var/tmp/diff_new_pack.n8DSI1/_new 2015-01-10 23:07:04.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package e2fsprogs # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -80,6 +80,7 @@ Patch3: libcom_err-compile_et_permissions.patch Patch4: e2fsprogs-1.42-implicit_fortify_decl.patch Patch5: e2fsprogs-1.42-ext2fsh_implicit.patch +Patch6: e2fsck-fix-free-pointer-dereferences.patch # Do not suppress make commands BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -193,6 +194,7 @@ %patch3 -p1 %patch4 %patch5 +%patch6 -p1 cp %{SOURCE2} . %build ++++++ e2fsck-fix-free-pointer-dereferences.patch ++++++ >From ebdf895b43a1ce499e4d2556a201e2a753fc422f Mon Sep 17 00:00:00 2001 From: Theodore Ts'o <[email protected]> Date: Wed, 8 Oct 2014 11:18:41 -0400 Subject: [PATCH] e2fsck: fix free pointer dereferences References: bnc#912229 Commit 47fee2ef6a23a introduces some free pointer dereference bugs by not clearing ctx->fs after calling ext2fs_close_free(). Reported-by: Matthias Andree <[email protected]> Cc: Lukas Czerner <[email protected]> Signed-off-by: Theodore Ts'o <[email protected]> Acked-by: Jan Kara <[email protected]> --- e2fsck/unix.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/e2fsck/unix.c b/e2fsck/unix.c index 66debcde53ed..10036e76132c 100644 --- a/e2fsck/unix.c +++ b/e2fsck/unix.c @@ -458,7 +458,7 @@ static void check_if_skip(e2fsck_t ctx) } log_out(ctx, "\n"); skip: - ext2fs_close_free(&fs); + ext2fs_close_free(&ctx->fs); e2fsck_free_context(ctx); exit(FSCK_OK); } @@ -1462,7 +1462,7 @@ failure: /* * Restart in order to reopen fs but this time start mmp. */ - ext2fs_close_free(&fs); + ext2fs_close_free(&ctx->fs); flags &= ~EXT2_FLAG_SKIP_MMP; goto restart; } @@ -1692,7 +1692,7 @@ no_journal: _("while resetting context")); fatal_error(ctx, 0); } - ext2fs_close_free(&fs); + ext2fs_close_free(&ctx->fs); goto restart; } if (run_result & E2F_FLAG_ABORT) -- 2.1.2 -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
