Author: tille
Date: 2013-12-31 17:32:33 +0000 (Tue, 31 Dec 2013)
New Revision: 15691

Added:
   trunk/packages/readseq/trunk/debian/patches/buffer_overflow.patch
Modified:
   trunk/packages/readseq/trunk/debian/changelog
   trunk/packages/readseq/trunk/debian/patches/series
Log:
Fix buffer overflow


Modified: trunk/packages/readseq/trunk/debian/changelog
===================================================================
--- trunk/packages/readseq/trunk/debian/changelog       2013-12-31 17:06:37 UTC 
(rev 15690)
+++ trunk/packages/readseq/trunk/debian/changelog       2013-12-31 17:32:33 UTC 
(rev 15691)
@@ -1,3 +1,11 @@
+readseq (1-11) unstable; urgency=medium
+
+  * debian/patches/buffer_overflow.patch: Fix buffer overflow (thanks to
+    Michael Bienia <[email protected]> for the patch)
+    Closes: #733650
+
+ -- Andreas Tille <[email protected]>  Tue, 31 Dec 2013 15:38:41 +0100
+
 readseq (1-10) unstable; urgency=low
 
   * debian/upstream: citation information

Added: trunk/packages/readseq/trunk/debian/patches/buffer_overflow.patch
===================================================================
--- trunk/packages/readseq/trunk/debian/patches/buffer_overflow.patch           
                (rev 0)
+++ trunk/packages/readseq/trunk/debian/patches/buffer_overflow.patch   
2013-12-31 17:32:33 UTC (rev 15691)
@@ -0,0 +1,16 @@
+Author: Michael Bienia <[email protected]>
+Last-Update: 30 Dec 2013 18:34:52 +0100
+Bug-Debian: http://bugs.debian.org/733650
+Description: Fix buffer overflow in ureadseq.c
+
+--- readseq-1.orig/ureadseq.c
++++ readseq-1/ureadseq.c
+@@ -1768,7 +1768,7 @@
+ 
+   short linesout = 0, seqtype = kNucleic;
+   long  i, j, l, l1, ibase;
+-  char  idword[31], endstr[10];
++  char  idword[31], endstr[14];
+   char  seqnamestore[128], *seqname = seqnamestore;
+   char  s[kMaxseqwidth], *cp;
+   char  nameform[10], numform[10], nocountsymbols[10];

Modified: trunk/packages/readseq/trunk/debian/patches/series
===================================================================
--- trunk/packages/readseq/trunk/debian/patches/series  2013-12-31 17:06:37 UTC 
(rev 15690)
+++ trunk/packages/readseq/trunk/debian/patches/series  2013-12-31 17:32:33 UTC 
(rev 15691)
@@ -5,3 +5,4 @@
 gcc-4.6_format-security.patch
 enable_tests.patch
 hardening.patch
+buffer_overflow.patch


_______________________________________________
debian-med-commit mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-med-commit

Reply via email to