OpenPKG CVS Repository
  http://cvs.openpkg.org/
  ____________________________________________________________________________

  Server: cvs.openpkg.org                  Name:   Ralf S. Engelschall
  Root:   /e/openpkg/cvs                   Email:  [EMAIL PROTECTED]
  Module: openpkg-src                      Date:   19-May-2004 21:26:05
  Branch: OPENPKG_2_0_SOLID                Handle: 2004051920260400

  Modified files:           (Branch: OPENPKG_2_0_SOLID)
    openpkg-src/subversion  subversion.patch

  Log:
    apply second security fix (OpenPKG-SA-2004.024-subversion,
    CAN-2004-0398)

  Summary:
    Revision    Changes     Path
    1.2.2.3     +45 -0      openpkg-src/subversion/subversion.patch
  ____________________________________________________________________________

  patch -p0 <<'@@ .'
  Index: openpkg-src/subversion/subversion.patch
  ============================================================================
  $ cvs diff -u -r1.2.2.2 -r1.2.2.3 subversion.patch
  --- openpkg-src/subversion/subversion.patch   19 May 2004 19:19:16 -0000      1.2.2.2
  +++ openpkg-src/subversion/subversion.patch   19 May 2004 19:26:04 -0000      1.2.2.3
  @@ -93,3 +93,48 @@
    
    /* Our human representation of dates looks like this:
     *
  +
  +-----------------------------------------------------------------------------
  +
  +Security Fix
  +OpenPKG-SA-2004.024-subversion, CAN-2004-0398
  +
  +Index: neon/src/ne_dates.c
  +--- neon/src/ne_dates.c.orig 2004-02-23 04:04:19.000000000 +0100
  ++++ neon/src/ne_dates.c      2004-05-19 21:20:55.000000000 +0200
  +@@ -47,7 +47,7 @@
  + /* RFC1123: Sun, 06 Nov 1994 08:49:37 GMT */
  + #define RFC1123_FORMAT "%3s, %02d %3s %4d %02d:%02d:%02d GMT"
  + /* RFC850:  Sunday, 06-Nov-94 08:49:37 GMT */
  +-#define RFC1036_FORMAT "%s %2d-%3s-%2d %2d:%2d:%2d GMT"
  ++#define RFC1036_FORMAT "%10s %2d-%3s-%2d %2d:%2d:%2d GMT"
  + /* asctime: Wed Jun 30 21:49:08 1993 */
  + #define ASCTIME_FORMAT "%3s %3s %2d %2d:%2d:%2d %4d"
  + 
  +@@ -133,7 +133,7 @@
  + time_t ne_rfc1123_parse(const char *date) 
  + {
  +     struct tm gmt = {0};
  +-    static char wkday[4], mon[4];
  ++    char wkday[4], mon[4];
  +     int n;
  + /*  it goes: Sun, 06 Nov 1994 08:49:37 GMT */
  +     n = sscanf(date, RFC1123_FORMAT,
  +@@ -156,7 +156,7 @@
  + {
  +     struct tm gmt = {0};
  +     int n;
  +-    static char wkday[10], mon[4];
  ++    char wkday[11], mon[4];
  +     /* RFC850/1036 style dates: Sunday, 06-Nov-94 08:49:37 GMT */
  +     n = sscanf(date, RFC1036_FORMAT,
  +             wkday, &gmt.tm_mday, mon, &gmt.tm_year,
  +@@ -189,7 +189,7 @@
  + {
  +     struct tm gmt = {0};
  +     int n;
  +-    static char wkday[4], mon[4];
  ++    char wkday[4], mon[4];
  +     n = sscanf(date, ASCTIME_FORMAT,
  +             wkday, mon, &gmt.tm_mday, 
  +             &gmt.tm_hour, &gmt.tm_min, &gmt.tm_sec,
  @@ .
______________________________________________________________________
The OpenPKG Project                                    www.openpkg.org
CVS Repository Commit List                     [EMAIL PROTECTED]

Reply via email to