Hello community,
here is the log from the commit of package lynx for openSUSE:Factory checked in
at 2014-12-03 22:52:16
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/lynx (Old)
and /work/SRC/openSUSE:Factory/.lynx.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lynx"
Changes:
--------
--- /work/SRC/openSUSE:Factory/lynx/lynx.changes 2014-04-05
16:49:52.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.lynx.new/lynx.changes 2014-12-03
22:52:17.000000000 +0100
@@ -1,0 +2,6 @@
+Thu Nov 27 19:49:27 UTC 2014 - mgo...@suse.com
+
+- Add lynx-2.8.8-expired-cookie-crash.patch: fix invalid read when
+ removing an expired cookie (bnc#907539).
+
+-------------------------------------------------------------------
New:
----
lynx-2.8.8-expired-cookie-crash.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ lynx.spec ++++++
--- /var/tmp/diff_new_pack.d0cwUR/_old 2014-12-03 22:52:19.000000000 +0100
+++ /var/tmp/diff_new_pack.d0cwUR/_new 2014-12-03 22:52:19.000000000 +0100
@@ -37,6 +37,7 @@
Patch101: lynx-2.8.5-charset.patch
Patch102: lynx-2.8.7-enable_xli.patch
Patch103: lynx-no-build-date.patch
+Patch104: lynx-2.8.8-expired-cookie-crash.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Provides: lynxssl = %version
Obsoletes: lynxssl < %version
@@ -54,6 +55,7 @@
%patch101 -p1
%patch102 -p1
%patch103
+%patch104
# containing a few test msg's only:
# rm -f po/{es,fr,it,ko,no,pl,pt}.po
++++++ lynx-2.8.8-expired-cookie-crash.patch ++++++
--- src/LYCookie.c.orig 2013-11-28 18:52:56.000000000 -0600
+++ src/LYCookie.c 2014-11-27 08:27:02.453966314 -0600
@@ -716,13 +716,14 @@
char *header,
int secure)
{
- HTList *hl;
+ HTList *hl, *next;
cookie *co;
time_t now = time(NULL);
char crlftab[8];
sprintf(crlftab, "%c%c%c", CR, LF, '\t');
- for (hl = sublist; hl != NULL; hl = hl->next) {
+ for (hl = sublist; hl != NULL; hl = next) {
+ next = hl->next;
co = (cookie *) hl->object;
if (co == NULL) {
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
