W zalaczeniu patche do juz dosc wiekowej dziury w libpng (CAN-2004-0421)
P.
--- libpng-1.2.6beta2/pngerror.c.orig Thu Oct 3 15:32:27 2002
+++ libpng-1.2.6beta2/pngerror.c Wed May 5 01:01:13 CEST 2004
@@ -135,10 +135,14 @@
buffer[iout] = 0;
else
{
+ int len = strlen(error_message);
+
+ if (len > 63)
+ len = 63;
buffer[iout++] = ':';
buffer[iout++] = ' ';
- png_memcpy(buffer+iout, error_message, 64);
- buffer[iout+63] = 0;
+ png_memcpy(buffer+iout, error_message, len);
+ buffer[iout+len] = 0;
}
}
--- libpng.spec Wed May 5 01:10:42 2004
+++ libpng.spec.my Wed May 5 01:10:42 2004
@@ -11,7 +11,7 @@
Summary(tr): PNG kitapl���
Name: libpng
Version: 1.2.6
-Release: 0.%{_pre}.4
+Release: 0.%{_pre}.5
Epoch: 2
License: distributable
Group: Libraries
@@ -25,6 +25,7 @@
Patch5: %{name}-norpath.patch
Patch6: %{name}-libdirfix.patch
Patch7: %{name}-clobber_list.patch
+Patch8: %{name}-pngerror.patch
URL: http://www.libpng.org/pub/png/libpng.html
BuildRequires: zlib-devel
Provides: libpng.so.3
@@ -149,6 +150,7 @@
%patch5 -p1
%patch6 -p1
%patch7 -p1
+%patch8 -p1
%ifarch %{ix86}
ln -sf scripts/makefile.gcmmx ./Makefile
_______________________________________________________
z�ota zasada - kto si� nie zna, niech si� nie wypowiada