CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2013/02/11 14:16:33
Modified files:
net/openconnect: Makefile
Added files:
net/openconnect/patches: patch-http_c
Log message:
Cherrypick OpenConnect fix; use a dynamically allocated buffer rather than
a fixed stack buffer when constructing HTTP requests. Prevents an overflow
if a malicious VPN gateway sends a very long hostname/path (for redirects)
or cookie list. (There is a newer release of OpenConnect which includes
this fix, but also some bigger code changes, so that will wait until we
are done with 5.3 release). ok aja@ jasper@
