From f9e1c115e69c85881799e00cf09610fc4e46595c Mon Sep 17 00:00:00 2001 From: Juan RP Date: Wed, 10 Sep 2014 09:17:59 +0200 Subject: [PATCH] lua51: patch for CVE-2014-5461 via OpenBSD. --- srcpkgs/lua51/patches/CVE-2014-5461.patch | 14 ++++++++++++++ srcpkgs/lua51/template | 2 +- 2 files changed, 15 insertions(+), 1 deletion(-) create mode 100644 srcpkgs/lua51/patches/CVE-2014-5461.patch diff --git a/srcpkgs/lua51/patches/CVE-2014-5461.patch b/srcpkgs/lua51/patches/CVE-2014-5461.patch new file mode 100644 index 0000000000..622c8c6b8c --- /dev/null +++ b/srcpkgs/lua51/patches/CVE-2014-5461.patch @@ -0,0 +1,14 @@ +Security fix for CVE-2014-5461, +http://openwall.com/lists/oss-security/2014/08/27/2 + +--- src/ldo.c.orig Tue Sep 9 15:32:24 2014 ++++ src/ldo.c Tue Sep 9 15:33:46 2014 +@@ -217,7 +217,7 @@ static StkId adjust_varargs (lua_State *L, Proto *p, i + int nvar = actual - nfixargs; /* number of extra arguments */ + lua_assert(p->is_vararg & VARARG_HASARG); + luaC_checkGC(L); +- luaD_checkstack(L, p->maxstacksize); ++ luaD_checkstack(L, p->maxstacksize + p->numparams); + htab = luaH_new(L, nvar, 1); /* create `arg' table */ + for (i=0; itop - nvar + i); diff --git a/srcpkgs/lua51/template b/srcpkgs/lua51/template index c9d373d8c3..9ee2e1155e 100644 --- a/srcpkgs/lua51/template +++ b/srcpkgs/lua51/template @@ -1,7 +1,7 @@ # Template file for 'lua51' pkgname=lua51 version=5.1.5 -revision=4 +revision=5 wrksrc="lua-${version}" makedepends="ncurses-devel readline-devel>=6.3" short_desc="Powerful, fast, lightweight, embeddable scripting language (5.1.x)"