void-packages/srcpkgs/bsdiff/patches/CVE-2014-9862.diff

13 lines
240 B
Diff

--- bspatch.c.orig
+++ bspatch.c
@@ -164,6 +164,10 @@
}
/* Sanity-check */
+ if ((ctrl[0] < 0) || (ctrl[1] < 0))
+ errx(1,"Corrupt patch\n");
+
+ /* Sanity-check */
if(newpos+ctrl[0]>newsize)
errx(1,"Corrupt patch\n");