file: update to 5.21.
This commit is contained in:
parent
6e13dcbaff
commit
0d2007627a
|
@ -1,20 +0,0 @@
|
|||
Fix note bounds reading, Francisco Alonso / Red Hat
|
||||
|
||||
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3710
|
||||
|
||||
--- src/readelf.c
|
||||
+++ src/readelf.c
|
||||
@@ -477,6 +477,13 @@ donote(struct magic_set *ms, void *vbuf, size_t offset, size_t size,
|
||||
uint32_t namesz, descsz;
|
||||
unsigned char *nbuf = CAST(unsigned char *, vbuf);
|
||||
|
||||
+ if (xnh_sizeof + offset > size) {
|
||||
+ /*
|
||||
+ * We're out of note headers.
|
||||
+ */
|
||||
+ return xnh_sizeof + offset;
|
||||
+ }
|
||||
+
|
||||
(void)memcpy(xnh_addr, &nbuf[offset], xnh_sizeof);
|
||||
offset += xnh_sizeof;
|
||||
|
|
@ -1,7 +1,7 @@
|
|||
# Template file for 'file'
|
||||
pkgname=file
|
||||
version=5.20
|
||||
revision=2
|
||||
version=5.21
|
||||
revision=1
|
||||
bootstrap=yes
|
||||
build_style=gnu-configure
|
||||
configure_args="--enable-static"
|
||||
|
@ -12,7 +12,7 @@ maintainer="Juan RP <xtraeme@gmail.com>"
|
|||
homepage="http://www.darwinsys.com/file/"
|
||||
license="BSD"
|
||||
distfiles="ftp://ftp.astron.com/pub/file/file-${version}.tar.gz"
|
||||
checksum=5bc36bfbb83a009da25a7174848f1bc5824be03192a8fdce7f83dc897ed2d247
|
||||
checksum=1a48741d3923c4cc73267109b8a396c0ce3aebe004181f3efb1b0a228d230bb6
|
||||
|
||||
libmagic_package() {
|
||||
short_desc="File type identification library"
|
||||
|
|
Loading…
Reference in New Issue