unofficial mirror of guix-devel@gnu.org 
 help / color / mirror / code / Atom feed

blob b0d0c8e5dc44f764a56db0892224a19efd350d33 514 bytes (raw)
name: packages/patches/grep-CVE-2015-1345.patch 	 # note: path name is non-authoritative(*)

Fix CVE-2015-1345.  From upstream commit
83a95bd8c8561875b948cadd417c653dbe7ef2e2
by Yuliy Pisetsky <ypisetsky@fb.com>.

diff --git a/src/kwset.c b/src/kwset.c
index 4003c8d..376f7c3 100644
--- a/src/kwset.c
+++ b/src/kwset.c
@@ -643,6 +643,8 @@ bmexec_trans (kwset_t kwset, char const *text, size_t size)
                     if (! tp)
                       return -1;
                     tp++;
+                    if (ep <= tp)
+                      break;
                   }
               }
           }

debug log:

solving b0d0c8e5dc44f764a56db0892224a19efd350d33 ...
found b0d0c8e5dc44f764a56db0892224a19efd350d33 in https://git.savannah.gnu.org/cgit/guix.git

(*) Git path names are given by the tree(s) the blob belongs to.
    Blobs themselves have no identifier aside from the hash of its contents.^

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).