all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed

blob b0d0c8e5dc44f764a56db0892224a19efd350d33 514 bytes (raw)
name: packages/patches/grep-CVE-2015-1345.patch 	 # note: path name is non-authoritative(*)

Fix CVE-2015-1345.  From upstream commit
83a95bd8c8561875b948cadd417c653dbe7ef2e2
by Yuliy Pisetsky <ypisetsky@fb.com>.

diff --git a/src/kwset.c b/src/kwset.c
index 4003c8d..376f7c3 100644
--- a/src/kwset.c
+++ b/src/kwset.c
@@ -643,6 +643,8 @@ bmexec_trans (kwset_t kwset, char const *text, size_t size)
                     if (! tp)
                       return -1;
                     tp++;
+                    if (ep <= tp)
+                      break;
                   }
               }
           }

debug log:

solving b0d0c8e5dc44f764a56db0892224a19efd350d33 ...
found b0d0c8e5dc44f764a56db0892224a19efd350d33 in https://git.savannah.gnu.org/cgit/guix.git

(*) Git path names are given by the tree(s) the blob belongs to.
    Blobs themselves have no identifier aside from the hash of its contents.^

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.