rpms/t1lib/devel t1lib-cve-2007-4033.patch, NONE, 1.1 t1lib.spec, 1.16, 1.17

[José Abílio Oliveira Matos (jamatos)]

Author: jamatos

Update of /cvs/pkgs/rpms/t1lib/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv5574

Modified Files:
	t1lib.spec 
Added Files:
	t1lib-cve-2007-4033.patch 
Log Message:
* Thu Sep 27 2007 José Matos <jamatos[AT]fc.up.pt> - 5.1.1-3
- Apply patch to fix CVE-2007-4033


t1lib-cve-2007-4033.patch:

--- NEW FILE t1lib-cve-2007-4033.patch ---
--- t1lib-5.1.0.orig/lib/t1lib/t1env.c
+++ t1lib-5.1.0/lib/t1lib/t1env.c
@@ -611,6 +611,12 @@
 #endif 
     strcat( pathbuf, DIRECTORY_SEP);
     /* And finally the filename: */
+    /* If current pathbuf + StrippedName + 1 byte for NULL is bigger than pathbuf
+       let's try next pathbuf */
+    if( strlen(pathbuf) + strlen(StrippedName) + 1 > sizeof(pathbuf) ) {
+	i++;
+    	continue;
+    }
     strcat( pathbuf, StrippedName);
     
     /* Check for existence of the path: */


Index: t1lib.spec
===================================================================
RCS file: /cvs/pkgs/rpms/t1lib/devel/t1lib.spec,v
retrieving revision 1.16
retrieving revision 1.17
diff -u -r1.16 -r1.17
--- t1lib.spec	28 Aug 2007 18:18:25 -0000	1.16
+++ t1lib.spec	27 Sep 2007 14:59:48 -0000	1.17
@@ -1,6 +1,6 @@
 Name:           t1lib
 Version:        5.1.1
-Release:        2%{?dist}
+Release:        3%{?dist}
 
 Summary:        PostScript Type 1 font rasterizer
 
@@ -12,7 +12,8 @@
 Patch1:         t1lib-5.0.0-manpages.patch
 Patch2:         t1lib-5.0.0-xglyph-env.patch
 # From Debian's t1lib-5.0.0-4 (slightly tweaked):
-Patch5:         t1lib-5.0.0-t1libconfig.patch
+Patch3:         t1lib-5.0.0-t1libconfig.patch
+Patch4:		t1lib-cve-2007-4033.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 Requires(post): coreutils, findutils
@@ -39,7 +40,8 @@
 %setup -q
 %patch1 -p1
 %patch2 -p1
-%patch5 -p1
+%patch3 -p1
+%patch4 -p1
 
 
 %build
@@ -100,6 +102,9 @@
 
 
 %changelog
+* Thu Sep 27 2007 José Matos <jamatos[AT]fc.up.pt> - 5.1.1-3
+- Apply patch to fix CVE-2007-4033
+
 * Tue Aug 28 2007 José Matos <jamatos[AT]fc.up.pt> - 5.1.1-2
 - License fix, rebuild for devel (F8).