rpms/libid3tag/F-9 libid3tag-0.15.1b-fix_overflow.patch, NONE, 1.1 libid3tag.spec, 1.15, 1.16

[Todd M. Zullinger (tmz)]

Author: tmz

Update of /cvs/extras/rpms/libid3tag/F-9
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv5824/F-9

Modified Files:
	libid3tag.spec 
Added Files:
	libid3tag-0.15.1b-fix_overflow.patch 
Log Message:
fix for CVE-2008-2109 (#445812)


libid3tag-0.15.1b-fix_overflow.patch:

--- NEW FILE libid3tag-0.15.1b-fix_overflow.patch ---
--- field.c.orig	2008-05-05 09:49:15.000000000 -0400
+++ field.c	2008-05-05 09:49:25.000000000 -0400
@@ -291,7 +291,7 @@
 
       end = *ptr + length;
 
-      while (end - *ptr > 0) {
+      while (end - *ptr > 0 && **ptr != '\0') {
 	ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0);
 	if (ucs4 == 0)
 	  goto fail;


Index: libid3tag.spec
===================================================================
RCS file: /cvs/extras/rpms/libid3tag/F-9/libid3tag.spec,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -r1.15 -r1.16
--- libid3tag.spec	12 Feb 2008 06:35:44 -0000	1.15
+++ libid3tag.spec	9 May 2008 17:22:17 -0000	1.16
@@ -1,12 +1,13 @@
 Name:           libid3tag
 Version:        0.15.1b
-Release:        5%{?dist}
+Release:        6%{?dist}
 Summary:        ID3 tag manipulation library
 
 Group:          System Environment/Libraries
 License:        GPLv2+
 URL:            http://www.underbit.com/products/mad/
 Source0:        http://download.sourceforge.net/mad/%{name}-%{version}.tar.gz
+Patch0:         libid3tag-0.15.1b-fix_overflow.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root
 
 BuildRequires:  zlib-devel >= 1.1.4
@@ -27,6 +28,8 @@
 
 %prep
 %setup -q
+%patch -p0 -b .CVE-2008-2109
+
 # *.pc originally from the Debian package.
 cat << \EOF > %{name}.pc
 prefix=%{_prefix}
@@ -77,6 +80,9 @@
 
 
 %changelog
+* Fri May 09 2008 Todd Zullinger <tmz at pobox.com> - 0.15.1b-6
+- fix for CVE-2008-2109 (#445812)
+
 * Tue Feb 12 2008 Todd Zullinger <tmz at pobox.com> - 0.15.1b-5
 - rebuild for gcc 4.3