diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2017-02-23 17:21:08 +0100 |
|---|---|---|
| committer | Balint Reczey <balint@balintreczey.hu> | 2017-02-26 11:36:51 +0100 |
| commit | ba9a0dec9da2c5939070aa99c93b0f84b93725ee (patch) | |
| tree | 76c73138fcbc6ae70bd37aa3fb19eda0d86a04a0 /debian/patches/302-CVE-2016-6252-fix-integer-overflow.patch | |
| parent | 75e2a3b1035d0399b6d400edd1c7947e02dfc9e1 (diff) | |
| download | shadow-debian/1%4.2-3+deb8u2.tar.gz | |
Imported Debian patch 1:4.2-3+deb8u2debian/1%4.2-3+deb8u2
Diffstat (limited to 'debian/patches/302-CVE-2016-6252-fix-integer-overflow.patch')
| -rw-r--r-- | debian/patches/302-CVE-2016-6252-fix-integer-overflow.patch | 46 |
1 files changed, 0 insertions, 46 deletions
diff --git a/debian/patches/302-CVE-2016-6252-fix-integer-overflow.patch b/debian/patches/302-CVE-2016-6252-fix-integer-overflow.patch deleted file mode 100644 index 2f2195b4..00000000 --- a/debian/patches/302-CVE-2016-6252-fix-integer-overflow.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 1d5a926cc2d6078d23a96222b1ef3e558724dad1 Mon Sep 17 00:00:00 2001 -From: Sebastian Krahmer <krahmer@suse.com> -Date: Wed, 3 Aug 2016 11:51:07 -0500 -Subject: [PATCH] Simplify getulong - -Use strtoul to read an unsigned long, rather than reading -a signed long long and casting it. - -https://bugzilla.suse.com/show_bug.cgi?id=979282 ---- - lib/getulong.c | 9 +++------ - 1 file changed, 3 insertions(+), 6 deletions(-) - -diff --git a/lib/getulong.c b/lib/getulong.c -index 61579ca..08d2c1a 100644 ---- a/lib/getulong.c -+++ b/lib/getulong.c -@@ -44,22 +44,19 @@ - */ - int getulong (const char *numstr, /*@out@*/unsigned long int *result) - { -- long long int val; -+ unsigned long int val; - char *endptr; - - errno = 0; -- val = strtoll (numstr, &endptr, 0); -+ val = strtoul (numstr, &endptr, 0); - if ( ('\0' == *numstr) - || ('\0' != *endptr) - || (ERANGE == errno) -- /*@+ignoresigns@*/ -- || (val != (unsigned long int)val) -- /*@=ignoresigns@*/ - ) { - return 0; - } - -- *result = (unsigned long int)val; -+ *result = val; - return 1; - } - --- -2.1.4 - |