pkgsrc/games/plib/patches/patch-ag
drochner 4dff3778f2 replace vsprintf() by vsnprintf() to protect an error message buffer
from being overrun, addresses CVE-2011-4620
bump PKGREV
2011-12-22 18:21:38 +00:00

15 lines
431 B
Text

$NetBSD: patch-ag,v 1.1 2011/12/22 18:21:38 drochner Exp $
CVE-2011-4620
--- src/util/ulError.cxx.orig 2008-03-11 02:06:23.000000000 +0000
+++ src/util/ulError.cxx
@@ -39,7 +39,7 @@ void ulSetError ( enum ulSeverity severi
{
va_list argp;
va_start ( argp, fmt ) ;
- vsprintf ( _ulErrorBuffer, fmt, argp ) ;
+ vsnprintf ( _ulErrorBuffer, sizeof(_ulErrorBuffer), fmt, argp ) ;
va_end ( argp ) ;
if ( _ulErrorCB )