pkgsrc/net/chrony/patches/patch-ag
hannken 33e5f859b9 Update chrony to version 1.29. For a full list of changes
since 1.24 see file NEWS in the distfile.

Security fixes since 1.24:

* Fix crash when processing crafted commands (CVE-2012-4502)
  (possible with IP addresses allowed by cmdallow and localhost)
* Don't send uninitialized data in SUBNETS_ACCESSED and CLIENT_ACCESSES
  replies (CVE-2012-4503) (not used by chronyc)

Reviewed by: Joerg Sonnenberger <joerg@netbsd.org>
2013-08-16 08:30:20 +00:00

15 lines
442 B
Text

$NetBSD: patch-ag,v 1.4 2013/08/16 08:30:20 hannken Exp $
The ctype functions work on integers.
--- getdate.c.orig 2013-08-08 13:58:07.000000000 +0000
+++ getdate.c
@@ -2547,7 +2547,7 @@ LookupWord (buff)
/* Make it lowercase. */
for (p = buff; *p; p++)
if (ISUPPER ((unsigned char) *p))
- *p = tolower (*p);
+ *p = tolower ((unsigned char)(*p));
if (strcmp (buff, "am") == 0 || strcmp (buff, "a.m.") == 0)
{