pkgsrc/net/avahi/patches/patch-ai
obache d4c1035338 Update avahi to 0.6.27.
0.6.27
some build fixes

0.6.26
This is mostly a bugfix release but also fixes a low risk security issue and
adds a couple of minor new features.
 * Fix CVE-2010-2244 (Ludwig Nussel)
 * Support for Gtk+ 3 and Gtk+ Introspection
 * Native systemd socket activation support
 * Add systemd service files
 * Add various resource control options, for traffic rate limiting as well as
   cache size and D-Bus client object limits.
 * i18n updates
 * Minor other updates
2010-07-24 13:42:12 +00:00

16 lines
504 B
Text

$NetBSD: patch-ai,v 1.2 2010/07/24 13:42:12 obache Exp $
--- avahi-core/server.c.orig 2010-06-29 18:51:53.000000000 +0000
+++ avahi-core/server.c
@@ -903,6 +903,11 @@ static void dispatch_packet(AvahiServer
return;
}
+ if (port <= 0) {
+ avahi_log_warn("Received packet from invalid source port.");
+ return;
+ }
+
if (avahi_address_is_ipv4_in_ipv6(src_address))
/* This is an IPv4 address encapsulated in IPv6, so let's ignore it. */
return;