Hello community, here is the log from the commit of package xine-lib checked in at Fri Jun 9 11:13:49 CEST 2006. -------- --- xine-lib/xine-lib.changes 2006-06-01 18:31:35.000000000 +0200 +++ xine-lib/xine-lib.changes 2006-06-06 18:52:09.000000000 +0200 @@ -1,0 +2,5 @@ +Tue Jun 6 17:50:30 CEST 2006 - mhopf@suse.de + +- Improved fix for #180850: Use correct buffer size. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xine-lib.spec ++++++ --- /var/tmp/diff_new_pack.EOAzeL/_old 2006-06-09 11:12:37.000000000 +0200 +++ /var/tmp/diff_new_pack.EOAzeL/_new 2006-06-09 11:12:37.000000000 +0200 @@ -15,7 +15,7 @@ %define DISTRIBUTABLE 1 Summary: Video Player with Plug-Ins Version: 1.1.1 -Release: 26 +Release: 27 %define libversion 1.1.1 %define uiversion 0.99.4 Obsoletes: xine @@ -112,7 +112,7 @@ Group: Productivity/Multimedia/Video/Players Provides: xine:/usr/bin/xine Version: 0.99.4 -Release: 34 +Release: 35 Autoreqprov: on %description -n xine-ui @@ -516,6 +516,8 @@ /usr/include/xine.h %changelog -n xine-lib +* Tue Jun 06 2006 - mhopf@suse.de +- Improved fix for #180850: Use correct buffer size. * Thu Jun 01 2006 - mhopf@suse.de - Security fix for #180850: Buffer overflow in HTTP input plugin. * Wed May 17 2006 - schwab@suse.de ++++++ xine-lib-fix-http.diff ++++++ --- /var/tmp/diff_new_pack.EOAzeL/_old 2006-06-09 11:12:41.000000000 +0200 +++ /var/tmp/diff_new_pack.EOAzeL/_new 2006-06-09 11:12:41.000000000 +0200 @@ -6,10 +6,10 @@ len = 0; } else len ++; -+ if ( len >= buflen ) { ++ if ( len >= BUFSIZE ) { + _x_message(this->stream, XINE_MSG_PERMISSION_ERROR, this->mrl, NULL); + xine_log (this->stream->xine, XINE_LOG_MSG, -+ _("input_http: buffer exhausted after %d bytes."), buflen); ++ _("input_http: buffer exhausted after %d bytes."), BUFSIZE); + return 0; + } } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit-help@opensuse.org