Hello community, here is the log from the commit of package iputils checked in at Mon Dec 11 01:42:01 CET 2006. -------- --- iputils/iputils.changes 2006-11-23 17:04:33.000000000 +0100 +++ /mounts/work_src_done/STABLE/iputils/iputils.changes 2006-12-06 15:26:36.000000000 +0100 @@ -1,0 +2,5 @@ +Wed Dec 6 15:24:00 CET 2006 - ms@suse.de + +- ping_common.c: added check for oversized packages (-s) (#222010) + +------------------------------------------------------------------- New: ---- iputils-ss021109-ping_common.dif ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ iputils.spec ++++++ --- /var/tmp/diff_new_pack.pedp0g/_old 2006-12-11 01:41:49.000000000 +0100 +++ /var/tmp/diff_new_pack.pedp0g/_new 2006-12-11 01:41:49.000000000 +0100 @@ -13,7 +13,7 @@ Name: iputils Summary: IPv4and IPv6 Networking Utilities Version: ss021109 -Release: 189 +Release: 190 License: BSD License and BSD-like, GNU General Public License (GPL) Group: Productivity/Networking/Other Provides: nkitb @@ -35,6 +35,7 @@ Patch12: %name-ifenslave.patch Patch13: %name-HZ.patch Patch14: %name-%version-ping6_getaddrinfo.patch +Patch15: %name-%version-ping_common.dif Prefix: %_prefix BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -65,6 +66,7 @@ %patch12 %patch13 %patch14 +%patch15 mkdir linux touch linux/autoconf.h @@ -111,6 +113,8 @@ %attr(644,root,root) %_mandir/man8/* %changelog -n iputils +* Wed Dec 06 2006 - ms@suse.de +- ping_common.c: added check for oversized packages (-s) (#222010) * Thu Nov 23 2006 - olh@suse.de - move ifenslave.c to the first patch to allow quilt setup *.spec * Wed Nov 22 2006 - ms@suse.de ++++++ iputils-ss021109-ping_common.dif ++++++ --- ping_common.c 2006-12-01 12:58:33.000000000 +0100 +++ ping_common.c 2006-12-01 12:59:59.000000000 +0100 @@ -187,6 +187,13 @@ fprintf(stderr, "ping: illegal negative packet size %d.\n", datalen); exit(2); } + if (datalen > 0xFFFF - 8 ) { + if (uid || datalen > 0xFFFF ) { + fprintf(stderr, "Error: packet size %d is too large. Maximim is %d\n", datalen, 0xFFFF - 8); + exit(2); + } + fprintf(stderr, "WARNING: packet size %d is too large. Maximim is %d\n", datalen, 0xFFFF - 8 ); + } break; case 'v': options |= F_VERBOSE; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org