commit nvram-wakeup

Hello community, here is the log from the commit of package nvram-wakeup checked in at Thu Jan 10 02:22:48 CET 2008. -------- --- arch/i386/nvram-wakeup/nvram-wakeup.changes 2007-07-02 16:14:48.000000000 +0200 +++ /mounts/work_src_done/STABLE/nvram-wakeup/nvram-wakeup.changes 2008-01-08 10:27:37.073738000 +0100 @@ -1,0 +2,5 @@ +Tue Jan 8 10:29:09 CET 2008 - bwalle@suse.de + +- fix stack overflow (351625) + +------------------------------------------------------------------- New: ---- nvram-wakeup-fix-stack-overflow ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nvram-wakeup.spec ++++++ --- /var/tmp/diff_new_pack.x12710/_old 2008-01-10 02:19:25.000000000 +0100 +++ /var/tmp/diff_new_pack.x12710/_new 2008-01-10 02:19:25.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package nvram-wakeup (Version 0.97) # -# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine # package are under the same license as the package itself. # @@ -11,14 +11,15 @@ # norootforbuild Name: nvram-wakeup -URL: http://sourceforge.net/projects/nvram-wakeup +Url: http://sourceforge.net/projects/nvram-wakeup Summary: Reads and writes the WakeUp time in the BIOS Version: 0.97 -Release: 3 +Release: 31 License: GPL v2 or later Group: System/Base Source: %{name}-%{version}.tar.bz2 Source1: COPYING +Patch0: nvram-wakeup-fix-stack-overflow BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -45,6 +46,7 @@ %prep %setup -q +%patch0 -p1 %build make CFLAGS="$RPM_OPT_FLAGS -D_GNU_SOURCE" %{?jobs:-j%jobs} @@ -68,6 +70,8 @@ %{_mandir}/man8/*.8.gz %changelog +* Tue Jan 08 2008 - bwalle@suse.de +- fix stack overflow (351625) * Mon Jul 02 2007 - bwalle@suse.de - added COPYING * Sun Jun 24 2007 - bwalle@suse.de ++++++ nvram-wakeup-fix-stack-overflow ++++++ From: Bernhard Walle Subject: [PATCH] Fix stack overflow References: 351625 This patch fixes a stack overflow in tools.c, function xxd(). While the string indeed expands to 49 characters, the terminating zero needs one character so that the buffer must be 50 characters large. Signed-off-by: Bernhard Walle --- tools.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/tools.c +++ b/tools.c @@ -163,7 +163,7 @@ char * strip(char * s) { void xxd(unsigned char * bytes, int size, int loglevel) { int i,pos; - char out_line[49]; + char out_line[50]; for (i=0;i<=((size-1) / 16);i++) { sprintf(out_line, "%06X0: %02X%02X %02X%02X %02X%02X %02X%02X %02X%02X %02X%02X %02X%02X %02X%02X\n", i, ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org