diff options
| author | Steve Langasek <vorlon@debian.org> | 2014-01-14 00:30:36 -0800 |
|---|---|---|
| committer | Steve Langasek <vorlon@debian.org> | 2019-01-08 22:11:51 -0800 |
| commit | 1673fdd3756f59f0886cb3d0d594ff71ed3b1f40 (patch) | |
| tree | 9cc5f635f1c345bd491ffa1aa33c15c32947ae02 /debian/patches-applied/pam_env-fix-dos.patch | |
| parent | 18ad8104e674ec8e1fb74d15a248680e51044854 (diff) | |
| download | pam-1673fdd3756f59f0886cb3d0d594ff71ed3b1f40.tar.gz pam-1673fdd3756f59f0886cb3d0d594ff71ed3b1f40.tar.bz2 pam-1673fdd3756f59f0886cb3d0d594ff71ed3b1f40.zip | |
Refresh patches
Diffstat (limited to 'debian/patches-applied/pam_env-fix-dos.patch')
| -rw-r--r-- | debian/patches-applied/pam_env-fix-dos.patch | 33 |
1 files changed, 0 insertions, 33 deletions
diff --git a/debian/patches-applied/pam_env-fix-dos.patch b/debian/patches-applied/pam_env-fix-dos.patch deleted file mode 100644 index 523e1390..00000000 --- a/debian/patches-applied/pam_env-fix-dos.patch +++ /dev/null @@ -1,33 +0,0 @@ -Description: abort when encountering an overflowed environment variable - expansion (CVE-2011-3149). -Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874565 -Author: Kees Cook <kees@debian.org> - -Index: pam-debian/modules/pam_env/pam_env.c -=================================================================== ---- pam-debian.orig/modules/pam_env/pam_env.c 2011-10-14 12:47:23.433861595 -0700 -+++ pam-debian/modules/pam_env/pam_env.c 2011-10-14 12:47:23.461861963 -0700 -@@ -567,6 +567,7 @@ - D(("Variable buffer overflow: <%s> + <%s>", tmp, tmpptr)); - pam_syslog (pamh, LOG_ERR, "Variable buffer overflow: <%s> + <%s>", - tmp, tmpptr); -+ return PAM_ABORT; - } - continue; - } -@@ -628,6 +629,7 @@ - D(("Variable buffer overflow: <%s> + <%s>", tmp, tmpptr)); - pam_syslog (pamh, LOG_ERR, - "Variable buffer overflow: <%s> + <%s>", tmp, tmpptr); -+ return PAM_ABORT; - } - } - } /* if ('{' != *orig++) */ -@@ -639,6 +641,7 @@ - D(("Variable buffer overflow: <%s> + <%s>", tmp, tmpptr)); - pam_syslog(pamh, LOG_ERR, - "Variable buffer overflow: <%s> + <%s>", tmp, tmpptr); -+ return PAM_ABORT; - } - } - } /* for (;*orig;) */ |