[Secure-testing-commits] r5676 - data/patches/MOPB

Kees Cook keescook-guest at alioth.debian.org
Wed Apr 18 23:25:16 UTC 2007


Author: keescook-guest
Date: 2007-04-18 23:25:16 +0000 (Wed, 18 Apr 2007)
New Revision: 5676

Modified:
   data/patches/MOPB/MOPB-10-php5.diff
   data/patches/MOPB/MOPB-14-php5.diff
   data/patches/MOPB/MOPB-15-php5.diff
   data/patches/MOPB/MOPB-24-php5.diff
   data/patches/MOPB/MOPB-29-php5.diff
Log:
added source URLs to MOPB patches

Modified: data/patches/MOPB/MOPB-10-php5.diff
===================================================================
--- data/patches/MOPB/MOPB-10-php5.diff	2007-04-18 23:20:57 UTC (rev 5675)
+++ data/patches/MOPB/MOPB-10-php5.diff	2007-04-18 23:25:16 UTC (rev 5676)
@@ -1,319 +1,24 @@
-
-
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
-"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
-<head>
-<title>[cvs] Diff of /php-src/ext/session/session.c</title>
-<meta name="generator" content="ViewVC 1.1-dev" />
-<link rel="stylesheet" href="/viewvc.cgi/*docroot*/styles.css" type="text/css" />
-<link rel="stylesheet" href="http://static.php.net/www.php.net/style.css" />
-<link rel="stylesheet" href="http://static.php.net/www.php.net/styles/phpnet.css" />
-<link rel="shortcut icon" href="http://static.php.net/www.php.net/favicon.ico" />
-
-</head>
-<body bgcolor="#ffffff" text="#000000" link="#000099" alink="#0000ff" vlink="#000099">
-<div class="vc_navheader">
-<table border="0" cellspacing="0" cellpadding="0" width="100%">
-<tr bgcolor="#9999cc">
-<td align="center" rowspan="2" width="126"><a href="/"><img src="http://static.php.net/www.php.net/images/php.gif" alt="PHP" width="120" height="67" hspace="3" /></a></td>
-<td>&nbsp;</td>
-</tr>
-<tr bgcolor="#9999cc">
-<td align="right" valign="bottom">
-<a href="http://www.php.net/anoncvs.php">Anonymous CVS Access Instructions</a>.
-</td>
-</tr>
-<tr bgcolor="#666699">
-<td align="right" valign="top" colspan="2" class="quicksearch">
-Main trees: <a href="/viewvc.cgi/php-src/">php-src</a> |
-<a href="/viewvc.cgi/pecl/">pecl</a> |
-<a href="/viewvc.cgi/pear/">pear</a> |
-<a href="/viewvc.cgi/pear-core/">pear-core</a>
-</td>
-</tr>
-</table>
-</div>
-<div class="paddinghack">
-
-<p style="margin:0;">
-
-<a href="/viewvc.cgi/php-src/ext/session/?pathrev=PHP_5_2"><img src="/viewvc.cgi/*docroot*/images/back_small.png" class="vc_icon" alt="Parent Directory" /> Parent Directory</a>
-
-| <a href="/viewvc.cgi/php-src/ext/session/session.c?view=log&amp;pathrev=PHP_5_2"><img src="/viewvc.cgi/*docroot*/images/log.png" class="vc_icon" alt="Revision Log" /> Revision Log</a>
-
-
-
-| <a href="/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.22&amp;r2=1.417.2.8.2.23&amp;pathrev=PHP_5_2&amp;view=patch"><img src="/viewvc.cgi/*docroot*/images/diff.png" class="vc_icon" alt="View Patch" /> Patch</a>
-
-
-</p>
-
-<h3 style="text-align:center;"></h3>
-
-
-<table cellspacing="0" cellpadding="0">
-<tr class="vc_diff_header">
-<th style="width:6%;"></th>
-<th style="width:47%; vertical-align:top;">
-
-revision 1.417.2.8.2.22, Tue Dec 26 16:53:47 2006 UTC
-
-</th>
-<th style="width:47%; vertical-align:top;">
-
-revision 1.417.2.8.2.23, Sun Dec 31 22:25:55 2006 UTC
-
-</th>
-</tr>
-
-
-<tr class="vc_diff_chunk_header" id="h471">
-<td style="width:6%;"><strong>#</strong></td>
-<td style="width:47%;">
-<strong>Line 471</strong>&nbsp;
-<span class="vc_diff_chunk_extra"></span>
-</td>
-<td style="width:47%;">
-<strong>Line 471</strong>&nbsp;
-<span class="vc_diff_chunk_extra"></span>
-</td>
-</tr>
-
-
-
-
-
-
-
-
-
-<tr>
-<td id="l471"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l471">471</a></td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;for (p = val; p &lt; endptr; ) {</td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;for (p = val; p &lt; endptr; ) {</td>
-</tr>
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-<tr>
-<td id="l472"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l472">472</a></td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;zval **tmp;</td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;zval **tmp;</td>
-</tr>
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-<tr>
-<td id="l473"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l473">473</a></td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;namelen = *p &amp; (~PS_BIN_UNDEF);</td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;namelen = *p &amp; (~PS_BIN_UNDEF);</td>
-</tr>
-
-
-
-
-
-
-
-
-
-
-<tr>
-<td id="l474"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l474">474</a></td>
-<td class="vc_diff_empty">&nbsp;</td>
-<td class="vc_diff_add">&nbsp;</td>
-</tr>
-
-
-
-
-
-<tr>
-<td id="l475"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l475">475</a></td>
-<td class="vc_diff_empty">&nbsp;</td>
-<td class="vc_diff_add">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;if (namelen &gt; PS_BIN_MAX || (p + namelen) &gt;= endptr) {</td>
-</tr>
-
-
-
-
-
-<tr>
-<td id="l476"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l476">476</a></td>
-<td class="vc_diff_empty">&nbsp;</td>
-<td class="vc_diff_add">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;return FAILURE;</td>
-</tr>
-
-
-
-
-
-<tr>
-<td id="l477"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l477">477</a></td>
-<td class="vc_diff_empty">&nbsp;</td>
-<td class="vc_diff_add">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;}</td>
-</tr>
-
-
-
-
-
-<tr>
-<td id="l478"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l478">478</a></td>
-<td class="vc_diff_empty">&nbsp;</td>
-<td class="vc_diff_add">&nbsp;</td>
-</tr>
-
-
-
-
-
-
-
-
-
-
-<tr>
-<td id="l479"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l479">479</a></td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;has_value = *p &amp; PS_BIN_UNDEF ? 0 : 1;</td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;has_value = *p &amp; PS_BIN_UNDEF ? 0 : 1;</td>
-</tr>
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-<tr>
-<td id="l480"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l480">480</a></td>
-<td class="vc_diff_nochange">&nbsp;</td>
-<td class="vc_diff_nochange">&nbsp;</td>
-</tr>
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-<tr>
-<td id="l481"><a href="/viewvc.cgi/php-src/ext/session/session.c?annotate=1.417.2.8.2.23&amp;pathrev=PHP_5_2#l481">481</a></td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;name = estrndup(p + 1, namelen);</td>
-<td class="vc_diff_nochange">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;name = estrndup(p + 1, namelen);</td>
-</tr>
-
-
-
-
-
-
-
-
-</table>
-
-
-
-<hr style="margin-top:1em;" />
-<table cellpadding="10" class="auto">
-<tr>
-<td>
-<form method="get" action="/viewvc.cgi/php-src/ext/session/session.c">
-<div>
-<input type="hidden" name="r1" value="1.417.2.8.2.22" /><input type="hidden" name="r2" value="1.417.2.8.2.23" /><input type="hidden" name="pathrev" value="PHP_5_2" />
-<select name="diff_format" onchange="submit()">
-<option value="h" selected="selected">Colored Diff</option>
-<option value="l" >Long Colored Diff</option>
-<option value="f" >Full Colored Diff</option>
-<option value="u" >Unidiff</option>
-<option value="c" >Context Diff</option>
-<option value="s" >Side by Side</option>
-</select>
-<input type="submit" value="Show" />
-</div>
-</form>
-</td>
-<td>
-
-<table style="border:solid gray 1px;" class="auto">
-<tr>
-<td>Legend:<br />
-<table cellspacing="0" cellpadding="1">
-<tr>
-<td style="text-align:center;" class="vc_diff_remove">Removed from v.1.417.2.8.2.22</td>
-<td class="vc_diff_empty">&nbsp;</td>
-</tr>
-<tr>
-<td style="text-align:center;" colspan="2" class="vc_diff_change">changed lines</td>
-</tr>
-<tr>
-<td class="vc_diff_empty">&nbsp;</td>
-<td style="text-align:center;" class="vc_diff_add">Added in v.1.417.2.8.2.23</td>
-</tr>
-</table>
-</td>
-</tr>
-</table>
-
-</td>
-</tr>
-</table>
-
-<hr />
-<table>
-<tr>
-<td>
-<address>systems at php.net</address><br />
-Powered by <a href="http://viewvc.tigris.org/">ViewVC 1.1-dev</a>
-</td>
-<td style="text-align:right;">
-<h3><a href="/viewvc.cgi/*docroot*/help_rootview.html">ViewVC Help</a></h3>
-</td>
-</tr>
-</table>
-</body>
-</html>
-
+# http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.22&r2=1.417.2.8.2.23&pathrev=PHP_5_2&view=patch
+--- session.c	2006/12/26 16:53:47	1.417.2.8.2.22
++++ session.c	2006/12/31 22:25:55	1.417.2.8.2.23
+@@ -17,7 +17,7 @@
+    +----------------------------------------------------------------------+
+  */
+ 
+-/* $Id: session.c,v 1.417.2.8.2.22 2006/12/26 16:53:47 iliaa Exp $ */
++/* $Id: session.c,v 1.417.2.8.2.23 2006/12/31 22:25:55 iliaa Exp $ */
+ 
+ #ifdef HAVE_CONFIG_H
+ #include "config.h"
+@@ -471,6 +471,11 @@
+ 	for (p = val; p < endptr; ) {
+ 		zval **tmp;
+ 		namelen = *p & (~PS_BIN_UNDEF);
++
++		if (namelen > PS_BIN_MAX || (p + namelen) >= endptr) {
++			return FAILURE;
++		}
++
+ 		has_value = *p & PS_BIN_UNDEF ? 0 : 1;
+ 
+ 		name = estrndup(p + 1, namelen);

Modified: data/patches/MOPB/MOPB-14-php5.diff
===================================================================
--- data/patches/MOPB/MOPB-14-php5.diff	2007-04-18 23:20:57 UTC (rev 5675)
+++ data/patches/MOPB/MOPB-14-php5.diff	2007-04-18 23:25:16 UTC (rev 5676)
@@ -1,3 +1,4 @@
+# http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.45&r2=1.445.2.14.2.49&pathrev=PHP_5_2&view=patch
 --- string.c	2007/03/03 15:46:29	1.445.2.14.2.45
 +++ string.c	2007/03/08 00:47:04	1.445.2.14.2.49
 @@ -18,7 +18,7 @@

Modified: data/patches/MOPB/MOPB-15-php5.diff
===================================================================
--- data/patches/MOPB/MOPB-15-php5.diff	2007-04-18 23:20:57 UTC (rev 5675)
+++ data/patches/MOPB/MOPB-15-php5.diff	2007-04-18 23:25:16 UTC (rev 5676)
@@ -1,3 +1,4 @@
+# http://cvs.php.net/viewvc.cgi/php-src/ext/shmop/shmop.c?r1=1.31.2.2.2.1&r2=1.31.2.2.2.2&pathrev=PHP_5_2&view=patch
 --- shmop.c	2006/11/03 14:46:48	1.31.2.2.2.1
 +++ shmop.c	2006/12/30 20:21:25	1.31.2.2.2.2
 @@ -16,7 +16,7 @@

Modified: data/patches/MOPB/MOPB-24-php5.diff
===================================================================
--- data/patches/MOPB/MOPB-24-php5.diff	2007-04-18 23:20:57 UTC (rev 5675)
+++ data/patches/MOPB/MOPB-24-php5.diff	2007-04-18 23:25:16 UTC (rev 5676)
@@ -1,3 +1,4 @@
+# http://cvs.php.net/viewvc.cgi/php-src/ext/standard/array.c?r1=1.308.2.21.2.24&r2=1.308.2.21.2.25&pathrev=PHP_5_2&view=patch
 --- array.c	2007/03/04 17:21:16	1.308.2.21.2.24
 +++ array.c	2007/03/16 19:38:58	1.308.2.21.2.25
 @@ -21,7 +21,7 @@

Modified: data/patches/MOPB/MOPB-29-php5.diff
===================================================================
--- data/patches/MOPB/MOPB-29-php5.diff	2007-04-18 23:20:57 UTC (rev 5675)
+++ data/patches/MOPB/MOPB-29-php5.diff	2007-04-18 23:25:16 UTC (rev 5676)
@@ -1,3 +1,4 @@
+# http://cvs.php.net/viewvc.cgi/php-src/ext/standard/var_unserializer.re?r1=1.52.2.2.2.1&r2=1.52.2.2.2.2&pathrev=PHP_5_2&view=patch
 --- var_unserializer.re	2006/12/15 00:58:08	1.52.2.2.2.1
 +++ var_unserializer.re	2007/03/23 20:15:21	1.52.2.2.2.2
 @@ -16,7 +16,7 @@




More information about the Secure-testing-commits mailing list