[Pkg-clamav-devel] Bugfix for #507624 prepared

[leonel]

leonel wrote:
> Florian Weimer wrote:
>   
>> * leonel:
>>
>>   
>>     
>>> I;ve tested the  0.92.1  Ubuntu version with this :
>>> http://int21.de/cve/CVE-2008-1389-clamav-chd.html 
>>>     
>>>       
>>   
>>     
>>> and is not vulnerable ..
>>>     
>>>       
>> Have you made sure that ClamAV has not remotely disabled the affected
>> code?
>>
>>
>>   
>>     
>
> No I haven't  but I think  since this test does not affect the ubuntu
> clamav  this bug must be on another version in the middle
>
> Leonel
>
>
> _______________________________________________
> Pkg-clamav-devel mailing list
> Pkg-clamav-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-clamav-devel
>
>
>   


and by looking at the changed code  I can't find  where to apply the
second change :
http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=%2Ftrunk%2Flibclamav%2Fchmunpack.c&rev=4157&sc=1


Leonel