/[packages]/updates/5/bind/current/SOURCES/bind-9.10.4-sdb-no-strlcat.patch
ViewVC logotype

Contents of /updates/5/bind/current/SOURCES/bind-9.10.4-sdb-no-strlcat.patch

Parent Directory Parent Directory | Revision Log Revision Log

Revision 1104818 - (show annotations) (download)
Fri May 26 13:25:52 2017 UTC (6 years, 10 months ago) by guillomovitch
File size: 501 byte(s) 
- sync with cauldron packages, to fix multiple security issues
 (CVE-2016-931, CVE-2016-9147, CVE-2016-9444, CVE-2017-3135) (#mga20107)
- also ensure /dev/urandom is available in chroot (#mga12425)
1 --- bind-9.10.4-P1/contrib/sdb/ldap/zone2ldap.c~ 2016-06-02 14:26:58.550911525 -0400
2 +++ bind-9.10.4-P1/contrib/sdb/ldap/zone2ldap.c 2016-06-02 14:53:09.908970201 -0400
3 @@ -708,11 +708,11 @@ build_dn_from_dc_list (char **dc_list, u
4 }
5
6
7 - strlcat (dn, tmp, sizeof (dn));
8 + strncat (dn, tmp, sizeof (dn) - strlen(dn));
9 }
10
11 sprintf (tmp, "dc=%s", dc_list[0]);
12 - strlcat (dn, tmp, sizeof (dn));
13 + strncat (dn, tmp, sizeof (dn) - strlen(dn));
14
15 fflush(NULL);
16 return dn;
  ViewVC Help
Powered by ViewVC 1.1.30