diff options
| author | Lexi Winter <ivy@FreeBSD.org> | 2025-12-01 03:19:41 +0000 |
|---|---|---|
| committer | Lexi Winter <ivy@FreeBSD.org> | 2025-12-01 03:19:41 +0000 |
| commit | 2e80774d0b20d167bc0a9e2b63dafbfb171c0d22 (patch) | |
| tree | 25f0138e1af8902b92dacc8cce09b267447c17db /net-mgmt/xymon-server/files/patch-md5_buffer_overflow | |
| parent | f85f2b2d6e5b7ed869376eb4b180c3a74a5c5da9 (diff) | |
| parent | 1a30da80670973368b399f2b01fe9c04b91a1273 (diff) | |
Merge remote-tracking branch 'freebsd/main' into lf/mainlf/main
Diffstat (limited to 'net-mgmt/xymon-server/files/patch-md5_buffer_overflow')
| -rw-r--r-- | net-mgmt/xymon-server/files/patch-md5_buffer_overflow | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/net-mgmt/xymon-server/files/patch-md5_buffer_overflow b/net-mgmt/xymon-server/files/patch-md5_buffer_overflow new file mode 100644 index 000000000000..3b4d1a92ae89 --- /dev/null +++ b/net-mgmt/xymon-server/files/patch-md5_buffer_overflow @@ -0,0 +1,17 @@ +From: Roland Rosenfeld <roland@debian.org> +Date: Tue, 24 Sep 2024 21:53:18 +0200 +Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/xymon/+bug/2078638 +Subject: Fix buffer overflow in md5hash + This is triggered/found by -D_FORTIFY_SOURCE=3 + +--- lib/digest.c ++++ lib/digest.c +@@ -41,7 +41,7 @@ char *md5hash(char *input) + myMD5_Final(md_value, ctx->mdctx); + + for(i = 0, p = md_string; (i < sizeof(md_value)); i++) +- p += snprintf(p, (sizeof(md_string) - (md_string - p)), "%02x", md_value[i]); ++ p += snprintf(p, (sizeof(md_string) - (p - md_string)), "%02x", md_value[i]); + *p = '\0'; + + return md_string; |