diff options
Diffstat (limited to 'net-mgmt/xymon-server/files/patch-md5_buffer_overflow')
| -rw-r--r-- | net-mgmt/xymon-server/files/patch-md5_buffer_overflow | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/net-mgmt/xymon-server/files/patch-md5_buffer_overflow b/net-mgmt/xymon-server/files/patch-md5_buffer_overflow new file mode 100644 index 000000000000..3b4d1a92ae89 --- /dev/null +++ b/net-mgmt/xymon-server/files/patch-md5_buffer_overflow @@ -0,0 +1,17 @@ +From: Roland Rosenfeld <roland@debian.org> +Date: Tue, 24 Sep 2024 21:53:18 +0200 +Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/xymon/+bug/2078638 +Subject: Fix buffer overflow in md5hash + This is triggered/found by -D_FORTIFY_SOURCE=3 + +--- lib/digest.c ++++ lib/digest.c +@@ -41,7 +41,7 @@ char *md5hash(char *input) + myMD5_Final(md_value, ctx->mdctx); + + for(i = 0, p = md_string; (i < sizeof(md_value)); i++) +- p += snprintf(p, (sizeof(md_string) - (md_string - p)), "%02x", md_value[i]); ++ p += snprintf(p, (sizeof(md_string) - (p - md_string)), "%02x", md_value[i]); + *p = '\0'; + + return md_string; |