man-db docs/ChangeLog src/ult_src.c

[Colin Watson]

CVSROOT:        /cvsroot/man-db
Module name:    man-db
Branch:         
Changes by:     Colin Watson <address@hidden>   03/07/30 15:39:41

Modified files:
        docs           : ChangeLog 
        src            : ult_src.c 

Log message:
        Fix vulnerabilities 2 and 3 posted by Vade 79
        <address@hidden> on BugTraq, Message-ID:
        <address@hidden>.
        
        * src/ult_src.c (ult_softlink): Return a newly allocated string
        rather than copying into fullpath.
        (test_for_include): Return a newly allocated string rather than
        copying into rel (which was a pointer into part of basename in
        ult_src(), and wasn't reallocated in the event that the .so text
        was too large).
        (ult_src): Allocate basename dynamically rather than using a
        static buffer. relative is no longer needed. Update for changes in
        ult_softlink() and test_for_include().

CVSWeb URLs:
http://savannah.gnu.org/cgi-bin/viewcvs/man-db/man-db/docs/ChangeLog.diff?tr1=1.341&tr2=1.342&r1=text&r2=text
http://savannah.gnu.org/cgi-bin/viewcvs/man-db/man-db/src/ult_src.c.diff?tr1=1.13&tr2=1.14&r1=text&r2=text