From 12c4a9da266da2b53d7ff0aa8c21af6df1c4702c Mon Sep 17 00:00:00 2001 From: Wesley Shields Date: Tue, 19 May 2009 17:16:13 +0000 Subject: [PATCH] - Fix a one-byte buffer overflow (vuxml entry coming shortly). - Update maintainers address. PR: ports/134700 Submitted by: Olafur Osvaldsson (maintainer) --- dns/nsd2/Makefile | 3 ++- dns/nsd2/files/patch-vuln | 13 +++++++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) create mode 100644 dns/nsd2/files/patch-vuln diff --git a/dns/nsd2/Makefile b/dns/nsd2/Makefile index aac4ac3ba3a5..298324d3c6f1 100644 --- a/dns/nsd2/Makefile +++ b/dns/nsd2/Makefile @@ -7,11 +7,12 @@ PORTNAME= nsd PORTVERSION= 2.3.7 +PORTREVISION= 1 CATEGORIES= dns ipv6 MASTER_SITES= http://www.nlnetlabs.nl/downloads/nsd/ \ ftp://ftp.rhnet.is/pub/nsd/ -MAINTAINER= oli@isnic.is +MAINTAINER= osvaldsson@icelandic.net COMMENT= An authoritative only non-recursive name server CONFLICTS= nsd-[3-9]* diff --git a/dns/nsd2/files/patch-vuln b/dns/nsd2/files/patch-vuln new file mode 100644 index 000000000000..7d012c6fdb2e --- /dev/null +++ b/dns/nsd2/files/patch-vuln @@ -0,0 +1,13 @@ +--- query.c ++++ query.c +@@ -239,8 +239,8 @@ + * MAXDOMAINLEN ... + */ + if ((*src & 0xc0) || +- (src + *src + 1 > buffer_end(query->packet)) || +- (src + *src + 1 > query_name + MAXDOMAINLEN)) ++ (src + *src + 2 > buffer_end(query->packet)) || ++ (src + *src + 2 > query_name + MAXDOMAINLEN)) + { + return 0; + }