sync/ports
1
0
Fork 0
mirror of https://git.freebsd.org/ports.git synced 2025-04-28 01:26:39 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

security/openvpn-auth-ldap: Fix buffer overflow in C/R function

Browse source 
Bump PORTREVISION
Security:	e915b60e-ea25-11ef-a1c0-0050569f0b83
This commit is contained in:
Ryan Steinmetz 2025-02-13 11:27:16 -05:00
parent 76087c45a0
commit 879092b342
No known key found for this signature in database
GPG key ID: 1EF8BA6BD02846D7
2 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
security/openvpn-auth-ldap/Makefile
View file

@ -1,6 +1,6 @@
PORTNAME= openvpn-auth-ldap
PORTVERSION= 2.0.4
PORTREVISION= 2
PORTREVISION= 3
DISTVERSIONPREFIX= auth-ldap-
CATEGORIES= security net-vpn

11
security/openvpn-auth-ldap/files/patch-src_openvpn-cr.c Normal file
View file

@ -0,0 +1,11 @@
--- src/openvpn-cr.c.orig 2018-07-26 20:17:21 UTC
+++ src/openvpn-cr.c
@@ -29,7 +29,7 @@ int extract_openvpn_cr(const char *response, openvpn_r
tokenIndexes[0] = response;
int tokenCnt = 1;
const char *p;
- for (p = response; *p; ++p) {
+ for (p = response; *p && tokenCnt < 15; ++p) {
if (*p == ':')
tokenIndexes[tokenCnt++] = p + 1;
}