From a2e118fa2128c7cb7f1bf961c62ac4f4ce809a0c Mon Sep 17 00:00:00 2001 From: Dirk Meyer Date: Fri, 8 Nov 2024 18:45:36 +0100 Subject: [PATCH] comms/lrzsz: patch CVE-2018-10195 Security: CVE-2018-10195 MFC: 2024Q4 --- comms/lrzsz/Makefile | 2 +- comms/lrzsz/files/patch-zm.c | 19 +++++++++++++++++++ 2 files changed, 20 insertions(+), 1 deletion(-) create mode 100644 comms/lrzsz/files/patch-zm.c diff --git a/comms/lrzsz/Makefile b/comms/lrzsz/Makefile index 6a4ef5a42333..c271e30d3bbd 100644 --- a/comms/lrzsz/Makefile +++ b/comms/lrzsz/Makefile @@ -1,6 +1,6 @@ PORTNAME= lrzsz PORTVERSION= 0.12.20 -PORTREVISION= 6 +PORTREVISION= 7 CATEGORIES= comms MASTER_SITES= http://ohse.de/uwe/releases/ diff --git a/comms/lrzsz/files/patch-zm.c b/comms/lrzsz/files/patch-zm.c new file mode 100644 index 000000000000..fdf38e31aad2 --- /dev/null +++ b/comms/lrzsz/files/patch-zm.c @@ -0,0 +1,19 @@ +--- src/zm.c.orig 1998-12-29 16:48:38 UTC ++++ src/zm.c +@@ -431,10 +431,12 @@ zsdata(const char *buf, size_t length, int frameend) + VPRINTF(3,("zsdata: %lu %s", (unsigned long) length, + Zendnames[(frameend-ZCRCE)&3])); + crc = 0; +- do { +- zsendline(*buf); crc = updcrc((0377 & *buf), crc); +- buf++; +- } while (--length>0); ++ ++ for( ; length; length--) { ++ zsendline(*buf); crc = updcrc((0377 & *buf), crc); ++ buf++; ++ } ++ + xsendline(ZDLE); xsendline(frameend); + crc = updcrc(frameend, crc); +