ports/devel/pwlib152/files/patch-src::ptclib::asner.cxx
Maxim Sobolev f0629da70d Fix CAN-2004-0097 vulnerability in devel/pwlib, remove FORBIDDEN and bump
PORTREVISION of related ports.

Requested by:	*many*
No reply from:	security-officer
Obtained from:	Debian/pwlib cvs
2004-06-08 06:27:43 +00:00

58 lines
1.2 KiB
C++

$FreeBSD$
--- src/ptclib/asner.cxx 2004/06/03 14:44:43 1.1
+++ src/ptclib/asner.cxx 2004/06/03 14:50:35
@@ -4926,6 +4926,11 @@
return -1;
value += lower;
+
+ // clamp value to upper limit
+ if (value > upper)
+ value = upper;
+
return 0;
}
@@ -4970,7 +4975,13 @@
unsigned base;
if (!MultiBitDecode(CountBits(upper - lower + 1), base))
return -1;
- return lower + base; // 10.9.4.1
+ len = lower + base; // 10.9.4.1
+
+ // clamp value to upper limit
+ if (len > upper)
+ len = upper;
+
+ return len;
}
if (upper < 65536) // 10.9.3.3
@@ -4981,13 +4992,20 @@
if (IsAtEnd())
return -1;
- if (SingleBitDecode() == 0)
- return MultiBitDecode(7, len) ? 0 : -1; // 10.9.3.6
+ if (SingleBitDecode() == 0) {
+ if (!MultiBitDecode(7, len)) // 10.9.3.6
+ return -1; // 10.9.3.8 unsupported
+ }
+ else if (SingleBitDecode() == 0) {
+ if (!MultiBitDecode(14, len)) // 10.9.3.7
+ return -1; // 10.9.3.8 unsupported
+ }
- if (SingleBitDecode() == 0)
- return MultiBitDecode(14, len) ? 0 : -1; // 10.9.3.7
+ // clamp value to upper limit
+ if (len > upper)
+ len = upper;
- return -1; // 10.9.3.8 unsupported
+ return 0;
}