Skip to content
GitLab
Explore
Sign in
Register
Primary navigation
Search or go to…
Project
aports
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package Registry
Container Registry
Model registry
Operate
Environments
Terraform modules
Monitor
Incidents
Service Desk
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
quietsy
aports
Commits
35e0f300
Commit
35e0f300
authored
12 years ago
by
Natanael Copa
Browse files
Options
Downloads
Patches
Plain Diff
main/perl: security upgrade to 5.12.5 (CVE-2012-5195)
fixes #1558
parent
8c814a95
No related branches found
Branches containing commit
No related tags found
Tags containing commit
No related merge requests found
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
main/perl/APKBUILD
+2
-4
2 additions, 4 deletions
main/perl/APKBUILD
main/perl/CVE-2011-2939.patch
+0
-16
0 additions, 16 deletions
main/perl/CVE-2011-2939.patch
with
2 additions
and
20 deletions
main/perl/APKBUILD
+
2
−
4
View file @
35e0f300
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
# Contributor: Leonardo Arena <rnalrd@gmail.com>
pkgname
=
perl
pkgver
=
5.12.
4
pkgver
=
5.12.
5
pkgrel
=
0
pkgdesc
=
"Larry Wall's Practical Extraction and Report Language"
url
=
http://www.perl.org
license
=
"Artistic GPL-2"
source
=
"http://www.perl.com/CPAN/src/perl-
${
pkgver
}
.tar.gz
CVE-2011-2939.patch
CVE-2011-3597.patch
"
...
...
@@ -71,6 +70,5 @@ miniperl() {
cp
"
$srcdir
/perl-
$pkgver
"
/miniperl
"
$subpkgdir
/usr/bin"
}
md5sums
=
"fd22aba88e4e27ab879f142eec6452a0 perl-5.12.4.tar.gz
c0674ead60e89c20e2c8d9bbc2d7683a CVE-2011-2939.patch
md5sums
=
"3a647533aaa060a79aa0b9fa17198576 perl-5.12.5.tar.gz
0212067da7d533fe3939c0984cad4243 CVE-2011-3597.patch"
This diff is collapsed.
Click to expand it.
main/perl/CVE-2011-2939.patch
deleted
100644 → 0
+
0
−
16
View file @
8c814a95
diff --git a/cpan/Encode/Unicode/Unicode.xs b/cpan/Encode/Unicode/Unicode.xs
index 16f4cd1..039f155 100644
--- a/cpan/Encode/Unicode/Unicode.xs
+++ b/cpan/Encode/Unicode/Unicode.xs
@@ -256,7 +256,10 @@
CODE:
This prevents allocating too much in the rogue case of a large
input consisting initially of long sequence uft8-byte unicode
chars followed by single utf8-byte chars. */
- STRLEN remaining = (e - s)/usize;
+ /* +1
+ fixes Unicode.xs!decode_xs n-byte heap-overflow
+ */
+ STRLEN remaining = (e - s)/usize + 1; /* +1 to avoid the leak */
STRLEN max_alloc = remaining + (8*1024*1024);
STRLEN est_alloc = remaining * UTF8_MAXLEN;
STRLEN newlen = SvLEN(result) + /* min(max_alloc, est_alloc) */
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment