diff options
| author | lev <lev@FreeBSD.org> | 2006-01-03 17:26:17 +0000 |
|---|---|---|
| committer | lev <lev@FreeBSD.org> | 2006-01-03 17:26:17 +0000 |
| commit | dd868d86f9983d2cf55d3fa5fcd9723c7d38e9e1 (patch) | |
| tree | fe19e5c0822653a4d798a3af9a1d2fa0aa2df1b2 /russian/apache13 | |
| parent | 3dd38dfd10fb3c3ac4ec0392f33fb6dfd85cfc8c (diff) | |
| download | FreeBSD-ports-dd868d86f9983d2cf55d3fa5fcd9723c7d38e9e1.zip FreeBSD-ports-dd868d86f9983d2cf55d3fa5fcd9723c7d38e9e1.tar.gz | |
Fix CAN-2005-3352 (http://www.FreeBSD.org/ports/portaudit/9fff8dc8-7aa7-11da-bf72-00123f589060.html).
Patch was borrowed from `www/apache13' port.
Diffstat (limited to 'russian/apache13')
| -rw-r--r-- | russian/apache13/Makefile | 1 | ||||
| -rw-r--r-- | russian/apache13/files/patch-secfix-CAN-2005-3352 | 35 |
2 files changed, 36 insertions, 0 deletions
diff --git a/russian/apache13/Makefile b/russian/apache13/Makefile index 1a65638..d7219b2 100644 --- a/russian/apache13/Makefile +++ b/russian/apache13/Makefile @@ -7,6 +7,7 @@ PORTNAME= apache PORTVERSION= ${APACHE_VERSION}+${RA_VERSION} +PORTREVISION?= 1 CATEGORIES= russian www MASTER_SITES= ${MASTER_SITE_APACHE_HTTPD} DISTNAME= ${PORTNAME}_${APACHE_VERSION} diff --git a/russian/apache13/files/patch-secfix-CAN-2005-3352 b/russian/apache13/files/patch-secfix-CAN-2005-3352 new file mode 100644 index 0000000..8febc0e --- /dev/null +++ b/russian/apache13/files/patch-secfix-CAN-2005-3352 @@ -0,0 +1,35 @@ +--- src/main/util.c (original) ++++ src/main/util.c Mon Dec 12 08:36:54 2005 +@@ -1722,6 +1722,8 @@ + j += 3; + else if (s[i] == '&') + j += 4; ++ else if (s[i] == '"') ++ j += 5; + + if (j == 0) + return ap_pstrndup(p, s, i); +@@ -1739,6 +1741,10 @@ + else if (s[i] == '&') { + memcpy(&x[j], "&", 5); + j += 4; ++ } ++ else if (s[i] == '"') { ++ memcpy(&x[j], """, 6); ++ j += 5; + } + else + x[j] = s[i]; + +--- src/modules/standard/mod_imap.c (original) ++++ src/modules/standard/mod_imap.c Mon Dec 12 08:36:54 2005 +@@ -328,7 +328,7 @@ + if (!strcasecmp(value, "referer")) { + referer = ap_table_get(r->headers_in, "Referer"); + if (referer && *referer) { +- return ap_pstrdup(r->pool, referer); ++ return ap_escape_html(r->pool, referer); + } + else { + /* XXX: This used to do *value = '\0'; ... which is totally bogus + |
