diff options
| author | ache <ache@FreeBSD.org> | 2001-04-20 08:48:51 +0000 |
|---|---|---|
| committer | ache <ache@FreeBSD.org> | 2001-04-20 08:48:51 +0000 |
| commit | 812ac90894391f8e3e31c3c2d22e26fa30a7993a (patch) | |
| tree | d0b1c8201a6aa7cffed5e82965c7e95cc5f11810 /www | |
| parent | 01f18e32226530fe651b2cd7012e7dc930ee9819 (diff) | |
| download | FreeBSD-ports-812ac90894391f8e3e31c3c2d22e26fa30a7993a.zip FreeBSD-ports-812ac90894391f8e3e31c3c2d22e26fa30a7993a.tar.gz | |
Fix remote buffer overflow in search.cgi arguments
Diffstat (limited to 'www')
| -rw-r--r-- | www/mnoGoSearch-current/Makefile | 2 | ||||
| -rw-r--r-- | www/mnoGoSearch-current/files/patch-ac | 25 | ||||
| -rw-r--r-- | www/mnogosearch/Makefile | 2 | ||||
| -rw-r--r-- | www/mnogosearch/files/patch-ac | 25 | ||||
| -rw-r--r-- | www/mnogosearch31/Makefile | 2 | ||||
| -rw-r--r-- | www/mnogosearch31/files/patch-ac | 25 |
6 files changed, 78 insertions, 3 deletions
diff --git a/www/mnoGoSearch-current/Makefile b/www/mnoGoSearch-current/Makefile index f661ee8..656faaa 100644 --- a/www/mnoGoSearch-current/Makefile +++ b/www/mnoGoSearch-current/Makefile @@ -7,7 +7,7 @@ PORTNAME= mnogosearch PORTVERSION= 3.1.12 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= www databases MASTER_SITES= http://search.mnogo.ru/Download/ diff --git a/www/mnoGoSearch-current/files/patch-ac b/www/mnoGoSearch-current/files/patch-ac new file mode 100644 index 0000000..68f8816a --- /dev/null +++ b/www/mnoGoSearch-current/files/patch-ac @@ -0,0 +1,25 @@ +--- src/search.c.old Wed Feb 28 15:28:10 2001 ++++ src/search.c Thu Apr 19 18:02:10 2001 +@@ -1269,7 +1269,8 @@ + strcpy(template,env); + + if((env=getenv("QUERY_STRING"))){ +- strcpy(query_string,env); ++ strncpy(query_string,env,UDMSTRSIZ-1); ++ query_string[UDMSTRSIZ-1] = '\0'; + if((env=getenv("REDIRECT_STATUS"))){ + + /* Check Apache internal redirect */ +@@ -1316,8 +1317,10 @@ + /* or under server which do not */ + /* pass an empty QUERY_STRING var */ + +- if(argv[1]) +- sprintf(query_string,"q=%s",argv[1]); ++ if(argv[1]) { ++ strcpy(query_string, "q="); ++ strncat(query_string, argv[1], UDMSTRSIZ-1-2); ++ } + if(!template[0]) + sprintf(template,"%s/%s", UDM_CONF_DIR,"search.htm"); + } diff --git a/www/mnogosearch/Makefile b/www/mnogosearch/Makefile index f661ee8..656faaa 100644 --- a/www/mnogosearch/Makefile +++ b/www/mnogosearch/Makefile @@ -7,7 +7,7 @@ PORTNAME= mnogosearch PORTVERSION= 3.1.12 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= www databases MASTER_SITES= http://search.mnogo.ru/Download/ diff --git a/www/mnogosearch/files/patch-ac b/www/mnogosearch/files/patch-ac new file mode 100644 index 0000000..68f8816a --- /dev/null +++ b/www/mnogosearch/files/patch-ac @@ -0,0 +1,25 @@ +--- src/search.c.old Wed Feb 28 15:28:10 2001 ++++ src/search.c Thu Apr 19 18:02:10 2001 +@@ -1269,7 +1269,8 @@ + strcpy(template,env); + + if((env=getenv("QUERY_STRING"))){ +- strcpy(query_string,env); ++ strncpy(query_string,env,UDMSTRSIZ-1); ++ query_string[UDMSTRSIZ-1] = '\0'; + if((env=getenv("REDIRECT_STATUS"))){ + + /* Check Apache internal redirect */ +@@ -1316,8 +1317,10 @@ + /* or under server which do not */ + /* pass an empty QUERY_STRING var */ + +- if(argv[1]) +- sprintf(query_string,"q=%s",argv[1]); ++ if(argv[1]) { ++ strcpy(query_string, "q="); ++ strncat(query_string, argv[1], UDMSTRSIZ-1-2); ++ } + if(!template[0]) + sprintf(template,"%s/%s", UDM_CONF_DIR,"search.htm"); + } diff --git a/www/mnogosearch31/Makefile b/www/mnogosearch31/Makefile index f661ee8..656faaa 100644 --- a/www/mnogosearch31/Makefile +++ b/www/mnogosearch31/Makefile @@ -7,7 +7,7 @@ PORTNAME= mnogosearch PORTVERSION= 3.1.12 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= www databases MASTER_SITES= http://search.mnogo.ru/Download/ diff --git a/www/mnogosearch31/files/patch-ac b/www/mnogosearch31/files/patch-ac new file mode 100644 index 0000000..68f8816a --- /dev/null +++ b/www/mnogosearch31/files/patch-ac @@ -0,0 +1,25 @@ +--- src/search.c.old Wed Feb 28 15:28:10 2001 ++++ src/search.c Thu Apr 19 18:02:10 2001 +@@ -1269,7 +1269,8 @@ + strcpy(template,env); + + if((env=getenv("QUERY_STRING"))){ +- strcpy(query_string,env); ++ strncpy(query_string,env,UDMSTRSIZ-1); ++ query_string[UDMSTRSIZ-1] = '\0'; + if((env=getenv("REDIRECT_STATUS"))){ + + /* Check Apache internal redirect */ +@@ -1316,8 +1317,10 @@ + /* or under server which do not */ + /* pass an empty QUERY_STRING var */ + +- if(argv[1]) +- sprintf(query_string,"q=%s",argv[1]); ++ if(argv[1]) { ++ strcpy(query_string, "q="); ++ strncat(query_string, argv[1], UDMSTRSIZ-1-2); ++ } + if(!template[0]) + sprintf(template,"%s/%s", UDM_CONF_DIR,"search.htm"); + } |
