jengelh/libmirage
SHA256
1
0
Fork 0
forked from pool/libmirage
Code Pull Requests Activity

Accepting request 727965 from filesystems

Browse Source 
- Add CVE-2019-15757.patch [boo#1148728]

OBS-URL: https://build.opensuse.org/request/show/727965
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libmirage?expand=0&rev=20
This commit is contained in:
Dominique Leuenberger 2019-09-04 07:15:18 +00:00 committed by Git OBS Bridge
commit d09ffa6d62
3 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
CVE-2019-15757.patch Normal file
View File

@ -0,0 +1,24 @@
Origin: https://gist.github.com/andreafioraldi/343d9ba64060b548c02362a5e61ec932
---
images/image-nrg/parser.c | 7 +++++++
1 file changed, 7 insertions(+)
Index: libmirage-3.2.2/images/image-nrg/parser.c
===================================================================
--- a/libmirage-3.2.2.orig/images/image-nrg/parser.c
+++ b/libmirage-3.2.2/images/image-nrg/parser.c
@@ -987,6 +987,13 @@ static MirageDisc *mirage_parser_nrg_loa
/* Set CD-ROM as default medium type, will be changed accordingly if there
is a MTYP block provided */
mirage_disc_set_medium_type(self->priv->disc, MIRAGE_MEDIUM_CD);
+ /* Length integrity check */
+ if (self->priv->nrg_data_length == 0) {
+ MIRAGE_DEBUG(self, MIRAGE_DEBUG_WARNING, "%s: rg_data_length must be greater than 0!\n", __debug__);
+ g_set_error(error, MIRAGE_ERROR, MIRAGE_ERROR_IMAGE_FILE_ERROR, Q_("nrg_data_length must be greater than 0!"));
+ succeeded = FALSE;
+ goto end;
+ }
/* Read descriptor data */
self->priv->nrg_data = g_malloc(self->priv->nrg_data_length);

5
libmirage.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Tue Sep 3 09:53:55 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
- Add CVE-2019-15757.patch [boo#1148728]
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Aug 26 08:28:33 UTC 2019 - Jan Engelhardt <jengelh@inai.de> Mon Aug 26 08:28:33 UTC 2019 - Jan Engelhardt <jengelh@inai.de>

1
libmirage.spec
View File

@ -30,6 +30,7 @@ URL: http://cdemu.sf.net/about/libmirage/
Source: https://downloads.sf.net/cdemu/%name-%version.tar.bz2 Source: https://downloads.sf.net/cdemu/%name-%version.tar.bz2
Patch1: 0001-libMirage-CSO-filter-validate-part-size.patch Patch1: 0001-libMirage-CSO-filter-validate-part-size.patch
Patch2: 0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch Patch2: 0002-libMirage-CSO-filter-replaced-a-g_assert-with-error-.patch
Patch3: CVE-2019-15757.patch
BuildRequires: cmake >= 2.8.5 BuildRequires: cmake >= 2.8.5
BuildRequires: intltool >= 0.21 BuildRequires: intltool >= 0.21
BuildRequires: pkg-config >= 0.16 BuildRequires: pkg-config >= 0.16