0b43549e36
- Add support for TLS v1.1 and TLS v1.2
(TLS v1.2 requires mozilla nss 3.15.1 or newer.)
- merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
from redhat to allow tls v1.1 too.
- ported the tls v1.1 patch to be tls v1.2 aware
- added mod_nss-proxyvariables.patch (from RHEL6 package)
- added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun
OBS-URL: https://build.opensuse.org/request/show/185495
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/apache2-mod_nss?expand=0&rev=4
17 lines
740 B
Diff
17 lines
740 B
Diff
mod_nss-1.0.8/nss_engine_init.c:467: overrun-local: Overrunning static array
|
|
"child_argv", with 5 elements, at position 5 with index variable "5".
|
|
|
|
https://bugzilla.redhat.com/show_bug.cgi?id=714154
|
|
diff -up --recursive mod_nss-1.0.8.orig/nss_engine_init.c mod_nss-1.0.8/nss_engine_init.c
|
|
--- mod_nss-1.0.8.orig/nss_engine_init.c 2011-08-01 13:24:34.000000000 -0400
|
|
+++ mod_nss-1.0.8/nss_engine_init.c 2011-08-01 13:25:36.000000000 -0400
|
|
@@ -429,7 +429,7 @@ int nss_init_Module(apr_pool_t *p, apr_p
|
|
|
|
/* Do we need to fire up our password helper? */
|
|
if (mc->nInitCount == 1) {
|
|
- const char * child_argv[5];
|
|
+ const char * child_argv[6];
|
|
apr_status_t rv;
|
|
struct sembuf sb;
|
|
char sembuf[32];
|