d2fbb3222f
- Add fixes for various crashes: libical-boo986631-read-past-end.patch libical-boo986631-check-prev-char.patch libical-parser-sanity-check.patch libical-timezone-use-after-free.patch libical-boo1015964-use-after-free.patch Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824), boo#1015964 (CVE-2016-9584), and boo#1044995. OBS-URL: https://build.opensuse.org/request/show/505726 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libical?expand=0&rev=43
27 lines
861 B
Diff
27 lines
861 B
Diff
From 04d84749e53db08c71ed0ce8b6ba5c11082743cd Mon Sep 17 00:00:00 2001
|
|
From: Ken Murchison <murch@andrew.cmu.edu>
|
|
Date: Fri, 2 Dec 2016 14:14:03 -0500
|
|
Subject: [PATCH] icalparser.c: make sure we have a prev_char before checking
|
|
it
|
|
|
|
---
|
|
src/libical/icalparser.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/libical/icalparser.c b/src/libical/icalparser.c
|
|
index 9d332375..2735c9ac 100644
|
|
--- a/src/libical/icalparser.c
|
|
+++ b/src/libical/icalparser.c
|
|
@@ -148,7 +148,7 @@ static char *parser_get_next_char(char c, char *str, int qm)
|
|
char prev_char = 0;
|
|
|
|
while (next_char != 0) {
|
|
- if (prev_char != '\\') {
|
|
+ if (prev_char && prev_char != '\\') {
|
|
if (qm == 1 && next_char == '"') {
|
|
/* Encountered a quote, toggle quote mode */
|
|
quote_mode = !quote_mode;
|
|
--
|
|
2.12.3
|
|
|