pool/virtualbox
SHA256
2
0
Fork 2
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Fix buffer overflow on dtrace lib:

Browse Source 
* virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags

OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=212
This commit is contained in:
Tomáš Chvátal 2015-07-14 19:14:21 +00:00 committed by Git OBS Bridge
parent 5b84ab1c4e
commit 756ec3ce82
3 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
virtualbox-snpritnf-buffer-overflow.patch Normal file
View File

@ -0,0 +1,16 @@
diff -urN VirtualBox-5.0.0.old/src/VBox/ExtPacks/VBoxDTrace/onnv/lib/libdtrace/common/dt_printf.c VirtualBox-5.0.0/src/VBox/ExtPacks/VBoxDTrace/onnv/lib/libdtrace/common/dt_printf.c
--- VirtualBox-5.0.0.old/src/VBox/ExtPacks/VBoxDTrace/onnv/lib/libdtrace/common/dt_printf.c 2015-07-14 20:53:12.121479325 +0200
+++ VirtualBox-5.0.0/src/VBox/ExtPacks/VBoxDTrace/onnv/lib/libdtrace/common/dt_printf.c 2015-07-14 21:04:02.001865414 +0200
@@ -1568,10 +1568,10 @@
width = 0;
if (width != 0)
- f += snprintf(f, sizeof (format), "%d", ABS(width));
+ f += snprintf(f, sizeof (f), "%d", ABS(width));
if (prec > 0)
- f += snprintf(f, sizeof (format), ".%d", prec);
+ f += snprintf(f, sizeof (f), ".%d", prec);
(void) strcpy(f, pfd->pfd_fmt);
pfd->pfd_rec = rec;

7
virtualbox.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Tue Jul 14 19:13:46 UTC 2015 - tchvatal@suse.com
- Fix buffer overflow on dtrace lib:
* virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags
------------------------------------------------------------------- -------------------------------------------------------------------
Sat Jul 11 12:46:51 UTC 2015 - tchvatal@suse.com Sat Jul 11 12:46:51 UTC 2015 - tchvatal@suse.com

3
virtualbox.spec
View File

@ -79,6 +79,8 @@ Patch105: smap.diff
Patch106: gcc5-real-support.patch Patch106: gcc5-real-support.patch
# Patch to build with gnu sed correctly # Patch to build with gnu sed correctly
Patch107: virtualbox-sed-params.patch Patch107: virtualbox-sed-params.patch
# Patch to use snprintf correcty and not overflow dst buffer
Patch108: virtualbox-snpritnf-buffer-overflow.patch
BuildRequires: LibVNCServer-devel BuildRequires: LibVNCServer-devel
BuildRequires: SDL-devel BuildRequires: SDL-devel
BuildRequires: acpica BuildRequires: acpica
@ -304,6 +306,7 @@ This package contains icons for guest desktop files that were created on the des
%patch105 -p1 %patch105 -p1
%patch106 -p1 %patch106 -p1
%patch107 -p1 %patch107 -p1
%patch108 -p1
#copy user manual #copy user manual
cp %{SOURCE1} UserManual.pdf cp %{SOURCE1} UserManual.pdf
#copy kbuild config #copy kbuild config