You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
25 lines
742 B
25 lines
742 B
2 years ago
|
From 19d73f67883c011cc74326a5dc34f7009efa60e1 Mon Sep 17 00:00:00 2001
|
||
|
|
From: Panu Matilainen <pmatilai@redhat.com>
|
||
|
|
Date: Tue, 6 Sep 2022 13:15:44 +0300
|
||
|
|
Subject: [PATCH] Fix buffer overrun from commit
|
||
|
|
4420c78beb86cc67392274bf351478a3375626a2
|
||
|
|
|
||
|
|
The newly handled ^ needs to be accounted for when allocating memory.
|
||
|
|
Found when testing #1936, goes to show what a useful thing that is.
|
||
|
|
---
|
||
|
|
lib/rpmdb.c | 1 +
|
||
|
|
1 file changed, 1 insertion(+)
|
||
|
|
|
||
|
|
diff --git a/lib/rpmdb.c b/lib/rpmdb.c
|
||
|
|
index fd2b0671ae..b3c5da62d5 100644
|
||
|
|
--- a/lib/rpmdb.c
|
||
|
|
+++ b/lib/rpmdb.c
|
||
|
|
@@ -1107,6 +1107,7 @@ static char * mireDup(rpmTagVal tag, rpmMireMode *modep,
|
||
|
|
case '.':
|
||
|
|
case '+':
|
||
|
|
case '*':
|
||
|
|
+ case '^':
|
||
|
|
if (!brackets) nb++;
|
||
|
|
break;
|
||
|
|
case '\\':
|