[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Please unblock neon26/0.26.2-3.1



Hi,

I've NMUed neon26 with the patch in the BTS, fixing #404723 (a grave bug).
Here's the NMU diff:

diff -u neon26-0.26.2/debian/changelog neon26-0.26.2/debian/changelog
--- neon26-0.26.2/debian/changelog
+++ neon26-0.26.2/debian/changelog
@@ -1,3 +1,13 @@
+neon26 (0.26.2-3.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * In the uri_lookup() macro, cast to unsigned char instead of unsigned
+    (which equals unsigned int), to avoid buffer overruns and SIGSEGV when
+    parsing URIs with non-ASCII characters; patch from Modestas Vainius.
+    (Closes: #404723)
+
+ -- Steinar H. Gunderson <sesse@debian.org>  Fri,  5 Jan 2007 21:40:29 +0100
+
 neon26 (0.26.2-3) unstable; urgency=medium
 
   * Fix FTBFS caused by my previous upload, patch didn't apply on 64 bit
--- neon26-0.26.2.orig/src/ne_uri.c
+++ neon26-0.26.2/src/ne_uri.c
@@ -110,7 +110,7 @@
 /*   Fx */ OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT
 };
 
-#define uri_lookup(ch) (uri_chars[(unsigned)ch])
+#define uri_lookup(ch) (uri_chars[(unsigned char)ch])
 
 char *ne_path_parent(const char *uri) 
 {

/* Steinar */
-- 
Homepage: http://www.sesse.net/



Reply to: