Hello stable release managers,
I'd like to upload libgadu 1:1.8.0+r592-4 with the following interdiff
from the 1:1.8.0+r592-3 which is currently in lenny. It fixes crash due
to memory corruption. Please approve.
| --- libgadu-1.8.0+r592/debian/changelog
| +++ libgadu-1.8.0+r592/debian/changelog
| @@ -1,3 +1,9 @@
| +libgadu (1:1.8.0+r592-4) stable; urgency=high
| +
| + * Cherry-pick a fix for memory corruption when removing dcc7 sessions
| +
| + -- Marcin Owsiany <porridge@debian.org> Tue, 30 Nov 2010 18:37:12 -0800
| +
| libgadu (1:1.8.0+r592-3) unstable; urgency=high
|
| * Security upload for lenny and sid
| only in patch2:
| unchanged:
| --- libgadu-1.8.0+r592.orig/src/dcc7.c
| +++ libgadu-1.8.0+r592/src/dcc7.c
| @@ -92,7 +92,7 @@
|
| gg_debug_session(sess, GG_DEBUG_FUNCTION, "** gg_dcc7_session_remove(%p, %p)\n", sess, dcc);
|
| - if (!sess || !dcc) {
| + if (sess == NULL || dcc == NULL) {
| gg_debug_session(sess, GG_DEBUG_MISC, "// gg_dcc7_session_remove() invalid parameters\n");
| errno = EINVAL;
| return -1;
| @@ -104,9 +104,9 @@
| return 0;
| }
|
| - for (tmp = sess->dcc7_list; tmp; tmp = tmp->next) {
| + for (tmp = sess->dcc7_list; tmp != NULL; tmp = tmp->next) {
| if (tmp->next == dcc) {
| - tmp = dcc->next;
| + tmp->next = dcc->next;
| dcc->next = NULL;
| return 0;
| }
--
Marcin Owsiany <porridge@debian.org> http://marcin.owsiany.pl/
GnuPG: 1024D/60F41216 FE67 DA2D 0ACA FC5E 3F75 D6F6 3A0D 8AA0 60F4 1216
Attachment:
signature.asc
Description: Digital signature