uboot: (firmwareOdroidC2/C4) don't invoke patch tool, use patches = [] instead
https://github.com/NixOS/nixpkgs/blob/master/pkgs/stdenv/generic/setup.sh#L948 this can do it nicely. Signed-off-by: Anton Arapov <anton@deadbeef.mx>
This commit is contained in:
commit
56de2bcd43
30691 changed files with 3076956 additions and 0 deletions
19
pkgs/tools/admin/tightvnc/1.3.10-CVE-2019-15679.patch
Normal file
19
pkgs/tools/admin/tightvnc/1.3.10-CVE-2019-15679.patch
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
Adapted from https://github.com/LibVNC/libvncserver/commit/c2c4b81e6cb3b485fb1ec7ba9e7defeb889f6ba7
|
||||
diff --git a/vncviewer/rfbproto.c b/vncviewer/rfbproto.c
|
||||
index 04b0230..bd11b54 100644
|
||||
--- a/vncviewer/rfbproto.c
|
||||
+++ b/vncviewer/rfbproto.c
|
||||
@@ -303,7 +303,12 @@ InitialiseRFBConnection(void)
|
||||
si.format.blueMax = Swap16IfLE(si.format.blueMax);
|
||||
si.nameLength = Swap32IfLE(si.nameLength);
|
||||
|
||||
- /* FIXME: Check arguments to malloc() calls. */
|
||||
+ if (si.nameLength > 1<<20) {
|
||||
+ fprintf(stderr, "Too big desktop name length sent by server: %lu B > 1 MB\n",
|
||||
+ (unsigned long)si.nameLength);
|
||||
+ return False;
|
||||
+ }
|
||||
+
|
||||
desktopName = malloc(si.nameLength + 1);
|
||||
if (!desktopName) {
|
||||
fprintf(stderr, "Error allocating memory for desktop name, %lu bytes\n",
|
||||
Loading…
Add table
Add a link
Reference in a new issue