summaryrefslogtreecommitdiff
path: root/mail-mta/opensmtpd/files
diff options
context:
space:
mode:
authorJason A. Donenfeld <zx2c4@gentoo.org>2015-10-05 10:42:58 +0200
committerJason A. Donenfeld <zx2c4@gentoo.org>2015-10-05 10:44:18 +0200
commit3f8e2fe24f3ff174d8515b82607e951e054f68f6 (patch)
tree268b6b18855f49b2602884abe29cd804f527b0bd /mail-mta/opensmtpd/files
parent478a5a76ded3799e3236772c7feb1110dbad7382 (diff)
downloadgentoo-3f8e2fe24f3ff174d8515b82607e951e054f68f6.tar.gz
gentoo-3f8e2fe24f3ff174d8515b82607e951e054f68f6.tar.xz
mail-mta/opensmtpd: bump release for urgent security issue
Committing this as stable and removing the old version too, because it's being exploited in the wild. Package-Manager: portage-2.2.22
Diffstat (limited to 'mail-mta/opensmtpd/files')
-rw-r--r--mail-mta/opensmtpd/files/opensmtpd-5.7.2-remote-header-crash.patch26
1 files changed, 26 insertions, 0 deletions
diff --git a/mail-mta/opensmtpd/files/opensmtpd-5.7.2-remote-header-crash.patch b/mail-mta/opensmtpd/files/opensmtpd-5.7.2-remote-header-crash.patch
new file mode 100644
index 00000000000..f9da33b5f2a
--- /dev/null
+++ b/mail-mta/opensmtpd/files/opensmtpd-5.7.2-remote-header-crash.patch
@@ -0,0 +1,26 @@
+diff --git a/smtpd/filter.c b/smtpd/filter.c
+index 062f00f..8af6eab 100644
+--- a/smtpd/filter.c
++++ b/smtpd/filter.c
+@@ -726,7 +726,6 @@ filter_tx_io(struct io *io, int evt)
+ struct filter_session *s = io->arg;
+ size_t len, n;
+ char *data;
+- char buf[65535];
+
+ log_trace(TRACE_FILTERS, "filter: filter_tx_io(%p, %s)", s, io_strevent(evt));
+
+@@ -734,10 +733,9 @@ filter_tx_io(struct io *io, int evt)
+ case IO_DATAIN:
+ data = iobuf_data(&s->ibuf);
+ len = iobuf_len(&s->ibuf);
+- memmove(buf, data, len);
+- buf[len] = 0;
+- log_trace(TRACE_FILTERS, "filter: filter_tx_io: datain (%zu) for req %016"PRIx64": %s",
+- len, s->id, buf);
++
++ log_trace(TRACE_FILTERS, "filter: filter_tx_io: datain (%zu) for req %016"PRIx64"",
++ len, s->id);
+
+ n = fwrite(data, 1, len, s->ofile);
+ if (n != len) {