X-Git-Url: https://review.fuel-infra.org/gitweb?a=blobdiff_plain;f=cirros-testvm%2Fsrc-cirros%2Fbuildroot-2015.05%2Fpackage%2Ftcpdump%2F0004-fix-CVE-2014-8769.patch;fp=cirros-testvm%2Fsrc-cirros%2Fbuildroot-2015.05%2Fpackage%2Ftcpdump%2F0004-fix-CVE-2014-8769.patch;h=38eaf1247c1f3a8f5d8a900da2dddf820437e612;hb=b0a0f15dfaa205161a7fcb20cf1b8cd4948c2ef3;hp=0000000000000000000000000000000000000000;hpb=c6ac3cd55ee2da956195eee393b0882105dfad4e;p=packages%2Ftrusty%2Fcirros-testvm.git

diff --git a/cirros-testvm/src-cirros/buildroot-2015.05/package/tcpdump/0004-fix-CVE-2014-8769.patch b/cirros-testvm/src-cirros/buildroot-2015.05/package/tcpdump/0004-fix-CVE-2014-8769.patch
new file mode 100644
index 0000000..38eaf12
--- /dev/null
+++ b/cirros-testvm/src-cirros/buildroot-2015.05/package/tcpdump/0004-fix-CVE-2014-8769.patch
@@ -0,0 +1,19 @@
+From https://bugzilla.redhat.com/show_bug.cgi?id=1165162
+
+Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
+
+--- tcpdump-tcpdump-4.6/print-udp.c	2014-11-21 13:53:05.757690197 +0700
++++ tcpdump-4.6.2/print-udp.c	2014-11-21 13:50:58.077695164 +0700
+@@ -357,6 +357,12 @@
+ #ifdef INET6
+ 	register const struct ip6_hdr *ip6;
+ #endif
++	u_int caplength;
++
++	/* Checking length of available data before print */
++	caplength = (ndo->ndo_snapend >= bp) ? ndo->ndo_snapend - bp : 0;
++	if (length > caplength)
++		length = caplength;
+ 
+ 	if (ep > ndo->ndo_snapend)
+ 		ep = ndo->ndo_snapend;