diff --git a/backport-nping-fix-out-of-bounds-access.patch b/backport-nping-fix-out-of-bounds-access.patch new file mode 100644 index 0000000..be30e67 --- /dev/null +++ b/backport-nping-fix-out-of-bounds-access.patch @@ -0,0 +1,29 @@ +From 54a0c1440188a76f370b14d40777716a8761d0a8 Mon Sep 17 00:00:00 2001 +From: "jay.fink" +Date: Wed, 13 Oct 2010 00:39:53 +0000 +Subject: [PATCH] approved by dugsong@ Fix an off by one. Issue number 9 in + google code. + +Conflict: NA +Reference: https://github.com/ofalk/libdnet/commit/54a0c1440188a76f370b14d40777716a8761d0a8 + +--- + libdnet-stripped/src/intf.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/libdnet-stripped/src/intf.c b/libdnet-stripped/src/intf.c +index 6180d85..4b282ff 100644 +--- a/libdnet-stripped/src/intf.c ++++ b/libdnet-stripped/src/intf.c +@@ -774,7 +774,7 @@ _intf_get_aliases(intf_t *intf, struct intf_entry *entry) + u_int idx, bits, scope, flags; + + if ((f = fopen(PROC_INET6_FILE, "r")) != NULL) { +- while (ap < lap && ++ while ((ap + 1) < lap && + fgets(buf, sizeof(buf), f) != NULL) { + /* scan up to INTF_NAME_LEN-1 bytes to reserve space for null terminator */ + sscanf(buf, "%04s%04s%04s%04s%04s%04s%04s%04s %x %02x %02x %02x %15s\n", +-- +2.33.0 + diff --git a/nmap.spec b/nmap.spec index bfad1ec..35f11b9 100644 --- a/nmap.spec +++ b/nmap.spec @@ -3,7 +3,7 @@ Name: nmap Epoch: 2 Version: 7.94 -Release: 1 +Release: 2 License: Nmap Summary: A tool for network discovery and security auditing. Requires: %{name}-ncat = %{epoch}:%{version}-%{release} @@ -21,6 +21,7 @@ Patch0002: backport-nmap_resolve_config.patch Patch0003: nmap-replace-sensitive-words.patch Patch0004: backport-upgrade-libpcre-to-PCRE2-10.42.patch Patch0005: backport-remove-nse_pcrelib-from-build.patch +Patch0006: backport-nping-fix-out-of-bounds-access.patch %define pixmap_srcdir zenmap/share/pixmaps @@ -68,6 +69,12 @@ ln -s ncat %{buildroot}%{_bindir}/nc %{_mandir}/man1/*.1.gz %changelog +* Wed Aug 23 2023 xingwei - 2:7.94-2 +- Type:bugfix +- CVE: +- SUG:NA +- DESC:nping:fix out of bounds + * Thu Jul 27 2023 xingwei - 2:7.94-1 - Type:requirement - ID:NA