commit
4f1d05f3b2
@ -1,30 +0,0 @@
|
|||||||
From a868bacb46e3c900530bed47a1c6f85b0fbe701c Mon Sep 17 00:00:00 2001
|
|
||||||
From: nicm <nicm>
|
|
||||||
Date: Thu, 29 Oct 2020 16:33:01 +0000
|
|
||||||
Subject: [PATCH] Do not write after the end of the array and overwrite the
|
|
||||||
stack when colon-separated SGR sequences contain empty arguments. Reported by
|
|
||||||
Sergey Nizovtsev.
|
|
||||||
|
|
||||||
---
|
|
||||||
input.c | 7 ++++++-
|
|
||||||
1 file changed, 6 insertions(+), 1 deletion(-)
|
|
||||||
|
|
||||||
diff --git a/input.c b/input.c
|
|
||||||
index 42a60c92a..c280c0d97 100644
|
|
||||||
--- a/input.c
|
|
||||||
+++ b/input.c
|
|
||||||
@@ -1976,8 +1976,13 @@ input_csi_dispatch_sgr_colon(struct input_ctx *ictx, u_int i)
|
|
||||||
free(copy);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
- } else
|
|
||||||
+ } else {
|
|
||||||
n++;
|
|
||||||
+ if (n == nitems(p)) {
|
|
||||||
+ free(copy);
|
|
||||||
+ return;
|
|
||||||
+ }
|
|
||||||
+ }
|
|
||||||
log_debug("%s: %u = %d", __func__, n - 1, p[n - 1]);
|
|
||||||
}
|
|
||||||
free(copy);
|
|
||||||
BIN
tmux-3.1.tar.gz
BIN
tmux-3.1.tar.gz
Binary file not shown.
BIN
tmux-3.2a.tar.gz
Normal file
BIN
tmux-3.2a.tar.gz
Normal file
Binary file not shown.
@ -1,8 +1,8 @@
|
|||||||
%global _hardened_build 1
|
%global _hardened_build 1
|
||||||
|
|
||||||
Name: tmux
|
Name: tmux
|
||||||
Version: 3.1
|
Version: 3.2a
|
||||||
Release: 2
|
Release: 1
|
||||||
Summary: A terminal multiplexer
|
Summary: A terminal multiplexer
|
||||||
|
|
||||||
License: ISC and BSD
|
License: ISC and BSD
|
||||||
@ -10,7 +10,6 @@ URL: https://tmux.github.io/
|
|||||||
Source0: https://github.com/%{name}/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz
|
Source0: https://github.com/%{name}/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz
|
||||||
Source1: bash_completion_tmux.sh
|
Source1: bash_completion_tmux.sh
|
||||||
|
|
||||||
Patch1: CVE-2020-27347.patch
|
|
||||||
|
|
||||||
BuildRequires: gcc libevent-devel ncurses-devel libutempter-devel
|
BuildRequires: gcc libevent-devel ncurses-devel libutempter-devel
|
||||||
|
|
||||||
@ -64,6 +63,9 @@ fi
|
|||||||
%{_mandir}/man1/%{name}.1.gz
|
%{_mandir}/man1/%{name}.1.gz
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Dec 3 2021 yangcheng <yangcheng87@huawei.com> - 3.2a-1
|
||||||
|
- DESC:upgrade to 3.2a
|
||||||
|
|
||||||
* Sat Nov 28 2020 wangye <wangye70@huawei.com> - 3.1-2
|
* Sat Nov 28 2020 wangye <wangye70@huawei.com> - 3.1-2
|
||||||
- DESC:fix CVE
|
- DESC:fix CVE
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user