summaryrefslogtreecommitdiff
path: root/wordnet-3.0-CVE-2008-2149.patch
diff options
context:
space:
mode:
Diffstat (limited to 'wordnet-3.0-CVE-2008-2149.patch')
-rw-r--r--wordnet-3.0-CVE-2008-2149.patch12
1 files changed, 12 insertions, 0 deletions
diff --git a/wordnet-3.0-CVE-2008-2149.patch b/wordnet-3.0-CVE-2008-2149.patch
new file mode 100644
index 0000000..42660c1
--- /dev/null
+++ b/wordnet-3.0-CVE-2008-2149.patch
@@ -0,0 +1,12 @@
+--- wordnet-3.0.orig/src/wn.c
++++ wordnet-3.0/src/wn.c
+@@ -206,7 +206,8 @@
+ outsenses += do_search(av[1], optptr->pos, optptr->search,
+ whichsense, optptr->label);
+ } else {
+- sprintf(tmpbuf, "wn: invalid search option: %s\n", av[j]);
++ /* Fix CVE-2008-2149: buffer overflows Andreas Tille <tille@debian.org> */
++ sprintf(tmpbuf, "wn: invalid search option: %.200s\n", av[j]);
+ display_message(tmpbuf);
+ errcount++;
+ }