summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTristan Heaven <nyhm@gentoo.org>2007-09-24 21:27:49 +0000
committerTristan Heaven <nyhm@gentoo.org>2007-09-24 21:27:49 +0000
commit4fcbbc94c9ab439f3fc47997ddc16d8a5bfba302 (patch)
treeca87f01b6d4ae55de48ce51416e430367387ffd4 /games-fps/alienarena/files
parentVersion bump, corrected homepage (bug #176472), added new doc USE-flag, vario... (diff)
downloadgentoo-2-4fcbbc94c9ab439f3fc47997ddc16d8a5bfba302.tar.gz
gentoo-2-4fcbbc94c9ab439f3fc47997ddc16d8a5bfba302.tar.bz2
gentoo-2-4fcbbc94c9ab439f3fc47997ddc16d8a5bfba302.zip
Security fixes from Debian, bug #191484
(Portage version: 2.1.3.9)
Diffstat (limited to 'games-fps/alienarena/files')
-rw-r--r--games-fps/alienarena/files/alienarena-20070613-dos.patch13
-rw-r--r--games-fps/alienarena/files/alienarena-20070613-format-strings.patch58
-rw-r--r--games-fps/alienarena/files/digest-alienarena-20070613-r1 (renamed from games-fps/alienarena/files/digest-alienarena-20070613)0
3 files changed, 71 insertions, 0 deletions
diff --git a/games-fps/alienarena/files/alienarena-20070613-dos.patch b/games-fps/alienarena/files/alienarena-20070613-dos.patch
new file mode 100644
index 000000000000..2e63b1dde446
--- /dev/null
+++ b/games-fps/alienarena/files/alienarena-20070613-dos.patch
@@ -0,0 +1,13 @@
+# fix-CVE-2007-4754-CVE-2007-4755.dpatch by Nico Golde <nion@debian.org>
+
+--- source/server/sv_main.c
++++ source/server/sv_main.c
+@@ -152,7 +152,7 @@
+ nametxt[k]=0;
+ s = NET_AdrToString ( cl->netchan.remote_address);
+ Com_sprintf (player, sizeof(player), "%i %i \"%s\" \"%s\"\n",
+- cl->edict->client->ps.stats[STAT_FRAGS], cl->ping, nametxt, s);
++ cl->edict->client->ps.stats[STAT_FRAGS], cl->ping, nametxt, "suppressed");
+ playerLength = strlen(player);
+ if (statusLength + playerLength >= sizeof(status) )
+ break; // can't hold any more
diff --git a/games-fps/alienarena/files/alienarena-20070613-format-strings.patch b/games-fps/alienarena/files/alienarena-20070613-format-strings.patch
new file mode 100644
index 000000000000..daa8b37a4ec4
--- /dev/null
+++ b/games-fps/alienarena/files/alienarena-20070613-format-strings.patch
@@ -0,0 +1,58 @@
+# fix-CVE-2007-4754-CVE-2007-4755.dpatch by Nico Golde <nion@debian.org>
+
+--- source/game/acesrc/acebot_cmds.c
++++ source/game/acesrc/acebot_cmds.c
+@@ -142,7 +142,7 @@
+ va_end (argptr);
+
+ if (dedicated->value)
+- gi.cprintf(NULL, PRINT_MEDIUM, bigbuffer);
++ gi.cprintf(NULL, PRINT_MEDIUM, "%s", bigbuffer);
+
+ for (i=0 ; i<maxclients->value ; i++)
+ {
+@@ -150,7 +150,7 @@
+ if (!cl_ent->inuse || cl_ent->is_bot)
+ continue;
+
+- gi.cprintf(cl_ent, PRINT_MEDIUM, bigbuffer);
++ gi.cprintf(cl_ent, PRINT_MEDIUM, "%s", bigbuffer);
+ }
+
+ }
+@@ -171,7 +171,7 @@
+ len = vsprintf (bigbuffer,fmt,argptr);
+ va_end (argptr);
+
+- gi.cprintf(ent, printlevel, bigbuffer);
++ gi.cprintf(ent, printlevel, "%s", bigbuffer);
+
+ }
+
+@@ -191,7 +191,7 @@
+ len = vsprintf (bigbuffer,fmt,argptr);
+ va_end (argptr);
+
+- gi.centerprintf(ent, bigbuffer);
++ gi.centerprintf(ent,"%s", bigbuffer);
+
+ }
+
+@@ -211,7 +211,7 @@
+ va_end (argptr);
+
+ if (dedicated->value)
+- gi.cprintf(NULL, printlevel, bigbuffer);
++ gi.cprintf(NULL, printlevel, "%s", bigbuffer);
+
+ for (i=0 ; i<maxclients->value ; i++)
+ {
+@@ -219,7 +219,7 @@
+ if (!cl_ent->inuse || cl_ent->is_bot)
+ continue;
+
+- gi.cprintf(cl_ent, printlevel, bigbuffer);
++ gi.cprintf(cl_ent, printlevel, "%s", bigbuffer);
+ }
+ }
+
diff --git a/games-fps/alienarena/files/digest-alienarena-20070613 b/games-fps/alienarena/files/digest-alienarena-20070613-r1
index d6346c0e6e31..d6346c0e6e31 100644
--- a/games-fps/alienarena/files/digest-alienarena-20070613
+++ b/games-fps/alienarena/files/digest-alienarena-20070613-r1