kumquat-buildroot/package/lighttpd/lighttpd-03-fix_fam_use_after_free.patch
Axel Lin 509b00d344 lighttpd: apply security patches for lighttpd-1.4.33
Apply security patches for lighttpd-1.4.33.
Also rename these patches to follow buildroot's naming scheme.

lighttpd-03-fix_fam_use_after_free.patch:
http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_fam_use_after_free.patch

lighttpd-04-fix_setuid.patch:
http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_setuid.patch

lighttpd-05-fix_ssl_sni.patch:
http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_ssl_sni.patch

Signed-off-by: Axel Lin <axel.lin@ingics.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-02 11:24:34 +01:00

23 lines
704 B
Diff

commit ae1335503a8f63489f847668ee37df8470a2ab0a
Author: Stefan Bühler <stbuehler@web.de>
Date: Wed Nov 13 11:43:28 2013 +0000
[stat-cache] FAM: fix use after free (CVE-2013-4560)
From: Stefan Bühler <stbuehler@web.de>
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2921 152afb58-edef-0310-8abb-c4023f1b3aa9
diff --git a/src/stat_cache.c b/src/stat_cache.c
index e995f3b..924f4dc 100644
--- a/src/stat_cache.c
+++ b/src/stat_cache.c
@@ -648,6 +648,7 @@ handler_t stat_cache_get_entry(server *srv, connection *con, buffer *name, stat_
FamErrlist[FAMErrno]);
fam_dir_entry_free(fam_dir);
+ fam_dir = NULL;
} else {
int osize = 0;