[pkgsrc/trunk]: pkgsrc/www/thttpd Fix a buffer overflow reported in PR 22863 ...

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/522e4f08d49e
branches:  trunk
changeset: 461723:522e4f08d49e
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Fri Sep 19 17:54:16 2003 +0000

description:
Fix a buffer overflow reported in PR 22863 by Ross Patterson.
Bump PKGREVISION.

diffstat:

 www/thttpd/Makefile         |   3 ++-
 www/thttpd/distinfo         |   3 ++-
 www/thttpd/patches/patch-ae |  13 +++++++++++++
 3 files changed, 17 insertions(+), 2 deletions(-)

diffs (44 lines):

diff -r c8fc7891d819 -r 522e4f08d49e www/thttpd/Makefile
--- a/www/thttpd/Makefile       Fri Sep 19 17:49:17 2003 +0000
+++ b/www/thttpd/Makefile       Fri Sep 19 17:54:16 2003 +0000
@@ -1,7 +1,8 @@
-# $NetBSD: Makefile,v 1.23 2003/07/22 04:14:37 martti Exp $
+# $NetBSD: Makefile,v 1.24 2003/09/19 17:54:16 wiz Exp $
 
 DISTNAME=      thttpd-2.23beta1
 PKGNAME=       thttpd-2.23.0.1
+PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES=  http://www.acme.com/software/thttpd/
 DISTFILES=     ${DISTNAME}${EXTRACT_SUFX} \
diff -r c8fc7891d819 -r 522e4f08d49e www/thttpd/distinfo
--- a/www/thttpd/distinfo       Fri Sep 19 17:49:17 2003 +0000
+++ b/www/thttpd/distinfo       Fri Sep 19 17:54:16 2003 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.4 2002/06/16 19:10:25 wiz Exp $
+$NetBSD: distinfo,v 1.5 2003/09/19 17:54:17 wiz Exp $
 
 SHA1 (thttpd-2.23beta1.tar.gz) = 22331276c2e5f6f1850f0b1ca2b739d0db88bf51
 Size (thttpd-2.23beta1.tar.gz) = 128696 bytes
@@ -8,3 +8,4 @@
 SHA1 (patch-ab) = 3766ae48fabc1980483e482157d1267971e621df
 SHA1 (patch-ac) = 71b2926a9513bd25a124510ad5f234d029492eb2
 SHA1 (patch-ad) = 1d7777516ff0c5e7b03643809854bf96707759ec
+SHA1 (patch-ae) = f31dfec4d9a6531c8a195c6d539a6859799f3ffb
diff -r c8fc7891d819 -r 522e4f08d49e www/thttpd/patches/patch-ae
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/www/thttpd/patches/patch-ae       Fri Sep 19 17:54:16 2003 +0000
@@ -0,0 +1,13 @@
+$NetBSD: patch-ae,v 1.3 2003/09/19 17:54:18 wiz Exp $
+
+--- libhttpd.c.orig    Mon May 27 03:22:26 2002
++++ libhttpd.c
+@@ -818,7 +818,7 @@ defang( char* str, char* dfstr, int dfsi
+     char* cp2;
+ 
+     for ( cp1 = str, cp2 = dfstr;
+-        *cp1 != '\0' && cp2 - dfstr < dfsize - 1;
++        *cp1 != '\0' && cp2 - dfstr < dfsize - 5;
+         ++cp1, ++cp2 )
+       {
+       switch ( *cp1 )