[pkgsrc/trunk]: pkgsrc/net/avahi Fix for http://cve.mitre.org/cgi-bin/cvename...

[adrianp <adrianp%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/bb7402bd5123
branches:  trunk
changeset: 552027:bb7402bd5123
user:      adrianp <adrianp%pkgsrc.org@localhost>
date:      Tue Dec 23 12:08:17 2008 +0000

description:
Fix for http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081

diffstat:

 net/avahi/Makefile         |   4 ++--
 net/avahi/distinfo         |   3 ++-
 net/avahi/patches/patch-ai |  16 ++++++++++++++++
 3 files changed, 20 insertions(+), 3 deletions(-)

diffs (47 lines):

diff -r 5e727623fb63 -r bb7402bd5123 net/avahi/Makefile
--- a/net/avahi/Makefile        Tue Dec 23 11:35:40 2008 +0000
+++ b/net/avahi/Makefile        Tue Dec 23 12:08:17 2008 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.2 2008/12/20 23:51:39 ahoka Exp $
+# $NetBSD: Makefile,v 1.3 2008/12/23 12:08:17 adrianp Exp $
 
 DISTNAME=              avahi-0.6.23
-PKGREVISION=           1
+PKGREVISION=           2
 CATEGORIES=            net
 MASTER_SITES=          http://avahi.org/download/
 
diff -r 5e727623fb63 -r bb7402bd5123 net/avahi/distinfo
--- a/net/avahi/distinfo        Tue Dec 23 11:35:40 2008 +0000
+++ b/net/avahi/distinfo        Tue Dec 23 12:08:17 2008 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.2 2008/12/23 02:08:05 hasso Exp $
+$NetBSD: distinfo,v 1.3 2008/12/23 12:08:17 adrianp Exp $
 
 SHA1 (avahi-0.6.23.tar.gz) = 54a0d1944e43805886aafccaf5cc3ec567f5cc9e
 RMD160 (avahi-0.6.23.tar.gz) = cdb24199bb9d48eba0a98097b4fe5aee94b8367c
@@ -11,3 +11,4 @@
 SHA1 (patch-af) = 57a788ca492f15c0e05870ea5eb6c4048b30b9c5
 SHA1 (patch-ag) = ddfcb74e5e34619245ad230a73c732261c2250ea
 SHA1 (patch-ah) = 63758f0e5ca24a1570c0c8dfea05836d6cce73f0
+SHA1 (patch-ai) = 658dae685c3542c5d7f15cc8865e90a0292e4ad0
diff -r 5e727623fb63 -r bb7402bd5123 net/avahi/patches/patch-ai
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/net/avahi/patches/patch-ai        Tue Dec 23 12:08:17 2008 +0000
@@ -0,0 +1,16 @@
+$NetBSD: patch-ai,v 1.1 2008/12/23 12:08:17 adrianp Exp $
+
+--- avahi-core/server.c.orig   2008-06-18 00:13:44.000000000 +0100
++++ avahi-core/server.c
+@@ -898,6 +898,11 @@ static void dispatch_packet(AvahiServer 
+         return;
+     }
+ 
++    if (port <= 0) {
++        avahi_log_warn("Received packet from invalid source port.");
++        return;
++    }
++
+     if (avahi_address_is_ipv4_in_ipv6(src_address))
+         /* This is an IPv4 address encapsulated in IPv6, so let's ignore it. */
+         return;