[pkgsrc/trunk]: pkgsrc/net/ethereal Fix security vulnerability in dissector f...

[tron <tron%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/04b56ab3af4a
branches:  trunk
changeset: 490423:04b56ab3af4a
user:      tron <tron%pkgsrc.org@localhost>
date:      Thu Mar 10 10:05:32 2005 +0000

description:
Fix security vulnerability in dissector for CDMA2000 A11 packets.
Bump package revision.

diffstat:

 net/ethereal/Makefile         |  10 ++++++++--
 net/ethereal/distinfo         |   3 ++-
 net/ethereal/patches/patch-ab |  13 +++++++++++++
 3 files changed, 23 insertions(+), 3 deletions(-)

diffs (55 lines):

diff -r 9dca0ab77b96 -r 04b56ab3af4a net/ethereal/Makefile
--- a/net/ethereal/Makefile     Thu Mar 10 10:05:31 2005 +0000
+++ b/net/ethereal/Makefile     Thu Mar 10 10:05:32 2005 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.102 2005/01/21 00:33:24 salo Exp $
-#
+# $NetBSD: Makefile,v 1.103 2005/03/10 10:05:32 tron Exp $
 
 DISTNAME=              ethereal-0.10.9
+PKGREVISION=           1
 CATEGORIES=            net
 MASTER_SITES=          http://www.ethereal.com/distribution/ \
                        http://ethereal.planetmirror.com/distribution/ \
@@ -49,6 +49,12 @@
 USE_BUILTIN.libpcap=   no
 .endif
 
+# Because we patch "epan/dissectors/packet-3g-a11.c" "register.c" would
+# get rebuilt which requires Python. Avoid the unnecessary overhead
+# by touching the file.
+post-patch:
+       @${TOUCH} ${WRKSRC}/epan/dissectors/register.c
+
 .include "../../devel/glib2/buildlink3.mk"
 .include "../../devel/pcre/buildlink3.mk"
 .include "../../devel/pkgconfig/buildlink3.mk"
diff -r 9dca0ab77b96 -r 04b56ab3af4a net/ethereal/distinfo
--- a/net/ethereal/distinfo     Thu Mar 10 10:05:31 2005 +0000
+++ b/net/ethereal/distinfo     Thu Mar 10 10:05:32 2005 +0000
@@ -1,6 +1,7 @@
-$NetBSD: distinfo,v 1.34 2005/02/24 12:13:46 agc Exp $
+$NetBSD: distinfo,v 1.35 2005/03/10 10:05:32 tron Exp $
 
 SHA1 (ethereal-0.10.9.tar.bz2) = fc27a93f4c19dcc4278968b376e0b33e7d756998
 RMD160 (ethereal-0.10.9.tar.bz2) = 25085f1ff149316a3e71c4d4abdda0dcb4a07320
 Size (ethereal-0.10.9.tar.bz2) = 5499000 bytes
 SHA1 (patch-aa) = 2ae499f52047ef84ba30403fce535cc2084e7539
+SHA1 (patch-ab) = a59a7772ca8c6e4d3b1e8e2d422ffde6f6d5a4de
diff -r 9dca0ab77b96 -r 04b56ab3af4a net/ethereal/patches/patch-ab
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/net/ethereal/patches/patch-ab     Thu Mar 10 10:05:32 2005 +0000
@@ -0,0 +1,13 @@
+$NetBSD: patch-ab,v 1.3 2005/03/10 10:05:32 tron Exp $
+
+--- epan/dissectors/packet-3g-a11.c.orig       2005-01-18 02:39:50.000000000 +0000
++++ epan/dissectors/packet-3g-a11.c    2005-03-10 09:32:18.000000000 +0000
+@@ -312,7 +312,7 @@
+ };
+ #define NUM_ATTR (sizeof(attrs)/sizeof(struct radius_attribute))
+ 
+-#define MAX_STRVAL 16
++#define MAX_STRVAL 256
+ 
+ #define RADIUS_VENDOR_SPECIFIC 26
+ #define SKIP_HDR_LEN 6