proftpd/patches/proftpd-1.3.0a-mod_tls.patch

This is a possible fix Ralf S. Engelschall <rse+openpkg-security@openpkg.org>
has made myself for the X.509 issue of mod_tls.c

Index: contrib/mod_tls.c
--- contrib/mod_tls.c.orig      2005-11-08 18:59:49 +0100
+++ contrib/mod_tls.c   2006-11-15 17:54:43 +0100
@@ -2421,6 +2421,8 @@
      datalen = BIO_get_mem_data(mem, &data);

   if (data) {
+    if (datalen > sizeof(buf)-1)
+        datalen = sizeof(buf)-1;
     memset(&buf, '\0', sizeof(buf));
     memcpy(buf, data, datalen);
     buf[datalen] = '\0';
1	niro	265	This is a possible fix Ralf S. Engelschall <rse+openpkg-security@openpkg.org>
2			has made myself for the X.509 issue of mod_tls.c
3
4			Index: contrib/mod_tls.c
5			--- contrib/mod_tls.c.orig 2005-11-08 18:59:49 +0100
6			+++ contrib/mod_tls.c 2006-11-15 17:54:43 +0100
7			@@ -2421,6 +2421,8 @@
8			datalen = BIO_get_mem_data(mem, &data);
9
10			if (data) {
11			+ if (datalen > sizeof(buf)-1)
12			+ datalen = sizeof(buf)-1;
13			memset(&buf, '\0', sizeof(buf));
14			memcpy(buf, data, datalen);
15			buf[datalen] = '\0';