From 4876e3a692739bb9ca00d0f500fd5f4b3eb16ce3 Mon Sep 17 00:00:00 2001
From: Tom Callaway <spot@fedoraproject.org>
Date: Fri, 7 Sep 2012 11:39:29 -0400
Subject: apply fix for CVE-2012-4409 (thanks to Raphael Geissert)

--- mcrypt-2.6.8/src/extra.c.CVE-2012-4409	2012-09-07 11:00:55.906870746 -0400
+++ mcrypt-2.6.8/src/extra.c	2012-09-07 11:00:27.967858365 -0400
@@ -242,6 +242,8 @@ int check_file_head(FILE * fstream, char
 			if (m_getbit(0, sflag) != 0) { /* if the first bit is set */
 				*salt_size = m_setbit(0, sflag, 0);
 				if (*salt_size > 0) {
+					if (*salt_size > sizeof(tmp_buf))
+						err_quit(_("Salt is too long\n"));
 					fread(tmp_buf, 1, *salt_size,
 					      fstream);
 					memmove(salt, tmp_buf, *salt_size);
 
-- 
cgit v0.12

ed'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=3ffceba52d9ad1871850b567503a33482e996bf4'>refs</a><a class='active' href='/guix/log/tests/store.scm'>log</a><a href='/guix/tree/tests/store.scm?id=3ffceba52d9ad1871850b567503a33482e996bf4'>tree</a><a href='/guix/commit/tests/store.scm?id=3ffceba52d9ad1871850b567503a33482e996bf4'>commit</a><a href='/guix/diff/tests/store.scm?id=3ffceba52d9ad1871850b567503a33482e996bf4'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/tests/store.scm'>
<input type='hidden' name='id' value='3ffceba52d9ad1871850b567503a33482e996bf4'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=3ffceba52d9ad1871850b567503a33482e996bf4'>root</a>/<a href='/guix/log/tests?id=3ffceba52d9ad1871850b567503a33482e996bf4'>tests</a>/<a href='/guix/log/tests/store.scm?id=3ffceba52d9ad1871850b567503a33482e996bf4'>store.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/tests/store.scm?id=3ffceba52d9ad1871850b567503a33482e996bf4&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
/th></tr>
<tr><td><span title='2023-10-28 00:17:23 +0200'>2023-10-28</span></td><td><a href='/guix/commit/tests/grafts.scm?id=67effc1560fc175dfbcb58ef5b965b08b3942d6c'>grafts: Fix corner case involving multiple-output derivations.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes a bug that would occur with references to two outputs of the same
derivation, with one of them referring to the other one.

For example, the references of libreoffice include both mariadb:dev and
mariadb:lib; additionally, mariadb:dev refers to mariadb:lib.  In this
case, the glibc graft would not be applied on one of the mariadb paths,
and both the grafted and ungrafted glibc would end up in the closure of
libreoffice.

Fixes &lt;https://issues.guix.gnu.org/66662&gt;.

* guix/grafts.scm (non-self-references): Simplify and include references
to outputs of DRV other than OUTPUTS.
(reference-origins): Simplify and possibly return outputs of DRV itself.
(cumulative-grafts)[graft-origin?]: Add OUTPUT parameter and honor it.
[dependency-grafts]: Adjust accordingly.
* tests/grafts.scm ("graft-derivation, multiple outputs need to be replaced"):
New test.

Change-Id: Iac2005024ab7049037537b3af55298696ec90e3c
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-11-11 23:17:42 +0100'>2022-11-11</span></td><td><a href='/guix/commit/tests/grafts.scm?id=19206eee69e8c22d63104af1b7f1f815969bff7f'>grafts: Run with a UTF-8 locale.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://issues.guix.gnu.org/55968&gt;.
Reported by Maxime Devos &lt;maximedevos@telenet.be&gt;.

* guix/grafts.scm (%graft-with-utf8-locale?): New parameter.
(graft-derivation/shallow)[glibc-locales, set-utf8-locale]: New
variables.
[build]: Use 'set-utf8-locale'.
* tests/gexp.scm, tests/grafts.scm, tests/packages.scm: Set
'%graft-with-utf8-locale?' to #f.
</span></span></td><td>Ludovic Courtès</td></tr>