From 4876e3a692739bb9ca00d0f500fd5f4b3eb16ce3 Mon Sep 17 00:00:00 2001
From: Tom Callaway <spot@fedoraproject.org>
Date: Fri, 7 Sep 2012 11:39:29 -0400
Subject: apply fix for CVE-2012-4409 (thanks to Raphael Geissert)

--- mcrypt-2.6.8/src/extra.c.CVE-2012-4409	2012-09-07 11:00:55.906870746 -0400
+++ mcrypt-2.6.8/src/extra.c	2012-09-07 11:00:27.967858365 -0400
@@ -242,6 +242,8 @@ int check_file_head(FILE * fstream, char
 			if (m_getbit(0, sflag) != 0) { /* if the first bit is set */
 				*salt_size = m_setbit(0, sflag, 0);
 				if (*salt_size > 0) {
+					if (*salt_size > sizeof(tmp_buf))
+						err_quit(_("Salt is too long\n"));
 					fread(tmp_buf, 1, *salt_size,
 					      fstream);
 					memmove(salt, tmp_buf, *salt_size);
 
-- 
cgit v0.12

s.scm (run-external-command-with-line-hooks): Use
'read-delimited' rather than 'get-line'.  Pass 'concat as the last
argument.
(%display-line-hook): Remove.
(run-command): Use 'display' instead of '%display-line-hook'.
(%syslog-line-hook): Add "\n" when LINE doesn't end in \n.
(%installer-log-line-hook): Do not add an extra newline.
(installer-log-line): Add an extra newline.
</content>
</entry>
<entry>
<title>installer: Report known-unsupported PCI devices.</title>
<updated>2022-11-15T11:16:43Z</updated>
<author>
<name>Ludovic Courtès</name>
<email>ludo@gnu.org</email>
</author>
<published>2022-11-03T16:57:51Z</published>
<link rel='alternate' type='text/html' href='https://git.koszko.org/guix/commit/?id=514fedbf3966b7fbab31a6c63b4210ec8b5b0c9a'/>
<id>urn:sha1:514fedbf3966b7fbab31a6c63b4210ec8b5b0c9a</id>
<content type='text'>
* gnu/installer/hardware.scm: New file.
* gnu/local.mk (INSTALLER_MODULES): Add it.
* po/guix/POTFILES.in: Add it.
* gnu/installer.scm (installer-steps): Pass #:pci-database to the
'welcome' step procedure.
* gnu/installer/newt.scm (welcome-page): Add #:pci-database and pass it
to 'run-welcome-page'.
* gnu/installer/newt/welcome.scm (check-hardware-support): Add #:pci-database.
Enumerate unsupported PCI devices and run an error page when unsupported
devices are found.
(run-welcome-page): Add #:pci-database and pass it to
'check-hardware-support' and to the recursive call.
* gnu/installer/record.scm (&lt;installer&gt;)[welcome-page]: Adjust comment.
* doc/guix.texi (Hardware Considerations): Mention it.
</content>
</entry>
<entry>
<title>installer: Remove unused variable.</title>
<updated>2022-11-09T22:59:42Z</updated>
<author>
<name>Ludovic Courtès</name>
<email>ludo@gnu.org</email>
</author>
<published>2022-11-03T17:01:22Z</published>
<link rel='alternate' type='text/html' href='https://git.koszko.org/guix/commit/?id=0916a79f8c7e1e489d663fbddab0631d2325806d'/>
<id>urn:sha1:0916a79f8c7e1e489d663fbddab0631d2325806d</id>
<content type='text'>
* gnu/installer/newt.scm (newt-run-command): Remove
'displayed-command'.
</content>
</entry>
<entry>
<title>installer: Resume newt in exit-error procedure.</title>
<updated>2022-10-23T13:37:57Z</updated>
<author>
<name>Mathieu Othacehe</name>
<email>othacehe@gnu.org</email>
</author>
<published>2022-10-23T13:34:50Z</published>
<link rel='alternate' type='text/html' href='https://git.koszko.org/guix/commit/?id=bf5e78d59fcb188d0bce02d93c93d06069178837'/>
<id>urn:sha1:bf5e78d59fcb188d0bce02d93c93d06069178837</id>
<content type='text'>
Fixes: &lt;https://issues.guix.gnu.org/58734&gt;

* gnu/installer/newt.scm (exit-error): Resume it.
</content>
</entry>