From 4cb1d090dc64699e4d186f6688dc9e44c1be098a Mon Sep 17 00:00:00 2001 From: "coadde [Márcio Alexandre Silva Delgado]" Date: Sat, 16 Apr 2016 11:48:40 -0300 Subject: pcre-static: add new package to [libre] --- libre/pcre-static/01-CVE-2016-1283.patch | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 libre/pcre-static/01-CVE-2016-1283.patch (limited to 'libre/pcre-static/01-CVE-2016-1283.patch') diff --git a/libre/pcre-static/01-CVE-2016-1283.patch b/libre/pcre-static/01-CVE-2016-1283.patch new file mode 100644 index 000000000..2c2dad29e --- /dev/null +++ b/libre/pcre-static/01-CVE-2016-1283.patch @@ -0,0 +1,18 @@ +Index: pcre_compile.c +=================================================================== +--- a/pcre_compile.c (revision 1635) ++++ b/pcre_compile.c (revision 1636) +@@ -7311,7 +7311,12 @@ + so far in order to get the number. If the name is not found, leave + the value of recno as 0 for a forward reference. */ + +- else ++ /* This patch (removing "else") fixes a problem when a reference is ++ to multiple identically named nested groups from within the nest. ++ Once again, it is not the "proper" fix, and it results in an ++ over-allocation of memory. */ ++ ++ /* else */ + { + ng = cd->named_groups; + for (i = 0; i < cd->names_found; i++, ng++) -- cgit v1.2.3