svn commit: r404120 - in branches/2015Q4/irc/quassel: . files
Mark Felder
feld at FreeBSD.org
Mon Dec 21 15:43:04 UTC 2015
Author: feld
Date: Mon Dec 21 15:43:03 2015
New Revision: 404120
URL: https://svnweb.freebsd.org/changeset/ports/404120
Log:
MFH: r404119
irc/quassel: Import patch to resolve DoS CVE
Approved by: ports-secteam (with hat)
Security: CVE-2015-8547
Added:
branches/2015Q4/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp
- copied unchanged from r404119, head/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp
Modified:
branches/2015Q4/irc/quassel/Makefile
Directory Properties:
branches/2015Q4/ (props changed)
Modified: branches/2015Q4/irc/quassel/Makefile
==============================================================================
--- branches/2015Q4/irc/quassel/Makefile Mon Dec 21 15:41:30 2015 (r404119)
+++ branches/2015Q4/irc/quassel/Makefile Mon Dec 21 15:43:03 2015 (r404120)
@@ -3,6 +3,7 @@
PORTNAME= quassel
PORTVERSION= 0.11.1
+PORTREVISION= 1
CATEGORIES= irc
MASTER_SITES= http://www.quassel-irc.org/pub/
Copied: branches/2015Q4/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp (from r404119, head/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ branches/2015Q4/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp Mon Dec 21 15:43:03 2015 (r404120, copy of r404119, head/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp)
@@ -0,0 +1,12 @@
+Fix CVE-2015-8547
+--- src/core/coreuserinputhandler.cpp.orig 2015-04-23 20:47:17 UTC
++++ src/core/coreuserinputhandler.cpp
+@@ -228,7 +228,7 @@ void CoreUserInputHandler::doMode(const
+ if (!isNumber || maxModes == 0) maxModes = 1;
+
+ QStringList nickList;
+- if (nicks == "*") { // All users in channel
++ if (nicks == "*" && bufferInfo.type() == BufferInfo::ChannelBuffer) { // All users in channel
+ const QList<IrcUser*> users = network()->ircChannel(bufferInfo.bufferName())->ircUsers();
+ foreach(IrcUser *user, users) {
+ if ((addOrRemove == '+' && !network()->ircChannel(bufferInfo.bufferName())->userModes(user).contains(mode))
More information about the svn-ports-all
mailing list