diff --git a/bzip2-1.0.4-bzip2recover.patch b/bzip2-1.0.4-bzip2recover.patch index 5e91a3b..e2bfe1c 100644 --- a/bzip2-1.0.4-bzip2recover.patch +++ b/bzip2-1.0.4-bzip2recover.patch @@ -6,7 +6,7 @@ - strcpy ( progName, argv[0] ); + strncpy ( progName, argv[0], BZ_MAX_FILENAME-1); -+ progName[BZ_MAX_FILENAME-1]="\0"; ++ progName[BZ_MAX_FILENAME-1]='\0'; inFileName[0] = outFileName[0] = 0; fprintf ( stderr, diff --git a/bzip2.spec b/bzip2.spec index 2296b52..5b68069 100644 --- a/bzip2.spec +++ b/bzip2.spec @@ -1,7 +1,7 @@ Summary: A file compression utility Name: bzip2 Version: 1.0.4 -Release: 3%{?dist} +Release: 4%{?dist} License: BSD Group: Applications/File URL: http://sources.redhat.com/bzip2/ @@ -105,6 +105,9 @@ rm -rf ${RPM_BUILD_ROOT} %{_libdir}/*so %changelog +* Tue Feb 6 2007 Ivana Varekova 1.0.4-4 +- fix bzip2recover patch + * Mon Feb 5 2007 Ivana Varekova 1.0.4-3 - Resolves: 226979 Buffer overflow in bzip2's bzip2recover