From ac41a6262b232838e2238c2ae0aa51afe5f6a27f Mon Sep 17 00:00:00 2001
From: Siteshwar Vashisht <svashisht@redhat.com>
Date: Feb 12 2018 13:20:51 +0000
Subject: Fix a crash due to out of bounds write


Resolves: #1537053

---

diff --git a/ksh-20120801-validate-fd.patch b/ksh-20120801-validate-fd.patch
new file mode 100644
index 0000000..a0bc7d2
--- /dev/null
+++ b/ksh-20120801-validate-fd.patch
@@ -0,0 +1,11 @@
+diff --git a/src/cmd/ksh93/sh/xec.c b/src/cmd/ksh93/sh/xec.c
+--- a/src/cmd/ksh93/sh/xec.c
++++ b/src/cmd/ksh93/sh/xec.c
+@@ -122,6 +122,7 @@ int iousepipe(Shell_t *shp)
+ 		return(1);
+ 	}
+ 	subpipe[2] = sh_fcntl(fd,F_dupfd_cloexec,10);
++ 	sh_iovalidfd(shp,subpipe[2]);
+ 	shp->fdstatus[subpipe[2]] = shp->fdstatus[1];
+ 	while(close(fd)<0 && errno==EINTR)
+ 		errno = err;
diff --git a/ksh.spec b/ksh.spec
index 2858318..28f799f 100644
--- a/ksh.spec
+++ b/ksh.spec
@@ -6,7 +6,7 @@ Summary:      The Original ATT Korn Shell
 URL:          http://www.kornshell.com/
 License:      EPL
 Version:      %{releasedate}
-Release:      44%{?dist}
+Release:      45%{?dist}
 Source0:      http://www.research.att.com/~gsf/download/tgz/ast-ksh.%{release_date}.tgz
 Source1:      http://www.research.att.com/~gsf/download/tgz/INIT.%{release_date}.tgz
 Source2:      kshcomp.conf
@@ -200,6 +200,9 @@ Patch82: ksh-20120801-posix-exit.patch
 # rhbz#1464409
 Patch83: ksh-20120801-sh_iovalidfd.patch
 
+# rhbz#1537053
+Patch84: ksh-20120801-validate-fd.patch
+
 Conflicts:    pdksh
 Requires: coreutils, diffutils, chkconfig
 BuildRequires: bison
@@ -325,6 +328,10 @@ fi
 %config(noreplace) %{_sysconfdir}/binfmt.d/kshcomp.conf
 
 %changelog
+* Mon Feb 12 2018 Siteshwar Vashisht <svashisht@redhat.com> - 20120801-45
+- Fix a crash due to out of bounds write
+  Resolves: #1537053
+
 * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 20120801-44
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild