5a25b0a
From 2b69156c43261ceae55eb4d3b644c4c2d73231ba Mon Sep 17 00:00:00 2001
5a25b0a
Message-Id: <2b69156c43261ceae55eb4d3b644c4c2d73231ba.1531843216.git.erack@redhat.com>
5a25b0a
From: David Tardon <dtardon@redhat.com>
5a25b0a
Date: Tue, 6 Mar 2018 15:17:13 +0100
5a25b0a
Subject: [PATCH] forcepoint: fix out-of-bounds read in ICU
5a25b0a
MIME-Version: 1.0
5a25b0a
Content-Type: multipart/mixed; boundary="------------erAck-patch-parts"
5a25b0a
5a25b0a
This is a multi-part message in MIME format.
5a25b0a
--------------erAck-patch-parts
5a25b0a
Content-Type: text/plain; charset=UTF-8; format=fixed
5a25b0a
Content-Transfer-Encoding: 8bit
5a25b0a
5a25b0a
5a25b0a
Change-Id: I5061d38d0e7df0de9a5c7574d522ce69934e4a24
5a25b0a
---
5a25b0a
 external/icu/UnpackedTarball_icu.mk |  1 +
5a25b0a
 external/icu/ofz4860.patch.2        | 25 +++++++++++++++++++++++++
5a25b0a
 2 files changed, 26 insertions(+)
5a25b0a
 create mode 100644 external/icu/ofz4860.patch.2
5a25b0a
5a25b0a
5a25b0a
--------------erAck-patch-parts
5a25b0a
Content-Type: text/x-patch; name="0001-forcepoint-fix-out-of-bounds-read-in-ICU.patch"
5a25b0a
Content-Transfer-Encoding: 8bit
5a25b0a
Content-Disposition: attachment; filename="0001-forcepoint-fix-out-of-bounds-read-in-ICU.patch"
5a25b0a
5a25b0a
diff --git a/external/icu/UnpackedTarball_icu.mk b/external/icu/UnpackedTarball_icu.mk
5a25b0a
index 499650976a55..a4d0b16ecb36 100644
5a25b0a
--- a/external/icu/UnpackedTarball_icu.mk
5a25b0a
+++ b/external/icu/UnpackedTarball_icu.mk
5a25b0a
@@ -35,6 +35,7 @@ $(eval $(call gb_UnpackedTarball_add_patches,icu,\
5a25b0a
 	$(if $(filter-out ANDROID,$(OS)),external/icu/icu4c-icudata-stdlibs.patch.1) \
5a25b0a
 	external/icu/icu4c-khmerbreakengine.patch.1 \
5a25b0a
 	external/icu/icu4c-59-werror-shadow.patch.1 \
5a25b0a
+	external/icu/ofz4860.patch.2 \
5a25b0a
 ))
5a25b0a
 
5a25b0a
 $(eval $(call gb_UnpackedTarball_add_file,icu,source/data/brkitr/khmerdict.dict,external/icu/khmerdict.dict))
5a25b0a
diff --git a/external/icu/ofz4860.patch.2 b/external/icu/ofz4860.patch.2
5a25b0a
new file mode 100644
5a25b0a
index 000000000000..14114d52878b
5a25b0a
--- /dev/null
5a25b0a
+++ b/external/icu/ofz4860.patch.2
5a25b0a
@@ -0,0 +1,25 @@
5a25b0a
+From 529ba01ee606940ca273b187be8ce9ba31cf2d90 Mon Sep 17 00:00:00 2001
5a25b0a
+From: David Tardon <dtardon@redhat.com>
5a25b0a
+Date: Fri, 19 Jan 2018 10:41:02 +0100
5a25b0a
+Subject: [PATCH] ofz#4860 fix past-the-end read from array
5a25b0a
+
5a25b0a
+---
5a25b0a
+ icu4c/source/common/locmap.cpp | 2 +-
5a25b0a
+ 1 file changed, 1 insertion(+), 1 deletion(-)
5a25b0a
+
5a25b0a
+diff --git a/icu4c/source/common/locmap.cpp b/icu4c/source/common/locmap.cpp
5a25b0a
+index cbb2b810a..6d62d8310 100644
5a25b0a
+--- a/icu4c/source/common/locmap.cpp
5a25b0a
++++ b/icu4c/source/common/locmap.cpp
5a25b0a
+@@ -1015,7 +1015,7 @@ static const char*
5a25b0a
+ getPosixID(const ILcidPosixMap *this_0, uint32_t hostID)
5a25b0a
+ {
5a25b0a
+     uint32_t i;
5a25b0a
+-    for (i = 0; i <= this_0->numRegions; i++)
5a25b0a
++    for (i = 0; i < this_0->numRegions; i++)
5a25b0a
+     {
5a25b0a
+         if (this_0->regionMaps[i].hostID == hostID)
5a25b0a
+         {
5a25b0a
+-- 
5a25b0a
+2.14.3
5a25b0a
+
5a25b0a
5a25b0a
--------------erAck-patch-parts--
5a25b0a
5a25b0a