From owner-cvs-src-old@FreeBSD.ORG  Thu Mar 25 20:03:14 2010
Return-Path: <owner-cvs-src-old@FreeBSD.ORG>
Delivered-To: cvs-src-old@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 6DDF3106566C
	for <cvs-src-old@freebsd.org>; Thu, 25 Mar 2010 20:03:14 +0000 (UTC)
	(envelope-from delphij@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 5C6E38FC28
	for <cvs-src-old@freebsd.org>; Thu, 25 Mar 2010 20:03:14 +0000 (UTC)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id o2PK3ETZ075723
	for <cvs-src-old@freebsd.org>; Thu, 25 Mar 2010 20:03:14 GMT
	(envelope-from delphij@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id o2PK3EDK075722
	for cvs-src-old@freebsd.org; Thu, 25 Mar 2010 20:03:14 GMT
	(envelope-from delphij@repoman.freebsd.org)
Message-Id: <201003252003.o2PK3EDK075722@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	delphij@repoman.freebsd.org using -f
From: Xin LI <delphij@FreeBSD.org>
Date: Thu, 25 Mar 2010 20:02:54 +0000 (UTC)
To: cvs-src-old@freebsd.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/contrib/cpio/lib rtapelib.c
X-BeenThere: cvs-src-old@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: **OBSOLETE** CVS commit messages for the src tree
	<cvs-src-old.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src-old>
List-Post: <mailto:cvs-src-old@freebsd.org>
List-Help: <mailto:cvs-src-old-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Mar 2010 20:03:14 -0000

delphij     2010-03-25 20:02:54 UTC

  FreeBSD src repository

  Modified files:
    contrib/cpio/lib     rtapelib.c 
  Log:
  SVN rev 205654 on 2010-03-25 20:02:54Z by delphij
  
  The rmt client in GNU cpio could have a heap overflow when a malicious
  remote tape service returns deliberately crafted packets containing
  more data than requested.
  
  Fix this by checking the returned amount of data and bail out when it
  is more than what we requested.
  
  PR:             gnu/145010
  Submitted by:   naddy
  Reviewed by:    imp
  MFC after:      immediately
  Security:       CVE-2010-0624
  
  Revision  Changes    Path
  1.3       +2 -1      src/contrib/cpio/lib/rtapelib.c