[SM-Commit] GIT changes to master grimoire by Vlad Glagolev (42ec0f865fdbcc688c87b95eb185fdb8a27a1c92)

Vlad Glagolev scm at sourcemage.org
Mon Sep 29 14:44:25 EDT 2008


GIT changes to master grimoire by Vlad Glagolev <stealth at sourcemage.org>:

 http/lighttpd/DETAILS           |    4 +-
 http/lighttpd/HISTORY           |    6 +++
 http/lighttpd/PRE_BUILD         |    1 
 http/lighttpd/memory.leak.patch |   68 ++++++++++++++++++++++++++++++++++++++++
 4 files changed, 77 insertions(+), 2 deletions(-)

New commits:
commit 42ec0f865fdbcc688c87b95eb185fdb8a27a1c92
Author: Vlad Glagolev <stealth at sourcemage.org>
Commit: Vlad Glagolev <stealth at sourcemage.org>

    lighttpd: security update

diff --git a/http/lighttpd/DETAILS b/http/lighttpd/DETAILS
index 59a69ac..7c7cda9 100755
--- a/http/lighttpd/DETAILS
+++ b/http/lighttpd/DETAILS
@@ -3,11 +3,11 @@
      SOURCE_HASH=sha512:022f8773c67110d352f9144ece7f42904cec0c0ca2559def3ecc5ddee3ec0d842c9f754f6e24f73ec5a240602da35203625c34586409209e0e1418d6941c0ac0
           SOURCE=$SPELL-$VERSION.tar.gz
    SOURCE_URL[0]=http://www.lighttpd.net/download/$SOURCE
-SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
         WEB_SITE=http://www.lighttpd.net/
       LICENSE[0]=BSD
          ENTERED=20050722
-  SECURITY_PATCH=4
+  SECURITY_PATCH=5
       PATCHLEVEL=2
         KEYWORDS="http"
            SHORT="light httpd"
diff --git a/http/lighttpd/HISTORY b/http/lighttpd/HISTORY
index 32a6b90..85547cd 100644
--- a/http/lighttpd/HISTORY
+++ b/http/lighttpd/HISTORY
@@ -1,3 +1,9 @@
+2008-09-29 Vlad Glagolev <stealth at sourcemage.org>
+	* DETAILS: SECURITY_PATCH+=1 (http://secunia.com/advisories/32069/);
+	  quoting paths
+	* PRE_BUILD: apply one more patch
+	* memory.leak.patch: added
+
 2008-09-02 Vlad Glagolev <stealth at sourcemage.org>
 	* DETAILS: PATCHLEVEL+=1
 	* PRE_BUILD: apply the patch for mod_{s,fast}cgi
diff --git a/http/lighttpd/PRE_BUILD b/http/lighttpd/PRE_BUILD
index ddefc2e..db47e35 100755
--- a/http/lighttpd/PRE_BUILD
+++ b/http/lighttpd/PRE_BUILD
@@ -1,5 +1,6 @@
 default_pre_build &&
 cd "$SOURCE_DIRECTORY" &&
 
+patch -p0 < "$SPELL_DIRECTORY/memory.leak.patch" &&
 patch -p0 < "$SPELL_DIRECTORY/mod_scgi.patch" &&
 patch -p0 < "$SPELL_DIRECTORY/mod_fastcgi.patch"
diff --git a/http/lighttpd/memory.leak.patch b/http/lighttpd/memory.leak.patch
new file mode 100644
index 0000000..138096a
--- /dev/null
+++ b/http/lighttpd/memory.leak.patch
@@ -0,0 +1,68 @@
+--- src/request.c.orig	2008-09-20 19:53:44.000000000 +0800
++++ src/request.c	2008-09-20 20:03:14.000000000 +0800
+@@ -825,6 +825,7 @@
+ 												"request-header:\n",
+ 												con->request.request);
+ 									}
++									ds->free((data_unset*)ds);
+ 									return 0;
+ 								}
+ 
+@@ -839,7 +840,7 @@
+ 										con->http_status = 400;
+ 										con->keep_alive = 0;
+ 
+-										array_insert_unique(con->request.headers, (data_unset *)ds);
++										ds->free((data_unset*)ds);
+ 										return 0;
+ 									}
+ 								}
+@@ -856,7 +857,7 @@
+ 									con->http_status = 400;
+ 									con->keep_alive = 0;
+ 
+-									array_insert_unique(con->request.headers, (data_unset *)ds);
++									ds->free((data_unset*)ds);
+ 									return 0;
+ 								}
+ 							} else if (cmp > 0 && 0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key), CONST_STR_LEN("Content-Type")))) {
+@@ -874,6 +875,7 @@
+ 												"request-header:\n",
+ 												con->request.request);
+ 									}
++									ds->free((data_unset*)ds);
+ 									return 0;
+ 								}
+ 							} else if (cmp > 0 && 0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key), CONST_STR_LEN("Expect")))) {
+@@ -911,6 +913,7 @@
+ 												"request-header:\n",
+ 												con->request.request);
+ 									}
++									ds->free((data_unset*)ds);
+ 									return 0;
+ 								}
+ 							} else if (cmp > 0 && 0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key), CONST_STR_LEN("If-Modified-Since")))) {
+@@ -936,6 +939,7 @@
+ 												"request-header:\n",
+ 												con->request.request);
+ 									}
++									ds->free((data_unset*)ds);
+ 									return 0;
+ 								}
+ 							} else if (cmp > 0 && 0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key), CONST_STR_LEN("If-None-Match")))) {
+@@ -953,6 +957,7 @@
+ 												"request-header:\n",
+ 												con->request.request);
+ 									}
++									ds->free((data_unset*)ds);
+ 									return 0;
+ 								}
+ 							} else if (cmp > 0 && 0 == (cmp = buffer_caseless_compare(CONST_BUF_LEN(ds->key), CONST_STR_LEN("Range")))) {
+@@ -976,6 +981,7 @@
+ 												"request-header:\n",
+ 												con->request.request);
+ 									}
++									ds->free((data_unset*)ds);
+ 									return 0;
+ 								}
+ 							}



More information about the SM-Commit mailing list