509b00d344
Apply security patches for lighttpd-1.4.33. Also rename these patches to follow buildroot's naming scheme. lighttpd-03-fix_fam_use_after_free.patch: http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_fam_use_after_free.patch lighttpd-04-fix_setuid.patch: http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_setuid.patch lighttpd-05-fix_ssl_sni.patch: http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_ssl_sni.patch Signed-off-by: Axel Lin <axel.lin@ingics.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
23 lines
704 B
Diff
23 lines
704 B
Diff
commit ae1335503a8f63489f847668ee37df8470a2ab0a
|
|
Author: Stefan Bühler <stbuehler@web.de>
|
|
Date: Wed Nov 13 11:43:28 2013 +0000
|
|
|
|
[stat-cache] FAM: fix use after free (CVE-2013-4560)
|
|
|
|
From: Stefan Bühler <stbuehler@web.de>
|
|
|
|
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2921 152afb58-edef-0310-8abb-c4023f1b3aa9
|
|
|
|
diff --git a/src/stat_cache.c b/src/stat_cache.c
|
|
index e995f3b..924f4dc 100644
|
|
--- a/src/stat_cache.c
|
|
+++ b/src/stat_cache.c
|
|
@@ -648,6 +648,7 @@ handler_t stat_cache_get_entry(server *srv, connection *con, buffer *name, stat_
|
|
FamErrlist[FAMErrno]);
|
|
|
|
fam_dir_entry_free(fam_dir);
|
|
+ fam_dir = NULL;
|
|
} else {
|
|
int osize = 0;
|
|
|