diff -u g15daemon-1.9.5.3/debian/changelog g15daemon-1.9.5.3/debian/changelog --- g15daemon-1.9.5.3/debian/changelog +++ g15daemon-1.9.5.3/debian/changelog @@ -1,3 +1,10 @@ +g15daemon (1.9.5.3-8.1ubuntu2.1) natty-proposed; urgency=low + + * libg15daemon_client/g15daemon_net.c: Fixed a potential buffer-overflow + related to (LP: #657598), as suggested at http://www.g15tools.com/node/82 + + -- Brandon Tomlinson Fri, 10 Jun 2011 06:59:38 -0500 + g15daemon (1.9.5.3-8.1ubuntu2) natty; urgency=low * debian/rules: clean the dependency_libs out of .la files at build only in patch2: unchanged: --- g15daemon-1.9.5.3.orig/libg15daemon_client/g15daemon_net.c +++ g15daemon-1.9.5.3/libg15daemon_client/g15daemon_net.c @@ -217,7 +217,7 @@ if(poll(pfd,1,100)>0){ if(pfd[0].revents & POLLPRI && !(pfd[0].revents & POLLERR || pfd[0].revents & POLLHUP || pfd[0].revents & POLLNVAL)) { memset(packet,0,sizeof(packet)); - msgret = recv(sock, packet, 10 , MSG_OOB); + msgret = recv(sock, packet, sizeof(packet) , MSG_OOB); if (msgret < 1) { return -1; }