rpms/bochs/F-7 bochs-CVE-2007-2893.patch, NONE, 1.1 bochs.spec, 1.23, 1.24

[Hans de Goede (jwrdegoede)]

Author: jwrdegoede

Update of /cvs/extras/rpms/bochs/F-7
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv24852

Modified Files:
	bochs.spec 
Added Files:
	bochs-CVE-2007-2893.patch 
Log Message:
* Wed Jul 18 2007 Hans de Goede <j.w.r.degoede at hhs.nl> 2.3-5
- Fix CVE-2007-2893 (bz 241799)


bochs-CVE-2007-2893.patch:

--- NEW FILE bochs-CVE-2007-2893.patch ---
--- bochs/iodev/ne2k.cc	2007/02/03 17:56:35	1.91
+++ bochs/iodev/ne2k.cc	2007/03/10 15:17:31	1.92
@@ -1278,8 +1278,8 @@
  */
 void bx_ne2k_c::rx_frame(const void *buf, unsigned io_len)
 {
-  unsigned pages;
-  unsigned avail;
+  int pages;
+  int avail;
   unsigned idx;
   int wrapped;
   int nextpage;


Index: bochs.spec
===================================================================
RCS file: /cvs/extras/rpms/bochs/F-7/bochs.spec,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -r1.23 -r1.24
--- bochs.spec	18 Dec 2006 15:22:38 -0000	1.23
+++ bochs.spec	18 Jul 2007 19:34:57 -0000	1.24
@@ -1,6 +1,6 @@
 Name:           bochs
 Version:        2.3
-Release:        4%{?dist}
+Release:        5%{?dist}
 Summary:        Portable x86 PC emulator
 Group:          Applications/Emulators
 License:        LGPL
@@ -10,6 +10,7 @@
 Patch0:         %{name}-nonet-build.patch
 Patch1:         %{name}-config.patch
 Patch2:         %{name}-wx28.patch
+Patch3:         %{name}-CVE-2007-2893.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires:  docbook-utils
 BuildRequires:  libXt-devel
@@ -66,6 +67,7 @@
 %setup -q
 %patch0 -p0 -z .nonet
 %patch2 -p1 -z .wx28
+%patch3 -p1 -z .cve
 cp -p %{SOURCE1} .
 # Fix up some man page paths.
 sed -i \
@@ -162,6 +164,9 @@
 
 
 %changelog
+* Wed Jul 18 2007 Hans de Goede <j.w.r.degoede at hhs.nl> 2.3-5
+- Fix CVE-2007-2893 (bz 241799)
+
 * Mon Dec 18 2006 Hans de Goede <j.w.r.degoede at hhs.nl> 2.3-4
 - rebuilt without wxGTK as wxGTK is even more broken with wxGTK 2.8 then it
   was with 2.6