rpms/newsx/F-8 newsx-stack.patch,NONE,1.1 newsx.spec,1.5,1.6

[Dominik Mierzejewski (rathann)]

Author: rathann

Update of /cvs/pkgs/rpms/newsx/F-8
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv20110

Modified Files:
	newsx.spec 
Added Files:
	newsx-stack.patch 
Log Message:
* Sat Jul 12 2008 Dominik Mierzejewski <rpm at greysector.net> 1.6-8
- fixed stack buffer overflow in getarticle.c (#454483)
- URL no longer exists
- restored the use of history


newsx-stack.patch:

--- NEW FILE newsx-stack.patch ---
diff -up newsx-1.6/src/getarticle.c.stack newsx-1.6/src/getarticle.c
--- newsx-1.6/src/getarticle.c.stack	2003-01-21 10:47:25.000000000 +0100
+++ newsx-1.6/src/getarticle.c	2008-07-12 23:02:35.000000000 +0200
@@ -143,12 +143,12 @@ read_article(long where,char *group)
     long len;
     long bytecount = 0L; /* BUG: */
 
-    line=linebuf;
-    line[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
+    linebuf[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
     path_line[0] = '\0';
 
     /* fetch the article, header and body */
     for (;;) {
+	line=linebuf;
 	if (!get_server_msg(line, MAX_HEADER_SIZE)) {
 	    /* timeout: simply give up */
 	    return 0;


Index: newsx.spec
===================================================================
RCS file: /cvs/pkgs/rpms/newsx/F-8/newsx.spec,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- newsx.spec	27 Aug 2007 17:42:35 -0000	1.5
+++ newsx.spec	12 Jul 2008 22:41:38 -0000	1.6
@@ -1,6 +1,6 @@
 Name:		newsx
 Version:	1.6
-Release:	7%{?dist}
+Release:	8%{?dist}
 License:	GPLv2+
 Summary:	NNTP news exchange utility
 Summary(pl):	Narzędzie do wymiany newsów po NNTP
@@ -8,7 +8,7 @@
 Source0:	ftp://ftp.kvaleberg.com/pub/%{name}-%{version}.tar.gz
 # Source0-md5:	ad9c76c53d5c7d21d86bec805fe8cd34
 Patch0:		%{name}-make.patch
-URL:		http://www.kvaleberg.com/newsx.html
+Patch1:		%{name}-stack.patch
 BuildRequires:	inn-devel
 BuildRequires:	automake
 BuildRequires:	autoconf
@@ -28,10 +28,14 @@
 %prep
 %setup -q
 %patch0 -p1
+%patch1 -p1 -b .stack
 
 %build
 autoreconf -f -i
-%configure --without-history
+%configure \
+	--with-inhosts=/var/spool/news/inhosts \
+	--with-newsconfig=/usr/lib/news/lib/innshellvars \
+	--with-newslib=%{_libdir}/news/lib \
 
 %{__make} %{?_smp_mflags}
 
@@ -58,6 +62,11 @@
 %{_mandir}/man[158]/*
 
 %changelog
+* Sat Jul 12 2008 Dominik Mierzejewski <rpm at greysector.net> 1.6-8
+- fixed stack buffer overflow in getarticle.c (#454483)
+- URL no longer exists
+- restored the use of history
+
 * Mon Aug 27 2007 Dominik Mierzejewski <rpm at greysector.net> 1.6-7
 - rebuild for BuildID
 - update license tag