rpms/libpciaccess/F-13 libpciaccess-mappings-realloc-fix.patch, NONE, 1.1 libpciaccess.spec, 1.28, 1.29

[Dave Airlie]

Author: airlied

Update of /cvs/pkgs/rpms/libpciaccess/F-13
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv25556

Modified Files:
	libpciaccess.spec 
Added Files:
	libpciaccess-mappings-realloc-fix.patch 
Log Message:
* Mon Jul 12 2010 Dave Airlie <airlied at redhat.com> 0.10.9-3.20091209
- fix use after free bug when mapping fails.


libpciaccess-mappings-realloc-fix.patch:
 common_interface.c |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

--- NEW FILE libpciaccess-mappings-realloc-fix.patch ---
diff -up libpciaccess-20091209/src/common_interface.c.dave libpciaccess-20091209/src/common_interface.c
--- libpciaccess-20091209/src/common_interface.c.dave	2010-07-12 13:05:12.000000000 +1000
+++ libpciaccess-20091209/src/common_interface.c	2010-07-12 13:05:54.000000000 +1000
@@ -317,8 +317,8 @@ pci_device_map_range(struct pci_device *
         *addr =  mappings[devp->num_mappings].memory;
         devp->num_mappings++;
     } else {
-        mappings = realloc(devp->mappings,
-                           (sizeof(devp->mappings[0]) * devp->num_mappings));
+        mappings = realloc(mappings,
+                           (sizeof(mappings[0]) * devp->num_mappings));
     }
 
     devp->mappings = mappings;


Index: libpciaccess.spec
===================================================================
RCS file: /cvs/pkgs/rpms/libpciaccess/F-13/libpciaccess.spec,v
retrieving revision 1.28
retrieving revision 1.29
diff -u -p -r1.28 -r1.29
--- libpciaccess.spec	9 Dec 2009 20:39:37 -0000	1.28
+++ libpciaccess.spec	12 Jul 2010 03:12:53 -0000	1.29
@@ -3,7 +3,7 @@
 
 Name:           libpciaccess
 Version:        0.10.9
-Release:        2.%{gitdate}%{?dist}
+Release:        3.%{gitdate}%{?dist}
 Summary:        PCI access library
 
 Group:          System Environment/Libraries
@@ -18,6 +18,7 @@ Source1:        make-libpciaccess-snapsh
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 Patch2:		libpciaccess-rom-size.patch
+Patch3:		libpciaccess-mappings-realloc-fix.patch
 
 BuildRequires:  autoconf automake libtool pkgconfig xorg-x11-util-macros
 Requires:       hwdata
@@ -38,6 +39,7 @@ Development package for libpciaccess.
 %prep
 %setup -q -n %{name}-%{gitdate}
 %patch2 -p1 -b .rom-size
+%patch3 -p1 -b .fixremap
 
 %build
 autoreconf -v --install
@@ -68,6 +70,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/pkgconfig/pciaccess.pc
 
 %changelog
+* Mon Jul 12 2010 Dave Airlie <airlied at redhat.com> 0.10.9-3.20091209
+- fix use after free bug when mapping fails.
+
 * Wed Dec 09 2009 Adam Jackson <ajax at redhat.com> 0.10.9-2.20091209
 - New git snapshot
 - Drop the fd cache patch