[firebird] added patch from upstream to fix Firebird CORE-4058 CVE-2013-2492

[Philippe Makowski]

commit 3cacc6e4aec74e1a53aa4e77261bc1f7479cf901
Author: Philippe Makowski <pmakowski at espelida.com>
Date:   Sun Mar 10 19:22:16 2013 +0100

    added patch from upstream to fix Firebird CORE-4058 CVE-2013-2492

 firebird-2.5.2-svn-CORE-4058.patch |   11 +++++++++++
 firebird.spec                      |    7 ++++++-
 2 files changed, 17 insertions(+), 1 deletions(-)
---
diff --git a/firebird-2.5.2-svn-CORE-4058.patch b/firebird-2.5.2-svn-CORE-4058.patch
new file mode 100644
index 0000000..52ac6bd
--- /dev/null
+++ b/firebird-2.5.2-svn-CORE-4058.patch
@@ -0,0 +1,11 @@
+--- src/remote/inet.cpp	(révision 57727)
++++ src/remote/inet.cpp	(révision 57728)
+@@ -1252,7 +1252,7 @@
+ 		case CNCT_group:
+ 			{
+ 				const size_t length = id.getClumpLength();
+-				if (length != 0)
++				if (length <= sizeof(eff_gid) && length > 0)
+ 				{
+ 					eff_gid = 0;
+ 					memcpy(&eff_gid, id.getBytes(), length);
diff --git a/firebird.spec b/firebird.spec
index d6f5308..c98373d 100644
--- a/firebird.spec
+++ b/firebird.spec
@@ -6,7 +6,7 @@
 Summary: SQL relational database management system
 Name:  firebird
 Version: 2.5.2.26539.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 
 Group:  Applications/Databases
 License: Interbase
@@ -24,6 +24,7 @@ Source7: firebird-superserver.service
 
 # from upstream
 Patch0: firebird-2.5.2-svn-CORE-3946.patch
+Patch1: firebird-2.5.2-svn-CORE-4058.patch
 
 BuildRequires: autoconf
 BuildRequires: automake
@@ -159,6 +160,7 @@ Multi-process, local client libraries for Firebird SQL RDBMS
 %prep
 %setup -q -n %{pkgname}
 %patch0
+%patch1
 # convert intl character to UTF-8
 iconv -f ISO-8859-1 -t utf-8 -c ./doc/README.intl     -o ./doc/README.intl
 
@@ -515,6 +517,9 @@ fi
 
 
 %changelog
+* Sun Mar 10 2013 Philippe Makowski <makowski at fedoraproject.org>  2.5.2.26539.0-3
+- added patch from upstream to fix Firebird CORE-4058 CVE-2013-2492
+
 * Sat Jan 26 2013 Rex Dieter <rdieter at fedoraproject.org> 2.5.2.26539.0-2
 - rebuild (icu)