File CVE-2014-10071.patch of Package zsh.23099
commit 49a3086bb67575435251c70ee598e2fd406ef055
Author: Mikael Magnusson <mikachu@gmail.com>
Date: Mon Oct 6 20:33:47 2014 +0200
33365: avoid buffer overflow for very long fds in >& fd syntax
Index: zsh-5.0.5/Src/exec.c
===================================================================
--- zsh-5.0.5.orig/Src/exec.c
+++ zsh-5.0.5/Src/exec.c
@@ -3131,7 +3131,7 @@ execcmd(Estate state, int input, int out
fil = movefd(dup(fd));
}
if (fil == -1) {
- char fdstr[4];
+ char fdstr[DIGBUFSIZE];
closemnodes(mfds);
fixfds(save);