File squidGuard-CVE-2009-3826.patch of Package squidGuard
Index: squidGuard-1.3/src/sg.h.in
===================================================================
--- squidGuard-1.3.orig/src/sg.h.in 2010-07-29 14:29:25.000000000 +0200
+++ squidGuard-1.3/src/sg.h.in 2010-07-29 14:33:58.000000000 +0200
@@ -73,13 +73,13 @@ int tolower();
#define REQUEST_TYPE_REDIRECT 2
#define REQUEST_TYPE_PASS 3
-#define MAX_BUF 4096
+#define MAX_BUF 12288
#define DEFAULT_LOGFILE "squidGuard.log"
#define WARNING_LOGFILE "squidGuard.log"
#define ERROR_LOGFILE "squidGuard.error"
-#define DEFAULT_CONFIGFILE "/etc/squidguard.conf"
+#define DEFAULT_CONFIGFILE "@prefix@/squidGuard/squidGuard.conf"
#define DEFAULT_LOGDIR "@prefix@/squidGuard/log"
#define DEFAULT_DBHOME "@prefix@/squidGuard/db"
#define EXEC_PROGRAM "@prefix@/bin/squidGuard"
Index: squidGuard-1.3/src/sgDiv.c.in
===================================================================
--- squidGuard-1.3.orig/src/sgDiv.c.in 2010-07-29 14:29:26.000000000 +0200
+++ squidGuard-1.3/src/sgDiv.c.in 2010-07-29 14:33:58.000000000 +0200
@@ -745,7 +745,7 @@ char *sgParseRedirect(redirect, req, acl
p++;
break;
case 'u': /* Requested URL */
- strcat(buf, req->orig);
+ strncat(buf, req->orig, 2048);
p++;
break;
default: