File bnc#735830-buffer-overflow.patch of Package chasen
Index: chasen-2.4.2/lib/chalib.c
===================================================================
--- chasen-2.4.2.orig/lib/chalib.c
+++ chasen-2.4.2/lib/chalib.c
@@ -306,9 +306,14 @@ chasen_sparse_main(char *input, FILE *ou
*/
while (*input) {
int c = 0, len, cursor;
- if ((crlf = strpbrk(input, "\r\n")) == NULL)
+ if ((crlf = strpbrk(input, "\r\n")) == NULL) {
len = strlen(input);
- else {
+ if (len >= CHA_INPUT_SIZE) {
+ len = CHA_INPUT_SIZE - 1;
+ crlf = input + CHA_INPUT_SIZE - 2;
+ c = 0;
+ }
+ } else {
len = crlf - input;
c = *crlf;
*crlf = '\0';