File miniupnpc-buffer-overflow-fix.patch of Package miniupnpc
This patch fixes CVE-2015-6031 and is based on:
commit 79cca974a4c2ab1199786732a67ff6d898051b78
Author: Thomas Bernard <miniupnp@free.fr>
Date: Tue Sep 15 15:32:33 2015 +0200
igd_desc_parse.c: fix buffer overflow
diff --git a/miniupnpc/igd_desc_parse.c b/miniupnpc/igd_desc_parse.c
index 892a090..d2999ad 100644
--- a/miniupnpc/igd_desc_parse.c
+++ b/miniupnpc/igd_desc_parse.c
@@ -15,7 +15,9 @@
void IGDstartelt(void * d, const char * name, int l)
{
struct IGDdatas * datas = (struct IGDdatas *)d;
- memcpy( datas->cureltname, name, l);
+ if(l >= MINIUPNPC_URL_MAXSIZE)
+ l = MINIUPNPC_URL_MAXSIZE-1;
+ memcpy(datas->cureltname, name, l);
datas->cureltname[l] = '\0';
datas->level++;
if( (l==7) && !memcmp(name, "service", l) ) {