File libical-boo1015964-use-after-free.patch of Package libical.openSUSE_Leap_42.3_Update
From 6b9438d746cec6e4e632d78c5244f4be6314d1c9 Mon Sep 17 00:00:00 2001
From: Allen Winter <allen.winter@kdab.com>
Date: Sun, 28 May 2017 12:51:10 -0400
Subject: [PATCH] icaltypes.c - icalreqstattype_from_string(), copy the
reqstattype's debug string into its own memory in the ring buffer.
Issue#253
Backported by Mike Gorse <mgorse@suse.com>
---
diff -urp libical-1.0.1.orig/src/libical/icaltypes.c libical-1.0.1/src/libical/icaltypes.c
--- libical-1.0.1.orig/src/libical/icaltypes.c 2014-10-09 10:07:05.000000000 -0500
+++ libical-1.0.1/src/libical/icaltypes.c 2017-06-14 10:33:19.118458558 -0500
@@ -161,7 +161,7 @@ struct icalreqstattype icalreqstattype_f
p2 = strchr(p1+1,';');
if (p2 != 0 && *p2 != 0){
- stat.debug = p2+1;
+ stat.debug = icalmemory_tmp_copy(p2 + 1);
}
return stat;