mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2025-12-13 00:10:04 +03:00
Backport some memory corruption fixes for sqlite3. Note that I haven't fixed bug #920440 - I have essentially no idea about this package and I'd really prefer someone investigate what it's even trying to do there. Bug: https://bugs.gentoo.org/920440 Closes: https://bugs.gentoo.org/920460 Closes: https://bugs.gentoo.org/933427 Signed-off-by: Sam James <sam@gentoo.org>
15 lines
452 B
Diff
15 lines
452 B
Diff
https://bugs.gentoo.org/933427
|
|
https://sourceforge.net/p/libdbi-drivers/libdbi-drivers/ci/7657c4c688c021d5f42a38e998c876d1739d5d8f
|
|
--- a/drivers/sqlite3/dbd_sqlite3.c
|
|
+++ b/drivers/sqlite3/dbd_sqlite3.c
|
|
@@ -585,7 +585,8 @@
|
|
unsigned char *temp;
|
|
size_t len;
|
|
|
|
- if ((temp = malloc(from_length*2)) == NULL) {
|
|
+ /* allocate an extra byte for NULL and two for the quotes */
|
|
+ if ((temp = malloc(2*from_length+1+2)) == NULL) {
|
|
return 0;
|
|
}
|
|
|