summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTim Yamin <plasmaroo@gentoo.org>2004-06-30 17:42:56 +0000
committerTim Yamin <plasmaroo@gentoo.org>2004-06-30 17:42:56 +0000
commit544d1d93033ffa6ff2f9a9781e7ba61fcc44672f (patch)
tree3065c267c66e917210b63ec91bdb3ab6f52b6425 /sys-kernel/mm-sources
parentVersion bumped. (Manifest recommit) (diff)
downloadgentoo-2-544d1d93033ffa6ff2f9a9781e7ba61fcc44672f.tar.gz
gentoo-2-544d1d93033ffa6ff2f9a9781e7ba61fcc44672f.tar.bz2
gentoo-2-544d1d93033ffa6ff2f9a9781e7ba61fcc44672f.zip
Added a patch for the IPTables RDoS vulnerability; bug #55694.
Diffstat (limited to 'sys-kernel/mm-sources')
-rw-r--r--sys-kernel/mm-sources/ChangeLog6
-rw-r--r--sys-kernel/mm-sources/files/mm-sources.IPTables-RDoS.patch11
-rw-r--r--sys-kernel/mm-sources/mm-sources-2.6.7_rc3-r2.ebuild4
3 files changed, 18 insertions, 3 deletions
diff --git a/sys-kernel/mm-sources/ChangeLog b/sys-kernel/mm-sources/ChangeLog
index d209aaf7d208..3a24dd8896a7 100644
--- a/sys-kernel/mm-sources/ChangeLog
+++ b/sys-kernel/mm-sources/ChangeLog
@@ -1,6 +1,10 @@
# ChangeLog for sys-kernel/mm-sources
# Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/mm-sources/ChangeLog,v 1.167 2004/06/29 21:37:51 lostlogic Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/mm-sources/ChangeLog,v 1.168 2004/06/30 17:39:58 plasmaroo Exp $
+
+ 30 Jun 2004; <plasmaroo@gentoo.org> mm-sources-2.6.7_rc3-r2.ebuild,
+ +files/mm-sources.IPTables-RDoS.patch:
+ Added a patch for the IPTables RDoS vulnerability; bug #55694.
*mm-sources-2.6.7-r4 (29 Jun 2004)
diff --git a/sys-kernel/mm-sources/files/mm-sources.IPTables-RDoS.patch b/sys-kernel/mm-sources/files/mm-sources.IPTables-RDoS.patch
new file mode 100644
index 000000000000..8f89d1605c9a
--- /dev/null
+++ b/sys-kernel/mm-sources/files/mm-sources.IPTables-RDoS.patch
@@ -0,0 +1,11 @@
+--- net/ipv4/netfilter/ip_tables.c.orig 2004-04-04 05:36:47.000000000 +0200
++++ net/ipv4/netfilter/ip_tables.c 2004-06-24 21:24:26.000000000 +0200
+@@ -1461,7 +1461,7 @@
+ int *hotdrop)
+ {
+ /* tcp.doff is only 4 bits, ie. max 15 * 4 bytes */
+- char opt[60 - sizeof(struct tcphdr)];
++ u_int8_t opt[60 - sizeof(struct tcphdr)];
+ unsigned int i;
+
+ duprintf("tcp_match: finding option\n");
diff --git a/sys-kernel/mm-sources/mm-sources-2.6.7_rc3-r2.ebuild b/sys-kernel/mm-sources/mm-sources-2.6.7_rc3-r2.ebuild
index a9c4b9c6270d..6df836e271cc 100644
--- a/sys-kernel/mm-sources/mm-sources-2.6.7_rc3-r2.ebuild
+++ b/sys-kernel/mm-sources/mm-sources-2.6.7_rc3-r2.ebuild
@@ -1,8 +1,8 @@
# Copyright 1999-2004 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/mm-sources/mm-sources-2.6.7_rc3-r2.ebuild,v 1.2 2004/06/24 22:59:18 agriffis Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/mm-sources/mm-sources-2.6.7_rc3-r2.ebuild,v 1.3 2004/06/30 17:39:58 plasmaroo Exp $
-UNIPATCH_LIST="${DISTDIR}/${KV}.bz2"
+UNIPATCH_LIST="${DISTDIR}/${KV}.bz2 ${FILESDIR}/${PN}.IPTables-RDoS.patch"
K_PREPATCHED="yes"
UNIPATCH_STRICTORDER="yes"