diff options
| author | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-06-19 23:12:52 +0000 |
|---|---|---|
| committer | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-06-19 23:12:52 +0000 |
| commit | dc88e0adda313360d976441e58237e4897f9538f (patch) | |
| tree | cc4e6fa1dff263effcfdcdbb4ae6c0ef410faf7f /ChangeLog | |
| parent | 63ff1abc033116bc195512ad27c278d0c98db4bc (diff) | |
| parent | 60243650cff2fbf678806bed4b0d57c6209d10cc (diff) | |
add tag v1_8_5_229v1_8_5_229
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/tags/v1_8_5_229@17461 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 15 |
1 files changed, 15 insertions, 0 deletions
@@ -1,3 +1,18 @@ +Wed Jun 18 22:25:28 2008 URABE Shyouhei <shyouhei@ruby-lang.org> + + * array.c (ary_new, rb_ary_initialize, rb_ary_store, + rb_ary_aplice, rb_ary_times): integer overflows should be + checked. based on patches from Drew Yao <ayao at apple.com> + fixed CVE-2008-2726 + + * string.c (rb_str_buf_append): fixed unsafe use of alloca, + which led memory corruption. based on a patch from Drew Yao + <ayao at apple.com> fixed CVE-2008-2726 + + * sprintf.c (rb_str_format): backported from trunk. + + * intern.h: ditto. + Fri Jun 20 01:40:21 2008 Nobuyoshi Nakada <nobu@ruby-lang.org> * array.c (rb_ary_equal, rb_ary_eql, rb_ary_hash, rb_ary_cmp): |