diff options
| author | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-06-19 23:12:56 +0000 |
|---|---|---|
| committer | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-06-19 23:12:56 +0000 |
| commit | e62d2cb80c491a4337c1dfc6f580d06ea66b557e (patch) | |
| tree | 51584d2db08f93d52c959a70299b9aae492b4075 /ChangeLog | |
| parent | 27f1dd40c348a5ef2217e1043cc08e0c0832c702 (diff) | |
| parent | 3af6dda231c26524b65a02f8212d91ce37618aa9 (diff) | |
add tag v1_9_0_2
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/tags/v1_9_0_2@17464 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 11 |
1 files changed, 11 insertions, 0 deletions
@@ -1,3 +1,14 @@ +Wed Jun 18 21:52:38 2008 URABE Shyouhei <shyouhei@ruby-lang.org> + + * array.c (ary_new, rb_ary_initialize, rb_ary_store, + rb_ary_aplice, rb_ary_times): integer overflows should be + checked. based on patches from Drew Yao <ayao at apple.com> + fixed CVE-2008-2726 + + * string.c (rb_enc_cr_str_buf_cat): fixed unsafe use of alloca, + which led memory corruption. based on a patch from Drew Yao + <ayao at apple.com> fixed CVE-2008-2726 + Fri Jun 20 03:26:00 2008 NAKAMURA Usaku <usa@ruby-lang.org> * process.c (rb_f_fork): NetBSD 4.0 or later can fork. |