Diffstat (limited to 'ChangeLog')
1 files changed, 15 insertions, 0 deletions
@@ -1,3 +1,18 @@
+Wed Jun 18 22:24:46 2008 URABE Shyouhei <email@example.com>
+ * array.c (ary_new, rb_ary_initialize, rb_ary_store,
+ rb_ary_aplice, rb_ary_times): integer overflows should be
+ checked. based on patches from Drew Yao <ayao at apple.com>
+ fixed CVE-2008-2726
+ * string.c (rb_str_buf_append): fixed unsafe use of alloca,
+ which led memory corruption. based on a patch from Drew Yao
+ <ayao at apple.com> fixed CVE-2008-2726
+ * sprintf.c (rb_str_format): backported from trunk.
+ * intern.h: ditto.
Tue Jun 17 15:09:46 2008 Nobuyoshi Nakada <firstname.lastname@example.org>
* file.c (file_expand_path): no need to expand root path which has no