From 3af6dda231c26524b65a02f8212d91ce37618aa9 Mon Sep 17 00:00:00 2001 From: shyouhei Date: Thu, 19 Jun 2008 23:12:46 +0000 Subject: * array.c (ary_new, rb_ary_initialize, rb_ary_store, rb_ary_aplice, rb_ary_times): integer overflows should be checked. based on patches from Drew Yao fixed CVE-2008-2726 * string.c (rb_str_buf_append): fixed unsafe use of alloca, which led memory corruption. based on a patch from Drew Yao fixed CVE-2008-2726 * sprintf.c (rb_str_format): backported from trunk. * intern.h: ditto. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@17460 b2dd03c8-39d4-4d8f-98ff-823fe69b080e --- ChangeLog | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 7ca979c665..6a2d69eb2b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,14 @@ +Wed Jun 18 21:52:38 2008 URABE Shyouhei + + * array.c (ary_new, rb_ary_initialize, rb_ary_store, + rb_ary_aplice, rb_ary_times): integer overflows should be + checked. based on patches from Drew Yao + fixed CVE-2008-2726 + + * string.c (rb_enc_cr_str_buf_cat): fixed unsafe use of alloca, + which led memory corruption. based on a patch from Drew Yao + fixed CVE-2008-2726 + Fri Jun 20 03:26:00 2008 NAKAMURA Usaku * process.c (rb_f_fork): NetBSD 4.0 or later can fork. -- cgit v1.2.3