Attachment 248611 Details for Bug 367471 – Patch from Debian

[patch] Patch from Debian

fix_BigInteger_overflow_CVE-2007-5197.dpatch (text/plain), 1.35 KB, created by Ville Skyttä on 2007-11-05 21:08:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ville Skyttä

Created: 2007-11-05 21:08:43 UTC

Size: 1.35 KB

patch

obsolete

>#! /bin/sh /usr/share/dpatch/dpatch-run
>## fix_BigInteger_overflow_CVE-2007-5197.dpatch by Mirco Bauer <meebey@debian.org>
>##
>## All lines beginning with `## DP:' are a description of the patch.
>## DP: No description.
>
>@DPATCH@
>diff -urNad mono-1.2.2.1~/mcs/class/Mono.Security/Mono.Math/BigInteger.cs mono-1.2.2.1/mcs/class/Mono.Security/Mono.Math/BigInteger.cs
>--- mono-1.2.2.1~/mcs/class/Mono.Security/Mono.Math/BigInteger.cs	2006-04-14 19:51:24.000000000 +0200
>+++ mono-1.2.2.1/mcs/class/Mono.Security/Mono.Math/BigInteger.cs	2007-10-28 22:42:47.000000000 +0100
>@@ -1574,7 +1574,7 @@
> 						uint j = 1;
> 
> 						// Multiply and add
>-						for (; j < m.length; j++) {
>+						for (; j < m.length && j < A.length; j++) {
> 							c += (ulong)u_i * (ulong)*(mP++) + *(aSP++);
> 							*(aDP++) = (uint)c;
> 							c >>= 32;
>diff -urNad mono-1.2.2.1~/mcs/class/corlib/Mono.Math/BigInteger.cs mono-1.2.2.1/mcs/class/corlib/Mono.Math/BigInteger.cs
>--- mono-1.2.2.1~/mcs/class/corlib/Mono.Math/BigInteger.cs	2006-04-14 19:50:35.000000000 +0200
>+++ mono-1.2.2.1/mcs/class/corlib/Mono.Math/BigInteger.cs	2007-10-28 22:42:15.000000000 +0100
>@@ -1574,7 +1574,7 @@
> 						uint j = 1;
> 
> 						// Multiply and add
>-						for (; j < m.length; j++) {
>+						for (; j < m.length && j < A.length; j++) {
> 							c += (ulong)u_i * (ulong)*(mP++) + *(aSP++);
> 							*(aDP++) = (uint)c;
> 							c >>= 32;

Actions: View | Diff

Attachments on bug 367471: 248611