Attachment 831770 Details for Bug 1036483 – Upstream patch for 4.0.x

[patch] Upstream patch for 4.0.x

4-0-header_dos.patch (text/plain), 977 bytes, created by Tomas Hoger on 2013-12-02 20:22:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tomas Hoger

Created: 2013-12-02 20:22:42 UTC

Size: 977 bytes

patch

obsolete

>From 7d0487829971a70353f8c8f7af61e817901b28bd Mon Sep 17 00:00:00 2001
>From: Aaron Patterson <aaron.patterson@gmail.com>
>Date: Sat, 30 Nov 2013 17:02:53 -0800
>Subject: [PATCH] Only use valid mime type symbols as cache keys
>
>CVE-2013-6414
>---
> actionpack/lib/action_view/lookup_context.rb | 7 +++++++
> 1 file changed, 7 insertions(+)
>
>diff --git a/actionpack/lib/action_view/lookup_context.rb b/actionpack/lib/action_view/lookup_context.rb
>index f9d5b97..c6ff683 100644
>--- a/actionpack/lib/action_view/lookup_context.rb
>+++ b/actionpack/lib/action_view/lookup_context.rb
>@@ -62,6 +62,13 @@ module ActionView
>       @details_keys = ThreadSafe::Cache.new
> 
>       def self.get(details)
>+        if details[:formats]
>+          details = details.dup
>+          syms    = Set.new Mime::SET.symbols
>+          details[:formats] = details[:formats].select { |v|
>+            syms.include? v
>+          }
>+        end
>         @details_keys[details] ||= new
>       end
> 
>-- 
>1.8.4.1
>

Actions: View | Diff

Attachments on bug 1036483: 831767 | 831769 | 831770