Nils Freydank ad0517d371 Fix CVE-2016-5434 (DoS/loop and out of boundary read) ... This is a rewrite of Tobias Stoeckmann’s patch from June 2016[1] using functions instead of macros. (Thanks to Tobias for explanations of his patch.) A short question on Freenode IRC showed that macros are generally discouraged and functions should be used. The patch introduces a static size_t length_check() in libalpm/signing.c. [1] Original patch: https://lists.archlinux.org/pipermail/pacman-dev/2016-June/021148.html CVE request (and assignment): http://seclists.org/oss-sec/2016/q2/526 Signed-off-by: Allan McRae <allan@archlinux.org>		2017-12-07 14:59:26 +10:00
..
libalpm	Fix CVE-2016-5434 (DoS/loop and out of boundary read)	2017-12-07 14:59:26 +10:00