diff options
author | Karen Arutyunov <karen@codesynthesis.com> | 2020-04-07 21:21:28 +0300 |
---|---|---|
committer | Karen Arutyunov <karen@codesynthesis.com> | 2020-04-08 15:03:08 +0300 |
commit | b7b91802a7d16cd9a435bcede5f31d2e3ccee653 (patch) | |
tree | d938999381f0d81032c3244501392ec753056c0c /libicuuc/libicu/unistr.cpp.patch | |
parent | 3f87de068e8081598466018523b734543ae53ac0 (diff) |
Release version 65.1.0+3v65.1.0+3
Fix the Debian-reported security issue CVE-2020-10531
Diffstat (limited to 'libicuuc/libicu/unistr.cpp.patch')
-rw-r--r-- | libicuuc/libicu/unistr.cpp.patch | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/libicuuc/libicu/unistr.cpp.patch b/libicuuc/libicu/unistr.cpp.patch new file mode 100644 index 0000000..485f94c --- /dev/null +++ b/libicuuc/libicu/unistr.cpp.patch @@ -0,0 +1,15 @@ +--- libicu/uc/unistr.cpp 2019-12-23 14:38:39.792890424 +0300 ++++ libicu/unistr.cpp 2020-04-07 21:15:55.107326955 +0300 +@@ -1563,7 +1563,11 @@ UnicodeString::doAppend(const UChar *src + } + + int32_t oldLength = length(); +- int32_t newLength = oldLength + srcLength; ++ int32_t newLength; ++ if (uprv_add32_overflow(oldLength, srcLength, &newLength)) { ++ setToBogus(); ++ return *this; ++ } + + // Check for append onto ourself + const UChar* oldArray = getArrayStart(); |