0004-CVE-2015-4047.patch 888 B

1234567891011121314151617181920212223242526
  1. ipsec-tools: CVE-2015-4047: null pointer dereference crash in racoon
  2. See: https://bugs.gentoo.org/show_bug.cgi?id=550118
  3. Downloaded from
  4. https://gitweb.gentoo.org/repo/gentoo.git/tree/net-vpn/ipsec-tools/files/ipsec-tools-CVE-2015-4047.patch
  5. See also
  6. https://sources.debian.net/src/ipsec-tools/1:0.8.2%2B20140711-8/debian/patches/bug785778-null-pointer-deref.patch/
  7. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
  8. --- ./src/racoon/gssapi.c 9 Sep 2006 16:22:09 -0000 1.4
  9. +++ ./src/racoon/gssapi.c 19 May 2015 15:16:00 -0000 1.6
  10. @@ -192,6 +192,11 @@
  11. gss_name_t princ, canon_princ;
  12. OM_uint32 maj_stat, min_stat;
  13. + if (iph1->rmconf == NULL) {
  14. + plog(LLV_ERROR, LOCATION, NULL, "no remote config\n");
  15. + return -1;
  16. + }
  17. +
  18. gps = racoon_calloc(1, sizeof (struct gssapi_ph1_state));
  19. if (gps == NULL) {
  20. plog(LLV_ERROR, LOCATION, NULL, "racoon_calloc failed\n");