security/openvpn-auth-ldap: Fix buffer overflow in C/R function

Bump PORTREVISION Security: e915b60e-ea25-11ef-a1c0-0050569f0b83
2025-02-13 11:27:16 -05:00
parent 76087c45a0
commit 879092b342
2 changed files with 12 additions and 1 deletions
@@ -1,6 +1,6 @@
 PORTNAME=	openvpn-auth-ldap
 PORTVERSION=	2.0.4
-PORTREVISION=	2
+PORTREVISION=	3
 DISTVERSIONPREFIX=	auth-ldap-
 CATEGORIES=	security net-vpn

@@ -0,0 +1,11 @@
+--- src/openvpn-cr.c.orig	2018-07-26 20:17:21 UTC
+++ src/openvpn-cr.c
+@@ -29,7 +29,7 @@ int extract_openvpn_cr(const char *response, openvpn_r
+ 	tokenIndexes[0] = response;
+ 	int tokenCnt = 1;
+ 	const char *p;
+-	for (p = response; *p; ++p) {
+	for (p = response; *p && tokenCnt < 15; ++p) {
+ 		if (*p == ':')
+ 			tokenIndexes[tokenCnt++] = p + 1;
+ 	}