Matthias Andree
7bcce8a1bb
Changelog: https://github.com/OpenVPN/openvpn/blob/v2.7.5/Changes.rst The upstream's signing sub-key expired yesterday, new key provided via https://swupdate.openvpn.net/community/keys/gpgkey-F554A3687412CFFEBDEFE0A312F5F7B42F2B01E7.gpg PR: 296429 Security: ffa897a0-756f-11f1-b291-a74de6bb0320 Security: CVE-2026-11771 Security: CVE-2026-12932 Security: CVE-2026-12996 Security: CVE-2026-13117 Security: CVE-2026-13122 Security: CVE-2026-13698 Sponsored by: UNIS Labs MFH: 2026Q2
15 lines
653 B
C
15 lines
653 B
C
--- src/openvpn/buffer.c.orig 2026-07-01 08:17:40 UTC
|
|
+++ src/openvpn/buffer.c
|
|
@@ -1376,7 +1376,10 @@ buffer_read_from_file(const char *filename, struct gc_
|
|
return ret;
|
|
}
|
|
|
|
- const size_t size = file_stat.st_size;
|
|
+ /* for some systems, off_t is 63 bits wide + sign bit and size_t is 32 bits
|
|
+ * wide, and we need to avoid negative garbage wrapping around */
|
|
+ ASSERT(file_stat.st_size >= 0 && file_stat.st_size <= SIZE_MAX);
|
|
+ const size_t size = (size_t)file_stat.st_size;
|
|
ret = alloc_buf_gc(size + 1, gc); /* space for trailing \0 */
|
|
size_t read_size = fread(BPTR(&ret), 1, size, fp);
|
|
if (read_size == 0)
|