]> git.cameronkatri.com Git - bsdgames-darwin.git/commit
git.ckatri.com / bsdgames-darwin.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cc268de) | patch
Better check data read from tetris.scores before use as array indices etc.
authordrochner <drochner@NetBSD.org>
Thu, 1 Jun 2006 16:12:27 +0000 (16:12 +0000)
committerdrochner <drochner@NetBSD.org>
Thu, 1 Jun 2006 16:12:27 +0000 (16:12 +0000)
commitd8bc1d48404a4b9487e12764de024eb5e435c77a
treec7ae257f0d710a1e5944dbc9c3e289cd6b9eff90tree | snapshot
parentcc268dec31a1421ca85abfcbf593e18570d3e010commit | diff
Better check data read from tetris.scores before use as array indices etc.
This is CVE-2006-1539, files against Gentoo Linux, the patch is from
Gentoo.
A standard NetBSD installation is not as much risk because tetris is
sgid "games", and users shouldn't be in that group.
tetris/scores.c diff | blob | history
Port of NetBSD games to Darwin