projects / platform / upstream / rpm.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eaece70) | patch
Specifically validate region tag on header import
authorPanu Matilainen <pmatilai@redhat.com>
Thu, 19 Jan 2012 06:25:15 +0000 (08:25 +0200)
committerPanu Matilainen <pmatilai@redhat.com>
Tue, 3 Apr 2012 12:45:46 +0000 (15:45 +0300)
commite4eab2bc6d07cfd33f740071de7ddbb2fe2f4190
tree47d9fdace09c67dfbf825a097bdeb36b0ddb37f7tree | snapshot
parenteaece70c1e80f6830b4a222f0ba47f4a75a0136bcommit | diff
Specifically validate region tag on header import

- Region tags need to have very specific content, the generic
  header tag checks are not sufficient to ensure sanity. Verify
  the tag is one of the known region tags and that the entry has
  expected type and count.
- Fixes the first half of CVE-2012-0060
lib/header.c diff | blob | history
Domain: SCM / Build;