rpms/libusb/devel libusb-0.1.12-memset.patch, NONE, 1.1 libusb.spec, 1.31, 1.32

[Jindrich Novy (jnovy)]

Author: jnovy

Update of /cvs/extras/rpms/libusb/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv7165

Modified Files:
	libusb.spec 
Added Files:
	libusb-0.1.12-memset.patch 
Log Message:
- don't use uninitialized buffers on stack (#250274)


libusb-0.1.12-memset.patch:

--- NEW FILE libusb-0.1.12-memset.patch ---
--- libusb-0.1.12/usb.c.memset	2006-03-04 03:52:46.000000000 +0100
+++ libusb-0.1.12/usb.c	2007-08-01 12:32:17.000000000 +0200
@@ -232,6 +232,7 @@ int usb_get_string_simple(usb_dev_handle
   char tbuf[255];	/* Some devices choke on size > 255 */
   int ret, langid, si, di;
 
+  memset(tbuf, 0, sizeof(tbuf));
   /*
    * Asking for the zero'th index is special - it returns a string
    * descriptor that contains all the language IDs supported by the


Index: libusb.spec
===================================================================
RCS file: /cvs/extras/rpms/libusb/devel/libusb.spec,v
retrieving revision 1.31
retrieving revision 1.32
diff -u -r1.31 -r1.32
--- libusb.spec	8 Feb 2007 11:59:03 -0000	1.31
+++ libusb.spec	1 Aug 2007 11:00:56 -0000	1.32
@@ -1,9 +1,10 @@
 Summary: A library which allows userspace access to USB devices
 Name: libusb
 Version: 0.1.12
-Release: 7%{?dist}
+Release: 8%{?dist}
 Source0: http://prdownloads.sourceforge.net/libusb/%{name}-%{version}.tar.gz
 Patch0: libusb-0.1.12-libusbconfig.patch
+Patch1: libusb-0.1.12-memset.patch
 License: LGPL
 Group: System Environment/Libraries
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -37,6 +38,7 @@
 %prep
 %setup -q
 %patch0 -p1 -b .libusbconfig
+%patch1 -p1 -b .memset
 
 %build
 %configure
@@ -74,6 +76,9 @@
 %{_libdir}/*.a
 
 %changelog
+* Wed Aug  1 2007 Jindrich Novy <jnovy at redhat.com> 0.1.12-8
+- don't use uninitialized buffers on stack (#250274)
+
 * Tue Feb 08 2007 Jindrich Novy <jnovy at redhat.com> 0.1.12-7
 - merge review spec fixes (#226053)
 - create -static subpackage to ship static libs separately