Hello stable release managers,

I'd like to upload libgadu 1:1.8.0+r592-4 with the following interdiff
from the 1:1.8.0+r592-3 which is currently in lenny. It fixes crash due
to memory corruption. Please approve.
| --- libgadu-1.8.0+r592/debian/changelog
| +++ libgadu-1.8.0+r592/debian/changelog
| @@ -1,3 +1,9 @@
| +libgadu (1:1.8.0+r592-4) stable; urgency=high
| +
| +  * Cherry-pick a fix for memory corruption when removing dcc7 sessions
| +
| + -- Marcin Owsiany <porri...@debian.org>  Tue, 30 Nov 2010 18:37:12 -0800
| +
|  libgadu (1:1.8.0+r592-3) unstable; urgency=high
|  
|    * Security upload for lenny and sid
| only in patch2:
| unchanged:
| --- libgadu-1.8.0+r592.orig/src/dcc7.c
| +++ libgadu-1.8.0+r592/src/dcc7.c
| @@ -92,7 +92,7 @@
|  
|       gg_debug_session(sess, GG_DEBUG_FUNCTION, "** 
gg_dcc7_session_remove(%p, %p)\n", sess, dcc);
|  
| -     if (!sess || !dcc) {
| +     if (sess == NULL || dcc == NULL) {
|               gg_debug_session(sess, GG_DEBUG_MISC, "// 
gg_dcc7_session_remove() invalid parameters\n");
|               errno = EINVAL;
|               return -1;
| @@ -104,9 +104,9 @@
|               return 0;
|       }
|  
| -     for (tmp = sess->dcc7_list; tmp; tmp = tmp->next) {
| +     for (tmp = sess->dcc7_list; tmp != NULL; tmp = tmp->next) {
|               if (tmp->next == dcc) {
| -                     tmp = dcc->next;
| +                     tmp->next = dcc->next;
|                       dcc->next = NULL;
|                       return 0;
|               }


-- 
Marcin Owsiany <porri...@debian.org>             http://marcin.owsiany.pl/
GnuPG: 1024D/60F41216  FE67 DA2D 0ACA FC5E 3F75  D6F6 3A0D 8AA0 60F4 1216

Attachment: signature.asc
Description: Digital signature

Reply via email to