[tex-live] buffer overflow patch for xdvik (resend)

Stefan Ulrich ulrich@cis.uni-muenchen.de
Sun, 24 Mar 2002 14:09:03 -0500


Hi,

[ It seems that our local relay has problems with sending to
  tex-live - I've sent this off on Friday, and it hasn't arrived
  yet, but I didn't get an MTA error either. This happened
  before, so I'll just resend it, this time without relaying
  and hoping it won't appear twice - apologies if it does ...
]

I don't know how tight the schedule for the next TeX-Live CD is,
but I've just discovered a buffer overflow bug in xdvik-22.40h
which might be useful to have fixed before the next release ...
the patch is quite small:

% ------------------------------ patch begin
diff -urb --exclude=CVS xdvik/hypertex.c /home/ulrich/projects/xdvik_22_40_STABLE/texk/xdvik/hy
pertex.c
--- xdvik/hypertex.c    Mon Mar  4 12:35:11 2002
+++ /home/ulrich/projects/xdvik_22_40_STABLE/texk/xdvik/hypertex.c      Fri Mar 22 14:51:13 200
2
@@ -992,7 +992,7 @@
        argv[i++] = filename;
     }
     else {
-       file_arg = xmalloc(strlen(filename) + strlen(anchor_name) + 1);
+       file_arg = xmalloc(strlen(filename) + strlen(anchor_name) + 2);
        sprintf(file_arg, "%s#%s", filename, anchor_name);
        argv[i++] = file_arg;
     }
diff -urb --exclude=CVS xdvik/version.h /home/ulrich/projects/xdvik_22_40_STABLE/texk/xdvik/ver
sion.h
--- xdvik/version.h     Mon Jan 21 19:00:53 2002
+++ /home/ulrich/projects/xdvik_22_40_STABLE/texk/xdvik/version.h       Fri Mar 22 14:52:07 200
2
@@ -1,4 +1,4 @@
-#define XDVERSION "22.40h"
+#define XDVERSION "22.40i"
 #ifdef Omega
 #define TVERSION XDVERSION" for Omega"
 #else
% ------------------------------ patch end

Hmm, maybe I should really get into this perforce thing, to make
such updates easier ...

Best regards,
Stefan