[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-devel:17688] Re: namazu 2.0.20 リリース(セキュリティ修正含む)



At Mon, 28 Sep 2009 10:05:06 +0900,
Hideki Yamane wrote:
>  メンテナの方の調子がよろしくなさそうなので、代わりにどなたか対応できそうな
>  方はいらっしゃいませんか?

  とりあえずパッチだけ作りました。

diff -uNr namazu2-2.0.18/nmz/replace.c namazu2-2.0.18.fix/nmz/replace.c
--- namazu2-2.0.18/nmz/replace.c	2008-03-07 00:38:09.000000000 +0900
+++ namazu2-2.0.18.fix/nmz/replace.c	2009-11-25 10:25:53.000000000 +0900
@@ -94,6 +94,9 @@
     struct nmz_replace *list = replaces;
     int is_regex_matching = 0;
 
+    if (uri[0] == '\0') {
+        return 0:
+    }
     strncpy(tmp, uri, BUFSIZE - 1);
 
     while (list) {
diff -uNr namazu2-2.0.18/src/result.c namazu2-2.0.18.fix/src/result.c
--- namazu2-2.0.18/src/result.c	2007-12-06 01:59:36.000000000 +0900
+++ namazu2-2.0.18.fix/src/result.c	2009-11-25 10:23:55.000000000 +0900
@@ -86,7 +86,7 @@
     n = leng + (leng - 1) / 3;
     numstr[n] = '\0';
     n--;
-    for (i = 0; i < leng; i++, n--) {
+    for (i = 0; i < (int)leng; i++, n--) {
 	numstr[n] = numstr[leng - 1 - i];
 	if (i % 3 == 2 && n != 0) {
 	    n--;