Wed, 07 Jan 2009 14:58:25 +0100
Import package vendor original specs for necessary manipulations.
michael@22 | 1 | Index: lib/timevar.c |
michael@22 | 2 | --- lib/timevar.c.orig 2008-07-14 10:56:12 +0200 |
michael@22 | 3 | +++ lib/timevar.c 2008-11-03 19:16:04 +0100 |
michael@22 | 4 | @@ -42,6 +42,7 @@ |
michael@22 | 5 | # include <sys/times.h> |
michael@22 | 6 | #endif |
michael@22 | 7 | #ifdef HAVE_SYS_RESOURCE_H |
michael@22 | 8 | +#include <sys/time.h> |
michael@22 | 9 | #include <sys/resource.h> |
michael@22 | 10 | #endif |
michael@22 | 11 | |
michael@22 | 12 | ---------------------------------------------------------------------------- |
michael@22 | 13 | |
michael@22 | 14 | Security Fix: |
michael@22 | 15 | http://undeadly.org/cgi?action=article&sid=20080708155228&mode=flat&count=13 |
michael@22 | 16 | |
michael@22 | 17 | Index: data/yacc.c |
michael@22 | 18 | --- data/yacc.c.orig 2008-11-02 19:09:10 +0100 |
michael@22 | 19 | +++ data/yacc.c 2008-11-03 19:16:04 +0100 |
michael@22 | 20 | @@ -1444,7 +1444,10 @@ |
michael@22 | 21 | users should not rely upon it. Assigning to YYVAL |
michael@22 | 22 | unconditionally makes the parser a bit smaller, and it avoids a |
michael@22 | 23 | GCC warning that YYVAL may be used uninitialized. */ |
michael@22 | 24 | +if (yylen) |
michael@22 | 25 | yyval = yyvsp[1-yylen]; |
michael@22 | 26 | +else |
michael@22 | 27 | + memset(&yyval, 0, sizeof(yyval)); |
michael@22 | 28 | |
michael@22 | 29 | ]b4_locations_if( |
michael@22 | 30 | [[ /* Default location. */ |
michael@22 | 31 |