From d573147bc97d065d6056811ea29d5fca9065d2fe Mon Sep 17 00:00:00 2001 From: Mark Felder Date: Mon, 21 Dec 2015 15:41:30 +0000 Subject: irc/quassel: Import patch to resolve DoS CVE Approved by: ports-secteam (with hat) MFH: 2015Q4 Security: CVE-2015-8547 --- irc/quassel/Makefile | 1 + irc/quassel/files/patch-src_core_coreuserinputhandler.cpp | 12 ++++++++++++ 2 files changed, 13 insertions(+) create mode 100644 irc/quassel/files/patch-src_core_coreuserinputhandler.cpp (limited to 'irc') diff --git a/irc/quassel/Makefile b/irc/quassel/Makefile index c6975e6d91fb..921750302eaf 100644 --- a/irc/quassel/Makefile +++ b/irc/quassel/Makefile @@ -3,6 +3,7 @@ PORTNAME= quassel PORTVERSION= 0.12.2 +PORTREVISION= 1 CATEGORIES= irc MASTER_SITES= http://www.quassel-irc.org/pub/ diff --git a/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp b/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp new file mode 100644 index 000000000000..c3cff156f59c --- /dev/null +++ b/irc/quassel/files/patch-src_core_coreuserinputhandler.cpp @@ -0,0 +1,12 @@ +Fix CVE-2015-8547 +--- src/core/coreuserinputhandler.cpp.orig 2015-04-23 20:47:17 UTC ++++ src/core/coreuserinputhandler.cpp +@@ -228,7 +228,7 @@ void CoreUserInputHandler::doMode(const + if (!isNumber || maxModes == 0) maxModes = 1; + + QStringList nickList; +- if (nicks == "*") { // All users in channel ++ if (nicks == "*" && bufferInfo.type() == BufferInfo::ChannelBuffer) { // All users in channel + const QList users = network()->ircChannel(bufferInfo.bufferName())->ircUsers(); + foreach(IrcUser *user, users) { + if ((addOrRemove == '+' && !network()->ircChannel(bufferInfo.bufferName())->userModes(user).contains(mode)) -- cgit v1.2.3