Group :: Text tools
RPM: wordnet
Main Changelog Spec Patches Sources Download Gear Bugs and FR Repocop
Patch: wordnet-3.0-deb-bound-CVE-2008-2149.patch
Download
Download
--- WordNet/src/wn.c
+++ WordNet/src/wn.c
@@ -204,7 +204,8 @@ static int searchwn(int ac, char *av[])
outsenses += do_search(av[1], optptr->pos, optptr->search,
whichsense, optptr->label);
} else {
- sprintf(tmpbuf, "wn: invalid search option: %s\n", av[j]);
+ /* Fix CVE-2008-2149: buffer overflows Andreas Tille <tille@debian.org> */
+ sprintf(tmpbuf, "wn: invalid search option: %.200s\n", av[j]);
display_message(tmpbuf);
errcount++;
}