head	1.2;
access;
symbols;
locks; strict;
comment	@# @;


1.2
date	2007.06.22.11.02.07;	author rse;	state dead;
branches;
next	1.1;
commitid	Z5FSE1qba3VhKTms;

1.1
date	2007.02.07.22.18.00;	author cs;	state Exp;
branches;
next	;
commitid	D8v9efI5kdcePB5s;


desc
@@


1.2
log
@new OpenPKG world order: upgrade from Apache 1.3 to 2.2 (part 3/3: remove obsolete packages)
@
text
@Security Fix (CVE-2005-0108)
http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02

Index: mod_auth_radius.c
--- mod_auth_radius.c.orig	2003-03-24 20:16:15 +0100
+++ mod_auth_radius.c	2007-01-21 00:12:03 +0100
@@@@ -971,9 +971,12 @@@@
   }
   return attr;
 }
-#define radcpy(STRING, ATTR) {memcpy(STRING, ATTR->data, ATTR->length - 2); \
-                              (STRING)[ATTR->length - 2] = 0;}
 
+#define radcpy(STRING, ATTR) do { \
+				  unsigned char len = ATTR->length; \
+				  if (len >= 2) len-=2; \
+				  memcpy(STRING, ATTR->data, len); \
+				  (STRING)[len] = 0;} while (0)
 
 /* authentication module utility functions */
 static int
@


1.1
log
@new package: apache-php4 1.3.37 (Apache HTTP Server providing optional PHP4 support (legacy))
@
text
@@