games-board/gnuchess: drop 6.2.8-r1

Signed-off-by: Ionen Wolkens <ionen@gentoo.org>
This commit is contained in:
Ionen Wolkens
2021-12-28 09:43:07 -05:00
parent c7e3eec779
commit 85b669dd1b
3 changed files with 0 additions and 94 deletions

View File

@@ -1,2 +1 @@
DIST gnuchess-6.2.8.tar.gz 804080 BLAKE2B 7079c07ae7cd2f225c428a7bf14d53eec394382508544994918b87db35d5cbdeb9cf42a11f5bc2f9c0c7b778384d6cdb9aad4490bc9cfd40a513fc2e36cbdd67 SHA512 9146ee727c1eb8002eb3b1e762d71876b512eff0799eafec7019d5312766fe2bd6655c622e66f86e92f80d2f3666e48158a1245b42c30bd3221a8b379689ecdd
DIST gnuchess-6.2.9.tar.gz 802697 BLAKE2B e450e1d77f3158f2a063a7fc80985ad6d59f26a17a86aa9d18d86f32ee1c01fba100e59b02ea65276a1ee480ed050fbafd68635d40bae75205763fd34bfd608a SHA512 7e2ec9e14ab331ffaab2dd60da81b64b5c5a07cf14f9139d67c77886038512d15511939b8e683675ea6611e24ff2c38212a7f288540448c9225c263435f71963

View File

@@ -1,72 +0,0 @@
From 7059e40c7a487b17886e1d345b52fc0cfca8df72 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Wed, 2 Jun 2021 13:15:29 +0200
Subject: [PATCH] frontend/cmd.cc: Fix buffer overflow CVE-2021-30184
Based on prior work by Michael Vaughan,
with "break;" replaced by "return;" and
magic number 9 resolved by strlen("setboard ").
Mimics close-to-identical existing code from
elsewhere in the the same file.
---
src/frontend/cmd.cc | 30 ++++++++++++++++++++++--------
1 file changed, 22 insertions(+), 8 deletions(-)
diff --git a/src/frontend/cmd.cc b/src/frontend/cmd.cc
index a321fc2..394d03f 100644
--- a/src/frontend/cmd.cc
+++ b/src/frontend/cmd.cc
@@ -477,13 +477,20 @@ void cmd_pgnload(void)
return;
}
- strcpy( data, "setboard " );
+ const char setboardCmd[] = "setboard ";
+ unsigned int setboardLen = strlen(setboardCmd);
+ strcpy( data, setboardCmd );
int i=0;
while ( epdline[i] != '\n' ) {
- data[i+9] = epdline[i];
- ++i;
+ if (i + setboardLen < MAXSTR - 1) {
+ data[i+setboardLen] = epdline[i];
+ ++i;
+ } else {
+ printf( _("Error reading contents of file '%s'.\n"), token[1] );
+ return;
+ }
}
- data[i+9] = '\0';
+ data[i+setboardLen] = '\0';
SetDataToEngine( data );
SetAutoGo( true );
pgnloaded = 0;
@@ -501,13 +508,20 @@ void cmd_pgnreplay(void)
return;
}
- strcpy( data, "setboard " );
+ const char setboardCmd[] = "setboard ";
+ unsigned int setboardLen = strlen(setboardCmd);
+ strcpy( data, setboardCmd );
int i=0;
while ( epdline[i] != '\n' ) {
- data[i+9] = epdline[i];
- ++i;
+ if (i + setboardLen < MAXSTR - 1) {
+ data[i+setboardLen] = epdline[i];
+ ++i;
+ } else {
+ printf( _("Error reading contents of file '%s'.\n"), token[1] );
+ return;
+ }
}
- data[i+9] = '\0';
+ data[i+setboardLen] = '\0';
SetDataToEngine( data );
SetAutoGo( true );
--
2.31.1

View File

@@ -1,21 +0,0 @@
# Copyright 1999-2021 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
DESCRIPTION="Console based chess interface"
HOMEPAGE="https://www.gnu.org/software/chess/chess.html"
SRC_URI="mirror://gnu/chess/${P}.tar.gz"
LICENSE="GPL-3"
SLOT="0"
KEYWORDS="amd64 ~arm arm64 ppc64 x86"
PATCHES=(
"${FILESDIR}"/${P}-cve-2021-30184.patch # bug 780855
)
src_configure() {
# bug #491088
econf --without-readline
}