Package: w3m / 0.5.3+git20230121-2.1

Metadata

Package Version Patches format
w3m 0.5.3+git20230121-2.1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0001 Update German message catalogue.patch | (download)

po/de.po | 15 7 + 8 - 0 !
1 file changed, 7 insertions(+), 8 deletions(-)

 update german message catalogue

0002 CVE 2023 4255.patch | (download)

etc.c | 10 8 + 2 - 0 !
1 file changed, 8 insertions(+), 2 deletions(-)

 [patch] fix oob access due to multiple backspaces

Commit 419ca82d57 (Fix m17n backspace handling causes out-of-bounds
write in checkType) introduced an incomplete fix.

In function checkType we store the length of the previous multi-char
character in a buffer plens_buffer with pointer plens pointing to the
current position inside the buffer. When encountering a backspace plens
is set to the previous position without a bounds check. This will lead
to plens being out of bounds if we get more backspaces than we have
processed multi-char characters before.

If we are at the beginning of the buffer do not decrement and set plen
(the current length) to 0.

This also fixes GH Issue #270 [BUG] Out of bound read in Strnew_size ,
Str.c:61

If the above explanation does sound weird it's because I didn't fully
grok that function. :-)