[pacman-dev] small libdownload patch

Xavier shiningxc at gmail.com
Mon Nov 10 14:15:32 EST 2008


On Mon, Nov 10, 2008 at 7:35 PM, Aaron Griffin <aaronmgriffin at gmail.com> wrote:
> On Mon, Nov 10, 2008 at 12:24 PM, Johannes Krampf
> <Johannes.Krampf at htw-dresden.de> wrote:
>> Hi,
>>
>> I've found a small compatibility problem and static checking a minor
>> buffer overflow in libdownload. Please excuse if this should already
>> be fixed in git.
>>
>> Here's the patch, <stdint.h> is included for uintptr_t and fscanf
>> writes a trailing \0, therefore requiring 1025 bytes in the worst
>> case:
>
> Just an FYI, NetBSD's libfetch code compiles on linux with a minor
> modification. So I think we're planning on switching to that.
>
> In fact, I will try to get a libfetch package in the wild tonight. I
> know Xavier did some work with the pacman code to see if it'd work.
> Any status on this?

Unfortunately nothing at all since our last mail exchange, I am too
busy with work :P



More information about the pacman-dev mailing list