summaryrefslogtreecommitdiff
path: root/www/firefox35/files/patch-256316
diff options
context:
space:
mode:
authorJoe Marcus Clarke <marcus@FreeBSD.org>2004-09-28 03:24:41 +0000
committerJoe Marcus Clarke <marcus@FreeBSD.org>2004-09-28 03:24:41 +0000
commit9117080c8cad1c52d48353ffa32ca6aef1e4d28a (patch)
tree04e19765bcb2a19c30d1773dfd27a70855396e17 /www/firefox35/files/patch-256316
parentPatch the various recently reported security vulnerabilities in Mozilla. (diff)
Patch the various recently reported security vulnerabilities in Mozilla.
This is being done instead of the update to 1.0 PR 1 since we're in a ports freeze, and too many big changes is not a good idea. This update covers the following Mozilla bugs: 250862 255067 256316 Thanks to nectar for scraping all of these patches together. Obtained from: Mozilla CVS Approved by: portmgr (implicit)
Notes
Notes: svn path=/head/; revision=118476
Diffstat (limited to 'www/firefox35/files/patch-256316')
-rw-r--r--www/firefox35/files/patch-25631618
1 files changed, 18 insertions, 0 deletions
diff --git a/www/firefox35/files/patch-256316 b/www/firefox35/files/patch-256316
new file mode 100644
index 000000000000..147d15e5303d
--- /dev/null
+++ b/www/firefox35/files/patch-256316
@@ -0,0 +1,18 @@
+Index: mozilla/netwerk/dns/src/nsIDNService.cpp
+===================================================================
+RCS file: /cvsroot/mozilla/netwerk/dns/src/nsIDNService.cpp,v
+retrieving revision 1.18
+retrieving revision 1.18.10.1
+diff -u -r1.18 -r1.18.10.1
+--- netwerk/dns/src/nsIDNService.cpp 3 Apr 2004 07:32:18 -0000 1.18
++++ netwerk/dns/src/nsIDNService.cpp 27 Aug 2004 11:23:21 -0000 1.18.10.1
+@@ -242,6 +242,9 @@
+
+ NS_IMETHODIMP nsIDNService::Normalize(const nsACString & input, nsACString & output)
+ {
++ // protect against bogus input
++ NS_ENSURE_TRUE(IsUTF8(input), NS_ERROR_UNEXPECTED);
++
+ nsAutoString outUTF16;
+ nsresult rv = stringPrep(NS_ConvertUTF8toUTF16(input), outUTF16);
+ if (NS_SUCCEEDED(rv))