summaryrefslogtreecommitdiff
path: root/www/mozilla/files/patch-256316
diff options
context:
space:
mode:
authorJoe Marcus Clarke <marcus@FreeBSD.org>2004-09-28 03:18:41 +0000
committerJoe Marcus Clarke <marcus@FreeBSD.org>2004-09-28 03:18:41 +0000
commita26627391935351565007904d14534e7b7bc3bd2 (patch)
tree56a86b9eea355e4eda917a2cf045c0cc1f969542 /www/mozilla/files/patch-256316
parents/BROKEN/IGNORE/ since the package builds but is "too unstable" on 5.x (diff)
Patch the various recently reported security vulnerabilities in Mozilla.
This is being done instead of the update to 1.7.3 since the update breaks all dependent ports, and that many changes is not a good thing to do during a freeze. This update covers the following Mozilla bugs: 245066 226669 250862 255067 256316 257317 258005 Thanks to nectar for scraping all of these patches together. Obtained from: Mozilla CVS Approved by: portmgr (implicit)
Notes
Notes: svn path=/head/; revision=118474
Diffstat (limited to 'www/mozilla/files/patch-256316')
-rw-r--r--www/mozilla/files/patch-25631618
1 files changed, 18 insertions, 0 deletions
diff --git a/www/mozilla/files/patch-256316 b/www/mozilla/files/patch-256316
new file mode 100644
index 000000000000..147d15e5303d
--- /dev/null
+++ b/www/mozilla/files/patch-256316
@@ -0,0 +1,18 @@
+Index: mozilla/netwerk/dns/src/nsIDNService.cpp
+===================================================================
+RCS file: /cvsroot/mozilla/netwerk/dns/src/nsIDNService.cpp,v
+retrieving revision 1.18
+retrieving revision 1.18.10.1
+diff -u -r1.18 -r1.18.10.1
+--- netwerk/dns/src/nsIDNService.cpp 3 Apr 2004 07:32:18 -0000 1.18
++++ netwerk/dns/src/nsIDNService.cpp 27 Aug 2004 11:23:21 -0000 1.18.10.1
+@@ -242,6 +242,9 @@
+
+ NS_IMETHODIMP nsIDNService::Normalize(const nsACString & input, nsACString & output)
+ {
++ // protect against bogus input
++ NS_ENSURE_TRUE(IsUTF8(input), NS_ERROR_UNEXPECTED);
++
+ nsAutoString outUTF16;
+ nsresult rv = stringPrep(NS_ConvertUTF8toUTF16(input), outUTF16);
+ if (NS_SUCCEEDED(rv))