Fix buffer overflow problem.

References:
	http://www.lac.co.jp/security/snsadv/32.html (not yet available)
	http://mi.med.tohoku.ac.jp/~satodai/w3m-dev/200106.month/2066.html
	http://mi.med.tohoku.ac.jp/~satodai/w3m-dev/200106.month/2067.html

1 files changed, 28 insertions, 0 deletions

diff --git a/www/w3m/files/patch-mimehead.c b/www/w3m/files/patch-mimehead.c
new file mode 100644
index 000000000000..1d1a81c3cb3b
--- /dev/null
+++ b/www/w3m/files/patch-mimehead.c
@@ -0,0 +1,28 @@
+--- mimehead.c.orig	Fri Mar 23 10:49:53 2001
++++ mimehead.c	Tue Jun 19 21:46:21 2001
+@@ -166,21 +166,20 @@
+ Str
+ decodeWord(char **ow)
+ {
+-    char charset[32];
+     char *p, *w = *ow;
+     char method;
+     Str a = Strnew();
++    Str charset = Strnew();
+ 
+     if (*w != '=' || *(w + 1) != '?')
+ 	goto convert_fail;
+     w += 2;
+-    for (p = charset; *w != '?'; w++) {
++    for (; *w != '?'; w++) {
+ 	if (*w == '\0')
+ 	    goto convert_fail;
+-	*(p++) = *w;
++	Strcat_char(charset,*w);
+     }
+-    *p = '\0';
+-    if (strcasecmp(charset, J_CHARSET) != 0) {
++    if (Strcasecmp_charp(charset, J_CHARSET) != 0) {
+ 	/* NOT ISO-2022-JP encoding ... don't convert */
+ 	goto convert_fail;
+     }