From 235d74f9546cab8a468e95a9bfd221f3d6ec77c7 Mon Sep 17 00:00:00 2001 From: Joe Marcus Clarke Date: Tue, 28 Sep 2004 03:20:33 +0000 Subject: Patch the various recently reported security vulnerabilities in Mozilla. This update covers the following Mozilla bugs: 245066 226669 250862 255067 256316 257317 258005 Thanks to nectar for scraping all of these patches together. Obtained from: Mozilla CVS Approved by: portmgr (implicit) --- www/mozilla-devel/files/patch-256316 | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 www/mozilla-devel/files/patch-256316 (limited to 'www/mozilla-devel/files/patch-256316') diff --git a/www/mozilla-devel/files/patch-256316 b/www/mozilla-devel/files/patch-256316 new file mode 100644 index 000000000000..147d15e5303d --- /dev/null +++ b/www/mozilla-devel/files/patch-256316 @@ -0,0 +1,18 @@ +Index: mozilla/netwerk/dns/src/nsIDNService.cpp +=================================================================== +RCS file: /cvsroot/mozilla/netwerk/dns/src/nsIDNService.cpp,v +retrieving revision 1.18 +retrieving revision 1.18.10.1 +diff -u -r1.18 -r1.18.10.1 +--- netwerk/dns/src/nsIDNService.cpp 3 Apr 2004 07:32:18 -0000 1.18 ++++ netwerk/dns/src/nsIDNService.cpp 27 Aug 2004 11:23:21 -0000 1.18.10.1 +@@ -242,6 +242,9 @@ + + NS_IMETHODIMP nsIDNService::Normalize(const nsACString & input, nsACString & output) + { ++ // protect against bogus input ++ NS_ENSURE_TRUE(IsUTF8(input), NS_ERROR_UNEXPECTED); ++ + nsAutoString outUTF16; + nsresult rv = stringPrep(NS_ConvertUTF8toUTF16(input), outUTF16); + if (NS_SUCCEEDED(rv)) -- cgit v1.2.3