components/pcre/patches/04-pcre_compile.c.patch
changeset 7522 feedb7e27aaf
parent 7521 149969f54db5
child 7523 08bd9d3ea76c
--- a/components/pcre/patches/04-pcre_compile.c.patch	Wed Dec 21 11:02:41 2016 -0800
+++ /dev/null	Thu Jan 01 00:00:00 1970 +0000
@@ -1,28 +0,0 @@
-This patch fixes CVE-2016-1283, filed upstream as:
-
-  https://bugs.exim.org/show_bug.cgi?id=1767
-
-See also:
-
-  http://www.cvedetails.com/cve-details.php?t=1&cve_id=cve-2016-1283
-
-This problem has already been fixed upstream in the svn code repository at:
-
-  svn://vcs.exim.org/pcre/code/trunk
-
---- pcre-8.38/pcre_compile.c.orig	2016-03-02 10:28:48.735223798 -0800
-+++ pcre-8.38/pcre_compile.c	2016-03-02 10:30:50.856995461 -0800
-@@ -7274,7 +7274,12 @@
-           so far in order to get the number. If the name is not found, leave
-           the value of recno as 0 for a forward reference. */
- 
--          else
-+          /* This patch (removing "else") fixes a problem when a reference is
-+          to multiple identically named nested groups from within the nest.
-+          Once again, it is not the "proper" fix, and it results in an
-+          over-allocation of memory. */
-+
-+          /* else */
-             {
-             ng = cd->named_groups;
-             for (i = 0; i < cd->names_found; i++, ng++)