# HG changeset patch # User Brian Utterback # Date 1321479836 28800 # Node ID 77d84b526350695ec91c11ea0360554a0e326e62 # Parent f34d51fb8646510459f674eedc2f38f1ecd83f0d 7090778 Problem with network/quagga diff -r f34d51fb8646 -r 77d84b526350 components/quagga/patches/23-cve-2011-3327.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/components/quagga/patches/23-cve-2011-3327.patch Wed Nov 16 13:43:56 2011 -0800 @@ -0,0 +1,30 @@ +--- bgpd/bgp_ecommunity.c ++++ bgpd/bgp_ecommunity.c +@@ -568,6 +568,13 @@ + + for (i = 0; i < ecom->size; i++) + { ++ /* Make sure the size is large enough. */ ++ while (str_pnt + ECOMMUNITY_STR_DEFAULT_LEN >= str_size) ++ { ++ str_size *= 2; ++ str_buf = XREALLOC (MTYPE_ECOMMUNITY_STR, str_buf, str_size); ++ } ++ + /* Space between each value. */ + if (! first) + str_buf[str_pnt++] = ' '; +@@ -610,13 +617,6 @@ + break; + } + +- /* Make it sure size is enough. */ +- while (str_pnt + ECOMMUNITY_STR_DEFAULT_LEN >= str_size) +- { +- str_size *= 2; +- str_buf = XREALLOC (MTYPE_ECOMMUNITY_STR, str_buf, str_size); +- } +- + /* Put string into buffer. */ + if (encode == ECOMMUNITY_ENCODE_AS) + {