--- - branch: netbsd-5-0 date: Sun Jan 13 17:14:47 UTC 2013 files: - new: 1.1.1.1.42.1 old: 1.1.1.1 path: src/gnu/dist/grep/lib/getopt.c pathrev: src/gnu/dist/grep/lib/getopt.c@1.1.1.1.42.1 type: modified - new: 1.1.1.1.42.1 old: 1.1.1.1 path: src/gnu/dist/grep/lib/regex.c pathrev: src/gnu/dist/grep/lib/regex.c@1.1.1.1.42.1 type: modified - new: 1.1.1.1.42.1 old: 1.1.1.1 path: src/gnu/dist/grep/src/ansi2knr.c pathrev: src/gnu/dist/grep/src/ansi2knr.c@1.1.1.1.42.1 type: modified - new: 1.2.42.1 old: '1.2' path: src/gnu/dist/grep/src/dfa.c pathrev: src/gnu/dist/grep/src/dfa.c@1.2.42.1 type: modified - new: 1.12.8.1 old: '1.12' path: src/gnu/dist/grep/src/grep.c pathrev: src/gnu/dist/grep/src/grep.c@1.12.8.1 type: modified - new: 1.3.8.1 old: '1.3' path: src/gnu/dist/grep/src/search.c pathrev: src/gnu/dist/grep/src/search.c@1.3.8.1 type: modified id: 20130113T171447Z.21acfd19275b869b9c07a34177e4822022d9dc1c log: "Pull up following revision(s) (requested by apb in ticket #1838):\n\tgnu/dist/grep/src/grep.c: revision 1.14\n\tgnu/dist/grep/src/ansi2knr.c: revision 1.2\n\tgnu/dist/grep/src/search.c: revision 1.4\n\tgnu/dist/grep/src/dfa.c: revision 1.3\n\tgnu/dist/grep/lib/getopt.c: revision 1.2\n\tgnu/dist/grep/lib/regex.c: revision 1.2\nChange several int variables to size_t, ssize_t, or ptrdiff_t.\nThis should fix the bug described in CVE-2012-5667 when an input\nline is so long that its length cannot be stored in an int\nvariable.\nThis change to NetBSD's version of GNU grep 2.5.1 (licenced under\nGPLv2) was made without direct reference to any code licenced\nunder GPLv3.\nThanks to Ignatios Souvatzis for looking at GPLv3-derived\npatches and describing the problem in general terms. Thanks to\npkgsrc/devel/coccinelle for helping me find places where int\nvariables were used to store the results from pointer arithmetic\nor strlen(). Thanks to Martin Husemann for testing.\n" module: src subject: 'CVS commit: [netbsd-5-0] src/gnu/dist/grep' unixtime: '1358097287' user: bouyer