diff options
Diffstat (limited to 'patches/source/subversion/subversion.CVE-2015-5343.diff')
| -rw-r--r-- | patches/source/subversion/subversion.CVE-2015-5343.diff | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/patches/source/subversion/subversion.CVE-2015-5343.diff b/patches/source/subversion/subversion.CVE-2015-5343.diff new file mode 100644 index 000000000..59482aeec --- /dev/null +++ b/patches/source/subversion/subversion.CVE-2015-5343.diff @@ -0,0 +1,16 @@ +--- ./subversion/mod_dav_svn/util.c.orig 2013-11-14 15:11:33.000000000 -0600 ++++ ./subversion/mod_dav_svn/util.c 2016-04-05 13:02:22.610756129 -0500 +@@ -753,7 +753,12 @@ + + if (content_length) + { +- buf = svn_stringbuf_create_ensure(content_length, pool); ++ /* Do not allocate more than 1 MB until we receive request body. */ ++ apr_size_t alloc_len = 1 * 1024 *1024; ++ if (content_length < alloc_len) ++ alloc_len = (apr_size_t) content_length; ++ ++ buf = svn_stringbuf_create_ensure(alloc_len, pool); + } + else + { |