XFree86-xterm-DECUDK-security-fix.patch

   1 --- xc/programs/xterm/misc.c.xterm-DECUDK-security-fix  2001-10-23 21:21:24.000000000 -0400
   2 +++ xc/programs/xterm/misc.c    2003-04-03 11:00:48.000000000 -0500
   3 @@ -1649,6 +1649,7 @@
   4                                 reset_decudk();
   5
   6                         while (*cp) {
   7 +                               char *base = cp;
   8                                 char *str = (char *)malloc(strlen(cp) + 2);
   9                                 unsigned key = 0;
  10                                 int len = 0;
  11 @@ -1675,6 +1676,8 @@
  12                                 }
  13                                 if (*cp == ';')
  14                                         cp++;
  15 +                               if (cp == base) /* badly-formed sequence - bail out */
  16 +                                       break;
  17                         }
  18                 }
  19                 break;