- added; fixes CVE-2006-5467.

Changed files:
    ruby-1.8.5-cgi-dos-1.patch -> 1.1

diff --git a/ruby-1.8.5-cgi-dos-1.patch b/ruby-1.8.5-cgi-dos-1.patch
new file mode 100644 (file)
index 0000000..a563c65
--- /dev/null
+++ b/ruby-1.8.5-cgi-dos-1.patch
@@ -0,0 +1,11 @@
+--- lib/cgi.rb.orig    2006-08-22 18:38:19.000000000 +0900
++++ lib/cgi.rb 2006-11-03 00:18:53.000000000 +0900
+@@ -1018,7 +1018,7 @@ class CGI
+               else
+                 stdinput.read(content_length)
+               end
+-          if c.nil?
++          if c.nil? || c.empty?
+             raise EOFError, "bad content body"
+           end
+           buf.concat(c)