- fix for [CVE-2007-2026]

Changed files:
    file-DoS.patch -> 1.1

diff --git a/file-DoS.patch b/file-DoS.patch
new file mode 100644 (file)
index 0000000..d358214
--- /dev/null
+++ b/file-DoS.patch
@@ -0,0 +1,13 @@
+--- file-4.20/magic/Magdir/msdos.orig  2007-04-20 08:12:44.000000000 +0000
++++ file-4.20/magic/Magdir/msdos       2007-04-20 08:16:55.000000000 +0000
+@@ -13,8 +13,8 @@
+ 
+ # OS/2 batch files are REXX. the second regex is a bit generic, oh well
+ # the matched commands seem to be common in REXX and uncommon elsewhere
+-100 regex/c =^\\s*call\\s+rxfuncadd.*sysloadfu OS/2 REXX batch file text
+-100 regex/c =^\\s*say\ ['"] OS/2 REXX batch file text
++100 regex/c =^[\ \t]{0,999}call[\ \t]{1,999}rxfu OS/2 REXX batch file text
++100 regex/c =^[[:space:]]{0,999}say\ ['"] OS/2 REXX batch file text
+ 
+ 0     leshort         0x14c   MS Windows COFF Intel 80386 object file
+ #>4   ledate          x       stamp %s