- saved from portage. see also GLSA 200510-25

Changed files:
    ethereal-0.10.13-fix-irc-loop-DoS-CVE-2005-3313.diff -> 1.1

diff --git a/ethereal-0.10.13-fix-irc-loop-DoS-CVE-2005-3313.diff b/ethereal-0.10.13-fix-irc-loop-DoS-CVE-2005-3313.diff
new file mode 100644 (file)
index 0000000..fe5f879
--- /dev/null
+++ b/ethereal-0.10.13-fix-irc-loop-DoS-CVE-2005-3313.diff
@@ -0,0 +1,20 @@
+--- trunk/epan/dissectors/packet-irc.c 2005/09/23 21:33:02     15985
++++ trunk/epan/dissectors/packet-irc.c 2005/10/24 02:35:43     16290
+@@ -86,6 +86,17 @@
+                        * Find the end of the line.
+                        */
+                       linelen = tvb_find_line_end(tvb, offset, -1, &next_offset, FALSE);
++                      if (next_offset == offset) {
++                              /*
++                               * XXX - we really want the "show data a
++                               * line at a time" loops in various
++                               * dissectors to do reassembly and to
++                               * throw an exception if there's no
++                               * line ending in the current packet
++                               * and we're not doing reassembly.
++                               */
++                              break;
++                      }
+ 
+                       if (linelen != 0)
+                       {