From e60be2b017fe8c4f7a4fa45579d6cc735ba79090 Mon Sep 17 00:00:00 2001 From: Than Ngo Date: Sep 10 2018 11:27:26 +0000 Subject: Fixed #1554752 - Double free of memory, CVE-2018-6952 --- diff --git a/patch-2.7.6-CVE-2018-6952.patch b/patch-2.7.6-CVE-2018-6952.patch new file mode 100644 index 0000000..4e93f93 --- /dev/null +++ b/patch-2.7.6-CVE-2018-6952.patch @@ -0,0 +1,13 @@ +diff --git a/src/pch.c b/src/pch.c +index e92bc64..a500ad9 100644 +--- a/src/pch.c ++++ b/src/pch.c +@@ -2122,7 +2122,7 @@ pch_swap (void) + } + if (p_efake >= 0) { /* fix non-freeable ptr range */ + if (p_efake <= i) +- n = p_end - i + 1; ++ n = p_end - p_ptrn_lines; + else + n = -i; + p_efake += n;