svn commit: r392587 - in head/devel/pcre: . files

[Mark Felder]

Author: feld
Date: Mon Jul 20 15:21:25 2015
New Revision: 392587
URL: https://svnweb.freebsd.org/changeset/ports/392587

Log:
  Apply upstream fixes for a buffer overflow issue:
  1571 Fix buffer overflow for forward reference within backward assertion
  with excess closing parenthesis. Bugzilla 1651.
  
  Obtained from:	PCRE svn (r1571)
  MFH:		2015Q3
  Security:	8a1d0e63-1e07-11e5-b43d-002590263bf5
  Security:	CVE-2015-5073

Added:
  head/devel/pcre/files/patch-CVE-2015-5073   (contents, props changed)
Modified:
  head/devel/pcre/Makefile

Modified: head/devel/pcre/Makefile
==============================================================================
--- head/devel/pcre/Makefile	Mon Jul 20 15:20:23 2015	(r392586)
+++ head/devel/pcre/Makefile	Mon Jul 20 15:21:25 2015	(r392587)
@@ -3,7 +3,7 @@
 
 PORTNAME=	pcre
 PORTVERSION=	8.37
-PORTREVISION=	1
+PORTREVISION=	2
 CATEGORIES=	devel
 MASTER_SITES=	SF/${PORTNAME}/${PORTNAME}/${PORTVERSION} \
 		ftp://ftp.csx.cam.ac.uk/pub/software/programming/${PORTNAME}/ \

Added: head/devel/pcre/files/patch-CVE-2015-5073
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/devel/pcre/files/patch-CVE-2015-5073	Mon Jul 20 15:21:25 2015	(r392587)
@@ -0,0 +1,11 @@
+--- pcre_compile.c.orig	2015/06/22 09:38:41	1570
++++ pcre_compile.c	2015/06/23 16:34:53	1571
+@@ -9449,7 +9449,7 @@
+ exceptional ones forgo this. We scan the pattern to check that they are fixed
+ length, and set their lengths. */
+ 
+-if (cd->check_lookbehind)
++if (errorcode == 0 && cd->check_lookbehind)
+   {
+   pcre_uchar *cc = (pcre_uchar *)codestart;
+