#! /bin/sh /usr/share/dpatch/dpatch-run ## 83_CVE-2009-0949.dpatch by Nico Golde ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: fix null ptr dereference CVE-2009-0949 @DPATCH@ diff -urNad cupsys-1.2.7~/scheduler/ipp.c cupsys-1.2.7/scheduler/ipp.c --- cupsys-1.2.7~/scheduler/ipp.c 2006-10-20 20:35:41.000000000 +0000 +++ cupsys-1.2.7/scheduler/ipp.c 2009-05-25 11:05:44.000000000 +0000 @@ -298,7 +298,7 @@ */ attr = con->request->attrs; - if (attr && !strcmp(attr->name, "attributes-charset") && + if (attr && attr->name && !strcmp(attr->name, "attributes-charset") && (attr->value_tag & IPP_TAG_MASK) == IPP_TAG_CHARSET) charset = attr; else @@ -307,7 +307,7 @@ if (attr) attr = attr->next; - if (attr && !strcmp(attr->name, "attributes-natural-language") && + if (attr && attr->name && !strcmp(attr->name, "attributes-natural-language") && (attr->value_tag & IPP_TAG_MASK) == IPP_TAG_LANGUAGE) language = attr; else