From 13b65f01132c41be9ab8d9f92c2c5ca605c366d8 Mon Sep 17 00:00:00 2001 From: Louis Burda Date: Sat, 29 May 2021 14:24:31 +0200 Subject: changed repo structure and commited releease files such that default docker-compose worklow commands work in testvm --- src/patches/flagstore1.diff | 17 +++++++++++++++++ src/patches/flagstore2.diff | 11 +++++++++++ 2 files changed, 28 insertions(+) create mode 100644 src/patches/flagstore1.diff create mode 100644 src/patches/flagstore2.diff (limited to 'src/patches') diff --git a/src/patches/flagstore1.diff b/src/patches/flagstore1.diff new file mode 100644 index 0000000..f0f8d4a --- /dev/null +++ b/src/patches/flagstore1.diff @@ -0,0 +1,17 @@ +--- a/service/src/safe_util.c ++++ b/service/src/safe_util.c +@@ -78,13 +78,12 @@ void + freadstr(FILE *f, char **dst) + { + size_t start, len, tmp; +- char c; + + /* VULN #1: BAD CAST */ + /* see documentation/README.md for more details */ + + start = ftell(f); +- for (len = 0; (c = fgetc(f)) != EOF && c; len++); ++ for (len = 0; fgetc(f) > 0; len++); + fseek(f, start, SEEK_SET); + + *dst = checkp(calloc(1, len + 1)); diff --git a/src/patches/flagstore2.diff b/src/patches/flagstore2.diff new file mode 100644 index 0000000..b34a0c0 --- /dev/null +++ b/src/patches/flagstore2.diff @@ -0,0 +1,11 @@ +--- a/service/src/safe_util.c ++++ b/service/src/safe_util.c +@@ -58,7 +58,7 @@ mhash(const char *str, int len) + srand(v); + + for (bp = buf, i = 0; i < MHASHLEN / 2; i++) +- bp += sprintf(bp, "%02x", str[i % len] ^ (rand() % 256)); ++ bp += sprintf(bp, "%02x", (unsigned char) str[i % len] ^ (rand() % 256)); + + return buf; + } -- cgit v1.2.3-71-gd317