Add EN-20:01, EN-20:01, and SA-20:01 through SA-20:03.

Approved by: so
svn path=/head/; revision=53835
2020-01-28 19:12:55 +00:00 · 2020-01-28 19:12:55 +00:00 · f6a49b1e07 · 2020-12-08 03:00:23 +00:00
commit f6a49b1e07
parent b6c3f1683a
17 changed files with 894 additions and 0 deletions
--- a/share/security/patches/SA-20:01/libfetch.patch
+++ b/share/security/patches/SA-20:01/libfetch.patch
@ -0,0 +1,29 @@
+--- lib/libfetch/fetch.c.orig
+++ lib/libfetch/fetch.c
+@@ -332,6 +332,8 @@
+ 		}
+ 		if (dlen-- > 0)
+ 			*dst++ = c;
+		else
+			return (NULL);
+ 	}
+ 	return (s);
+ }
+@@ -381,11 +383,15 @@
+ 	if (p && *p == '@') {
+ 		/* username */
+ 		q = fetch_pctdecode(u->user, URL, URL_USERLEN);
+		if (q == NULL)
+			goto ouch;
+ 
+ 		/* password */
+-		if (*q == ':')
+		if (*q == ':') {
+ 			q = fetch_pctdecode(u->pwd, q + 1, URL_PWDLEN);
+-
+			if (q == NULL)
+				goto ouch;
+		}
+ 		p++;
+ 	} else {
+ 		p = URL;