Description: Fix for CVE-2006-0048 Author: Cédric Delfosse Origin: vendor Bug-Debian: http://bugs.debian.org/360571 Last-Update: 2006-04-14 --- a/src/write.c +++ b/src/write.c @@ -241,6 +241,9 @@ if( flags.separator && ( out == stdout ) ) /* FIXME: sucks? */ color( c_SEPARATOR, stdout, SEPARATOR "\n" ); + /* Temporary fix for CVE-2006-0048 */ + if (buflen < 0) buflen = 0; + switch ( flavour ) { case HEX_ASCII_DUMP: out_xa( out, buf, buflen );