# HG changeset patch # User Sebastien Jodogne # Date 1481812660 -3600 # Node ID 8a20cd67b2839b30b049feb98b153afde922e04f # Parent 727670c5c125d6c6931c53f0bdcc143cd5710861 missing file diff -r 727670c5c125 -r 8a20cd67b283 Resources/Orthanc/Resources/Patches/dcmtk-3.6.0-dulparse-vulnerability.patch --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/Resources/Orthanc/Resources/Patches/dcmtk-3.6.0-dulparse-vulnerability.patch Thu Dec 15 15:37:40 2016 +0100 @@ -0,0 +1,29 @@ +diff -urEb dcmtk-3.6.0.orig/dcmnet/libsrc/dulparse.cc dcmtk-3.6.0/dcmnet/libsrc/dulparse.cc +--- dcmtk-3.6.0.orig/dcmnet/libsrc/dulparse.cc 2010-12-01 09:26:36.000000000 +0100 ++++ dcmtk-3.6.0/dcmnet/libsrc/dulparse.cc 2016-12-02 15:58:49.930540033 +0100 +@@ -393,6 +393,8 @@ + return cond; + + buf += length; ++ if (presentationLength < length) ++ return EC_MemoryExhausted; + presentationLength -= length; + DCMNET_TRACE("Successfully parsed Abstract Syntax"); + break; +@@ -404,12 +406,16 @@ + cond = LST_Enqueue(&context->transferSyntaxList, (LST_NODE*)subItem); + if (cond.bad()) return cond; + buf += length; ++ if (presentationLength < length) ++ return EC_MemoryExhausted; + presentationLength -= length; + DCMNET_TRACE("Successfully parsed Transfer Syntax"); + break; + default: + cond = parseDummy(buf, &length, presentationLength); + buf += length; ++ if (presentationLength < length) ++ return EC_MemoryExhausted; + presentationLength -= length; + break; + } diff -r 727670c5c125 -r 8a20cd67b283 Resources/SyncOrthancFolder.py --- a/Resources/SyncOrthancFolder.py Thu Dec 15 12:36:20 2016 +0100 +++ b/Resources/SyncOrthancFolder.py Thu Dec 15 15:37:40 2016 +0100 @@ -121,6 +121,7 @@ 'Resources/MinGW-W64-Toolchain32.cmake', 'Resources/MinGW-W64-Toolchain64.cmake', 'Resources/MinGWToolchain.cmake', + 'Resources/Patches/dcmtk-3.6.0-dulparse-vulnerability.patch', 'Resources/Patches/dcmtk-3.6.0-mingw64.patch', 'Resources/Patches/dcmtk-3.6.0-speed.patch', 'Resources/Patches/dcmtk-3.6.1-speed.patch',