Version in base suite: 20130526-3 Base version: unhide_20130526-3 Target version: unhide_20130526-3+deb10u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/u/unhide/unhide_20130526-3.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/u/unhide/unhide_20130526-3+deb10u1.dsc changelog | 9 ++++++ patches/allocate-pid-arrays-from-heap.patch | 40 ++++++++++++++++++++++++++++ patches/series | 1 3 files changed, 50 insertions(+) diff -Nru unhide-20130526/debian/changelog unhide-20130526/debian/changelog --- unhide-20130526/debian/changelog 2018-12-15 16:01:03.000000000 +0000 +++ unhide-20130526/debian/changelog 2019-12-17 12:08:39.000000000 +0000 @@ -1,3 +1,12 @@ +unhide (20130526-3+deb10u1) buster; urgency=medium + + * Team Upload. + * debian/patch/allocate-pid-arrays-from-heap.patch: Added to fix a stack + exhausting. Thanks to Bernhard Übelacker . + (Closes: #945864) + + -- Thiago Andrade Marques Tue, 17 Dec 2019 09:08:39 -0300 + unhide (20130526-3) unstable; urgency=medium * Team upload. diff -Nru unhide-20130526/debian/patches/allocate-pid-arrays-from-heap.patch unhide-20130526/debian/patches/allocate-pid-arrays-from-heap.patch --- unhide-20130526/debian/patches/allocate-pid-arrays-from-heap.patch 1970-01-01 00:00:00.000000000 +0000 +++ unhide-20130526/debian/patches/allocate-pid-arrays-from-heap.patch 2019-12-17 12:08:39.000000000 +0000 @@ -0,0 +1,40 @@ +Description: Allocate pid arrays from the stack + +Author: Bernhard Übelacker +Bug-Debian: https://bugs.debian.org/945864 +Forwarded: no +Last-Update: 2019-12-03 + +--- unhide-20130526.orig/unhide-linux-bruteforce.c ++++ unhide-20130526/unhide-linux-bruteforce.c +@@ -64,14 +64,20 @@ void *funcionThread (void *parametro) + void brute(void) + { + int i=0; +- int allpids[maxpid] ; +- int allpids2[maxpid] ; ++ int* allpids; ++ int* allpids2; + int x; + int y; + int z; + + msgln(unlog, 0, "[*]Starting scanning using brute force against PIDS with fork()\n") ; + ++ allpids = malloc(sizeof(int)*maxpid) ; ++ allpids2 = malloc(sizeof(int)*maxpid) ; ++ if (!allpids || !allpids2) { ++ die(unlog, "Error: Cannot allocate pid arrays ! Exiting."); ++ } ++ + // PID under 301 are reserved for kernel + for(x=0; x < 301; x++) + { +@@ -214,4 +220,7 @@ void brute(void) + } + } + } ++ ++ free(allpids); ++ free(allpids2); + } diff -Nru unhide-20130526/debian/patches/series unhide-20130526/debian/patches/series --- unhide-20130526/debian/patches/series 2018-12-15 15:57:25.000000000 +0000 +++ unhide-20130526/debian/patches/series 2019-12-17 12:08:39.000000000 +0000 @@ -1 +1,2 @@ fix-man +allocate-pid-arrays-from-heap.patch