# HG changeset patch
# User Pascal Bellard <pascal.bellard@slitaz.org>
# Date 1450284847 -3600
# Node ID 99ae478b65400593a04bfc688c5d651de1f6d1f5
# Parent  b7e3c3f6500e2b20341a197e1228437d18b8b556
grub2: CVE-2015-8370 fix

diff -r b7e3c3f6500e -r 99ae478b6540 grub2/receipt
--- a/grub2/receipt	Wed Dec 16 17:40:23 2015 +0200
+++ b/grub2/receipt	Wed Dec 16 17:54:07 2015 +0100
@@ -18,8 +18,9 @@
 # Rules to configure and make the package.
 compile_rules()
 {
-	cd $src
-	
+	# CVE-2015-8370
+	sed -i "s/'.b'/& \&\& cur_len/" grub-core/lib/crypto.c grub-core/normal/auth.c
+
 	# Fixes for flex 2.5.37
 	export CFLAGS="-Wno-error=sign-compare"
 	sed -i 's/YY_FATAL_ERROR/REMOVED_&/' grub-core/script/yylex.l