From afaeef6a87a5d1f9fc8cd735a0750f394bdc393d Mon Sep 17 00:00:00 2001
From: Josh Boyer <jwboyer@fedoraproject.org>
Date: Tue, 26 Nov 2013 12:20:03 -0500
Subject: CVE-2013-6382 xfs: missing check for ZERO_SIZE_PTR (rhbz 1033603
 1034670)

---
 kernel.spec | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'kernel.spec')

diff --git a/kernel.spec b/kernel.spec
index 2ddb8248b..edafe2507 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -766,6 +766,9 @@ Patch25155: libertas-potential-oops-in-debugfs.patch
 #CVE-2013-6380 rhbz 1033593 1034304
 Patch25156: aacraid-prevent-invalid-pointer-dereference.patch
 
+#CVE-2013-6382 rhbz 1033603 1034670
+Patch25157: xfs-underflow-bug-in-xfs_attrlist_by_handle.patch
+
 # END OF PATCH DEFINITIONS
 
 %endif
@@ -1500,6 +1503,9 @@ ApplyPatch libertas-potential-oops-in-debugfs.patch
 #CVE-2013-6380 rhbz 1033593 1034304
 ApplyPatch aacraid-prevent-invalid-pointer-dereference.patch
 
+#CVE-2013-6382 rhbz 1033603 1034670
+ApplyPatch xfs-underflow-bug-in-xfs_attrlist_by_handle.patch
+
 # END OF PATCH APPLICATIONS
 
 %endif
@@ -2303,6 +2309,9 @@ fi
 #                                    ||----w |
 #                                    ||     ||
 %changelog
+* Tue Nov 26 2013 Josh Boyer <jwboyer@fedoraproject.org>
+- CVE-2013-6382 xfs: missing check for ZERO_SIZE_PTR (rhbz 1033603 1034670)
+
 * Mon Nov 25 2013 Josh Boyer <jwboyer@fedoraproject.org>
 - CVE-2013-6380 aacraid: invalid pointer dereference (rhbz 1033593 1034304)
 - CVE-2013-6378 libertas: potential oops in debugfs (rhbz 1033578 1034183)
-- 
cgit