diff -Nru horgand-1.14/debian/changelog horgand-1.14/debian/changelog --- horgand-1.14/debian/changelog 2011-02-28 10:52:42.000000000 +0000 +++ horgand-1.14/debian/changelog 2013-01-02 14:07:26.000000000 +0000 @@ -1,3 +1,11 @@ +horgand (1.14-5) unstable; urgency=medium + + * Prevent SIGSEGV by fixing a buffer overflow, it was tryng to + strcpy() of an 11 char string (+ '\0') into a 10 char fixed + array. (Closes: #695467) (LP: #891939) + + -- Alessio Treglia Wed, 02 Jan 2013 14:06:58 +0000 + horgand (1.14-4) unstable; urgency=low * Rely on dh-autoreconf rather than call autoreconf -f -i in diff -Nru horgand-1.14/debian/patches/03-buffer_overflow.patch horgand-1.14/debian/patches/03-buffer_overflow.patch --- horgand-1.14/debian/patches/03-buffer_overflow.patch 1970-01-01 00:00:00.000000000 +0000 +++ horgand-1.14/debian/patches/03-buffer_overflow.patch 2013-01-02 14:04:55.000000000 +0000 @@ -0,0 +1,20 @@ +Description: Buffer was too short for chord name +Author: dave@treblig.org +Bug-Ubuntu: https://launchpad.net/bugs/891939 +Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695467 +Forwarded: no +--- + src/Holrgan.h | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +--- horgand.orig/src/Holrgan.h ++++ horgand/src/Holrgan.h +@@ -398,7 +398,7 @@ struct Ch3 + struct Ch4 + + { +- char Nom[10]; ++ char Nom[12]; + int type; + int fund; + int dist1; diff -Nru horgand-1.14/debian/patches/series horgand-1.14/debian/patches/series --- horgand-1.14/debian/patches/series 2010-12-03 10:59:11.000000000 +0000 +++ horgand-1.14/debian/patches/series 2013-01-02 14:03:43.000000000 +0000 @@ -1,2 +1,3 @@ 01-fix_manpage.patch 02-binutils_gold.patch +03-buffer_overflow.patch