diff -Nru teeworlds-0.6.2+dfsg/debian/changelog teeworlds-0.6.2+dfsg/debian/changelog --- teeworlds-0.6.2+dfsg/debian/changelog 2013-05-05 07:49:38.000000000 +0000 +++ teeworlds-0.6.2+dfsg/debian/changelog 2015-08-20 21:55:28.000000000 +0000 @@ -1,3 +1,16 @@ +teeworlds (0.6.2+dfsg-2~build0.14.04.1) trusty-security; urgency=medium + + * fake sync from Debian (LP: #1486946) + + -- Steve Beattie Thu, 20 Aug 2015 14:55:28 -0700 + +teeworlds (0.6.2+dfsg-2) unstable; urgency=high + + * Fix a server crash that is remotely exploitable. (Closes: #770514) + - Add fixed_a_server_crash.patch, cherry picked from 0.6.3. + + -- Felix Geyer Sun, 23 Nov 2014 16:45:28 +0100 + teeworlds (0.6.2+dfsg-1) unstable; urgency=low * New upstream release. diff -Nru teeworlds-0.6.2+dfsg/debian/patches/fixed_a_server_crash.patch teeworlds-0.6.2+dfsg/debian/patches/fixed_a_server_crash.patch --- teeworlds-0.6.2+dfsg/debian/patches/fixed_a_server_crash.patch 1970-01-01 00:00:00.000000000 +0000 +++ teeworlds-0.6.2+dfsg/debian/patches/fixed_a_server_crash.patch 2014-11-23 15:45:06.000000000 +0000 @@ -0,0 +1,24 @@ +From a766cb44bcffcdb0b88e776d01c5ee1323d44f85 Mon Sep 17 00:00:00 2001 +From: oy +Date: Thu, 20 Nov 2014 18:13:54 +0100 +Subject: [PATCH] fixed a server crash + +--- + src/engine/server/server.cpp | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/src/engine/server/server.cpp b/src/engine/server/server.cpp +index 581c7e6..ab0f312 100644 +--- a/src/engine/server/server.cpp ++++ b/src/engine/server/server.cpp +@@ -845,8 +845,8 @@ void CServer::ProcessClientPacket(CNetChunk *pPacket) + return; + + int Chunk = Unpacker.GetInt(); +- int ChunkSize = 1024-128; +- int Offset = Chunk * ChunkSize; ++ unsigned int ChunkSize = 1024-128; ++ unsigned int Offset = Chunk * ChunkSize; + int Last = 0; + + // drop faulty map data requests diff -Nru teeworlds-0.6.2+dfsg/debian/patches/series teeworlds-0.6.2+dfsg/debian/patches/series --- teeworlds-0.6.2+dfsg/debian/patches/series 2013-05-04 12:50:02.000000000 +0000 +++ teeworlds-0.6.2+dfsg/debian/patches/series 2014-11-23 15:45:25.000000000 +0000 @@ -2,3 +2,4 @@ new-wavpack.patch set-data-dir.patch pass-build-flags.patch +fixed_a_server_crash.patch