Patch for cve-2009-0887
int rather than unsigned char is used to index an array.

upstream status: fixed upstream

Index: sid/libpam/pam_misc.c
===================================================================
--- sid.orig/libpam/pam_misc.c	2009-07-24 12:22:34.000000000 -0400
+++ sid/libpam/pam_misc.c	2009-07-24 12:22:45.000000000 -0400
@@ -59,10 +59,11 @@
 
      /* initialize table */
      for (i=1; i<256; table[i++] = '\0');
-     for (i=0; format[i] ; table[(int)format[i++]] = 'y');
+     for (i=0; format[i] ;
+	  table[(unsigned char)format[i++]] = 'y');
 
      /* look for first non-format char */
-     while (*from && table[(int)*from]) {
+     while (*from && table[(unsigned char)*from]) {
 	  ++from;
      }
 
@@ -92,7 +93,7 @@
             remains */
      } else if (*from) {
 	 /* simply look for next blank char */
-	 for (end=from; *end && !table[(int)*end]; ++end);
+	 for (end=from; *end && !table[(unsigned char)*end]; ++end);
      } else {
 	 return (*next = NULL);                    /* no tokens left */
      }