mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 03:49:32 +02:00
binutls: Security fix CVE-2017-14932
(From OE-Core rev: 56d6acf145cc7550377588ca3c654d6f86143dfe) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
701eecc7d3
commit
4ad8bd4a60
@@ -37,6 +37,7 @@ SRC_URI = "\
|
|||||||
file://0015-sync-with-OE-libtool-changes.patch \
|
file://0015-sync-with-OE-libtool-changes.patch \
|
||||||
file://CVE-2017-17124.patch \
|
file://CVE-2017-17124.patch \
|
||||||
file://CVE-2017-14930.patch \
|
file://CVE-2017-14930.patch \
|
||||||
|
file://CVE-2017-14932.patch \
|
||||||
"
|
"
|
||||||
S = "${WORKDIR}/git"
|
S = "${WORKDIR}/git"
|
||||||
|
|
||||||
|
|||||||
46
meta/recipes-devtools/binutils/binutils/CVE-2017-14932.patch
Normal file
46
meta/recipes-devtools/binutils/binutils/CVE-2017-14932.patch
Normal file
@@ -0,0 +1,46 @@
|
|||||||
|
From e338894dc2e603683bed2172e8e9f25b29051005 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Alan Modra <amodra@gmail.com>
|
||||||
|
Date: Tue, 26 Sep 2017 09:32:18 +0930
|
||||||
|
Subject: [PATCH] PR22204, Lack of DW_LNE_end_sequence causes "infinite" loop
|
||||||
|
|
||||||
|
PR 22204
|
||||||
|
* dwarf2.c (decode_line_info): Ensure line_ptr stays within
|
||||||
|
bounds in inner loop.
|
||||||
|
|
||||||
|
Upstream-Status: Backport
|
||||||
|
Affects: <= 2.29.1
|
||||||
|
CVE: CVE-2017-14932
|
||||||
|
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
||||||
|
|
||||||
|
---
|
||||||
|
bfd/ChangeLog | 6 ++++++
|
||||||
|
bfd/dwarf2.c | 2 +-
|
||||||
|
2 files changed, 7 insertions(+), 1 deletion(-)
|
||||||
|
|
||||||
|
Index: git/bfd/dwarf2.c
|
||||||
|
===================================================================
|
||||||
|
--- git.orig/bfd/dwarf2.c
|
||||||
|
+++ git/bfd/dwarf2.c
|
||||||
|
@@ -2269,7 +2269,7 @@ decode_line_info (struct comp_unit *unit
|
||||||
|
bfd_vma high_pc = 0;
|
||||||
|
|
||||||
|
/* Decode the table. */
|
||||||
|
- while (! end_sequence)
|
||||||
|
+ while (!end_sequence && line_ptr < line_end)
|
||||||
|
{
|
||||||
|
op_code = read_1_byte (abfd, line_ptr, line_end);
|
||||||
|
line_ptr += 1;
|
||||||
|
Index: git/bfd/ChangeLog
|
||||||
|
===================================================================
|
||||||
|
--- git.orig/bfd/ChangeLog
|
||||||
|
+++ git/bfd/ChangeLog
|
||||||
|
@@ -1,3 +1,9 @@
|
||||||
|
+2017-09-26 Alan Modra <amodra@gmail.com>
|
||||||
|
+
|
||||||
|
+ PR 22204
|
||||||
|
+ * dwarf2.c (decode_line_info): Ensure line_ptr stays within
|
||||||
|
+ bounds in inner loop.
|
||||||
|
+
|
||||||
|
2017-09-24 Alan Modra <amodra@gmail.com>
|
||||||
|
|
||||||
|
PR 22191
|
||||||
Reference in New Issue
Block a user