mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-22 06:32:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

rxvt-unicode: fix CVE-2021-33477

Browse Source 
Backport patch to fix CVE-2021-33477 for rxvt-unicode.

(From OE-Core rev: ad7582bcef28da48b9a7f97eb43805f393f4979a)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Kai Kang
2021-07-06 15:42:23 +08:00
committed by Richard Purdie
parent 210f804760
commit 8d4748254e
2 changed files with 36 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
meta/recipes-sato/rxvt-unicode/rxvt-unicode/rxvt-unicode-fix-CVE-2021-33477.patch Normal file
View File

@@ -0,0 +1,33 @@
Backport patch to fix CVE-2021-33477.
CVE: CVE-2021-33477
Upstream-Status: Backport [http://cvs.schmorp.de/rxvt-unicode/src/command.C?r1=1.582&r2=1.583]
Signed-off-by: Kai Kang <kai.kang@windriver.com>
---
src/command.C | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/command.C b/src/command.C
index 7b79f51..2f7de60 100644
--- a/src/command.C
+++ b/src/command.C
@@ -2725,7 +2725,7 @@ rxvt_term::process_escape_seq ()
/* kidnapped escape sequence: Should be 8.3.48 */
case C1_ESA: /* ESC G */
// used by original rxvt for rob nations own graphics mode
- if (cmd_getc () == 'Q')
+ if (cmd_getc () == 'Q' && option (Opt_insecure))
tt_printf ("\033G0\012"); /* query graphics - no graphics */
break;
@@ -2944,7 +2944,7 @@ rxvt_term::process_csi_seq ()
break;
case CSI_CUB: /* 8.3.18: (1) CURSOR LEFT */
- case CSI_HPB: /* 8.3.59: (1) CHARACTER POSITION BACKWARD */
+ case CSI_HPB: /* 8.3.59: (1) CHARACTER POSITION BACKWARD */
#ifdef ISO6429
arg[0] = -arg[0];
#else /* emulate common DEC VTs */

4
meta/recipes-sato/rxvt-unicode/rxvt-unicode_9.22.bb
View File

@@ -4,7 +4,9 @@ LICENSE = "GPLv3"
LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504 \
file://src/main.C;beginline=1;endline=31;md5=d3600d7ee1062667fcd1193fbe6485f6"
SRC_URI += "file://0001-libev-remove-deprecated-throw-specification.patch"
SRC_URI += "file://0001-libev-remove-deprecated-throw-specification.patch \
file://rxvt-unicode-fix-CVE-2021-33477.patch \
"
SRC_URI[sha256sum] = "e94628e9bcfa0adb1115d83649f898d6edb4baced44f5d5b769c2eeb8b95addd"