mirror of
https://git.yoctoproject.org/poky
synced 2026-02-12 19:53:03 +01:00
4c33a6acfb
Pick commit from 2.13 branch as 2.9 branch is unmaintained now. (From OE-Core rev: 7777cd6b28988a0981b990d9da9d448dcdfe7b8b) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
40 lines
1.2 KiB
Diff
40 lines
1.2 KiB
Diff
From 384cc7c182fc00c6d5e2ab4b5e3671b2e3f93c84 Mon Sep 17 00:00:00 2001
|
|
From: Nick Wellnhofer <wellnhofer@aevum.de>
|
|
Date: Sun, 6 Apr 2025 12:41:11 +0200
|
|
Subject: [PATCH] [CVE-2025-32415] schemas: Fix heap buffer overflow in
|
|
xmlSchemaIDCFillNodeTables
|
|
|
|
Don't use local variable which could contain a stale value.
|
|
|
|
Fixes #890.
|
|
|
|
CVE: CVE-2025-32415
|
|
Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/384cc7c182fc00c6d5e2ab4b5e3671b2e3f93c84]
|
|
Signed-off-by: Peter Marko <peter.marko@siemens.com>
|
|
---
|
|
xmlschemas.c | 4 ++--
|
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/xmlschemas.c b/xmlschemas.c
|
|
index 28b14bd4..428e3c82 100644
|
|
--- a/xmlschemas.c
|
|
+++ b/xmlschemas.c
|
|
@@ -23607,7 +23607,7 @@ xmlSchemaIDCFillNodeTables(xmlSchemaValidCtxtPtr vctxt,
|
|
j++;
|
|
} while (j < nbDupls);
|
|
}
|
|
- if (nbNodeTable) {
|
|
+ if (bind->nbNodes) {
|
|
j = 0;
|
|
do {
|
|
if (nbFields == 1) {
|
|
@@ -23657,7 +23657,7 @@ xmlSchemaIDCFillNodeTables(xmlSchemaValidCtxtPtr vctxt,
|
|
|
|
next_node_table_entry:
|
|
j++;
|
|
- } while (j < nbNodeTable);
|
|
+ } while (j < bind->nbNodes);
|
|
}
|
|
/*
|
|
* If everything is fine, then add the IDC target-node to
|