mirror of
https://git.yoctoproject.org/poky
synced 2026-03-28 19:02:22 +01:00
CVE-2022-0135 concerns out-of-bounds writes in read_transfer_data(). CVE-2022-0175 concerns using malloc() instead of calloc(). We cherry-pick from master. (From OE-Core rev: 225f8b28ff0b3357382f517f39eb315b4bac9138) Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 91f7511df79c5c1f93add9f2827a5a266453614e) Modify -0175 patch to apply to hardknott branch. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>